· 7 years ago · Aug 07, 2018, 12:22 PM
1https://www.newportbeachortho.com/
2
3# Exploit Title:wp-content themes ypo-theme Local File Disclosure Vulnerability
4
5<?php
6/**
7 * The base configurations of the WordPress.
8 *
9 * This file has the following configurations: MySQL settings, Table Prefix,
10 * Secret Keys, WordPress Language, and ABSPATH. You can find more information
11 * by visiting {@link http://codex.wordpress.org/Editing_wp-config.php Editing
12 * wp-config.php} Codex page. You can get the MySQL settings from your web host.
13 *
14 * This file is used by the wp-config.php creation script during the
15 * installation. You don't have to use the web site, you can just copy this file
16 * to "wp-config.php" and fill in the values.
17 *
18 * @package WordPress
19 */
20
21// ** MySQL settings - You can get this info from your web host ** //
22/** The name of the database for WordPress */
23define('DB_NAME', 'newportb_cmsdb');
24
25/** MySQL database username */
26define('DB_USER', 'newportb_cmsuser');
27
28/** MySQL database password */
29define('DB_PASSWORD', 'NttpDEDznf6N');
30
31/** MySQL hostname */
32define('DB_HOST', 'localhost');
33
34/** Database Charset to use in creating database tables. */
35define('DB_CHARSET', 'utf8');
36
37/** The Database Collate type. Don't change this if in doubt. */
38define('DB_COLLATE', '');
39
40/**#@+
41 * Authentication Unique Keys and Salts.
42 *
43 * Change these to different unique phrases!
44 * You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
45 * You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
46 *
47 * @since 2.6.0
48 */
49define('AUTH_KEY', '3ycOdL|}s1x7F+LR^M}.;LkX{ho4alhF$Cd||f=LFGjoBywhfg;+QbL%!I&RJ!OL');
50define('SECURE_AUTH_KEY', 'vMz^dCr#PQsC*UViu}~#cNI;.oJ0H).th@7|/30<+^rfGgZHEV~W@%_wK1`xu0;-');
51define('LOGGED_IN_KEY', '%#gP;ii6 -uvYQzFiS|a-%Aw}bffFdc;F?[-6!IR2Z<l4RCV^hag|N-X#p!yZ@S,');
52define('NONCE_KEY', ':?l?iL>s-5h`^uI?u$cv-R=w;]l]/]T{L(bh{Cw~/lUe+ifT(ONc]ZVD;y+lsrW0');
53define('AUTH_SALT', '{*Hpgb7EkHMBgyqYj5A4nDWFcInnJ^-folRl}>/,cDGu6sn/jT>4[qu4&5 zT5TY');
54define('SECURE_AUTH_SALT', 'O `.aN#?w9B{+Q|IxG;#|>jgtb!%t)_y`Nl?{9lM[`~hweD/hnv?-wRlc$)4 ttq');
55define('LOGGED_IN_SALT', 'ACIQ-A0F%{p</sCX-`+-DlYOy$^v-CvJI,Lz#3YKO?#)guTa:k}GXh:ceym|b{=-');
56define('NONCE_SALT', 'dRBo]M[nAb3)q>Ce],fgB{QV!&y7RrGE_LrV=([?B].nV5bg5@i50Jc<K48G4ylG');
57
58/**#@-*/
59
60/**
61 * WordPress Database Table prefix.
62 *
63 * You can have multiple installations in one database if you give each a unique
64 * prefix. Only numbers, letters, and underscores please!
65 */
66$table_prefix = 'ncm_';
67
68/**
69 * WordPress Localized Language, defaults to English.
70 *
71 * Change this to localize WordPress. A corresponding MO file for the chosen
72 * language must be installed to wp-content/languages. For example, install
73 * de_DE.mo to wp-content/languages and set WPLANG to 'de_DE' to enable German
74 * language support.
75 */
76define('WPLANG', '');
77
78/**
79 * For developers: WordPress debugging mode.
80 *
81 * Change this to true to enable the display of notices during development.
82 * It is strongly recommended that plugin and theme developers use WP_DEBUG
83 * in their development environments.
84 */
85define('WP_DEBUG', false);
86
87define( 'UPLOADS', 'wp-content/themes/ypo-theme/'.'media-files' );
88
89/* That's all, stop editing! Happy blogging. */
90
91/** Absolute path to the WordPress directory. */
92if ( !defined('ABSPATH') )
93 define('ABSPATH', dirname(__FILE__) . '/');
94
95/** Sets up WordPress vars and included files. */
96require_once(ABSPATH . 'wp-settings.php');