From c494a4942b29d868b04a977a612c41a1ccceb1f6 Mon Sep 17 00:00:00 2001
From: Nathanne Isip <nathanneisip@gmail.com>
Date: Thu, 14 Nov 2024 06:13:25 +0800
Subject: [PATCH] Inclusion of user-agent and client address on back-end shell
 argument.

---
 api/index.php | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/api/index.php b/api/index.php
index a587de0..7175621 100644
--- a/api/index.php
+++ b/api/index.php
@@ -321,7 +321,13 @@
                 return;
             }
 
-            array_push($args, $username, $password);
+            array_push(
+                $args,
+                $username,
+                $password,
+                base64_encode($_SERVER['HTTP_USER_AGENT']),
+                $_SERVER['REMOTE_ADDR']
+            );
             break;
 
         case "auth_login_email":
@@ -346,7 +352,13 @@
                 return;
             }
 
-            array_push($args, $email, $password);
+            array_push(
+                $args,
+                $email,
+                $password,
+                base64_encode($_SERVER['HTTP_USER_AGENT']),
+                $_SERVER['REMOTE_ADDR']
+            );
             break;
 
         case "auth_fetch_all":