!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/login/phpmyadmin/   drwxr-xr-x
Free 4.07 GB of 27.03 GB (15.05%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     db_qbe.php (4.44 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
* query by example the whole database
*
* @package PhpMyAdmin
*/

/**
* requirements
*/
require_once 'libraries/common.inc.php';
require_once
'libraries/DBQbe.class.php';
require_once
'libraries/bookmark.lib.php';
require_once
'libraries/sql.lib.php';

$response = PMA_Response::getInstance();

// Gets the relation settings
$cfgRelation = PMA_getRelationsParam();

$savedSearchList = array();
$savedSearch = null;
$currentSearchId = null;
if (
$cfgRelation['savedsearcheswork']) {
    include
'libraries/SavedSearches.class.php';
    
$header = $response->getHeader();
    
$scripts = $header->getScripts();
    
$scripts->addFile('db_qbe.js');

    
//Get saved search list.
    
$savedSearch = new PMA_SavedSearches($GLOBALS);
    
$savedSearch->setUsername($GLOBALS['cfg']['Server']['user'])
        ->
setDbname($_REQUEST['db']);

    if (!empty(
$_REQUEST['searchId'])) {
        
$savedSearch->setId($_REQUEST['searchId']);
    }

    
//Action field is sent.
    
if (isset($_REQUEST['action'])) {
        
$savedSearch->setSearchName($_REQUEST['searchName']);
        if (
'create' === $_REQUEST['action']) {
            
$saveResult = $savedSearch->setId(null)
                ->
setCriterias($_REQUEST)
                ->
save();
        } elseif (
'update' === $_REQUEST['action']) {
            
$saveResult = $savedSearch->setCriterias($_REQUEST)
                ->
save();
        } elseif (
'delete' === $_REQUEST['action']) {
            
$deleteResult = $savedSearch->delete();
            
//After deletion, reset search.
            
$savedSearch = new PMA_SavedSearches($GLOBALS);
            
$savedSearch->setUsername($GLOBALS['cfg']['Server']['user'])
                ->
setDbname($_REQUEST['db']);
            
$_REQUEST = array();
        } elseif (
'load' === $_REQUEST['action']) {
            if (empty(
$_REQUEST['searchId'])) {
                
//when not loading a search, reset the object.
                
$savedSearch = new PMA_SavedSearches($GLOBALS);
                
$savedSearch->setUsername($GLOBALS['cfg']['Server']['user'])
                    ->
setDbname($_REQUEST['db']);
                
$_REQUEST = array();
            } else {
                
$loadResult = $savedSearch->load();
            }
        }
        
//Else, it's an "update query"
    
}

    
$savedSearchList = $savedSearch->getList();
    
$currentSearchId = $savedSearch->getId();
}

/**
* A query has been submitted -> (maybe) execute it
*/
$message_to_display = false;
if (isset(
$_REQUEST['submit_sql']) && ! empty($sql_query)) {
    if (!
preg_match('@^SELECT@i', $sql_query)) {
        
$message_to_display = true;
    } else {
        
$goto = 'db_sql.php';

        
// Parse and analyze the query
        
include_once 'libraries/parse_analyze.inc.php';

        
PMA_executeQueryAndSendQueryResponse(
            
$analyzed_sql_results, // analyzed_sql_results
            
false, // is_gotofile
            
$_REQUEST['db'], // db
            
null, // table
            
false, // find_real_end
            
null, // sql_query_for_bookmark
            
null, // extra_data
            
null, // message_to_show
            
null, // message
            
null, // sql_data
            
$goto, // goto
            
$pmaThemeImage, // pmaThemeImage
            
null, // disp_query
            
null, // disp_message
            
null, // query_type
            
$sql_query, // sql_query
            
null, // selectedTables
            
null // complete_query
        
);
    }
}

$sub_part  = '_qbe';
require
'libraries/db_common.inc.php';
$url_query .= '&amp;goto=db_qbe.php';
$url_params['goto'] = 'db_qbe.php';

list(
    
$tables,
    
$num_tables,
    
$total_num_tables,
    
$sub_part,
    
$is_show_stats,
    
$db_is_system_schema,
    
$tooltip_truename,
    
$tooltip_aliasname,
    
$pos
) = PMA_Util::getDbInfo($db, isset($sub_part) ? $sub_part : '');

if (
$message_to_display) {
    
PMA_Message::error(__('You have to choose at least one column to display!'))
        ->
display();
}
unset(
$message_to_display);

// create new qbe search instance
$db_qbe = new PMA_DbQbe($GLOBALS['db'], $savedSearchList, $savedSearch);

$url = 'db_designer.php' . PMA_URL_getCommon(
    
array_merge(
        
$url_params,
        array(
'query' => 1)
    )
);
$response->addHTML(
    
PMA_Message::notice(
        
sprintf(
            
__('Switch to %svisual builder%s'),
            
'<a href="' . $url . '">',
            
'</a>'
        
)
    )
);

/**
* Displays the Query by example form
*/
$response->addHTML($db_qbe->getSelectionForm());

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0046 ]--