!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/cgi-bin/mail/   drwxr-xr-x
Free 3.96 GB of 27.03 GB (14.64%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     options.pl (5.71 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/perl
###########################################################################
# options.pl - Figure out what the user wants and let them do it
###########################################################################
require "common.pl";

if ($remip ne $fromip) {
&diffip;

} elsif ($button eq $delacct_button) {
###########################################################################
# User wants to delete account
###########################################################################
&print_header;
print $query->startform($method, $delete_pl, $CGI::URL_ENCODED);
print $query->hidden('SESSIONID', $sid);
print $del_acct_ask_info;
print $query->submit('BUTTON', $yes_button);
print $query->submit('BUTTON', $no_button);
print $query->endform;

} elsif ($button eq $chpass_button) {
###########################################################################
# User wants to change password, display form
###########################################################################
&print_header;
print $query->startform($method, $changepass_pl, $CGI::URL_ENCODED);
print $query->hidden('SESSIONID', $sid);
print "<TABLE BORDER=0><TR><TD>";
print $curpass_input;
print "</TD><TD>";
print $query->password_field('CURPASS', '', 24);
print "</TD></TR><TR><TD>";
print $newpass_input;
print "</TD><TD>";
print $query->password_field('PASSWORD', '', 24);
print "</TD></TR><TR><TD>";
print $verify_input;
print "</TD><TD>";
print $query->password_field('PASS2', '', 24);
print "</TD></TR><TR><TD>";
print $newhint_input;
print "</TD><TD>";
print $query->textfield('HINT', '', 24);
print "</TD></TR></TABLE>";
print $query->submit('BUTTON', $change_button);
print $query->submit('BUTTON', $cancel_button);
print $query->reset($reset_button);
print $query->endform;

} elsif ($button eq $sendmsg_button) {
###########################################################################
# User wants to send a message, display form
###########################################################################
&print_header;
&send_form;

} elsif ($button eq $chacct_button) {
###########################################################################
# User wants to change account information, display form
###########################################################################
&print_header;
@username = split(/ /, $sessionid);
$username = $username[0];
dbmopen(%mail, $maildb, 0600) || die "Error opening db $maildb";
$email = $mail{$username};
dbmclose(%mail);
dbmopen(%server, $serverdb, 0600) || die "Error opening db $serverdb";
$popserver = $server{$username};
dbmclose(%server);
dbmopen(%pop, $popdb, 0600) || die "Error opening db $popdb";
$popname = $pop{$username};
dbmclose(%pop);
dbmopen(%header, $headerdb, 0600) || die "Error opening db $headerdb";
$head = $header{$username};
dbmclose(%header);
dbmopen(%sig, $sigdb, 0600) || die "Error opening db $sigdb";
$signature = $sig{$username};
dbmclose(%sig);
dbmopen(%def, $defaultdb, 0600) || die "Error opening db $defaultdb";
$default = $def{$username};
dbmclose(%def);

print $query->startform($method, $changeacct_pl, $CGI::URL_ENCODED);
print $query->hidden('SESSIONID', $sid);
print "<TABLE BORDER=0><TR><TD>";
print $username_input;
print "</TD><TD>";
print $username;
print "</TD>";
if ($feature_pop == 0){
  print "<TD>";
  print $email_input;
  print "</TD></TR><TR><TD>";
  print $query->textfield('EMAIL', $email, 24);
  print "</TD></TR><TR><TD>";
  print $popserv_input;
  print "</TD><TD>";
  print $query->textfield('POPSERVER', $popserver, 24);
  print "</TD></TR><TR><TD>";
  print $popname_input;
  print "</TD><TD>";
  print $query->textfield('POPUSERNAME', $popname, 24);
  print "</TD></TR><TR><TD>";
  print $default_input;
  print "</TD><TD>";
  print $query->popup_menu('DEFAULT', [$username."@".$domain, $email], $default);
  print "</TD></TR>";
}
print "<TR><TD>";
print $header_input;
print "</TD><TD>";
%headinfo = ('full'=>$fullhead_info, 'short'=>$shorthead_info);
print $query->popup_menu('FULLHEADER', ['full', 'short'], $head, \%headinfo);
print "</TD></TR><TR><TD>";
print $button_input;
print "</TD><TD>";
%btninfo = ('top'=>$topb_info, 'bottom'=>$botb_info, 'both'=>$both_info);
print $query->popup_menu('BUTNS', ['top','bottom','both'], $btns, \%btninfo);
print "</TD></TR></TABLE>";
print $sig_input;
print $query->br;
print $query->textarea('SIGNATURE', $signature, 5, 80);
print $query->br;
print $query->submit('BUTTON', $change_button);
print $query->submit('BUTTON', $cancel_button);
print $query->reset($reset_button);
print $query->endform;

} elsif ($button eq $logout_button) {
###########################################################################
# User wants to logout
###########################################################################
&print_header;
dbmopen(%sess, $sessiondb, 0600) || die "Error opening db $sessiondb";
delete ($sess{$sid});
dbmclose(%sess);
print $thank_you_info;

} elsif ($button eq $sendto_button) {
###########################################################################
# Send to a certain user
###########################################################################
&print_header;
if ($sessionid) {
  @username = split(/ /, $sessionid);
  $username = $username[0];
} else {
  $sessionid = "NONE";
  $username = "";
}
$to =~ s/\(.*\)//g;
$to =~ s/<|>|\&lt\;|\&gt\;//g;
&send_form;
}

###########################################################################
# Done
###########################################################################
unless ($button eq $logout_button) {
&update_sess;
}
&print_footer;

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.004 ]--