!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/dwmail/includes/   drwxr-xr-x
Free 3.96 GB of 27.03 GB (14.64%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     zip.inc.php (3.97 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/*
############################################################################
# DWmail
#      - version 4.0
#      - Copyright (c) 2003-2006 Dominion Web Design
#      - http://www.dominion-web.com/products/dwmail/
############################################################################
#
# The contents of this file are subject to the DWmail License version
# 2.2 ('License'). You may not use this file except in compliance with
# the License. You may obtain a copy of the License at
# http://www.dominion-web.com/products/dwmail/license.php

# Software distributed under the License is distributed on an "AS IS" basis,
# without warranty of any kind, either express or implied.
#
# This code is Copyright (c) 2003-2006 Dominion Web Design.
# All rights reserved.
#
# This software may not be redistributed outside the terms of the
# license agreement.
#
############################################################################
*/

// Zip file creation utilities
// Based on infomation from http://www.zend.com/zend/spotlight/creating-zip-files1.php

// Requires Zlib

class ZipCreate {
    var
$dataarry = array();
    var
$maindir = array();
    var
$eofdir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
    var
$offset = 0;

    function
TimeConvert($unixtime = 0) {
        if (
$unixtime == 0) {
            
$timearry = getdate();
        }
        else {
            
$timearry = getdate($unixtime);
        }
        if (
$timearry['year'] < 1980) {
            
$timearry['year'] = 1980;
            
$timearry['month'] = 1;
            
$timearry['mday'] = 1;
            
$timearry['hours'] = 0;
            
$timearry['minutes'] = 0;
            
$timearry['seconds'] = 0;
        }

        
$formattedtime = (($timearry['year'] - 1980) << 25) | ($timearry['month'] << 21) | ($timearry['mday'] << 16) | ($timearry['hours'] << 11) | ($timearry['minutes'] << 5) | ($timearry['seconds'] >> 1);

        return
$formattedtime;
    }

    function
AddFile($filedata, $filename, $time = 0) {
        
$filename = str_replace('\\', '/', $filename);
        
// Convert decimal to hexidecimal
        
$dtime = dechex($this->TimeConvert($time));
        
$hexdtime = '\x' . $dtime[6] . $dtime[7] . '\x' . $dtime[4] . $dtime[5] . '\x' . $dtime[2] . $dtime[3] . '\x' . $dtime[0] . $dtime[1];
        eval(
'$hexdtime = "' . $hexdtime . '";');

        
$crc = crc32($filedata);
        
$origlen = strlen($filedata);
        
$filedata = gzcompress($filedata);
        
$filedata = substr(substr($filedata, 0, strlen($filedata) - 4), 2);
        
$compressedlen = strlen($filedata);

        
$filedetails = "\x50\x4b\x03\x04\x14\x00\x00\x00\x08\x00";
        
$filedetails .= $hexdtime;

        
$filedetails .= pack('V', $crc);
        
$filedetails .= pack('V', $compressedlen);
        
$filedetails .= pack('V', $origlen);
        
$filedetails .= pack('v', strlen($filename));
        
$filedetails .= pack('v', 0);
        
$filedetails .= $filename;

        
$filedetails .= $filedata;
        unset (
$filedata);

        
// This is a data descriptor code segment but appears to problems on some systems and zip decompressors so commented out
        //$filedetails .= pack('V', $crc);
        //$filedetails .= pack('V', $compressedlen);
        //$filedetails .= pack('V', $origlen);

        
$this->dataarry[] = $filedetails;

        
$centralrec = "\x50\x4b\x01\x02\x00\x00\x14\x00\x00\x00\x08\x00";
        
$centralrec .= $hexdtime;
        
$centralrec .= pack('V', $crc);
        
$centralrec .= pack('V', $compressedlen);
        
$centralrec .= pack('V', $origlen);
        
$centralrec .= pack('v', strlen($filename));
        
$centralrec .= pack('v', 0);
        
$centralrec .= pack('v', 0);
        
$centralrec .= pack('v', 0);
        
$centralrec .= pack('v', 0);
        
$centralrec .= pack('V', 32);

        
$centralrec .= pack('V', $this->offset);
        
$this->offset += strlen($filedetails);

        
$centralrec .= $filename;

        
$this->maindir[] = $centralrec;
    }

    function
GenerateZip() {
        
$data = implode('', $this->dataarry);
        
$rootdir = implode('', $this->maindir);

        
$output = $data . $rootdir . $this->eofdir .
            
pack('v', sizeof($this->maindir)) .
            
pack('v', sizeof($this->maindir)) .
            
pack('V', strlen($rootdir)) .
            
pack('V', strlen($data)) .
            
"\x00\x00";

        return
$output;
    }
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.004 ]--