!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/dwmail/   drwxr-xr-x
Free 4.04 GB of 27.03 GB (14.93%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     markmessage.php (9.34 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/*
############################################################################
# DWmail
#      - version 4.0
#      - Copyright (c) 2003-2006 Dominion Web Design
#      - http://www.dominion-web.com/products/dwmail/
############################################################################
#
# The contents of this file are subject to the DWmail License version
# 2.2 ('License'). You may not use this file except in compliance with
# the License. You may obtain a copy of the License at
# http://www.dominion-web.com/products/dwmail/license.php

# Software distributed under the License is distributed on an "AS IS" basis,
# without warranty of any kind, either express or implied.
#
# This code is Copyright (c) 2003-2006 Dominion Web Design.
# All rights reserved.
#
# This software may not be redistributed outside the terms of the
# license agreement.
#
############################################################################
*/
require ("./includes/init.inc.php");
require (
"./includes/global.inc.php");
require (
"./includes/imap.inc.php");
require (
"./includes/functions.inc.php");
require (
"./includes/config.inc.php");

$MainSettings = new GlobalInit();
$TransIDEnabled = $MainSettings->INIGet('session.use_trans_sid');

session_cache_limiter($DefaultSessionCache);
session_start();

if (!
$_SESSION['DefaultLang']) {
    
$_SESSION['DefaultLang'] = $DefaultLang;
}
require (
"./lang/" . strip_tags(str_replace("..", "", trim($_SESSION['DefaultLang']))) . "/global.inc.php");
@
setlocale(LC_TIME, $AvailLangs[$_SESSION['DefaultLang']]['locale']);

require (
"./includes/options.inc.php");

$_SESSION['tpl'] = strip_tags(trim($_SESSION['tpl']));

$getFile = new fileProperties($_SESSION['tpl']);
$PageHeader = $getFile->fileRead('header');
$PageFooter = $getFile->fileRead('footer');
$PageCopyright = $getFile->fileRead('copyright');
$PageMenu = $getFile->fileRead('menu');

$PageMenu = str_replace("[session]", $MainSettings->SessAppend_noecho($TransIDEnabled, 1), $PageMenu);
$PageMenu = str_replace("[session_append]", $MainSettings->SessAppend_noecho($TransIDEnabled, 0), $PageMenu);

$PageMenu = str_replace("[emailaddress]", $_SESSION['currentemailaddress'], $PageMenu);

$PageHeader = str_replace("[mainmenu]", $PageMenu, $PageHeader);
$PageHeader = str_replace("[header_refresh]", "", $PageHeader);
$PageHeader = str_replace("[charset]", $_SESSION['DefaultCharSet'], $PageHeader);
$PageHeader = str_replace("[lang]", $_SESSION['DefaultLang'], $PageHeader);
$PageHeader = str_replace("[langdir]", $AvailLangs[$_SESSION['DefaultLang']]['dir'], $PageHeader);
$PageHeader = str_replace("[pagetitle]", " - " . $lang['SMove']['Title'], $PageHeader);
$PageFooter = str_replace("[mainmenu]", $PageMenu, $PageFooter);
$PageFooter = str_replace("[copyright]", $PageCopyright, $PageFooter);
$PageFolders = str_replace("[session]", $MainSettings->SessAppend_noecho($TransIDEnabled, 1), $PageFolders);

if (
$AllowExternal == 1 && $UseDatabase == 1) {
    
$PageHeader = str_replace("[ifexternal]", "", $PageHeader);
    
$PageHeader = str_replace("[/ifexternal]", "", $PageHeader);
    
$PageFooter = str_replace("[ifexternal]", "", $PageFooter);
    
$PageFooter = str_replace("[/ifexternal]", "", $PageFooter);
}
else {
    
$PageHeader = preg_replace("/(\[)(ifexternal)(])(\r\n)*(.*)(\[\/ifexternal\])/siU", "", $PageHeader);
    
$PageFooter = preg_replace("/(\[)(ifexternal)(])(\r\n)*(.*)(\[\/ifexternal\])/siU", "", $PageFooter);
}

$genericerror = $getFile->fileRead('generic_message');
$genericerror = str_replace ('[pagetitle]', $lang['SErrors']['Title'], $genericerror);

$error_session = str_replace ('[pagemessage]', $lang['SErrors']['Session'], $genericerror);
CheckValidSession($_SESSION, $PageFooter, $error_session, $PageHeader, $lang);

$IMAPConnection = new WM_IMAPConnection($_SESSION);
$securitycheck = $IMAPConnection->WM_IMAPCheckSecurity();

$error_ipfailuresession = str_replace ('[pagemessage]', $lang['SErrors']['IP'], $genericerror);
CheckSessionSecurity($securitycheck, $PageFooter, $error_ipfailure, $PageHeader, $lang);

$mailbox = $IMAPConnection->WM_IMAPConnect();

checkmailbox_active($mailbox, $IMAPConnection, $PageHeader, $_SESSION['tpl'], $PageFooter, $getFile, $lang, $genericerror);

$PageGenericMessage = $getFile->fileRead('generic_message');
$PageGenericMessage = str_replace("[pagetitle]", $lang['SMove']['Title'], $PageGenericMessage);

if (
$_SESSION['servertype'] == "imap" || $_SESSION['servertype'] == "imapssl") {
    if (
$_REQUEST['selection'] == "") {
        
$returnmessage = $lang['SMove']['MarkNoMessage'];
    }
    else {

        
$action = $_REQUEST['m'];

        if (
is_array($_REQUEST['selection'])) {
            while(list(
$key, $value) = each($_REQUEST['selection'])) {
                if (
strtolower($action) == 'r') {
                    
$SetRead = $IMAPConnection->WM_IMAPSetFlag("\\Seen", $key);
                }
                elseif (
strtolower($action) == 'f') {
                    
$SetRead = $IMAPConnection->WM_IMAPSetFlag("\\Flagged", $key);
                }
                elseif (
strtolower($action) == 'cf') {
                    
$IMAPConnection->WM_IMAPGetHeader($key);
                    
$IMAPConnection->WM_IMAPClearFlag($key);
                    if ((
$IMAPConnection->_msgheader->Recent <> "N") && ($IMAPConnection->_msgheader->Unseen <> "U")) {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Seen", $key);
                    }
                    if (
$IMAPConnection->_msgheader->Answered == "A") {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Answered", $key);
                    }
                    if (
$IMAPConnection->_msgheader->Deleted == "D") {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Deleted", $key);
                    }
                    if (
$IMAPConnection->_msgheader->Draft == "X") {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Draft", $key);
                    }
                }
                elseif (
strtolower($action) == 'u') {
                    
$IMAPConnection->WM_IMAPGetHeader($key);
                    
$IMAPConnection->WM_IMAPClearFlag($key);
                    if (
$IMAPConnection->_msgheader->Answered == "A") {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Answered", $key);
                    }
                    if (
$IMAPConnection->_msgheader->Deleted == "D") {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Deleted", $key);
                    }
                    if (
$IMAPConnection->_msgheader->Draft == "X") {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Draft", $key);
                    }
                    if (
$IMAPConnection->_msgheader->Flagged == "F") {
                        
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Flagged", $key);
                    }
                }
            }
        }

        else {
            if (
strtolower($action) == 'r') {
                
$SetRead = $IMAPConnection->WM_IMAPSetFlag("\\Seen", $_REQUEST['selection']);
            }
            elseif (
strtolower($action) == 'f') {
                
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Flagged", $_REQUEST['selection']);
            }
            elseif (
strtolower($action) == 'cf') {
                
$IMAPConnection->WM_IMAPGetHeader($_REQUEST['selection']);
                
$IMAPConnection->WM_IMAPClearFlag($_REQUEST['selection']);
                if ((
$IMAPConnection->_msgheader->Recent <> "N") && ($IMAPConnection->_msgheader->Unseen <> "U")) {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Seen", $_REQUEST['selection']);
                }

                if (
$IMAPConnection->_msgheader->Answered == "A") {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Answered", $_REQUEST['selection']);
                }
                if (
$IMAPConnection->_msgheader->Deleted == "D") {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Deleted", $_REQUEST['selection']);
                }
                if (
$IMAPConnection->_msgheader->Draft == "X") {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Draft", $_REQUEST['selection']);
                }
            }
            elseif (
strtolower($action) == 'u') {
                
$IMAPConnection->WM_IMAPGetHeader($_REQUEST['selection']);
                
$IMAPConnection->WM_IMAPClearFlag($_REQUEST['selection']);
                if (
$IMAPConnection->_msgheader->Answered == "A") {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Answered", $_REQUEST['selection']);
                }
                if (
$IMAPConnection->_msgheader->Deleted == "D") {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Deleted", $_REQUEST['selection']);
                }
                if (
$IMAPConnection->_msgheader->Draft == "X") {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Draft", $_REQUEST['selection']);
                }
                if (
$IMAPConnection->_msgheader->Flagged == "F") {
                    
$SetFlag = $IMAPConnection->WM_IMAPSetFlag("\\Flagged", $_REQUEST['selection']);
                }
            }
        }
    }
}
else {
    
$returnmessage = $lang['SErrors']['IMAPRequired'];
}

if (
$_GET['xml'] == 1) {
    
header ("Content-type: text/xml; charset=UTF-8");
    echo (
"<?xml version=\"1.0\" encoding=\"UTF-8\" ?>");
    echo (
"<DWmail>");
    if (
$returnmessage) {
        echo (
"    <success>0</success>");
    }
    else {
        echo (
"    <success>1</success>");
    }
    echo (
"</DWmail>");
    
$IMAPConnection->WM_IMAPClose();
}
else {
    if (
$returnmessage) {
        include (
"./includes/folderpane.inc.php");
        
$PageHeader = str_replace ("[folders]", $PageFolderPane, $PageHeader);
        
$PageHeader = LangReplace('Generic', $PageHeader, $lang);
        
$PageHeader = LangReplace('SFolderPane', $PageHeader, $lang);
        
$PageFooter = LangReplace('Generic', $PageFooter, $lang);
        
$PageFooter = LangReplace('SFolderPane', $PageFooter, $lang);

        
header ("Content-Type: text/html; charset=" . $_SESSION['DefaultCharSet']);
        echo
$PageHeader;

        
$PageGenericMessage = str_replace("[pagemessage]", $returnmessage, $PageGenericMessage);
        echo
$PageGenericMessage;
        
$IMAPConnection->WM_IMAPClose();
        echo
$PageFooter;
    }
    else {
        
$IMAPConnection->WM_IMAPClose();
        
header("Location: ./mailbox.php?f=" . $_SESSION['folder'] . "&" . strip_tags(SID));
        exit;
    }
}

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0037 ]--