!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/mina/mina/admin/   drwxr-xr-x
Free 3.9 GB of 27.03 GB (14.43%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     functions.inc.php3 (7.4 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<?
/* generates a session id */
function SessionID($length)
{

  
$Pool = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
  
$Pool .= "abcdefghijklmnopqrstuvwxyz";
  
  for(
$index = 0; $index < $length; $index++)
    {
        
$sid .= substr($Pool,
                   (
rand()%(strlen($Pool))), 1);
    }
  
  return(
$sid);
}

/* ************************* */
/* print normal user splash gui */
/* ************************* */

function genPullDown($tableName, $current)
{
  require(
"include/config.inc.php3");
  require(
"$mysqlCall");

  
$query = "SELECT * FROM $tableName order by ID desc";

  
$mysql_result = mysql_query($query, $mysql_link);

      print(
"<select name=itemID>");

      while((
$row2 = mysql_fetch_row($mysql_result)))
    {
      
$item_ID =      $row2[0];
      
$details =      $row2[1];
      
      if(
$item_ID==$current)
        {
          print(
"<option value=$item_ID selected>$details");
          
$no=1;
        }
      else
        {
         print(
"<option value=$item_ID>$details");  
        }
    }

      if(isset(
$no))
    {
      print(
"<option value=0>None");
    }
      else
    {
      print(
"<option value=0 selected>None");
    }
      print(
"</select>");

}



function
getUserSUId($superSession)
{
  require(
"include/config.inc.php3");
  require(
"$mysqlCall");
  
$query = "SELECT * FROM $superSessionT  where ID=\"$superSession\"";
  
  
$mysql_result=mysql_query($query) or die(mysql_error());
  
  if(
$row = mysql_fetch_row($mysql_result))
    {
      
$userId = $row[2];
    }
  return
$userId;
}

function
getUserId($session)
{
  require(
"include/config.inc.php3");
  require(
"$mysqlCall");

  
$query = "SELECT * FROM $normalSessionT  where ID=\"$session\"";
  
  
$mysql_result=mysql_query($query) or die(mysql_error());
  
  if(
$row = mysql_fetch_row($mysql_result))
    {
      
$userId = $row[2];
     
/*   print("In  getUserId = $userId"); */
      
return $userId;
    }
  else
    {
      print(
"Error with getUserId(session not found) = $session<br>");
    }  
}


function
getUserInfo($userId)
{

  require(
"include/config.inc.php3");
  require(
"$mysqlCall");
  
$query2 = "SELECT * FROM $users  where ID=\"$userId\"";

  
$mysql_result2=mysql_query($query2) or die(mysql_error());
  
  if(
$row = mysql_fetch_row($mysql_result2))
    {
      
$userInfo[ID] =               $row[0];
      
$userInfo[user] =             $row[1];
      
$userInfo[pass] =             $row[2];
      
$userInfo[SuperUser] =        $row[3];
      
$userInfo[email] =            $row[4];
      
$userInfo[notify] =           $row[5];
      
$userInfo[active] =           $row[6];
      
$userInfo[manageUsers] =      $row[7];
      
$userInfo[addNews] =        $row[8];
      
$userInfo[manageNews] =       $row[9];
      
$userInfo[manageNewsSpool] =  $row[10];
      
$userInfo[manageTopics] =       $row[11];
      
$userInfo[manageImages] =  $row[12];


    }
  else
    {
      print(
"something wrong with getUserInfo, wrong user id ???");
    }

  return
$userInfo;
}


function
printNormalGUI($mode, $user, $fetch_email, $session, $fetch_ID, $config)
{
  require(
"$config");
  require(
"include/userGui.inc.php3");
  
  print(
$userWelcome);
  
  require(
"include/guiBase.inc.php3");
}

/* ************************* */
/* print super user gui */
/* ************************* */
function printSuperGUI($mode, $user, $fetch_email, $superSession, $fetch_ID, $config)
{

  require(
"$config");
  require(
"include/rootGui.inc.php3");

  print(
$suWelcome);

  include(
"include/guiBase.inc.php3");
}



function
countRows($dbtable)
{
  require(
"include/config.inc.php3");

  
$result1 = mysql_query( "SELECT Count(*) as total FROM $dbtable") or die(mysql_error());
  
$row=mysql_fetch_Array($result1);
  
$total=$row[total];
  return
$total;

}

function
navGen($seg, $dbtable, $ref)
{
  require(
"include/config.inc.php3");
  
$rows=countRows($dbtable);
  
$whereAmI= $itemToPrint * ($seg+1);

  if(
$newsListing==0)
    {
      return;
    }

  else if(
$rows <= $itemToPrint)
    {
      return;
    }
  
  else if(((
$rows > $seg) && ($seg == "")) || (($rows > $seg) && ($seg == 0)))
    {
      print(
"<table border=0 cellspacing=0 cellpadding=5 width=70%><tr><td align=right bgcolor=$table_colour2><a href=\"$ref&seg=1\">Next</a></td></tr></table>");

  
    }

  else if(
$rows <= $whereAmI)
    {
      
$backwards = $seg - 1;

      print(
"<table border=0 cellspacing=0 cellpadding=5 width=70%><tr><td align=left bgcolor=$table_colour2><a href=\"$ref&seg=$backwards\">Back</a></td></tr></table>");

      
    }
  else
    {
      
$forwards = $seg + 1;
      
$backwards = $seg - 1;

      print(
"<table cellpadding=5 width=70% border=0 cellspacing=0><tr><td align=left bgcolor=$table_colour2><a href=\"$ref&seg=$backwards\">Back</a></td><td align=right bgcolor=$table_colour2> <a href=\"$ref&seg=$forwards \">Next</a></td></tr></table>");
    }


print(
"<br>");


}


function
sqlQuery($seg, $dbtable)
{
  require(
"include/config.inc.php3");

  
$rows=countRows($dbtable);
  
$whereAmI= $itemToPrint * $seg;

  if(
$newsListing==0)
    {

      
$query = "SELECT * FROM $dbtable order by ID desc ";
      return
$query;
    }

  else
    {
      if(
$rows <= $itemToPrint)
    {
      
$query = "SELECT * FROM $dbtable order by ID desc";
      return
$query;
    }
      
      if(
$row > $whereAmI);
      {
    
$lower = $seg * $itemToPrint  ;
    
    
$query = "SELECT * FROM $dbtable order by ID desc LIMIT $whereAmI,  $itemToPrint";

    return
$query;  
      }
    }
}




function
printLoginGUI($config)
{
  require(
"$config");
  require(
"$header");
  print(
"</td><td bgcolor=#ffffff>");
  print(
"\n<br> <form method=\"post\" action=\"index.php3?mode=checkpasswd\">");
  print(
"<table ><tr><td>");
  print(
"User: </td>");
  print(
"<td><input type=text name='user'></td></tr>");
  print(
"<tr><td>");
  print(
"Password: </td>");
  print(
"<td><input type=password name='pass'></td></tr>");
  print(
"<tr><td colspan=2 align=right><input type=submit value=Login></td></tr></table>");

  include(
"include/guiBase.inc.php3");

}



function
checkSuperSession($superSession, $REMOTE_ADDR)
{
  
  require(
"include/config.inc.php3");

  require(
"$mysqlCall");

  
/* we have a session, so check it */
  
$Query = "SELECT * ";
  
$Query .= "FROM $superSessionT ";
  
$Query .= "WHERE ID='$superSession' ";
  
  
$mysql_result = mysql_query($Query, $mysql_link);
  
  if(
mysql_numrows($mysql_result))
    {
    if(
$row = mysql_fetch_row($mysql_result))
        {    
      
$fetch_ip =        $row[3];
      
      if(
$fetch_ip == $REMOTE_ADDR)
        {
          
          
/*  session exis\ts, update last action */
          
$Query = "UPDATE superSession";
          
$Query .= "SET LastAction = now() ";
          
$Query .= "WHERE ID='$superSession' ";
          
mysql_query($Query, $mysql_link);
          return
1;
          
        }
    }
    }
  
}

function
checkNormalSession($session)
{
  
  require(
"include/config.inc.php3");


  require(
"$mysqlCall");

  
$Query = "SELECT * ";
  
$Query .= "FROM $normalSessionT ";
  
$Query .= "WHERE ID='$session' ";
  
  
$mysql_result = mysql_query($Query, $mysql_link);
  
  if(
mysql_numrows($mysql_result))
    {
      
//session exists, update last action
      
$Query = "UPDATE session";
      
$Query .= "SET LastAction = now() ";
      
$Query .= "WHERE ID='$session' ";
      
mysql_query($Query, $mysql_link);
      return
1;
    }
  
  
}
?>











:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0037 ]--