!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/phpads/admin/   drwxr-xr-x
Free 3.96 GB of 27.03 GB (14.66%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     lib-swf.inc.php (8.17 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php // $Revision: 1.3 $

/************************************************************************/
/* phpAdsNew 2                                                          */
/* ===========                                                          */
/*                                                                      */
/* Copyright (c) 2001 by the phpAdsNew developers                       */
/* http://sourceforge.net/projects/phpadsnew                            */
/*                                                                      */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License.       */
/************************************************************************/



// Define SWF tags
define ('swf_tag_identify',          chr(0x46).chr(0x57).chr(0x53));
define ('swf_tag_compressed',          chr(0x43).chr(0x57).chr(0x53));
define ('swf_tag_geturl',            chr(0x00).chr(0x83));
define ('swf_tag_null',              chr(0x00));
define ('swf_tag_actionpush',          chr(0x96));
define ('swf_tag_actiongetvariable', chr(0x1C));
define ('swf_tag_actiongeturl2',      chr(0x9A).chr(0x01));


// Define preferences
$swf_variable        = 'alink';        // The name of the ActionScript variable
$swf_default_target    = '_blank';        // If set it will replace the targets, otherwise leave empty



/*********************************************************/
/* Get the Flash version of the banner                   */
/*********************************************************/

function phpAds_SWFVersion($buffer)
{
    if (
substr($buffer, 0, 3) == swf_tag_identify ||
        
substr($buffer, 0, 3) == swf_tag_compressed)
        return
ord(substr($buffer, 3, 1));
    else
        return
false;
}



/*********************************************************/
/* Is the Flash file compressed?                         */
/*********************************************************/

function phpAds_SWFCompressed($buffer)
{
    if (
substr($buffer, 0, 3) == swf_tag_compressed)
        return
true;
    else
        return
false;
}



/*********************************************************/
/* Compress Flash file                                   */
/*********************************************************/

function phpAds_SWFCompress($buffer)
{
    if (
function_exists('gzcompress') &&
        
substr($buffer, 0, 3) == swf_tag_identify &&
        
ord(substr($buffer, 3, 1)) >= 6)
    {
        
$output  = 'C';
        
$output .= substr ($buffer, 1, 7);
        
$output .= gzcompress (substr ($buffer, 8));
        
        return (
$output);
    }
    else
        return (
$buffer);
}



/*********************************************************/
/* Decompress Flash file                                 */
/*********************************************************/

function phpAds_SWFDecompress($buffer)
{
    if (
function_exists('gzuncompress') &&
        
substr($buffer, 0, 3) == swf_tag_compressed &&
        
ord(substr($buffer, 3, 1)) >= 6)
    {
        
$output  = 'F';
        
$output .= substr ($buffer, 1, 7);
        
$output .= gzuncompress (substr ($buffer, 8));
        
        return (
$output);
    }
    else
        return (
$buffer);
}



/*********************************************************/
/* Get the dimensions of the Flash banner                */
/*********************************************************/

function phpAds_SWFBits($buffer, $pos, $count)
{
    
$result = 0;
    
    for (
$loop = $pos; $loop < $pos + $count; $loop++)
        
$result = $result + ((((ord($buffer[(int)($loop / 8)])) >> (7 - ($loop % 8))) & 0x01) << ($count - ($loop - $pos) - 1));
    
    return
$result;
}

function
phpAds_SWFDimensions($buffer)
{
    
// Decompress if file is a Flash MX compressed file
    
if (phpAds_SWFCompressed($buffer))
        
$buffer = phpAds_SWFDecompress($buffer);
    
    
// Get size of rect structure
    
$bits   = phpAds_SWFBits ($buffer, 64, 5);
    
    
// Get rect
    
$width  = (int)(phpAds_SWFBits ($buffer, 69 + $bits, $bits) - phpAds_SWFBits ($buffer, 69, $bits)) / 20;
    
$height = (int)(phpAds_SWFBits ($buffer, 69 + (3 * $bits), $bits) - phpAds_SWFBits ($buffer, 69 + (2 * $bits), $bits)) / 20;
    
    
    return (
        array(
$width, $height)
    );
}



/*********************************************************/
/* Get info about the hardcoded urls                     */
/*********************************************************/

function phpAds_SWFInfo($buffer)
{
    global
$swf_default_target;
    global
$swf_variable;
    
    
    
// Decompress if file is a Flash MX compressed file
    
if (phpAds_SWFCompressed($buffer))
        
$buffer = phpAds_SWFDecompress($buffer);
    
    
$parameters = array();
    
$pos = 0;
    
    while (
$result = strpos($buffer, swf_tag_geturl, $pos))
    {
        
$result++;
        
        if (
strtolower(substr($buffer, $result + 3, 7)) == 'http://' ||
            
strtolower(substr($buffer, $result + 3, 11)) == 'javascript:')
        {
            
$parameter_length = ord(substr($buffer, $result + 1, 1));
            
$parameter_total  = substr($buffer, $result + 3, $parameter_length);
            
$parameter_split  = strpos($parameter_total, swf_tag_null);
            
$parameter_url    = substr($parameter_total, 0, $parameter_split);
            
$parameter_target = substr($parameter_total, $parameter_split + 1, strlen($parameter_total) - $parameter_split - 2);
            
            if (
$swf_default_target)
                
$parameter_target = $swf_default_target;
            
            
$replacement = swf_tag_actionpush.chr(strlen($swf_variable)+2).swf_tag_null.swf_tag_null.$swf_variable.swf_tag_null.
                           
swf_tag_actiongetvariable.
                           
swf_tag_actionpush.chr(strlen($parameter_target)+2).swf_tag_null.swf_tag_null.$parameter_target.swf_tag_null.
                           
swf_tag_actiongeturl2;
            
            if (
strlen($replacement) > $parameter_length + 3)
            {
                break;
            }
            else
            {
                
$parameters[] = array(
                    
$result, $parameter_url, $parameter_target
                
);
            }
        }
        
        
$pos = $result;
    }
    
    if (
count($parameters))
        return (
$parameters);
    else
        return
false;
}



/*********************************************************/
/* Convert hard coded urls                               */
/*********************************************************/

function phpAds_SWFConvert($buffer)
{
    global
$swf_default_target;
    global
$swf_variable;
    
    
    
// Decompress if file is a Flash MX compressed file
    
if (phpAds_SWFCompressed($buffer))
    {
        
$compress = true;
        
$buffer = phpAds_SWFDecompress($buffer);
    }
    else
        
$compress = false;
    
    
    
$parameters = array();
    
$pos = 0;
    
$linkcount = 1;
    
    while (
$result = strpos($buffer, swf_tag_geturl, $pos))
    {
        
$result++;
        
        if (
strtolower(substr($buffer, $result + 3, 7)) == 'http://' ||
            
strtolower(substr($buffer, $result + 3, 11)) == 'javascript:')
        {
            
$parameter_length = ord(substr($buffer, $result + 1, 1));
            
$parameter_total  = substr($buffer, $result + 3, $parameter_length);
            
$parameter_split  = strpos($parameter_total, swf_tag_null);
            
$parameter_url    = substr($parameter_total, 0, $parameter_split);
            
$parameter_target = substr($parameter_total, $parameter_split + 1, strlen($parameter_total) - $parameter_split - 2);
            
            if (
$swf_default_target)
                
$parameter_target = $swf_default_target;
            
            
$replacement = swf_tag_actionpush.chr(strlen($swf_variable.$linkcount)+2).swf_tag_null.swf_tag_null.$swf_variable.$linkcount.swf_tag_null.
                           
swf_tag_actiongetvariable.
                           
swf_tag_actionpush.chr(strlen($parameter_target)+2).swf_tag_null.swf_tag_null.$parameter_target.swf_tag_null.
                           
swf_tag_actiongeturl2;
            
            if (
strlen($replacement) > $parameter_length + 3)
            {
                break;
            }
            elseif (
strlen($replacement) < $parameter_length + 3)
            {
                
$padding = $parameter_length + 3 - strlen($replacement);
                
                for (
$i=0;$i<$padding;$i++)
                {
                    
$replacement .= swf_tag_null;
                }
            }
            
            
$replacement = substr($buffer, 0, $result).
                           
$replacement.
                           
substr($buffer, $result + strlen($replacement), strlen($buffer) - ($result + strlen($replacement)));
               
            
$buffer = $replacement;
            
            
$parameters[] = $parameter_url;
            
$linkcount++;
        }
        
        
$pos = $result;
    }
    
    
    if (
$compress == true)
        
$buffer = phpAds_SWFCompress($buffer);
    
    return (array(
$buffer, $parameters));
}

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0044 ]--