!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/phpads/   drwxr-xr-x
Free 4.04 GB of 27.03 GB (14.95%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     adview.php (6.29 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php // $Revision: 1.24 $

/************************************************************************/
/* phpAdsNew 2                                                          */
/* ===========                                                          */
/*                                                                      */
/* Copyright (c) 2001 by the phpAdsNew developers                       */
/* http://sourceforge.net/projects/phpadsnew                            */
/*                                                                      */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License.       */
/************************************************************************/



// Figure out our location
define ('phpAds_path', '.');



/*********************************************************/
/* Include required files                                */
/*********************************************************/

require    (phpAds_path."/config.inc.php");
require (
phpAds_path."/lib-db.inc.php");

if (
$phpAds_config['log_adviews'] || $phpAds_config['acl'])
{
    require (
phpAds_path."/lib-remotehost.inc.php");
    
    if (
$phpAds_config['log_adviews'])
        require (
phpAds_path."/lib-log.inc.php");
    
    if (
$phpAds_config['acl'])
        require (
phpAds_path."/lib-acl.inc.php");
}

require (
phpAds_path."/lib-cache.inc.php");



/*********************************************************/
/* Main code                                             */
/*********************************************************/

if (isset($clientID) && !isset($clientid))    
    
$clientid = $clientID;

if (!isset(
$clientid))
    
$clientid = 0;

if (!isset(
$what))
    
$what = '';

if (!isset(
$source))
    
$source = '';

if (!isset(
$n))
    
$n = 'default';


// Include the need sub-libraries
if (substr($what,0,5) == 'zone:')
{
    if (!
defined('LIBVIEWZONE_INCLUDED'))
        require (
phpAds_path.'/lib-view-zone.inc.php');
}
else
{
    if (!
defined('LIBVIEWQUERY_INCLUDED'))
        require (
phpAds_path.'/lib-view-query.inc.php');
    
    if (!
defined('LIBVIEWDIRECT_INCLUDED'))
        require (
phpAds_path.'/lib-view-direct.inc.php');
}



phpAds_dbConnect();

$row = phpAds_fetchBanner($what, $clientid, 0, $source, false);



if (
is_array($row) && isset($row['bannerid']))
{
    
// Send P3P Headers
    
if ($phpAds_config['p3p_policies'])
    {
        
$p3p_header = '';
        
        if (isset(
$phpAds_config['p3p_policy_location']) &&
            
$phpAds_config['p3p_policy_location'] != '')
            
$p3p_header .= " policyref=\"".$phpAds_config['p3p_policy_location']."\"";
        
        if (
$phpAds_config['p3p_compact_policy'] != '')
            
$p3p_header .= " CP=\"".$phpAds_config['p3p_compact_policy']."\"";
        
        if (
$p3p_header != '')
            
header ("P3P: $p3p_header");
    }
    
    
    
$cookie = array();
    
$url     = parse_url($phpAds_config['url_prefix']);
    
    
    
// Log this impression
    
if ($phpAds_config['block_adviews'] == 0 ||
       (
$phpAds_config['block_adviews'] > 0 && !isset($phpAds_blockView[$row['bannerid']])))
    {
        if (
$phpAds_config['log_adviews'])
            
phpAds_logImpression ($row['bannerid'], $row['clientid'], $row['zoneid'], $source);
        
        
// Send block cookies
        
if ($phpAds_config['block_adviews'] > 0)
            
SetCookie("phpAds_blockView[".$row['bannerid']."]", time(), time() + $phpAds_config['block_adviews'], $url["path"]);
    }
    
    
    
// Send bannerid headers
    
$cookie['bannerid'] = $row["bannerid"];
    
    
// Send zoneid headers
    
if ($row['zoneid'] != 0)
        
$cookie['zoneid'] = $row['zoneid'];
    
    
// Send source headers
    
if (isset($source) && $source != '')
        
$cookie['source'] = $source;
    
    
    switch (
$row['storagetype'])
    {
        case
'url':
            
$row['imageurl'] = str_replace ('{timestamp}', time(), $row['imageurl']);
            
$row['url']      = str_replace ('{timestamp}', time(), $row['url']);
            
            
// Determine cachebuster
            
if (eregi ('\{random(:([1-9])){0,1}\}', $row['filename'], $matches))
            {
                if (
$matches[1] == "")
                    
$randomdigits = 8;
                else
                    
$randomdigits = $matches[2];
                
                
$randomnumber = sprintf ('%0'.$randomdigits.'d', mt_rand (0, pow (10, $randomdigits) - 1));
                
$row['imageurl'] = str_replace ($matches[0], $randomnumber, $row['imageurl']);
            }
            
            if (
eregi ('\{random(:([1-9])){0,1}\}', $row['url'], $matches))
            {
                if (!isset(
$randomnumber) || $randomnumber == '')
                {
                    if (
$matches[1] == "")
                        
$randomdigits = 8;
                    else
                        
$randomdigits = $matches[2];
                    
                    
$randomnumber = sprintf ('%0'.$randomdigits.'d', mt_rand (0, pow (10, $randomdigits) - 1));
                }
                
                
$row['url'] = str_replace ($matches[0], $randomnumber, $row['url']);
            }
            
            
// Store destination URL
            
$cookie['dest'] = $row['url'];
            
            
// Redirect to the banner
            
setcookie ("phpAds_banner[".$n."]", serialize($cookie), 0, $url["path"]);
            
header       ("Location: ".$row['imageurl']);
            break;
        
        
        case
'web':
            
$cookie['dest'] = $row['url'];
            
            
// Redirect to the banner
            
setcookie ("phpAds_banner[".$n."]", serialize($cookie), 0, $url["path"]);
            
header       ("Location: ".$row['imageurl']);
            break;
        
        
        case
'sql':
            
$cookie['dest'] = $row['url'];
            
            
// Load the banner from the database
            
$res = phpAds_dbQuery("
                SELECT
                    contents
                FROM
                    "
.$phpAds_config['tbl_images']."
                WHERE
                    filename = '"
.$row['filename']."'
            "
);
            
            if (
$image = phpAds_dbFetchArray($res))
            {
                
setcookie ("phpAds_banner[".$n."]", serialize($cookie), 0, $url["path"]);
                
header       ('Content-type: image/'.$row['contenttype'].'; name='.md5(microtime()).'.'.$row['contenttype']);
                echo
$image['contents'];
            }
            
            break;
    }
}
else
{
    if (
$phpAds_config['p3p_policies'])
    {
        
$p3p_header = '';
        
        if (
$phpAds_config['p3p_policy_location'] != '')
            
$p3p_header .= " policyref=\"".$phpAds_config['p3p_policy_location']."\"";
        
        if (
$phpAds_config['p3p_compact_policy'] != '')
            
$p3p_header .= " CP=\"".$phpAds_config['p3p_compact_policy']."\"";
        
        if (
$p3p_header != '')
            
header ("P3P: $p3p_header");
    }
    
    
setcookie ("phpAds_banner[".$n."]", 'DEFAULT', 0, $url["path"]);
    
header       ("Location: ".$phpAds_config['default_banner_url']);
}

phpAds_dbClose();

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0035 ]--