!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\AmbienteBogota\cpg1418\   drwxrwxrwx
Free 4.13 GB of 39.52 GB (10.45%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     ecard.php (12.98 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/*************************
  Coppermine Photo Gallery
  ************************
  Copyright (c) 2003-2008 Dev Team
  v1.1 originally written by Gregory DEMAR

  This program is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License version 3
  as published by the Free Software Foundation.
  
  ********************************************
  Coppermine version: 1.4.18
  $HeadURL: https://coppermine.svn.sourceforge.net/svnroot/coppermine/trunk/cpg1.4.x/ecard.php $
  $Revision: 4380 $
  $Author: gaugau $
  $Date: 2008-04-12 12:00:19 +0200 (Sa, 12 Apr 2008) $
**********************************************/

define('IN_COPPERMINE'true);
define('ECARDS_PHP'true);

require(
'include/init.inc.php');
require(
'include/smilies.inc.php');
require(
'include/mailer.inc.php');

if (!
USER_CAN_SEND_ECARDScpg_die(ERROR$lang_errors['access_denied'], __FILE____LINE__);

//print_r(get_defined_constants());

function get_post_var($name$default '')
{

    return isset(
$_POST[$name]) ? $_POST[$name] : $default;
}

$pid = (int)$_GET['pid'];
$album $_GET['album'];
$pos = (int)$_GET['pos'];

$sender_name get_post_var('sender_name'USER_NAME USER_NAME : (isset($USER['name']) ? $USER['name'] : ''));
if (
defined('UDB_INTEGRATION')AND USER_ID$USER_DATA array_merge($USER_DATA,$cpg_udb->get_user_infos(USER_ID));
if (
$USER_DATA['user_email']){
$sender_email $USER_DATA['user_email'];
$sender_box $sender_email;
} else {
$sender_email get_post_var('sender_email',$USER['email'] ? $USER['email'] : '');
$sender_box "<input type=\"text\" class=\"textinput\" value=\"$sender_email\" name=\"sender_email\" style=\"width: 100%;\" />";
}
$recipient_name get_post_var('recipient_name');
$recipient_email get_post_var('recipient_email');
$greetings get_post_var('greetings');
$message get_post_var('message');
$sender_email_warning '';
$recipient_email_warning '';
// Get picture thumbnail url
$result cpg_db_query("SELECT * from {$CONFIG['TABLE_PICTURES']} WHERE pid='$pid$ALBUM_SET");
if (!
mysql_num_rows($result)) cpg_die(ERROR$lang_errors['non_exist_ap'], __FILE____LINE__);
$row mysql_fetch_array($result);
$thumb_pic_url get_pic_url($row'thumb');

$pic_title $row['title'];
$pic_caption bb_decode($row['caption']);

if (!
is_image($row['filename'])) cpg_die(ERROR$lang_ecard_php['error_not_image'], __FILE____LINE__);

// Check supplied email address
$valid_email_pattern "^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]*\.)+[a-z]{2,6}$";
$valid_sender_email eregi($valid_email_pattern$sender_email);
$valid_recipient_email eregi($valid_email_pattern$recipient_email);
$invalid_email '<font size="1">' $lang_ecard_php['invalid_email'] . ' (' $recipient_email ')</font>';
if (!
$valid_sender_email && count($_POST) > 0$sender_email_warning $invalid_email;
if (!
$valid_recipient_email && count($_POST) > 0$recipient_email_warning $invalid_email;

pageheader($lang_ecard_php['title']);

if (isset(
$_POST['submit'])) {

// Create and send the e-card
if (count($_POST) > && $valid_sender_email && $valid_recipient_email) {
    
$gallery_url_prefix $CONFIG['ecards_more_pic_target']. (substr($CONFIG['ecards_more_pic_target'], -1) == '/' '' '/');
    if (
$CONFIG['make_intermediate'] && max($row['pwidth'], $row['pheight']) > $CONFIG['picture_width']) {
        
$n_picname get_pic_url($row'normal');
    } else {
        
$n_picname get_pic_url($row'fullsize');
    }

    if (!
stristr($n_picname'http:')) $n_picname $gallery_url_prefix $n_picname;

    
$msg_content process_smilies($message$gallery_url_prefix);

    
$data = array('rn' => $_POST['recipient_name'],
        
'sn' => $_POST['sender_name'],
        
'se' => $sender_email,
        
'p' => $n_picname,
        
'g' => $greetings,
        
'm' => $message,
        
'pid' => $pid,
        
'pt' => $pic_title,
        
'pc' => $pic_caption,
        );

    
$encoded_data urlencode(base64_encode(serialize($data)));

    
$params = array('{LANG_DIR}' => $lang_text_dir,
        
'{TITLE}' => sprintf($lang_ecard_php['ecard_title'], $sender_name),
        
'{CHARSET}' => $CONFIG['charset'] == 'language file' $lang_charset $CONFIG['charset'],
        
'{VIEW_ECARD_TGT}' => "{$gallery_url_prefix}displayecard.php?data=$encoded_data",
        
'{VIEW_ECARD_LNK}' => $lang_ecard_php['view_ecard'],
        
'{VIEW_ECARD_LNK_PLAINTEXT}' => $lang_ecard_php['view_ecard_plaintext'],
        
'{PIC_URL}' => $n_picname,
        
'{URL_PREFIX}' => $gallery_url_prefix,
        
'{GREETINGS}' => $greetings,
        
'{MESSAGE}' => bb_decode($msg_content),
        
'{PLAINTEXT_MESSAGE}' => $message,
        
'{SENDER_EMAIL}' => $sender_email,
        
'{SENDER_NAME}' => $sender_name,
        
'{VIEW_MORE_TGT}' => $CONFIG['ecards_more_pic_target'],
        
'{VIEW_MORE_LNK}' => $lang_ecard_php['view_more_pics'],
        
'{PID}' => $pid,
        
'{PIC_TITLE}' => $pic_title,
        
'{PIC_CAPTION}' => $pic_caption,
        );

                                
$message template_eval($template_ecard$params);
                                
$plaintext_message template_eval($template_ecard_plaintext$params);

        
$tempTime time();
        
$message .= sprintf($lang_ecard_php['ecards_footer'], $sender_name$_SERVER['REMOTE_ADDR'], localised_date(-1,$comment_date_fmt));
                                
$subject sprintf($lang_ecard_php['ecard_title'], $sender_name);

                                
$result cpg_mail($recipient_email$subject$message'text/html'$sender_name$sender_email$plaintext_message);

        
//write ecard log
        
if ($CONFIG['log_ecards'] == 1) {
          
$result_log cpg_db_query("INSERT INTO {$CONFIG['TABLE_ECARDS']} (sender_name, sender_email, recipient_name, recipient_email, link, date, sender_ip) VALUES ('$sender_name', '$sender_email', '$recipient_name', '$recipient_email',   '$encoded_data', '$tempTime', '{$_SERVER["REMOTE_ADDR"]}')");
          }

    if (!
USER_ID) {
        
$USER['name'] = $sender_name;
        
$USER['email'] = $sender_email;
    }

    if (
$result) {
        
//pageheader($lang_ecard_php['title']);
        
msg_box($lang_cpg_die[INFORMATION], $lang_ecard_php['send_success'], $lang_continue"displayimage.php?album=$album&amp;pos=$pos");
                                echo 
'<br />';
                                
starttable('100%'$lang_ecard_php['preview']);
                                echo 
'<tr><td>';
                                echo 
template_eval($template_ecard$params);
                                echo 
'</td></tr>';
                                
endtable();
        
pagefooter();
        
ob_end_flush();
        exit;
    } else {
        
cpg_die(ERROR$lang_ecard_php['send_failed'], __FILE____LINE__);
    }
        }
}
//submit

elseif (isset($_POST['preview'])) {

    if (
$CONFIG['make_intermediate'] && max($row['pwidth'], $row['pheight']) > $CONFIG['picture_width']) {
        
$n_picname get_pic_url($row'normal');
    } else {
        
$n_picname get_pic_url($row'fullsize');
    }
    if (!
stristr($n_picname'http:')) $n_picname $gallery_url_prefix $n_picname;
    
$msg_content process_smilies($message$gallery_url_prefix);
    
$data = array(
        
'sn' => $_POST['sender_name'],
        
'se' => $sender_email,
        
'p' => $n_picname,
        
'g' => $greetings,
        
'm' => $message,
        
'pid' => $pid,
        
'pt' => $pic_title,
        
'pc' => $pic_caption,
        );

    
$params = array('{LANG_DIR}' => $lang_text_dir,
        
'{TITLE}' => sprintf($lang_ecard_php['ecard_title'], $sender_name),
        
'{CHARSET}' => $CONFIG['charset'] == 'language file' $lang_charset $CONFIG['charset'],
        
'{VIEW_ECARD_TGT}' => "{$gallery_url_prefix}displayecard.php?data=$encoded_data",
        
'{VIEW_ECARD_LNK}' => $lang_ecard_php['preview_view_ecard'],
        
'{PIC_URL}' => $n_picname,
        
'{URL_PREFIX}' => $gallery_url_prefix,
        
'{GREETINGS}' => $greetings,
        
'{MESSAGE}' => bb_decode($msg_content),
        
'{SENDER_EMAIL}' => $sender_email,
        
'{SENDER_NAME}' => $sender_name,
        
'{VIEW_MORE_TGT}' => $CONFIG['ecards_more_pic_target'],
        
'{VIEW_MORE_LNK}' => $lang_ecard_php['view_more_pics'],
        
'{PID}' => $pid,
        
'{PIC_TITLE}' => $pic_title,
        
'{PIC_CAPTION}' => $pic_caption,
        );

                                
starttable('100%'$lang_ecard_php['preview']);
                                echo 
'<tr><td>';
                                echo 
template_eval($template_ecard$params);
                                echo 
'</td></tr>';
                                
endtable();
                                echo 
'<br />';
}
//preview

//pageheader($lang_ecard_php['title']);

//ecard form
if ($CONFIG['show_bbcode_help']) {$captionLabel '&nbsp;'cpg_display_help('f=index.html&amp;base=64&amp;h='.urlencode(base64_encode(serialize($lang_bbcode_help_title))).'&amp;t='.urlencode(base64_encode(serialize($lang_bbcode_help))),470,245);}
starttable("100%"$lang_ecard_php['title'], 3);

echo <<<EOT
        <tr>
                <td class="tableh2" colspan="2"><b>
{$lang_ecard_php['from']}</b></td>
                <td rowspan="6" align="center" valign="top" class="tableb">
                        <a href="displayimage.php?pos=-
{$pid}">
                                                                                                <img src="
$thumb_pic_url" alt="" vspace="8" border="0" class="image" /></a><br />
                </td>
        </tr>
        <tr>
                <td class="tableb" valign="top" width="40%">
                        <form method="post" name="post" action="
{$_SERVER['PHP_SELF']}?album=$album&amp;pid=$pid&amp;pos=$pos">
                        
{$lang_ecard_php['your_name']}<br />
                </td>
                <td valign="top" class="tableb" width="60%">
                        <input type="text" class="textinput" name="sender_name"  value="
$sender_name" style="width: 100%;" /><br />
                </td>
        </tr>
        <tr>
                <td class="tableb" valign="top" width="40%">
                        
{$lang_ecard_php['your_email']}<br />
                </td>
                <td valign="top" class="tableb" width="60%">
                        
{$sender_box}
                        
{$sender_email_warning}
                </td>
        </tr>
        <tr>
                <td class="tableh2" colspan="2"><b>
{$lang_ecard_php['to']}</b></td>
        </tr>
        <tr>
                <td class="tableb" valign="top" width="40%">
                        
{$lang_ecard_php['rcpt_name']}<br />
                </td>
                <td valign="top" class="tableb" width="60%">
                        <input type="text" class="textinput" name="recipient_name"  value="
$recipient_name" style="width: 100%;" /><br />
                </td>
        </tr>
        <tr>
                <td class="tableb" valign="top" width="40%">
                        
{$lang_ecard_php['rcpt_email']}<br />
                </td>
                <td valign="top" class="tableb" width="60%">
                        <input type="text" class="textinput" name="recipient_email"  value="
$recipient_email" style="width: 100%;" /><br />
                        
$recipient_email_warning
                </td>
        </tr>
        <tr>
                <td class="tableh2" colspan="3"><b>
{$lang_ecard_php['greetings']}</b></td>
        </tr>
        <tr>
                <td class="tableb" colspan="3">
                        <input type="text" class="textinput" name="greetings"  value="
$greetings" style="width: 100%;" /><br />
                </td>
        </tr>
        <tr>
                <td class="tableh2" colspan="3"><b>
{$lang_ecard_php['message']}$captionLabel</b></td>
        </tr>
        <tr>
                <td class="tableb" colspan="3" valign="top"><br />
                        <textarea name="message" class="textinput" rows="8" cols="40"  onselect="storeCaret_post(this);" onclick="storeCaret_post(this);" onkeyup="storeCaret_post(this);" style="width: 100%;">
$message</textarea><br /><br />
                </td>
        </tr>
        <tr>
                <td class="tableb" colspan="3" valign="top">

EOT;
echo 
generate_smilies();
echo <<<EOT
                </td>
        </tr>
        <tr>
                <td colspan="3" align="center" class="tablef">
                        <input type="submit" class="button" name="preview" title="
{$lang_ecard_php['preview_button']}" value="{$lang_ecard_php['preview_button']}" />
                                                                                                &nbsp;&nbsp;
                        <input type="submit" class="button" name="submit" title="
{$lang_ecard_php['submit_button']}" value="{$lang_ecard_php['submit_button']}" />
                        </form>
                </td>
        </tr>
EOT;

endtable();
pagefooter();
ob_end_flush();

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--