!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Intranet\C\xampp\htdocs\phpbb\admin\   drwxrwxrwx
Free 4.09 GB of 39.52 GB (10.36%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     admin_words.php (6.58 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/***************************************************************************
 *                              admin_words.php
 *                            -------------------
 *   begin                : Thursday, Jul 12, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: admin_words.php,v 1.10.2.3 2004/03/25 15:57:20 acydburn Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

define('IN_PHPBB'1);

if( !empty(
$setmodules) )
{
    
$file basename(__FILE__);
    
$module['General']['Word_Censor'] = "$file";
    return;
}

//
// Load default header
//
$phpbb_root_path "./../";
require(
$phpbb_root_path 'extension.inc');
require(
'./pagestart.' $phpEx);

if( isset(
$HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
{
    
$mode = ($HTTP_GET_VARS['mode']) ? $HTTP_GET_VARS['mode'] : $HTTP_POST_VARS['mode'];
    
$mode htmlspecialchars($mode);
}
else 
{
    
//
    // These could be entered via a form button
    //
    
if( isset($HTTP_POST_VARS['add']) )
    {
        
$mode "add";
    }
    else if( isset(
$HTTP_POST_VARS['save']) )
    {
        
$mode "save";
    }
    else
    {
        
$mode "";
    }
}

if( 
$mode != "" )
{
    if( 
$mode == "edit" || $mode == "add" )
    {
        
$word_id = ( isset($HTTP_GET_VARS['id']) ) ? intval($HTTP_GET_VARS['id']) : 0;

        
$template->set_filenames(array(
            
"body" => "admin/words_edit_body.tpl")
        );

        
$s_hidden_fields '';

        if( 
$mode == "edit" )
        {
            if( 
$word_id )
            {
                
$sql "SELECT * 
                    FROM " 
WORDS_TABLE 
                    WHERE word_id = 
$word_id";
                if(!
$result $db->sql_query($sql))
                {
                    
message_die(GENERAL_ERROR"Could not query words table""Error"__LINE____FILE__$sql);
                }

                
$word_info $db->sql_fetchrow($result);
                
$s_hidden_fields .= '<input type="hidden" name="id" value="' $word_id '" />';
            }
            else
            {
                
message_die(GENERAL_MESSAGE$lang['No_word_selected']);
            }
        }

        
$template->assign_vars(array(
            
"WORD" => $word_info['word'],
            
"REPLACEMENT" => $word_info['replacement'],

            
"L_WORDS_TITLE" => $lang['Words_title'],
            
"L_WORDS_TEXT" => $lang['Words_explain'],
            
"L_WORD_CENSOR" => $lang['Edit_word_censor'],
            
"L_WORD" => $lang['Word'],
            
"L_REPLACEMENT" => $lang['Replacement'],
            
"L_SUBMIT" => $lang['Submit'],

            
"S_WORDS_ACTION" => append_sid("admin_words.$phpEx"),
            
"S_HIDDEN_FIELDS" => $s_hidden_fields)
        );

        
$template->pparse("body");

        include(
'./page_footer_admin.'.$phpEx);
    }
    else if( 
$mode == "save" )
    {
        
$word_id = ( isset($HTTP_POST_VARS['id']) ) ? intval($HTTP_POST_VARS['id']) : 0;
        
$word = ( isset($HTTP_POST_VARS['word']) ) ? trim($HTTP_POST_VARS['word']) : "";
        
$replacement = ( isset($HTTP_POST_VARS['replacement']) ) ? trim($HTTP_POST_VARS['replacement']) : "";

        if(
$word == "" || $replacement == "")
        {
            
message_die(GENERAL_MESSAGE$lang['Must_enter_word']);
        }

        if( 
$word_id )
        {
            
$sql "UPDATE " WORDS_TABLE 
                SET word = '" 
str_replace("\'""''"$word) . "', replacement = '" str_replace("\'""''"$replacement) . "' 
                WHERE word_id = 
$word_id";
            
$message $lang['Word_updated'];
        }
        else
        {
            
$sql "INSERT INTO " WORDS_TABLE " (word, replacement) 
                VALUES ('" 
str_replace("\'""''"$word) . "', '" str_replace("\'""''"$replacement) . "')";
            
$message $lang['Word_added'];
        }

        if(!
$result $db->sql_query($sql))
        {
            
message_die(GENERAL_ERROR"Could not insert data into words table"$lang['Error'], __LINE____FILE__$sql);
        }

        
$message .= "<br /><br />" sprintf($lang['Click_return_wordadmin'], "<a href=\"" append_sid("admin_words.$phpEx") . "\">""</a>") . "<br /><br />" sprintf($lang['Click_return_admin_index'], "<a href=\"" append_sid("index.$phpEx?pane=right") . "\">""</a>");

        
message_die(GENERAL_MESSAGE$message);
    }
    else if( 
$mode == "delete" )
    {
        if( isset(
$HTTP_POST_VARS['id']) ||  isset($HTTP_GET_VARS['id']) )
        {
            
$word_id = ( isset($HTTP_POST_VARS['id']) ) ? $HTTP_POST_VARS['id'] : $HTTP_GET_VARS['id'];
            
$word_id intval($word_id);
        }
        else
        {
            
$word_id 0;
        }

        if( 
$word_id )
        {
            
$sql "DELETE FROM " WORDS_TABLE 
                WHERE word_id = 
$word_id";

            if(!
$result $db->sql_query($sql))
            {
                
message_die(GENERAL_ERROR"Could not remove data from words table"$lang['Error'], __LINE____FILE__$sql);
            }

            
$message $lang['Word_removed'] . "<br /><br />" sprintf($lang['Click_return_wordadmin'], "<a href=\"" append_sid("admin_words.$phpEx") . "\">""</a>") . "<br /><br />" sprintf($lang['Click_return_admin_index'], "<a href=\"" append_sid("index.$phpEx?pane=right") . "\">""</a>");

            
message_die(GENERAL_MESSAGE$message);
        }
        else
        {
            
message_die(GENERAL_MESSAGE$lang['No_word_selected']);
        }
    }
}
else
{
    
$template->set_filenames(array(
        
"body" => "admin/words_list_body.tpl")
    );

    
$sql "SELECT * 
        FROM " 
WORDS_TABLE 
        ORDER BY word"
;
    if( !
$result $db->sql_query($sql) )
    {
        
message_die(GENERAL_ERROR"Could not query words table"$lang['Error'], __LINE____FILE__$sql);
    }

    
$word_rows $db->sql_fetchrowset($result);
    
$word_count count($word_rows);

    
$template->assign_vars(array(
        
"L_WORDS_TITLE" => $lang['Words_title'],
        
"L_WORDS_TEXT" => $lang['Words_explain'],
        
"L_WORD" => $lang['Word'],
        
"L_REPLACEMENT" => $lang['Replacement'],
        
"L_EDIT" => $lang['Edit'],
        
"L_DELETE" => $lang['Delete'],
        
"L_ADD_WORD" => $lang['Add_new_word'],
        
"L_ACTION" => $lang['Action'],

        
"S_WORDS_ACTION" => append_sid("admin_words.$phpEx"),
        
"S_HIDDEN_FIELDS" => '')
    );

    for(
$i 0$i $word_count$i++)
    {
        
$word $word_rows[$i]['word'];
        
$replacement $word_rows[$i]['replacement'];
        
$word_id $word_rows[$i]['word_id'];

        
$row_color = ( !($i 2) ) ? $theme['td_color1'] : $theme['td_color2'];
        
$row_class = ( !($i 2) ) ? $theme['td_class1'] : $theme['td_class2'];

        
$template->assign_block_vars("words", array(
            
"ROW_COLOR" => "#" $row_color,
            
"ROW_CLASS" => $row_class,
            
"WORD" => $word,
            
"REPLACEMENT" => $replacement,

            
"U_WORD_EDIT" => append_sid("admin_words.$phpEx?mode=edit&amp;id=$word_id"),
            
"U_WORD_DELETE" => append_sid("admin_words.$phpEx?mode=delete&amp;id=$word_id"))
        );
    }
}

$template->pparse("body");

include(
'./page_footer_admin.'.$phpEx);

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0156 ]--