!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Users\DMZ\Desktop\cumbreclima\wp-content\plugins\subscribe-to-comments-reloaded\templates\   drwxrwxrwx
Free 3.26 GB of 39.52 GB (8.25%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     subscribe.php (4.88 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
// Avoid direct access to this piece of code
if ( ! function_exists'add_action' ) ) {
    
header'Location: /' );
    exit;
}

global 
$wp_subscribe_reloaded;
require_once 
WP_PLUGIN_DIR '/subscribe-to-comments-reloaded/classes/helper.class.php';
$helper = new subscribeToCommentsHelper();
ob_start();
$post_permalink get_permalink$post_ID );
if ( ! empty( 
$email ) ) {
    
// Use Akismet, if available, to check this user is legit
    
if ( function_exists'akismet_http_post' ) ) {
        global 
$akismet_api_host$akismet_api_port;

        
$akismet_query_string "user_ip={$_SERVER['REMOTE_ADDR']}";
        
$akismet_query_string .= "&user_agent=" urlencodestripslashes$_SERVER['HTTP_USER_AGENT'] ) );
        
$akismet_query_string .= "&blog=" urlencodeget_option'home' ) );
        
$akismet_query_string .= "&blog_lang=" get_locale();
        
$akismet_query_string .= "&blog_charset=" get_option'blog_charset' );
        
$akismet_query_string .= "&permalink=$post_permalink";
        
$akismet_query_string .= "&comment_author_email=" urlencodestripslashes$email ) );

        
$akismet_response akismet_http_post$akismet_query_string$akismet_api_host'/1.1/comment-check'$akismet_api_port );

        
// If this is considered SPAM, we stop here
        
if ( $akismet_response[1] == 'true' ) {
            
ob_end_clean();

            return 
'';
        }
    }

    
$clean_email $wp_subscribe_reloaded->clean_email$email );

    
// If the case, send a message to the administrator
    
if ( get_option'subscribe_reloaded_enable_admin_messages''no' ) == 'yes' ) {
        
$from_name  stripslashesget_option'subscribe_reloaded_from_name''admin' ) );
        
$from_email get_option'subscribe_reloaded_from_email'get_bloginfo'admin_email' ) );

        
$subject __'New subscription to''subscribe-reloaded' ) . $target_post->post_title";
        
$message __'New subscription to''subscribe-reloaded' ) . $target_post->post_title\n" __'User:''subscribe-reloaded' ) . $clean_email";

        
$headers "MIME-Version: 1.0\n";
        
$headers .= "From: $from_name <$from_email>\n";
        
$headers .= "Content-Type: text/plain; charset=" get_bloginfo'charset' ) . "\n";
        
wp_mailget_bloginfo'admin_email' ), $subject$message$headers );
    }
    if ( 
get_option'subscribe_reloaded_enable_double_check''no' ) == 'yes' && ! $wp_subscribe_reloaded->is_user_subscribed$post_ID$clean_email'C' ) ) {
        
$wp_subscribe_reloaded->add_subscription$post_ID$clean_email'YC' );
        
$wp_subscribe_reloaded->confirmation_email$post_ID$clean_email );
        
$message html_entity_decodestripslashesget_option'subscribe_reloaded_subscription_confirmed_dci' ) ), ENT_QUOTES'UTF-8' );
    } else {
        
$this->add_subscription$post_ID$clean_email'Y' );
        
$message html_entity_decodestripslashesget_option'subscribe_reloaded_subscription_confirmed' ) ), ENT_QUOTES'UTF-8' );
    }

    
$message str_replace'[post_permalink]'$post_permalink$message );
    if ( 
function_exists'qtrans_useCurrentLanguageIfNotFoundUseDefaultLanguage' ) ) {
        
$message str_replace'[post_title]'qtrans_useCurrentLanguageIfNotFoundUseDefaultLanguage$target_post->post_title ), $message );
        
$message qtrans_useCurrentLanguageIfNotFoundUseDefaultLanguage$message );
    } else {
        
$message str_replace'[post_title]'$target_post->post_title$message );
    }

    echo 
"<p>$message</p>";
} else {
    
$email = isset( $_COOKIE['comment_author_email_' COOKIEHASH] ) ? $_COOKIE['comment_author_email_' COOKIEHASH] : 'email';
?>

    <p><?php
    $message 
str_replace'[post_permalink]'$post_permalink__(html_entity_decodestripslashesget_option'subscribe_reloaded_subscribe_without_commenting' ) ), ENT_QUOTES'UTF-8' ), 'subscribe-reloaded' ) );
    if ( 
function_exists'qtrans_useCurrentLanguageIfNotFoundUseDefaultLanguage' ) ) {
        
$message str_replace'[post_title]'qtrans_useCurrentLanguageIfNotFoundUseDefaultLanguage$target_post->post_title ), $message );
        
$message qtrans_useCurrentLanguageIfNotFoundUseDefaultLanguage$message );
    } else {
        
$message str_replace'[post_title]'$target_post->post_title$message );
    }
    echo 
$message;
    
?></p>
    <form action="<?php if ( $helper->verifyXSS$_SERVER['REQUEST_URI'] ) ) {
        echo 
"#";
    } else {
        echo 
$_SERVER['REQUEST_URI'];
    } 
?>" method="post" onsubmit="if(this.sre.value=='' || this.sre.indexOf('@')==0) return false">
        <fieldset style="border:0">
            <p><label for="sre"><?php _e'Email''subscribe-reloaded' ?></label>
                <input id='sre' type="text" class="subscribe-form-field" name="sre" value="<?php echo $email ?>" size="22" onfocus="if(this.value==this.defaultValue)this.value=''" onblur="if(this.value=='')this.value=this.defaultValue" />
                <input name="submit" type="submit" class="subscribe-form-button" value="<?php _e'Send''subscribe-reloaded' ?>" />
            </p>
        </fieldset>
    </form>
<?php
}
$output ob_get_contents();
ob_end_clean();
return 
$output;
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--