!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\dmz\php\pear\Mail\   drwxrwxrwx
Free 4.11 GB of 39.52 GB (10.4%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     sendmail.php (6.48 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
//
// +----------------------------------------------------------------------+
// | PHP Version 4                                                        |
// +----------------------------------------------------------------------+
// | Copyright (c) 1997-2003 The PHP Group                                |
// +----------------------------------------------------------------------+
// | This source file is subject to version 2.02 of the PHP license,      |
// | that is bundled with this package in the file LICENSE, and is        |
// | available at through the world-wide-web at                           |
// | http://www.php.net/license/2_02.txt.                                 |
// | If you did not receive a copy of the PHP license and are unable to   |
// | obtain it through the world-wide-web, please send a note to          |
// | license@php.net so we can mail you a copy immediately.               |
// +----------------------------------------------------------------------+
// | Author: Chuck Hagenbuch <chuck@horde.org>                            |
// +----------------------------------------------------------------------+

/**
 * Sendmail implementation of the PEAR Mail:: interface.
 * @access public
 * @package Mail
 * @version $Revision: 294744 $
 */
class Mail_sendmail extends Mail {

    
/**
     * The location of the sendmail or sendmail wrapper binary on the
     * filesystem.
     * @var string
     */
    
var $sendmail_path '/usr/sbin/sendmail';

    
/**
     * Any extra command-line parameters to pass to the sendmail or
     * sendmail wrapper binary.
     * @var string
     */
    
var $sendmail_args '-i';

    
/**
     * Constructor.
     *
     * Instantiates a new Mail_sendmail:: object based on the parameters
     * passed in. It looks for the following parameters:
     *     sendmail_path    The location of the sendmail binary on the
     *                      filesystem. Defaults to '/usr/sbin/sendmail'.
     *
     *     sendmail_args    Any extra parameters to pass to the sendmail
     *                      or sendmail wrapper binary.
     *
     * If a parameter is present in the $params array, it replaces the
     * default.
     *
     * @param array $params Hash containing any parameters different from the
     *              defaults.
     * @access public
     */
    
function Mail_sendmail($params)
    {
        if (isset(
$params['sendmail_path'])) {
            
$this->sendmail_path $params['sendmail_path'];
        }
        if (isset(
$params['sendmail_args'])) {
            
$this->sendmail_args $params['sendmail_args'];
        }

        
/*
         * Because we need to pass message headers to the sendmail program on
         * the commandline, we can't guarantee the use of the standard "\r\n"
         * separator.  Instead, we use the system's native line separator.
         */
        
if (defined('PHP_EOL')) {
            
$this->sep PHP_EOL;
        } else {
            
$this->sep = (strpos(PHP_OS'WIN') === false) ? "\n" "\r\n";
        }
    }

    
/**
     * Implements Mail::send() function using the sendmail
     * command-line binary.
     *
     * @param mixed $recipients Either a comma-seperated list of recipients
     *              (RFC822 compliant), or an array of recipients,
     *              each RFC822 valid. This may contain recipients not
     *              specified in the headers, for Bcc:, resending
     *              messages, etc.
     *
     * @param array $headers The array of headers to send with the mail, in an
     *              associative array, where the array key is the
     *              header name (ie, 'Subject'), and the array value
     *              is the header value (ie, 'test'). The header
     *              produced from those values would be 'Subject:
     *              test'.
     *
     * @param string $body The full text of the message body, including any
     *               Mime parts, etc.
     *
     * @return mixed Returns true on success, or a PEAR_Error
     *               containing a descriptive error message on
     *               failure.
     * @access public
     */
    
function send($recipients$headers$body)
    {
        if (!
is_array($headers)) {
            return 
PEAR::raiseError('$headers must be an array');
        }

        
$result $this->_sanitizeHeaders($headers);
        if (
is_a($result'PEAR_Error')) {
            return 
$result;
        }

        
$recipients $this->parseRecipients($recipients);
        if (
is_a($recipients'PEAR_Error')) {
            return 
$recipients;
        }
        
$recipients implode(' 'array_map('escapeshellarg'$recipients));

        
$headerElements $this->prepareHeaders($headers);
        if (
is_a($headerElements'PEAR_Error')) {
            return 
$headerElements;
        }
        list(
$from$text_headers) = $headerElements;

        
/* Since few MTAs are going to allow this header to be forged
         * unless it's in the MAIL FROM: exchange, we'll use
         * Return-Path instead of From: if it's set. */
        
if (!empty($headers['Return-Path'])) {
            
$from $headers['Return-Path'];
        }

        if (!isset(
$from)) {
            return 
PEAR::raiseError('No from address given.');
        } elseif (
strpos($from' ') !== false ||
                  
strpos($from';') !== false ||
                  
strpos($from'&') !== false ||
                  
strpos($from'`') !== false) {
            return 
PEAR::raiseError('From address specified with dangerous characters.');
        }

        
$from escapeshellarg($from); // Security bug #16200

        
$mail = @popen($this->sendmail_path . (!empty($this->sendmail_args) ? ' ' $this->sendmail_args '') . " -f$from -- $recipients"'w');
        if (!
$mail) {
            return 
PEAR::raiseError('Failed to open sendmail [' $this->sendmail_path '] for execution.');
        }

        
// Write the headers following by two newlines: one to end the headers
        // section and a second to separate the headers block from the body.
        
fputs($mail$text_headers $this->sep $this->sep);

        
fputs($mail$body);
        
$result pclose($mail);
        if (
version_compare(phpversion(), '4.2.3') == -1) {
            
// With older php versions, we need to shift the pclose
            // result to get the exit code.
            
$result $result >> 0xFF;
        }

        if (
$result != 0) {
            return 
PEAR::raiseError('sendmail returned error code ' $result,
                                    
$result);
        }

        return 
true;
    }

}

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--