!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\nuevo\phpMyAdmin2\   drwxrwxrwx
Free 7.31 GB of 239.26 GB (3.05%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pmd_save_pos.php (2.5 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
 * Save handler for PMD
 *
 * @package PhpMyAdmin-Designer
 */

/**
 *
 */
require_once './libraries/common.inc.php';
require_once 'libraries/pmd_common.php';

$cfgRelation = PMA_getRelationsParam();

if (! $cfgRelation['designerwork']) {
    PMD_errorSave();
}

/**
 * Sets globals from $_POST
 */
$post_params = array(
    'die_save_pos',
);

foreach ($post_params as $one_post_param) {
    if (isset($_POST[$one_post_param])) {
        $GLOBALS[$one_post_param] = $_POST[$one_post_param];
    }
}

foreach ($_POST['t_x'] as $key => $value) {
    // table name decode (post PDF exp/imp)
    $KEY = empty($_POST['IS_AJAX']) ? urldecode($key) : $key;
    list($DB,$TAB) = explode(".", $KEY);
    PMA_queryAsControlUser(
        'DELETE FROM ' . PMA_Util::backquote($GLOBALS['cfgRelation']['db'])
        . '.' . PMA_Util::backquote($GLOBALS['cfgRelation']['designer_coords'])
        . ' WHERE `db_name` = \'' . PMA_Util::sqlAddSlashes($DB) . '\''
        . ' AND `table_name` = \'' . PMA_Util::sqlAddSlashes($TAB) . '\'',
        true, PMA_DatabaseInterface::QUERY_STORE
    );

    PMA_queryAsControlUser(
        'INSERT INTO ' . PMA_Util::backquote($GLOBALS['cfgRelation']['db'])
        . '.' . PMA_Util::backquote($GLOBALS['cfgRelation']['designer_coords'])
        . ' (db_name, table_name, x, y, v, h)'
        . ' VALUES ('
        . '\'' . PMA_Util::sqlAddSlashes($DB) . '\', '
        . '\'' . PMA_Util::sqlAddSlashes($TAB) . '\', '
        . '\'' . PMA_Util::sqlAddSlashes($_POST['t_x'][$key]) . '\', '
        . '\'' . PMA_Util::sqlAddSlashes($_POST['t_y'][$key]) . '\', '
        . '\'' . PMA_Util::sqlAddSlashes($_POST['t_v'][$key]) . '\', '
        . '\'' . PMA_Util::sqlAddSlashes($_POST['t_h'][$key]) . '\')',
        true, PMA_DatabaseInterface::QUERY_STORE
    );
}
//----------------------------------------------------------------------------

/**
 * Error handler
 *
 * @return void
 */
function PMD_errorSave()
{
    global $die_save_pos; // if this file included
    if (! empty($die_save_pos)) {
        header("Content-Type: text/xml; charset=utf-8");
        header("Cache-Control: no-cache");
        die(
            '<root act="save_pos" return="'
            . __('Error saving coordinates for Designer.')
            . '"></root>'
        );
    }
}

if (! empty($die_save_pos)) {
    header("Content-Type: text/xml; charset=utf-8");
    header("Cache-Control: no-cache");
    echo '<root act="save_pos" return="'
        . __('Modifications have been saved') . '"></root>';
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--