!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\xampp\xampp\htdocs\jaime\nuevo\WebCalendar-1.0.2\ws\   drwxrwxrwx
Free 7.26 GB of 239.26 GB (3.03%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     login.php (1.75 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/*
 * $Id: login.php,v 1.2 2004/08/03 01:14:22 cknudsen Exp $
 *
 * Description:
 *     Provides login mechanism for web service clients.
 */

$basedir "..";
$includedir "../includes";

include 
"$includedir/config.php";
include 
"$includedir/php-dbi.php";
include 
"$includedir/functions.php";
include 
"$includedir/$user_inc";
include 
"$includedir/connect.php";

load_global_settings ();

if ( ! empty ( 
$last_login ) )
  
$login "";

include 
"$includedir/translate.php";

// calculate path for cookie
if ( empty ( $PHP_SELF ) )
  
$PHP_SELF $_SERVER["PHP_SELF"];
$cookie_path str_replace "login.php"""$PHP_SELF );
//echo "Cookie path: $cookie_path\n";

$out "<login>\n";

if ( 
$single_user == "Y" ) {
  
// No login for single-user mode
  
$out .= "<error>No login required for single-user mode</error>\n";
} else if ( 
$use_http_auth ) {
  
// There is no login page when using HTTP authorization
  
$out .= "<error>No login required for HTTP authentication</error>\n";
} else {
  if ( ! empty ( 
$login ) && ! empty ( $password ) ) {
    
$login trim $login );
    if ( 
user_valid_login $login$password ) ) {
      
user_load_variables $login"" );
      
// set login to expire in 365 days
      
srand((double) microtime() * 1000000);
      
$salt chrrand(ord('A'), ord('z'))) . chrrand(ord('A'), ord('z')));
      
$encoded_login encode_string $login "|" crypt($password$salt) );
      
//SetCookie ( "webcalendar_session", $encoded_login, 0, $cookie_path );
      
$out .= "  <cookieName>webcalendar_session</cookieName>\n";
      
$out .= "  <cookieValue>$encoded_login</cookieValue>\n";
      if ( 
$is_admin )
        
$out .= "  <admin>1</admin>\n";
    } else {
      
$out .= "  <error>Invalid login</error>\n";
    }
  }
}

echo 
$out;
echo 
"</login>\n";
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--