!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\xampp\xampp\htdocs\xampp\   drwxrwxrwx
Free 8.81 GB of 239.26 GB (3.68%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     phonebook.php (5.56 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
include "langsettings.php";
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
    "http://www.w3.org/TR/html4/loose.dtd">
<html>
    <head>
        <meta name="author" content="Kai Oswald Seidler">
        <link href="xampp.css" rel="stylesheet" type="text/css">
        <title><?php echo $TEXT['phonebook-head']; ?></title>
    </head>

    <body>
        <br><h1><?php echo $TEXT['phonebook-head']; ?></h1>
        <p><?php echo $TEXT['phonebook-text1']; ?></p>
        <p><?php echo $TEXT['phonebook-text2']; ?></p>

        <?php
            
// Copyright (C) 2003 Kai Seidler <oswald@apachefriends.org>
            //
            // This program is free software; you can redistribute it and/or modify
            // it under the terms of the GNU General Public License as published by
            // the Free Software Foundation; either version 2 of the License, or
            // (at your option) any later version.
            //
            // This program is distributed in the hope that it will be useful,
            // but WITHOUT ANY WARRANTY; without even the implied warranty of
            // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
            // GNU General Public License for more details.
            //
            // You should have received a copy of the GNU General Public License
            // along with this program; if not, write to the Free Software
            // Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.

            
if (!($db sqlite_open('sqlite/phonebook''0666'))) {
                echo 
"<h2>".$TEXT['phonebook-error']."</h2>";
                exit;
            }
        
?>

        <h2><?php echo $TEXT['phonebook-head1']; ?></h2>

        <table border="0" cellpadding="0" cellspacing="0">
            <tr bgcolor="#f87820">
                <td><img src="img/blank.gif" alt="" width="10" height="25"></td>
                <td class="tabhead"><img src="img/blank.gif" alt="" width="150" height="6"><br><b><?php echo $TEXT['phonebook-attrib1']; ?></b></td>
                <td class="tabhead"><img src="img/blank.gif" alt="" width="150" height="6"><br><b><?php echo $TEXT['phonebook-attrib2']; ?></b></td>
                <td class="tabhead"><img src="img/blank.gif" alt="" width="150" height="6"><br><b><?php echo $TEXT['phonebook-attrib3']; ?></b></td>
                <td class="tabhead"><img src="img/blank.gif" alt="" width="50" height="6"><br><b><?php echo $TEXT['phonebook-attrib4']; ?></b></td>
                <td><img src="img/blank.gif" alt="" width="10" height="25"></td>
            </tr>

            <?php
                $firstname 
sqlite_escape_string($_REQUEST['firstname']);
                
$lastname sqlite_escape_string($_REQUEST['lastname']);
                
$phone sqlite_escape_string($_REQUEST['phone']);

                if (
$firstname != "") {
                    
sqlite_query($db,"INSERT INTO users (firstname,lastname,phone) VALUES('$firstname','$lastname','$phone')");
                }

                if (
$_REQUEST['action'] == "del"){
                    
$id intval($_REQUEST['id']);
                    
sqlite_query($db,"DELETE FROM users WHERE id=$id;");
                }

                
$result sqlite_query($db,"SELECT id,firstname,lastname,phone FROM users ORDER BY lastname");

                
$i 0;
                while (
$row sqlite_fetch_array($result)) {
                    if (
$i 0) {
                        echo 
"<tr valign='bottom'>";
                        echo 
"<td bgcolor='#ffffff' height='1' style='background-image:url(img/strichel.gif)' colspan='6'></td>";
                        echo 
"</tr>";
                    }
                    echo 
"<tr valign='middle'>";
                    echo 
"<td class='tabval'><img src='img/blank.gif' alt='' width='10' height='20'></td>";
                    echo 
"<td class='tabval'><b>".htmlspecialchars($row['lastname'])."</b>&nbsp;</td>";
                    echo 
"<td class='tabval'>".htmlspecialchars($row['firstname'])."&nbsp;</td>";
                    echo 
"<td class='tabval'>".htmlspecialchars($row['phone'])."&nbsp;</td>";

                    echo 
"<td class='tabval'><a onclick=\"return confirm('".$TEXT['phonebook-sure']."');\" href='phonebook.php?action=del&amp;id=".$row['id']."'><span class='red'>[".$TEXT['phonebook-button1']."]</span></a></td>";
                    echo 
"<td class='tabval'></td>";
                    echo 
"</tr>";
                    
$i++;
                }

                echo 
"<tr valign='bottom'>";
                echo 
"<td bgcolor='#fb7922' colspan='6'><img src='img/blank.gif' alt='' width='1' height='8'></td>";
                echo 
"</tr>";

                
sqlite_close($db);
            
?>
        </table>

        <h2><?php echo $TEXT['phonebook-head2']; ?></h2>

        <form action="<?php echo basename($_SERVER['PHP_SELF']); ?>" method="get">
            <table border="0" cellpadding="0" cellspacing="0">
                <tr><td><?php echo $TEXT['phonebook-attrib1']; ?>:</td><td><input type="text" size="20" name="lastname"></td></tr>
                <tr><td><?php echo $TEXT['phonebook-attrib2']; ?>:</td><td> <input type="text" size="20" name="firstname"></td></tr>
                <tr><td><?php echo $TEXT['phonebook-attrib3']; ?>:</td><td> <input type="text" size="20" name="phone"></td></tr>
                <tr><td>&nbsp;</td><td><input type="submit" value="<?php echo $TEXT['phonebook-button2']; ?>"></td></tr>
            </table>
        </form>
        <?php include 'showcode.php'?>
    </body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0156 ]--