!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\xampp\xampp\phpMyAdmin\   drwxrwxrwx
Free 10.1 GB of 239.26 GB (4.22%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     bs_change_mime_type.php (4.25 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
    /**
     * @author      Raj Kissu Rajandran
     * @version     1.0
     * @package     BLOBStreaming
     */

    /**
     * Core library.
     */
    
require_once './libraries/common.inc.php';

    
/**
     * @var     string  contains database name
     */
    
$bsDB = isset($_REQUEST['bs_db']) ? urldecode($_REQUEST['bs_db']) : NULL;

    
/**
     * @var     string  contains table name
     */
    
$bsTable = isset($_REQUEST['bs_table']) ? urldecode($_REQUEST['bs_table']) : NULL;

    
/**
     * @var     string  contains BLOB reference
     */
    
$bsReference = isset($_REQUEST['bs_reference']) ? urldecode($_REQUEST['bs_reference']) : NULL;

    
/**
     * @var     string  contains MIME type
     */
    
$bsNewMIMEType = isset($_REQUEST['bs_new_mime_type']) ? urldecode($_REQUEST['bs_new_mime_type']) : NULL;

    
// necessary variables exist
    
if ($bsDB && $bsTable && $bsReference && $bsNewMIMEType)
    {
        
// load PMA configuration
        
$PMA_Config $_SESSION['PMA_Config'];

        
// if PMA configuration exists
        
if (!empty($PMA_Config))
        {
            
// if BS plugins exist
            
if ($PMA_Config->get('BLOBSTREAMING_PLUGINS_EXIST'))
            {
                
$pbms_ref_tbl $PMA_Config->get('PBMS_NAME') . '_reference';
                
$pbms_cust_content_type_tbl $PMA_Config->get('PBMS_NAME') . '_custom_content_type';

                
// if specified DB is selected
                
if (PMA_DBI_select_db($bsDB))
                {
                    
$query "SELECT * FROM " PMA_backquote($pbms_ref_tbl);
                    
$query .= " WHERE Blob_url='" PMA_sqlAddslashes($bsReference) . "'";

                    
$result PMA_DBI_query($query);

                    
// if record exists
                    
if ($data PMA_DBI_fetch_assoc($result))
                    {
                        
$query "SELECT count(*) FROM " PMA_backquote($pbms_cust_content_type_tbl);
            
$query .= " WHERE Blob_url='" PMA_sqlAddslashes($bsReference) . "'";

                        
$result PMA_DBI_query($query);

                        
// if record exists
                        
if ($data PMA_DBI_fetch_assoc($result))
                        {
                            if (
== $data['count(*)'])
                            {
                                
$query "UPDATE " PMA_backquote($pbms_cust_content_type_tbl) . " SET Content_type='";
                                
$query .= PMA_sqlAddslashes($bsNewMIMEType) . "' WHERE Blob_url='" PMA_sqlAddslashes($bsReference) . "'";
                            }
                            else
                            {
                                
$query "INSERT INTO " PMA_backquote($pbms_cust_content_type_tbl) . " (Blob_url, Content_type)";
                                
$query .= " VALUES('" PMA_sqlAddslashes($bsReference) . "', '" PMA_sqlAddslashes($bsNewMIMEType) . "')";
                            }

                            
$result PMA_DBI_query($query);

                            
// if query execution succeeded
                            
if ($result)
                            {
                                
// determine redirector page
                                
$newLoc $cfg['PmaAbsoluteUri'] . 'sql.php?' PMA_generate_common_url ('','''&') . (isset($bsDB) ? '&db=' urlencode($bsDB) : '') . (isset($bsTable) ? '&table=' urlencode($bsTable) : '') . (isset($token) ? '&token=' urlencode($token) : '') . (isset($goto) ? '&goto=' urlencode($goto) : '') . '&reload=1&purge=1';

                                
// redirect to specified page
                                
?>
                                <script>
                                    window.location = "<?php echo $newLoc ?>";
                                </script>
                                <?php
                            
// end if ($result)
                        
// end if ($data = PMA_DBI_fetch_assoc($result))
                    
// end if ($data = PMA_DBI_fetch_assoc($result))
                
// end if (PMA_DBI_select_db($bsDB))
            
// end if ($PMA_Config->get('BLOBSTREAMING_PLUGINS_EXIST'))
        
// end if (!empty($PMA_Config))
    
// end if ($bsDB && $bsTable && $bsReference && $bsNewMIMEType)

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--