!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/reportEregis111/examples/   drwxr-xr-x
Free 51.01 GB of 127.8 GB (39.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     html5.php (7.57 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
use PFBCForm;
use 
PFBCElement;

session_start();
error_reporting(E_ALL);
include(
"../PFBC/Form.php");

if(isset(
$_POST["form"])) {
    
Form::isValid($_POST["form"]);
    
header("Location: " $_SERVER["PHP_SELF"]);
    exit();    
}

include(
"../header.php");
$version file_get_contents("../version");
?>

<div class="page-header">
    <h1>HTML5</h1>
</div>

<p>PFBC has support for 13 HTML5 form elements: Phone, Search, Url, Email, DateTime, Date, 
Month, Week, Time, DateTimeLocal, Number, Range, and Color.  Each of these fallback to textboxes
in the event that the HTML5 input type isn't supported in the user's web browser.  HTML5 attributes
can also be applied to elements for client-side validation.</p>

<?php
$form 
= new Form("html5");
$form->configure(array(
    
"prevent" => array("bootstrap""jQuery")
));
$form->addElement(new ElementHidden("form""html5"));
$form->addElement(new ElementHTML('<legend>Attributes</legend>'));
$form->addElement(new ElementTextbox("Required Attribute:""Required", array(
    
"required" => 1
    
"shortDesc" => "Highlights field in red when focussed"
)));
$form->addElement(new ElementTextbox("Placeholder Attribute:""Placeholder", array(
    
"placeholder" => "my placeholder",
    
"shortDesc" => "Provides example or hint",
    
"longDesc" => "The form's labelToPlaceholder property can be used to convert each element's 
    label to its placeholder.  This strategy keeps your php source cleaner when building forms.  
    Check out the <a href=\"views.php\">Vertical View</a> example to see the labelToPlaceholder 
    property in action."
)));
$form->addElement(new ElementTextbox("Pattern Attributes:""Pattern", array(
    
"pattern" => "^pfbc.*",
    
"title" => "Must start with \"pfbc\"",
    
"shortDesc" => "Provides native, client-side validation",
    
"longDesc" => "This input's pattern attribute is set to the following regular expression: ^pfbc.*"
)));
$form->addElement(new ElementHTML('<legend>Elements</legend>'));
$form->addElement(new ElementPhone("Phone:""Phone"));
$form->addElement(new ElementSearch("Search:""Search"));
$form->addElement(new ElementUrl("Url:""Url"));
$form->addElement(new ElementEmail("Email:""Email"));
$form->addElement(new ElementDateTime("DateTime:""DateTime"));
$form->addElement(new ElementDate("Date:""Date"));
$form->addElement(new ElementMonth("Month:""Month"));
$form->addElement(new ElementWeek("Week:""Week"));
$form->addElement(new ElementTime("Time:""Time"));
$form->addElement(new ElementDateTimeLocal("DateTime-Local:""DateTimeLocal"));
$form->addElement(new ElementNumber("Number:""Number"));
$form->addElement(new ElementRange("Range:""Range"));
$form->addElement(new ElementColor("Color:""Color"));
$form->addElement(new ElementButton);
$form->addElement(new ElementButton("Cancel""button", array(
    
"onclick" => "history.go(-1);"
)));
$form->render();
?>

<ul class="nav nav-tabs">
    <li class="active"><a href="#php53" data-toggle="tab">PFBC <?php echo $version?> (PHP 5 >= 5.3.0)</a></li>
    <li><a href="#php5" data-toggle="tab">PFBC <?php echo $version?> (PHP 5)</a></li>
</ul>

<div class="tab-content">
    <div id="php53" class="tab-pane active">

<?php
prettyprint
('<?php
use PFBC\Form;
use PFBC\Element;

include("PFBC/Form.php");
$form = new Form("html5");
$form->configure(array(
    "prevent" => array("bootstrap", "jQuery")
));
$form->addElement(new Element\Hidden("form", "html5"));
$form->addElement(new Element\HTML(\'<legend>Attributes</legend>\'));
$form->addElement(new Element\Textbox("Required Attribute:", "Required", array(
    "required" => 1, 
    "shortDesc" => "Highlights field in red when focussed"
)));
$form->addElement(new Element\Textbox("Placeholder Attribute:", "Placeholder", array(
    "placeholder" => "my placeholder",
    "shortDesc" => "Provides example or hint",
    "longDesc" => "The form\'s labelToPlaceholder property can be used to convert each element\'s label to its placeholder.  This strategy keeps your php source cleaner when building forms.  Check out the <a href=\"views.php\">Vertical View</a> example to see the labelToPlaceholder property in action."
)));
$form->addElement(new Element\Textbox("Pattern Attributes:", "Pattern", array(
    "pattern" => "^pfbc.*",
    "title" => "Must start with \"pfbc\"",
    "shortDesc" => "Provides native, client-side validation",
    "longDesc" => "This input\'s pattern attribute is set to the following regular expression: ^pfbc.*"
)));
$form->addElement(new Element\HTML(\'<legend>Elements</legend>\'));
$form->addElement(new Element\Phone("Phone:", "Phone"));
$form->addElement(new Element\Search("Search:", "Search"));
$form->addElement(new Element\Url("Url:", "Url"));
$form->addElement(new Element\Email("Email:", "Email"));
$form->addElement(new Element\DateTime("DateTime:", "DateTime"));
$form->addElement(new Element\Date("Date:", "Date"));
$form->addElement(new Element\Month("Month:", "Month"));
$form->addElement(new Element\Week("Week:", "Week"));
$form->addElement(new Element\Time("Time:", "Time"));
$form->addElement(new Element\DateTimeLocal("DateTime-Local:", "DateTimeLocal"));
$form->addElement(new Element\Number("Number:", "Number"));
$form->addElement(new Element\Range("Range:", "Range"));
$form->addElement(new Element\Color("Color:", "Color"));
$form->addElement(new Element\Button);
$form->addElement(new Element\Button("Cancel", "button", array(
    "onclick" => "history.go(-1);"
)));
$form->render();'
);
?>

    </div>
    <div id="php5" class="tab-pane">

<?php
prettyprint
('<?php
include("PFBC/Form.php");
$form = new Form("html5");
$form->configure(array(
    "prevent" => array("bootstrap", "jQuery")
));
$form->addElement(new Element_Hidden("form", "html5"));
$form->addElement(new Element_HTML(\'<legend>Attributes</legend>\'));
$form->addElement(new Element_Textbox("Required Attribute:", "Required", array(
    "required" => 1, 
    "shortDesc" => "Highlights field in red when focussed"
)));
$form->addElement(new Element_Textbox("Placeholder Attribute:", "Placeholder", array(
    "placeholder" => "my placeholder",
    "shortDesc" => "Provides example or hint",
    "longDesc" => "The form\'s labelToPlaceholder property can be used to convert each element\'s label to its placeholder.  This strategy keeps your php source cleaner when building forms.  Check out the <a href=\"views.php\">Vertical View</a> example to see the labelToPlaceholder property in action."
)));
$form->addElement(new Element_Textbox("Pattern Attributes:", "Pattern", array(
    "pattern" => "^pfbc.*",
    "title" => "Must start with \"pfbc\"",
    "shortDesc" => "Provides native, client-side validation",
    "longDesc" => "This input\'s pattern attribute is set to the following regular expression: ^pfbc.*"
)));
$form->addElement(new Element_HTML(\'<legend>Elements</legend>\'));
$form->addElement(new Element_Phone("Phone:", "Phone"));
$form->addElement(new Element_Search("Search:", "Search"));
$form->addElement(new Element_Url("Url:", "Url"));
$form->addElement(new Element_Email("Email:", "Email"));
$form->addElement(new Element_DateTime("DateTime:", "DateTime"));
$form->addElement(new Element_Date("Date:", "Date"));
$form->addElement(new Element_Month("Month:", "Month"));
$form->addElement(new Element_Week("Week:", "Week"));
$form->addElement(new Element_Time("Time:", "Time"));
$form->addElement(new Element_DateTimeLocal("DateTime-Local:", "DateTimeLocal"));
$form->addElement(new Element_Number("Number:", "Number"));
$form->addElement(new Element_Range("Range:", "Range"));
$form->addElement(new Element_Color("Color:", "Color"));
$form->addElement(new Element_Button);
$form->addElement(new Element_Button("Cancel", "button", array(
    "onclick" => "history.go(-1);"
)));
$form->render();'
);
?>

    </div>
</div>    

<?php
include("../footer.php");

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0185 ]--