!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/version_client/system/libraries/   drwxr-xr-x
Free 50.94 GB of 127.8 GB (39.86%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     Profiler.php (15.15 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php  if ( ! defined('BASEPATH')) exit('No direct script access allowed');
/**
 * CodeIgniter
 *
 * An open source application development framework for PHP 5.1.6 or newer
 *
 * @package        CodeIgniter
 * @author        ExpressionEngine Dev Team
 * @copyright    Copyright (c) 2008 - 2011, EllisLab, Inc.
 * @license        http://codeigniter.com/user_guide/license.html
 * @link        http://codeigniter.com
 * @since        Version 1.0
 * @filesource
 */

// ------------------------------------------------------------------------

/**
 * CodeIgniter Profiler Class
 *
 * This class enables you to display benchmark, query, and other data
 * in order to help with debugging and optimization.
 *
 * Note: At some point it would be good to move all the HTML in this class
 * into a set of template files in order to allow customization.
 *
 * @package        CodeIgniter
 * @subpackage    Libraries
 * @category    Libraries
 * @author        ExpressionEngine Dev Team
 * @link        http://codeigniter.com/user_guide/general/profiling.html
 */
class CI_Profiler {

    var 
$CI;

    protected 
$_available_sections = array(
                                        
'benchmarks',
                                        
'get',
                                        
'memory_usage',
                                        
'post',
                                        
'uri_string',
                                        
'controller_info',
                                        
'queries',
                                        
'http_headers',
                                        
'config'
                                        
);

    public function 
__construct($config = array())
    {
        
$this->CI =& get_instance();
        
$this->CI->load->language('profiler');

        
// default all sections to display
        
foreach ($this->_available_sections as $section)
        {
            if ( ! isset(
$config[$section]))
            {
                
$this->_compile_{$section} = TRUE;
            }
        }

        
$this->set_sections($config);
    }

    
// --------------------------------------------------------------------

    /**
     * Set Sections
     *
     * Sets the private _compile_* properties to enable/disable Profiler sections
     *
     * @param    mixed
     * @return    void
     */
    
public function set_sections($config)
    {
        foreach (
$config as $method => $enable)
        {
            if (
in_array($method$this->_available_sections))
            {
                
$this->_compile_{$method} = ($enable !== FALSE) ? TRUE FALSE;
            }
        }
    }

    
// --------------------------------------------------------------------

    /**
     * Auto Profiler
     *
     * This function cycles through the entire array of mark points and
     * matches any two points that are named identically (ending in "_start"
     * and "_end" respectively).  It then compiles the execution times for
     * all points and returns it as an array
     *
     * @return    array
     */
    
protected function _compile_benchmarks()
    {
        
$profile = array();
        foreach (
$this->CI->benchmark->marker as $key => $val)
        {
            
// We match the "end" marker so that the list ends
            // up in the order that it was defined
            
if (preg_match("/(.+?)_end/i"$key$match))
            {
                if (isset(
$this->CI->benchmark->marker[$match[1].'_end']) AND isset($this->CI->benchmark->marker[$match[1].'_start']))
                {
                    
$profile[$match[1]] = $this->CI->benchmark->elapsed_time($match[1].'_start'$key);
                }
            }
        }

        
// Build a table containing the profile data.
        // Note: At some point we should turn this into a template that can
        // be modified.  We also might want to make this data available to be logged

        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_benchmarks" style="border:1px solid #900;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#900;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_benchmarks').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";
        
$output .= "\n\n<table style='width:100%'>\n";

        foreach (
$profile as $key => $val)
        {
            
$key ucwords(str_replace(array('_''-'), ' '$key));
            
$output .= "<tr><td style='padding:5px;width:50%;color:#000;font-weight:bold;background-color:#ddd;'>".$key."&nbsp;&nbsp;</td><td style='padding:5px;width:50%;color:#900;font-weight:normal;background-color:#ddd;'>".$val."</td></tr>\n";
        }

        
$output .= "</table>\n";
        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Compile Queries
     *
     * @return    string
     */
    
protected function _compile_queries()
    {
        
$dbs = array();

        
// Let's determine which databases are currently connected to
        
foreach (get_object_vars($this->CI) as $CI_object)
        {
            if (
is_object($CI_object) && is_subclass_of(get_class($CI_object), 'CI_DB') )
            {
                
$dbs[] = $CI_object;
            }
        }

        if (
count($dbs) == 0)
        {
            
$output  "\n\n";
            
$output .= '<fieldset id="ci_profiler_queries" style="border:1px solid #0000FF;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
            
$output .= "\n";
            
$output .= '<legend style="color:#0000FF;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_queries').'&nbsp;&nbsp;</legend>';
            
$output .= "\n";
            
$output .= "\n\n<table style='border:none; width:100%'>\n";
            
$output .="<tr><td style='width:100%;color:#0000FF;font-weight:normal;background-color:#eee;padding:5px'>".$this->CI->lang->line('profiler_no_db')."</td></tr>\n";
            
$output .= "</table>\n";
            
$output .= "</fieldset>";

            return 
$output;
        }

        
// Load the text helper so we can highlight the SQL
        
$this->CI->load->helper('text');

        
// Key words we want bolded
        
$highlight = array('SELECT''DISTINCT''FROM''WHERE''AND''LEFT&nbsp;JOIN''ORDER&nbsp;BY''GROUP&nbsp;BY''LIMIT''INSERT''INTO''VALUES''UPDATE''OR&nbsp;''HAVING''OFFSET''NOT&nbsp;IN''IN''LIKE''NOT&nbsp;LIKE''COUNT''MAX''MIN''ON''AS''AVG''SUM''('')');

        
$output  "\n\n";

        foreach (
$dbs as $db)
        {
            
$output .= '<fieldset style="border:1px solid #0000FF;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
            
$output .= "\n";
            
$output .= '<legend style="color:#0000FF;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_database').':&nbsp; '.$db->database.'&nbsp;&nbsp;&nbsp;'.$this->CI->lang->line('profiler_queries').': '.count($db->queries).'&nbsp;&nbsp;&nbsp;</legend>';
            
$output .= "\n";
            
$output .= "\n\n<table style='width:100%;'>\n";

            if (
count($db->queries) == 0)
            {
                
$output .= "<tr><td style='width:100%;color:#0000FF;font-weight:normal;background-color:#eee;padding:5px;'>".$this->CI->lang->line('profiler_no_queries')."</td></tr>\n";
            }
            else
            {
                foreach (
$db->queries as $key => $val)
                {
                    
$time number_format($db->query_times[$key], 4);

                    
$val highlight_code($valENT_QUOTES);

                    foreach (
$highlight as $bold)
                    {
                        
$val str_replace($bold'<strong>'.$bold.'</strong>'$val);
                    }

                    
$output .= "<tr><td style='padding:5px; vertical-align: top;width:1%;color:#900;font-weight:normal;background-color:#ddd;'>".$time."&nbsp;&nbsp;</td><td style='padding:5px; color:#000;font-weight:normal;background-color:#ddd;'>".$val."</td></tr>\n";
                }
            }

            
$output .= "</table>\n";
            
$output .= "</fieldset>";

        }

        return 
$output;
    }


    
// --------------------------------------------------------------------

    /**
     * Compile $_GET Data
     *
     * @return    string
     */
    
protected function _compile_get()
    {
        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_get" style="border:1px solid #cd6e00;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#cd6e00;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_get_data').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";

        if (
count($_GET) == 0)
        {
            
$output .= "<div style='color:#cd6e00;font-weight:normal;padding:4px 0 4px 0'>".$this->CI->lang->line('profiler_no_get')."</div>";
        }
        else
        {
            
$output .= "\n\n<table style='width:100%; border:none'>\n";

            foreach (
$_GET as $key => $val)
            {
                if ( ! 
is_numeric($key))
                {
                    
$key "'".$key."'";
                }

                
$output .= "<tr><td style='width:50%;color:#000;background-color:#ddd;padding:5px'>&#36;_GET[".$key."]&nbsp;&nbsp; </td><td style='width:50%;padding:5px;color:#cd6e00;font-weight:normal;background-color:#ddd;'>";
                if (
is_array($val))
                {
                    
$output .= "<pre>" htmlspecialchars(stripslashes(print_r($valtrue))) . "</pre>";
                }
                else
                {
                    
$output .= htmlspecialchars(stripslashes($val));
                }
                
$output .= "</td></tr>\n";
            }

            
$output .= "</table>\n";
        }
        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Compile $_POST Data
     *
     * @return    string
     */
    
protected function _compile_post()
    {
        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_post" style="border:1px solid #009900;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#009900;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_post_data').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";

        if (
count($_POST) == 0)
        {
            
$output .= "<div style='color:#009900;font-weight:normal;padding:4px 0 4px 0'>".$this->CI->lang->line('profiler_no_post')."</div>";
        }
        else
        {
            
$output .= "\n\n<table style='width:100%'>\n";

            foreach (
$_POST as $key => $val)
            {
                if ( ! 
is_numeric($key))
                {
                    
$key "'".$key."'";
                }

                
$output .= "<tr><td style='width:50%;padding:5px;color:#000;background-color:#ddd;'>&#36;_POST[".$key."]&nbsp;&nbsp; </td><td style='width:50%;padding:5px;color:#009900;font-weight:normal;background-color:#ddd;'>";
                if (
is_array($val))
                {
                    
$output .= "<pre>" htmlspecialchars(stripslashes(print_r($valTRUE))) . "</pre>";
                }
                else
                {
                    
$output .= htmlspecialchars(stripslashes($val));
                }
                
$output .= "</td></tr>\n";
            }

            
$output .= "</table>\n";
        }
        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Show query string
     *
     * @return    string
     */
    
protected function _compile_uri_string()
    {
        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_uri_string" style="border:1px solid #000;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#000;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_uri_string').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";

        if (
$this->CI->uri->uri_string == '')
        {
            
$output .= "<div style='color:#000;font-weight:normal;padding:4px 0 4px 0'>".$this->CI->lang->line('profiler_no_uri')."</div>";
        }
        else
        {
            
$output .= "<div style='color:#000;font-weight:normal;padding:4px 0 4px 0'>".$this->CI->uri->uri_string."</div>";
        }

        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Show the controller and function that were called
     *
     * @return    string
     */
    
protected function _compile_controller_info()
    {
        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_controller_info" style="border:1px solid #995300;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#995300;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_controller_info').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";

        
$output .= "<div style='color:#995300;font-weight:normal;padding:4px 0 4px 0'>".$this->CI->router->fetch_class()."/".$this->CI->router->fetch_method()."</div>";

        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Compile memory usage
     *
     * Display total used memory
     *
     * @return    string
     */
    
protected function _compile_memory_usage()
    {
        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_memory_usage" style="border:1px solid #5a0099;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#5a0099;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_memory_usage').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";

        if (
function_exists('memory_get_usage') && ($usage memory_get_usage()) != '')
        {
            
$output .= "<div style='color:#5a0099;font-weight:normal;padding:4px 0 4px 0'>".number_format($usage).' bytes</div>';
        }
        else
        {
            
$output .= "<div style='color:#5a0099;font-weight:normal;padding:4px 0 4px 0'>".$this->CI->lang->line('profiler_no_memory_usage')."</div>";
        }

        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Compile header information
     *
     * Lists HTTP headers
     *
     * @return    string
     */
    
protected function _compile_http_headers()
    {
        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_http_headers" style="border:1px solid #000;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#000;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_headers').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";

        
$output .= "\n\n<table style='width:100%'>\n";

        foreach (array(
'HTTP_ACCEPT''HTTP_USER_AGENT''HTTP_CONNECTION''SERVER_PORT''SERVER_NAME''REMOTE_ADDR''SERVER_SOFTWARE''HTTP_ACCEPT_LANGUAGE''SCRIPT_NAME''REQUEST_METHOD',' HTTP_HOST''REMOTE_HOST''CONTENT_TYPE''SERVER_PROTOCOL''QUERY_STRING''HTTP_ACCEPT_ENCODING''HTTP_X_FORWARDED_FOR') as $header)
        {
            
$val = (isset($_SERVER[$header])) ? $_SERVER[$header] : '';
            
$output .= "<tr><td style='vertical-align: top;width:50%;padding:5px;color:#900;background-color:#ddd;'>".$header."&nbsp;&nbsp;</td><td style='width:50%;padding:5px;color:#000;background-color:#ddd;'>".$val."</td></tr>\n";
        }

        
$output .= "</table>\n";
        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Compile config information
     *
     * Lists developer config variables
     *
     * @return    string
     */
    
protected function _compile_config()
    {
        
$output  "\n\n";
        
$output .= '<fieldset id="ci_profiler_config" style="border:1px solid #000;padding:6px 10px 10px 10px;margin:20px 0 20px 0;background-color:#eee">';
        
$output .= "\n";
        
$output .= '<legend style="color:#000;">&nbsp;&nbsp;'.$this->CI->lang->line('profiler_config').'&nbsp;&nbsp;</legend>';
        
$output .= "\n";

        
$output .= "\n\n<table style='width:100%'>\n";

        foreach (
$this->CI->config->config as $config=>$val)
        {
            if (
is_array($val))
            {
                
$val print_r($valTRUE);
            }

            
$output .= "<tr><td style='padding:5px; vertical-align: top;color:#900;background-color:#ddd;'>".$config."&nbsp;&nbsp;</td><td style='padding:5px; color:#000;background-color:#ddd;'>".htmlspecialchars($val)."</td></tr>\n";
        }

        
$output .= "</table>\n";
        
$output .= "</fieldset>";

        return 
$output;
    }

    
// --------------------------------------------------------------------

    /**
     * Run the Profiler
     *
     * @return    string
     */
    
public function run()
    {
        
$output "<div id='codeigniter_profiler' style='clear:both;background-color:#fff;padding:10px;'>";
        
$fields_displayed 0;

        foreach (
$this->_available_sections as $section)
        {
            if (
$this->_compile_{$section} !== FALSE)
            {
                
$func "_compile_{$section}";
                
$output .= $this->{$func}();
                
$fields_displayed++;
            }
        }

        if (
$fields_displayed == 0)
        {
            
$output .= '<p style="border:1px solid #5a0099;padding:10px;margin:20px 0;background-color:#eee">'.$this->CI->lang->line('profiler_no_profiles').'</p>';
        }

        
$output .= '</div>';

        return 
$output;
    }

}

// END CI_Profiler class

/* End of file Profiler.php */
/* Location: ./system/libraries/Profiler.php */

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0337 ]--