AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Редактирование файла

<?php
include("include/config.php");
include("include/connect.php");
include("include/function.php");

if ($_POST['delAccount'] == 1) {
	
	@header("Content-Type: text/html; charset=utf-8");
	
	// аёҐаёљ Account аёаёаёЃаё€аёІаёЃ DB
	
	$sql = "
		SELECT image
		FROM member
		WHERE member_id = '" . $_SESSION['s_member_id'] . "'
	";
	$rec = sql_query($sql);
	$image = trim($rec['image']);
	
	if (($image != 'alert.gif') && ($image != '')) {
		
		$imagePath = 'uploads/memberPost/';
		$imagePathFull = 'uploads/memberPost/full/';
		
		@unlink($imagePath.$rec['image']);
		@unlink($imagePathFull.$rec['image_full']);
		
	} // end if (($image != 'alert.gif') && ($image != '')) {
	
	$sql = "
			DELETE FROM member
			WHERE member_id = '" . $_SESSION['s_member_id'] . "'
		";
	sql_query($sql);
		
	$sql = "
		DELETE FROM member_post
		WHERE member_id = '" . $_SESSION['s_member_id'] . "'
	";
	sql_query($sql);
	
	?>
	<script type="text/javascript">
		alert('аёҐаёљаёаёµа№ЂаёЎаёҐа№Њ <?php echo base64_decode($_POST['delEmail'])?> аёаёаёЃаё€аёІаёЃаёљаёаёЈа№Њаё”аё«аёІа№Ђаёћаё·а№€аёаё™а№ЂаёЈаёµаёўаёљаёЈа№‰аёаёўа№ЃаёҐа№‰аё§');
		window.opener.location.reload(true);
		window.close();
	</script>
	<?php
	
	exit();
	
} elseif ($_POST['delMemberId'] != '') { // end if ($_POST['delAccount'] == 1) {
	
	@header("Content-Type: text/html; charset=utf-8");
	
	$del_member_id = base64_decode($_POST['delMemberId']);
	
	if ($_POST['type'] == 'img') {
		
		$conditionType = "
			AND del_type = 8
		";
		
	} else { // end if ($_POST['type'] == 'img') {
		
		$conditionType = "
			AND del_type != 8
		";
		
	} // if ($_POST['type'] == 'img') {
	
	// а№ЂаёЉа№‡аё„аё§а№€аёІа№Ђаё„аёўа№Ѓаё€а№‰аё‡аёҐаёља№„аё›а№ЃаёҐа№‰аё§аё«аёЈаё·аёа№Ђаё›аёҐа№€аёІ а№‚аё”аёўа№ЂаёЉа№‡аё„аё€аёІаёЃ IP
	$sql = "
		SELECT COUNT(alert_date) AS num
		FROM alert_remove
		WHERE del_member_id = '" . $del_member_id . "'
		AND alert_ip = '" . $_SERVER['REMOTE_ADDR'] . "'
		AND alert_new = 0
	";
	$sql .= $conditionType;
	$query = sql_query($sql);
	$rec = sql_fetch_array($query);
	$allRow = $rec['num'];
	
	if ($allRow > 0) {
		
		?>
		<script type="text/javascript">
            alert('а№Ђаё„аёўа№Ѓаё€а№‰аё‡аёҐаёљ <?php echo ($_POST['type'] == 'img') ? 'аёЈаё№аё›аё аёІаёћ' : 'аё‚а№‰аёаё„аё§аёІаёЎ'?> а№ЃаёҐа№‰аё§');
            window.close();
        </script>
        <?php
        
        exit();
		
	} // end if ($allRow > 0) {
		
	
	// аё—аёіаёЃаёІаёЈаёљаё±аё™аё—аё¶аёЃаёЃаёІаёЈа№Ѓаё€а№‰аё‡аёҐаёљ
	
	$nowDate = @date("Y-m-d H:i:s");
	$sql = "
		INSERT INTO alert_remove(alert_date, del_member_id, del_type, del_other, alert_name, alert_email, alert_tel, alert_ip, alert_new)
		VALUES('" . $nowDate . "', '" . $del_member_id . "', '" . $_POST['del_type'] . "', '" . htmlspecialchars($_POST['del_other']) . "', '" . htmlspecialchars($_POST['alert_name']) . "', '" . htmlspecialchars($_POST['alert_email']) . "', '" . htmlspecialchars($_POST['alert_tel']) . "', '" . $_SERVER['REMOTE_ADDR'] . "', 0)
	";
	sql_query($sql);
	$allRow++;
	
	if ($allRow >= $a_configDeleteMessageAlertQty) {
		
		if ($_POST['type'] == 'img') {
			
			// аёЃаёЈаё“аёµаё—аёµа№€а№Ђаё›а№‡аё™аёЃаёІаёЈаёҐаёљ аёЈаё№аё›аё аёІаёћ
			$sql = "
				INSERT INTO member_alarm_image(member_id, alarm_date)
				VALUES('" . $del_member_id . "', '" . $nowDate . "')
			";
			sql_query($sql);
			
			$sql = "UPDATE member SET alarm_image_status = 1, image = 'alert.gif', image_full = 'alert.gif', alarm_image_date = '" . $nowDate . "' WHERE member_id = '" . $del_member_id . "' ";
			sql_query($sql);
			
		} else { // end if ($_POST['type'] == 'img') {
			
			// аёЃаёЈаё“аёµаё—аёµа№€а№Ђаё›а№‡аё™аёЃаёІаёЈаёҐаёљ аё‚а№‰аёаё„аё§аёІаёЎ
			$sql = "DELETE FROM member_post WHERE member_id = '" . $del_member_id . "'";
			sql_query($sql);
			
			$sql = "
				INSERT INTO delete_post(member_id, delete_date)
				VALUES('" . $del_member_id . "', '" . $nowDate . "')
			";
			sql_query($sql);
			
		} // if ($_POST['type'] == 'img') {
		
		$sql = "
			UPDATE alert_remove
			SET alert_new = 1
			WHERE del_member_id = '" . $del_member_id . "'
		";
		$sql .= $conditionType;
		sql_query($sql);
		
	} // end if ($allRow > $a_configDeleteMessageAlertQty) {
	
	?>
	<script type="text/javascript">
		alert('а№Ѓаё€а№‰аё‡аёҐаёљ <?php echo ($_POST['type'] == 'img') ? 'аёЈаё№аё›аё аёІаёћ' : 'аё‚а№‰аёаё„аё§аёІаёЎ'?> а№ЂаёЈаёµаёўаёљаёЈа№‰аёаёўа№ЃаёҐа№‰аё§');
		window.close();
	</script>
	<?php
	
	exit();
	
} // end elseif ($_POST['delMemberId'] != '') {

?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><link rel="shortcut icon" href="favicon.ico" >
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="content-language" content="th" />
<title>аёЃаёЈаё°а№Ђаё—аёў аёЃаё°а№Ђаё—аёў аё«аёІа№Ђаёћаё·а№€аёаё™аё„аёёаёўMsn</title>
<meta name="keywords" content="аёЃаёЈаё°а№Ђаё—аёў, аёЃаё°а№Ђаё—аёў, аё«аёІа№Ђаёћаё·а№€аёаё™аё„аёёаёўMsn">
<meta name="description" content="а№Ђаё§а№‡аёљаё«аёІа№Ђаёћаё·а№€аёаё™ аёЃаё°а№Ђаё—аёў аё‚аёаё‡аёЄаёёаё аёІаёћаёЉаё™ : а№‚аёћаёЄаё•а№ЊаёЈаё№аё›, MSN, BB pin, Hi5, Facebook, Webcam No.1 а№Ђаё§а№‡аёља№„аё‹аё•а№Њаё«аёІа№Ђаёћаё·а№€аёаё™аёЃаёЈаё°а№Ђаё—аёўаё—аёµа№€аё”аёµаё—аёµа№€аёЄаёёаё” & аё—аё±аё™аёЄаёЎаё±аёўаё—аёµа№€аёЄаёёаё”а№ѓаё™аё›аёЈаё°а№Ђаё—аёЁа№„аё—аёў">
<link type="text/css" rel="stylesheet" href="css/ladyboy.css" />
<link type="text/css" rel="stylesheet" href="css/myStyle.css?r=<?php echo time()?>" />
<script type="text/javascript" src="/src/jquery-1.4.2.min.js"></script>
<script type="text/javascript" src="/src/jquery.timers.js"></script>
<script type="text/javascript" src="/Scripts/AC_RunActiveContent.js"></script>
<script type="text/javascript" src="/src/jscript.js?r=<?php echo time()?>"></script>
</head>
<body bgcolor="#000000"><?php

if (($_GET['delId'] != '') && ($_GET['e'] != '')) {
	
	$member_id = base64_decode($_GET['delId']);
	$email = base64_decode($_GET['e']);

?>
<form name="formConfirm" id="formConfirm" method="post" action=""<?php if ($_SESSION['s_member_id'] != $member_id) {?> onSubmit="return checkFromAlertAccount()"<?php }?>>
<input type="hidden" name="delEmail" id="delEmail" value="<?php echo $_GET['e']?>">
<input type="hidden" name="del_type" id="del_type" value="<?php echo ($_GET['type'] == 'img') ? 8 : ''?>">
<input type="hidden" name="type" id="type" value="<?php echo $_GET['type']?>">
<table width="500" border="0" cellspacing="0" cellpadding="0"><?php
	
	if ($_SESSION['s_member_id'] == $member_id) {
		
		// аёЃаёЈаё“аёµаё—аёµа№€а№Ђаё›а№‡аё™а№Ђаё€а№‰аёІаё‚аёаё‡ Account

?>
  <tr>
    <td align="center">
    <div style="padding:30px; line-height:30px;">
    	аё«аёІаёЃаё—а№€аёІаё™аё•а№‰аёаё‡аёЃаёІаёЈаёҐаёљаёаёµа№ЂаёЎаёҐа№Њ<br>
		<?php echo $email?><br>
        аёаёаёЃаё€аёІаёЃаёљаёаёЈа№Њаё”аё«аёІа№Ђаёћаё·а№€аёаё™
    <input type="hidden" name="delAccount" id="delAccount" value="1">
    <br>
    <input type="submit" name="submitConfirm" id="submitConfirm" value="аё„аёҐаёґа№ЉаёЃаё—аёµа№€аё™аёµа№€а№Ђаёћаё·а№€аёаёҐаёљаёаёµа№ЂаёЎаёҐа№Њ" onClick="return confirm('аёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёҐаёљаёаёµа№ЂаёЎаёҐа№Њ <?php echo $email?> аёаёаёЃаё€аёІаёЃаёљаёаёЈа№Њаё”аё«аёІа№Ђаёћаё·а№€аёаё™')">
    </div>
    </td>
  </tr><?php

} else { // end if ($_SESSION['s_member_id'] == $member_id) {
		
		// аёЃаёЈаё“аёµаё—аёµа№€а№„аёЎа№€а№ѓаёЉа№€а№Ђаё€а№‰аёІаё‚аёаё‡ Account
		
		if (($_GET['type'] == 'img') || ($_GET['type'] == 'msg')) {
		
?>
  <tr>
    <td align="center">
    <div style="padding-top:30px; line-height:20px;"><?php
			
			if ($_GET['type'] == 'img') {
				
				$textMessage = 'аёЈаё№аё›аё аёІаёћ';
				
				?><div style="padding:20px;">аё«аёІаёЃаё—а№€аёІаё™аё•а№‰аёаё‡аёЃаёІаёЈа№Ѓаё€а№‰аё‡аёҐаёљаёЈаё№аё›аё™аёµа№‰ аёЃаёЈаёёаё“аёІаёЈаё°аёљаёёаёЈаёІаёўаёҐаё°а№Ђаёаёµаёўаё”</div>
				<?php
				
			} else { // end if ($_GET['type'] == 'img') {
				
				$textMessage = 'аё‚а№‰аёаё„аё§аёІаёЎ';
				
				?>аё«аёІаёЃаё—а№€аёІаё™аё•а№‰аёаё‡аёЃаёІаёЈа№Ѓаё€а№‰аё‡аёҐаёљаё‚а№‰аёаё„аё§аёІаёЎаё™аёµа№‰ аёЃаёЈаёёаё“аёІаёЈаё°аёљаёё<br>
                    аёЄаёІа№Ђаё«аё•аёёаё—аёµа№€аё‚а№‰аёаё„аё§аёІаёЎаё™аёµа№‰а№„аёЎа№€а№Ђаё«аёЎаёІаё°аёЄаёЎ
          <div style="text-align:left; padding-left:110px;">
                    <ul style="list-style:none;"><?php
                    
						foreach ($a_configDeleteMessageType as $key => $value) {
							
							// 8 = а№Ѓаё€а№‰аё‡аёҐаёљаёЈаё№аё›аё аёІаёћ;
							if ($key == 8)
								continue;
					
					?>
                    	<li>
                        	<input type="radio" name="opt_del_type" id="opt_del_type_<?php echo $key;?>" value="<?php echo $key;?>" onClick="setOptDelType($(this).val())">
                            <label for="opt_del_type_<?php echo $key;?>"><?php echo $value;?></label><?php
                            
							if ($key == 7) {
								
								// аёаё·а№€аё™а№†
							
							?>
                            <input type="text" name="del_other" id="del_other" value="" maxlength="250"<?php echo' style="display:none;"'; ?> disabled="disabled"><?php
                            
							} // end if ($key == 7) {
							
							?>
                        </li><?php
                        
						} // end foreach ($a_configDeleteMessageType as $key => $value) {
							
					?>
                    </ul>
                    </div>
				<?php
				
			} // if ($_GET['type'] == 'img') { 
	
	?>
        <div style="padding-left:50px; text-align:left;">
          <table width="100%" border="0" cellspacing="2" cellpadding="0">
            <tr>
              <td width="23%" align="right" valign="top">аёЉаё·а№€аёаёњаё№а№‰а№Ѓаё€а№‰аё‡аёҐаёљ : </td>
              <td width="77%" valign="top"><input type="text" name="alert_name" id="alert_name" maxlength="50" style="width:200px;"></td>
            </tr>
            <tr>
              <td align="right" valign="top">E-mail аёњаё№а№‰а№Ѓаё€а№‰аё‡аёҐаёљ : </td>
              <td valign="top"><input type="text" name="alert_email" id="alert_email" maxlength="50" style="width:200px;">
               <span class="required-field"> *</span></td>
            </tr>
            <tr>
              <td align="right" valign="top">а№ЂаёљаёаёЈа№Ња№‚аё—аёЈаёњаё№а№‰а№Ѓаё€а№‰аё‡аёҐаёљ : </td>
              <td valign="top"><input type="text" name="alert_tel" id="alert_tel" maxlength="50" style="width:200px;"></td>
            </tr>
            <tr>
              <td align="right" valign="top">аёЈаё«аё±аёЄ:</td>
              <td valign="top"><?php
              
			  $h_code = gen_random2(5, 2);
			  
			  ?><img src="include/imgpass.php?str=<?php echo $h_code?>" align="absmiddle">
              	<input type="text" name="s_code" id="s_code" value="" maxlength="5" size="5">
                <input type="hidden" name="h_code" id="h_code" value="<?php echo $h_code?>"></td>
            </tr>
            <tr>
              <td>&nbsp;</td>
              <td>
              <input type="submit" name="submitConfirm2" id="submitConfirm2" value="аё„аёҐаёґа№ЉаёЃаё—аёµа№€аё™аёµа№€а№Ђаёћаё·а№€аёа№Ѓаё€а№‰аё‡аёҐаёљ<?php echo $textMessage;?>">
              <input type="hidden" name="delMemberId" id="delMemberId" value="<?php echo $_GET['delId']?>">
              </td>
            </tr>
          </table>
        </div>
    </div>
    </td>
  </tr><?php
  		
			} // end if (($_GET['type'] == 'img') || ($_GET['type'] == 'msg')) {
		
	} // if ($_SESSION['s_member_id'] == $member_id) {

?>
</table>
</form><?php

} // end if (($_GET['delId'] != '') && ($_GET['e'] != '')) {

?>
</body>
</html>

Rename: -