AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Редактирование файла

<?php
include("include/config.php");
include("include/connect.php");
include("include/function.php");
//require_once('PHPMailer/class.phpmailer.php');
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="content-language" content="th" />
<title>аёЃаёЈаё°а№Ђаё—аёў аёЃаё°а№Ђаё—аёў аё«аёІа№Ђаёћаё·а№€аёаё™аёЃаёЈаё°а№Ђаё—аёў</title>
<link type="text/css" rel="stylesheet" href="css/msngaythai.css" />
<link type="text/css" rel="stylesheet" href="css/myStyle.css" />
<script type="text/javascript" src="/src/jquery-1.4.2.min.js"></script>
<script type="text/javascript" src="/src/jquery.timers.js"></script>
<script type="text/javascript" src="/Scripts/AC_RunActiveContent.js"></script>
<script type="text/javascript" src="/src/jscript.js"></script>
<style type="text/css">

</style>
</head>
<body><?php
if ($_POST['bSubmitForget'] <> '') {
	
	$sql = "
		SELECT username, password 
		FROM member
		WHERE email = '".$_POST['femail']."'
	";
	$query = sql_query($sql);
	if (sql_num_rows($query) > 0) {
		$rec = sql_fetch_array($query);
		$username = $rec['username'];
		$password = base64_decode($rec['password']);
		
		$to  = $_POST['femail'];
		$subject = 'а№Ѓаё€а№‰аё‡аёЈаё«аё±аёЄаёња№€аёІаё™ '.$webmasterName;
		$message = 'аё—а№€аёІаё™аёЄаёІаёЎаёІаёЈаё–а№Ђаё‚а№‰аёІа№ѓаёЉа№‰аё‡аёІаё™ MSN Ladyboy dot Com а№„аё”а№‰а№‚аё”аёўа№ѓаёЉа№‰аё‚а№‰аёаёЎаё№аёҐаё”аё±аё‡аё™аёµа№‰аё„аёЈаё±аёљ<br />';
		$message.= '<br />';
		$message.= 'а№Ђаё‚а№‰аёІаёЄаё№а№€аёЈаё°аёљаёљ <a href="'.$configWebsiteName.$configMyFileFirstPage.'?a='.addslashes(base64_encode('123456')).'">аёЃаёЈаёёаё“аёІаё„аёҐаёґа№ЉаёЃ</a><br />';
		$message.= '<strong>Username :</strong> '.$username.'<br />';
		$message.= '<strong>Password :</strong> '.$password.'<br />';
		$message.= '<br />';
		$message.= 'аё”а№‰аё§аёўаё„аё§аёІаёЎа№Ђаё„аёІаёЈаёћаёаёўа№€аёІаё‡аёЄаё№аё‡<br />';
		$message.= 'MSN Lady Boy dot Com<br />';
		$message.= $configWebsiteName;
		
			$fromname = $webmasterName;
			$frommail = $webmasterMail;
			
			sendMailEncode($to, $fromname, $frommail, $subject, $message, $cType='html',$CC="",$BCC="",$attach="",$attach_name="");
			//sendMailFactory($to, $frommail, $subject, $message, $attchPath, $attchName, $replyTo, $includeFileMail);
			
		?>
			<script language="javascript">
				alert('аёЈаё«аё±аёЄаёња№€аёІаё™аё‚аёаё‡аё—а№€аёІаё™а№„аё”а№‰аё–аё№аёЃаёЄа№€аё‡а№„аё›аёўаё±аё‡ Email : <?php echo $to?> а№ЂаёЈаёµаёўаёљаёЈа№‰аёаёўа№ЃаёҐа№‰аё§аё„аёЈаё±аёљ\nаёЃаёЈаёёаё“аёІаё•аёЈаё§аё€аёЄаёаёља№ѓаё™ Junk Box а№ЃаёҐаё° Spam Box аё”а№‰аё§аёўаё„аёЈаё±аёљ');
				window.close();
			</script>
		<?php
		exit();
	} else {
		?>
        	<script language="javascript">
				alert('а№„аёЎа№€аёћаёљ Email аё‚аёаё‡аё„аёёаё“\nаёЃаёЈаёёаё“аёІаё•аёЈаё§аё€аёЄаёаёљ Email аё‚аёаё‡аё„аёёаё“а№ѓаё«а№‰аё–аё№аёЃаё•а№‰аёаё‡');
			</script>
        <?php
		exit();
	} // end if (sql_num_rows($query) > 0) {

} // end if ($_POST['bSubmitForget'] <> '') {

?>
<form id="form1" name="form1" method="post" action="" onsubmit="return checkMemberForget()">
<div style="padding:100px 0 0 25px;"><table width="480" border="0" cellpadding="0" cellspacing="2">
    <td width="218"  valign="top" nowrap="nowrap" class="style8">аёЃаёЈаёёаё“аёІа№ѓаёЄа№€ Email аё—аёµа№€а№ѓаёЉа№‰а№ѓаё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈ</td>
    <td  valign="top" width="256"><input type="text" name="femail" id="femail" value="<?php echo $_POST['femail']?>"/></td>
  </tr>
    <tr>
      <td  valign="top" class="fontBold1">&nbsp;</td>
      <td  valign="top"><input type="text" name="textfield1" id="textfield1" value="" style="display:none"/></td>
    </tr>
    <tr>
      <td  valign="top" class="fontBold1">&nbsp;</td>
      <td  valign="top"><input type="submit" name="bSubmitForget" id="bSubmitForget" value=" аё•аёЃаёҐаё‡ " /></td>
    </tr>
</table>
</div>
</form>
</body>
</html>
<script language="javascript">
	$('#femail').focus();
</script>

Rename: -