AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Редактирование файла

<?php
include("include/config.php");
include("include/connect.php");
include("include/function.php");
header("Content-Type: text/html; charset=utf-8");
include("include/blockMember.php");

if ($_POST['bMemberEdit'] <> '') {

/*if (isset($_COOKIE["$configCookieNameBan"])) {
	?>
		<script language="javascript">
			alert('IP аё™аёµа№‰аё–аё№аёЃ Ban а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЈаё°аёљаёља№„аё”а№‰');
			window.location = '<?php echo $configMyFileFirstPage?>';
		</script>	
	<?php
		exit();
	}*/

/*if (!checkBandIP($_SERVER['REMOTE_ADDR'])) {
	
		setcookie($configCookieNameBan, 'Ban', time()+3600*60*24*30*3);
		?>
        <script language="javascript">
			alert('IP аё™аёµа№‰аё–аё№аёЃ Ban а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЈаё°аёљаёља№„аё”а№‰');
			window.location = '/logout.php';
		</script>	
        <?php
		exit();
	}*/
	
	if (!checkBandEmail($_SESSION['s_member_id'])) {
		?>
        <script language="javascript">
			alert('Email аё‚аёаё‡аё„аёёаё“а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЃаё±аёља№Ђаё§а№‡аёља№„аё‹аё•а№Њаё™аёµа№‰а№„аё”а№‰\nа№Ђаё™аё·а№€аёаё‡аё€аёІаёЃ Email аё™аёµа№‰аё–аё№аёЃ Ban');
			window.location = '/logout.php';
		</script>	
        <?php
		exit();
	} // end if (!checkBandEmail($_SESSION['s_member_id'])) {
	
	$addSlashesField = array('oldPassword', 'newPassword', 'enews_receive');
		foreach ($addSlashesField as $fieldValue) {
			if (!get_magic_quotes_gpc())
				$_POST[$fieldValue] = addslashes($_POST[$fieldValue]);
	}
		
		$sql = "
			SELECT COUNT(member_id) AS num 
			FROM member 
			WHERE password = '".base64_encode($_POST['oldPassword'])."'
			AND member_id = '".$_SESSION['s_member_id']."' 
		";
		$query = sql_query($sql);
		$rec = sql_fetch_array($query);
		if ($rec['num'] == 0) {
		?>
        	<script language="javascript">
				alert('а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–аё”аёіа№Ђаё™аёґаё™аёЃаёІаёЈа№ЃаёЃа№‰аё‚а№‰аёаёЎаё№аёҐаё‚аёаё‡аё„аёёаё“а№„аё”а№‰\nа№Ђаё™аё·а№€аёаё‡аё€аёІаёЃаё‚а№‰аёаёЎаё№аёҐаё‚аёаё‡аё„аёёаё“а№„аёЎа№€аё–аё№аёЃаё•а№‰аёаё‡аёЃаёЈаёёаё“аёІаё•аёЈаё§аё€аёЄаёаёља№ѓаё«аёЎа№€');
				window.location = '/<?php echo $configMyFileFirstPage?>?mode=<?php echo base64_encode('editProfile')?>';
			</script>
        <?php
			exit();
		} // end if ($rec['num'] > 0) {
		
		$text = '';
		if (trim($_POST['newPassword']) <> '')
			$text .= ", password = '".base64_encode($_POST['newPassword'])."' ";
		if ($_POST['enews_receive'] == 1)
			$text.= ", enews_receive = '".$_POST['enews_receive']."' ";
		
		if ($text != '') {
			$sql = "UPDATE member SET ".mb_substr($text, 1, mb_strlen($text,'utf8'),'utf8');
			$sql.= " WHERE member_id = '".$_SESSION['s_member_id']."'";
			sql_query($sql);
		}
		
		/*if ($_POST['delPost']) {
			$sql = "DELETE FROM member_post WHERE member_id = '".$_SESSION['s_member_id']."' ";
			sql_query($sql);
		} // end if ($_POST['delPost']) {*/
		?>
			<script language="javascript">
				alert('а№ЃаёЃа№‰а№„аё‚аё‚а№‰аёаёЎаё№аёҐа№ЂаёЄаёЈа№‡аё€а№ЂаёЈаёµаёўаёљаёЈа№‰аёаёўа№ЃаёҐа№‰аё§');
				window.location = '/<?php echo $configMyFileFirstPage?>';
			</script>
	 <?php
	 exit();
 } else { // end if ($_POST['bMemberEdit'] <> '') {
 ?>
	<script language="javascript">
        window.location = '/<?php echo $configMyFileFirstPage?>';
    </script>
 <?php
	exit();
 }
 ?>

Rename: -