AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Редактирование файла

<?php
include("include/config.php");
include("include/connect.php");
include("include/function.php");
//require_once('PHPMailer/class.phpmailer.php');
header("Content-Type: text/html; charset=utf-8");

/*if (isset($_COOKIE["$configCookieNameBan"])) {
?>
	<script language="javascript">
		alert('IP аё™аёµа№‰аё–аё№аёЃ Ban а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЈаё°аёљаёља№„аё”а№‰');
		window.location = '<?php echo $configMyFileFirstPage?>';
	</script>	
<?php
	exit();
}*/

/*if (!checkBandIP($_SERVER['REMOTE_ADDR'])) {
	setcookie($configCookieNameBan, 'Ban', time()+3600*60*24*30*3);
	?>
	<script language="javascript">
		alert('IP аё™аёµа№‰аё–аё№аёЃ Ban а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЈаё°аёљаёља№„аё”а№‰');
		window.location = '/<?php echo $configMyFileFirstPage?>';
	</script>	
	<?php
	exit();
}*/

if (!checkBandEmail($_POST['email'])) { 
	?>
	<script language="javascript">
		alert('Email аё‚аёаё‡аё„аёёаё“а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЃаё±аёља№Ђаё§а№‡аёља№„аё‹аё•а№Њаё™аёµа№‰а№„аё”а№‰\nа№Ђаё™аё·а№€аёаё‡аё€аёІаёЃ Email аё™аёµа№‰аё–аё№аёЃ Ban');
		window.location = '/<?php echo $configMyFileFirstPage?>';
	</script>
	<?php
	exit();
}  // end if (!checkBandEmail($_POST['email'])) {

$tbl_name = 'member';
$fieldlist = array('image','username','password','email','register_date','activate_date','camera','gender','age','province','birthday','hi5_link','facebook_link','active_status','enews_receive');
if ( (trim($_POST['username'])=='') || (trim($_POST['password'])=='') || (!check_full($_POST['username'])) || (trim($_POST['password'])=='') || (!isemail($_POST['email'])) ) {
	?>
    <script language="javascript">
		alert('аё‚а№‰аёаёЎаё№аёҐа№„аёЎа№€аё„аёЈаёљ а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–аё”аёіа№Ђаё™аёґаё™аёЃаёІаёЈаё•а№€аёа№„аё”а№‰');
		window.location = 'register.php';
	</script>
    <?php
	exit();
	
} else {
	
	$error = false;
	$sql = "
		SELECT count(member_id) AS num
		FROM $tbl_name
		WHERE username = '".$_POST['username']."'
	";
	$query = sql_query($sql);
	$rec = sql_fetch_array($query);
	if ($rec['num'] > 0) {
		?>
        <script language="javascript">
			alert('Username аё™аёµа№‰аёЎаёµаёЃаёІаёЈа№ѓаёЉа№‰а№ѓаё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№ЃаёҐа№‰аё§ !');
		</script>
        <?php
		$error = true;
	} // end if ($rec['num'] > 0)

if (!$error) {
		$sql = "
			SELECT count(member_id) AS num
			FROM $tbl_name
			WHERE email = '".$_POST['email']."'
		";
		$query = sql_query($sql);
		$rec = sql_fetch_array($query);
		
		if ($rec['num'] > 0) {
			?>
			<script language="javascript">
				alert('Email аё™аёµа№‰аёЎаёµаёЃаёІаёЈа№ѓаёЉа№‰а№ѓаё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№ЃаёҐа№‰аё§ !');
			</script>
			<?php
			$error = true;
		} // end if ($rec['num'] > 0)
	} // end if ($error) {
	
	if ($error) {
		$_SESSION['s_formLogin_username'] = $_POST['username'];
		$_SESSION['s_formLogin_email'] = $_POST['email'];
		$_SESSION['s_formLogin_byear'] = $_POST['byear'];
		$_SESSION['s_formLogin_bmonth'] = $_POST['bmonth'];
		$_SESSION['s_formLogin_bdate'] = $_POST['bdate'];
		?>
        <script language="javascript">
			window.location = 'register.php';
		</script>
        <?php
		exit();
	} // end if ($error)

$_POST['birthday'] = $_POST['byear'].'-'.$_POST['bmonth'].'-'.$_POST['bdate'];
	$aData = explode('-', calage($_POST['birthday']));
	$_POST['age'] =  $aData[0];
	$_POST['password'] = base64_encode($_POST['password']);
	$_POST['register_date'] = date("Y-m-d H:i:s");
	
	// ==== > Start а№ЂаёЉа№‡аё„аё§а№€аёІаё•а№‰аёаё‡аёўаё·аё™аёўаё±аё™аёЃаёІаёЈ Active аё€аёІаёЃ Email аё«аёЈаё·аёа№Ђаё›аёҐа№€аёІ
	$sql = "
		SELECT register_active 
		FROM config_system
		WHERE config_system_id = 1
	";
	$query = sql_query($sql);
	$rec = sql_fetch_array($query);
	$register_active = $rec['register_active'];
	if ($register_active == 0) {  // аё›аёґаё”аёЈаё°аёљаёљ а№„аёЎа№€аё•а№‰аёаё‡аёўаё·аё™аёўаё±аё™аё€аёІаёЃ Email
		$_POST['active_status'] = 1;
		$_POST['activate_date'] = $_POST['register_date'];
	}
		
	// ==== > Stop а№ЂаёЉа№‡аё„аё§а№€аёІаё•а№‰аёаё‡аёўаё·аё™аёўаё±аё™аёЃаёІаёЈ Active аё€аёІаёЃ Email аё«аёЈаё·аёа№Ђаё›аёҐа№€аёІ
	include('include/m_add.php');

if ($register_active == 1) {
			$to  = $_POST['email'];
			$subject = 'аёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃ '.$webmasterName;
			$message = 'аёЄаё§аё±аёЄаё”аёµаё„аёЈаё±аёљ аёўаёґаё™аё”аёµаё•а№‰аёаё™аёЈаё±аёљаёЄаё№а№€ MSN Ladyboy dot Com<br />
		<br />
		аёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃ  &nbsp;&nbsp;&nbsp;<a href="'.$configWebsiteName.'activeMember.php?mid='.base64_encode($id).'&email='.base64_encode($to).'"><font size="5">аёЃаёЈаёёаё“аёІаё„аёҐаёґа№ЉаёЃ</font></a><br />
		<br />
		аё«аёЈаё·аёаё„аёҐаёґаёЃаё—аёµа№€аё™аёµа№€ <a href="'.$configWebsiteName.'activeMember.php?mid='.base64_encode($id).'&email='.base64_encode($to).'">'.$configWebsiteName.'activeMember.php?mid='.base64_encode($id).'&email='.base64_encode($to).'</a>
		<br />
		<br />
		аё”а№‰аё§аёўаё„аё§аёІаёЎа№Ђаё„аёІаёЈаёћаёаёўа№€аёІаё‡аёЄаё№аё‡<br />
		MSN Ladyboy dot Com<br />
		'.$configWebsiteName;	
			
		$fromname = $webmasterName;
		$frommail = $webmasterMail;
		sendMailEncode($to, $fromname, $frommail, $subject, $message, $cType='html',$CC="",$BCC="",$attach="",$attach_name="");
		//sendMailFactory($to, $frommail, $subject, $message, $attchPath, $attchName, $replyTo, $includeFileMail);
			?>
			<script language="javascript">
				alert('аё‚аё“аё°аё™аёµа№‰аёЈаё°аёљаёља№„аё”а№‰аёЄа№€аё‡аёаёµа№ЂаёЎаёҐа№Њаёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№„аё›аёўаё±аё‡аёаёµа№ЂаёЎаёҐа№Њаё‚аёаё‡аё—а№€аёІаё™а№ЃаёҐа№‰аё§ (<?php echo $_POST['email']?>)\nаёЃаёЈаёёаё“аёІаё„аёҐаёґа№ЉаёЃаёҐаёґаё‡аё„а№Њаё—аёµа№€аёаёўаё№а№€а№ѓаё™аёаёµа№ЂаёЎаёҐа№Њаё”аё±аё‡аёЃаёҐа№€аёІаё§а№Ђаёћаё·а№€аёа№ѓаё«а№‰аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№ЂаёЄаёЈа№‡аё€аёЄаёЎаёљаё№аёЈаё“а№Њаё„аёЈаё±аёљ\nаёЃаёЈаёёаё“аёІаё•аёЈаё§аё€аёЄаёаёља№ѓаё™ Junk Box а№ЃаёҐаё° Spam Box аё”а№‰аё§аёўаё„аёЈаё±аёљ');
				window.location = '/<?php echo $configMyFileFirstPage?>';
			</script>
			<?php
	} else { // end if ($register_active == 1) {
		$_SESSION['s_member_id'] = $id;
		?>
			<script language="javascript">
				alert('аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№ЂаёЄаёЈа№‡аё€аёЄаёЎаёљаё№аёЈаё“а№Њ\nаёўаёґаё™аё”аёµаё•а№‰аёаё™аёЈаё±аёљаёЄаё№а№€ <?php echo $webmasterName?>\n\n* аёЉаё·а№€аёаёљаё±аёЌаёЉаёµаё—аёµа№€аё—а№€аёІаё™аёЄаёЎаё±аё„аёЈаё™аёµа№‰ аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰ Login а№Ђаёћаё·а№€аёа№‚аёћаёЄаё•а№Њаё‚а№‰аёаё„аё§аёІаёЎа№„аё”а№‰а№ѓаё™аё„аёЈаё±а№‰аё‡аё•а№€аёа№†а№„аё› *');
				window.location = '/<?php echo $configMyFileFirstPage?>';
			</script>
        <?php	
	} // end == if ($register_active == 1) {
} // end if ((trim($_POST['username'])=='') || (trim($_POST['password'])=='') || (trim($_POST['password'])=='')) {
?>

Rename: -