AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Редактирование файла

<?php
		if ($_POST['sFromAge'] == '') {
			$_POST['sFromAge'] = $_POST['sToAge'];
		} elseif ($_POST['sToAge'] == '') {
			$_POST['sToAge'] = $_POST['sFromAge'];
		}
			
		if ((int)$_POST['sFromAge'] > (int)$_POST['sToAge']) {
				$temp = $_POST['sFromAge'];
				$_POST['sFromAge'] = $_POST['sToAge'];
				$_POST['sToAge'] = $temp;
		}	
?>
<table width="970"  border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="802"><blockquote>
      <p>вЂўMsn Ladyboy а№Ђаё›а№‡аё™аёћаё·а№‰аё™аё—аёµа№€аёЄаёіаё«аёЈаё±аёљаё„а№‰аё™аё«аёІа№Ђаёћаё·а№€аёаё™а№ЂаёЃаёўа№Њ аёЄаёіаё«аёЈаё±аёља№‚аёћаёЄаё•а№Њ Msn, Hi5 а№ЃаёҐаё° Facebook аёЃаёЈаёёаё“аёІа№ѓаёЉа№‰аёЈаё№аё›а№ЃаёҐаё°аё аёІаё©аёІаё—аёµа№€аёЄаёёаё аёІаёћа№ѓаё™аёЃаёІаёЈа№‚аёћаёЄаё•а№Њ аё«а№‰аёІаёЎа№‚аёћаёЄаё•а№ЊаёЈаё№аё›аёҐаёІаёЎаёЃаёаё™аёІаё€аёІаёЈ аё«аёЈаё·аёа№‚аёћаёЄаё•а№Ња№ѓаё™а№ЂаёЉаёґаё‡аёаёёаёЈаёЃаёґаё€а№‚аё”аёўа№Ђаё”а№‡аё”аё‚аёІаё”<br>
          вЂўMsn Ladyboy аё‚аёаёЄаё‡аё§аё™аёЄаёґаё—аёаёґа№Ња№ѓаё™аёЃаёІаёЈа№ѓаёЉа№‰аё‡аёІаё™аёЄаёіаё«аёЈаё±аёљаёЄаёЎаёІаёЉаёґаёЃ <a href="http://www.msngaythai.com" target="_blank">www.msngaythai.com</a> а№Ђаё—а№€аёІаё™аё±а№‰аё™ аёЄаёіаё«аёЈаё±аёљаёЄа№€аё§аё™ Msn Hi5 Facebook Zone аё—аё±а№‰аё‡аё™аёµа№‰а№Ђаёћаё·а№€аёаёЃаёІаёЈаё•аёЈаё§аё€аёЄаёаёљаё›аёЈаё°аёЃаёІаёЁ<br>
          а№ЃаёҐаё°аёЃаёІаёЈа№ѓаёЉа№‰аё‡аёІаё™аё—аёµа№€а№„аёЎа№€а№Ђаё«аёЎаёІаё°аёЄаёЎ аёЄаёіаё«аёЈаё±аёљаёњаё№а№‰аё—аёµа№€аё•а№‰аёаё‡аёЃаёІаёЈа№ѓаёЉа№‰аё‡аёІаё™аёЄаёІаёЎаёІаёЈаё– аёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№„аё”а№‰а№‚аё”аёў <a href="http://www.msngaythai.com/register.php" target="_blank">аё„аёҐаёґа№ЉаёЃаё—аёµа№€аё™аёµа№€</a><br>
        вЂўаё—аёёаёЃаёЄа№€аё§аё™аё‚аёаё‡а№Ђаё§а№‡аёља№„аё‹аё•а№Њаё™аёµа№‰аёаёўаё№а№€аё аёІаёўа№ѓаё•а№‰аёћаёЈаё°аёЈаёІаёЉаёљаё±аёЌаёЌаё±аё•аёґаё§а№€аёІаё”а№‰аё§аёўаёЃаёІаёЈаёЃаёЈаё°аё—аёіаёњаёґаё”а№ЂаёЃаёµа№€аёўаё§аёЃаё±аёљаё„аёаёЎаёћаёґаё§а№Ђаё•аёаёЈа№Њ аёћ.аёЁ. 2550</p>
    </blockquote></td>
    <td width="168" align="right"><?php
          if (!isset($_SESSION['s_member_id'])) {
		  ?>
          <a href="/register.php"><img src="images/icon-register.jpg" width="32" height="31" border="0" /></a>
          <a href="/register.php">аёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃаё„аёҐаёґа№ЉаёЃаё—аёµа№€аё™аёµа№€</a>
      <?php
          } // end if (isset($_SESSION['s_member_id'])) {
		  ?></td>
  </tr>
</table>
<table width="970"  border="0" cellpadding="0" cellspacing="0">
  <form id="searchMenuForm" name="searchMenuForm" method="post" action="searchMember.php">
  <tr>
    <td width="106" valign="middle"  background="images/b-bg.gif"><img src="images/b-search-f.gif" width="106" height="31" border="0" /></td>
    <td valign="middle" background="images/b-bg.gif">
      <select name="sGender" size="1" id="sGender">
        <?php
			foreach ($a_gender as $value) {
				$text = $value;
				if ($value == 'а№„аёЎа№€аёЈаё°аёљаёё') {
					$key = '';
					$text = 'а№ЂаёћаёЁ';
				} else { 
					$key = $value;
				}
			?>
        <option value="<?php echo $key?>" <?php if ($key == $_POST['sGender']) echo "selected";?>>
        <?php echo $text?>
        </option>
        <?php
            } // end foreach
			?>
      </select>
      &nbsp;&nbsp;<span class="style8">аё•аё±а№‰аё‡а№Ѓаё•а№€</span>
      <select name="sFromAge" id="sFromAge">
        <option value="">аёаёІаёўаёё</option>
        <?php
            for ($i=15; $i<=60; $i++) {
			?>
        <option value="<?php echo $i?>" <?php if ($_POST['sFromAge'] == $i) echo "selected";?>>
        <?php echo $i?>
          аё›аёµ</option>
        <?php
            } // end for
			?>
      </select> 
      <span class="style8">аё–аё¶аё‡</span> 
      <select name="sToAge" id="sToAge">
        <option value="">аёаёІаёўаёё</option>
        <?php
            for ($i=15; $i<=60; $i++) {
			?>
        <option value="<?php echo $i?>" <?php if ($_POST['sToAge'] == $i) echo "selected";?>>
        <?php echo $i?>
          аё›аёµ</option>
        <?php
            } // end for
			?>
      </select>
      &nbsp;&nbsp;
      <select name="sProvince" id="sProvince">
        <option value="">аё€аё±аё‡аё«аё§аё±аё”</option>
        <?php
			foreach ($a_configProvince as $value) {
			?>
        <option value="<?php echo $value?>" <?php if ($_POST['sProvince'] == $value) echo "selected";?>>
        <?php echo $value?>
        </option>
        <?php
            } // end while
			?>
      </select>    </td>
    <td width="20" valign="middle" background="images/b-bg.gif"><input type="checkbox" name="sImage" value="1" id="sImage" <?php if ($_POST['sImage'] == 1) echo "checked";?> /></td>
    <td width="31" valign="middle" background="images/b-bg.gif"><img src="images/logo-album.gif" alt="аёЎаёµаёЈаё№аё›" width="31" height="26" /></td>
    <td width="20" valign="middle" background="images/b-bg.gif"><input type="checkbox" name="sCamera" value="1" id="sCamera" <?php if ($_POST['sCamera'] == 1) echo "checked";?> /></td>
    <td width="25" valign="middle" background="images/b-bg.gif"><img src="images/b-cam.gif" alt="аёЎаёµаёЃаёҐа№‰аёаё‡" width="25" height="27" /></td>
    <td width="20" valign="middle" background="images/b-bg.gif"><input type="checkbox" name="sHi5" value="1" id="sHi5" <?php if ($_POST['sHi5'] == 1) echo "checked";?> /></td>
    <td width="20" valign="middle" background="images/b-bg.gif"><img src="images/logo-home-s.gif" width="31" height="26"></td>
    <td width="20" valign="middle" background="images/b-bg.gif"><p>
      <input type="checkbox" name="sHi5" value="1" id="sHi5" <?php if ($_POST['sHi5'] == 1) echo "checked";?> />
      </p>
      </td>
    <td width="34" valign="middle" background="images/b-bg.gif"><img src="images/logo-hi5-s.gif" alt="аёЎаёµ Hi5" width="34" height="25" /></td>
    <td width="20" valign="middle" background="images/b-bg.gif"><input type="checkbox" name="sFacebook" value="1" id="sFacebook" <?php if ($_POST['sFacebook'] == 1) echo "checked";?> /></td>
    <td width="31" valign="middle" background="images/b-bg.gif"><img src="images/logo-facebook-s.gif" alt="аёЎаёµ Facebook" width="31" height="26" /></td>
    <td background="images/b-bg.gif"><input type="checkbox" name="sFacebook" value="1" id="sFacebook" <?php if ($_POST['sFacebook'] == 1) echo "checked";?> /></td>
    <td width="31" background="images/b-bg.gif"><img src="images/logo-bb-s.gif" alt="аёЎаёµ Facebook" width="31" height="26" /></td>
    <td width="96" background="images/b-bg.gif"><input name="sKeyword" type="text" id="sKeyword" value="<?php echo $_POST['sKeyword']?>" size="16" /></td>
    <td width="9" background="images/b-bg.gif">&nbsp;</td>
    <td width="107" background="images/b-bg.gif"><input type="submit" name="bSearchMenu" value="аё„а№‰аё™аё«аёІа№Ђаёћаё·а№€аёаё™" id="bSearchMenu" /></td>
  <td width="10"><img src="images/b-search-back.gif" width="8" height="31"></td>
  </tr>
  </form>
</table>
<table width="970" height="31"  border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td width="803" valign="top"><div style="padding:10px 5px 10px 5px; text-align:left;"><?php
  	$sql = "
		SELECT image, camera, gender, post_date, image, gender, age, email, province, message, hi5_link, facebook_link
		FROM member INNER JOIN member_post ON member.member_id = member_post.member_id
		AND member.active_status = 1
		INNER JOIN board_post ON member_post.board_post_id = board_post.board_post_id
		AND board_post.board_post_id = '".$board_post_id."' 
		WHERE 1 ";
	$textResultSearch = '';
	if ($_POST['sGender'] <> '') {
		$sql.= "AND gender = '".$_POST['sGender']."' ";
		$textResultSearch .= ', '.$_POST['sGender'];
	}
	if ( ($_POST['sFromAge'] <> '') || ($_POST['sToAge'] <> '') ) {
		$sql.= "AND age >= '".$_POST['sFromAge']."' AND age <= '".$_POST['sToAge']."' ";
		if ($_POST['sFromAge'] <> $_POST['sToAge'])
			$textResultSearch .= ', аёаёІаёўаёё '.$_POST['sFromAge'].' аё–аё¶аё‡ '.$_POST['sToAge'].' аё›аёµ';
		else
			$textResultSearch .= ', '.$_POST['sFromAge'].' аё›аёµ';
	} // end if ( ($_POST['sFromAge'] <> '') || ($_POST['sToAge']) ) {
	if ($_POST['sProvince'] <> '') {
		$sql.= "AND province = '".$_POST['sProvince']."' ";
		$textResultSearch .= ', '.$_POST['sProvince'];
	}
	if ($_POST['sImage'] == '1') {
		$sql.= "AND image <> '' ";
		$textResultSearch .= ', аёЎаёµаёЈаё№аё›';
	}
	if ($_POST['sCamera'] == '1') {
		$sql.= "AND camera = '".$_POST['sCamera']."' ";
		$textResultSearch .= ', аёЎаёµаёЃаёҐа№‰аёаё‡';
	}
	if ($_POST['sHi5'] == '1') {
		$sql.= "AND hi5_link <> '' ";
		$textResultSearch .= ', аёЎаёµ Hi5';
	}
	if ($_POST['sFacebook'] == '1') {
		$sql.= "AND facebook_link <> '' ";
		$textResultSearch .= ', аёЎаёµ Facebook';
	}
	if ($_POST['sKeyword'] <> '') {
		$_POST['sKeyword'] = htmlspecialchars($_POST['sKeyword']);
		$sql.= "AND (email like '%".$_POST['sKeyword']."%' OR message like '%".$_POST['sKeyword']."%') ";
		$textResultSearch .= ', '.$_POST['sKeyword'];
	}
		
	$sql.= "ORDER BY member_post.member_post_id DESC";
	include("include/page_init.php");
	
	if ($insertPageShowMsn == 'Yes') {
		include("include/page_show_limit_msn.php");
	}
    ?></div>
    <span class="style7"><?php 
	if ($showAnswerSearch == 'Yes') { 
		echo $all_row.' аёЈаёІаёўаёЉаё·а№€аёаё€аёІаёЃаёЃаёІаёЈаё„а№‰аё™аё«аёІа№Ђаёћаё·а№€аёаё™а№ЂаёЃаёўа№Њ';
		if ($textResultSearch <> '')
			echo ' : '.mb_substr($textResultSearch,2);
		echo "<br />";
	} else { 
		echo $pagesize." аёЈаёІаёўаёЉаё·а№€аёа№Ђаёћаё·а№€аёаё™аёҐа№€аёІаёЄаёёаё”"; 
	}
	?>аё€аёІаёЃаёђаёІаё™аё‚а№‰аёаёЎаё№аёҐаёЈаёІаёўаёЉаё·а№€аё Msn а№ЂаёЃаёўа№Њ, Hi5 а№ЂаёЃаёўа№Њ, Facebook а№ЂаёЃаёўа№Њ, Gay Msn, Gay Hi5, Gay Facebook аё—аё±а№‰аё‡аё«аёЎаё” <?php
    $sql_allMember = "
		SELECT count(member.member_id) AS all_member
		FROM member INNER JOIN member_post ON member.member_id = member_post.member_id
		AND member.active_status = 1 
	";
	$query_allMember = sql_query($sql_allMember);
	$rec_allMember = sql_fetch_array($query_allMember);
	$allMemberForDb = $rec_allMember['all_member'];
	echo number_format($allMemberForDb);
	?> аёЈаёІаёўаёЉаё·а№€аё </span></td>
    <td width="167" valign="top" align="right"><a href="view-all.php"><img src="images/bar-total-name.jpg" width="164" height="25" border="0" /></a><br />
      <a href="javascript:location.reload(true)"><img src="images/b-refresh.gif" width="166" height="31" border="0" /></a></td>
  </tr>
</table>

Rename: -