|
|
| System | : | Linux MiraNet 3.0.0-14-generic-pae #23-Ubuntu SMP Mon Nov 21 22:07:10 UTC 2011 i686 |
|---|
| Software | : | Apache. PHP/5.3.6-13ubuntu3.10 |
|---|
| ID | : | uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
|
|---|
|
| Safe Mode | : | OFF |
|---|
| Open_Basedir | : | OFF |
|---|
| Freespace | : | 27.6 GB of 70.42 GB (39.19%) |
|---|
|
|
MySQL: ON MSSQL: OFF Oracle: OFF PostgreSQL: OFF Curl: OFF Sockets: ON Fetch: OFF Wget: ON Perl: ON |
|
Disabled Functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
|
[ System Info ]
[ Processes ]
[ SQL Manager ]
[ Eval ]
[ Encoder ]
[ Mailer ]
[ Back Connection ]
[ Backdoor Server ]
[ Kernel Exploit Search ]
[ MD5 Decrypter ]
[ Reverse IP ]
[ Kill Shell ]
[ FTP Brute-Force ]
|
|
/
http/
cgi-bin/
mail/
- drwxrwxrwx
|
Viewing file:  domain.cgi (5.94 KB) -rwxr-xr-xSelect action/file-type:  ( +) |  ( +) |  ( +) | Code ( +) | Session ( +) |  ( +) | SDB ( +) |  ( +) |  ( +) |  ( +) |  ( +) |  ( +) |
#!/usr/bin/perl
use DBI();
use CGI qw(:standard);
$act = param("act");
$dom = param("domain");
$com = param("comment");
$trans = param("trans");
$old = param("old");
$authl = param("authl");
$authp = param("authp");
system "./auth.cgi domail.cgi $authl $authp";
$retcode = $? / 256;
if ($retcode ne "1") {exit;}
my $cooke = cookie('mail.miranet');
if ($cooke eq "") {print "<html><meta http-equiv=\"refresh\" content=\"0\"></html>"; exit;}
if ($cooke ne "1") {print "<html><body><h1>Forbidden</h1><hr>Недостаточно прав"; exit;}
#print "Content-type: text/html\n\n";
system("./ustat $rip |grep 1 > $rip");
open(patt,"<./patt_n1.html")||die "Pattern file 1 not found";
while(<patt>)
{
print;
}
close(patt);
$database="mail";
$hostname="127.0.0.1";
$port="3306";
$dbuser="root";
$dbpasswd="zopa25703";
$dsn = "DBI:mysql:database=$database;host=$hostname;port=$port";
$dbh = DBI->connect_cached($dsn, $dbuser, $dbpasswd) || die;
if ($act eq "delete")
{
$sth = $dbh->prepare("DELETE FROM transport WHERE domain=\"$dom\"");
$sth->execute();
$act = "";
}
if ($act eq "add")
{
$sth = $dbh->prepare("INSERT INTO transport VALUES (\"$dom\",\"$trans\",\"$com\")");
$sth->execute();
$act = "";
}
if ($act eq "change")
{
$sth = $dbh->prepare("UPDATE transport SET domain=\"$dom\",transport=\"$trans\",comment=\"$com\" WHERE domain=\"$old\"");
$sth->execute();
$act = "";
}
if ($act eq "edit")
{
print "<center><table border=0 cellspacing=0 bgcolor=#004070><tr><td bgcolor=#004070><table border=0 cellspacing=1 valign=top align=center cellpadding=6>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Домен</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Транспорт</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Коментарий</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Действие</font></b></td></tr>";
$sth = $dbh->prepare("SELECT * FROM transport WHERE domain=\"$dom\"");
$sth->execute();
($domain, $tr, $comm) = $sth->fetchrow_array();
$sth = $dbh->prepare("SELECT * FROM transport");
$sth->execute();
while (my ($domain1, $tr, $comm) = $sth->fetchrow_array())
{
if ($domain1 ne $domain)
{
print "<tr><td bgcolor=#005797><a href=\"domain.cgi?act=edit&domain=$domain1\"><font color=#00ddff face=\"arial\">$domain1</font></a></b></td>";
print "<td bgcolor=#005797><font color=#ffffff face=\"arial\">$tr</font></b></td>";
print "<td bgcolor=#005797><font color=#ffffff face=\"arial\">$comm  </font></b></td>";
print "<td bgcolor=#005797><a href=\"domain.cgi?act=delete&domain=$domain1\"><font color=#00ddff face=\"arial\">Удалить</font></a> <a href=\"domain.cgi?act=edit&domain=$domain1\"><font color=#00ddff face=\"arial\">Изменить</font></a></b></td></tr>";
}
else
{
print "<tr><form name=\"form1\" action=\"domain.cgi\" method=\"POST\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"domain\" value=\"$domain\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"trans\" value=\"$tr\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"comment\" value=\"$comm\"></td>
<input type=\"hidden\" name=\"act\" value=\"change\">
<input type=\"hidden\" name=\"old\" value=\"$domain\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"submit\" name=\"chg\" value=\"Изменить\" /> <a href=\"domain.cgi\"><font color=#00ddff face=\"arial\">Отменить</font></a>";
}
}
print "</form></tr></table></td></tr></table>";
print "<hr></center><b>| <a href=\"manage.cgi\">Учётные записи</a> | <a href=\"domain.cgi\">Настройка доменов</a> |</b>";
}
if ($act eq "")
{
print "<center><table border=0 cellspacing=0 bgcolor=#004070><tr><td bgcolor=#004070><table border=0 cellspacing=1 valign=top align=center cellpadding=6>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Домен</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Транспорт</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Коментарий</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Действие</font></b></td></tr>";
$sth = $dbh->prepare("SELECT * FROM transport");
$sth->execute();
while (my ($domain, $tr, $comm) = $sth->fetchrow_array())
{
print "<tr><td bgcolor=#005797><a href=\"domain.cgi?act=edit&domain=$domain\"><font color=#00ddff face=\"arial\">$domain</font></a></b></td>";
print "<td bgcolor=#005797><font color=#ffffff face=\"arial\">$tr</font></b></td>";
print "<td bgcolor=#005797><font color=#ffffff face=\"arial\">$comm  </font></b></td>";
print "<td bgcolor=#005797><a href=\"domain.cgi?act=delete&domain=$domain\"><font color=#00ddff face=\"arial\">Удалить</font></a> <a href=\"domain.cgi?act=edit&domain=$domain\"><font color=#00ddff face=\"arial\">Изменить</font></a></b></td></tr>";
}
print "<tr><form name=\"form1\" action=\"domain.cgi\" method=\"POST\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"domain\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"trans\" value=\"virtual:\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"comment\"></td>
<input type=\"hidden\" name=\"act\" value=\"add\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"submit\" name=\"add\" value=\"Добавить\" />";
print "</form></tr></table></td></tr></table>";
print "<hr></center><b>| <a href=\"manage.cgi\">Учётные записи</a> | <a href=\"users.cgi\">Пользователи</a> |</b>";
}
$dbh->disconnect();
system("./ustat $rip |grep 1 > $rip");
open(patt,"<./patt_n2.html")||die "Pattern file 2 not found";
while(<patt>)
{
print;
}
close(patt);
|
