Originally posted by just_m3.
View Post
PHP Code:
<?php
require 'moduls/ini.php';
require 'moduls/fun.php';
require 'moduls/connect.php';
require 'online.php';
//require 'moduls/header.php';
session_name('SID') ;
###############djgol.com###############
if(session_start()){
if(!empty($_SESSION["onpage"]) AND !empty($_GET['onpage'])){
$_SESSION["onpage"]=$_GET['onpage'];
}
elseif(empty($_SESSION["onpage"]) AND !empty($_GET['onpage']))
{
$onpage=$_GET['onpaget'];
session_register ("onpage") ;
}
if(!empty($_SESSION["prew"]) AND !empty($_GET['prew']))
$_SESSION["prew"]=$_GET['prew'];
elseif(empty($_SESSION["prew"]) AND !empty($_GET['prew']))
{
$prew=$_GET['prew'];
session_register ("prew") ;
}
if(!empty($_SESSION["sort"]) AND !empty($_GET['sort']))
$_SESSION["sort"]=$_GET['sort'];
elseif(empty($_SESSION["sort"]) AND !empty($_GET['sort']))
{
$sort=$_GET['sort'];
session_register ("sort") ;
}
}
###############ðôüøý###############
$error = false;
if($_SESSION['autorise'] != $setup['password']){
$error = true;
}
if($_SESSION['ipu'] != clean($ip)){
$error = true;
}
###############ßшþòõшúð ÿõшõüõýýых###############
$onpage = intval($_SESSION["onpage"]);
$prew = intval($_SESSION["prew"]);
$sort = get2ses('sort');
$id = intval($_GET['id']);
if (!empty ($_POST['page']))
{
$page = intval($_POST['page']);}
else {$page = intval($_GET['page']);}
$start = intval($_GET['start']);
if($onpage < 3){
$onpage = 10;
}
if($prew != 0 and $prew != 1){
$prew = $setup['preview'];
}
$valid_sort = array('name' => '','data' => '','load' => '','size' => '','eval' =>'');
if(!isset($valid_sort[$sort])){
$sort='name';
}
$MODE = '`priority` DESC,`name` ASC';
if($sort == 'data') $MODE = '`priority` DESC,`timeupload` DESC';
elseif($sort == 'size') $MODE = '`priority` DESC,`size` ASC';
elseif($sort == 'load') $MODE = '`priority` DESC,`loads` DESC';
elseif($sort == 'eval' && $setup['eval_change']) $MODE = '`priority` DESC,`yes` DESC ,`no` ASC';
###############ßþûучðõü тõúущøù úðтðûþó#############
if(!$id){
$d['path'] = $setup['path'].'/';
}
else{
$d = mysql_fetch_assoc(mysql_query('SELECT `path` FROM `files` WHERE `id` = '.$id.' LIMIT 1'));
}
if(!is_dir($d['path'])) die('<div class="mp3t">Directory Error</div><div class="even">Folder does not exist Or Move/Delete By Administrator<br>Admin: admin[at]djgol.com<br>Support: support[at]djgol.com</div><div class="mp3t"><center><a href="http://djgol.com">-Home Page-</a></center></div></body></html>');
###############ßþÑÂтшðýøчýðѠýðòøóðцøÑÂ###############
$all = mysql_fetch_row(mysql_query('SELECT COUNT(`id`) FROM `files` WHERE `infolder` = "'.$d['path'].'"'));
$all = $all[0];
$pages = ceil($all/$onpage);
if(!$pages) $pages = 1;
if($page>$pages or $page<=0) $page=1;
if($start>$all or $start<=0) $start = 0;
if($page) $start = ($page - 1) * $onpage; else $start = 0;
###############ßþûучðõü ÑÂÿøÑÂþú фðùûþò###############
$array_id = array();
$query = mysql_query('SELECT `id` FROM `files` WHERE `infolder` = "'.$d['path'].'" ORDER BY '.$MODE.' LIMIT '.$start.', '.$onpage);
while($list_sw = mysql_fetch_row($query)){
$array_id[] = $list_sw[0];
}
###############Óþтþòøü ÷ðóþûþòþú###################
$ex = explode('/',$d['path']);
foreach($ex as $k=>$v)
{
if($v!='' and $v!='.' and $v!='..' and $v!=$setup['path'])
{
$s = mysql_fetch_array(mysql_query("SELECT `id`,`name` FROM `files` WHERE `path` LIKE '%".clean($v)."/' AND `size` = '0'"));
$s['name'] = str_replace('*','',$s['name']);
if($k >= sizeof($ex)-2) $put .= $s['name'];
else $put .= '<a href="'.$s['id'].'-'.$s['name'].'.html">'.$s['name'].'</a>»';
}
}
include 'moduls/header.php';
###############Òыòþô шõúûðüы###############
##############×ðóþûþòþú##########################
if (!$id)
{
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/hometop.txt');
include 'advt/homeTop.php';
}
###############Òыòþô шõúûðüы###############
echo '<form name="search" action="search.php?act=search" method="POST">';
echo '<div class="search"><center>search files::<input type="text" name="word" class="input" size=20> <input type="Submit" value="Search" class="input"></center></div>';
############################################
if (!$id)
{
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/homeCategorystart.txt');
include 'advt/homeCategorystart.php';
}
if (!$id){
echo '<h1><div class="mp3t"><center>Select Cateogry<center></div></h1>';
}else{
echo '<center><div class="backfold">';
if (is_file('folderpre/'.$id.'.png')) //õÑÂûø þýþ ò фðùûõ
{
echo '<img src="folderpre/'.$id.'.png" width="65" height="90" alt="'.$s['name'].'">';
}
echo '</div><h2>'.$s['name'].'</h2></center>';
if(!file_exists('folderpre/$id.png')) $ico = '<img src="ext/arrow.gif" alt="">'; else $ico = '<img src="folderpre/$id.png" width="65" height="90" alt="">';
if (is_file('about/'.$s['name'].'.txt')) //õÑÂûø þýþ ò фðùûõ
{
$djafd = file_get_contents('about/'.$s['name'].'.txt');
$djafds= '<div class="djamoldis"> '.$djafd.'</div>';
echo $djafds;
}
}
###############áÿøÑÂþú фðûþò ø ÿðÿþú###############
if ($all == 0) echo '<div class="title"><strong>[Empty]: Upload File In <b>files</b> Folder(Amol Patil Production)</strong></div>';
foreach($array_id as $key => $value)
{
$file_info = mysql_fetch_array(mysql_query('SELECT `id`,`name`,`path`,`fastabout`,`timeupload`,`infolder`,`size`,`loads`,`yes`,`no` FROM `files` WHERE `id` = "'.$value.'";'));
if(is_dir($file_info['path']))
{
if(is_integer($key / 2)) $row = '<div class="even"><div align="left">'; else $row = '<div class="odd"><div align="left">';
if (!empty($file_info['fastabout'])) $file_info['about'] = str_replace("\n", '<br>',$file_info['about']);
//Úþû-òþ ýþòых фðùûþò ò ÿðÿúõ
$new_all="";
$stime=$time-(3600*24*$setup['day_new']);
//NOT USE//$new_all = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `timeupload` > "'.$stime.'" AND `infolder` REGEXP "'.$file_info['path'].'*" AND `size` > "0";'));
if($setup['day_new']!=0) $new_all = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `timeupload` > "'.$stime.'" AND `infolder` LIKE "'.$file_info['path'].'%" AND `size` > "0";'));
if($new_all[0] and $setup['day_new']!=0) $new_all = '<font color="red">+'.$new_all[0].'</font>'; else $new_all="";
//Ã’ÑÂõóþ фðùûþò ò ÿðÿúõ
//NOT USE//$allinfolder = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `infolder` REGEXP "'.$file_info['path'].'*" AND `size` > "0";'));
$allinfolder = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `infolder` LIKE "'.$file_info['path'].'%" AND `size` > "0";'));
$name = str_replace('*','',$file_info['name']);
###############Cþ÷ôðýøõ à ÃÂ×Ãâ€Ã•Ã›ÃžÃ’
$name32=$file_info['path'];
$name32=str_replace('files/','',$name32);
$name32=str_replace('/',';',$name32);
$name32=str_replace('_',' ',$name32);
if (is_file('razdely/'.$name32.'.txt')) //õÑÂûø þýþ ò фðùûõ
{
$razd = file_get_contents('razdely/'.$name32.'.txt');
$razdely= '<div class="block_top_s_l"><div align="left"> '.$razd.'</div></div>';
echo $razdely;
}
###############ßшþòõшúð ýð ÿûðтýþÑÂÑ‚ÑŒ шð÷ôõûð
$block=false; //þñýуûõýøõ
click_change();
if (is_file('razdely/'.$name32.'.dat')) //õÑÂûø þýþ ò фðùûõ
{
$block=1;
}
if (is_file('razdely/'.$name32.'1.dat')) //õÑÂûø þýþ ò фðùûõ
{
$block=2;
}
//Folder Preview
if(!file_exists('folderpre/'.$file_info[id].'.png')) $ico = '<img src="ext/arrow.gif" alt="">'; else $ico = '<img src="folderpre/'.$file_info[id].'.png" width="65" height="90" alt="">';
//áþñÑÂòõýýþ òыòþô
if (!empty($name) and !$block){
echo $row.$ico.'<strong><a href="'.$file_info[id].'-'.$name.'.html">'.$name.'</a></strong>('.$allinfolder[0].')';
if($new_all) echo '<a href="new.php?id1='.$file_info[id].'">'.$new_all.'</a>';
if(!empty($file_info['fastabout'])) echo '<br>'.str_replace("\n", '<br>',$file_info['fastabout']);
echo '</div></div>';}
elseif ($block==1) { ///õÑÂûø шð÷ôõû ÿûðтýыù
$id=$file_info[id];
$sid=$id*2-30;
echo $row.$ico.'<strong><a href="pay.php?sid='.$sid.'">'.$name.'</a></strong>('.$allinfolder[0].')'.$new_all;
if(!empty($file_info['fastabout'])) echo '<br>'.str_replace("\n", '<br>',$file_info['fastabout']);
echo '<div></div>';
}
elseif ($block==2) { ///õÑÂûø шð÷ôõû ÿûðтýыù
$id=$file_info[id];
$gid=$id*2-30;
echo $row.$ico.'<strong><a href="click.php?gid='.$gid.'&action=1">'.$name.'</a></strong>('.$allinfolder[0].')'.$new_all;
if(!empty($file_info['fastabout'])) echo '<br>'.str_replace("\n", '<br>',$file_info['fastabout']);
echo '</div></div>';
}
}
elseif(is_file($file_info['path']))
{
if(is_integer($key / 2)) $row = '<td colspan="2" class="odd22">'; else $row = '<td colspan="2" class="odd22">'; /////////ÃÅ¡ Ãâ€Ã˜×ÃÂÃâ„¢ÃÂã Þ ÒëÒÕÃâ€Ã•ÃÂÃËœÃËœ äÃÂÙÛÞÒ
if (!empty($file_info['fastabout'])) $file_info['about'] = str_replace("\n", '<br>',$file_info['about']);
$ex = pathinfo($file_info['path']);
$ext = strtolower($ex['extension']);
//ßшõôþÑÂüþтш
click_change();
$pre = '';
if ($prew==0)
{
if ($ext == 'bmp') $pre = 'Impossible Preview <br>';
if ($ext == 'gif' or $ext == 'jpeg' or $ext == 'jpg' or $ext == 'png' or $ext == 'JPG' or $ext == 'GIF' or $ext == 'PNG'or $ext == 'JPEG') $pre = '<img style="margin: 1px;" src="im.php?bab=1&id='.$file_info['id'].'" alt=""/>';
}
//Komments and loads
$all_komments = @mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `komments` WHERE file_id = "'.$file_info['id'].'"'));
$all_komments = $all_komments[0];
$all_loads = $file_info['loads'];
$file_time = date('d.m.y', $file_info['timeupload']);
if ($sort=='name'or $sort=='size') $info = '';
if($sort=='load') $info = '(<font color="#FFFF00">'.$all_loads.'</font>)';
if ($sort=='data') $info = "($file_time)";
if ($sort=='eval' and $setup['eval_change']==1) $info = '(<font color="#800000">'.$file_info['yes'].'</font>/<font color="#004080">'.$file_info[no].'</font>)';
//ÃÂþòø÷ýð фðùûð
$new_info='';
$filtime2 = $file_info['timeupload']+(3600*24*$setup['day_new']);
if($filtime2>=$time and $setup['day_new']!=0) $new_info = '<font color="black">NEW!</font>';
//ÚшðÑÂøòыù шð÷üõш
if($file_info['size'] < 1024) $file_info['size'] = '('.$file_info['size'].'b)';
if($file_info['size'] < 1048576 and $file_info['size'] >= 1024) $file_info['size'] = '('.round($file_info['size']/1024, 2).'Kb)';
if($file_info['size'] > 1048576) $file_info['size'] = '('.round($file_info['size']/1024/1024, 2).'Mb)';
//Øúþýúð ú фðùûу
if(!file_exists('ext/'.$ext.'.png') ) $ico = '<img src="ext/stand.png" alt="">';
elseif ($ext =='jar') $ico = ' <img src="ic.php?lf='.$file_info['path'].'&id='.$file_info[id].'" alt="" width="16" height="16"/>';
else $ico = '<img src="ext/'.$ext.'.png" alt="">';
//ßþúð÷ шðÑÂøшøшõýøÑÂ
if($setup['ext']==1) $extension = "($ext)"; else $extension = '';
//áþñÑÂтòõýýþ òыòþô
echo $row;
$size1=str_replace(')','|',$file_info['size']);
$size2=str_replace('(','|',$size1);
$info=str_replace('(','|',$info);
$info=str_replace(')','|',$info);
echo '<div class="odd22"><div align="left"><h1>'.$ico.'<a href="show-'.$file_info[id].'-'.$file_info['name'].'.html"><strong>'.$file_info['name'].'</h1></strong></a></div></div><td colspan="2" class="odd33"><div align="left">'.$extension.$size2.$info.'|<a href="show-'.$file_info[id].'-'.$file_info['name'].'.html"><font color="red">Download</font></a>|</div>';
if($ext =='txt') { echo '<a href="read.php?id='.$file_info['id'].'&id2='.$id.'"><font color="red">Read</font></a>';}
echo $new_info.'';
if(!empty($file_info['fastabout'])) echo str_replace("\n", '<br>',$file_info['fastabout']);
echo '</td></div>';
######################################################
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/betweenallfile.txt');
include 'advt/betweenallfile.php';
###############ßþûучðõü øýфу þ фðùûõ###########
$id2=$file_info[id];
$file_info2 = mysql_fetch_array(mysql_query('SELECT * FROM `files` WHERE `id` = '.$id2));
if (!is_file ($file_info2['path'])) die('äðùû ýõ ÑÂущõÑÂтòуõт');
###############áúøýшþт GIF #############################
#######ßþûучðõü øüѠфðùûð ø þñшðтýыù úðтðûþó#####
$filename = pathinfo($file_info2['path']);
$ext = $filename['extension'];
$dir = $filename['dirname'].'/';
$filename = $filename['basename'];
$back = mysql_fetch_array(mysql_query("SELECT * FROM `files` WHERE `path` = '".clean($dir)."'"));
#
##################
$bolt=0;
if(($ext == 'avi' || $ext == '3gp' || $ext == 'mp4') && extension_loaded('ffmpeg')){
$pre = '<img style="margin: 1px;" src="ffmpeg.php?id='.$file_info['id'].'" alt=""/><br>';
$bolt=1;
}
elseif($ext == 'thm' || $ext == 'nth'){
$pre = '<img style="margin: 1px;" src="theme.php?id='.$file_info['id'].'&W=40&H=40" alt="prev">';
$bolt=1;
}
if(($ext == 'avi' || $ext == 'flv' || $ext =='swf' || $ext =='mp4') AND (
!$h_ua ||
strpos($h_ua, 'windows') !== false ||
strpos($h_ua, 'linux') !== false ||
strpos($h_ua, 'bsd') !== false ||
strpos($h_ua, 'x11') !== false ||
strpos($h_ua, 'unix') !== false ||
strpos($h_ua, 'macintosh') !== false ||
strpos($h_ua, 'macos') !== false))
{
$pre ='<object type="application/x-shockwave-flash" data="uflvplayer_500x375.swf" height="99" width="125">
<param name="bgcolor" value="#DFE6EF" /><param name="allowFullScreen" value="true" /><param name="allowScriptAccess" value="always" /><param name="movie" value="uflvplayer_500x375.swf" />
<param name="FlashVars" value="way='.$file_info['path'].'&swf=uflvplayer_500x375.swf&w=400&h=300&pic=ffmpeg.php?id='.$file_info['id'].'&autoplay=0&tools=1&skin=white&volume=70&q=&comment=" /></object>
';
}
if($ext == 'mp3' or $ext == 'wav'){
echo '<div class="block">';
if (
!$h_ua ||
strpos($h_ua, 'windows') !== false ||
strpos($h_ua, 'linux') !== false ||
strpos($h_ua, 'bsd') !== false ||
strpos($h_ua, 'x11') !== false ||
strpos($h_ua, 'unix') !== false ||
strpos($h_ua, 'macintosh') !== false ||
strpos($h_ua, 'macos') !== false)
{
}
echo '</div>';
}
################# áúøýшþт GIF #############################
if($pre!=NULL) echo '<div class="block"><div align="left">'.$pre.'</div></div>';
if(is_file($setup['spath'].'/'.$filename.'.gif') or is_file($setup['spath'].'/'.$filename.'.GIF')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.gif&W=60&H=70" alt="screen"></td><td></div></div>';
###############áúøýшþт JPG #############################
if(is_file($setup['spath'].'/'.$filename.'.jpg') or is_file($setup['spath'].'/'.$filename.'.JPG')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.jpg&W=60&H=70" alt="screen"></td><td></div></div> ';
###############áúøýшþт PNG #############################
if(is_file($setup['spath'].'/'.$filename.'.png') or is_file($setup['spath'].'/'.$filename.'.PNG')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.png&W=60&H=70" alt="screen"></td><td></div></div>';
###############áúøýшþт JPEG #############################
if(is_file($setup['spath'].'/'.$filename.'.jpeg') or is_file($setup['spath'].'/'.$filename.'.JPEG')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.jpeg&W=60&H=70" alt="screen"></td><td></div></div> ';
if (is_file($setup['opath'].'/'.$filename.'.txt')) //õÑÂûø þýþ ò фðùûõ
{
$f = file_get_contents($setup['opath'].'/'.$filename.'.txt');
$f=substr($f,0,300);
$f = htmlentities($f, ENT_QUOTES, 'UTF-8');
echo '<div class="a"><div align="left">'.$f.'...</td></tr></div></div>';
$outp=1;
}
if ($ext == 'txt') {$popis=file_get_contents($file_info2['path']);
$popis=substr($popis,0,100);
$popis = htmlentities($popis, ENT_QUOTES, 'UTF-8');
echo '<div class="a"><div align="left">'.$popis.'...</div></div>';
$outp=1;
}
//if ($ext != '3gp' and $ext != 'mp4' and $ext != 'jpg' and $ext != 'gif' and $ext != 'png' and $outp!=1) echo'<div class="odd33"><div align="left">description is missing</div></div>';
echo'<span class="text11" style="font-size:12px">Downloads:['.$file_info['loads'].']</span></div></div><div class="djaline"></div>';
}
}
###############ßþÑÂтшðýøчýðѠýðòøóðцøÑÂ########
if ($id)
{
###############Document navigation########
if($all>$onpage){
echo '<div class="djapgn">Pages: <span class="cur">';
$asd = $page - 2;
$px=urlencode($s['name']);
$asd2 = $page + 3;
if($asd<$all && $asd>0 && $page>3) echo '<a href="'.$id.'-1.html">1</a> ... ';
for($i=$asd; $i<$asd2; $i++)
{
if($i<$all && $i>0)
{
if ($i > $pages ) break;
if ($page==$i) echo '<strong>['.$i.']</strong> ';
else echo '<a href="'.$id.'-'.$i.'-'.$px.'.html">'.$i.'</a> ';
}
}
if($i <= $pages)
{
if($asd2<$all) echo ' ... <a href="'.$id.'-'.$pages.'-'.$px.'.html">'.$pages.'</a>';
}
echo '<br>';
###############Manual entry pages ###############
if($pages>$setup['pagehand'] and $setup['pagehand_change'] == 1)
{
echo 'Page '.$page.' of '.$pages.':<br>
<form action="index.php?" method="get">
<input type="hidden" name="id" value="'.$id.'"/>
<input class="enter" name="page" type="text" maxlength="8" size="8">
<input class="buttom" type="submit" value="Go">
</form>';
}
echo '</div>';
}
echo '<div class="iblock"><img src="dis/load.png" alt=""><a href="index.php">Home</a> » '.$put.'</div>';
}
###############Òыòþô шõúûðüы###############
if (!$id)
{
}
if (!$id)
{
}
if(!$id)
{
}
if(!$error){
list($msec,$sec)=explode(chr(32),microtime());
echo '<div class="a">-<a href="apanel.php">Admin Cp</a></div>';}
$homepage = file_get_contents('http://djgol.com/djgoldevp/foot.txt');
include 'moduls/idp.php';
echo '<h1><div class="mp3t"><center>Special Services<center></div></h1>';
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/betweenallfile.txt');
include 'advt/onlineserves.php';
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/betweenallfile.txt');
include 'advt/homeBottom.php';
echo '<h1><div class="mp3t"><center><a href="index.php">Home<center></div></h1>';
echo $homepage;
echo '</div></div></td></td></body></html>';
?>
Added after 10 minutes:
PHP Code:
<?php
## Decode my crap script ###
## Is Moca :)) gen
ini_set("display_errors","Off");
if(isset($_POST['content'])){
header('Content-type: text/plain');
preg_match_all("#'(?P<content>.+?)';#sim",$_POST['content'],$strResponse);
$_X=base64_decode($strResponse['content'][0]);
$_X=strtr($_X,'123456aouie','aouie123456');
$_R=str_replace('__FILE__',"'".$_F."'",$_X);
echo($_R);
$_R=0; $_X=0;
}
else {
echo " <form action='decode.php' method='post' >
<textarea name='content' rows='10' ></textarea><br/>
<input type='submit' value='first crack it'>
</form>";
}
?>
Is this index.php?
Comment