Мс454645646464

 <?php /* Copyright 1999 by John Martin d/b/a ANYPORTAL.com */ /* All Rights Reserved. */ /* */ /* This software is freeware and is not in the public domain. */ /* You are hereby granted the right to freely distribute this */ /* software as long as this copyright notice remains in place. */ /* */ /* Comments or suggestions? email: [email protected] */ /* */ /* This is the PHP port: AnyPortal(php)-0.1 */ /* ======================================== */ /* */ /* PHP version 2000 by [email protected] */ /* No Rights Reserved. What for, anyhow ? */ /* */ /* Date Remarks */ /* --------- ----------------------------------------------- */ /* 25 MAY 99 original ASP version */ /* 17 SEP 99 change upload from SA-FILEUP to aspSmartUpload */ /* 10 APR 00 simplified PHP3 version */ /* 18 APR 00 most of PHP3 port working. Slight modifications */ /* 22 APR 00 modified syntax highlighting, no absolute paths */ /* revealed, PHP builtin authentication, global */ /* style sheet as callback, use apache default */ /* icons as an alternative to the wingdings font. */ /* 25 APR 00 catch some exceptions (not foolproof yet) */ /* 26 APR 00 catch some more exceptions, implicit copy */ /* function by saving somewhere else in the detail */ /* view, MD5 hashed password. */ /* 27 APR 00 Fixed authentication bug */ /* 12 MAY 00 Fixed trouble with exec() with newer versions of */ /* PHP3. Fixed bug which would send you to a non- */ /* existent address after file modifications. */ ////////////////////////////////////////////////////////////////// // TODO : Don't let the file be modified itself. Create a hash of // it (kinda hard since it's self-referential ;-). Make better use // of session management. Escapeshellcmd for all user input. ////////////////////////////////////////////////////////////////// // GLOBAL PARAMETERS // ================= // Make modifications here to suit siteman to your needs // error_reporting(4) ; // how verbose ? // username/password should not be system // usernames/passwords !! // your (hashed) username/password here $gblPw = "hash_of_your_username_and_password" ; $gblAuth = false ; // use builtin authentication $gblHash = "md5" ; // hash function to use // choose GifIcon below unless you have the M$ // WingDings font installed on your system $gblIcon = "GifIcon" ; // MockIcon or GifIcon // the directory below should be /icons/ or /icons/small/ // on Apache; a set of icons is included in the distribution $gblIconLocation = "icons/" ; // files you want to be able to edit in text mode // and view with (primitive) syntax highlighting $gblEditable = array( ".txt",".asa",".asp",".htm",".html", ".cfm",".php3",".php",".phtml", ".shtml",".css" ) ; // files that will display as images on the detail page // (useless if your browser doesn't support them) $gblImages = array( ".jpg",".jpeg",".gif",".png",".ico", ".bmp",".xbm") ; ////////////////////////////////////////////////////////////////// function StartHTML($title,$text="") { $title = "Site Manager " . $title ; $host = $GLOBALS["HTTP_HOST"] ; $self = $GLOBALS["PHP_SELF"] ; ?> <?php echo $host . " " . $title ?> 

<?php echo $host ?>

<?php echo $text ?><?php } // end function StartHTML ////////////////////////////////////////////////////////////////// function EndHTML() { ?>

<?php echo date("D, F d, Y") ?> - <?php echo date("g:i:sA") ?>
ANYPORTAL(php) Site Manager - © 1999 by ANYPORTAL - © 2000 by [email protected]


<?php } // end function EndHTML ////////////////////////////////////////////////////////////////// function CSS() { ?> BODY,TD,P,H1,H2,H3 { font-family:Helvetica,Arial,sans-serif; } .BLK { color:black; } .RED { color:red; } .TOP { color:red; font-size:70%; } /* table headings */ .INV { color:white; background-color:navy; font-weight:bold; font-size:120%; } /* title */ .FTR { } /* footer */ .LST { background-color:#E0E0E0; } /* table cells */ .BAR { background-color:#E0E0E0; } /* action bar */ PRE { color:blue; font-family:Lucida Console,Courier New, Courier,sans-serif; } /* source code */ EM { color:green; font-style:normal; } /* line numbers */ .REM { color:silver; } .XML { color:navy; background-color:yellow; } .MCK { color:red; font-family:WingDings; } /* Mock Icons */ A:HOVER { color:red; } <?php } // end function CSS ////////////////////////////////////////////////////////////////// function DetailPage($fsRoot,$relDir,$fn) { global $gblEditable, $gblImages ; $self = $GLOBALS["PHP_SELF"] ; $relPath = $relDir . "/" . $fn ; $fsPath = $fsRoot . $relPath ; $fsDir = $fsRoot . $relDir ; $exists = file_exists($fsPath) ; $ext = strtolower(strrchr($relPath,".")) ; $editable = ( $ext=="" || strstr(join(" ",$gblEditable),$ext)) ; $writable = Writeable($fsPath) ; if (!$editable && !$exists) Error("Creation unsupported for type",$relPath) ; if (!exists && !Writeable($fsDir) ) Error("Creation denied",$relDir) ; $text = "Use this page to view, modify or " ; $text .= "delete a single document on this " ; $text .= "web site." ; $title = "(Detail Page)" ; StartHTML($title, $text) ; echo "

" . $relDir . "/" . $fn . "

 file size: " . $fsize . " Bytes
" ; echo "last modified: " . $fmodified . "
" ; echo "last accessed: " . $faccessed . "
" ; echo " owner: " . fileowner($fsPath) . "
" ; echo " group: " . filegroup($fsPath) . "
" ; echo " permissions: " ; echo printf( "%o", fileperms($fsPath) ) . "" ; echo "

 " ; $tstr = split("\n",$tstr) ; for ($i = 0 ; $i < sizeof($tstr) ; ++$i) { // add line numbers echo "
" ; echo substr(("000" . ($i+1)), -4) . ": " ; $line = $tstr[$i] ; // C++ style comments $pos = strpos($line,"//") ; // exceptions: two slashes aren't a script comment if (strstr($line,"//") && ! ($pos>0 && substr($line,$pos-1,1)==":") && ! (substr($line,$pos,8) == "//-->") && ! (substr($line,$pos,9) == "// -->")) { $beg = substr($line,0,strpos($line,"//")) ; $end = strstr($line,"//") ; $line = $beg."".$end.""; } // shell & asp style comments $first = substr(ltrim($line),0,1) ; if ($first == "#" || $first == "'") { $line = "".$line.""; } print($line) ; } // next i echo "

PATHNAME OF LOCAL FILE

If the [BROWSE...] button is not displayed,
you must upgrade to an RFC1867-compliant browser.

Your browser:
<?php echo $GLOBALS["HTTP_USER_AGENT"] ?>
<?php } // end function UploadPage ////////////////////////////////////////////////////////////////// function Error($title,$text="") { StartHTML("(".$title.")",$text) ; echo "

Hit your Browser's Back Button." ; EndHTML() ; exit ; } // end function Error ////////////////////////////////////////////////////////////////// function Writeable($path) { // fix by -mat- filid brandy, [email protected], 07/JUL/99 clearstatcache ; $perms = @fileperms($path) ; $owner = @fileowner($path) ; exec("id",$id) ; eregi( "^uid=([0-9]*)",$id[0], $regs) ; $apacheuid = $regs[1] ; $perms = 0777 & $perms ; if ( $apacheuid != $owner ) { return (06 == (06 & $perms)) ? 1 : 0 ; } else { return (0600 == (0600 & $perms)) ? 1 : 0 ; } } // end function Writable ////////////////////////////////////////////////////////////////// function CreateHash($user, $pw) { global $gblHash ; // hash function to use if ($user == "" || $pw == "") { $text = "either no password or no username supplied" ; Error("Create Hash",$text) ; } $title = "(Create Hash)" ; StartHTML($title) ; echo "

" ; echo "

Copy the value below and paste it " ; echo "into the
value for \$gblPw in the source of " ; echo "this file

" . $gblHash($user.$pw) ; echo "

Hash function: " . $gblHash ; echo "

If you are a site administrator:

Click below to generate a password hash
from the username-password pair you just
entered. Then include the hash in the source
of this file.