HTML_JAVASCRIPT;
function list_dir($dir_handle,$path){
global $config;
$filetype = explode(',', str_replace(" ","",($config['SearchInFileType'])));
echo "
";
while (false !== ($file = readdir($dir_handle))) {
$dir =trim($path).'/'.$file;
if(is_dir($dir) && $file != '.' && $file !='..' ) {
$handle = @opendir($dir) or die("undable to open file $file");
if($config['print_result']==1) echo "- $file
";
list_dir($handle, $dir);
}elseif($file != '.' && $file !='..' && $file != $config['scriptname']) {
if(in_array(substr($file , -3), $filetype) || in_array(substr($file , -4), $filetype)){
$fileLines = file($dir);
foreach($fileLines as $line =>$v) {
preg_match_all('~'.$config['SearchString'].'~', $v, $matches);
if($matches[0])
{
//$dir = str_replace($config['path'],'',$dir);
$dia = str_replace ( "%5C", "-x-", urlencode($dir));
$erd = rand(0,1000);
$line+=1;
$outs = '';
$outs .= "
Warning! Line : ".$line ." : ($dir)";
$outs .= "";
$outs .= '";
//$outs .= "";
}
if($config['print_result']==1){
echo "- $file
";
}else if( $matches[0] ) {
echo "- $file
";
echo $outs;
}
}
}
}
}
echo "
";
closedir($dir_handle);
}
$path = urldecode($config['path']);
echo "Directory Listing of $path
Find : ".htmlspecialchars($config['SearchString'])."
";
echo "Replace to :".htmlspecialchars($config['ReplaceTo'])."
File Type :".$config['SearchInFileType']."
";
echo "Script change : http to hxxp
";
$dir_handle = @opendir($path) or die("Unable to open $path");
list_dir($dir_handle,$path);
$endtime = microtime();
$endarray = explode(" ", $endtime);
$endtime = $endarray[1] + $endarray[0];
$totaltime = $endtime - $starttime;
$totaltime = round($totaltime,5);
echo "
This page loaded in $totaltime seconds.";
} // End Step 2
elseif($_GET['step']=="3"){ // Start Step 3
header('Content-Type: text/html');
header('Pragma: no-cache');
$outputWhenReplace='';
function replace_line_by_number($line, $file){
global $config;
global $outputWhenReplace;
$contents = array();
$new_contents = "";
$number_of_lines = 0;
if(file_exists($file)) {
if($contents = file($file)){
$number_of_lines = count($contents);
if($line <= $number_of_lines) {
$contents = array_map("trim", $contents);
if($config['HowReplace']=='1'){// Remove Line
unset($contents[($line-1)]);
}elseif($config['HowReplace']=='2'){ // Replace Line
$contents[($line-1)] = $config['ReplaceTo'];
}elseif($config['HowReplace']=='3'){// Find and Replace String
$contents[($line-1)] = str_replace($config['SearchString'], $config['ReplaceTo'] , $contents[($line-1)]);
}elseif($config['HowReplace']=='4'){ // Auto Find and remove from Regular
foreach($config['virus_core'] as $code) {
preg_match_all($code, $contents[($line-1)], $match);
if(count($match[0]) > 0)
$outputWhenReplace = $contents[($line-1)] = preg_replace($code, $config['ReplaceTo'], $contents[($line-1)]);
}
}
$new_contents = implode("\n", $contents);
if(is_writable($file)){ if($handle = fopen($file, 'w')) if(fwrite($handle, $new_contents) !== false) return true; }
else if($config['ftp_mode'])
{
if(($conn_id = @ftp_connect($config['ftp_host'])) && @ftp_login($conn_id, $config['ftp_user'], $config['ftp_pass'])) {
echo "
";
if($config['ftp_passiveMode']) ftp_pasv($conn_id,TRUE);
$buffer = explode("/",$file);
for($i=0 ; $i<= count($buffer) ; $i++){
unset($buffer[$i]);
$bfile = implode("/", $buffer);
$oldpermiss = substr(sprintf('%o', fileperms($file)), -4);
if(@ftp_chmod($conn_id, 0777,$bfile )){ echo "
Chmod file to : 0777 [$bfile]"; break; }else{ continue; }
}
if($config['ftp_permission']=='') $config['ftp_permission'] = $oldpermiss;
if($config['ftp_createbackup']){ if(ftp_put($conn_id, $bfile.".backup", $file, FTP_ASCII)) echo"
Create Backup file : {$file}.backup"; }
if($handle = fopen($file, 'w')) if(fwrite($handle, $new_contents)) echo "
Process : remove or replace line : ".($line)." [$bfile]";
if(@ftp_chmod($conn_id, octdec($config['ftp_permission']),$bfile )) echo "
Chmod file to : ".$config['ftp_permission']." [$bfile]";
//$fp = fopen( $file.'.temp','w'); if(fwrite($fp,stripslashes($new_contents))) echo"
Create temp file {$file}.temp"; fclose($fp);
//if(ftp_delete($conn_id, $bfile)) echo "
Delete : ".$bfile;
//if(ftp_rename($conn_id, $file.'.temp', $bfile, FTP_ASCII)) echo "
Rename : .temp to normal file";
//if(ftp_chmod($conn_id, $config['ftp_permission'], $bfile)) echo "
Chmod file to : ".$config['ftp_permission'];
ftp_close($conn_id);
echo ""; return true;
}else{
echo "
Error ! FTP ! 530 Login incorrect. [invalid : Host Name or Username or Password]"; return false;
}
}else{ echo "
Error ! $file could not be opened for writing / Please turn on ftp option"; return false; }
} else{ echo "
Error !$file only has $number_of_lines lines, so line $line could not be removed "; return false; }
} else { echo "
Error ! $file is not readable"; return false; }
}else { echo "
Error ! $file does not exist"; return false; }
}
$pathAfile = str_replace ( array("-x-",'%5C'), "/",$_GET['filepath']);
if($rer = replace_line_by_number($_GET['line'],$pathAfile)){
echo '
';
echo"".htmlspecialchars($outputWhenReplace)."";
echo "Success";
}
} // End Step 3
elseif($_GET['step']=="4"){ // Report Function Start step 4
header('Content-Type: text/html');
header('Pragma: no-cache');
$url = "http://fizscript.ishare.in.th/recreport.php";
$curl = curl_init();
curl_setopt($curl, CURLOPT_URL,$url);
curl_setopt($curl, CURLOPT_TIMEOUT, 30);
curl_setopt($curl, CURLOPT_USERAGENT, sprintf("Mozilla/%d.0",rand(4,5)));
curl_setopt($curl, CURLOPT_HEADER, 0);
curl_setopt($curl, CURLOPT_POST, 1);
curl_setopt($curl, CURLOPT_POSTFIELDS,"fromMail=$fromMail&fromWeb=$fromWeb&line=$line&value=$value&filepath=$filepath");
curl_setopt($curl, CURLOPT_HTTPHEADER,array("Content-type: application/x-www-form-urlencoded"));
$result= curl_exec ($curl);
curl_close ($curl);
}// End Step 4
if(isset($_GET['step']) <= '2' ){
echo '