AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Редактирование файла

<?php
include("include/config.php");
include("include/connect.php");
include("include/function.php");
//require_once('PHPMailer/class.phpmailer.php');
@header("Content-Type: text/html; charset=utf-8");

$checkPassword = base64_encode($_POST['password']);
if (!get_magic_quotes_gpc())
	$checkPassword = addslashes($checkPassword);

$sql = "
	SELECT member_id, active_status, last_login, email
	FROM member
	WHERE username = '".$_POST['username']."'
	AND password = '".$checkPassword."'
";
$query = sql_query($sql);
if (sql_num_rows($query) > 0) {
	$rec = sql_fetch_array($query);
	
	if ($rec['active_status'] == 0) {
	
			$to  = $rec['email'];
			$subject = 'аёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃ '.$webmasterName;
			$message = 'аёЄаё§аё±аёЄаё”аёµаё„аёЈаё±аёљ аёўаёґаё™аё”аёµаё•а№‰аёаё™аёЈаё±аёљаёЄаё№а№€ MSN Ladyboy dot Com<br />
			<br />
			аёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃ  &nbsp;&nbsp;&nbsp;<a href="'.$configWebsiteName.'activeMember.php?mid='.base64_encode($rec['member_id']).'&email='.base64_encode($to).'"><font size="5">аёЃаёЈаёёаё“аёІаё„аёҐаёґа№ЉаёЃ</font></a><br />
			<br />
			аё«аёЈаё·аёаё„аёҐаёґаёЃаё—аёµа№€аё™аёµа№€ <a href="'.$configWebsiteName.'/activeMember.php?mid='.base64_encode($rec['member_id']).'&email='.base64_encode($to).'">'.$configWebsiteName.'/activeMember.php?mid='.base64_encode($rec['member_id']).'&email='.base64_encode($to).'</a>
			<br />
			<br />
			аё”а№‰аё§аёўаё„аё§аёІаёЎа№Ђаё„аёІаёЈаёћаёаёўа№€аёІаё‡аёЄаё№аё‡<br />
			MSN Ladyboy dot Com<br />
			'.$configWebsiteName;
			
			$fromname = $webmasterName;
			$frommail = $webmasterMail;
			
			sendMailEncode($to, $fromname, $frommail, $subject, $message, $cType='html',$CC="",$BCC="",$attach="",$attach_name="");
	
	?>
    	<script language="javascript">
			alert('аё—а№€аёІаё™аёўаё±аё‡а№„аёЎа№€а№„аё”а№‰аёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃ аёЈаё°аёљаёља№„аё”а№‰аёЄа№€аё‡аёаёµа№ЂаёЎаёҐа№Њаёўаё·аё™аёўаё±аё™аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№„аё›а№ѓаё«а№‰аё—а№€аёІаё™а№ЃаёҐа№‰аё§ аёЃаёЈаёёаё“аёІаё„аёҐаёґа№ЉаёЃаё—аёµа№€аёҐаёґаё‡аё„а№Ња№ѓаё™аёаёµа№ЂаёЎаёҐа№Њаё”аё±аё‡аёЃаёҐа№€аёІаё§а№Ђаёћаё·а№€аёа№ѓаё«а№‰аёЃаёІаёЈаёЄаёЎаё±аё„аёЈаёЄаёЎаёІаёЉаёґаёЃа№ЂаёЄаёЈа№‡аё€аёЄаёЎаёљаё№аёЈаё“а№Њаё„аёЈаё±аёљ\nаёЃаёЈаёёаё“аёІаё•аёЈаё§аё€аёЄаёаёља№ѓаё™ Junk Box а№ЃаёҐаё° Spam Box аё”а№‰аё§аёўаё„аёЈаё±аёљ');
			window.location = '/<?php echo $configMyFileFirstPage?>';
		</script>
    <?php
		exit();
	} else {
	
		/*if (isset($_COOKIE["$configCookieNameBan"])) {
		?>
			<script language="javascript">
				alert('IP аё™аёµа№‰аё–аё№аёЃ Ban а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЈаё°аёљаёља№„аё”а№‰');
				window.location = '<?php echo $configMyFileFirstPage?>';
			</script>	
		<?php
			exit();
		}*/
		
		/*if (!checkBandIP($_SERVER['REMOTE_ADDR'])) {
			@setcookie($configCookieNameBan, 'Ban', time()+3600*60*24*30*3);
			?>
			<script language="javascript">
				alert('IP аё™аёµа№‰аё–аё№аёЃ Ban а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЈаё°аёљаёља№„аё”а№‰');
				window.location = '/<?php echo $configMyFileFirstPage?>';
			</script>	
			<?php
			exit();
		}*/
		
		if (!checkBandEmail($rec['member_id'])) { 
			?>
            <script language="javascript">
				alert('Email аё‚аёаё‡аё„аёёаё“а№„аёЎа№€аёЄаёІаёЎаёІаёЈаё–а№ѓаёЉа№‰аё‡аёІаё™аёЃаё±аёља№Ђаё§а№‡аёља№„аё‹аё•а№Њаё™аёµа№‰а№„аё”а№‰\nа№Ђаё™аё·а№€аёаё‡аё€аёІаёЃ Email аё™аёµа№‰аё–аё№аёЃ Ban');
				window.location = '/<?php echo $configMyFileFirstPage?>';
			</script>
            <?php
			exit();
		}
		
		$_SESSION['s_member_id'] = $rec['member_id'];
		$last_login = $rec['last_login'];
		$nowDate = date("Y-m-d");
		if ($last_login <> $nowDate) {
			$sql = "UPDATE member SET last_login = '".$nowDate."', date_count = (date_count+1) WHERE member_id = '".$_SESSION['s_member_id']."' ";
			sql_query($sql);
		}
		
		//if ($_POST['remember'] == 1) {
			//@setcookie($configCookieNameMemberId,$_SESSION['s_member_id'],time()+3600*60*24*30*3);
		//}
		?>
		<script language="javascript">
			window.location = '/<?php echo $configMyFileFirstPage?>';
		</script>
		<?php
	} // end if ($rec['active_status'] == 0) {
} else {
	$_SESSION['s_old_username'] = $_POST['username'];
	?>
    <script language="javascript">
		alert('а№„аёЎа№€аёћаёљаё‚а№‰аёаёЎаё№аёҐаё‚аёаё‡аё„аёёаё“аёЃаёЈаёёаё“аёІаё•аёЈаё§аё€аёЄаёаёља№ѓаё«аёЎа№€');
		window.location = '/<?php echo $configMyFileFirstPage?>';
	</script>
    <?php
} // end if (sql_num_rows($query) > 0) {
?>

Rename: -