403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/baberankings.com.bak/members/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/baberankings.com.bak/members/tpltest.php
<?
    	
    # Replace variables
        function template_replace_vars($s) {
                return '\''.preg_replace('/<%(.*)%>/sU', '\'.'.'do_format(\'\\1\')'.'.\'', $s).'\'';
                }

        function echo_replace_vars($s) {
                $s = preg_replace('/<%_(.*)%>/sU', '<? echo \\1; ?>', $s);
                $s = str_replace('<%dir%>', '<? echo constant(\'dir\'); ?>', $s);
        		return preg_replace('/<%(.*)%>/sU', '<? echo '.'do_format(\'\\1\')'.'; ?>', $s);
                }
                
    # Format replaced vars
        function do_format($value,$s) {
                global $en;
                $value = (isset($en[$value]) ? $en[$value] : @constant($value));
                $i = strtolower($s);
                if (strpos($i,'echo') || strpos($i,'define')) {
                        $value = str_replace('"','`',$value);
                        $value = str_replace(chr(39),'`',$value);
                        }
                return $value;
                }

		function format_loop($s) {
				return '<? $query = '.template_replace_vars($s).'; $rid = uniquid(\'sql_\'); $$rid = sql_query($query); $en[\'loops_count\'] = $en[\'loops_left\'] = $en[\'loops_count\'][$rid] = sql_num_rows($$rid); while ($line = sql_fetch_assoc($$rid)) {$en[\'loops\'][$rid]++; $en[\'loops_left\'] = $en[\'loops_count\'][$rid] - $en[\'loops\'][$rid]; $en[\'loops_index\'] = $en[\'loops\'][$rid]; ?>';
				}
				
		function array_loop($s) {
				return '<? global '.$s.';$query = '.template_replace_vars($s).'; $rid = uniquid(\'sql_\'); $$rid = sql_query($query); $en[\'loops_count\'] = $en[\'loops_left\'] = $en[\'loops_count\'][$rid] = sql_num_rows($$rid); while ($line = sql_fetch_assoc($$rid)) {$en[\'loops\'][$rid]++; $en[\'loops_left\'] = $en[\'loops_count\'][$rid] - $en[\'loops\'][$rid]; $en[\'loops_index\'] = $en[\'loops\'][$rid]; ?>';
				}				

		function format_array($s) {
				list($arr,$query) = explode(' ',$s,2);
				return '<? global '.$arr.'; '.$arr.' = array_merge('.$arr.',sql_fetch_assoc(sql_query("'.$query.'"))); ?>';
				}			
					
        function make_php($file) {
    		
    		//get template content
    		$f = fopen($file,'r');
                if (!$f) return false;
    			$s = fread($f,filesize($file));
    			fclose($f);
    			    		
    		//if structures
    			$s = str_replace('<!--[If End]-->','<? } ?>',$s);
    			$s = str_replace('<!--[If Else]-->','<? } else { ?>',$s);
    			$s = preg_replace('/<!--\[If Start (.*)\]-->/',"<? if (\\1) { ?>",$s);    			
    			    		
    		//loop structures
    			$s = str_replace('<!--[Loop End]-->','<? } ?>',$s);
    			$s = preg_replace('/<!--\[Loop Start QUERY\:(.*)\]-->/e','format_loop(addslashes(\'\\1\'))',$s);    			    			
    			$s = preg_replace('/<!--\[Loop Start (.*)\]-->/e','array_loop(addslashes(\'\\1\'))',$s);
    						    			
    		//arrays
    			$s = preg_replace('/<!--\[Array (.*)\]-->/e','format_array(addslashes(\'\\1\'))',$s);    			
    			
    		//includes
    			$s = preg_replace('/<!--\[Include File (.*)\]-->/',"<? include '\\1'; ?>",$s);    			
    		
    		//template includes
    			$s = preg_replace('/<!--\[Include Template (.*)\]-->/',"<? load_template('\\1'); ?>",$s);    			
    	
    		//variables
    			$s = echo_replace_vars($s);	
    			
    		//break/continue	
    			$s = str_replace('<!--[Break]-->','<? break; ?>',$s);
    			$s = str_replace('<!--[Continue]-->','<? continue; ?>',$s);
    			
    		//merge PHP blocks
    			$s = str_replace("\r",'',$s);	
    			$s = str_replace("?>\n<?",'',$s);	
    			$s = str_replace("\n\n",'',$s);	    			
    			$s = str_replace("?><?",'',$s);	
    			
    	return $s;	
    	}
    		
    function load_template($file) {
    	$s = make_php($file);
    	eval($s);    	
    	}
    //echo make_php('templates/default/left_side.tpl');
    		
?>

Youez - 2016 - github.com/yon3zu
LinuXploit