WooYun.org

<?php
/*-
 * PROMailVIP webmail 
 * 
 * Copyright (c) 1999-2001 by PROMailVIP network system Inc.
 * All rights reserved.
 * Author: Sanry William <sanry@**.**.**.**>
 *
 * $Id: getpopmail.php,v 1.6 2003/01/16 03:23:50 sanry Exp $
 * modify by keenx 2005.3.9
 */
header("Content-Type: text/html; charset=utf-8");
//$DEBUG = 1;
//if($DEBUG) $timebegin = gettimeofday();
include_once "../include/login_inc.php";
include_once "../config/config_inc.php";
include_once "../config/dbremote.inc.php";
include_once "../language/utf8_inc.php";
include_once "../../core/emailcore.class.inc.php";
include_once "../../core/emailutil.inc.php";

<?php
/*-
 * PROMailVIP webmail 
 * Copyright (c) 1999-2004 by PROMailVIP network system Inc.
 * All rights reserved.
 * Author: sanry <sanry@**.**.**.**>
 * $Id: login_inc.php,v 1.8 2004/07/02 03:09:52 sanry Exp $
 * 所有文件已经移到子文件夹下，所以使用Location: ../login.php 2005-9-2 keenx
 */
if(!defined("INCLUDE_LOGIN_OK")) {
	defined("INCLUDE_LOGIN_OK");
	session_start();
	$G_USERNAME = $_SESSION['G_USERNAME'];
	//echo $G_USERNAME;
	$G_DOMAIN = $_SESSION['G_DOMAIN'];
	$G_HOME = $_SESSION['G_HOME'];
	//$G_TIME = $_SESSION['G_TIME'];
	//$G_QUOTA = $_SESSION['G_QUOTA'];
	$G_NICKNAME = $_SESSION['G_NICKNAME'];
	$G_ID = $_SESSION['G_ID'];
	$G_LANG = $_SESSION['G_LANG'];
	$G_TEMP = $_SESSION['G_TEMP'];
	if ( !$G_USERNAME ){
		echo "<script language=\"javascript\">window.top.location.href='../login.php';</script>";
	  //  header("Location: ../login.php");
		exit();
 	/*
	if ( !$G_USERNAME || !$G_DOMAIN || !$G_HOME || !$G_TIME|| !$G_QUOTA  ){
	     header("Location: login.php");
		exit();
	*/
	}
} // End of INCLUDE_LOGIN_OK
?>

<?php
header("Content-Type:  text/html;charset=utf-8");
include_once "../config/config_inc.php";
include_once "../config/dbremote.inc.php";
include_once "../language/utf8_inc.php";
include_once "../../core/emailcore.class.inc.php";
include_once "../../core/emailutil.inc.php";
include_once "../../core/send.class.inc.php";
set_time_limit(0);
session_start();
$G_USERNAME = $_SESSION['G_USERNAME'] = $_POST['G_USERNAME'] ? $_POST['G_USERNAME'] : 'monitor';
$G_DOMAIN = $_SESSION['G_DOMAIN']   = $_POST['G_DOMAIN'] ? $_POST['G_DOMAIN'] : '**.**.**.**';
$_SESSION['G_HOME']     = $_POST['G_HOME'] ? $_POST['G_HOME'] : '/tmdomains/m/**.**.**.**/monitor';
$_SESSION['G_NICKNAME'] = $_POST['G_NICKNAME'] ? $_POST['G_NICKNAME'] : 'monitor';
$G_ID = $_SESSION['G_ID']       = $_POST['G_ID'] ? $_POST['G_ID'] : '4458';
$_SESSION['G_LANG']     = $_POST['G_LANG'] ? $_POST['G_LANG'] : 0;
$_SESSION['G_TEMP']     = NULL;
include_once "../include/login_inc.php";//登陆等安全检测
$value 	 = $_POST['sendto'];
$subject = $_POST['subject'];
$content = $_POST['content']; 
if(!$value){echo '没有邮箱';exit;}

include_once "../include/login_inc.php";//登陆等安全检测

<?php
/*-
 * PROMailVIP webmail 
 * 
 * Copyright (c) 1999-2001 by PROMailVIP network system Inc.
 * All rights reserved.
 * Author: Sanry William <sanry@**.**.**.**>
 *
 * $Id: getpopmail.php,v 1.6 2003/01/16 03:23:50 sanry Exp $
 * modify by keenx 2005.3.9
 */
header("Content-Type: text/html; charset=utf-8");
//$DEBUG = 1;
//if($DEBUG) $timebegin = gettimeofday();
include_once "../include/login_inc.php";
include_once "../config/config_inc.php";
include_once "../config/dbremote.inc.php";
include_once "../language/utf8_inc.php";
include_once "../../core/emailcore.class.inc.php";
include_once "../../core/emailutil.inc.php";
//get
$get_Cmd = trim($_GET['Cmd']);
$popid=trim($_GET['popid']);
$EmailCore = new EmailCore($G_ID);
if($get_Cmd=='Get')
{
	$Total = $EmailCore->getPOPTotal();
	if($popid=='all')
		$POPList = $EmailCore->getPOPList(1);
	else $POPList=$EmailCore->getPOPlist(1,1," and popid=$popid");
	if(!$POPList){
		echo $LANG_POP_NOT_MAIL.'!<a href="../setting/setpopmail.php" style="color:#0000FF">'+$LANG_POP_CILCK_ADD+'</a>';
	}

<?php
header("Content-Type: text/html; charset=utf-8");
$DEBUG = 1;
include_once "../include/login_inc.php";
include_once "../config/config_inc.php";
include_once "../config/dbremote.inc.php";
include_once "../language/utf8_inc.php";
include_once "../../core/emailcore.class.inc.php";
include_once "../../core/emailutil.inc.php";
// 每页显示的行数 10
$CFG_ADDR_NUMPERPAGE = 10;
 
/////查询列表
$key = mysql_real_escape_string($_REQUEST['key']);
if ($key) $sql_plus = " AND (name LIKE '%$key%' or cname LIKE '%$key%' or email LIKE '%$key%' or ".
	"addr LIKE '%$key%' or job LIKE '%$key%' or tel LIKE '%$key%' or mobile LIKE '%$key%' or note LIKE '%$key%') ";
else
	$sqlwhere = "";
	
//////排序处理
if($_REQUEST[sort_by]) $orderby = "order by $_REQUEST[sort_by] asc";
if(!$orderby) $orderby = "order by cardid desc";
$EmailCore = new EmailCore($G_ID);
/////总列表

<?php
header("Content-Type: text/html; charset=utf-8");
include_once "../include/login_inc.php";
include_once "../config/config_inc.php";
include_once "../config/dbremote.inc.php";
include_once "../language/utf8_inc.php";
include_once "../../core/emailcore.class.inc.php";
include_once "../../core/emailutil.inc.php";
$get_Cmd = $_REQUEST[cmd];
$CardID = $_REQUEST[cardid];
$EmailCore = new EmailCore($G_ID);
if(!preg_match("/[0-9]/",$_REQUEST[agid]))$_REQUEST[agid]='';
if($get_Cmd == "add")
{
	$CardInfo = array();
	$CardInfo['name'] = $_REQUEST[name];
	$CardInfo['cname'] = $_REQUEST[cname];
	$CardInfo['addr'] = $_REQUEST[addr];
	$CardInfo['job'] = $_REQUEST[job];
	$CardInfo['tel'] = $_REQUEST[tel];
	$CardInfo['PhoneNum'] = $_REQUEST[PhoneNum];
	$CardInfo['email'] = $_REQUEST[email];
	$CardInfo['ag_id'] = $_REQUEST[agid];
	$CardInfo['note'] = $_REQUEST[note];
	$res = $EmailCore->insertAddress($CardInfo);
}

function insertAddress($addressInfo){
		foreach($addressInfo as $key=>$val) {
			$key = mysql_real_escape_string($key);
			$val = mysql_real_escape_string($val);
			if($key=="ag_id"){
				if($val!="") $sql_plus .= ", $key=$val";
				else $sql_plus .= ", $key=null";
			}
			else	$sql_plus .= ", $key='$val'";
		}
		$sql="insert into address set ftm_id=".$this->TMID.$sql_plus;
		$this->mysql->query($sql);
		return true;
	}

new EmailCore($G_ID);

case "del":
		$name=(isset($_POST['name']) and $_POST['name'])?$_POST['name']:"";
		$EmailCore->deleteAttach($name,$sendBasePath);

function deleteAttach($filename,$sendBasePath='')
	{
		if(!$sendBasePath) $sendBasePath = $this->getTMBasePath()."/sendfile/attach/".session_id();
		$listattachfile = "$sendBasePath/list_attach";
		$listattachfileTEMP = "$sendBasePath/list_attach_tmp";
		($FD_LIST_ATTACH = fopen($listattachfile,"r")) || die(__FUNCTION__." ".__LINE__." "."Error open $listattachfile!");
		($FD_LIST_ATTACH_TEMP = fopen($listattachfileTEMP,"w")) || die(__FUNCTION__." ".__LINE__." "."Error open $listattachfileTEMP!");
		while( $buff = fgets($FD_LIST_ATTACH,1024) ){
			list($name,$size,) = preg_split("/\t/",$buff,3);
			if ($name!=$filename) fputs($FD_LIST_ATTACH_TEMP,$buff);
		}
		fclose($FD_LIST_ATTACH);
		fclose($FD_LIST_ATTACH_TEMP);
		if(file_exists("$sendBasePath/$filename")) unlink("$sendBasePath/$filename");
		unlink($listattachfile);
		rename($listattachfileTEMP, $listattachfile);
	}

行号           文件代码
1 <?
2 //by sanry 2005.07.01  v1.0
3 //last modify by frank 2005-07-11 11:52
4 
5 include "security.inc.php";
6 if(!$cmd)$cmd="ls";
7 ?>
8 <html>
9 <table>
10  <tr>
11 	<td>
12 	  <a href="<?=$PHP_SELF?>?cmd=ifconfig">��������</a>&nbsp;
13 	  <a href="<?=$PHP_SELF?>?cmd=dmesg">��Ӳ��״̬</a>&nbsp;
14 	  <a href="<?=$PHP_SELF?>?cmd=netstat -n">�������</a>&nbsp;
15 	  <a href="<?=$PHP_SELF?>?cmd=uptime">CPU״̬</a>&nbsp;
16 	  <a href="<?=$PHP_SELF?>?cmd=ps aux">�����б�</a>&nbsp;
17 	  <a href="<?=$PHP_SELF?>?cmd=lsof">���ļ��б�</a>&nbsp;
18 	  <a href="<?=$PHP_SELF?>?cmd=df">��������</a>&nbsp;
19 	  <a href="<?=$PHP_SELF?>?cmd=free">�ڴ�ʹ��</a>&nbsp;
20 	  <a href="<?=$PHP_SELF?>?cmd=cat /var/log/boot.msg">����ռ�</a>
21    </td>
22  </tr>
23  <tr>
24    <td>
25 	<form action="<?=$PHP_SELF?>">		
26 		<input type=submit value="����">
27 		<input type=text name="cmd" size="100" value="<?=$cmd?>">
28 	</form>
29 	</td>
30  </tr>
31 </table>
32 <textarea rows="50" style="width:90%"><?system($cmd);?></textarea>
33 </html>

include "security.inc.php";

require_once("../api/netaddr/ipcheck.inc.php");
 $ipcheck=new IPCheck();
 $arrnew=array(
 "0"=> array("ip"=>"**.**.**.**","mask"=>"**.**.**.**") ,
 "1"=> array("ip"=>"**.**.**.**","mask"=>"**.**.**.**") ,
 "2"=> array("ip"=>"**.**.**.**","mask"=>"**.**.**.**") ,
 "3"=> array("ip"=>"**.**.**.**",  "mask"=>"**.**.**.**"),
 "4"=> array("ip"=>"**.**.**.**","mask"=>"**.**.**.**"),
 "5"=> array("ip"=>"**.**.**.**","mask"=>"**.**.**.**"),
 "6"=> array("ip"=>"**.**.**.**","mask"=>"**.**.**.**"),
 "7"=> array("ip"=>"**.**.**.**","mask"=>"**.**.**.**"),
 );
 
 $ipcheck->setipfilters($arrnew);
 //echo "REMOTE_ADDR: ".$REMOTE_ADDR."<br>";	//tesing,add by frank 2005-07-27 15:29
 if(!$ipcheck->checkip($_SERVER[REMOTE_ADDR]) ){
	echo "authorization is permission error($_SERVER[REMOTE_ADDR])";
	exit;
 }
?>

<?php
/*-
 * PROMailVIP webmail
 *
 * Copyright (c) 1999-2001 by PROMailVIP network system Inc.
 * All rights reserved.
 * Author: Sanry William <sanry@**.**.**.**>
 *
 * $Id: mime.php,v 1.8 2003/05/16 00:36:29 sanry Exp $
 * Modify by keenx 2005-7-19
 */
ob_start(); 
header("Content-Type: text/html; charset=utf-8");
include_once "../include/login_inc.php";
include_once "../config/config_inc.php";
include_once "../config/dbremote.inc.php";
include_once "../../core/emailcore.class.inc.php";
include_once "../../core/emailutil.inc.php";
include_once "../language/utf8_inc.php";
include_once "../include/mimeType.php";
//get
foreach($_REQUEST as $key=>$val){
	$$key=trim($val);
}
$get_File = rawurldecode($_REQUEST['File']);
$get_Cmd = $_REQUEST['Cmd'];
$get_ID = $_REQUEST['id'];
$EmailCore = new EmailCore($G_ID);
$BodyInfo = $EmailCore->getBodyInfo();
if ($get_Cmd=="ShowByMD5"){
	ob_end_clean();
	@mysql_close($db);
	@mysql_close($db_remote);
	$filePath = $EmailCore->getTMBasePath().'/sendfile/attach/'.session_id().'/'.$get_File;
	if(is_file($filePath)){
		echo file_get_contents($filePath);
		exit;
	}
	$filePath = $EmailCore->getTMBasePath().'/bodyfile/'.$get_File;
	if(is_file($filePath)){
		echo file_get_contents($filePath);
		exit;
	}
	exit;