_ _ _ _ _ _ _ _ _ _ _ _ _ _ _
/ \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \
( U | - | 2 | 3 | 2 )-( S | o | u | r | c | e )-( C | o | d | e )
\_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/
*/
if (!defined('IN_INSTALLER09_ADMIN')) {
$HTMLOUT = '';
$HTMLOUT .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\n\t\t<head>\n\t\t<title>Error!</title>\n\t\t</head>\n\t\t<body>\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\n\t</body></html>";
echo $HTMLOUT;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once INCL_DIR . 'html_functions.php';
require_once CLASS_DIR . 'class_check.php';
$class = get_access(basename($_SERVER['REQUEST_URI']));
class_check($class);
$lang = array_merge($lang, load_language('ad_stats_extra'));
$inbound = array_merge($_GET, $_POST);
if (!isset($inbound['mode'])) {
$inbound['mode'] = '';
}
$form_code = '';
$month_names = array(1 => $lang['stats_ex_jan'], $lang['stats_ex_jan'], $lang['stats_ex_feb'], $lang['stats_ex_mar'], $lang['stats_ex_apr'], $lang['stats_ex_may'], $lang['stats_ex_jun'], $lang['stats_ex_jul'], $lang['stats_ex_sep'], $lang['stats_ex_oct'], $lang['stats_ex_nov'], $lang['stats_ex_dec']);
switch ($inbound['mode']) {
case 'show_reg':
result_screen('reg');
break;
case 'show_topic':
result_screen('topic');
break;
case 'topic':
* A bittorrent tracker source based on TBDev.net/tbsource/bytemonsoon.
* Project Leaders: Mindless, putyn.
*
*/
if (!defined('IN_INSTALLER09_ADMIN')) {
$HTMLOUT = '';
$HTMLOUT .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\n\t\t<head>\n\t\t<title>Error!</title>\n\t\t</head>\n\t\t<body>\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\n\t</body></html>";
echo $HTMLOUT;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once INCL_DIR . 'bbcode_functions.php';
require_once INCL_DIR . 'html_functions.php';
require_once INCL_DIR . 'pager_functions.php';
require_once CLASS_DIR . 'class_check.php';
class_check(UC_SYSOP);
$lang = array_merge($lang);
$HTMLOUT = "";
function mysql_fetch_all($query, $default_value = array())
{
$r = sql_query($query);
$result = array();
if ($err = is_object($GLOBALS["___mysqli_ston"]) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false)) {
return $err;
}
if (@mysqli_num_rows($r)) {
while ($row = mysqli_fetch_array($r)) {
$result[] = $row;
}
}
if (count($result) == 0) {
|--------------------------------------------------------------------------|
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _
/ \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \
( U | - | 2 | 3 | 2 )-( S | o | u | r | c | e )-( C | o | d | e )
\_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/
*/
//== pdq Class Checker and Verify Staff
if (!defined('IN_INSTALLER09_ADMIN')) {
$HTMLOUT = '';
$HTMLOUT .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\n\t\t<head>\n\t\t<title>Error!</title>\n\t\t</head>\n\t\t<body>\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\n\t</body></html>";
echo $HTMLOUT;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once CLASS_DIR . 'class_check.php';
class_check(UC_MAX);
$lang = array_merge($lang, load_language('ad_staff_config'));
function write_staffs2()
{
global $lang;
//==ids
$t = '$INSTALLER09';
$iconfigfile = "<" . "?php\n/**\n{$lang['staffcfg_file_created']}" . date('M d Y H:i:s') . ".\n{$lang['staffcfg_mod_by']}\n**/\n";
$ri = sql_query("SELECT id, username, class FROM users WHERE class BETWEEN " . UC_STAFF . " AND " . UC_MAX . " ORDER BY id ASC") or sqlerr(__FILE__, __LINE__);
$iconfigfile .= "" . $t . "['allowed_staff']['id'] = array(";
while ($ai = mysqli_fetch_assoc($ri)) {
$ids[] = $ai['id'];
$usernames[] = "'" . $ai["username"] . "' => 1";
}
$iconfigfile .= "" . join(",", $ids);
$iconfigfile .= ");";
| $Author$ putyn,Bigjoos
| $URL$
| $warned
|
+------------------------------------------------
*/
if (!defined('IN_INSTALLER09_ADMIN')) {
$HTMLOUT = '';
$HTMLOUT .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\r\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\r\n\t\t<head>\r\n\t\t<title>Error!</title>\r\n\t\t</head>\r\n\t\t<body>\r\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\r\n\t</body></html>";
echo $HTMLOUT;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once INCL_DIR . 'html_functions.php';
require_once CLASS_DIR . 'class_check.php';
class_check(UC_STAFF);
$lang = array_merge($lang);
$HTMLOUT = '';
function mkint($x)
{
return (int) $x;
}
$stdfoot = array('js' => array('wz_tooltip'));
$this_url = $_SERVER["SCRIPT_NAME"];
$do = isset($_GET["do"]) && $_GET["do"] == "disabled" ? "disabled" : "warned";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
$r = isset($_POST["ref"]) ? $_POST["ref"] : $this_url;
$_uids = isset($_POST["users"]) ? array_map('mkint', $_POST["users"]) : 0;
if ($_uids == 0 || count($_uids) == 0) {
stderr("Err", "Looks like you didn't select any user !");
}
*
*/
/*******************************************************
//=== shit list for staff to keep track of bad or suspected members personally
for BTDev 2010ish
*******************************************************/
if (!defined('IN_INSTALLER09_ADMIN')) {
$HTMLOUT = '';
$HTMLOUT .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\n\t\t<head>\n\t\t<title>Error!</title>\n\t\t</head>\n\t\t<body>\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\n\t</body></html>";
echo $HTMLOUT;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once INCL_DIR . 'bbcode_functions.php';
require_once CLASS_DIR . 'class_check.php';
class_check(UC_ADMINISTRATOR);
$lang = array_merge($lang);
$HTMLOUT = $message = $title = '';
//=== check if action2 is sent (either $_POST or $_GET) if so make sure it's what you want it to be
$action2 = isset($_POST['action2']) ? $_POST['action2'] : (isset($_GET['action2']) ? $_GET['action2'] : '');
$good_stuff = array('new', 'add', 'delete');
$action2 = $action2 && in_array($action2, $good_stuff, true) ? $action2 : '';
//=== action2 switch... do what must be done!
switch ($action2) {
//=== action2: new
case 'new':
$shit_list_id = isset($_GET['shit_list_id']) ? intval($_GET['shit_list_id']) : 0;
$return_to = str_replace('&', '&', htmlsafechars($_GET['return_to']));
$mc1->delete_value('shit_list_' . $CURUSER['id']);
if ($shit_list_id == $CURUSER["id"]) {
stderr("Error", "Cant add yerself");
| $URL$
| $snatched overview
|
+------------------------------------------------
*/
if (!defined('IN_INSTALLER09_ADMIN')) {
$HTMLOUT = '';
$HTMLOUT .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\r\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\r\n\t\t<head>\r\n\t\t<title>Error!</title>\r\n\t\t</head>\r\n\t\t<body>\r\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\r\n\t</body></html>";
echo $HTMLOUT;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once INCL_DIR . 'html_functions.php';
require_once INCL_DIR . 'pager_functions.php';
require_once CLASS_DIR . 'class_check.php';
class_check(UC_MODERATOR);
$lang = array_merge($lang, load_language('ad_snatched_torrents'));
$HTMLOUT = "";
function get_snatched_color($st)
{
global $lang;
$secs = $st;
$mins = floor($st / 60);
$hours = floor($mins / 60);
$days = floor($hours / 24);
$week = floor($days / 7);
$month = floor($week / 4);
if ($month > 0) {
$week_elapsed = floor(($st - $month * 4 * 7 * 24 * 60 * 60) / (7 * 24 * 60 * 60));
$days_elapsed = floor(($st - $week * 7 * 24 * 60 * 60) / (24 * 60 * 60));
$hours_elapsed = floor(($st - $days * 24 * 60 * 60) / (60 * 60));
* Copyright (C) 2010 Installer09 v.2
* A bittorrent tracker source based on TBDev.net/tbsource/bytemonsoon.
* Project Leaders: Mindless,putyn,kidvision.
**/
if (!defined('IN_INSTALLER09_ADMIN')) {
$HTMLOUT = '';
$HTMLOUT .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\r\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\r\n\t\t<head>\r\n\t\t<title>Error!</title>\r\n\t\t</head>\r\n\t\t<body>\r\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\r\n\t</body></html>";
echo $HTMLOUT;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once INCL_DIR . 'bbcode_functions.php';
require_once INCL_DIR . 'pager_functions.php';
require_once INCL_DIR . 'html_functions.php';
require_once CLASS_DIR . 'class_check.php';
class_check(UC_SYSOP, true, true);
$lang = array_merge($lang, load_language('ad_pmview'));
$stdfoot = array('js' => array('checkall'));
$HTMLOUT = '';
if (isset($_POST["delmp"])) {
$do = "DELETE FROM messages WHERE id IN (" . implode(", ", $_POST['delmp']) . ")";
$res = sql_query($do);
header("Refresh: 0; url=staffpanel.php?tool=pmview&action=pmview");
stderr("Success", "The messages where successfully deleted!");
}
$HTMLOUT .= '<script type="text/javascript">
/*<![CDATA[*/
var checkflag = "false";
var marked_row = new Array;
function check(field) {
if (checkflag == "false") {
| Project Leaders: Mindless,putyn. |
|--------------------------------------------------------------------------|
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _
/ \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \
( U | - | 2 | 3 | 2 )-( S | o | u | r | c | e )-( C | o | d | e )
\_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/
*/
if (!defined('IN_INSTALLER09_ADMIN')) {
$htmlout = '';
$htmlout .= "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\"\n\t\t\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n\t\t<html xmlns='http://www.w3.org/1999/xhtml'>\n\t\t<head>\n\t\t<title>Error!</title>\n\t\t</head>\n\t\t<body>\n\t<div style='font-size:33px;color:white;background-color:red;text-align:center;'>Incorrect access<br />You cannot access this file directly.</div>\n\t</body></html>";
echo $htmlout;
exit;
}
require_once INCL_DIR . 'user_functions.php';
require_once CLASS_DIR . 'class_check.php';
class_check(UC_MAX, true, true);
$lang = array_merge($lang, load_language('ad_systemview'));
$htmlout = '';
if (isset($_GET['phpinfo']) and $_GET['phpinfo']) {
@ob_start();
phpinfo();
$parsed = @ob_get_contents();
@ob_end_clean();
preg_match("#<body>(.*)</body>#is", $parsed, $match1);
$php_body = $match1[1];
// PREVENT WRAP: Most cookies
$php_body = str_replace("; ", ";<br />", $php_body);
// PREVENT WRAP: Very long string cookies
$php_body = str_replace("%3B", "<br />", $php_body);
// PREVENT WRAP: Serialized array string cookies
$php_body = str_replace(";i:", ";<br />i:", $php_body);
if (preg_match('/^([0-9]+)$/', $s) == 1) {
return true;
} else {
return false;
}
}
$sub = $_POST['sub'];
if ($_POST['name'] == NULL) {
$error['name'] = '1';
} else {
$name = $_POST['name'];
if ($_POST['class1'] == NULL) {
$error['class'] = '1';
} else {
$class = $_POST['class1'];
if (!class_check($class)) {
$error['class'] = '3';
} else {
if ($_POST['birthday'] == NULL) {
$error['birthday'] = '1';
} else {
$birthday = $_POST['birthday'];
if (!birthday_check($birthday)) {
$error['birthday'] = '3';
} else {
if ($_POST['email'] == NULL) {
$error['email'] = '1';
} else {
$email = $_POST['email'];
if (!email_check($email)) {
$error['email'] = '3';
if (preg_match('/^([0-9]{2,2})+([a-dA-d]{1,1})+([1-5]{1,1})$/', $s) == 1) {
return true;
} else {
return false;
}
}
if ($_POST['userid'] == NULL || !is_number($_POST['userid'])) {
$error['id'] = '1';
} else {
if ($_POST['username'] == NULL) {
$error['name'] = '1';
} else {
if ($_POST['userclass'] == NULL) {
$error['class'] = '1';
} else {
if (!class_check($_POST['userclass'])) {
$error['class'] = '2';
} else {
if ($_POST['userbirthday'] == NULL) {
$error['birthday'] = '1';
} else {
if (!birthday_check($_POST['userbirthday'])) {
$error['birthday'] = '2';
} else {
if ($_POST['useremail'] == NULL) {
$error['email'] = '1';
} else {
if (!email_check($_POST['useremail'])) {
$error['email'] = '2';
} else {
if ($_POST['userscode'] == NULL) {
$numrow = @mysql_affected_rows();
$records["customActionMessage"] = "Xóa " . $numrow . " tài khoản thành công";
break;
}
}
$sql = "SELECT * FROM `user` WHERE 1";
if ($_REQUEST['user_id'] != NULL) {
$sql .= " AND `id` LIKE '%" . $_REQUEST['user_id'] . "%'";
}
if ($_REQUEST['user_code'] != NULL) {
$sql .= " AND `scode` LIKE '%" . $_REQUEST['user_code'] . "%'";
}
if ($_REQUEST['user_name'] != NULL) {
$sql .= " AND `name` LIKE '%" . $_REQUEST['user_name'] . "%'";
}
if ($_REQUEST['user_class'] != NULL && class_check($_REQUEST['user_class'])) {
$sql .= " AND `class` LIKE '%" . $_REQUEST['user_class'] . "%'";
}
if ($_REQUEST['user_borrowing'] != NULL) {
$sql .= " AND `borrowing` LIKE '%" . $_REQUEST['user_borrowing'] . "%'";
}
if ($_REQUEST['user_verify'] != '0' && $_REQUEST['user_verify'] != NULL) {
if ($_REQUEST['book_verify'] == '1') {
$sql .= " AND `verify` ='1'";
} else {
$sql .= " AND `verify` ='0'";
}
}
switch ($_REQUEST['order']['0']['column']) {
case '1':
$sql .= " ORDER BY `id` " . $_REQUEST['order']['0']['dir'];
