PNG  IHDR;IDATxܻn0K )(pA 7LeG{ §㻢|ذaÆ 6lذaÆ 6lذaÆ 6lom$^yذag5bÆ 6lذaÆ 6lذa{ 6lذaÆ `}HFkm,mӪôô! x|'ܢ˟;E:9&ᶒ}{v]n&6 h_tڠ͵-ҫZ;Z$.Pkž)!o>}leQfJTu іچ\X=8Rن4`Vwl>nG^is"ms$ui?wbs[m6K4O.4%/bC%t Mז -lG6mrz2s%9s@-k9=)kB5\+͂Zsٲ Rn~GRC wIcIn7jJhۛNCS|j08yiHKֶۛkɈ+;SzL/F*\Ԕ#"5m2[S=gnaPeғL lذaÆ 6l^ḵaÆ 6lذaÆ 6lذa; _ذaÆ 6lذaÆ 6lذaÆ RIENDB` 1) return false; return true; } // Is the effective and real userID the same ? if(posix_getuid() != posix_geteuid()){ echo "EUID differs from UID. Hacking Attempt !"; exit; } //For enduser if(posix_getuid() != 0){ $TMP_USER = posix_getpwuid(posix_geteuid()); $TMP_HOME = $TMP_USER['dir']; // Create the directory if it does not exist if(!is_dir($TMP_HOME.'/.sitepad/sess/')){ @mkdir($TMP_HOME.'/.sitepad/sess/', 0711, true); } // Load the Panel $sess = md5(uniqid(microtime())); $file = $TMP_HOME.'/.sitepad/sess/'.$sess; // Touch the file touch($file); chmod($file, 0600); $fp = fopen($file, "a"); if(empty($fp)){ die('Could not write SESSION DATA.'); } $array = array(); $array['SERVER'] = $_SERVER; $array['POST'] = $_POST; $array['GET'] = $_GET; $array['REQUEST'] = $_REQUEST; $array['COOKIE'] = $_COOKIE; $array['SESSION'] = $_SESSION; fwrite($fp, json_encode($array)); fclose($fp); chmod($file, 0600); session_write_close(); if(file_exists('/usr/local/cwpsrv/var/services/users')){ // echo '/usr/local/sitepad/bin/soft '.$sess; die(); echo shell_exec('/usr/local/sitepad/bin/soft '.$sess); }else{ die('Not supported'); //echo '/usr/local/cwp/php/bin/php /usr/local/cwp/sitepad/load.php '.$sess; //echo shell_exec('/usr/local/cwp/php/bin/php /usr/local/cwp/sitepad/load.php '.$sess); } @unlink($file); // load.php will also try to delete it! // Just to ensure that there should not be any files as a security measures. $d = date('i'); if($d % 2 == 0){ if ($dh = opendir($TMP_HOME.'/.sitepad/sess/')) { while (($dfile = readdir($dh)) !== false) { if($dfile == '.' || $dfile == '..') continue; clearstatcache(); $stime = filemtime($TMP_HOME.'/.sitepad/sess/'.$dfile); // Delete the file if its there for more than 10 seconds if($stime < (time() - 10)){ @soft_unlink_user_file($TMP_HOME.'/.sitepad/sess/'.$dfile); } } closedir($dh); } } }else{ @define('SITEPAD', 1); //Set error reporting error_reporting(E_PARSE); #~~~~~~~~~~~~~~~~~~~~~~~~ # SOFTACULOUS VARIABLES #~~~~~~~~~~~~~~~~~~~~~~~~ if(empty($globals)){ include_once('/usr/local/sitepad/universal.php'); } include_once($globals['path'].'/globals.php'); include_once($globals['mainfiles'].'/functions.php'); // Load the nupanel Class if(!class_exists('nupanel')){ include_once($globals['includes_path'].'/nupanel.php'); } include_once($globals['includes_path'].'/admin.php'); }