!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/admin/webmail/program/steps/mail/   drwxr-xr-x
Free 9.32 GB of 93.48 GB (9.97%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     attachments.inc (4.63 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

/*
 +-----------------------------------------------------------------------+
 | program/steps/mail/attachments.inc                                    |
 |                                                                       |
 | This file is part of the RoundCube Webmail client                     |
 | Copyright (C) 2005-2009, RoundCube Dev. - Switzerland                 |
 | Licensed under the GNU GPL                                            |
 |                                                                       |
 | PURPOSE:                                                              |
 |   Upload, remove, display attachments in compose form                 |
 |                                                                       |
 +-----------------------------------------------------------------------+
 | Author: Thomas Bruederli <roundcube@gmail.com>                        |
 +-----------------------------------------------------------------------+

 $Id: compose.inc 2081 2008-11-23 12:38:44Z thomasb $

*/


if (!$_SESSION['compose']) {
  die(
"Invalid session var!");
}


// remove an attachment
if ($RCMAIL->action=='remove-attachment')
{
  
$id 'undefined';
  if (
preg_match('/^rcmfile(\w+)$/'$_POST['_file'], $regs))
    
$id $regs[1];
  if (
$attachment $_SESSION['compose']['attachments'][$id])
    
$attachment $RCMAIL->plugins->exec_hook('remove_attachment'$attachment);
  if (
$attachment['status']) {
    if (
is_array($_SESSION['compose']['attachments'][$id])) {
      unset(
$_SESSION['compose']['attachments'][$id]);
      
$OUTPUT->command('remove_from_attachment_list'"rcmfile$id");
    }
  }
  
  
$OUTPUT->send();
  exit;
}

if (
$RCMAIL->action=='display-attachment')
{
  
$id 'undefined';
  if (
preg_match('/^rcmfile(\w+)$/'$_GET['_file'], $regs))
    
$id $regs[1];
  if (
$attachment $_SESSION['compose']['attachments'][$id])
    
$attachment $RCMAIL->plugins->exec_hook('display_attachment'$attachment);
    
  if (
$attachment['status']) {
    
$size $attachment['data'] ? strlen($attachment['data']) : @filesize($attachment['path']);
    
header('Content-Type: ' $attachment['mimetype']);
    
header('Content-Length: ' $size);
    
    if (
$attachment['data'])
      echo 
$attachment['data'];
    else if (
$attachment['path'])
      
readfile($attachment['path']);
  }
  exit;
}

// attachment upload action

if (!is_array($_SESSION['compose']['attachments'])) {
  
$_SESSION['compose']['attachments'] = array();
}

// clear all stored output properties (like scripts and env vars)
$OUTPUT->reset();

if (
is_array($_FILES['_attachments']['tmp_name'])) {
  foreach (
$_FILES['_attachments']['tmp_name'] as $i => $filepath) {
    
$attachment = array(
      
'path' => $filepath,
      
'name' => $_FILES['_attachments']['name'][$i],
      
'mimetype' => rc_mime_content_type($filepath$_FILES['_attachments']['name'][$i], $_FILES['_attachments']['type'][$i])
    );

    
$attachment $RCMAIL->plugins->exec_hook('upload_attachment'$attachment);

    if (
$attachment['status'] && !$attachment['abort']) {
      
$id $attachment['id'];
      
      
// store new attachment in session
      
unset($attachment['status'], $attachment['abort']);
      
$_SESSION['compose']['attachments'][$id] = $attachment;
      
      if ((
$icon $_SESSION['compose']['deleteicon']) && is_file($icon)) {
        
$button html::img(array(
          
'src' => $icon,
          
'alt' => rcube_label('delete')
        ));
      }
      else {
        
$button Q(rcube_label('delete'));
      }

      
$content html::a(array(
        
'href' => "#delete",
        
'onclick' => sprintf("return %s.command('remove-attachment','rcmfile%s', this)"JS_OBJECT_NAME$id),
        
'title' => rcube_label('delete'),
      ), 
$button);

      
$content .= Q($attachment['name']);
      
      
$OUTPUT->command('add2attachment_list'"rcmfile$id"$content);
    }
    else {  
// upload failed
      
$err $_FILES['_attachments']['error'][$i];
      if (
$err == UPLOAD_ERR_INI_SIZE || $err == UPLOAD_ERR_FORM_SIZE) {
        
$msg rcube_label(array('name' => 'filesizeerror''vars' => array('size' => show_bytes(parse_bytes(ini_get('upload_max_filesize'))))));
      }
      else if (
$attachment['error']) {
        
$msg $attachment['error'];
      }
      else {
        
$msg rcube_label('fileuploaderror');
      }
    
      
$OUTPUT->command('display_message'$msg'error');
    }
  }
}
else if (
$_SERVER['REQUEST_METHOD'] == 'POST') {
  
$OUTPUT->command('display_message'rcube_label('fileuploaderror'), 'error');
}

// send html page with JS calls as response
$OUTPUT->command('show_attachment_form'false);
$OUTPUT->command('auto_save_start'false);
$OUTPUT->send('iframe');

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.0041 ]--