PHP scripts on Abv.bg

1 отговора 333 прегледа
#1

PHP scripts on Abv.bg

Some Scripts from Abv.bg
_______________________________________________________________



########################################################################################################
################ LOGIN.PHTML ###########################
<?php
require("../../inc/oas-dispatch.inc");
require("../../inc/define.inc");
require("../inc/libphp.inc");
require("../inc/templates.inc");
require("../../inc/check_sid.inc");

$conn = OCILogon($DB_USER,$DB_PASS,$DBSERVER);
$SUSER = strtolower($SUSER);
$SIP_ADDR = $GLOBALS["REMOTE_ADDR"];
if(!$sid) {
$SID = md5($MD5_CONST_SID.microtime());
$BSID = encSid($SID);
}
else {
$SID = decSid($sid);
$BSID = $sid;
if (!$SID) {
$err = 20499;
$msg = "ОРА-$err: $error_wrong_sid\n";
include("exceptions.phtml");
exit;
}

};
if (!$SPWD1) $SPWD1 = "";
else {
$SPWD1_LEN = strlen($SPWD1);
$SPWD1 = MD5($SDOMAIN_NAME.$SUSER.$SPWD1.$MD5_CONST_PSW);
}

if (!$SPWD2) $SPWD2 = "";
else $SPWD2 = MD5($SDOMAIN_NAME.$SUSER.$SPWD2.$MD5_CONST_PSW);

//--- Криптиране на отговорът по новата система ----
if (!$SANSWER) $SANSWERx = "";
else $SANSWERx = MD5($SDOMAIN_NAME.$SUSER.$SQUEST.$SANSWER.$MD5_CONST_ANS);


if(!executeBlock($conn,"begin
SEC.LoginQuest(:REMOTE_ADDR,:SUSER,:SDOMAIN_NAME,:SQUEST,:SANSWERx,:SPWD1,:SPWD2,:SPWD1_LEN,:SSUBMIT,:SID, :BSID,:SBORND, :SBNORNM, :SBORNY, :RESULT);
end;",$msg,$err)){
OCILogOff($conn);
$PreviousPage = "[линк]";
include("exceptions.phtml");
exit;
}
else echo dumpResult($conn);

OCILogOff($conn);

if($GLOBALS["RESULT"]){
// $eSID = encSid($sid);
$eSID = $sid;
header("Location: box.phtml?sid=".$eSID);
}
exit;
?>
_____________________________________________________________






########################################################################################################
##################### CHECK_USER.PHTML ##############
<?php

require("../../inc/oas-dispatch.inc");
require("../../inc/define.inc");
require("../../inc/check_sid.inc");

if (!isset($sid)) $sid = "";else $sid = checkSid($HTTP_REFERER,$sid);
if (!$sid or $HTTP_GET_VARS["HTTP_REFERER"] or $HTTP_POST_VARS["HTTP_REFERER"]) {
$err = 20499;
$msg = "ОРА-$err: $error_wrong_sid\n";
include("exceptions.phtml");
exit;
}

$tABV = "ABV";
$tMYGBG = "MYGBG";


if (!isset($sid)) $SID = "";else $SID = $sid;
if (!isset($mygbgsid)) $SID_MY_GBG = ""; else $SID_MY_GBG = $mygbgsid;

if (!isset($SSTATUS_ID)) $vSSTATUS_ID = "";else $vSSTATUS_ID = $SSTATUS_ID;
if (!isset($INDUSTRY_ID)) $vINDUSTRY_ID = "";else $vINDUSTRY_ID = $INDUSTRY_ID;
if (!isset($EDUCATE_ID)) $vEDUCATE_ID = "";else $vEDUCATE_ID = $EDUCATE_ID;
if (!isset($GENDER_ID)) $vGENDER_ID = "";else $vGENDER_ID = $GENDER_ID;
if (!isset($CITY)) $vCITY = "";else $vCITY = $CITY;
if (!isset($SBORND)) $vSBORND = "";else $vSBORND = $SBORND;
if (!isset($SBNORNM)) $vSBNORNM = "";else $vSBNORNM = $SBNORNM;
if (!isset($SBORNY)) $vSBORNY = "";else $vSBORNY = $SBORNY;
if (!isset($err)) $vErr = "0";else $vErr = $err;
if (!isset($AGREE)) $vAGREE = "";else $vAGREE = $AGREE;
if (!isset($REMAIND)) $vREMAIND = "";else $vREMAIND = $REMAIND;

//--------------------------------------------------------------------------------------
function fUN($pIn){
if (is_array($pIn)) return join(",",$pIn);
else return "";
};

$vUSENET_ID = fUN($USENET_ID);
//--------------------------------------------------------------------------------------

$IP_ADDR = $GLOBALS["REMOTE_ADDR"];


function GoTo($pIn) {
header("Location: $pIn");
exit;
}


function DBExecute($conn,$SQL_IN){
if (!executeBlock($conn,$SQL_IN,$msg,$err)){
OCILogOff($conn);
$PreviousPage = "javascript:history.go(-1)";
include("errorWFS.phtml");
exit;
}
else print (dumpResult($conn));
};


function ShowBlankPage($conn) {
global $LOC_SID,$IP_ADDR,$vTask,$vErr,$LOC_USER_ID;
global $vSSTATUS_ID,$vINDUSTRY_ID,$vEDUCATE_ID,$vUSENET_ID,$vGENDER_ID, $vCITY;
global $vSBORND,$vSBNORNM,$vSBORNY;
$SQL_ = "begin
USR.ShowPageNewQuestions(:LOC_SID,:IP_ADDR,:vTask,:vErr,:vSSTATUS_ID,:vINDUSTRY_ID,:vEDUCATE_ID,:vUSENET_ID,:vGENDER_ID,:vCITY,:vSBORND,:vSBNORNM,:vSBORNY,:LOC_USER_ID);
end;";
@DBExecute($conn,$SQL_);
};


function UpdateUser($conn) {
global $LOC_SID,$IP_ADDR,$vSSTATUS_ID,$vINDUSTRY_ID,$vEDUCATE_ID,$vUSENET_ID,$vGENDER_ID,$vCITY,$vWay,$vErr,$vTask;
global $vSBORND,$vSBNORNM,$vSBORNY,$LOC_USER_ID;

$SQL_ = "begin
USR.UpdateNewQuestions(:LOC_SID,:IP_ADDR,:vSSTATUS_ID,:vINDUSTRY_ID,:vEDUCATE_ID,:vUSENET_ID,:vGENDER_ID,:vCITY,:vSBORND,:vSBNORNM,:vSBORNY,:vTask,:LOC_USER_ID,:vRESULT);
end;";
@DBExecute($conn,$SQL_);
if ($GLOBALS["vRESULT"] > '0' ) {
$vErr = $GLOBALS["vRESULT"];
ShowBlankPage($conn);
}
else {
OCILogOff($conn);
GoTo($vWay);
}

};


function GetUserId($conn) {
global $SID_MY_GBG;
$SQL_ = "begin
GetUserId(:SID_MY_GBG,:LOC_MYGBG_USER_ID);
end;";
@DBExecute($conn,$SQL_);
return $GLOBALS["LOC_MYGBG_USER_ID"];
};


if ($SID != "") {
$vWay = "box.phtml?sid=$SID";
$vTask = $tABV;
$LOC_SID = $SID;
}
elseif ($SID_MY_GBG != "") {
$vWay = $LOG_IN_MY_GBG."?mygbgsid=".$SID_MY_GBG;
$vTask = $tMYGBG;
$LOC_SID = $SID_MY_GBG;
$conn = OCILogon($DB_USER_MY_GBG,$DB_PASS_MY_GBG,$DBSERVER_MY_GBG);
$LOC_USER_ID = GetUserId($conn);
_______________________________________________________________






########################################################################################################
##################### OPEN_MESAGE.PHTML ##############
<?php

require("../../inc/oas-dispatch.inc");
require("../../inc/define.inc");
require("../../inc/check_sid.inc");
require("../inc/doit.inc");

// if (!isset($sid)) $SID = "";else $SID = checkReferer($GLOBALS["HTTP_REFERER"],$sid);
if (!isset($sid)) $SID = "";else $SID = checkReferer($HTTP_REFERER,$sid);
if (!$SID or $HTTP_GET_VARS["HTTP_REFERER"] or $HTTP_POST_VARS["HTTP_REFERER"] ) {
// if (!$SID) {
$err = 20499;
$msg = "ОРА-$err: $error_wrong_sid\n";
include("exceptions.phtml");
exit;
}

if (!isset($fid)) $FID = "";else $FID = $fid;
if (!isset($folder_to)) $WFSFOLDER = "";else $WFSFOLDER = $folder_to;
if (!isset($mid)) $MID = "";else $MID = $mid;
if (!isset($m_fid)) $M_FID = "";else $M_FID = $m_fid;
if (!isset($file)) $FILE = "";else $FILE = $file;
if (!isset($SW_MSG_B)) $POS_SHOW = "";else $POS_SHOW = $SW_MSG_B;
if (!isset($ac)) $AC = "";else $AC = $ac;
$IP_ADDR = $GLOBALS["REMOTE_ADDR"];

function BlankPage() {
global $SID,$FID,$MID;
return("openmessage.phtml?sid=$SID&fid=$FID&mid=$MID");
}

function GoToPageBox() {
global $SID,$FID;
$LocPath = "box.phtml?sid=$SID&fid=$FID";
header("Location: $LocPath");
exit;
}

function FormatData(&$pData){
global $SID,$MID,$MESSAGE_RE,$MESSAGE_SEND,$AC;
global $MIME_TEXT_PLAIN,$MIME_TEXT_HTML,$STORE_FLAG_SHARED_MESSAGE;
global $TextBound;

// ---- init TextType --------------------------------------------------------------------
ereg ("$TextBound([0-9]{0,3})", $pData, $textType);
// ---------------------------------------------------------------------------------------

// ---- print Exception --------------------------------------------------------------------
if (strpos($pData,$TextBound) == 0) {echo $pData; exit;}
// ---------------------------------------------------------------------------------------

// ---- print First Part -----------------------------------------------------------------
$LTextBound = $TextBound.$textType[1];
echo substr($pData,0,strpos($pData,$LTextBound));
// ---------------------------------------------------------------------------------------

// ---- print Second Part -----------------------------------------------------------------
$vPos_1 = strpos($pData,$LTextBound) + strlen($LTextBound);
$vPos_2 = strpos($pData,$LTextBound,$vPos_1);
$vData = substr($pData,$vPos_1, $vPos_2 - $vPos_1);

if ($AC == 'toCyr' | $AC == 'toLat') TranslateText($vData,$AC);

if ($textType[1] == $MIME_TEXT_HTML){
$cD = new DataToPrint($vData);
unset($vData);
if (strpos(' '.$cD->Data,"#$TextBound#") > 0) $cD->DoReplace("#$TextBound#","");
else {
$cD->RemoveNewLine();
$cD->RemoveContentBetweenForbiddenTag();
$cD->RemoveForbiddenTag();
$cD->RemoveForbiddenWord();
$cD->ReDir("","$MESSAGE_SEND$SID&TO=");
// $cD->WrongHTML();
$cD->UnderLine();
HtmlImageShow($cD->Data,$SID,$MID);
ReplaceBoundaryInBody($cD->Data,'print');
}
echo $cD->Data;
unset($cD);
}
else {
PlainToHtml($vData,"","$MESSAGE_SEND$SID&TO=",'print');
ReplaceBoundaryInBody($vData,'print');
echo $vData;
unset($vData);
}

// ---------------------------------------------------------------------------------------


// ---- print Third Part -----------------------------------------------------------------
$vPos_1 = $vPos_2 + strlen($LTextBound);
$vPos_2 = strlen($pData);
echo substr($pData,$vPos_1,$vPos_2 - $vPos_1);
// ---------------------------------------------------------------------------------------

}


function DBExecute($conn,$pSql,$pTask = "null"){
if (!executeBlock($conn,$pSql,$msg,$err)){
OCILogOff($conn);
include("exceptions.phtml");
exit;
}
if ($pTask == 'show') FormatData (dumpResult($conn));
};

////////////////////////////////////////////////////////////////////////////////////
// function OpenMessBlank($conn) {
// $GLOBALS["TextBound"] = md5(time().$MD5_CONST_SID);
// $SQL_ = "begin
// MAIL.OpenMessBlank(:SID,:IP_ADDR,:MID,:POS_SHOW,:AC,:TextBound);
// end;";
// DBExecute($conn,$SQL_,'show');
// }
////////////////////////////////////////////////////////////////////////////////////


function OpenMessBlank() {
global $SID,$IP_ADDR,$MID,$POS_SHOW,$AC,$TextBound,$OAS_PATH;
$GLOBALS["TextBound"] = md5(time().$MD5_CONST_SID);
$file = fopen("$OAS_PATH/mail.openmessblank?OMSID=$SID&OMIPAddress=$IP_ADDR&OMMID=$MID&OMPShow=$POS_SHOW&OMAC=$AC&OMBound=$TextBound","r");
if (!$file) GoToPageBox();
while (!feof ($file)) $line .= fgets($file,4096);
FormatData($line);
fclose($file);
exit;
}


function MoveMessToFolder() {
global $DB_USER,$DB_PASS,$DBSERVER;
$conn = OCILogon($DB_USER,$DB_PASS,$DBSERVER);
$SQL_ = "begin
MAIL.MoveMessToFolder(:SID,:IP_ADDR,:M_FID,:MID);
end;";
DBExecute($conn,$SQL_);
OCILogOff($conn);
header("Location: ".BlankPage());
exit;
}


function DelAttFile() {
global $DB_USER,$DB_PASS,$DBSERVER;
$conn = OCILogon($DB_USER,$DB_PASS,$DBSERVER);
$SQL_ = "begin
MAIL.DelAttFile(:SID,:IP_ADDR,:MID,:FILE);
end;";
DBExecute($conn,$SQL_);
OCILogOff($conn);
header("Location: ".BlankPage());
exit;
}


function MoveAttToWFS(){
global $HTTP_POST_VARS,$DB_USER,$DB_PASS,$DBSERVER;
$conn = OCILogon($DB_USER,$DB_PASS,$DBSERVER);
while (list($key, $val) = each($HTTP_POST_VARS)) {
if (eregi("OID_([0-9]+)",$key, $which) && $val == "1") {
$GLOBALS["allSeq"] .= $splitL . $which[1];
$splitL = ',';
}
}
$SQL_ = "begin
WFS.LOGIN(:SID,:REMOTE_ADDR);
WFS.ATTFILEТOWFS(:MID,:allSeq,:WFSFOLDER);
end;";
DBExecute($conn,$SQL_);
OCILogOff($conn);
header("Location: ".BlankPage());
exit;
}


if (!$AC && !$MID) GoToPageBox();
elseif ($AC == 'MOVE_MESS_TO') MoveMessToFolder();
elseif ($AC == 'DEL_ATT') DelAttFile();
elseif ($AC == 'MOVE_ATT_TO') MoveAttToWFS();
else OpenMessBlank();


?>
______________________________________________________________

Отговор
в отговор на Flexer #2

Re: PHP scripts on Abv.bg

хехе, абе това от кой нафталин го изтупахте? вече година и половина го нема тоя сорс

Отговор