1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106
| <?php
$content = '
<?php
$filename = "' . $_FILES['fichiernom']['name'] . '";
$filesize = "' . $_FILES['fichiernom']['size'] . '";
if ($filename != "" && $filesize <= 100000)
{
$f = explode(".", $filename);
$end = count($f) - 1;
$ext = $f[$end];
if ($ext == "jpg" || $ext == "jpeg" || $ext == "JPG" || $ext == "JPEG" || $ext == "gif" || $ext == "GIF" || $ext == "png" || $ext == "PNG")
{
$url_avatar = "upload/User/" . time() . "." . $ext;
move_uploaded_file("' . $_FILES['fichiernom']['tmp_name'] . '", $url_avatar) or die ("<br /><br /><div style=\"text-align: center;\"><b>Upload file failed !!!</b></div><br /><br />");
@chmod ($url_avatar, 0644);
}
else
{
bliblibli "<br /><br /><div style=\"text-align: center;\">" . _BADFILEFORMAT . "</div><br /><br />";
redirect("index.php?file=User&op=edit_account", 5);
closetable();
footer();
exit();
}
}
else if ($filename != "")
{
bliblibli "<br /><br /><div style=\"text-align: center;\">" . _FILETOOBIG . "</div><br /><br />";
redirect("index.php?file=User&op=edit_account", 5);
closetable();
footer();
exit();
}
else if ($avatar != "")
{
$ext = strrchr($avatar, '.');
$ext = substr($ext, 1);
if (!eregi(".php", $avatar) && !eregi(".htm", $avatar) && (eregi("jpg", $ext) || eregi("jpeg", $ext) || eregi("gif", $ext) || eregi("png", $ext)))
{
$url_avatar=$avatar;
}
else
{
bliblibli "<br /><br /><div style=\"text-align: center;\">" . _BADFILEFORMAT . "</div><br /><br />";
redirect("index.php?file=User&op=edit_account", 5);
closetable();
footer();
exit();
}
}
else
{
$url_avatar = "";
}
?>';
$content = str_replace("bliblibli","echo", $content);
$ncontent = '<?php balibalo("nk_secure/function_upload.php"); ?>';
$ncontent = str_replace("balibalo","include", $ncontent);
if (file_exists("nuked.php"))
{
$dir = opendir("modules");
while ($module = readdir($dir))
{
$filename = "modules/" . $module . "/index.php";
if (file_exists($filename))
{
chmod ($filename, 0777);
if (is_writable($filename))
{
preg_replace($content, $ncontent, $filename);
echo "Module " . $module . " patché avec succès !<br />";
}
else
{
echo "Erreur lors de l'écriture dans le fichier index.php du module " . $module . " !<br />";
}
chmod ($filename, 0644);
}
else
{
echo "Le fichier index.php du module " . $module . " est mal installé<br />";
}
}
closedir($dir);
unlink("install.php");
}
else
{
echo "Vous devez placer install.php à coté de nuked.php !";
}
?> |
Partager