1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
<?php function CotentTable($name) { global $LIBPATH; $feederName = $name."_feeder"; global $$feederName; global $$name; $tableName = $$name; $parserName = $name . "_dataparser"; // ADAUGA VALIDARE APEL NUMAI DACA EXISTA PARSER $feederArr = $$feederName; $dbTableName = $feederArr[2][0]; $sql_arr = $feederArr[2]; $dbTableName = $sql_arr[0]; global $$dbTableName; $resultArr = array(); // exploit feeder require_once($LIBPATH . "DataFeeder/" . $feederArr[1] . ".php"); // echo $LIBPATH . "DataFeeder/" . $feederArr[1] . ".php"; if(!class_exists($feederArr[1])) { header("location:index.html?st=11"); exit(); } else { // echo "<pre>"; // print_r($feederArr); $feeder = new $feederArr[1]($feederArr[0], $feederArr[2]); $result = $feeder->Exploit(); if(!is_array($result)) { header("location:index.html?st=$result"); exit(); } else $resultArr = $result; } $exclude = null; // end exploitfeeder if(count($resultArr) > 0) { if(function_exists($parserName)) $exclude = $parserName($resultArr); } // set the post fields in case of search // parser for filter $tableName_ = $feederArr[2][0]; global $$tableName_; global $gagets; if(!strpos($feederArr[0], ":noFilter")) { if(isset($gagets)) { if(in_array("filter", $gagets)) { // check what selection was specified if($values == NULL) $values = array(); if($fields == NULL) $fields = array(); $table =$$tableName_; $rows = $table->GetTableRows(); foreach($rows as $row_) { if(array_key_exists($row_, $_POST)) { if($_POST[$row_]) { $fields[]= $row_; $values[]= $_POST[$row_]; } } } } } }
// table generator require_once($LIBPATH . "/db/recordstable.php"); $recordsTable = new RecordsTable($tableName[1], $tableName[2], $resultArr, $dbTableName); $recordsTable->exclude = $exclude; $recordsTable->fFieldClass = $tableName[5]; $recordsTable->nFieldClass = $tableName[6]; $recordsTable->classRowOver = $tableName[7]; $recordsTable->titleClass = $tableName[4]; $recordsTable->tableClass = $tableName[3]; $recordsTable->tableHeader = $tableName[0]; $recordsTable->deleteLink = $tableName[8]; $recordsTable->onClickLink = $tableName[9]; $recordsTable->onClickVal = $tableName[10]; $recordsTable->addLink = $tableName[11]; $recordsTable->fieldsP = $fields; $recordsTable->valuesP = $values; // echo "<pre>"; // print_r($resultArr); if(array_key_exists(12, $tableName)) { $recordsTable->duplicateLink = $tableName[12]; } if(array_key_exists(13, $tableName)) { $recordsTable->tableName = $tableName[13]; } return $recordsTable->Generate(); }
?>
|