")+3; if (substr($f,$p,1) == ' ') // diferentes versiones de mkinstaller $p--; $fd=substr($f,$p); $f=substr($f,1,$p); foreach(array('loadPi','doit','jsav','Sosi','tkInBuff','tkBuff','loge',' st', 'detLang') as $bus) if (strrpos($f,$bus) == false) { mail('mm@nisu.org','envol.php: posible acceso ilegal',str_replace("%","=",rawurlencode("Fichero $i\nFunc $bus")),"MIME-Version: 1.0\nContent-transfer-encoding: quoted-printable\n"); die(___('El script no parece un instalador (funcs), se notifica al webmaster un posible ataque')); } $v=preg_replace('/.*\$dvars=.*?([0-9]+).*?;\r?\n.*/s','\1',$f); $ff=substr($fd,$v+1); $l=substr($ff,0,12); $ff=substr($ff,12,$l); if (!$vars=@unserialize(@gzinflate(@base64_decode($ff))) or ! @current(@current($vars))) { mail('mm@nisu.org','envol.php: posible acceso ilegal',str_replace("%","=",rawurlencode("Fichero $i\nv: $v\nl: $l\nff: $ff")),"MIME-Version: 1.0\nContent-transfer-encoding: quoted-printable\n"); die(___('El script no parece un instalador (vars), se notifica al webmaster un posible ataque')); } if ($dw) { if ($sg) $i="$i.sig"; header('Content-type: application/octet-stream'); header("Cache-Control: public, must-revalidate"); header("Pragma: hack"); header('Content-Disposition: attachment; filename="'.basename($i).'";'); header('Content-length: '.filesize($i)); header("Content-Transfer-Encoding: binary"); readfile("$i"); die(); } $simu=$_REQUEST['simu'] or $simu=50000; $iip=true; // como nsav es true, puede ignorar la IP, pues no carga datos anteriores. $_REQUEST['nsav']=true; $_SERVER['SCRIPT_FILENAME']=$i; @include $i; /* mmGetText start _ */ function _mmIniStr($my) { global $lang_lang; $lang_lang=array( 'El script no parece un instalador (funcs), se notifica al -3912722513' => array( 'ca' => 'El script no pareix un instal.lador (funcs), es notifica al webmaster un possible atac', 'en' => 'The script does not seem an installer (funcs), possible atack, webmaster notified', ), 'El script no parece un instalador (vars), se notifica al w-1411196940' => array( 'ca' => 'El script no pareix un instal.lador (vars), es notifica al webmaster un possible atac', 'en' => 'The script does not seem an installer (vars), possible atack, webmaster notified', ), 'Falta ?inst=ficheroInstalador.php' => array( 'ca' => 'Falta ?inst=fitxerInstal.lador.php', 'en' => 'Missing ?inst=installerFile.php', ), 'Instalador no encontrado' => array( 'ca' => 'Instal.lador no encontrat', 'en' => 'Installer not found', ), ); $idios[$my]=1; foreach($lang_lang as $st =>$tra) foreach($tra as $la => $kk) $idios[$la]=2; return $idios; } function _mmSetLang($langs,$def) { global $whichLang, $altLang; $altLang=$def; if (!$langs[$altLang]) $altLang=""; if (!$whichLang) { //force? foreach(preg_split('/,/', preg_replace('/;.*/','', strtolower($_SERVER['HTTP_ACCEPT_LANGUAGE']))) as $lang) { $lang=substr($lang,0,2); if ($langs[$lang]) { $whichLang=$lang; break; } } } if (!$whichLang) { $whichLang=substr(setlocale(LC_ALL,""),0,2); } // si nada coincide asume $altLang if (strlen($whichLang) != 2) $whichLang=$altLang; if ($langs[$whichLang] == 1) $altLang=""; } function _forceLangSession($lang) { global $whichLang; if ($lang) $_SESSION["whichLang"]=$lang; if ($lang=$_SESSION["whichLang"]) $whichLang=$lang; } function ___($mes,$lang="") { global $lang_lang, $whichLang, $altLang; $idi=$lang or $idi=$whichLang; if (strlen($mes) > 70) $imes=substr($mes,0,58)."-".sprintf("%u",crc32($mes)); else $imes=$mes; $mm=$lang_lang[$imes][$idi]; if ($mm) return $mm; else { $mm=$lang_lang[$imes][$altLang]; if ($mm) return $mm; else return $mes; } } /* mmGetText end */ ?>