mirror of
https://github.com/php/php-src.git
synced 2026-04-19 14:01:01 +02:00
366 lines
11 KiB
Plaintext
366 lines
11 KiB
Plaintext
<?php
|
||
|
||
$web = 'index.php';
|
||
|
||
if (in_array('phar', stream_get_wrappers()) && class_exists('Phar', 0)) {
|
||
Phar::interceptFileFuncs();
|
||
set_include_path('phar://' . __FILE__ . PATH_SEPARATOR . get_include_path());
|
||
Phar::webPhar(null, $web);
|
||
include 'phar://' . __FILE__ . '/' . Extract_Phar::START;
|
||
return;
|
||
}
|
||
|
||
if (@(isset($_SERVER['REQUEST_URI']) && isset($_SERVER['REQUEST_METHOD']) && ($_SERVER['REQUEST_METHOD'] == 'GET' || $_SERVER['REQUEST_METHOD'] == 'POST'))) {
|
||
Extract_Phar::go(true);
|
||
$mimes = array(
|
||
'phps' => 2,
|
||
'c' => 'text/plain',
|
||
'cc' => 'text/plain',
|
||
'cpp' => 'text/plain',
|
||
'c++' => 'text/plain',
|
||
'dtd' => 'text/plain',
|
||
'h' => 'text/plain',
|
||
'log' => 'text/plain',
|
||
'rng' => 'text/plain',
|
||
'txt' => 'text/plain',
|
||
'xsd' => 'text/plain',
|
||
'php' => 1,
|
||
'inc' => 1,
|
||
'avi' => 'video/avi',
|
||
'bmp' => 'image/bmp',
|
||
'css' => 'text/css',
|
||
'gif' => 'image/gif',
|
||
'htm' => 'text/html',
|
||
'html' => 'text/html',
|
||
'htmls' => 'text/html',
|
||
'ico' => 'image/x-ico',
|
||
'jpe' => 'image/jpeg',
|
||
'jpg' => 'image/jpeg',
|
||
'jpeg' => 'image/jpeg',
|
||
'js' => 'application/x-javascript',
|
||
'midi' => 'audio/midi',
|
||
'mid' => 'audio/midi',
|
||
'mod' => 'audio/mod',
|
||
'mov' => 'movie/quicktime',
|
||
'mp3' => 'audio/mp3',
|
||
'mpg' => 'video/mpeg',
|
||
'mpeg' => 'video/mpeg',
|
||
'pdf' => 'application/pdf',
|
||
'png' => 'image/png',
|
||
'swf' => 'application/shockwave-flash',
|
||
'tif' => 'image/tiff',
|
||
'tiff' => 'image/tiff',
|
||
'wav' => 'audio/wav',
|
||
'xbm' => 'image/xbm',
|
||
'xml' => 'text/xml',
|
||
);
|
||
|
||
header("Cache-Control: no-cache, must-revalidate");
|
||
header("Pragma: no-cache");
|
||
|
||
$basename = basename(__FILE__);
|
||
if (!strpos($_SERVER['REQUEST_URI'], $basename)) {
|
||
chdir(Extract_Phar::$temp);
|
||
include $web;
|
||
return;
|
||
}
|
||
$pt = substr($_SERVER['REQUEST_URI'], strpos($_SERVER['REQUEST_URI'], $basename) + strlen($basename));
|
||
if (!$pt || $pt == '/') {
|
||
$pt = $web;
|
||
header('HTTP/1.1 301 Moved Permanently');
|
||
header('Location: ' . $_SERVER['REQUEST_URI'] . '/' . $pt);
|
||
exit;
|
||
}
|
||
$a = realpath(Extract_Phar::$temp . DIRECTORY_SEPARATOR . $pt);
|
||
if (!$a || strlen(dirname($a)) < strlen(Extract_Phar::$temp)) {
|
||
header('HTTP/1.0 404 Not Found');
|
||
echo "<html>\n <head>\n <title>File Not Found<title>\n </head>\n <body>\n <h1>404 - File ", $pt, " Not Found</h1>\n </body>\n</html>";
|
||
exit;
|
||
}
|
||
$b = pathinfo($a);
|
||
if (!isset($b['extension'])) {
|
||
header('Content-Type: text/plain');
|
||
header('Content-Length: ' . filesize($a));
|
||
readfile($a);
|
||
exit;
|
||
}
|
||
if (isset($mimes[$b['extension']])) {
|
||
if ($mimes[$b['extension']] === 1) {
|
||
include $a;
|
||
exit;
|
||
}
|
||
if ($mimes[$b['extension']] === 2) {
|
||
highlight_file($a);
|
||
exit;
|
||
}
|
||
header('Content-Type: ' .$mimes[$b['extension']]);
|
||
header('Content-Length: ' . filesize($a));
|
||
readfile($a);
|
||
exit;
|
||
}
|
||
}
|
||
|
||
class Extract_Phar
|
||
{
|
||
static $temp;
|
||
static $origdir;
|
||
const GZ = 0x1000;
|
||
const BZ2 = 0x2000;
|
||
const MASK = 0x3000;
|
||
const START = 'index.php';
|
||
const LEN = 6685;
|
||
|
||
static function go($return = false)
|
||
{
|
||
$fp = fopen(__FILE__, 'rb');
|
||
fseek($fp, self::LEN);
|
||
$L = unpack('V', $a = (binary)fread($fp, 4));
|
||
$m = (binary)'';
|
||
|
||
do {
|
||
$read = 8192;
|
||
if ($L[1] - strlen($m) < 8192) {
|
||
$read = $L[1] - strlen($m);
|
||
}
|
||
$last = (binary)fread($fp, $read);
|
||
$m .= $last;
|
||
} while (strlen($last) && strlen($m) < $L[1]);
|
||
|
||
if (strlen($m) < $L[1]) {
|
||
die('ERROR: manifest length read was "' .
|
||
strlen($m) .'" should be "' .
|
||
$L[1] . '"');
|
||
}
|
||
|
||
$info = self::_unpack($m);
|
||
$f = $info['c'];
|
||
|
||
if ($f & self::GZ) {
|
||
if (!function_exists('gzinflate')) {
|
||
die('Error: zlib extension is not enabled -' .
|
||
' gzinflate() function needed for zlib-compressed .phars');
|
||
}
|
||
}
|
||
|
||
if ($f & self::BZ2) {
|
||
if (!function_exists('bzdecompress')) {
|
||
die('Error: bzip2 extension is not enabled -' .
|
||
' bzdecompress() function needed for bz2-compressed .phars');
|
||
}
|
||
}
|
||
|
||
$temp = self::tmpdir();
|
||
|
||
if (!$temp || !is_writable($temp)) {
|
||
$sessionpath = session_save_path();
|
||
if (strpos ($sessionpath, ";") !== false)
|
||
$sessionpath = substr ($sessionpath, strpos ($sessionpath, ";")+1);
|
||
if (!file_exists($sessionpath) || !is_dir($sessionpath)) {
|
||
die('Could not locate temporary directory to extract phar');
|
||
}
|
||
$temp = $sessionpath;
|
||
}
|
||
|
||
$temp .= '/pharextract/'.basename(__FILE__, '.phar');
|
||
self::$temp = $temp;
|
||
self::$origdir = getcwd();
|
||
@mkdir($temp, 0777, true);
|
||
$temp = realpath($temp);
|
||
|
||
if (!file_exists($temp . DIRECTORY_SEPARATOR . md5_file(__FILE__))) {
|
||
self::_removeTmpFiles($temp, getcwd());
|
||
@mkdir($temp, 0777, true);
|
||
@file_put_contents($temp . '/' . md5_file(__FILE__), '');
|
||
|
||
foreach ($info['m'] as $path => $file) {
|
||
$a = !file_exists(dirname($temp . '/' . $path));
|
||
@mkdir(dirname($temp . '/' . $path), 0777, true);
|
||
clearstatcache();
|
||
|
||
if ($path[strlen($path) - 1] == '/') {
|
||
@mkdir($temp . '/' . $path, 0777);
|
||
} else {
|
||
file_put_contents($temp . '/' . $path, self::extractFile($path, $file, $fp));
|
||
@chmod($temp . '/' . $path, 0666);
|
||
}
|
||
}
|
||
}
|
||
|
||
chdir($temp);
|
||
|
||
if (!$return) {
|
||
include self::START;
|
||
}
|
||
}
|
||
|
||
static function tmpdir()
|
||
{
|
||
if (strpos(PHP_OS, 'WIN') !== false) {
|
||
if ($var = getenv('TMP') ? getenv('TMP') : getenv('TEMP')) {
|
||
return $var;
|
||
}
|
||
if (is_dir('/temp') || mkdir('/temp')) {
|
||
return realpath('/temp');
|
||
}
|
||
return false;
|
||
}
|
||
if ($var = getenv('TMPDIR')) {
|
||
return $var;
|
||
}
|
||
return realpath('/tmp');
|
||
}
|
||
|
||
static function _unpack($m)
|
||
{
|
||
$info = unpack('V', substr($m, 0, 4));
|
||
$l = unpack('V', substr($m, 10, 4));
|
||
$m = substr($m, 14 + $l[1]);
|
||
$s = unpack('V', substr($m, 0, 4));
|
||
$o = 0;
|
||
$start = 4 + $s[1];
|
||
$ret['c'] = 0;
|
||
|
||
for ($i = 0; $i < $info[1]; $i++) {
|
||
$len = unpack('V', substr($m, $start, 4));
|
||
$start += 4;
|
||
$savepath = substr($m, $start, $len[1]);
|
||
$start += $len[1];
|
||
$ret['m'][$savepath] = array_values(unpack('Va/Vb/Vc/Vd/Ve/Vf', substr($m, $start, 24)));
|
||
$ret['m'][$savepath][3] = sprintf('%u', $ret['m'][$savepath][3]
|
||
& 0xffffffff);
|
||
$ret['m'][$savepath][7] = $o;
|
||
$o += $ret['m'][$savepath][2];
|
||
$start += 24 + $ret['m'][$savepath][5];
|
||
$ret['c'] |= $ret['m'][$savepath][4] & self::MASK;
|
||
}
|
||
return $ret;
|
||
}
|
||
|
||
static function extractFile($path, $entry, $fp)
|
||
{
|
||
$data = '';
|
||
$c = $entry[2];
|
||
|
||
while ($c) {
|
||
if ($c < 8192) {
|
||
$data .= @fread($fp, $c);
|
||
$c = 0;
|
||
} else {
|
||
$c -= 8192;
|
||
$data .= @fread($fp, 8192);
|
||
}
|
||
}
|
||
|
||
if ($entry[4] & self::GZ) {
|
||
$data = gzinflate($data);
|
||
} elseif ($entry[4] & self::BZ2) {
|
||
$data = bzdecompress($data);
|
||
}
|
||
|
||
if (strlen($data) != $entry[0]) {
|
||
die("Invalid internal .phar file (size error " . strlen($data) . " != " .
|
||
$stat[7] . ")");
|
||
}
|
||
|
||
if ($entry[3] != sprintf("%u", crc32((binary)$data) & 0xffffffff)) {
|
||
die("Invalid internal .phar file (checksum error)");
|
||
}
|
||
|
||
return $data;
|
||
}
|
||
|
||
static function _removeTmpFiles($temp, $origdir)
|
||
{
|
||
chdir($temp);
|
||
|
||
foreach (glob('*') as $f) {
|
||
if (file_exists($f)) {
|
||
is_dir($f) ? @rmdir($f) : @unlink($f);
|
||
if (file_exists($f) && is_dir($f)) {
|
||
self::_removeTmpFiles($f, getcwd());
|
||
}
|
||
}
|
||
}
|
||
|
||
@rmdir($temp);
|
||
clearstatcache();
|
||
chdir($origdir);
|
||
}
|
||
}
|
||
|
||
Extract_Phar::go();
|
||
__HALT_COMPILER(); ?>e bug54992-ca.pemc êØ)\c –iʤ bug54992.pem êØ)\ K– ¤ -----BEGIN CERTIFICATE-----
|
||
MIIGAzCCA+ugAwIBAgIUZ7ZvvfVqSEf1EswMT9LfMIPc/U8wDQYJKoZIhvcNAQEL
|
||
BQAwgZAxCzAJBgNVBAYTAlBUMQ8wDQYDVQQIDAZMaXNib2ExDzANBgNVBAcMBkxp
|
||
c2JvYTEXMBUGA1UECgwOUEhQIEZvdW5kYXRpb24xHjAcBgNVBAMMFVJvb3QgQ0Eg
|
||
Zm9yIFBIUCBUZXN0czEmMCQGCSqGSIb3DQEJARYXaW50ZXJuYWxzQGxpc3RzLnBo
|
||
cC5uZXQwHhcNMTgxMjMxMDg0NDU3WhcNMjAwMjA0MDg0NDU3WjCBkDELMAkGA1UE
|
||
BhMCUFQxDzANBgNVBAgMBkxpc2JvYTEPMA0GA1UEBwwGTGlzYm9hMRcwFQYDVQQK
|
||
DA5QSFAgRm91bmRhdGlvbjEeMBwGA1UEAwwVUm9vdCBDQSBmb3IgUEhQIFRlc3Rz
|
||
MSYwJAYJKoZIhvcNAQkBFhdpbnRlcm5hbHNAbGlzdHMucGhwLm5ldDCCAiIwDQYJ
|
||
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAPVThsunmhda5hbNi+pXD3WF9ijryB9H
|
||
JDnIbPW/vMffWcQgtiRzc+6aCykBygnhnN91NNRpxOsoLCb7OjUMM0TjhSE9DxKD
|
||
aVLRoDcs5VSaddQjq3AwdkU6ek9InUOeDuZ8gatrpWlEyuQPwwnMAfR9NkcTajuF
|
||
hGO0BlqkHg98GckQD0N5x6CrrDJt6RE6hf9gUZSGSWdPTiETBQUN8LTuxo/ybFSN
|
||
hcpVNCF+r3eozATbSU8YvQU52RmPIZWHHmYb7KtMO3TEX4LnLJUOefUK4qk+ZJ0s
|
||
f4JfnY7RhBlZGh2kIyE5jwqz8/KzKtxrutNaupdTFZO8nX09QSgmDCxVWVclrPaG
|
||
q2ZFYpeauTy71pTm8DjF7PwQI/+PUrBdFIX0V6uxqUEG0pvPdb8zenVbaK4Jh39u
|
||
w0V5tH/rbtd7zZX4vl3bmKo1Wk0SQxd83iXitxLiJnWNOsmrJcM/Hx91kE10+/ly
|
||
zgL/w5A9HSA616kfPdNzny0laH1TXVLJsnyyV3DyfnU4O6VI0JG3WjhgRdMkgobn
|
||
GvGJ2ZsZAxds9lBtT2y+gw5BU+jkSilPk3jM9MA7Kmyci93U9xxMuDNzyUzfcnXR
|
||
UIq99dZWeMMy1LT3buZXrAWu1WRgPdQtDKcQHDIQaIkxlWsT8q2q/wIirb6fwxlw
|
||
vXkFp+aEP35BAgMBAAGjUzBRMB0GA1UdDgQWBBR37F1+W1gcCp8bhZaFFi9JKQhu
|
||
tTAfBgNVHSMEGDAWgBR37F1+W1gcCp8bhZaFFi9JKQhutTAPBgNVHRMBAf8EBTAD
|
||
AQH/MA0GCSqGSIb3DQEBCwUAA4ICAQAYHqpISUI/x8UW33i35rYkFYNvXBMQDc8J
|
||
v4G2eqEBNCOVmHg6P//lq1F2jrtAEr/saESN1uS1Q80sUsthlVsceV1z1isdpugG
|
||
kMbfHxLe0QpthnP3PEChQw30TPB22BThuGVkteNSZKTCPGdzjSTPq2kOR6PCBZRd
|
||
r0r/TW3lT/Ng3KgjT6g7E3ZUpAeFEQMlmNYr/eEOL7K+1jzQrbCLmXbs6rmtffr7
|
||
n4p+wMPMPaSRqQoQ86ff9GPzxWuAQGlytVoiS5Xt3jotd/RWlOy0YQ2QSzOQvFUW
|
||
4te5lwdOvOFnJTo43U3DqASqMcaazvIsN41zVlOyOyKEr9oZERju6FU1aZmuZtHQ
|
||
wMCmXVj/Swj67Zp9tG+vVQenbEk314+8c2nenuOIFP1F2C/NG3vMLIpENRGxpmAm
|
||
s5gIT6mXvJ4JCwWYc75zucOr2KVkDmEziJh/pARuOrOAPdc6NjKku8HBC9UI96+x
|
||
Db4hG2SqXUzShkFX/px7vlCADvgO3FDk2aiyW02PFsItob2O6OB98VGsU26hgRO/
|
||
Czz/jbjWTPHNOt6/fcL0m7XLwlJ+K9gRArY15DeJGumcHEq/Vd/Z8iPQKKdzgF4O
|
||
9XFZvu+VHP82AS5TeiYHCddFJyzktQYcNu5/OBuxzO83d7rpqrLFETTEOL4cN8O7
|
||
LJ7Q89hYAQ==
|
||
-----END CERTIFICATE-----
|
||
-----BEGIN CERTIFICATE-----
|
||
MIID7jCCAdYCFDw0rvm7q8y5HfispK5A2I2+RBqHMA0GCSqGSIb3DQEBCwUAMIGQ
|
||
MQswCQYDVQQGEwJQVDEPMA0GA1UECAwGTGlzYm9hMQ8wDQYDVQQHDAZMaXNib2Ex
|
||
FzAVBgNVBAoMDlBIUCBGb3VuZGF0aW9uMR4wHAYDVQQDDBVSb290IENBIGZvciBQ
|
||
SFAgVGVzdHMxJjAkBgkqhkiG9w0BCQEWF2ludGVybmFsc0BsaXN0cy5waHAubmV0
|
||
MB4XDTE4MTIzMTA4NDY0M1oXDTIwMDIwNDA4NDY0M1owWjEXMBUGA1UEAxMOYnVn
|
||
NTQ5OTIubG9jYWwxCzAJBgNVBAYTAlBUMQ8wDQYDVQQHEwZMaXNib2ExDzANBgNV
|
||
BAgTBkxpc2JvYTEQMA4GA1UEChMHcGhwLm5ldDCBnzANBgkqhkiG9w0BAQEFAAOB
|
||
jQAwgYkCgYEAtUAVQKTgpUPgtFOJ3w3kDJETS45tWeT96kUg1NeYLKW+jNbFhxPo
|
||
PJv7XhfemCaqh2tbq1cdYW906Wp1L+eNQvdTYA2IQG4EQBUlmfyIakOIMsN/RizV
|
||
kF09vlNQwTpaMpqTv7wB8vvwbxb9jbC2ZhQUBEg6PIn18dSstbM9FZ0CAwEAATAN
|
||
BgkqhkiG9w0BAQsFAAOCAgEAKtSMguV5ZQ2KpdZ9MAFa+GiHL0APb58OrvwNK4BF
|
||
6032UZLOWnsBZlo85WGLNnIT/GNzKKr7n9jHeuZcBVOFQLsebahSlfJZs9FPatlI
|
||
9Md1tRzVoTKohjG86HeFhhL+gZQ69SdIcK40wpH1qNv7KyMGA8gnx6rRKbOxZqsx
|
||
pkA/wS7CTqP9/DeOxh/MZPg7N/GZXW1QOz+SE537E9iyiRsbldNYFtwn5iaVfjpr
|
||
xz09wYYW3HJpR+QKPCfJ79JxDhuMHMoUOpIy8vGFnt5zVTcFLa378Sy3vCT1Qwvt
|
||
tTavFGHby4A7OqT6xu+9GTW37OaiV91UelLLV0+MoR4XiMVMX76mvqzmKCp6L9ae
|
||
7RYHrrCtNxkYUKUSkOEc2VHnT+sENkJIZu7zzN7/QNlc0yE9Rtsmgy4QAxo2m9u0
|
||
pUZLAulZ1lS7g/sr7/8Pp17RDvJiJh+oAPyVYZ7OoLF1IoHDHcZI0bqcqhDhiHZs
|
||
PXYqyMCxyYzHFOAOgvbrEkmp8z/E8ATVwdUbAYN1dMrYHre1P4HFEtJh2QiGG2KE
|
||
4jheuNhH1R25AizbwYbD33Kdp7ltCgBlfYqjl771SlgY45QYs0mUdc1Pv39SGIwf
|
||
ZUm7mOWjaTBdYANrkvGM5NNT9kESjKkWykyTg4UF5rHV6nlyexR4b3fjabroi4BS
|
||
v6w=
|
||
-----END CERTIFICATE-----
|
||
-----BEGIN RSA PRIVATE KEY-----
|
||
MIICXgIBAAKBgQC1QBVApOClQ+C0U4nfDeQMkRNLjm1Z5P3qRSDU15gspb6M1sWH
|
||
E+g8m/teF96YJqqHa1urVx1hb3TpanUv541C91NgDYhAbgRAFSWZ/IhqQ4gyw39G
|
||
LNWQXT2+U1DBOloympO/vAHy+/BvFv2NsLZmFBQESDo8ifXx1Ky1sz0VnQIDAQAB
|
||
AoGBALUEnHUkdgv4P7o5WJACAomedqPWSlYmgoVvpvuLmrq0ihuFAGAIvL+TlTgD
|
||
JNfWfiejTDlSVtCSDTR1kzZVztitfXDxRkWEjGtFjMhk/DJkql3w10SUtcqCiWqw
|
||
/XknyPHZ7A+w7Fu5KRO2LoSIze2ZLKvCfP/M/pLR2fTKGTHtAkEA2NreT1GUnvzj
|
||
u1lb2J0nTZbSQHvEkfpEej9akl0Bc5UkskenEsiXE3cJYA1TbEGSqYCmt23x3Rd2
|
||
FYxm6MwV6wJBANX34ZuUOllsS0FJPbkEAps3M4s59daQSFiEkQc5XjPgVB0xVV7s
|
||
OEBlGkM3eqcCUOMnMI8L9wfBk49sELZCeJcCQQC/y/TL2q/EXo9c6I/faj+U1Exp
|
||
VA5rvhpKtTX6NeBOxh6Kv+z5JAja4nGcTqz2FpkM6giKO+erUFDUhjWOuNK5AkEA
|
||
xkmHnCRLxp8jRodXWeQrfigz7ixydLsVMGL5+9XgRPb5PGyBjwwePR70raH2Wls9
|
||
FqU0zPvrnBZ6Zwlgm2cSVQJAPLYA51Z9piajbTuggpioQ5qbUEDkJjmYHbm8eJnK
|
||
h5NW/EtCk4SBxAc+8ElPrvJjtZyOPWfm4vZF5sDKtC3Fkg==
|
||
-----END RSA PRIVATE KEY-----
|
||
ݬ;lÊ5aOi`u ÉaB¢äbR GBMB |