⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.93
Server IP:
65.108.141.171
Server:
Linux server.heloix.com 5.4.0-214-generic #234-Ubuntu SMP Fri Mar 14 23:50:27 UTC 2025 x86_64
Server Software:
Apache
PHP Version:
7.4.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
share
/
webmin
/
useradmin
/
View File Name :
my_user_chooser.cgi
#!/usr/bin/perl # my_user_chooser.cgi # A modified version of chooser.cgi that uses the my_ functions require './user-lib.pl'; &init_config(); &ReadParse(undef, undef, 1); if ($in{'multi'}) { # selecting multiple users. if ($in{'frame'} == 0) { # base frame &PrintHeader(); print "<script type='text/javascript'>\n"; @ul = split(/\s+/, $in{'user'}); $len = @ul; print "sel = new Array($len);\n"; print "selr = new Array($len);\n"; for($i=0; $i<$len; $i++) { print "sel[$i] = \"". "e_javascript($ul[$i])."\";\n"; @uinfo = &my_getpwnam($ul[$i]); if (@uinfo) { print "selr[$i] = \"". "e_javascript($uinfo[6])."\";\n"; } else { print "selr[$i] = \"???\";\n"; } } print "</script>\n"; print "<title>$text{'users_title1'}</title>\n"; print "<frameset cols='50%,50%'>\n"; print "<frame src=\"my_user_chooser.cgi?frame=1&multi=1\">\n"; print "<frameset rows='*,50' frameborder=no>\n"; print " <frame src=\"my_user_chooser.cgi?frame=2&multi=1\">\n"; print " <frame src=\"my_user_chooser.cgi?frame=3&multi=1\" scrolling=no>\n"; print "</frameset>\n"; print "</frameset>\n"; } elsif ($in{'frame'} == 1) { # list of all users to choose from &popup_header(); print "<script type='text/javascript'>\n"; print "function adduser(u, r)\n"; print "{\n"; print "top.sel[top.sel.length] = u\n"; print "top.selr[top.selr.length] = r\n"; print "top.frames[1].location = top.frames[1].location\n"; print "return false;\n"; print "}\n"; print "</script>\n"; print "<div id='filter_box' style='display:none;margin:0px;padding:0px;width:100%;clear:both;'>"; print &ui_textbox("filter",$text{'ui_filterbox'}, 50, 0, undef,"style='width:100%;color:#aaa;' onkeyup=\"filter_match(this.value);\" onfocus=\"if (this.value == '".$text{'ui_filterbox'}."') {this.value = '';this.style.color='#000';}\" onblur=\"if (this.value == '') {this.value = '".$text{'ui_filterbox'}."';this.style.color='#aaa';}\""); print &ui_hr("style='width:100%;'")."</div>"; print "<font size=+1>$text{'users_all'}</font>\n"; print "<table width=100%>\n"; $cnt = 0; foreach $u (&get_users_list()) { if ($in{'user'} eq $u->[0]) { print "<tr class='filter_match' $cb>\n"; } else { print "<tr class='filter_match'>\n"; } $u->[6] =~ s/'/'/g; print "<td width=20%>"; print &ui_link("#", $u->[0], undef, "onClick='return adduser(\"$u->[0]\", \"$u->[6]\");'"); print "</td>\n"; print "<td>$u->[6]</td> </tr>\n"; $cnt++; } print "</table>\n"; if ( $cnt >= 10 ) { print "<script type='text/javascript' src='@{[&get_webprefix()]}/unauthenticated/filter_match.js?28112013'></script>"; print "<script type='text/javascript'>filter_match_box();</script>"; } &popup_footer(); } elsif ($in{'frame'} == 2) { # show chosen users &popup_header(); print "<font size=+1>$text{'users_sel'}</font>\n"; print <<'EOF'; <table width=100%> <script type='text/javascript'> function sub(j) { sel2 = new Array(); selr2 = new Array(); for(k=0,l=0; k<top.sel.length; k++) { if (k != j) { sel2[l] = top.sel[k]; selr2[l] = top.selr[k]; l++; } } top.sel = sel2; top.selr = selr2; top.frames[1].location = top.frames[1].location; return false; } for(i=0; i<top.sel.length; i++) { document.write("<tr>\n"); document.write("<td><a href=\"\" onClick='return sub("+i+")'>"+top.sel[i]+"</a></td>\n"); document.write("<td>"+top.selr[i]+"</td>\n"); } </script> </table> EOF &popup_footer(); } elsif ($in{'frame'} == 3) { # output OK and Cancel buttons &popup_header(); print "<script type='text/javascript'>\n"; print "function qjoin(l)\n"; print "{\n"; print "rv = \"\";\n"; print "for(i=0; i<l.length; i++) {\n"; print " if (rv != '') rv += ' ';\n"; print " if (l[i].indexOf(' ') < 0) rv += l[i];\n"; print " else rv += '\"'+l[i]+'\"'\n"; print " }\n"; print "return rv;\n"; print "}\n"; print "</script>\n"; print "<form>\n"; print "<input type=button value=\"$text{'users_ok'}\" ", "onClick='top.opener.ifield.value = qjoin(top.sel); ", "top.close()'>\n"; print "<input type=button value=\"$text{'users_cancel'}\" ", "onClick='top.close()'>\n"; print " <input type=button value=\"$text{'users_clear'}\" onClick='top.sel = new Array(); top.selr = new Array(); top.frames[1].location = top.frames[1].location'>\n"; print "</form>\n"; &popup_footer(); } } else { # selecting just one user .. display a list of all users to choose from &popup_header($text{'users_title2'}); print "<script type='text/javascript'>\n"; print "function select(f)\n"; print "{\n"; print "top.opener.ifield.value = f;\n"; print "top.close();\n"; print "return false;\n"; print "}\n"; print "</script>\n"; print "<div id='filter_box' style='display:none;margin:0px;padding:0px;width:100%;clear:both;'>"; print &ui_textbox("filter",$text{'ui_filterbox'}, 50, 0, undef,"style='width:100%;color:#aaa;' onkeyup=\"filter_match(this.value);\" onfocus=\"if (this.value == '".$text{'ui_filterbox'}."') {this.value = '';this.style.color='#000';}\" onblur=\"if (this.value == '') {this.value = '".$text{'ui_filterbox'}."';this.style.color='#aaa';}\""); print &ui_hr("style='width:100%;'")."</div>"; print "<table width=100%>\n"; my $cnt = 0; foreach $u (&get_users_list()) { if ($in{'user'} eq $u->[0]) { print "<tr class='filter_match' $cb>\n"; } else { print "<tr class='filter_match'>\n"; } print "<td width=20%>"; print &ui_link("#", $u->[0], undef, "onClick='return select(\"$u->[0]\");'"); print "</td>\n"; print "<td>$u->[6]</td> </tr>\n"; $cnt++; } print "</table>\n"; if ( $cnt >= 10 ) { print "<script type='text/javascript' src='@{[&get_webprefix()]}/unauthenticated/filter_match.js?28112013'></script>"; print "<script type='text/javascript'>filter_match_box();</script>"; } &popup_footer(); } sub get_users_list { local(@uinfo, @users, %ucan); if ($access{'uedit_mode'} == 2 || $access{'uedit_mode'} == 3) { map { $ucan{$_}++ } split(/\s+/, $access{'uedit'}); } &my_setpwent(); while(@uinfo = &my_getpwent()) { if ($access{'uedit_mode'} == 0 || $access{'uedit_mode'} == 2 && $ucan{$uinfo[0]} || $access{'uedit_mode'} == 3 && !$ucan{$uinfo[0]} || $access{'uedit_mode'} == 4 && (!$access{'uedit'} || $uinfo[2] >= $access{'uedit'}) && (!$access{'uedit2'} || $uinfo[2] <= $access{'uedit2'}) || $access{'uedit_mode'} == 5 && $uinfo[3] == $access{'uedit'}) { push(@users, [ @uinfo ]); } } &my_endpwent(); return sort { $a->[0] cmp $b->[0] } @users; }