phpop3clean.datadump.php

一个基于页面实现的pop客户端程序

<?php
/////////////////////////////////////////////////////////////////
/// phPOP3clean() by James Heinrich <[e-mail]>    //
//  available at http://phpop3clean.sourceforge.net            //
/////////////////////////////////////////////////////////////////

require_once(dirname(__FILE__).'/phPOP3clean.config.php');
require_once(dirname(__FILE__).'/phPOP3clean.functions.php');
require_once(dirname(__FILE__).'/phPOP3clean.login.php');
if (!IsAdminUser()) {
	echo 'You do not have permission to use this file';
	exit;
}
set_time_limit(300);

if (@$_REQUEST['nodata']) {

	header('Content-type: application/octet-stream');
	header('Content-Disposition: attachment; filename=phpop3clean_sql_nodata_'.date('Ymd').'.sql');

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'exe` ORDER BY `virus_name` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `phpop3clean_exe` (`filesize`, `md5`, `pattern`, `virus_name`, `added`) VALUES (';
		echo     mysql_escape_string($row['filesize']).", ";
		echo "'".mysql_escape_string($row['md5'])."', ";
		echo "'".mysql_escape_string($row['pattern'])."', ";
		echo "'".mysql_escape_string($row['virus_name'])."', ";
		echo     mysql_escape_string($row['added']).");\n";
	}
	echo "\n";

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'image` ORDER BY `added` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'image` (`md5`, `description`, `pattern`, `size`, `ext`, `added`) VALUES (';
		echo "'".mysql_escape_string($row['md5'])."', ";
		echo "'".mysql_escape_string($row['description'])."', ";
		echo "'".mysql_escape_string($row['pattern'])."', ";
		echo     mysql_escape_string($row['size']).", ";
		echo "'".mysql_escape_string($row['ext'])."', ";
		echo     mysql_escape_string($row['added']).");\n";
	}
	echo "\n";

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'received_domains` ORDER BY `domain` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'received_domains` (`domain`, `added`) VALUES (';
		echo "'".mysql_escape_string($row['domain'])."', ";
		echo     mysql_escape_string($row['added']).");\n";
	}
	echo "\n";

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'ips` WHERE (`whitelist` = "1") ORDER BY `ipmask` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		$row['domains'] = str_replace("\r\n", "\n", $row['domains']);
		$row['domains'] = str_replace("\r",   "\n", $row['domains']);
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'ips` (`ipmask`, `cmask`, `whitelist`, `added`, `domains`) VALUES (';
		echo "'".mysql_escape_string($row['ipmask'])."', ";
		echo "'".mysql_escape_string($row['cmask'])."', ";
		echo "'".mysql_escape_string('1')."', ";
		echo "'".mysql_escape_string(time())."', ";
		echo "'".mysql_escape_string($row['domains'])."');\n";
	}
	echo "\n";

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'words_clean` ORDER BY `word` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'words_clean` (`word`, `description`, `isregex`, `added`) VALUES (';
		echo "'".mysql_escape_string($row['word'])."', ";
		echo "'".mysql_escape_string($row['description'])."', ";
		echo     mysql_escape_string($row['isregex']).", ";
		echo     mysql_escape_string($row['added']).");\n";
	}
	echo "\n";

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'words_code` ORDER BY `word` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'words_code` (`word`, `description`, `isregex`, `added`) VALUES (';
		echo "'".mysql_escape_string($row['word'])."', ";
		echo "'".mysql_escape_string($row['description'])."', ";
		echo     mysql_escape_string($row['isregex']).", ";
		echo     mysql_escape_string($row['added']).");\n";
	}
	echo "\n";

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'words_obfuscated` ORDER BY `word` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'words_obfuscated` (`word`, `description`, `added`) VALUES (';
		echo "'".mysql_escape_string($row['word'])."', ";
		echo "'".mysql_escape_string($row['description'])."', ";
		echo     mysql_escape_string($row['added']).");\n";
	}
	echo "\n";

	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'domains_autoban`';
	$SQLquery .= ' WHERE (`lasthit` > '.(time() - (14 * 86400)).')';
	$SQLquery .= ' ORDER BY `domain` ASC';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'domains_autoban` (`domain`, `added`) VALUES (';
		echo "'".mysql_escape_string($row['domain'])."', ";
		echo     mysql_escape_string($row['added']).");\n";
	}
	echo "\n";

	exit;

} elseif (@$_REQUEST['fullexe']) {

	header('Content-type: application/octet-stream');
	header('Content-Disposition: attachment; filename=phpop3clean_sql_fulldata-exe_'.date('Ymd').'.sql');
	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'exe`';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `'.PHPOP3CLEAN_TABLE_PREFIX.'exe` (`filesize`, `md5`, `pattern`, `virus_name`, `added`, `virus_data`) VALUES (';
		echo     mysql_escape_string($row['filesize']).", ";
		echo "'".mysql_escape_string($row['md5'])."', ";
		echo "'".mysql_escape_string($row['pattern'])."', ";
		echo "'".mysql_escape_string($row['virus_name'])."', ";
		echo     mysql_escape_string($row['added']).", ";

		$exe_data = $row['virus_data'];
		$data_len = strlen($exe_data);
		echo "0x";
		for ($i = 0; $i < $data_len; $i++) {
			echo str_pad(dechex(ord($exe_data{$i})), 2, '0', STR_PAD_LEFT);
		}
		echo ");\n";
	}
	exit;

} elseif (@$_REQUEST['fullimg']) {

	header('Content-type: application/octet-stream');
	header('Content-Disposition: attachment; filename=phpop3clean_sql_fulldata-image_'.date('Ymd').'.sql');
	$SQLquery  = 'SELECT * FROM `'.PHPOP3CLEAN_TABLE_PREFIX.'image`';
	$result = mysql_query($SQLquery);
	while ($row = mysql_fetch_array($result)) {
		echo 'INSERT IGNORE INTO `phpop3clean_image` (`md5`, `description`, `pattern`, `size`, `ext`, `added`, `image_data`) VALUES (';
		echo "'".mysql_escape_string($row['md5'])."', ";
		echo "'".mysql_escape_string($row['description'])."', ";
		echo "'".mysql_escape_string($row['pattern'])."', ";
		echo     mysql_escape_string($row['size']).", ";
		echo "'".mysql_escape_string($row['ext'])."', ";
		echo     mysql_escape_string($row['added']).", ";

		$img_data = $row['image_data'];
		$data_len = strlen($img_data);
		echo "0x";
		for ($i = 0; $i < $data_len; $i++) {
			echo str_pad(dechex(ord($img_data{$i})), 2, '0', STR_PAD_LEFT);
		}
		echo ");\n";
	}
	exit;

} else {

	echo 'Dump data:<ul>';
	echo '<li><a href="'.$_SERVER['PHP_SELF'].'?nodata=1">No EXE or IMG data</a></li>';
	echo '<li><a href="'.$_SERVER['PHP_SELF'].'?fullexe=1">Full EXE data</a></li>';
	echo '<li><a href="'.$_SERVER['PHP_SELF'].'?fullimg=1">Full IMG data</a></li>';
	echo '</ul>';

}


?>