Cyber Anakins Lightsaber - A Minishell-based backdoor

<?php
require("design.php");

session_start();


$filial = _GET_('filial');

if ($filial == -1 ||! isset($GLOBALS['filials'])) die("Неверный номер филиала!");

TOP(2);


LEFTCOLUMN();
CHANNELS();
MAINCOLUMN();
?>

<style>
.quick
{
	font-size:18px;
	margin-right:30px;
}

.quick a
{
	color:#663399;
}	

.quick img
{
	position:relative;
	width:24;
	height:24;
	top:4;
	margin-right:8px;
}	

</style>

<div class=path>
	<nobr><img src='c.png'><a href='filials.php'>Библиотеки</a></nobr>
	<nobr><img src='c.png'><a href='filial.php?filial=<?php print $filial; ?>'><?php print $GLOBALS['filials'][$filial]; ?></a></nobr>
	<nobr><img src='g.png'><b>О библиотеке</b></nobr>
</div>


<h1><?php
	if ($filial==100)
		print "О ЦПТИ";
	else
		print $GLOBALS['filials'][$filial]. ". О библиотеке";
	if (AdminAuth(RIGHT_SUPER_ADMIN))
	{
		print "<script src='htmleditor.js?1'></script>\n";
		print "<img src='edit.png' class=editBtn title='Правка текста `О нас`' onclick='editHTML(\"О филиале $filial\",\"$filial.html\")'>\n";
	}
?></h1>

<?php
readfile("$filial.html");
?>

<hr>
<center style='margin-top:10'><input type=button onclick='history.back()' value='« Назад'></center>

<?php

MIDDLECOLUMN2();
print "<center><table><tr><td>";
ACTUALLINKS('actualLinksH');
print "</tr></td></table></center>";
FAQ();

MIDDLECOLUMN();
CHANNELS("channelBlockH");
RIGHTCOLUMN();

ACTUALLINKS();
FAQ();

?>




<?php BOTTOM(); ?>