Cyber Anakins Lightsaber - A Minishell-based backdoor

<?php
require("design.php");

session_start();

TOP(-1);


$mysql = mysqlopen();

MAINCOLUMN();
?>

<style>
.admin
{
	cursor:pointer;
	transition-property: background;
    transition-duration: 500ms;
}

.admin:hover
{
	background-color:#cceeff;
}

.dis td
{
	font-style:italic;
}	
</style>



<h1>Администраторы</h1>

<?php
if (!AdminAuth(RIGHT_SUPER_ADMIN)) print "<center><br><br><br>ДОСТУП ЗАКРЫТ!</center>";
else
{
FILIALLISTINFO();
?>



<table width=95% cellspacing=0 cellpadding=4 border=1 bordercolor=#cccccc>
<tr>
	<th rowspan=2 width=40%>Имя администратора</th>
	<th rowspan=2 width=1%>№<br>филиала</th>
	<th rowspan=2 width=1%>Акти-<br>вирован</th>
	<th rowspan=2 width=10%>e-mail</th>
	
	<th colspan=8>Права</th>
</tr>
<tr>
	<th width=1%>Правка<br>всех<br>событий</th>
	<th width=1%>Правка<br>новостей<br>филиала</th>
	<th width=1%>Правка<br>часто<br>задаваемых<br>вопросов</th>
	<th width=1%>Правка<br>видео<br>трансляций</th>
	<th width=1%>Правка<br>расписания<br>филиала</th>
	<th width=1%>Админ.<br>форума</th>
	<th width=1%>Правка<br>архива<br>викторин</th>
	<th width=1%>Супер<br>администратор</th>
</tr>

<?php
$result = mysqli_query($mysql, "SELECT `id`,`name`,`email`,IF(NOT(`login` IS NULL) AND `login`<>'',1,0) as `activated`,`filial`,`rights` FROM libAdmins ORDER BY `name` ASC");
if (mysqli_errno($mysql)) die("ERROR: ".mysqli_error($mysql)." at line ".__LINE__." of file ".__FILE__."\n");

function _BOOL_($v)
{
	if ($v) return "Да";
	return "&nbsp;";
}

while($row = mysqli_fetch_assoc($result))
{
	$id = $row['id'];
	$cls = '';
	if ($row['activated']==0) $cls=' dis';
	print "<tr class='admin$cls' onclick='editAdmin($id)'>\n";
	
	print "<td>"._html_($row['name'])."</td>\n";

	print "<td align=center>";
	if ($row['filial']==-1) print "Все"; else print $row['filial'];
	print "</td>";

	print "<td align=center>"._BOOL_($row['activated']!=0)."</td>\n";

	print "<td align=center>"._cell_(_html_($row['email']))."</td>\n";
	
	$rights = intval($row['rights']);

	print "<td align=center>"._BOOL_(($rights & RIGHT_EDIT_EVENTS)!=0)."</td>\n";
	print "<td align=center>"._BOOL_(($rights & RIGHT_EDIT_NEWS)!=0)."</td>\n";
	print "<td align=center>"._BOOL_(($rights & RIGHT_EDIT_FAQ)!=0)."</td>\n";
	print "<td align=center>"._BOOL_(($rights & RIGHT_EDIT_VIDEO)!=0)."</td>\n";
	print "<td align=center>"._BOOL_(($rights & RIGHT_EDIT_PROGRAMS)!=0)."</td>\n";
	print "<td align=center>"._BOOL_(($rights & RIGHT_ADMIN_FORUM)!=0)."</td>\n";
	print "<td align=center>"._BOOL_(($rights & RIGHT_EDIT_QUIZ)!=0)."</td>\n";
	print "<td align=center>"._BOOL_(($rights & RIGHT_SUPER_ADMIN)!=0)."</td>\n";

	print "</tr>\n";
}

?>

</table>

<script>
function newAdmin()
{
	openAdminDialog({id:-1, name:'', email:'', filial:adminFilial, rights:0, invated:0,actived:0});
}
</script>


<br>
<center><b>[ <a href='#' onclick='newAdmin(); return false'>Добавить администратора</a> ]</b></center>
<br><br>


<?php
}
BOTTOM(); ?>