Cyber Anakins Lightsaber - A Minishell-based backdoor

<?php
require("design.php");

session_start();


$id = _GET_('id');
$embeded = intval(_GD_('embeded',0));

$mysql = mysqlopen();

$result = mysqli_query($mysql, "SELECT `filial`,`name`,`subname`,`desc`,`category`,`needRegister`,`howToRegister`,`whenRegister` FROM libProgDescriptions WHERE `id`=$id LIMIT 1");
if (mysqli_errno($mysql)) die("ERROR: ".mysqli_error($mysql)." at line ".__LINE__." of file ".__FILE__."\n");
if(!($row = mysqli_fetch_assoc($result))) die("ERROR: Мероприятие не найдено!");

$_GET['filial']=$row['filial'];

$canEdit = false;

if (!$embeded)
{
	$canEdit = AdminAuth(RIGHT_EDIT_PROGRAMS, $row['filial']);
	TOP(-1);


	LEFTCOLUMN();
	CHANNELS();

	MAINCOLUMN();
}

print "<h1>"._html_($row['name'])."</h1>\n";
print "<center><B>"._html_($row['subname'])."</B></center>";

if ($canEdit)
{
	print "<script src='progeditor.js'></script>\n";
	print "<center><img class=editBtn title='Редактировать мероприятие' src='edit.png' onclick='editProgDesc($id, false)'></center>";
}

print "<p>"._para_($row['desc'])."</p>\n";

print "<br>\n";
print "<p>Категория: ".$row['category']."+</p>\n";
print "<p>Место проведения: <a href='filial.php?filial=".$row['filial']."'>".$GLOBALS['filials'][$row['filial']]."</a></p>\n";

if ($row['needRegister'])
{
	print "<p style='font-weight:bold; color:#bb0000'>Только по предварительной записи</p>\n";
}

print "<center>";
$dir = @opendir("program/$id");
if ($dir)
{
	while($file = readdir($dir))
	{
		if ($file!=".." && $file!=".")
		{
			print "<a href='program/$id/$file' target=IMAGE><img src='program/$id/$file' width=240 style='max-height:240' vspace=8 hspace=8></a> ";
		}
	}	
	closedir($dir);
}
print "</center>\n";



if ($row['needRegister'])
{
	print "<H2>Как записаться</H2>\n";
	print "<p>"._para_($row['howToRegister'])."</p>\n";
	print "<br>\n";
	print "<p><b>Запись в следующую группу открыта до: ".SQLtoDate($row['whenRegister'])."</b></p>\n";
}

if (!$embeded)
{
?>
<hr>
<center style='margin-top:10'><input type=button onclick='history.back()' value='« Назад'></center>
<br><br>
<?php
}

if (!$embeded)
{
	MIDDLECOLUMN2();
	print "<center><table><tr><td>";
	ACTUALLINKS('actualLinksH');
	print "</tr></td></table></center>";
	FAQ();


	MIDDLECOLUMN();
	CHANNELS("channelBlockH");
	RIGHTCOLUMN();

	ACTUALLINKS();
	FAQ();
	BOTTOM();
}
?>