diff --git a/acp.php b/acp.php new file mode 100644 index 0000000..a8b063a --- /dev/null +++ b/acp.php @@ -0,0 +1,226 @@ +Wrong Password !'; + } + } + + ob_start(); + + if(isset($_SESSION['pass']) && $_SESSION['pass'] == $config['pass']) + { + define('ACPPAGE', true); +?> + + + + + + + + + <?php echo $config['team']; ?> Release Portal + + + +
+ + + + + +
+ + +
+ + + + + + + + + <?php echo $config['team']; ?> Release Portal + + +
+


+
+
Password
+
+
+
+
+
+
+ +:: About :: +

This CMS is made for all Fansub, individuals, for all those who keep strugle the scene alive.
+ And mainly for all guys who are site operators and are not good at PHP coding (cheers my friends!)
+ I aimed for it because... nobody thought to make a release portal in CMS.
+ If you dont like the code/design just edit it, i have tryed to make the PHP more simple than possible, with no vulnerability problem, clean and light code etc...
+I hope you will enjoy my release system :)

+

Final words: i've made a CMS, that a first one for me, and that represent also alot of work, finally, thanks you for your interest on this.

+

__
+Iqbal Rifai

+ +
+
+

:: Contact form ::

+ + + + + + + + + + + + + + + + + + + + + + + + + + +
Your Nick:
Your Email:
Subject:
Mail Message:
 
+
+
+

:: Greetings ::

+

Allah SWT
+Friends: Kaoru Mashiko, Zul Fikar, Widianto Nur Firmansyah And etc.
+

\ No newline at end of file diff --git a/acp/accueil.php b/acp/accueil.php new file mode 100644 index 0000000..3348d8c --- /dev/null +++ b/acp/accueil.php @@ -0,0 +1,15 @@ + +

:: Administration Control Panel ::

+
+ +

CMS version: 0.2.7

+
\ No newline at end of file diff --git a/acp/addrelease.php b/acp/addrelease.php new file mode 100644 index 0000000..cc222f0 --- /dev/null +++ b/acp/addrelease.php @@ -0,0 +1,54 @@ +Release added.'; + include('rss.php'); + } + else + { + echo 'Invalid Token !
Please try again.
'; + } + } + +?>

:: Add a new яelease ::

+
+
+ + + + + + + + + + + + + + + + + +
Anime name:
Release link:
Fansuber :
+ +
diff --git a/acp/delrelease.php b/acp/delrelease.php new file mode 100644 index 0000000..8bcb1cc --- /dev/null +++ b/acp/delrelease.php @@ -0,0 +1,66 @@ + +

:: Delete яeleases ::

+

Total releases : + Total releases of ' . htmlentities($crackerName) . ': ' . $donnees['nb_entry']; + } + ?>

+
Page : '; + for ($i = 1 ; $i <= $nombreDePages ; $i++) + { + if($i != $page) echo '' . $i . ''; + else echo $i . ' '; + } + echo ''; + +?>
+
+
+ + + + +'; + echo ''; + echo ''; + echo ''; + echo ''; + echo ''; + echo ''; + echo ''; + } +?> +
Release name
url
Date (m/d/Y)CrackerDelete
' , date('m/d/Y', $donnees['date']) , '
+
+
diff --git a/acp/editconfig.php b/acp/editconfig.php new file mode 100644 index 0000000..395e4d1 --- /dev/null +++ b/acp/editconfig.php @@ -0,0 +1,62 @@ + +

:: Edit Configuration File ::

+To verify that you are the administrator of the database, you must type your database's password below.

+ +
+ - +
+ +Unable to open the file (".$filename.")."; + exit; + } + + if (fwrite($handle, stripslashes($_POST['config'])) === FALSE) { + echo "Unable to write in the file (".$filename.")."; + exit; + } + + fclose($handle); + + echo 'Changes were done.'; + + } else { + echo "The file ".$filename." is not accessible in writing."; + } + + } + else + { + ?> + +
+ +
+ +
+ Wrong Password !'; + } + } +?> \ No newline at end of file diff --git a/acp/logout.php b/acp/logout.php new file mode 100644 index 0000000..b332e98 --- /dev/null +++ b/acp/logout.php @@ -0,0 +1,10 @@ + +Logout success, you will be redirected on 1 sec + \ No newline at end of file diff --git a/acp/modifabout.php b/acp/modifabout.php new file mode 100644 index 0000000..6ca78fb --- /dev/null +++ b/acp/modifabout.php @@ -0,0 +1,42 @@ + +

:: About Modification ::

+Unable to open the file (".$filename.")."; + exit; + } + + if (fwrite($handle, stripslashes($_POST['about'])) === FALSE) { + echo "Unable to write in the file (".$filename.")."; + exit; + } + + fclose($handle); + + echo 'Changes were done.'; + + } else { + echo "The file ".$filename." is not accessible in writing."; + } + + } + else + { +?> +
+

HTML allowed

+
+ +
+ \ No newline at end of file diff --git a/acp/modifrlz.php b/acp/modifrlz.php new file mode 100644 index 0000000..eec3264 --- /dev/null +++ b/acp/modifrlz.php @@ -0,0 +1,66 @@ + +

:: Edit яeleases ::

+

Total releases : + Total releases of ' . htmlentities($fansuberName) . ': ' . $donnees['nb_entry']; + } + ?>

+
Page : '; + for ($i = 1 ; $i <= $nombreDePages ; $i++) + { + if($i != $page) echo '' . $i . ''; + else echo $i . ' '; + } + echo ''; + +?>
+
+
+ + + + +'; + echo "\n"; + echo ''; + echo ''; + echo ''; + echo ''; + echo ''; + echo ''; + } +?> +
Release name
url
Date (m/d/Y)CrackerSave
' , date('m/d/Y', $donnees['date']) , '
+
+
diff --git a/acp/rss.php b/acp/rss.php new file mode 100644 index 0000000..89c72e7 --- /dev/null +++ b/acp/rss.php @@ -0,0 +1,43 @@ +\n"; + $xml .= "\n"; + $xml .= "\n"; + $xml .= "\n"; + $xml .= "" . $config['accro'] . " Releases\n"; + $xml .= "" . $config['path'] . "\n"; + $xml .= "Latest " . $config['accro'] . " Releases\n"; + $xml .= " " . $config['team'] . " 2009\n"; + $xml .= "en\n"; + $xml .= "\n"; + $xml .= " " . $config['accro'] . " Releases\n"; + $xml .= "" . $config['path'] . "design/rss.png\n"; + $xml .= "" . $config['path'] . "\n"; + $xml .= "\n"; + $today = date("D, d M Y H:i:s +0100"); + //date du jour d'execution du fichier PHP + $xml .= "" . $today . "\n"; + // Faîtes appel à vos fichier de connection à votre base de donnée MySQL + // Adaptez ces lignes à votre base de données / noms de table + $resultat_requete = mysql_query("SELECT * FROM releases ORDER BY date DESC limit 0, 10"); + // extraction des 10 dernières releases + while ($lig = @mysql_fetch_assoc($resultat_requete)) + { + $titre = $lig["name"]; + $adresse = $lig["url"]; + $date = $lig["date"]; + $datephp = date("D, d M Y H:i:s +0100", $date); + $xml .= "\n"; + $xml .= "" . $titre . "\n"; + $xml .= "" . $config['path'] . "\n"; + $xml .= "" . $datephp . "\n"; + $xml .= "Visit our distro to download\n"; + $xml .= "\n"; + } //fin du while + $xml .= "\n"; + $xml .= "\n"; + $fp = fopen("rss.xml", 'w+'); + fputs($fp, $xml); + fclose($fp); + echo '

RSS Updated !

Saw the file

'; +?> \ No newline at end of file diff --git a/acp/sendmail.php b/acp/sendmail.php new file mode 100644 index 0000000..e020c43 --- /dev/null +++ b/acp/sendmail.php @@ -0,0 +1,68 @@ +Go back!

'; + + if (eregi('http:', $notes)) die ($t4pz); + + if(!$visitormail == "" && (!strstr($visitormail,"@") || !strstr($visitormail,"."))) + { + echo "

Use Back - Enter valid e-mail

\n"; + echo "

Feedback was NOT submitted

\n"; + die ($t4pz); + } + + if(empty($visitor) || empty($visitormail) || empty($notes )) + { + echo "

Use Back - fill in all fields

\n"; + die ("

Go back!

"); + } + + $todayis = date("l, F j, Y, g:i a"); + + $subject = $attn; + + $notes = stripcslashes($notes); + +$message = " $todayis [EST] \n +Subject: $attn \n +Message: $notes \n +From: $visitor ($visitormail)\n +Additional Info : IP = $ip \n +Browser Info: $httpagent \n +Referral : $httpref \n +"; + + $from = "From: $visitormail\r\n"; + + mail("phoenixbytes@live.fr", $subject, $message, $from); + + //TODO fixer les XSS +?> + + +
+ Date: +
+ Thank You : ( ) +
+ + Subject: +
+ Message:
+ ", $notes); + echo htmlentities($notesout); ?> +
+ + +

+

Go back!

+
+ + diff --git a/acp/uninstall.php b/acp/uninstall.php new file mode 100644 index 0000000..7d4e95b --- /dev/null +++ b/acp/uninstall.php @@ -0,0 +1,42 @@ + +

:: Uninstall XRS ::

+

Do you really want to Uninstall XRS ?

+To verify that you are the administrator of the database, you must type your database's password below.
+ +
+ - +
+ +:: About Our team ::'; + $about .= '

Our team are made up of a group of friends and reversers from around the world. We are here to have fun and make some quality releases.

'; + $about .= '

You cant contact us and we probably wont contact you. Have fun and keep on learning.

'; + $about .= '

"Life isnt about waiting for the storms to pass, its about learning to dance in the rain."

'; + + mysql_query($sql); + + require("rss.php"); + + unlink("config.php"); + chdir("libs"); + unlink("about.txt"); + + $handle = fopen("about.txt", "a"); + fputs($handle, $about); + fclose($handle); + + echo 'XRS has been Uninstalled...'; + } + else + { + echo 'Wrong Password !'; + } + } + +?> \ No newline at end of file diff --git a/acpajax.php b/acpajax.php new file mode 100644 index 0000000..99b2181 --- /dev/null +++ b/acpajax.php @@ -0,0 +1,15 @@ +You got a problem, we will redirect you on our main page
+We have logged your IP and your current url when you got this message for help us to identify the problem

+ + \ No newline at end of file diff --git a/design/Thumbs.db b/design/Thumbs.db new file mode 100644 index 0000000..bcaf3c0 Binary files /dev/null and b/design/Thumbs.db differ diff --git a/design/banners/Thumbs.db b/design/banners/Thumbs.db new file mode 100644 index 0000000..ce1294c Binary files /dev/null and b/design/banners/Thumbs.db differ diff --git a/design/banners/banner1.png b/design/banners/banner1.png new file mode 100644 index 0000000..53d40ca Binary files /dev/null and b/design/banners/banner1.png differ diff --git a/design/banners/banner2.png b/design/banners/banner2.png new file mode 100644 index 0000000..151904e Binary files /dev/null and b/design/banners/banner2.png differ diff --git a/design/banners/banner3.png b/design/banners/banner3.png new file mode 100644 index 0000000..9efaf15 Binary files /dev/null and b/design/banners/banner3.png differ diff --git a/design/banners/banner4.png b/design/banners/banner4.png new file mode 100644 index 0000000..151fc55 Binary files /dev/null and b/design/banners/banner4.png differ diff --git a/design/banners/banner5.png b/design/banners/banner5.png new file mode 100644 index 0000000..5a16f76 Binary files /dev/null and b/design/banners/banner5.png differ diff --git a/design/banners/banner6.png b/design/banners/banner6.png new file mode 100644 index 0000000..2882155 Binary files /dev/null and b/design/banners/banner6.png differ diff --git a/design/default.css b/design/default.css new file mode 100644 index 0000000..3289d8e --- /dev/null +++ b/design/default.css @@ -0,0 +1,196 @@ +@charset "ISO-8859-1"; + +body { + background-color: #000000; + font-family: Verdana, Arial, Helvetica, sans-serif; + color:#FFFFFF; +} + +img { + border: none; + display: block; + margin-left: auto; + margin-right: auto; +} + +#contentwrapper { + margin-left: auto; + margin-right: auto; + width:775px; + background-color: #000000; + border:1px solid #F1EFE2; +} + +/* DEFINE BANNER STYLE*/ +#banner { + margin-top: 10px; + margin-bottom: 20px; +} + + +/* DEFINE MENU STYLES */ +#menu { + float:left; + width:150px; + margin-left: 0px; + padding-left: 0px; + text-align: left; + font-weight: bold; + font-size: 12px; + color: #EDEDED; +} + +#menu ul { + width:140px; + margin-top: 40px; + margin-left: 10px; + padding-left: 0px; + list-style:none; +} + +#menu ul li { + display:block; + margin-left: 0px; + padding-left: 0px; +} + +#menu ul li a { + float:left; + width:140px; + background-color:#000000; + border:1px solid #F1EFE2; + margin:0px 0px 5px 0px; + padding:10px 1px 10px 5px; + text-decoration:none; + color:#909090; + text-align:center; +} + +#menu ul li a:hover { + background-color:#252525; + color:#FFFFFF; +} + + +/* DEFINE MAIN CONTENT STYLES */ +#maincontent { + float:right; + width: 565px; + margin-left: 25px; + margin-right: 25px; + padding-left: 0px; + padding-bottom: 25px; +} + +#maincontent h1 { + text-align: center; + font-weight: bold; + font-size: 16px; + color: #909090; +} + +#maincontent table { + width: 540px; + margin: 5px 0 20px 25px; + text-align: left; + font-size: 11px; + color: #909090; +} + +#maincontent p { + text-align: left; + font-size: 11px; + color: #909090; +} + +#maincontent form input, #maincontent form select{ + background: #252525; + border:1px solid #FFFFFF; + font-size: 11px; + color: #FFFFFF; +} + +.textinput { + width: 350px; + text-align: left; +} + +.submitbutton { + width: 100px; + text-align: center; +} + +.releasedate { + font-size: 12px; + font-weight: bold; + color: #FFFFFF; +} + +/* DEFINE FOOTER STYLES */ +#footer { + clear: both; + margin-top: 20px; + margin-bottom: 10px; +} + +#footer p { + margin: 0px; + text-align:center; + font-size: 10px; + color: #909090; +} +#pagenums { + color:green; +} +#pagenums a { + text-decoration:none; + color:#909090; +} + +#pagenums a:hover { + color:#FFFFFF; +} + +tr:hover +{ + background-color: #555555; +} +tr a{ + color:#909090; + text-decoration:none; +} +tr a:hover{ + color:#FFFFFF; + text-decoration:underline; +} + +#footerlinks +{ + text-align:center; +} + +#footerlinks a{ + color:#909090; + text-decoration:none; +} +#footerlinks a:hover{ + color:#FFFFFF; + text-decoration:underline; +} + +#maincontent form .acpinput{ + background: #252525; + border:none; + font-size: 11px; + color: #FFFFFF; +} +a +{ + color:#909090; + text-decoration: none; +} +a:hover +{ + color:white; + text-decoration: underline; +} \ No newline at end of file diff --git a/design/rss.png b/design/rss.png new file mode 100644 index 0000000..fcb8913 Binary files /dev/null and b/design/rss.png differ diff --git a/index.php b/index.php new file mode 100644 index 0000000..e4b3e1a --- /dev/null +++ b/index.php @@ -0,0 +1,66 @@ + + + + + + + + <?php echo $config['team']; ?> Release Portal + + +
+ + + + + +
+ + +
+ + +Restricted Acces !

If you are the administrator and if you want to Reinstall XRS, please go to the Control Panel and click on 'Unsinstall XRS'

"); + if(isset($_POST['team'], $_POST['accro'], $_POST['pass'], $_POST['path'], $_POST['dbhost'], $_POST['dbuser'], $_POST['dbpass'], $_POST['dbname'])) + { + sleep(3); + @mysql_connect($_POST['dbhost'],$_POST['dbuser'],$_POST['dbpass']); + $select_base=@mysql_selectdb($_POST['dbname']); + + if (!$select_base) + echo 'ERROR - Database\'s Informations'; + else + { + $query = file_get_contents('install.sql'); + mysql_query($query) or exit(mysql_error()); + + + $FileContent = ""; + + $filename = "../config.php"; + + if (is_writable($filename)) + unlink($filename); + + if (!$handle = fopen($filename, 'a')) { + echo "Unable to open the file (".$filename.")."; + exit; + } + + if (fwrite($handle, stripslashes($FileContent)) === FALSE) { + echo "Unable to write in the file (".$filename.")."; + exit; + } + + fclose($handle); + + echo 'The installation was completed successfully !
Click here for continue.
'; + + } + } +?> + + + Setup + + + + +
+ + + + + + +
+ +
+ Fansub Info + + + + + + + + + + + + + + + + + +
Fansub name :
Fansub acronym :
Fansub pass :
Portal path :
+
+
+ DataBase + + + + + + + + + + + + + + + + + +
Host
User :
Password :
Database's Name :
+
+
+
+ + + \ No newline at end of file diff --git a/install/install.sql b/install/install.sql new file mode 100644 index 0000000..69bf372 --- /dev/null +++ b/install/install.sql @@ -0,0 +1,7 @@ +CREATE TABLE IF NOT EXISTS releases ( +id INT NOT NULL AUTO_INCREMENT PRIMARY KEY , +name TEXT NOT NULL , +url TEXT NOT NULL , +fansuber TEXT NOT NULL , +date INT NOT NULL +) ENGINE = MYISAM ; \ No newline at end of file diff --git a/install/rss.xml b/install/rss.xml new file mode 100644 index 0000000..4931579 --- /dev/null +++ b/install/rss.xml @@ -0,0 +1 @@ + ReleasesLatest Releases 2009fr Releases design/rss.png Tue, 12 June 2018 15:56:42 \ No newline at end of file diff --git a/libs/about.txt b/libs/about.txt new file mode 100644 index 0000000..0071598 --- /dev/null +++ b/libs/about.txt @@ -0,0 +1,10 @@ +This CMS is made for all Fansub, individuals, for all those who keep strugle the scene alive. +And mainly for all guys who are site operators and are not good at PHP coding (cheers my friends!) +I aimed for it because... nobody thought to make a release portal in CMS. +If you dont like the code/design just edit it, i have tryed to make the PHP more simple than possible, with no vulnerability problem, clean and light code etc... +I hope you will enjoy my release system :) + +Final words: i've made a CMS, that a first one for me, and that represent also alot of work, finally, thanks you for your interest on this. + +__ +Iqbal Rifai \ No newline at end of file diff --git a/libs/lib.php b/libs/lib.php new file mode 100644 index 0000000..b0c9c67 --- /dev/null +++ b/libs/lib.php @@ -0,0 +1,122 @@ +

Please go on the Setup Page

'); + } + + function generate_token($name) + { + $token = md5(uniqid(rand(), true)); + $_SESSION[$name.'_token'] = $token; + $_SESSION[$name.'_token_time'] = time(); + return $token; + } + + function check_token_post($name, $time) + { + if(isset($_SESSION[$name.'_token']) && isset($_SESSION[$name.'_token_time']) && isset($_POST['token'])) + { + if($_SESSION[$name.'_token'] == $_POST['token']) + { + $old_timestamp = time() - $time; + if($_SESSION[$name.'_token_time'] >= $old_timestamp) + $return = true; + else + $return = false; + + } + else + { + $return = false; + } + + } + else + $return = false; + + return $return; + } + + function check_token_get($name, $time) + { + if(isset($_SESSION[$name.'_token']) && isset($_SESSION[$name.'_token_time']) && isset($_GET['token'])) + { + if($_SESSION[$name.'_token'] == $_GET['token']) + { + $old_timestamp = time() - $time; + if($_SESSION[$name.'_token_time'] >= $old_timestamp) + $return = true; + else + $return = false; + + } + else + $return = false; + + } + else + $return = false; + + return $return; + } + + function clean_token() + { + $_SESSION['delete_token'] = ""; + $_SESSION['edit_token'] = ""; + } + + function clean_add_token() + { + $_SESSION['add_token'] = ""; + } \ No newline at end of file diff --git a/portail/about.php b/portail/about.php new file mode 100644 index 0000000..3e30219 --- /dev/null +++ b/portail/about.php @@ -0,0 +1,4 @@ + \ No newline at end of file diff --git a/portail/releases.php b/portail/releases.php new file mode 100644 index 0000000..0989008 --- /dev/null +++ b/portail/releases.php @@ -0,0 +1,68 @@ +

Latest Releases

+ +

+Total releases :'; + + $donnees = mysql_fetch_array(mysql_query("SELECT COUNT(*) AS nb_entry FROM releases")); + echo $donnees['nb_entry']; + $totalCracks = $donnees['nb_entry']; + + if($fansuberName != '') + { + $r = mysql_query("SELECT COUNT(*) AS nb_entry FROM releases WHERE fansuber='" . $fansuberName . "'"); + $donnees = mysql_fetch_array($r); + echo '
Total releases of ' , htmlentities($fansuberName) , ': ' , $donnees['nb_entry']; + } + + echo '

'; + + $page = (isset($_GET['spg'])) ? (int)$_GET['spg'] : 1; + $page = $page < 0 ? 0 : $page; + //si on ne précise pas la page on va à la première page + + if($page != 0) $premierMessageAafficher = ($page - 1) * $config['cracksparpage']; + + $nombreDePages = ceil($totalCracks / $config['cracksparpage']); + + echo 'Page : '; + for ($i = 1 ; $i <= $nombreDePages ; $i++) + { + if($i != $page) echo '' . $i . ''; + else echo $i . ' '; + } + echo ''; + +?> +
+ + +'; + echo ''; + echo ''; + echo ''; + echo ''; + } + +?>
Release name
Date (m/d/Y)Fansuber
' , htmlentities($donnees['name']) , '' , date('m/d/Y', $donnees['date']) , '' , htmlentities($donnees['fansuber']) , '
+ +
+ diff --git a/portail/search.php b/portail/search.php new file mode 100644 index 0000000..4cedbd5 --- /dev/null +++ b/portail/search.php @@ -0,0 +1,68 @@ + +

:: Search Releases ::

+

Our database contains a list of all our official releases. Use the +form below to search it.

+ + + ' ' ); + if (isset ( $_POST ['q'] ) && $_POST ['q'] != NULL) + { + $q = htmlentities( $_POST ['q'] ); + $nobreak = htmlentities(strtr ( $q, $ent )); + + $sql = "SELECT * FROM releases WHERE name LIKE '%$nobreak%' ORDER BY date DESC"; + if ( $searchtype == "byfansuber" ) + $sql = "SELECT * FROM releases WHERE fansuber LIKE '%$nobreak%' ORDER BY date DESC"; + + $query = mysql_query ($sql); + $nb_resultats = mysql_num_rows ( $query ); + + if ($nb_resultats != 0) + { + echo '

Your search: "', $q, '" matched '; + + echo $nb_resultats , ($nb_resultats > 1) ? ' releases in our database!' : ' result'; + + echo '

'; + + while ( $donnees = mysql_fetch_array ( $query ) ) + { + echo '' . htmlentities ( $donnees ['name'] ) . ' - ( Cracker : '.htmlentities( $donnees ['fansuber'] ).' )
'; + } + + echo '

'; + + echo 'Make a new search

'; + + } + else + { +?> +

Your search: "" + matched 0 releases in our database!
+ Click here if you want retry

+ + +
+ + +
Search by Release's Name +
Search by Fansuber's Name +
+ + + + + +Daijoubu Releases +https://0wo.me/daijoubu/ +Latest Daijoubu Releases + Daijoubu CMS V2 2009 +en + + Daijoubu Releases +https://0wo.me/daijoubu/design/rss.png +https://0wo.me/daijoubu/ + +Tue, 12 Jun 2018 16:33:37 +0100 + +Akkun to Kanojo Episode 1 – 4 (Subtitle Indonesia) +https://0wo.me/daijoubu/ +Tue, 12 Jun 2018 16:33:37 +0100 +Visit our distro to download + + + diff --git a/rss_style.xsl b/rss_style.xsl new file mode 100644 index 0000000..90416a5 --- /dev/null +++ b/rss_style.xsl @@ -0,0 +1,68 @@ + + + + + + + <xsl:value-of select="title" /> - <xsl:value-of select="description" /> + + + + +
+
+ + + + + + + +
+
+ {image/title} +
+
+
+ [Valid RSS]
+ Page ini menggunakan format RSS 2.0.
+ flux RSS.
+
+
+
+
+ + +
+ + + + + + +
+ + + + +
+
+