session_start();
include("config.php");
include("func.php");
$IIIIIIIIIIIl = $_SERVER[$OOO000000('UkVNT1RFX0FERFI=')];
if(!isset($_SESSION[usr_name]) ||empty($_SESSION[usr_name]) ||!isset($_SESSION[usr_level]) ||empty($_SESSION[usr_level]))
{
session_destroy();
session_unset();
error(1);
}
$IIIIIIIIIIll = mysql_query("select * from usr_config where aspect = 'SITE_NAME'");
$IIIIIIIIII1I = mysql_fetch_array($IIIIIIIIIIll);
$IIIIIIIIII11 = mysql_query("select * from usr_level where level = '$_SESSION[usr_level]'");
$IIIIIIIIIlII = mysql_fetch_array($IIIIIIIIII11);
$IIIIIIIIIlIl = clean($_GET[mode]);
;echo $OOO000000('PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0 MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFsLy9FTiIgImh0 dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLX RyYW5zaXRpb25hbC5kdGQiPg0KPGh0bWwgeG1sbnM9Imh0dHA6 Ly93d3cudzMub3JnLzE5OTkveGh0bWwiPg0KPGhlYWQ+DQo8bW V0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9 InRleHQvaHRtbDsgY2hhcnNldD1pc28tODg1OS0xIiAvPg0KPH RpdGxlPlVzZXJTeXN0ZW0gdjIgJnJhcXVvOyA=');echo("$IIIIIIIIII1I[preference]");;echo $OOO000000('PC90aXRsZT4NCjxsaW5rIHJlbD0ic3R5bGVzaG VldCIgaHJlZj0iY29udGVudC5jc3MiIHR5cGU9InRleHQvY3Nz IiAvPjwvaGVhZD4NCjxib2R5Pg0K');
if($IIIIIIIIIlII[adm_access]!=1)
error(2);
;echo $OOO000000('PHRhYmxlIHdpZHRoPSIxMDAlIiBib3JkZXI9Ij AiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGluZz0iMCI+DQog IDx0cj4NCiAgICA8dGQ+PGRpdiBhbGlnbj0iY2VudGVyIj5CYW RnZSBBZG1pbmlzdHJhdGlvbiA8L2Rpdj48L3RkPg0KICA8L3Ry Pg0KICA8dHI+DQogICAgPHRkPiZuYnNwOzwvdGQ+DQogIDwvdH I+DQogIDx0cj4NCiAgICA8dGQ+PGRpdiBhbGlnbj0iY2VudGVy Ij48YSBocmVmPSJiYWRnZS5waHA/bW9kZT1naXZlIj4mcmFxdW87R2l2ZSB1c2VyIEJhZGdlPC9hPi A8YSBocmVmPSJiYWRnZS5waHA/bW9kZT1yZW1vdmUiPiZyYXF1bztSZW1vdmUgQmFkZ2U8L2E+PC 9kaXY+PC90ZD4NCiAgPC90cj4NCiAgPHRyPg0KICAgIDx0ZD4m bmJzcDs8L3RkPg0KICA8L3RyPg0KICA8dHI+DQogICAgPHRkPj xkaXYgYWxpZ249ImNlbnRlciI+');if(!$IIIIIIIIIlIl) {;echo $OOO000000('CVBsZWFzZSBjaG9vc2UgYW4gb3B0aW9uLi4gDQ oJ');}
elseif($IIIIIIIIIlIl==give)
{;echo $OOO000000('CTxmb3JtIGFjdGlvbj0iYmFkZ2UucGhwP21vZG U9Z2l2ZWl0IiBtZXRob2Q9InBvc3QiIGVuY3R5cGU9Im11bHRp cGFydC9mb3JtLWRhdGEiPg0KCTxmaWVsZHNldD4NCgk8bGVnZW 5kPkdlbmVyYWwgaW5mbzwvbGVnZW5kPg0KCTxiciAvPg0KCUdp dmUgdG8gdXNlcjo8YnIgLz4NCgk8aW5wdXQgbmFtZT0idXNlci IgdHlwZT0idGV4dCIgbWF4bGVuZ3RoPSIyMCIgLz4NCgk8YnIg Lz48YnIgLz4NCglJc3N1ZSBSZWFzb246PGJyIC8+DQoJPHRleH RhcmVhIG5hbWU9InJlYXNvbiIgY29scz0iMzUiIHJvd3M9IjMi PjwvdGV4dGFyZWE+DQoJPC9maWVsZHNldD4NCgk8YnIgLz4NCg kNCgk8ZmllbGRzZXQ+DQoJPGxlZ2VuZD5CYWRnZSBJbWFnZTwv bGVnZW5kPg0KCTxiciAvPg0KCVVSTCB0byBiYWRnZSBpbWFnZT o8YnIgLz4NCgk8aW5wdXQgbmFtZT0iYmFkZ2UiIHR5cGU9InRl eHQiIHNpemU9IjQwIiAvPg0KCTxiciAvPjxiciAvPg0KCTxlbT 5PUjwvZW0+DQoJPGJyIC8+PGJyIC8+DQoJVXBsb2FkIGFuIElt YWdlIGZyb20geW91ciBDb21wdXRlcjxiciAvPg0KCTxpbnB1dC B0eXBlPSJmaWxlIiBuYW1lPSJmaWxlIiAvPjxiciAvPjxiciAv Pg0KCQ==');
$IIIIIIIIIlI1 = mysql_num_rows(mysql_query("select * from usr_badge_recent"));
if($IIIIIIIIIlI1!=0) {;echo $OOO000000('CTxlbT5PUjwvZW0+DQoJPGJyIC8+PGJyIC8+DQ oJQ2hvb3NlIGEgcmVjZW50bHkgdXNlZCBiYWRnZS4uPGJyIC8+ DQoJPHNlbGVjdCBuYW1lPSJyZWNlbnQiPg0KCTxvcHRpb24gc2 VsZWN0ZWQ9InNlbGVjdGVkIj5DaG9vc2UgT25lLi4uPC9vcHRp b24+DQoJ');
$IIIIIIIIIllI = mysql_query("select * from usr_badge_recent");
while($IIIIIIIIIlll = mysql_fetch_array($IIIIIIIIIllI))
{
echo($OOO000000('PG9wdGlvbiB2YWx1ZT0i').$IIIIIIIII lll[url].$OOO000000('Ij4=').$IIIIIIIIIlll[url].$OOO000000('PC9vcHRpb24+'));
}
;echo $OOO000000('CTwvc2VsZWN0Pg0KCQ==');}else {;echo $OOO000000('CTxlbT5PUjwvZW0+DQoJPGJyIC8+PGJyIC8+DQ oJQ2hvb3NlIGEgcmVjZW50bHkgdXNlZCBiYWRnZS4uPGJyIC8+ DQoJPGlucHV0IHR5cGU9InRleHQiIG5hbWU9InJlY2VudCIgZG lzYWJsZWQ9ImRpc2FibGVkIiB2YWx1ZT0iTm8gUmVjZW50IEJh ZGdlcyIgLz4NCgk=');};echo $OOO000000('PGJyIC8+PGJyIC8+DQoJPGlucHV0IHR5cGU9In N1Ym1pdCIgdmFsdWU9IkdpdmUgQmFkZ2UhIiAvPg0KCTwvZmll bGRzZXQ+DQoJPC9mb3JtPg0KCQ==');}
elseif($IIIIIIIIIlIl==giveit)
{
$IIIIIIIIIll1 = clean($_POST[user]);
$IIIIIIIIIl1I = clean($_POST[badge]);
$IIIIIIIIIl1l = clean($_POST[reason]);
$IIIIIIIIIl11 = clean($_POST[recent]);
if(!empty($IIIIIIIIIll1) &&!empty($IIIIIIIIIl1l))
{
if(!empty($IIIIIIIIIl1I))
{
$IIIIIIIII1II = mysql_query("insert into usr_badge(user, badge, reason) values('$IIIIIIIIIll1', '$IIIIIIIIIl1I', '$IIIIIIIIIl1l')");
echo($OOO000000('PGltZyBzcmM9Ig==').$IIIIIIIIIl1I. $OOO000000('IiAvPiBIYXMgYmVlbiBhd2FyZGVkIHRvIA==') .$IIIIIIIIIll1.$OOO000000('PGJyIC8+PGEgaHJlZj0iYmF kZ2UucGhwIj5CYWNrIHRvIEJhZGdlIEFkbWluPC9hPg=='));
$IIIIIIIII1Il = mysql_num_rows(mysql_query("select * from usr_badge_recent where url='$IIIIIIIIIl1I'"));
if($IIIIIIIII1Il==0)
mysql_query("insert into usr_badge_recent(url) values('$IIIIIIIIIl1I')");
}
elseif($IIIIIIIIIl11!="Choose One..."&&$IIIIIIIIIl11!="No Recent Badges")
{
$IIIIIIIII1II = mysql_query("insert into usr_badge(user, badge, reason) values('$IIIIIIIIIll1', '$IIIIIIIIIl11', '$IIIIIIIIIl1l')");
echo($OOO000000('PGltZyBzcmM9Ig==').$IIIIIIIIIl11. $OOO000000('IiAvPiBIYXMgYmVlbiBhd2FyZGVkIHRvIA==') .$IIIIIIIIIll1.$OOO000000('PGJyIC8+PGEgaHJlZj0iYmF kZ2UucGhwIj5CYWNrIHRvIEJhZGdlIEFkbWluPC9hPg=='));
}
else
{
if(file_exists("badges/".$_FILES["file"]["name"]))
die("Sorry, An image with that filename already exists! Please rename and try again");
else
{
move_uploaded_file($_FILES["file"]["tmp_name"],"badges/".$_FILES["file"]["name"]);
$IIIIIIIII1I1 = "badges/".$_FILES["file"]["name"];
$IIIIIIIII1II = mysql_query("insert into usr_badge(user, badge, reason) values('$IIIIIIIIIll1', '$IIIIIIIII1I1', '$IIIIIIIIIl1l')");
echo($OOO000000('PGltZyBzcmM9Ig==').$IIIIIIIII1I1. $OOO000000('IiAvPiBIYXMgYmVlbiBhd2FyZGVkIHRvIA==') .$IIIIIIIIIll1.$OOO000000('PGJyIC8+PGEgaHJlZj0iYmF kZ2UucGhwIj5CYWNrIHRvIEJhZGdlIEFkbWluPC9hPg=='));
mysql_query("insert into usr_badge_recent(url) values('$IIIIIIIII1I1')");
exit;
}
}
}
else die("Sorry, You have not filled in all the required information!");
}
elseif($IIIIIIIIIlIl==remove)
{
;echo $OOO000000('CTxmb3JtIGFjdGlvbj0iYmFkZ2UucGhwP21vZG U9cmVtb3ZlaXQiIG1ldGhvZD0icG9zdCI+DQoJVXNlcm5hbWU6 PGJyIC8+DQoJPGlucHV0IHR5cGU9InRleHQiIG5hbWU9InVzZX IiIC8+PGJyIC8+PGJyIC8+DQoJPGlucHV0IHR5cGU9InN1Ym1p dCIgdmFsdWU9Ikxvb2sgdXAgYmFkZ2VzIiAvPg0KCTwvZm9ybT 4NCgk=');}
elseif($IIIIIIIIIlIl==removeit)
{
$IIIIIIIIIll1 = clean($_POST[user]);
$IIIIIIIII1lI = mysql_query("select * from usr_badge where user = '$IIIIIIIIIll1'");
$IIIIIIIII1ll = mysql_num_rows($IIIIIIIII1lI);
if($IIIIIIIII1ll==0)
echo("Sorry, This user doesnt have any badges!");
else
{
echo("Click the badge image to delete.<br /><br />");
while($IIIIIIIIIl1I = mysql_fetch_array($IIIIIIIII1lI))
{
echo($OOO000000('PGEgaHJlZj0iYmFkZ2UucGhwP21vZGU9c mVtJmlkPQ==').$IIIIIIIIIl1I[id].$OOO000000('Ij48aW1nIHNyYz0i').$IIIIIIIIIl1I[badge].$OOO000000('IiBhbHQ9Ig==').$IIIIIIIIIl1I[reason].$OOO000000('IiAvPjwvYT4mbmJzcDsg'));
}
}
}
elseif($IIIIIIIIIlIl==rem)
{
$IIIIIIIII1l1 = clean($_GET[id]);
$IIIIIIIII11I = mysql_query("delete from usr_badge where id = '$IIIIIIIII1l1'");
echo("The badge has been deleted!");
echo("<br /><br /><a href=\"badge.php\" >Return to Badge Administration</a>");
}
;echo eval($OOO000000('ICAgIDwvZGl2PjwvdGQ+DQogIDwvdHI+D Qo8L3RhYmxlPg0KPC9ib2R5Pg0KPC9odG1sPg==');
So far, just need to work on decodeing the variables.