[PHP知识库]【无标题】

str.php

<?php
$email = 'user@example.com'; ??
$domain = strstr($email, '@'); ??
echo $domain;?
?>

ping.php

<?php
? ? // ?created by joe lumbroso
? ? // ?see some other good php3 scripts
? ? // ?goto http://www.dtheatre.com/scripts
echo "<font color=\"red\"><blink><b>Pinging</b></blink></font><br>";
$to_ping = "117.41.168.8";
$count = 3;
$psize = 65;
echo " ? Please be patient, this can take a few moments...\n<br><br>";
flush();

while (1) {
?>
<pre>
<?
exec("ping -c $count -s $psize $to_ping", $list);
for ($i=0;$i < count($list);$i++) {
? ?print $list[$i]."\n";
}
?>
</pre>
<?
flush();
sleep(3);
}
?>

email when access

<?php?
$videoid = $_GET['id'];
if($videoid=='')
? {$videoid='1535';}

$to = ?'dovcn@qq.com';?
$subject = "=?UTF-8?B?".base64_encode('邮件标题思念如跌')."?="; //防止乱码
$message = '邮件内容Hello! '.real_ip().'love.php.';
$headers = 'MIME-Version: 1.0' . "\r\n";?
$headers .= 'Content-type: text/html; charset=gb2312' . "\r\n"; //Additional headers?
$headers .= 'Reply-To: 123456<123456@qq.com>' . "\r\n";?
$headers .= 'From: 123456<123456@qq.com>' . "\r\n";?
mail($to,$subject,$message,$headers);

function real_ip()
{
// 初始化一个变量$realip
? ? static $realip = NULL;

? ? // 如果$realip不真等于NULL,返回之
? ? if ($realip !== NULL)
? ? {
? ? ? ? return $realip;
? ? }
// 如果$_SERVER有值
? ? if (isset($_SERVER))
? ? {
? ? // 如果$_SERVER['HTTP_X_FORWARDED_FOR']有值
? ? // 表明客户端通过代理上网
? ? ? ? if (isset($_SERVER['HTTP_X_FORWARDED_FOR']))
? ? ? ? {
? ? ? ? // 使用explode()函数将其用','分割成数组
? ? ? ? ? ? $arr = explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']);

? ? ? ? ? ? /* 取X-Forwarded-For中第一个非unknown的有效IP字符串 */
? ? ? ? ? ? // 开始遍历数组
? ? ? ? ? ? foreach ($arr AS $ip)
? ? ? ? ? ? {
? ? ? ? ? ? // 去掉首尾的空白
? ? ? ? ? ? ? ? $ip = trim($ip);
? ? ?// 不是unknown就是真实上网地址,存值并退出循环
? ? ? ? ? ? ? ? if ($ip != 'unknown')
? ? ? ? ? ? ? ? {
? ? ? ? ? ? ? ? ? ? $realip = $ip;
? ? ? ? ? ? ? ? ? ? break;
? ? ? ? ? ? ? ? }
? ? ? ? ? ? }
? ? ? ? }
? ? ? ? // $_SERVER['HTTP_X_FORWARDED_FOR']无值 且
? ? ? ? // $_SERVER['HTTP_CLIENT_IP']有值，取其值作为真实IP
? ? ? ? elseif (isset($_SERVER['HTTP_CLIENT_IP']))
? ? ? ? {
? ? ? ? ? ? $realip = $_SERVER['HTTP_CLIENT_IP'];
? ? ? ? }
? ? ? ? // $_SERVER['HTTP_X_FORWARDED_FOR']无值(不是用过代理上网)并且
? ? ? ? // $_SERVER['HTTP_CLIENT_IP']也没有值
? ? ? ? else
? ? ? ? {
? ? ? ? // 如果$_SERVER['REMOTE_ADDR']有值，取其值作为真实IP
? ? ? ? ? ? if (isset($_SERVER['REMOTE_ADDR']))
? ? ? ? ? ? {
? ? ? ? ? ? ? ? $realip = $_SERVER['REMOTE_ADDR'];
? ? ? ? ? ? }
? ? ? ? ? ? else // 都没有值返回'0.0.0.0'
? ? ? ? ? ? {
? ? ? ? ? ? ? ? $realip = '0.0.0.0';
? ? ? ? ? ? }
? ? ? ? }
? ? }
? ? // $_SERVER没有值
? ? else
? ? {
? ? // 如果getenv('HTTP_X_FORWARDED_FOR')非空取其值作为真实IP
? ? ? ? if (getenv('HTTP_X_FORWARDED_FOR'))
? ? ? ? {
? ? ? ? ? ? $realip = getenv('HTTP_X_FORWARDED_FOR');
? ? ? ? }
? ? ? ? // 如果getenv('HTTP_CLIENT_IP')非空取其值作为真实IP
? ? ? ? elseif (getenv('HTTP_CLIENT_IP'))
? ? ? ? {
? ? ? ? ? ? $realip = getenv('HTTP_CLIENT_IP');
? ? ? ? }
? ? ? ? // 否则取getenv('REMOTE_ADDR')的值作为真实IP
? ? ? ? else
? ? ? ? {
? ? ? ? ? ? $realip = getenv('REMOTE_ADDR');
? ? ? ? }
? ? }

? ? preg_match("/[\d\.]{7,15}/", $realip, $onlineip);
? ? $realip = !empty($onlineip[0]) ? $onlineip[0] : '0.0.0.0';

? ? return $realip;
}
?><p align=left>
<embed src="http://flash.orgasm.com/player.swf" quality="high" wmode="opaque" allowscriptaccess="always" allowfullscreen="true" pluginspage="http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash" flashvars="currDomain=orgasm.com&amp;category=recent&amp;videoPath=/video/<?php ?echo $videoid;?>/&amp;campaignId=464&amp;pod=stream.orgasm.com&amp;usedcampaigns=, , 483&amp;genericvars=ax|0&amp;params=" type="application/x-shockwave-flash" width="800" height="640">?
<form id="searchform1" name="searchform1" method="get" action="niu.php"><input name="id" type="text"><input name="Submit2" type="submit" class="btn2" value="查询" /></form></p>
? ? ?

daizhuce.php

<?php
? ? function checkstr($needle,$str){ ??
? ? $tmparray = explode($needle,$str); ??
? ? if(count($tmparray)>1){ ??
? ? return true; ??
? ? } else{ ??
? ? return false; ??
? ? } ??
? ? } ?
$test=rand(10000000,100000000)."@lixiaonet";
$email=$_GET["email"];
$argv = array( 'h1' => array('usermail' =>$email, 'password' => '123456', 'repass' => '123456', 'submit1' => '?? ??') );
//print_r($argv) ;
?foreach($argv['h1'] as $key => $value)?
?{ $params[] = $key . '=' . $value; }
? $params = implode('&', $params);?
? $header = "POST /userreg2.asp HTTP/1.1\r\n";
? ?$header .= "Host:1059.jinmi.com\r\n";
? ? $header .= "Content-Type: application/x-www-form-urlencoded\r\n";
?? ? $header .= "Content-Length: " . strlen($params) . "\r\n";?
?? ? $header .= "Connection: Close\r\n\r\n";
?? ? $header .= $params;?
?? ? $fp = fsockopen('1059.jinmi.com', '80');?
?? ? fputs($fp, $header);?
?? ? while(!feof($fp))?
?? ? {
?? ? $doit=fgets($fp);
//echo $doit;
?? ? }
header("Location: daizhuce.php?email=".$test);
?>

jinmi_reg.php

<?php
? ? function checkstr($needle,$str){ ??
? ? $tmparray = explode($needle,$str); ??
? ? if(count($tmparray)>1){ ??
? ? return true; ??
? ? } else{ ??
? ? return false; ??
? ? } ??
? ? } ?
$email="domain@lixiao.net";
//$email=$_GET["email"];
$argv = array( 'h1' => array('usermail' =>$email, 'password' => '123456', 'repass' => '123456', 'submit1' => '提 交') );
//print_r($argv) ;
?foreach($argv['h1'] as $key => $value)?
?{ $params[] = $key . '=' . $value; }
? $params = implode('&', $params);?
? $header = "POST /userreg2.asp HTTP/1.1\r\n";
? ?$header .= "Host:www.jinmi.com\r\n";
? ? $header .= "Content-Type: application/x-www-form-urlencoded\r\n";
?? ? $header .= "Content-Length: " . strlen($params) . "\r\n";?
?? ? $header .= "Connection: Close\r\n\r\n";
?? ? $header .= $params;?
?? ? $fp = fsockopen('www.jinmi.com', '80');?
?? ? fputs($fp, $header);?
?? ? while(!feof($fp))?
?? ? {
?? ? $doit=fgets($fp);
//echo $doit;
?? ? }
?? ? if(checkstr("该邮箱已经被注册",$doit)==true)
?? ? ? {echo "该邮箱".$email."已经被注册";}?
?? ? else if(checkstr("您的身份证号码后6位",$doit)==true)
?? ? ? {echo "成功注册！".$email;}
?? ? else
?? ? ? {echo "其它问题";}
?>

asp access

<!doctype html public "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
?? ?<meta http-equiv="Content-Type" content="text/html;charset=gb2312" />
?? ??? ?<meta name="Keywords" content="价值百万的超级域名"/>
?? ??? ??? ?<meta name="Description" content="价值百万的超级域名" />
?? ??? ?<link rel="stylesheet" href="default.css" type="text/css" />
?? ?<title>All the domains for sale</title>
?? ?</head>
<body>
?? ??? ??? ??? ??? ?<table cellspacing="0">
?? ??? ??? ??? ??? ??? ?<tbody>
?? ??? ??? ??? ??? ??? ??? ?<tr>
?? ??? ??? ??? ??? ??? ??? ??? ?<th>id</th>
?? ??? ??? ??? ??? ??? ??? ??? ?<th style="width:30%;">Domain name(no order)</th>
?? ??? ??? ??? ??? ??? ??? ??? ?<th>Meaning</th>
?? ??? ??? ??? ??? ??? ??? ??? ?<th>Catalog</th>
?? ??? ??? ??? ??? ??? ??? ??? ?<th>Tencent</th>
?? ??? ??? ??? ??? ??? ??? ??? ?<th>MSN</th>
?? ??? ??? ??? ??? ??? ??? ?</tr>
<%
dim db
const DatabaseType="ACCESS" ? ??
db="domain.mdb" ? ? ? ? ??
'On Error Resume Next
?dim ConnStr
?dim conn

set conn=server.createobject("adodb.connection")
DBPath = Server.MapPath("domain.mdb")
conn.Open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DBPath
?'If Err Then
?' Response.Write "数据库连接出错，请检查Conn.asp文件中的数据库参数设置。"&err.description
?' err.Clear
?' Set Conn = Nothing
?' Response.End
'else

set rs=server.CreateObject("adodb.recordset")
sqltext="select * from domain where power>0 order by power asc,domain asc,id asc,mainclass desc"
rs.open sqltext,conn,1,1
id=1
do while not rs.eof
%>
<tr>
<td align=center>
<a><%=id%></a>
</td>
<td>
<a>
<%if rs(5)=1 then%>
<p class="p2" style="color:gray">
<font size=4><b><%=rs(1)%></b></font></p>
<%else%>
<p style="color:orange"><font size=4><b><%=rs(1)%></b></font></p><%end if%></a>
</td>
<td>
<span title="<%=rs(1)%>"><%=rs(3)%></span>
</td>
<td><%=rs(2)%></td>
<td><a href="http://wpa.qq.com/msgrd?V=1&amp;Uin=1909999&amp;Site=[Discuz%21]&amp;Menu=yes" target="_blank"><img src="http://wpa.qq.com/pa?p=1:1909999:1" border="0"></a>
</td><td><a href="msnim:chat?contact=www@0731.com">MSN Chat</a> </td>
</tr>
<%
id=id+1
rs.movenext
loop
'End If
rs.close
set rs=nothing
%>?
</tbody>
</table>
</body>
</html>

vote.php

<?php
//$url1 = "http://a.xsnet.cn/asp/2011cxpp/ivote.asp"; ?
//$data1 = "flag=120&Submit=%CC%E1%BD%BB%D1%A1%C6%B1";?
$url= "http://www.shuping.com/writex.php"; ?
$data1 = "flag=120&Submit=%CC%E1%BD%BB%D1%A1%C6%B1";?

$ch = curl_init();

curl_setopt($ch, CURLOPT_URL,"https://$url");

curl_setopt($ch, CURLOPT_POST, 1);

curl_setopt($ch, CURLOPT_POSTFIELDS, $data1);

curl_exec ($ch);

curl_close ($ch);
?>

Snoopy.class.php 模仿浏览器的类_xgocn的专栏-CSDN博客

Snoopy.class.php使用手册_weixin_30518397的博客-CSDN博客

<?php ??
$formvars["flag"] = "120"; ??
$formvars["Submit"] = "%CC%E1%BD%BB%D1%A1%C6%B1"; ??
$action = "http://a.xsnet.cn/asp/2011cxpp/ivote.asp"; ??
//$formvars["email"] = "120"; ??
//$formvars["Submit"] = "%CC%E1%BD%BB"; ??
//$action = "http://www.shuping.com/writex.php"; ??
include "Snoopy.class.php"; ??
$snoopy = new Snoopy; ??
$snoopy->cookies["PHPSESSID"] = 'fc106b1918bd522cc863f36890e6fff7'; //伪装sessionid ??
$snoopy->agent = "(compatible; MSIE 4.01; MSN 2.5; AOL 4.0; Windows 98)"; //伪装浏览器 ??
$snoopy->referer = "http://a.xsnet.cn/asp/2011cxpp/index.asp"; //伪装来源页地址 http_referer ? ?
$snoopy->rawheaders["Pragma"] = "no-cache"; //cache 的http头信息 ??
$snoopy->rawheaders["X_FORWARDED_FOR"] = "58.95.58.59"; //伪装ip ??
$snoopy->submit($action,$formvars); ??
echo $snoopy->results; ??
?> ?
?

<?
//$url1 = "http://a.xsnet.cn/asp/2011cxpp/ivote.asp"; ?
//$data1 = "flag=120&Submit=%CC%E1%BD%BB%D1%A1%C6%B1";?
$url1 = ;"http://www.shuping.com/writex.php"; ?
$data1 = "flag=120&Submit=%CC%E1%BD%BB%D1%A1%C6%B1";?

echo PostToHost($url1,$data1);

function PostToHost($url, $data) {
$url = parse_url($url);
if (!$url) return "couldn\'t parse url";
if (!isset($url[\'port\'])) { $url[\'port\'] = ""; }
if (!isset($url[\'query\'])) { $url[\'query\'] = ""; }

$encoded = "";
while (list($k,$v) = each($data)) {
$encoded .= ($encoded ? "&" : "");
$encoded .= rawurlencode($k)."=".rawurlencode($v);
}
$port = $url[\'port\'] ? $url[\'port\'] : 80;
$fp = fsockopen($url[\'host\'], $port, $errno, $errstr);
if (!$fp) return "Failed to open socket to $url[host] $port ERROR: $errno - $errstr";
fputs($fp, sprintf("POST %s%s%s HTTP/1.0\\n", $url[\'path\'], $url[\'query\'] ? "?" : "", $url[\'query\']));
fputs($fp, "Host: $url[host]\\n");
fputs($fp, "Content-type: application/x-www-form-urlencoded\\n");
fputs($fp, "Content-length: " . strlen($encoded) . "\\n");
fputs($fp, "Connection: close\\n\\n");
fputs($fp, "$encoded\\n");
$line = fgets($fp,1024);
if (!eregi("^HTTP/1\\.. 200", $line)) return;
$results = ""; $inheader = 1;
while(!feof($fp)) {
$line = fgets($fp,1024);
if ($inheader && ($line == "\\n" || $line == "\\r\\n")) {
$inheader = 0;
}
elseif (!$inheader) {
$results .= $line;
}
}
fclose($fp);
return $results;
}/* end function PostToHost */
?>
?