5c5 < // December, 2014 --- > // November, 2014 7,24d6 < $isxml = false; < $fb = ""; < $getacont = ""; < $postacont = ""; < if (isset($_POST['fil'])) { < if ($_POST['fil'] != "") $fb = " ... file=" . $_POST['fil']; < if (strpos($_POST['fil'] . "?", ".xml?") !== false) $isxml = true; < } else if (isset($_GET['fil'])) { < if ($_GET['fil'] != "") $fb = " ... file=" . $_GET['fil']; < if (strpos($_GET['fil'] . "?", ".xml?") !== false) $isxml = true; < } < if (isset($_POST['url'])) { < if (strpos($_POST['url'] . "?", ".xml?") !== false) $isxml = true; < if ($isxml && $_POST['url'] != "") $fb = " ... file=" . $_POST['url']; < } else if (isset($_GET['url'])) { < if (strpos($_GET['url'] . "?", ".xml?") !== false) $isxml = true; < if ($isxml && $_GET['url'] != "") $fb = " ... file=" . $_GET['url']; < } 26,27d7 < $acont = ""; < $cont = ""; 34c14 < $onload = " onload='doonload();' "; --- > $onload = ""; 41,70d20 < if (strpos(strtolower("*" . $url), "*http:") === false && strpos(strtolower("*" . $url), "*https:") === false && strlen($url) > 0) { < if (strpos(strtolower("*" . $url), "*file:") !== false) { < $url = str_replace("file:", "", str_replace("file://", "", $url)); < if (substr($url,0,3) == "../" && strpos(strtolower($_SERVER['SERVER_NAME']), "rjmprogramming.com.au") !== false) { < $jsspec = str_replace("/../", "/", (str_replace("*../", str_replace("//", "/", str_replace("/PHP/", "/", str_replace("/PHP//", "/", str_replace("putElementsBy.php", "", "http://" . $_SERVER['SERVER_NAME'] . ":" . $_SERVER['SERVER_PORT'] . str_replace("?" . $_SERVER['QUERY_STRING'], "", $_SERVER['REQUEST_URI']))))), "*" . $url))); < $url = str_replace("/../", "/", (str_replace("*../", str_replace("//", "/", str_replace("/PHP/", "/", str_replace("/PHP//", "/", (dirname(__FILE__) . "/")))), "*" . $isspec[$ki]))); < } else if (substr($url,0,2) == "./" && strpos(strtolower($_SERVER['SERVER_NAME']), "rjmprogramming.com.au") !== false) { < $jsspec = str_replace("/../", "/", (str_replace("*./", str_replace("//", "/", str_replace("/PHjunkP/", "/", str_replace("/PHjunkP//", "/", str_replace("putElementsBy.php", "", "http://" . $_SERVER['SERVER_NAME'] . ":" . $_SERVER['SERVER_PORT'] . str_replace("?" . $_SERVER['QUERY_STRING'], "", $_SERVER['REQUEST_URI']))))), "*" . $url))); < $url = str_replace("/../", "/", (str_replace("*./", str_replace("//", "/", str_replace("/PHjunkP/", "/", str_replace("/PHjunkP//", "/", (dirname(__FILE__) . "/")))), "*" . $isspec[$ki]))); < } < $fb = " ... file=" . $_GET['url']; < if (strpos($_GET['url'] . "?", ".xml?") !== false) $isxml = true; < $acont = file_get_contents($url); < $cont = str_replace(" = ", "=", $acont); < } else if (file_exists($url)) { < $fb = " ... file=" . $_GET['url']; < if (strpos($_GET['url'] . "?", ".xml?") !== false) $isxml = true; < $acont = file_get_contents($url); < $cont = str_replace(" = ", "=", $acont); < } else { < $acont = $url; //str_replace("\\" . '"', '"', $url); < if ($getacont != "") { < $getacont = $url; < } else { < $postacont = $url; < } < $cont = str_replace(" = ", "=", $acont); < $url = ""; < } < } 73,108d22 < if (strpos(strtolower("*" . $url), "*http:") === false && strpos(strtolower("*" . $url), "*https:") === false && strlen($url) > 0) { < if (strpos(strtolower("*" . $url), "*file:") !== false) { < $url = str_replace("file:", "", str_replace("file://", "", $url)); < if (substr($url,0,3) == "../" && strpos(strtolower($_SERVER['SERVER_NAME']), "rjmprogramming.com.au") !== false) { < $jsspec = str_replace("/../", "/", (str_replace("*../", str_replace("//", "/", str_replace("/PHP/", "/", str_replace("/PHP//", "/", str_replace("putElementsBy.php", "", "http://" . $_SERVER['SERVER_NAME'] . ":" . $_SERVER['SERVER_PORT'] . str_replace("?" . $_SERVER['QUERY_STRING'], "", $_SERVER['REQUEST_URI']))))), "*" . $url))); < $url = str_replace("/../", "/", (str_replace("*../", str_replace("//", "/", str_replace("/PHP/", "/", str_replace("/PHP//", "/", (dirname(__FILE__) . "/")))), "*" . $isspec[$ki]))); < } else if (substr($url,0,2) == "./" && strpos(strtolower($_SERVER['SERVER_NAME']), "rjmprogramming.com.au") !== false) { < $jsspec = str_replace("/../", "/", (str_replace("*./", str_replace("//", "/", str_replace("/PHjunkP/", "/", str_replace("/PHjunkP//", "/", str_replace("putElementsBy.php", "", "http://" . $_SERVER['SERVER_NAME'] . ":" . $_SERVER['SERVER_PORT'] . str_replace("?" . $_SERVER['QUERY_STRING'], "", $_SERVER['REQUEST_URI']))))), "*" . $url))); < $url = str_replace("/../", "/", (str_replace("*./", str_replace("//", "/", str_replace("/PHjunkP/", "/", str_replace("/PHjunkP//", "/", (dirname(__FILE__) . "/")))), "*" . $isspec[$ki]))); < } < $fb = " ... file=" . $_POST['url']; < if (strpos($_POST['url'] . "?", ".xml?") !== false) $isxml = true; < $acont = file_get_contents($url); < $cont = str_replace(" = ", "=", $acont); < } else if (file_exists($url)) { < $fb = " ... file=" . $_POST['url']; < if (strpos($_POST['url'] . "?", ".xml?") !== false) $isxml = true; < $acont = file_get_contents($url); < $cont = str_replace(" = ", "=", $acont); < } else { < $acont = $url; //str_replace("\\" . '"', '"', $url); < if ($getacont != "") { < $getacont = $url; < } else { < $postacont = $url; < } < $cont = str_replace(" = ", "=", $acont); < //echo $cont; < $url = ""; < } < } < } < if (strpos(strtolower($url) . "?", ".xml?") !== false) { < $isxml = true; < $firsttag = "body"; < $bextras = "