- 1
- 2
if (len(filter(lambda path: path == "../stubs", os.sys.path)) == 0):
os.sys.path.insert(0, '../stubs')
Нашли или выдавили из себя код, который нельзя назвать нормальным, на который без улыбки не взглянешь? Не торопитесь его удалять или рефакторить, — запостите его на говнокод.ру, посмеёмся вместе!
−348.2
if (len(filter(lambda path: path == "../stubs", os.sys.path)) == 0):
os.sys.path.insert(0, '../stubs')
Хитрая провека на то, нет ли уже "../stubs" в sys.path.
+61.5
global $scan, $scan1, $scan2, $pri1, $pri2, $host, $i1, $hits;
global $server1, $server2;
global $item;
global $use_1, $term_1, $trun1, $bop_1;
global $use_2, $term_2, $trun2, $bop_2;
global $use_3, $term_3, $trun3, $bop_3;
global $use_4, $term_4, $trun4, $bop_4;
global $use_5, $term_5, $trun5, $bop_5;
$ver1=ord(substr(phpversion(),0,1))-48;
$ver2=ord(substr(phpversion(),2,1))-48;
$ver=$ver1*10+$ver2;
#echo $ver;
if ($ver>42)extract($_REQUEST);
if ($format == "1.2.840.10003.5.109.10") {
$pri2=1;
$pri1=1;
$pxml=0;
}
if (($scan==tounicode("список"))||($scan1==tounicode("список"))||($scan2==tounicode("список")))
{
if (strlen($term_2)>0)
{
$term_1=$term_2;
$use_1=$use_2;
}
if (strlen($term_3)>0)
{
$term_1=$term_3;
$use_1=$use_3;
}
include("func.php");
$target=$host[0];
$field1="@attr 1=" . $use_1;
$term1=$term_1;
if (strlen($term1)==0)
/* {
echo "<title>z39.50</title><BODY bgcolor=FFFFE6 TEXT=000000 LINK=brown VLINK=brown topmargin=0 leftmargin=0 marginwidth=0 marginheight=0><center><table width=70% border=1 cellpadding=25 cellspacing=0><td valign=top><font face='arial,helvetica' size=6 color=#333333>Шлюз Z39.50</font><hr><font color=brown><p><b>Для просмотра списка введите, пожалуйста, первую букву поискового терма<p><br><a href='javascript:history.back()'><img src=back.gif border=0></A></td></table>";
exit;
} */
{
$term_1='0';
$term1=$term_1;
}
$syntax="RUSMarc";
$element="F";
$number=15;
?>
+139.8
unction int2hex($intega){
$Ziffer = "0123456789ABCDEF";
return $Ziffer[($intega%256)/16].$Ziffer[$intega%16];
}
function url_encode($text){
$text = urlencode($text);
if(!strpos($text,"%C3"))
for($i=129;$i<255;$i++){
$in = "%".int2hex($i);
$out = "%C3%".int2hex($i-64);
$text = str_replace($in,$out,$text);
}
return $text;
}
function tounicode ($string){
$unistring="";
for($i=0;$i<strlen($string);$i++){
$current=$string[$i];
$codcurrent=ord($current);
if($codcurrent>255):
$unicurrent=utf8_encode($current);
$unistring=$unistring.$unicurrent;
elseif($codcurrent<192):
if($codcurrent==184):
$unicurrent=chr(209).chr($codcurrent-39);
$unistring=$unistring.$unicurrent;
elseif($codcurrent==168):
$unicurrent=chr(208).chr($codcurrent-39);
$unistring=$unistring.$unicurrent;
elseif($codcurrent==147):
$unicurrent=utf8_encode("\"");
$unistring=$unistring.$unicurrent;
elseif($codcurrent==148):
$unicurrent=utf8_encode("\"");
$unistring=$unistring.$unicurrent;
elseif($codcurrent==151):
$unicurrent=utf8_encode("-");
$unistring=$unistring.$unicurrent;
else:
$unicurrent=utf8_encode($current);
$unistring=$unistring.$unicurrent;
endif;
else:
if ($codcurrent<240):
$unicurrent=chr(208).chr($codcurrent-48);
$unistring=$unistring.$unicurrent;
else:
$unicurrent=chr(209).chr($codcurrent-112);
$unistring=$unistring.$unicurrent;
endif;
endif;
}
return $unistring;
}
+153
<?
ob_start();
session_start();
include("includes/applicationTop.php");
?>
<?
if($_SESSION["CONTACT_ID"]=="" || $_SESSION["CONTACT_ID"]==0)
{
$contact_id=$_GET['contact_id'];
}
else
{
$contact_id = $_SESSION["CONTACT_ID"];
}
if($_SESSION["ORDER_ID"]=="" || $_SESSION["ORDER_ID"]==0)
{
$order_id=$_GET['order_id'];
}
else
{
$order_id = $_SESSION["ORDER_ID"];
}
$selBillingInfo = "SELECT * FROM `contact` WHERE `contact_id`='".$contact_id."'";
$resBillingInfo = $db->select_data($selBillingInfo);
$selOrderInfo = "SELECT * FROM `order` WHERE `order_id`='".$order_id."'";
$resOrderInfo = $db->select_data($selOrderInfo);
?>
<? $exesql=mysql_query("select * from admin_updation where id = 1");
$rs=mysql_fetch_object($exesql); $to_mail=$rs->paypal_id;?>
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td width="30"><img src="images/spacer.gif" width="30" height="1" /></td>
<td><form class="formclass" method="post" action="https://www.paypal.com/cgi-bin/webscr" id="myform" name="theForm" ><!--<form class="formclass" method="post" action="https://www.paypal.com/cgi-bin/webscr" id="myform" name="theForm" >-->
<input name="validate" value="1" type="hidden">
<input type="hidden" name="order_id" value="<?=$order_id?>" />
<?
$paypal[site_url]="http://говносайт";
$paypal[success_url]="/paymentReceipt.php?success=paypal&pt=paypal&contact_id=$contact_id&order_id=$order_id";
$paypal[cancel_url]="/paymentReceipt.php?success=failed&pt=paypal&contact_id=$contact_id&order_id=$order_id";
$paypal[notify_url]="/ipn/ipn.php";
$paypal[return_method]="2"; //1=GET 2=POST
$paypal[currency_code]="USD"; //[USD,GBP,JPY,CAD,EUR]
$paypal[lc]="US";
$paypal[url]="https://www.sandbox.paypal.com/cgi-bin/webscr"; // For Test
$paypal[post_method]="fso"; //fso=fsockopen(); curl=curl command line libCurl=php compiled with libCurl support
$paypal[curl_location]="/usr/local/bin/curl";
$paypal[bn]="toolkit-php";
$paypal[cmd]="_xclick";
$paypal[display_comment]="0"; //0=yes 1=no
$paypal[comment_header]="Comments";
$paypal[continue_button_text]="Continue >>";
$paypal[background_color]="1"; //""=white 1=black
$paypal[display_shipping_address]="1"; //""=yes 1=no
$paypal[display_comment]="1"; //""=yes 1=no
?>
<!--<input type="hidden" name="business" value="[email protected]">--><? // For Live ?>
<input type="hidden" name="business" value="<?=$to_mail?>"><? // For Test ?>
<!--<input type="hidden" name="business" value="[email protected]">--><? // For Test ?>
<input type="hidden" name="item_name" value="Говнобрэнд">
<input type="hidden" name="cmd" value="<?=$paypal[cmd]?>">
<input type="hidden" name="redirect_cmd" value="<?=$paypal[cmd]?>">
<input type="hidden" name="image_url" value="">
<input type="hidden" name="return" value="<? echo "$paypal[site_url]$paypal[success_url]"; ?>">
<input type="hidden" name="cancel_return" value="<? echo "$paypal[site_url]$paypal[cancel_url]"; ?>">
<input type="hidden" name="notify_url" value="<? echo "$paypal[site_url]$paypal[notify_url]"; ?>">
<input type="hidden" name="rm" value="<?=$paypal[return_method]?>">
<input type="hidden" name="currency_code" value="<?=$paypal[currency_code]?>">
<input type="hidden" name="lc" value="<?=$paypal[lc]?>"><input type="hidden" name="bn" value="<?=$paypal[bn]?>">
<input type="hidden" name="cbt" value="<?=$paypal[continue_button_text]?>"><input type="hidden" name="no_shipping" value="<?=$paypal[display_shipping_address]?>">
<input type="hidden" name="no_note" value="<?=$paypal[display_comment]?>">
<input type="hidden" name="order_id" value="<?=$order_id?>"><input type="hidden" name="amount" value="<?=$resOrderInfo[0]['amount']?>">
<input type="hidden" name="first_name" value="<?=$resBillingInfo[0]['first_name']?>"> <input type="hidden" name="last_name" value="<?=$resBillingInfo[0]['last_name']?>">
<input type="hidden" name="company" value="<?=$resBillingInfo[0]['company']?>"><input type="hidden" name="address" value="<?=$resBillingInfo[0]['address']?>">
<input type="hidden" name="city" value="<?=$resBillingInfo[0]['city']?>"><input type="hidden" name="state" value="<?=$resBillingInfo[0]['state']?>">
<input type="hidden" name="zip" value="<?=$resBillingInfo[0]['zip']?>">
<input type="hidden" name="country" value="<?=$resBillingInfo[0]['country']?>">
<input type="hidden" name="phone" value="<?=$resBillingInfo[0]['phone']?>"> <input type="hidden" name="email " value="<?=$resBillingInfo[0]['email']?>"> <input type="hidden" name="a3" value="<?=$resOrderInfo[0]['amount']?>">
<input type="hidden" name="p3" value="1"> <input type="hidden" name="t3" value="M"> <input type="hidden" name="no_note" value="1">
<input type="hidden" name="src" value="1"><input type="hidden" name="sra" value="1">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="text_body"> </td>
</tr>
<tr>
<td align="left"></td>
</tr>
</table>
</form></td>
<td width="15"><img src="images/spacer.gif" width="15" height="1" /></td>
</tr>
</table>
<script language="JavaScript">
objfrm = document.getElementById("myform");
objfrm.submit();
</script>
А вот занятный способ переброса посетителя на paypal.
С помощью невидимой формы, который сама засабмитится (может быть).
Источник тот же, что у #1244-#1245, #1248-#1250
+143.7
if(!isset($err))
{global $err;
$err = array();
}
$f_ID=0;
/* Get autoincreament id before inserting */
$sqlSelctNextMem = "SHOW TABLE STATUS LIKE 'slideshow'";
$resSelctNextMem = mysql_query($sqlSelctNextMem);
$rr = mysql_fetch_array($resSelctNextMem);
$maxRetailId = $rr['Auto_increment'];
/* Get autoincreament id before inserting */
$ssf_arr=array();
for($img=0; $img < $TotalNoOfFile;$img++)
{
if($_FILES['photo']['name'][$img]=="")
{
$t_cnt++;
if($t_cnt==$TotalNoOfFile)
{
$msg_dis.="<br><center><font class=required><img src=images/error.gif border=0>Image uploading failed.</font><center>";
}
}
if($_FILES['photo']['name'][$img]!="")
{
$t=$f_ID+1;
$img_id=$img+1;
$filename = basename($_FILES['photo']['name'][$img]);
$my_firstfile=str_replace(" ","_",$_FILES['photo']['name'][$img]);
//$f_name_file=$_FILES['photo']['name'][$img];
$f_name_file=$my_firstfile;
$extp = substr($f_name_file, strrpos($f_name_file, '.') + 1);
//22_image_small_1,22_image_1,22_image
$filetypecmp=explode("/",$_FILES['photo']['type'][$img]);
$filetype=$filetypecmp[0];
$filetypeextcmp=explode(".",basename($_FILES['photo']['name'][$img]));
$filenamewithoutext=substr($filetypeextcmp[0],0,15);
$filetypeext=end($filetypeextcmp);
$new_filename=$maxRetailId."_image".".gif";
$new_filename_middle=$maxRetailId."_image_".$img_id.".gif";
$new_filename_small=$maxRetailId."_image_small".".gif";
// $_SESSION["ext"][$img]= basename($_FILES['photo']['name'][$img]);
$mediafolder = "tmp/uploads/eflyers/";
//$target_path = "uploads/eflyers/slideshow/".$filename;
// $target_thumbnail_path="uploads/eflyers/slideshow/thumbnails/".$filename;
$target_path_org = $mediafolder."slideshow/".$f_name_file;
$target_path = $mediafolder."slideshow/".$new_filename;
$target_thumbnail_path=$mediafolder."slideshow/".$new_filename_small;
$target_thumbnail_middle_path=$mediafolder."slideshow/".$new_filename_middle;
$result = 0;
$allowedfiletype="gif,jpg,jpeg,png,bmp,JPG,JPEG,PNG,GIF,BMP";
$pos="";
$pos = strpos($allowedfiletype,$filetypeext);
$hw=getimagesize($_FILES['photo']['tmp_name'][$img]);
/* if($hw[0] > 800 || $hw[1] > 600){
$msg.=basename($_FILES['photo']['name'][$img])."-> exceed the limit of 800x600 pixel<br>";
}else*/ if($pos === false)
{
//$msg.=basename($_FILES['photo']['name'][$img])."->Only following jpg,jpeg,pjpeg,png,gif types are allowed<br>";
$msg_dis.=basename($_FILES['photo']['name'][$img])."->Only following jpg,jpeg,png,gif,bmp types are allowed<br>";
//array_push($err,$msg);
}else{
// chmod ($mediafolder, 0777);
$temp_file=$_FILES['photo']['tmp_name'][$img];
if(@move_uploaded_file($temp_file, $target_path))
{
$db->resize_jpg($target_path,$target_path_org,50,40);
$db->resize_jpg($target_path,$target_thumbnail_path,50,40);
$db->resize_jpg($target_path,$target_thumbnail_middle_path,600,400);
//chmod ($mediafolder, 0755);
if( $msg=="")
$result = 1;
//$filesuploaded.=$_FILES['photo']['name'][$img]." Uploaded successfully<br>";
$filesuploaded.=str_replace(" ","_",$_FILES['photo']['name'][$img]).",";
// slideshow_id created slideshow
$creat_time=time();
$sql_media="insert into slideshow(`slideshow_id`,`created`)values('{$maxRetailId}','{$creat_time}')";
$res_media=$db->insert_data($sql_media);
$_SESSION['SS_ID']=$maxRetailId;
$sql_slideframe="insert into slideshow_frame(`frame_id`,`slideshow_id`,`title`,`smallfilename`,`filename`,`order_number`)values('','{$maxRetailId}','{$f_name_file}','{$new_filename_small}','{$new_filename_middle}','{$img_id}')";
$res_slideframe=$db->insert_data($sql_slideframe);
$ssf_in_id=mysql_insert_id();
$_SESSION['SSF_ID']=$ssf_in_id;
array_push($ssf_arr,$ssf_in_id);
$_SESSION['SSF_ID_ARRAY']=$ssf_arr;
}//move
}//else
}
}
$_SESSION['IMG_CNT']=$img_id;
$msg.=$filesuploaded;
sleep(1);
+143.1
if($_POST['schedule_meridian']=='0')
{
$ampm_val="AM";
$shour=$_POST['schedule_hour'];
}
else
if($_POST['schedule_meridian']=='1')
{
$ampm_val="PM";
for($tv=1;$tv<=12;$tv++)
{
if($_POST['schedule_hour']==$tv)
$shour=12+$tv;
}
}
И снова кусок кода из той же золотой жилы, что и #1248.
Хитрый перевод времени в 24х-часовой формат.
$_POST['schedule_meridian'] - 0 или 1, означает AM/PM.
$_POST['schedule_hour'] - час от 1 до 12.
+53.5
/* for Shedular date */
$shd_Date=$db->get_field("`mailer`","datetime","eflyer_id",$eflyerid);
$sh_date=date ("d-m-Y-h-A", $shd_Date);
$sh_dateArr=explode('-',$sh_date);
$sd=trim($sh_dateArr[0]);
if($sd=='01')
$sd=1;
else
if($sd=='02')
$sd=2;
else
if($sd=='03')
$sd=3;
else
if($sd=='04')
$sd=4;
else
if($sd=='05')
$sd=5;
else
if($sd=='06')
$sd=6;
else
if($sd=='07')
$sd=7;
else
if($sd=='08')
$sd=8;
else
if($sd=='09')
$sd=9;
else
$sd=$sd;
$_POST['schedule_day']=$sd;
$sm=trim($sh_dateArr[1]);
if($sm=='01')
$sm=1;
else
if($sm=='02')
$sm=2;
else
if($sm=='03')
$sm=3;
else
if($sm=='04')
$sm=4;
else
if($sm=='05')
$sm=5;
else
if($sm=='06')
$sm=6;
else
if($sm=='07')
$sm=7;
else
if($sm=='08')
$sm=8;
else
if($sm=='09')
$sm=9;
else
$sm=$sm;
$_POST['schedule_month']=$sm;
$_POST['schedule_year']=trim($sh_dateArr[2]);
$_POST['schedule_hour']=trim($sh_dateArr[3]);
$_POST['schedule_meridian']=trim($sh_dateArr[4]);
/* for Shedular date */
И снова индусский (как выяснилось по камментам там и сям) код. Источник тот же, что у #1244 и #1245.
+136.4
if (mysql_num_rows($result) > 0) {
$row=mysql_fetch_array($result);
$strings = ($row[1]) + 1;
$words = $row[2] + (substr_count(trim($parse[count($parse)-6]), ' ') + 1);
$letters = $row[3]+strlen($parse[count($parse)-6]);
$result = mysql_query("UPDATE `stat` SET `strings`='".$strings."', `words`='".$words."', `letters`='".$letters."', `last_say`='".$parse[count($parse)-6]."', `last_say_date`='".date('Y-m-d G:i:s')."' WHERE `id`=".$row['id']) or die(''.mysql_error($link));
} else $result=mysql_query("INSERT into `stat` (`host`, `strings`, `words`, `letters`) VALUES ('".$parse[count($parse)-2]."', '1', '".(substr_count(trim($parse[count($parse)-6]), ' ') + 1)."', '".strlen($parse[count($parse)-6])."')") or die(''.mysql_error($link));
Скрипт обновления статистики
+54.2
<form name='<? echo $tb_names[$i]; ?>' method='post' ENCTYPE='multipart/form-data' action="admin.php?task=del">
<input type=hidden name=login value='<? echo @$_POST['login']; ?>'>
<input type=hidden name=password value='<? echo @$_POST['password']; ?>'>
<input name='tname' type=hidden value='<? echo $tb_names[$i]; ?>'>
<p><input type='submit' value='Удалить прайс'>
</form>
Недавно дали сайт на обновление. Не мог понять почему при обновлении страницы брсает на авторизацию. Вот что я нашел когда начал разбираться, они даже не шифрованные там хранятся.
+140.9
$sqlt="select * from logos where is_delete='0'";
$rest=$db->select_data($sqlt);
$total=count($rest);
Подсчет подходящих записей в таблице.
Источник тот же, что и у говнокода 1244.
В $rest возвращается ассоциативный массив.