XyliBox с очередной лже уязвимостью spy eye 1.3.XX

Finally done, a php page for download SpyEye binaries from the database and add an user if needed.
all you have to do is to fill the good maincp db infos.


PHP:
?php
// Xyl2k :þ
// Thanks to EsSandre for the additional help.

$MySQLI = array();

/* MySQLI ID */

$MySQLI[HOST] = localhost;
$MySQLI[USER] = root;
$MySQLI[PASS] = toor;
$MySQLI[DB] = maincp;

function str_error($error)
{
print p style="color:red;">.htmlentities($error)./p>;
}

function download_binary($path_file, $buf)
{
header("Pragma: public");
header("Expires: 0");
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
header("Cache-Control: private", false);
header("Content-Type: application/octet-stream");
header("Content-Disposition: attachment; filename="".basename($path_file)."";" );

header("Content-Transfer-Encoding: binary");
header("Content-Length: ".strlen($buf));

echo $buf;
}

$mysqli = new mysqli($MySQLI[HOST], $MySQLI[USER], $MySQLI[PASS], $MySQLI[DB]);

if (isset($_POST[register_submit]))
{
unset($_GET[id]);
if (isset($_POST[user]) && !is_array($_POST[user]) && !empty($_POST[user]))
{
if (isset($_POST[password]) && !is_array($_POST[password]) && !empty($_POST[password]))
{
if (trim($_POST[user]) == || trim($_POST[password]) == )
str_error(An error has occurred);
else
&nbsp

Вообще-то это скрипт для добавления юзера в админку и скачки бинарей.