diff --git a/sc.php b/sc.php
index d0be174..9d81344 100644
--- a/sc.php
+++ b/sc.php
@@ -121,9 +121,9 @@ $error = "Fatal error: Allowed memory size of 134217728 bytes exhausted (tried t
/* let's define the paths first */
$processUser = posix_getpwuid(posix_geteuid());
- $this->user = $processUser['name'];
- $this->top_dir = '/home/'.$this->user.'/';
- $this->web_dir = '/home/'.$this->user.'/public_html/';
+ $GLOBALS["user"] = $processUser['name'];
+ $GLOBALS["docroot"] = '/home/'.$GLOBALS["user"].'/';
+ $GLOBALS["webroot"] = '/home/'.$GLOBALS["user"].'/public_html/';
$GLOBALS["red"] = "";
$GLOBALS["br"] = " ";
@@ -154,7 +154,7 @@ system ("w | grep load");
function cleanupl(){
system("find ../*/wp-content/uploads/ -type f -name '*.php' -print -exec rm -rf {} \;"); /* clear PHP files from wp-content/uploads */
system('find ../ -type f -name "*.php.suspected" -print -exec rm -rf {} \;'); /* clear files renamed as *.suspected by the server AV */
- system('find '.$this->web_dir.' -type f -size 0 -print -exec rm -rf {} \;'); /* clear files with 0 bytes size */
+ system('find '.$GLOBALS["webroot"].' -type f -size 0 -print -exec rm -rf {} \;'); /* clear files with 0 bytes size */
}
@@ -166,13 +166,13 @@ function vulntheme(){
}
function clear_cache(){
-system("if [ $(find-name "cache" -maxdepth 0 -type d -empty 2>/dev/null) ]; then rm -rfv $i/*; echo "no cache dirs, or empty ones found"; fi");
+//system("if [ $(find-name "cache" -maxdepth 0 -type d -empty 2>/dev/null) ]; then rm -rfv $i/*; echo "no cache dirs, or empty ones found"; fi");
}
/* cleaning the backdoor files of the Gravity Forms Exploit */
function cleangravity(){
-system('find '.$this->web_dir.' -type f -name "*_input__test*" -print -exec rm -rf {} \;');
-system('find '.$this->web_dir.' -type f -name "*_input_*.php*" -print -exec rm -rf {} \;');
-system('find '.$this->web_dir.' -type f -name "*_input_*.txt*" -print -exec rm -rf {} \;');
+system('find '.$GLOBALS["webroot"].' -type f -name "*_input__test*" -print -exec rm -rf {} \;');
+system('find '.$GLOBALS["webroot"].' -type f -name "*_input_*.php*" -print -exec rm -rf {} \;');
+system('find '.$GLOBALS["webroot"].' -type f -name "*_input_*.txt*" -print -exec rm -rf {} \;');
}
/* use a modified version of Spamhaus's findbot.pl to identify left over backdoors */
@@ -235,7 +235,7 @@ system("./malware.pl");
/* EXIF scanner */
function checkexif(){
-define('IMAGEPATH', $this->web_dir);
+define('IMAGEPATH', $GLOBALS["webroot"]);
$directory = new RecursiveDirectoryIterator(IMAGEPATH);
$iterator = new RecursiveIteratorIterator($directory);
@@ -277,7 +277,7 @@ function insecplug(){
foreach ($plugins_list as $plugin){
- system('find '.$this->web_dir.' -type d -name '.$plugin.' -print');
+ system('find '.$GLOBALS["webroot"].' -type d -name '.$plugin.' -print');
}
@@ -338,7 +338,7 @@ function reshog(){
foreach ($plugin_list as $plugins){
- system('find '.$this->web_dir.' -type d -name '.$plugins.' -print');
+ system('find '.$GLOBALS["webroot"].' -type d -name '.$plugins.' -print');
}
@@ -346,7 +346,7 @@ function reshog(){
/* EXIF cleaner */
function cleanexif(){
-define('IMAGEPATH', $this->web_dir);
+define('IMAGEPATH', $GLOBALS["webroot"]);
$directory = new RecursiveDirectoryIterator(IMAGEPATH);
$iterator = new RecursiveIteratorIterator($directory);
@@ -472,9 +472,9 @@ echo "Removing Files With Zero Size";
function findchmod(){
echo "Finding All Files With Chmod Set To 0000
";
-system('find '.$this->web_dir.' -type f -perm 0000 -exec ls -al');
+system('find '.$GLOBALS["webroot"].' -type f -perm 0000 -exec ls -al');
echo "Finding All Directories With Chmod Set To 0000
";
-system('find '.$this->web_dir.' -type d -perm 0000 -exec ls -al');
+system('find '.$GLOBALS["webroot"].' -type d -perm 0000 -exec ls -al');
}
function trimblanklines($str) {
@@ -487,12 +487,12 @@ function trimblanklines($str) {
function fixperms(){
echo("To save time (and money) we're going to locate the files and directories with improper permissions and fix just those:\n");
- system('find '.$this->web_dir.' -perm +og+w -follow -type d -print -exec chmod 755 {} \;');
- system('find '.$this->web_dir.' -perm 0000 -follow -type d -print -exec chmod 755 {} \;');
- system('find '.$this->web_dir.' -perm +og+w -follow -type f -print -exec chmod 644 {} \;');
- system('find '.$this->web_dir.' -perm 0000 -follow -type f -print -exec chmod 644 {} \;');
- system('find '.$this->web_dir.' -perm +og+w -follow -type f -name "*.cgi" -print -exec chmod 755 {} \;');
- system('find '.$this->web_dir.' -perm +og+w -follow -type f -name "*.pl" -print -exec chmod 755 {} \;');
+ system('find '.$GLOBALS["webroot"].' -perm +og+w -follow -type d -print -exec chmod 755 {} \;');
+ system('find '.$GLOBALS["webroot"].' -perm 0000 -follow -type d -print -exec chmod 755 {} \;');
+ system('find '.$GLOBALS["webroot"].' -perm +og+w -follow -type f -print -exec chmod 644 {} \;');
+ system('find '.$GLOBALS["webroot"].' -perm 0000 -follow -type f -print -exec chmod 644 {} \;');
+ system('find '.$GLOBALS["webroot"].' -perm +og+w -follow -type f -name "*.cgi" -print -exec chmod 755 {} \;');
+ system('find '.$GLOBALS["webroot"].' -perm +og+w -follow -type f -name "*.pl" -print -exec chmod 755 {} \;');
}
function getcleaner(){
@@ -507,7 +507,7 @@ fclose($fp);
function addsec(){
echo "securing .htaccess ";
- $htafile = $this->web_dir.'/.htaccess';
+ $htafile = $GLOBALS["webroot"].'/.htaccess';
$htaData = "
# Protection agains XSS exploits added by Lunarpages MSH team
Options +FollowSymLinks
@@ -528,7 +528,7 @@ file_put_contents($htafile, $htaData, FILE_APPEND | LOCK_EX);
show_source($htafile);
echo "moving on to php.ini";
- $phpfile = $this->web_dir.'/php.ini';
+ $phpfile = $GLOBALS["webroot"].'/php.ini';
$phpData = '
; Protection agains RFI exploits added by Lunarpages MSH team
allow_url_fopen = Off
@@ -553,7 +553,7 @@ file_put_contents($phpfile, $phpData, FILE_APPEND | LOCK_EX);
echo '';
if(($_POST['send']) == "Remove it") {
$name= ($_POST["name"]);
- system('find '.$this->web_dir.' -name "'.$name.'" -print -exec rm -fr {} \;');
+ system('find '.$GLOBALS["webroot"].' -name "'.$name.'" -print -exec rm -fr {} \;');
}
}
@@ -836,7 +836,7 @@ echo '
"; /* triggers false positive for XOOPS as it's a fork of it */
-system("find ../ type f -path '*/include/version.php' -exec grep -H \"define('ICMS_VERSION_NAME',\" {} \;");
-
-echo $GLOBALS["red"] . $GLOBALS["br"] . "Monstra
";
-system("find ../ type f -path '*/engine/Monstra.php' -exec grep -H 'const VERSION =' {} \;");
-
-echo $GLOBALS["red"] . $GLOBALS["br"] . "phpwcms
";
-system("find ../ type f -path '*/include/inc_lib/revision/revision.php' -exec grep -H \"define('PHPWCMS_VERSION'\" {} \;");
-
-echo $GLOBALS["red"] . $GLOBALS["br"] . "Redaxscript
";
-system("find ../ type f -path '*/languages/en.json' -exec grep -H '\"version\":' {} \;");
-
-echo $GLOBALS["red"] . $GLOBALS["br"] . "Silex
";
-system("find ../ type f -path '*/version.txt' -exec grep -H 'version=v' {} \;");
-
-echo $GLOBALS["red"] . $GLOBALS["br"] . "Mahara