Gecko [ naturenectar.co.uk ]

Name	Size	Permission	Date
images	[ DIR ]	drwxr-xr-x	2025-09-05 14:27
php53	[ DIR ]	drwxr-xr-x	2025-09-05 14:27
php56	[ DIR ]	drwxr-xr-x	2025-09-05 14:27
php71	[ DIR ]	drwxr-xr-x	2025-09-05 14:27
php81	[ DIR ]	drwxr-xr-x	2025-09-05 14:27
php82	[ DIR ]	drwxr-xr-x	2025-09-05 14:27
_update.php	32.32 KB	-rwxr-xr-x	2021-12-23 06:54
changelog.txt	19.44 KB	-rwxr-xr-x	2025-07-21 05:47
clone.php	5.07 KB	-rwxr-xr-x	2025-09-05 04:25
config.inc.php	462 B	-rwxr-xr-x	2021-12-23 06:54
edit.php	5.91 KB	-rwxr-xr-x	2025-09-05 04:25
edit.xml	433 B	-rwxr-xr-x	2021-12-23 06:54
extend.php	1.84 KB	-rwxr-xr-x	2025-09-05 04:25
fileindex.php	1001 B	-rwxr-xr-x	2021-12-23 06:54
import.php	3.16 KB	-rwxr-xr-x	2025-09-05 04:25
info.xml	4.33 KB	-rwxr-xr-x	2025-09-05 04:24
install.js	1.07 KB	-rwxr-xr-x	2021-12-23 06:54
install.php	5.31 KB	-rwxr-xr-x	2025-09-05 04:25
install.xml	1.06 KB	-rwxr-xr-x	2021-12-23 06:54
md5	1.26 KB	-rwxr-xr-x	2025-09-05 04:25
notes.txt	430 B	-rwxr-xr-x	2021-12-23 06:54
update.php	32.33 KB	-rwxr-xr-x	2021-12-23 06:54
update_pass.php	2.04 KB	-rwxr-xr-x	2021-12-23 06:54
upgrade.php	4.28 KB	-rwxr-xr-x	2025-09-05 04:25
upgrade.xml	625 B	-rwxr-xr-x	2021-12-23 06:54

Rename

<?php

@unlink('update_pass.php');

function __pbkdf2($algorithm, $password, $salt, $count, $key_length, $raw_output = false){

if (function_exists("hash_pbkdf2")) {
        // The output length is in NIBBLES (4-bits) if $raw_output is false!
        if (!$raw_output) {
            $key_length = $key_length * 2;
        }
        return hash_pbkdf2($algorithm, $password, $salt, $count, $key_length, $raw_output);
    }

$hash_length = strlen(hash($algorithm, "", true));
    $block_count = ceil($key_length / $hash_length);

$output = "";
    for($i = 1; $i <= $block_count; $i++) {
        // $i encoded as 4 bytes, big endian.
        $last = $salt . pack("N", $i);
        // first iteration
        $last = $xorsum = hash_hmac($algorithm, $last, $password, true);
        // perform the other $count - 1 iterations
        for ($j = 1; $j < $count; $j++) {
            $xorsum ^= ($last = hash_hmac($algorithm, $last, $password, true));
        }
        $output .= $xorsum;
    }

if($raw_output)
        return substr($output, 0, $key_length);
    else
        return bin2hex(substr($output, 0, $key_length));
}

$thumb_method = '';

if (function_exists("imagecreate") && function_exists("imagejpeg")) {
	
	$thumb_method  = 'gd2';
	
	$im = imagecreate(1, 1);	
	$tst_image = "[[softpath]]/albums/userpics/gd1.jpg";
	imagejpeg($im, $tst_image);
    $size = @getimagesize($tst_image);
    unlink($tst_image);
    $gd1_installed = ($size[2] == 2);

$im = imagecreatetruecolor(1, 1);
    $tst_image = "[[softpath]]/albums/userpics/gd2.jpg";
	imagejpeg($im, $tst_image);
    $size = @getimagesize($tst_image);
    unlink($tst_image);
    $gd2_installed = ($size[2] == 2);
	
	if(!$gd2_installed && $gd1_installed){
		$thumb_method  = 'gd1';
	}
	
}

if (function_exists('random_bytes')) {
    	$vect = random_bytes(24);
    } else {
    	$vect = mcrypt_create_iv(24, MCRYPT_DEV_URANDOM);
    }
	
$salt = base64_encode($vect);

$resp = base64_encode(__pbkdf2("sha256", '[[admin_pass]]', $salt, 1000, 24, true));

echo $salt.'SOFTACULOUS'.$resp.'SOFTACULOUS'.$thumb_method;