Gecko [ thehappyfactory.eu ]

Name	Size	Permission
_vti_cnf	[ DIR ]	drwxr-xr-x
wp-admin	[ DIR ]	drwxr-xr-x
wp-content	[ DIR ]	drwx---r-x
wp-includes	[ DIR ]	drwxr-xr-x
.htaccess	29 B	-rwxr--r--
.mad-root	0 B	-rw-r--r--
2index.php	3.78 KB	-rw----r--
AAA-zouerate_com_3	0 B	-rw-r--r--
_index.php	397 B	-rwxr--r--
adminer.php	0 B	-rw-r--r--
favicon.ico	533 B	-rwxr--r--
index.php	60 B	-rwxr--r--
license.txt	15.05 KB	-rwxr--r--
pwnkit	10.99 KB	-rwxr-xr-x
radio.php	3.78 KB	-rw----r--
radio.txt	40 B	-rw----r--
readme.html	389 B	-r--r--r--
style.css	6.25 KB	-rwxr--r--
wp-app.php	33.27 KB	-rwxr--r--
wp-atom.php	555 B	-rwxr--r--
wp-blog-header.php	274 B	-rwxr--r--
wp-comments-post.php	3.02 KB	-rwxr--r--
wp-commentsrss2.php	625 B	-rwxr--r--
wp-config-sample.php	1.53 KB	-rwxr--r--
wp-config.php	1.52 KB	-rw-------
wp-cron.php	1.23 KB	-rwxr--r--
wp-feed.php	661 B	-rwxr--r--
wp-links-opml.php	1.94 KB	-rwxr--r--
wp-load.php	1.9 KB	-rwxr--r--
wp-login.php	18.9 KB	-rwxr--r--
wp-mail.php	6.25 KB	-rwxr--r--
wp-pass.php	487 B	-rwxr--r--
wp-rdf.php	473 B	-rwxr--r--
wp-register.php	316 B	-rwxr--r--
wp-rss.php	484 B	-rwxr--r--
wp-rss2.php	555 B	-rwxr--r--
wp-settings.php	16.77 KB	-rwxr--r--
wp-trackback.php	3.35 KB	-rwxr--r--
xmlrpc.php	73.64 KB	-rwxr--r--

Code Editor : wp-mail.php

<?php
/**
 * Gets the email message from the user's mailbox to add as
 * a WordPress post. Will only run if this is setup and enabled.
 *
 * @package WordPress
 */

/** Make sure that the WordPress bootstrap has ran before continuing. */
require(dirname(__FILE__) . '/wp-load.php');

/** Get the POP3 class for which to access the mailbox. */
require_once(ABSPATH.WPINC.'/class-pop3.php');

// WTF is this? Use constants instead.
error_reporting(2037);

$time_difference = get_option('gmt_offset') * 3600;

$phone_delim = '::';

$pop3 = new POP3();

if (!$pop3->connect(get_option('mailserver_url'), get_option('mailserver_port')))
	wp_die(wp_specialchars($pop3->ERROR));

if (!$pop3->user(get_option('mailserver_login')))
	wp_die(wp_specialchars($pop3->ERROR));

$count = $pop3->pass(get_option('mailserver_pass'));
if (false === $count)
	wp_die(wp_specialchars($pop3->ERROR));
if (0 == $count)
	echo "There doesn't seem to be any new mail.\n"; // will fall-through to end of for loop

for ($i=1; $i <= $count; $i++) :

$message = $pop3->get($i);

$content = '';
	$content_type = '';
	$content_transfer_encoding = '';
	$boundary = '';
	$bodysignal = 0;
	$post_author = 1;
	$author_found = false;
	$dmonths = array('Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec');
	foreach ($message as $line) :
		if (strlen($line) < 3) $bodysignal = 1;

if ($bodysignal) {
			$content .= $line;
		} else {
			if (preg_match('/Content-Type: /i', $line)) {
				$content_type = trim($line);
				$content_type = substr($content_type, 14, strlen($content_type)-14);
				$content_type = explode(';', $content_type);
				$content_type = $content_type[0];
			}
			if (preg_match('/Content-Transfer-Encoding: /i', $line)) {
				$content_transfer_encoding = trim($line);
				$content_transfer_encoding = substr($content_transfer_encoding, 27, strlen($content_transfer_encoding)-14);
				$content_transfer_encoding = explode(';', $content_transfer_encoding);
				$content_transfer_encoding = $content_transfer_encoding[0];
			}
			if (($content_type == 'multipart/alternative') && (preg_match('/boundary="/', $line)) && ($boundary == '')) {
				$boundary = trim($line);
				$boundary = explode('"', $boundary);
				$boundary = $boundary[1];
			}
			if (preg_match('/Subject: /i', $line)) {
				$subject = trim($line);
				$subject = substr($subject, 9, strlen($subject)-9);
				$subject = wp_iso_descrambler($subject);
				// Captures any text in the subject before $phone_delim as the subject
				$subject = explode($phone_delim, $subject);
				$subject = $subject[0];
			}

// Set the author using the email address (From or Reply-To, the last used)
			// otherwise use the site admin
			if ( preg_match('/(From|Reply-To): /', $line) ) {
				if ( preg_match('|[a-z0-9_.-]+@[a-z0-9_.-]+(?!.*<)|i', $line, $matches) )
					$author = $matches[0];
				else
					$author = trim($line);
				$author = sanitize_email($author);
				if ( is_email($author) ) {
					echo "Author = {$author} ";
					$userdata = get_user_by_email($author);
					if (!$userdata) {
						$post_author = 1;
						$author_found = false;
					} else {
						$post_author = $userdata->ID;
						$author_found = true;
					}
				} else {
					$post_author = 1;
					$author_found = false;
				}
			}

if (preg_match('/Date: /i', $line)) { // of the form '20 Mar 2002 20:32:37'
				$ddate = trim($line);
				$ddate = str_replace('Date: ', '', $ddate);
				if (strpos($ddate, ',')) {
					$ddate = trim(substr($ddate, strpos($ddate, ',')+1, strlen($ddate)));
				}
				$date_arr = explode(' ', $ddate);
				$date_time = explode(':', $date_arr[3]);

$ddate_H = $date_time[0];
				$ddate_i = $date_time[1];
				$ddate_s = $date_time[2];

$ddate_m = $date_arr[1];
				$ddate_d = $date_arr[0];
				$ddate_Y = $date_arr[2];
				for ($j=0; $j<12; $j++) {
					if ($ddate_m == $dmonths[$j]) {
						$ddate_m = $j+1;
					}
				}

$time_zn = intval($date_arr[4]) * 36;
				$ddate_U = gmmktime($ddate_H, $ddate_i, $ddate_s, $ddate_m, $ddate_d, $ddate_Y);
				$ddate_U = $ddate_U - $time_zn;
				$post_date = gmdate('Y-m-d H:i:s', $ddate_U + $time_difference);
				$post_date_gmt = gmdate('Y-m-d H:i:s', $ddate_U);
			}
		}
	endforeach;

// Set $post_status based on $author_found and on author's publish_posts capability
	if ($author_found) {
		$user = new WP_User($post_author);
		if ($user->has_cap('publish_posts'))
			$post_status = 'publish';
		else
			$post_status = 'pending';
	} else {
		// Author not found in DB, set status to pending.  Author already set to admin.
		$post_status = 'pending';
	}

$subject = trim($subject);

if ($content_type == 'multipart/alternative') {
		$content = explode('--'.$boundary, $content);
		$content = $content[2];
		$content = explode('Content-Transfer-Encoding: quoted-printable', $content);
		$content = strip_tags($content[1], '<img> <strike><div>');
	}
	$content = trim($content);

if (stripos($content_transfer_encoding, "quoted-printable") !== false) {
		$content = quoted_printable_decode($content);
	}

// Captures any text in the body after $phone_delim as the body
	$content = explode($phone_delim, $content);
	$content[1] ? $content = $content[1] : $content = $content[0];

$content = trim($content);

$post_content = apply_filters('phone_content', $content);

$post_title = xmlrpc_getposttitle($content);

if ($post_title == '') $post_title = $subject;

if (empty($post_categories)) $post_categories[] = get_option('default_email_category');

$post_category = $post_categories;

$post_data = compact('post_content','post_title','post_date','post_date_gmt','post_author','post_category', 'post_status');
	$post_data = add_magic_quotes($post_data);

$post_ID = wp_insert_post($post_data);
	if ( is_wp_error( $post_ID ) )
		echo "\n" . $post_ID->get_error_message();

if (!$post_ID) {
		// we couldn't post, for whatever reason. better move forward to the next email
		continue;
	}

do_action('publish_phone', $post_ID);

echo "\nAuthor: " . wp_specialchars($post_author) . "";
	echo "\nPosted title: " . wp_specialchars($post_title) . " ";

if(!$pop3->delete($i)) {
		echo 'Oops '.wp_specialchars($pop3->ERROR).'</div>';
		$pop3->reset();
		exit;
	} else {
		echo "Mission complete, message $i deleted.";
	}

endfor;

$pop3->quit();

${this.title}

Code Editor : wp-mail.php