Hi again - thanks yfor your help
I have taken off permissions for my blog for now, seems to have stopped another attach. The full code is below - I have removed my website address and that of my host to keep things a little secret. This file was in my root folder along with one that says preview which has some other code in it
Thanks again for your help
<?php ob_start() ?>
<?php
if ($_GET['randomId'] != "vwFfdMVa5fUKTWf96HuH6NLZEGde1SN6bbQrMM2hakT8ySdAgVVyna5SY0attYvaGkRHW80JIKCFDzRKM_xATpOpo4cSdaNuEOYKZrMSXmqQf8wvRLUQ2VR82DcaiEPyZ2mH0XXrgOhRN9pyJejtTAsPN9RKM0QoC4VkJX9rNnGrUyYkMSsA_LyKoFQcByrjxmK3_2KMO5uoEORRgSZWGMymQQgcilQPI_NlUf19GdIW456w1YGudi2KEnpJpKKc") {
echo "Access Denied";
exit();
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Editing index.htm</title>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<style type="text/css">body {background-color:threedface; border: 0px 0px; padding: 0px 0px; margin: 0px 0px}</style>
</head>
<body>
<div align="center">
<div id="saveform" style="display:none;">
<form METHOD="POST" name=mform action="http://69..8.218:2082/frontend/sg/filemanager/savehtmlfile.html">
<input type="hidden" name="charset" value="ISO-8859-1">
<input type="hidden" name="baseurl" value="http://www.meco.co.uk/public_html/">
<input type="hidden" name="basedir" value="/home/mc1/public_html/">
<input type="hidden" name="udir" value="/home/mc1/public_html">
<input type="hidden" name="ufile" value="index.htm">
<input type="hidden" name="dir" value="%2fhome%2fmc1%2fpublic_html">
<input type="hidden" name="file" value="index.htm">
<input type="hidden" name="doubledecode" value="1">
<textarea name=page rows=1 cols=1></textarea></form>
</div>
<div id="abortform" style="display:none;">
<form METHOD="POST" name="abortform" action="http://69.1
.8.218:2082/frontend/sg/filemanager/aborthtmlfile.html">
<input type="hidden" name="charset" value="ISO-8859-1">
<input type="hidden" name="baseurl" value="http://www.meco.co.uk/public_html/">
<input type="hidden" name="basedir" value="/home/mc1/public_html/">
<input type="hidden" name="dir" value="%2fhome%2fmc1%2fpublic_html">
<input type="hidden" name="file" value="index.htm">
<input type="hidden" name="udir" value="/home/mc1/public_html">
<input type="hidden" name="ufile" value="index.htm">
</form>
</div>
<script language="javascript">
<!--//
function setHtmlFilters(editor) {
// Design view filter
editor.addHTMLFilter('design', function (editor, html) {
return html.replace(/\<meta\s+http\-equiv\="Content\-Type"[^\>]+\>/gi, '<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />');
});
// Source view filter
editor.addHTMLFilter('source', function (editor, html) {
return html.replace(/\<meta\s+http\-equiv\="Content\-Type"[^\>]+\>/gi, '<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />');
});
}
// this function updates the code in the textarea and then closes this window
function do_save() {
document.mform.page.value = WPro.editors[0].getValue();
document.mform.submit();
}
function do_abort() {
document.abortform.submit();
}
//-->
</script>
<?php
// make sure these includes point correctly:
include_once ('/usr/local/cpanel/base/3rdparty/wysiwygPro/wysiwygPro.class.php');
// create a new instance of the wysiwygPro class:
$editor = new wysiwygPro();
$editor->registerButton('save', 'Save',
'do_save();', '##buttonURL##save.gif', 22, 22,
'savehandler');
$editor->addRegisteredButton('save', 'before:print' );
$editor->addJSButtonStateHandler ('savehandler', 'function (EDITOR,srcElement,cid,inTable,inA,range){
return "wproReady";
}');
$editor->registerButton('cancel', 'Cancel',
'do_abort();', '##buttonURL##close.gif', 22, 22,
'cancelhandler');
$editor->addRegisteredButton('cancel', 'before:print' );
$editor->addJSButtonStateHandler ('cancelhandler', 'function (EDITOR,srcElement,cid,inTable,inA,range){
return "wproReady";
}');
$editor->theme = 'blue';
$editor->addJSEditorEvent('load', 'function(editor){editor.fullWindow();setHtmlFilters(editor);}');
$editor->baseURL = "http://www.meco.co.uk/public_html/";
$editor->loadValueFromFile('/home/mc1/public_html/index.htm');
$editor->registerSeparator('savecan');
// add a spacer:
$editor->addRegisteredButton('savecan', 'after:cancel');
//$editor->set_charset('iso-8859-1');
$editor->mediaDir = '/home/mc1/public_html/';
$editor->mediaURL = 'http://www.meco.co.uk/';
$editor->imageDir = '/home/mc1/public_html/';
$editor->imageURL = 'http://www.meco.co.uk/';
$editor->documentDir = '/home/mc1/public_html/';
$editor->documentURL = 'http://www.meco.co.uk/';
$editor->emoticonDir = '/home/mc1/public_html/.smileys/';
$editor->emoticonURL = 'http://www.meco.co.uk/.smileys/';
$editor->loadPlugin('serverPreview');
$editor->plugins['serverPreview']->URL = 'http://www.meco.co.uk/public_html/.wysiwygPro_preview_fd491768bbe8b2f208d6e5d82758228a.php?randomId=vwFfdMVa5fUKTWf96HuH6NLZEGde1SN6bbQrMM2hakT8ySdAgVVyna5SY0attYvaGkRHW80JIKCFDzRKM_xATpOpo4cSdaNuEOYKZrMSXmqQf8wvRLUQ2VR82DcaiEPyZ2mH0XXrgOhRN9pyJejtTAsPN9RKM0QoC4VkJX9rNnGrUyYkMSsA_LyKoFQcByrjxmK3_2KMO5uoEORRgSZWGMymQQgcilQPI_NlUf19GdIW456w1YGudi2KEnpJpKKc';
// print the editor to the browser:
$editor->htmlCharset = 'ISO-8859-1';
$editor->urlFormat = 'relative';
$editor->display('100%','450');
?>
</div>
<script>
</script>
</body>
</html>
<?php ob_end_flush() ?>
merrywema
