<?php
class create
{ # Begin class
// Class vars
var $whmhostname;
var $whmuser;
var $accesshash;
var $usessl;
var $error;
/**
* Function - the beef
***
* newaccount(
* [string] username, [string] password, [string] domain, [string] plan, [string] email
* );
***
* Creates a new cpanel account
*/
function newaccount ($newuser, $newpass, $newdomain, $newplan, $newemail)
{
if (ereg('[^A-Za-z0-9]', $newuser))
{
$this->error = "Invalid username";
return false;
}
if (strlen($newuser) > 8)
{
$this->error = "Username is too long";
return false;
}
$action = "/scripts/wwwacct?remote=1".
"&nohtml=1".
"&username=". $newuser . "".
"&password=". $newpass ."".
"&domain=". $newdomain ."".
"&plan=".$newplan."".
"&contactemail=".urlencode($newemail)."";
$result = $this->whm_interface( $action );
if (preg_match("/Ftp vhost passwords synced/", $result))
{
return true;
}
elseif (preg_match("/taken/", $result)) {
$this->error = "Username taken";
return false;
}
elseif (preg_match("/Sorry, a DNS entry/", $result))
{
$this->error = "Domain exists on server";
return false;
}
}
/**
* Internal WHM Interface
**/
function whm_interface ($request)
{
$cleanaccesshash = preg_replace("'(\r|\n)'","",$this->accesshash);
$authstr = $this->whmuser . ":" . $cleanaccesshash;
$ch = curl_init();
if ($this->usessl == "1")
{
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER,0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST,0);
curl_setopt($ch, CURLOPT_URL, "https://" . $this->whmhostname . ":2087" . $request);
}
else
{
curl_setopt($ch, CURLOPT_URL, "http://" . $this->whmhostname . ":2086" . $request);
}
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
$curlheaders[0] = "Authorization: WHM $authstr";
curl_setopt($ch,CURLOPT_HTTPHEADER,$curlheaders);
$data=curl_exec ($ch);
curl_close ($ch);
//echo "<pre>";
//echo $data;
//echo "</pre>";
return $data;
}
} # End class
$whm = &new create;
$whm->whmuser = "youruser";
$whm->accesshash = "5a03c64ffbd2fb2691f385eca8748021
d5f5a76e8c01cd16c852f1470e4f71d3
eea3f37de01976b04137256f18ef8b70
9338f12355bd8e3c584852b4bd898998
48fadf1989d3f5bad0a4101090067573
2609e997bcaf7e3f7c613dfac51141e8
5a03c64ffbd2fb2691f385eca8748021
d5f5a76e8c01cd16c852f1470e4f71d3
eea3f37de01976b04137256f18ef8b70
9338f12355bd8e3c584852b4bd898998
48fadf1989d3f5bad0a4101090067573
2609e997bcaf7e3f7c613dfac51141e8
3ebbb96527e421e24536db34887a38af
9f8963f6c37493c24bc7793b19c6e01b
f15f75ff27eb10259462465a02ccd9aa
f15f75ff27eb10259462465a02ccd9aa
5a03c64ffbd2fb2691f385eca8748021
9f8963f6c37493c24bc7793b19c6e01b
f15f75ff27eb10259462465a02ccd9aa
5634db783fdfd238a12a560fc5f09e1d
eaf2f2f6492ecb66a8348e2a958b4626
125bd62deb204c7d1ac1f7be1f2c040a
25aad84b0430724cc6d670467597f2c8
f398759f28859c53ca9ab121f44e169a
13419ccbd53994790fb6f0d019d0fd51
30ec43218f25340443eba52e0e41919b"; # ENTER IT EXACTLY LIKE THIS
$whm->whmhostname = "hozter.info";
$whm->usessl = 0; # It's recommended that you usessl, so set the script to 1
//$whm->newaccount ($newuser, $newpass, $newdomain, $newplan, $newemail);
if ($whm->newaccount("newusser", "password", "dnmccsasa.com", "krakjoe_Ad100", "KRAK_JOE@Hotmail.com"))
{
echo "Account created<br>";
} else {
echo "Failed<br>";
echo $whm->error;
}
?>
Ouuuch! You know you just posted all your WHM details there... Your username is krakjoe and your access hash is there, and the host is hozter.info. Just enough to hack you.
Btw is it worth it spending all that time making that code just to show someone?