// ActionScript file

package
{
	import mx.core.IFactory;

	public class CustomFlex4HandleFactory implements IFactory
	{
		public function CustomFlex4HandleFactory()
		{
		}
		
		public function newInstance():*
		{
			return new MyCustomHandlesClass();
		}
	}
}

// ActionScript file

package
{
	import com.roguedevelopment.objecthandles.HandleDescription;
	import com.roguedevelopment.objecthandles.IHandle;
	
	import flash.events.MouseEvent;
	
	import spark.core.SpriteVisualElement;
	
	public class MyCustomHandlesClass extends SpriteVisualElement implements IHandle
	{
		
		private var _descriptor:HandleDescription;		
		private var _targetModel:Object;
		protected var isOver:Boolean = false;
		
		public function get handleDescriptor():HandleDescription
		{
			return _descriptor;
		}
		public function set handleDescriptor(value:HandleDescription):void
		{
			_descriptor = value;
		}
		public function get targetModel():Object
		{
			return _targetModel;
		}
		public function set targetModel(value:Object):void
		{
			_targetModel = value;
		}
		
		public function MyCustomHandlesClass()
		{
			super();
			addEventListener( MouseEvent.ROLL_OUT, onRollOut );
			addEventListener( MouseEvent.ROLL_OVER, onRollOver );
			//redraw();
		}
		
		protected function onRollOut( event : MouseEvent ) : void
		{
			isOver = false;
			redraw();
		}
		protected function onRollOver( event:MouseEvent):void
		{
			isOver = true;
			redraw();
		}
		
		public function redraw() : void
		{
			graphics.clear();
			if( isOver )
			{
				graphics.lineStyle(1,0x3dff40);
				graphics.beginFill(0xc5ffc0	,1);				
			}
			else
			{
				graphics.lineStyle(1,0);
				graphics.beginFill(0xaaaaaa,1);
			}
			
			graphics.drawRect(-5,-5,10,10);
			graphics.endFill();
			
		}
	}
}

<?xml version="1.0" encoding="utf-8"?><s:Application xmlns:fx="http://ns.adobe.com/mxml/2009" 
			   xmlns:s="library://ns.adobe.com/flex/spark" 
			   xmlns:objecthandles="com.roguedevelopment.objecthandles.*"
			   xmlns:mx="library://ns.adobe.com/flex/mx" minWidth="400" minHeight="300" creationComplete="application1_creationCompleteHandler(event)" viewSourceURL="srcview/index.html">	<fx:Script>		<![CDATA[
			import net.freesource.CustomFlex4HandleFactory;
			import com.roguedevelopment.objecthandles.Flex4ChildManager;
			import com.roguedevelopment.objecthandles.HandleDescription;
			import com.roguedevelopment.objecthandles.HandleRoles;
			import com.roguedevelopment.objecthandles.ObjectHandles;
			
			import mx.events.FlexEvent;
			
			protected var objectHandles:ObjectHandles;
			
			override protected function initializationComplete() : void
			{
				var handles:Array = [];
				
				handles.push( new HandleDescription( HandleRoles.RESIZE_UP + HandleRoles.RESIZE_LEFT, 
					new Point(0,0) ,
					new Point(-16,-16) ) ); 
				
				handles.push( new HandleDescription( HandleRoles.RESIZE_UP + HandleRoles.RESIZE_RIGHT,
					new Point(100,0) ,
					new Point(-16,-16) ) ); 
				
				handles.push( new HandleDescription( HandleRoles.RESIZE_DOWN + HandleRoles.RESIZE_RIGHT,
					new Point(100,100) , 
					new Point(-16,-16) ) ); 
				
				handles.push( new HandleDescription( HandleRoles.RESIZE_DOWN + HandleRoles.RESIZE_LEFT,
					new Point(0,100) ,
					new Point(-16,-16) ) );
				
				objectHandles = new ObjectHandles( mainGroup , 
					null, 
					new CustomFlex4HandleFactory(), 
					new Flex4ChildManager()
				);
								
				objectHandles.registerComponent( img, img );
				
				super.initializationComplete();
				
			}

			protected function application1_creationCompleteHandler(event:FlexEvent):void
			{
				//This line can be removed, is for axample only
				objectHandles.selectionManager.addToSelected(img);
			}

		]]>	</fx:Script>	<s:Group id="mainGroup" width="100%" height="100%">		<s:layout>			<s:BasicLayout />		</s:layout>		<mx:Image id="img" source="@Embed('/assets/images/phone.jpg')" x="50" y="50" />	</s:Group></s:Application>

rm -fv csf.tgz
wget http://www.configserver.com/free/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

Requirements

Download

Installation

• Chatzilla (Fiirefox extension): OS independent
• xChat : available for Windows and Linux (note: windows build requires donation, but you could google for free Windows build)

Overview

Why using a grid sytem?

Tools

• Variable Grid System - http://www.spry-soft.com/grids
  
• Grid System Generator - http://www.gridsystemgenerator.com
  
• 960 Gridder - http://gridder.andreehansson.se
  
• 960-Grid-System Templates - http://github.com/nathansmith/960-Grid-System/tree/master/templates

Graphic Design

Using 960.css

• 960.css – Sets up the grid system, the 12-, and 16-column containers, alpha, omega, and prefix. This file is necessary to the grid system.
  
• reset.css - “Initializes” the system so that all margins and paddings are 0, outline is 0, etc… This file is necessary to the grid system.
  
• text.css - Sets the font sizes including headers, adds margins to lists, etc… This file is not technically needed for the 960 grid system - we can ignore this file

• container_XX is used in the outermost box to determine how many columns. You can use container_12 or container_16.
  
• grid_XX is the bread and butter of the system. XX is for how many columns you want the block to be. For example, grid_10 will be 10 columns wide. The exact pixel width is determined by how many columns you’ve divided the grid into.
  
• prefix_XX allows you to add in blank columns before a block. XX specifies how many blank columns you want.
  
• sufix_XX allows you to add in blank columns aftera block. XX specifies how many blank columns you want.
  
• push_xx and pull_xx. These classes can be used for "Content first" layouts.
  
• alpha is for if you have children blocks. If you do this, you’ll want the first child to have no margin on the left side. alpha makes that happen.
  
• omega is similar to alpha, except that it gives no margin on the right side. Use it for the last child
  
• clearfix and clear - Clear Floated Elements, more info at http://sonspring.com/journal/clearing-floats and http://perishablepress.com/press/2009/12/06/new-clearfix-hack

960 in action

function theme_head() {
echo '
	<link rel="stylesheet" href="'.THEME_ABS.'960.css" type="text/css" media="all" />
';
}

//In the code below remove the empty space after the " { " (left curly brace )
$HEADER = '
<div class="container_12 clearfix">
	<!-- HEADER BOF -->
	<div class="grid_5">
		<!-- Add your LOGO and SITENAME content here -->
	</div>
	<div class="grid_7">
		<!-- Add your BANNER SHORCODE here -->
	</div>
	<div class="clear"></div>
	<!-- HEADER EOF -->
	
	<!-- AREA 2 BOF -->
	<div class="grid_6">
		{ SETSTYLE=menu_area}
		{ MENU=2}
	</div>
	<!-- AREA 2 EOF -->
	<!-- AREA 3 BOF -->
	<div class="grid_6">
		{ SETSTYLE=menu_area}
		{ MENU=3}
	</div>
	<!-- AREA 3 EOF -->
	<div class="clear"></div>
	
	<!-- AREA 1 BOF -->
	<div class="grid_4">
		{ SETSTYLE=menu_area}
		{ MENU=1}
	</div>
	<!-- AREA 1 EOF -->
	<!-- MAIN CONTENT BOF -->
	<div class="grid_8">
		{ SETSTYLE=center}
';

$FOOTER = '	
	</div>
	<!-- MAIN CONTENT EOF -->
	<div class="clear"></div>
	
	<!-- FOOTER BOF -->
	<div class="grid_12">
		<!-- Add your footer content here -->
	</div>
	<div class="clear"></div>
	<!-- FOOTER EOF -->
</div>
';

Shell script (echeck.php)

[secretr@SecretR /]$ cd /home/secretr/
[secretr@SecretR ~]$ ./echeck.php -v
eCheck 1.0 beta
Report issues or get help on http://free-source.net or irc://irc.freenode.org/e107
[secretr@SecretR ~]$

[secretr@SecretR ~]$ ./echeck.php -v
eCheck 1.0 beta
Report issues or get help on http://free-source.net or irc://irc.freenode.org/e107

[secretr@SecretR ~]$ ./echeck.php -h
This is a command line PHP script for checking for/cleaning PHP malicious code.

Usage:./echeck.php [options] /path/to/wwwroot
Options:
-v                      Script version
-I                      Output a list with infected files only
-S                      Output a list with suspected files only
-C                      Clean files (MAKE A BACKUP BEFORE DOING THIS), confirmation is required
-r number            Directory depth level

[secretr@SecretR ~]$

$ ./echeck.php -I -S ./public_html/e107_0.7/

[secretr@SecretR ~]$ cd public_html/e107_0.7/
[secretr@SecretR e107_0.7]$ /home/secretr/./echeck.php -I -S ./

[secretr@SecretR ~]$ ./echeck.php -I -S -r 10 ./public_html/e107_0.7/
Directory depth set to 10

./public_html/e107_0.7/backend.php...SUSPECTED (shell execution)
./public_html/e107_0.7/e107_plugins/pdf/pdf.sc...SUSPECTED (shell execution)
./public_html/e107_0.7/e107_handlers/resize_handler.php...SUSPECTED (shell execution)

Files checked: 1040
Files suspected: 3
Files infected: 0
Files cleaned: 0
Clean errors: 0
Clean warnings: 0

NOTE: SUSPECTED DOES N0T MEAN INFECTED! DIFF AGAINST TRUSTED COPY OF SUSPECTED FILES TO BE SURE EVERYTHING IS OK.
SUSPECTED FILES ARE NOT CLEANED!

[secretr@SecretR ~]$

[secretr@SecretR ~]$ ./echeck.php -C -I -S ./public_html/e107_0.7/
Directory depth set to 100

Did you make a backup? Be sure you did it!  Type 'yes' to continue:

[secretr@SecretR ~]$ ./echeck.php -C -I -S ./public_html/e107_0.7/
Directory depth set to 100

Did you make a backup? Be sure you did it!  Type 'yes' to continue: yes
./public_html/e107_0.7/echeckwww.php...SUSPECTED (eval/base64_decode found)
./public_html/e107_0.7/backend.php...SUSPECTED (shell execution)
./public_html/e107_0.7/index.php...INFECTED...CLEANED
./public_html/e107_0.7/e107_plugins/pdf/pdf.sc...SUSPECTED (shell execution)
./public_html/e107_0.7/e107_files/public/shell.php...SUSPECTED (eval/base64_decode found)
./public_html/e107_0.7/e107_handlers/resize_handler.php...SUSPECTED (shell execution)

Files checked: 1043
Files suspected: 5
Files infected: 1
Files cleaned: 1
Clean errors: 0
Clean warnings: 0

NOTE: SUSPECTED DOES NOT MEAN INFECTED! DIFF AGAINST TRUSTED COPY OF SUSPECTED FILES TO BE SURE EVERYTHING IS OK.
SUSPECTED FILES ARE NOT CLEANED!

[secretr@SecretR ~]$

[secretr@SecretR ~]$sudo ./echeck.php ./public_html/e107_0.7/ > ./log.txt
[secretr@SecretR ~]$cat log.txt | more
Directory depth set to 100

./public_html/e107_0.7/install_.php....CHECKING...OK
./public_html/e107_0.7/user.php....CHECKING...OK
./public_html/e107_0.7/rate.php....CHECKING...OK
./public_html/e107_0.7/search.php....CHECKING...OK
./public_html/e107_0.7/online.php....CHECKING...OK
./public_html/e107_0.7/fpw.php....CHECKING...OK
./public_html/e107_0.7/print.php....CHECKING...OK
./public_html/e107_0.7/upload.php....CHECKING...OK
./public_html/e107_0.7/page.php....CHECKING...OK
./public_html/e107_0.7/links.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_notify.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_np.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_usersettings.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_membersonly.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_sitelinks.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_upload_handler.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_fpw.php....CHECKING...OK
./public_html/e107_0.7/e107_languages/English/lan_download.php....CHECKING...OK
--More--

Scan via a browser (echeckwww.php)

Analyzing the results

• Known infections - based on hackers code infection that I inspected in the time - files are added to output list as INFECTED, auto-cleaning is possible in some cases - on your responsibility though ;)
• Suspected infections (heuristics) - based on most common hackers habits - files are added to output list as SUSPECTED, cleaning is not possible

./public_html/e107_0.7/e107_files/public/shell.php...SUSPECTED (eval/base64_decode found)

./public_html/e107_0.7/backend.php...SUSPECTED (shell execution)
./public_html/e107_0.7/e107_plugins/pdf/pdf.sc...SUSPECTED (shell execution)
./public_html/e107_0.7/e107_handlers/resize_handler.php...SUSPECTED (shell execution)

Where can I get help?

• Support forums
  Use support forums to report problems or just give me a feedback.
• irc://irc.freenode.org/e107
  Get help on e107 IRC channel