403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/repository/wp-content/plugins/wp-filemanager/incl/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/repository/wp-content/plugins/wp-filemanager/incl/filebrowser.inc.php
<?php
if (!@include_once("auth.inc.php"))
 include_once("auth.inc.php");

if (!isset($_GET['sortby'])) $_GET['sortby']	= "filename";
if (!isset($_GET['order'])) $_GET['order']	= "asc";
if (function_exists('get_option') && get_option('wp_fileman_home') == '')
{
	print "<div> Please configure the Plugin by <a href='admin.php?page=wpfileman'> Visiting Here </a>";
}
#else
#{
#	print get_option('wp_fileman_home');
#	print "<br>".get_linked_path($wp_fileman_path,$base_url)."<br>".$wp_fileman_path."<br>".$base_url;
#}
print "<table class='menu' cellpadding=2 cellspacing=0>";
 print "<tr>";
  if ($AllowCreateFolder) print "<td align='center' valign='bottom'><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;action=create&amp;type=directory'><img src='" .WP_CONTENT_URL . "/plugins/wp-filemanager/icon/newfolder.gif' width=20 height=22 alt='$StrMenuCreateFolder' border=0>&nbsp;$StrMenuCreateFolder</a></td>";
  if ($AllowCreateFile) print "<td align='center' valign='bottom'><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;action=create&amp;type=file'><img src='" .WP_CONTENT_URL . "/plugins/wp-filemanager/icon/newfile.gif' width=20 height=22 alt='$StrMenuCreateFile' border=0>&nbsp;$StrMenuCreateFile</a></td>";
  if ($AllowUpload) print "<td align='center' valign='bottom'><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;action=upload'><img src='" .WP_CONTENT_URL . "/plugins/wp-filemanager/icon/upload.gif' width=20 height=22 alt='$StrMenuUploadFiles' border=0>&nbsp;$StrMenuUploadFiles</a></td>";
  if ($phpfm_auth) print "<td align='center' valign='bottom'><a href='$base_url&amp;action=logout'><img src='" .WP_CONTENT_URL . "/plugins/wp-filemanager/icon/logout.gif' width=20 height=22 alt='$StrMenuLogOut' border=0>&nbsp;$StrMenuLogOut</a></td>";
 print "</tr>";
print "</table><br />";

print "<table class='index' cellpadding=0 cellspacing=0>";
 print "<tr>";
  print "<td class='iheadline' colspan=4 align='center' height=21>";
   print "<font class='iheadline'>$StrIndexOf&nbsp;".get_linked_path($wp_fileman_path,$base_url)."</font>";
  print "</td>";
 print "</tr>";
 print "<tr>";
  print "<td>&nbsp;</td>";
  print "<td class='fbborder' valign='top'>";



  if ($open = @opendir($home_directory.$wp_fileman_path))
  {
   for($i=0;($directory = readdir($open)) != FALSE;$i++)
    if (is_dir($home_directory.$wp_fileman_path.$directory) && $directory != "." && $directory != ".." && !is_hidden_directory($home_directory.$wp_fileman_path.$directory))
      $directories[$i] = array($directory,$directory);
   closedir($open);

   if (isset($directories))
   {
    sort($directories);
    reset($directories);
   }
  }

  print "<table class='directories' width=250 cellpadding=1 cellspacing=0>";
   print "<tr>";
    print "<td class='bold' width=20>&nbsp;</td>";
    print "<td class='bold'>&nbsp;$StrFolderNameShort</td>";
    if ($AllowRename) print "<td class='bold' width=20 align='center'>$StrRenameShort</td>";
    if ($AllowDelete) print "<td class='bold' width=20 align='center'>$StrDeleteShort</td>";
   print "</tr>";
   print "<tr>";
    print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."'><img src='" .WP_CONTENT_URL . "/plugins/wp-filemanager/icon/folder.gif' width=20 height=22 alt='$StrOpenFolder' border=0></a></td>";
    print "<td>&nbsp;<a href='$base_url'>.</a></td>";
    print "<td width=20>&nbsp;</td>";
    print "<td width=20>&nbsp;</td>";
   print "</tr>";
   print "<tr>";
    print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode(dirname($wp_fileman_path)))."/'><img src='" .WP_CONTENT_URL . "/plugins/wp-filemanager/icon/folder.gif' width=20 height=22 alt='$StrOpenFolder' border=0></a></td>";
    print "<td>&nbsp;<a href='$base_url&amp;path=".htmlspecialchars(rawurlencode(dirname($wp_fileman_path)))."/'>..</a></td>";
    print "<td width=20>&nbsp;</td>";
    print "<td width=20>&nbsp;</td>";
   print "</tr>";
  if (isset($directories)) foreach($directories as $directory)
  {
   print "<tr>";
    print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path.$directory[0]))."/'><img src='" .WP_CONTENT_URL . "/plugins/wp-filemanager/icon/folder.gif' width=20 height=22 alt='$StrOpenFolder' border=0></a></td>";
    print "<td>&nbsp;<a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path.$directory[0]))."/'>".htmlspecialchars(mb_convert_encoding($directory[0], 'utf8', 'iso-8859-7'))."</a></td>";
    if ($AllowRename) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;directory_name=".htmlspecialchars(rawurlencode($directory[0]))."/&amp;action=rename'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/rename.gif' width=20 height=22 alt='$StrRenameFolder' border=0></a></td>";
    if ($AllowDelete) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;directory_name=".htmlspecialchars(rawurlencode($directory[0]))."/&amp;action=delete'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/delete.gif' width=20 height=22 alt='$StrDeleteFolder' border=0></a></td>";
   print "</tr>";
  }
   print "<tr><td colspan=4>&nbsp;</td></tr>";
  print "</table>";

  print "</td>";
  print "<td>&nbsp;</td>";
  print "<td valign='top'>";



  if ($open = @opendir($home_directory.$wp_fileman_path))
  {
   for($i=0;($file = readdir($open)) != FALSE;$i++)
    if (is_file($home_directory.$wp_fileman_path.$file) && !is_hidden_file($home_directory.$wp_fileman_path.$file))
    {
     $icon = get_icon($file);
     $filesize = filesize($home_directory.$wp_fileman_path.$file);
     $permissions = decoct(fileperms($home_directory.$wp_fileman_path.$file)%01000);
     $modified = filemtime($home_directory.$wp_fileman_path.$file);
     $extension = "";
     $files[$i] = array(
                         "icon"        => $icon,
                         "filename"    => $file,
                         "filesize"    => $filesize,
                         "permissions" => $permissions,
                         "modified"    => $modified,
                         "extension"   => $extension,
                       );
    }
   closedir($open);

   if (isset($files))
   {
    usort($files, "compare_filedata");
    reset($files);
   }
  }

  print "<table class='files' width=500 cellpadding=1 cellspacing=0>";
   print "<tr>";
    print "<td class='bold' width=20>&nbsp;</td>";
    print "<td class='bold'>&nbsp;<a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;sortby=filename&amp;order=".get_opposite_order("filename", $_GET['order'])."'>$StrFileNameShort</a></td>";
    print "<td class='bold' width=60 align='center'><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;sortby=filesize&amp;order=".get_opposite_order("filesize", $_GET['order'])."'>$StrFileSizeShort</a></td>";
    if ($AllowView) print "<td class='bold' width=20 align='center'>$StrViewShort</td>";
    if ($AllowEdit) print "<td class='bold' width=20 align='center'>$StrEditShort</td>";
    if ($AllowRename) print "<td class='bold' width=20 align='center'>$StrRenameShort</td>";
    if ($AllowDownload) print "<td class='bold' width=20 align='center'>$StrDownloadShort</td>";
    if ($AllowDelete) print "<td class='bold' width=20 align='center'>$StrDeleteShort</td>";
   print "</tr>";
  if (isset($files)) foreach($files as $file)
  {
   $file['filesize'] = get_better_filesize($file['filesize']);
   $file['modified'] = date($ModifiedFormat, $file['modified']);
	
   print "<tr>";
    print "<td width=20><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/".$file['icon']."' width=20 height=22 border=0 alt='$StrFile'></td>";
/*	if ($ShowExtension) print "<td>&nbsp;".htmlspecialchars($file['filename'])."</td>";
    else 
	{
		$f_nm = explode('.',htmlspecialchars($file['filename']));
		print "<td><a title='" . $f_nm[0] . "'>&nbsp;" . $f_nm[0] . "</a></td>";
	}*/
	$f_nm = explode('.',htmlspecialchars($file['filename']));
	//print $f_nm[1];
	print "<td>&nbsp;".mb_convert_encoding($f_nm[0], 'utf8', 'iso-8859-7');
	if ($ShowExtension) print "." . $f_nm[1];
	print "</td>";
    print "<td width=60 align='right'>".$file['filesize']."</td>";
    if ($AllowView && is_viewable_file($file['filename'])) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."&amp;action=view&amp;size=100'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/view.gif' width=20 height=22 alt='$StrViewFile' border=0></a></td>";
    else if ($AllowView) print "<td width=20>&nbsp;</td>";
// echo get_option('siteurl'); /wp-admin/admin-ajax.php?action=choice&width=150&height=100"  title="Choice"
    if ($AllowEdit && is_editable_file($file['filename'])) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."&amp;action=edit'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/edit.gif' width=20 height=22 alt='$StrEditFile' border=0></a></td>";
//	if ($AllowEdit && is_editable_file($file['filename'])) print "<td width=20><a href='" . get_option('siteurl') . "/wp-admin/admin-ajax.php?action=rename&width=150&hight=100' title='Choice'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/edit.gif' width=20 height=22 alt='$StrEditFile' border=0></a></td>";
	else if ($AllowEdit) print "<td width=20>&nbsp;</td>";
//    if ($AllowRename) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."&amp;action=rename'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/rename.gif' width=20 height=22 alt='$StrRenameFile' border=0></a></td>";
    if ($AllowRename) print "<td width=20><a class='thickbox' href='" . get_option('siteurl') . "/wp-admin/admin-ajax.php?action=rename&amp;width=355&amp;height=120&amp;page=" . htmlspecialchars(rawurlencode($_GET['page'])) . "&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."' title='Rename File ".htmlspecialchars(rawurlencode($file['filename']))."'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/rename.gif' width=20 height=22 alt='$StrRenameFile' border=0></a></td>";
//    if ($AllowDownload) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."&amp;action=download'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/download.gif' width=20 height=22 alt='$StrDownloadFile' border=0></a></td>";
//    if ($AllowDownload) print "<td width=20><a href='" . WP_PLUGIN_URL .'/' . str_replace(basename( __FILE__),"",plugin_basename(__FILE__)) . "libfile.php?".SID."&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."&amp;action=download'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/download.gif' width=20 height=22 alt='$StrDownloadFile' border=0></a></td>";
    if ($AllowDownload) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."&amp;action=download'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/download.gif' width=20 height=22 alt='$StrDownloadFile' border=0></a></td>";
    if ($AllowDelete) print "<td width=20><a href='$base_url&amp;path=".htmlspecialchars(rawurlencode($wp_fileman_path))."&amp;filename=".htmlspecialchars(rawurlencode($file['filename']))."&amp;action=delete'><img src='" . WP_CONTENT_URL . "/plugins/wp-filemanager/icon/delete.gif' width=20 height=22 alt='$StrDeleteFile' border=0></a></td>";
   print "</tr>";

  }
   print "<tr><td colspan=9>&nbsp;</td></tr>";
  print "</table>";


  print "</td>";
 print "</tr>";
print "</table>";
?>

Youez - 2016 - github.com/yon3zu
LinuXploit