!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/lib/tinymce/plugins/tinybrowser/   drwxr-xr-x
Free 9.4 GB of 93.48 GB (10.06%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     tinybrowser.php (10.44 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
require_once("config_tinybrowser.php");
// Set language
if(isset($tinybrowser['language']) && file_exists('langs/'.$tinybrowser['language'].'.php'))
    {
    require_once(
'langs/'.$tinybrowser['language'].'.php'); 
    }
else
    {
    require_once(
'langs/en.php'); // Falls back to English
    
}
require_once(
"fns_tinybrowser.php");

// Check session, if it exists
if(session_id() != '')
    {
    if(!isset(
$_SESSION[$tinybrowser['sessioncheck']]))
        {
        echo 
TB_DENIED;
        exit;
        }
    }

// Assign get variables
$typenow = (isset($_GET['type']) ? $_GET['type'] : 'image');
$standalone = ((isset($_GET['feid']) && $_GET['feid']!='') ? true false);

if(
$standalone)
    {
    
$passfeid '&feid='.$_GET['feid'];    
    
$rowhlightinit =  ' onload="rowHighlight();"';
    }
else
    {
    
$passfeid '';
    
$rowhlightinit =  '';    
    }

// Assign view, thumbnail and link paths
$browsepath $tinybrowser['path'][$typenow];
$linkpath $tinybrowser['link'][$typenow];
$thumbpath $tinybrowser[$tinybrowser['thumbsrc']][$typenow];

// Assign browsing options
$sortbynow = (isset($_REQUEST['sortby']) ? $_REQUEST['sortby'] : $tinybrowser['order']['by']);
$sorttypenow = (isset($_REQUEST['sorttype']) ? $_REQUEST['sorttype'] : $tinybrowser['order']['type']);
$sorttypeflip = ($sorttypenow == 'asc' 'desc' 'asc');  
$viewtypenow = (isset($_REQUEST['viewtype']) ? $_REQUEST['viewtype'] : $tinybrowser['view']['image']);
$findnow = (isset($_POST['find']) && !empty($_POST['find']) ? $_POST['find'] : false);
$showpagenow = (isset($_REQUEST['showpage']) ? $_REQUEST['showpage'] : 0);

// Assign sort parameters for column header links
$sortbyget = array();
$sortbyget['name'] = '&viewtype='.$viewtypenow.'&sortby=name';
$sortbyget['size'] = '&viewtype='.$viewtypenow.'&sortby=size'
$sortbyget['type'] = '&viewtype='.$viewtypenow.'&sortby=type'
$sortbyget['modified'] = '&viewtype='.$viewtypenow.'&sortby=modified';
$sortbyget['dimensions'] = '&viewtype='.$viewtypenow.'&sortby=dimensions'
$sortbyget[$sortbynow] .= '&sorttype='.$sorttypeflip;

// Assign css style for current sort type column
$thclass = array();
$thclass['name'] = '';
$thclass['size'] = ''
$thclass['type'] = ''
$thclass['modified'] = '';
$thclass['dimensions'] = ''
$thclass[$sortbynow] = ' class="'.$sorttypenow.'"';

// Initalise alert array
$notify = array(
    
"type" => array(),
    
"message" => array()
);
$newthumbqty 0;

// read folder contents if folder exists
if(file_exists($tinybrowser['docroot'].$browsepath))
    {
    
// Read directory contents and populate $file array
    
$dh opendir($tinybrowser['docroot'].$browsepath);
    
$file = array();
    while ((
$filename readdir($dh)) !== false)
        {
        if(
$filename != "." && $filename != ".." && !is_dir($tinybrowser['docroot'].$browsepath.$filename))
            {
            
// search file name if search term entered
            
if($findnow$exists stripos($filename,$findnow);
    
            
// assign file details to array, for all files or those that match search
            
if(!$findnow || ($findnow && $exists !== false))
                {
                
$file['name'][] = $filename;
                
$file['modified'][] = filemtime($tinybrowser['docroot'].$browsepath.$filename);
                
$file['size'][] = filesize($tinybrowser['docroot'].$browsepath.$filename);
    
                
// image specific info or general
                
if($typenow=='image')
                    {
                    
$imginfo getimagesize($tinybrowser['docroot'].$browsepath.$filename);
                    
$file['width'][] = $imginfo[0];
                    
$file['height'][] = $imginfo[1];
                    
$file['dimensions'][] = $imginfo[0] + $imginfo[1];
                    
$file['type'][] = $imginfo['mime'];
                    
                    
// Check a thumbnail exists
                      
$thumbimg $tinybrowser['docroot'].$browsepath."thumbs/_".$filename;
                    if (!
file_exists($thumbimg))
                        {
                        
$nothumbimg $tinybrowser['docroot'].$browsepath.$filename;
                        
$mime getimagesize($nothumbimg);
                        
$im convert_image($nothumbimg,$mime['mime']);
                        
resizeimage($im,$tinybrowser['thumbsize'],$tinybrowser['thumbsize'],$thumbimg,$tinybrowser['thumbquality']);
                        
imagedestroy($im);
                        
$newthumbqty++;
                        }
                    }
                else 
                    {
                    
$file['width'][] = 'N/A';
                    
$file['height'][] = 'N/A';
                    
$file['dimensions'][] = 'N/A';
                    
$file['type'][] = returnMIMEType($filename);
                    }
                }            
            }
        }
    
closedir($dh);
    }
// create file upload folder
else
    {
    
$success createfolder($tinybrowser['docroot'].$browsepath,$tinybrowser['unixpermissions']);
    if(
$success)
        {
        if(
$typenow=='image'createfolder($tinybrowser['docroot'].$browsepath.'thumbs/',$tinybrowser['unixpermissions']);
        
$notify['type'][]='success';
        
$notify['message'][]=sprintf(TB_MSGMKDIR$browsepath);
        }
    else
        {
        
$notify['type'][]='error';
        
$notify['message'][]=sprintf(TB_MSGMKDIRFAIL$browsepath);
        }
    }
    
// generate alert if new thumbnails created
if($newthumbqty>0)
   {
    
$notify['type'][]='info';
    
$notify['message'][]=sprintf(TB_MSGNEWTHUMBS$newthumbqty);
    }
    

// determine sort order
$sortorder = ($sorttypenow == 'asc' SORT_ASC SORT_DESC);
$num_of_files = (isset($file['name']) ? count($file['name']) : 0);

if(
$num_of_files>0)
    {
    
// sort files by selected order
    
sortfileorder($sortbynow,$sortorder,$file);
    }

// determine pagination
if($tinybrowser['pagination']>0)
    {
    
$showpage_start = ($showpagenow ? ($_REQUEST['showpage']*$tinybrowser['pagination'])-$tinybrowser['pagination'] : 0);
    
$showpage_end $showpage_start+$tinybrowser['pagination'];
    if(
$showpage_end>$num_of_files$showpage_end $num_of_files;
    }
else
    {
    
$showpage_start 0;
    
$showpage_end $num_of_files;
    }
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>TinyBrowser :: <?=  TB_BROWSE?></title>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<?php
if(!$standalone && $tinybrowser['integration']=='tinymce')
    {
    
?><script language="javascript" type="text/javascript" src="../../tiny_mce_popup.js"></script><?php 
    
}
else
    {
    
?><link rel="stylesheet" type="text/css" media="all" href="css/stylefull_tinybrowser.css" /><?php 
    
}
?>
<link rel="stylesheet" type="text/css" media="all" href="css/style_tinybrowser.css.php" />
<script language="javascript" type="text/javascript" src="js/tinybrowser.js.php?<?=  substr($passfeid,1); ?>"></script>
</head>
<body<?=  $rowhlightinit?>>
<?php
if(count($notify['type'])>0alert($notify);
?>
<div class="tabs">
<ul>
<li id="browse_tab" class="current"><span><a href="tinybrowser.php?type=<?=  $typenow.$passfeid ?>"><?=  TB_BROWSE?></a></span></li><?php
if($tinybrowser['allowupload']) 
    {
    
?><li id="upload_tab"><span><a href="upload.php?type=<?=  $typenow.$passfeid ?>"><?=  TB_UPLOAD?></a></span></li><?php
    
}
if(
$tinybrowser['allowedit'] || $tinybrowser['allowdelete'])
    {
    
?><li id="edit_tab"><span><a href="edit.php?type=<?=  $typenow.$passfeid ?>"><?=  TB_EDIT?></a></span></li><?php
    
?>
</ul>
</div>
<div class="panel_wrapper">
<div id="general_panel" class="panel currentmod">
<fieldset>
<legend><?=  TB_BROWSEFILES?></legend>
<?php
form_open
('browse','custom',basename($_SERVER["SCRIPT_NAME"]),'?type='.$typenow.$passfeid);
?>
<div class="pushleft">
<?php
// Offer view type if file type is image
if($typenow=='image')
    {
    
$select = array(
        array(
"thumb",TB_THUMBS),
        array(
"detail",TB_DETAILS)
    );
    
form_select($select,'viewtype',TB_VIEW,$viewtypenow,true);
    }
    
// Show page select if pagination is set
if($tinybrowser['pagination']>0)
    {
    
$pagelimit ceil($num_of_files/$tinybrowser['pagination'])+1;
    
$page = array();
    for(
$i=1;$i<$pagelimit;$i++)
        {
        
$page[] = array($i,TB_PAGE.' '.$i);
        }
    if(
$i>2form_select($page,'showpage',TB_SHOW,$showpagenow,true);
    }
?></div><div class="pushright"><?php

form_hidden_input
('sortby',$sortbynow);
form_hidden_input('sorttype',$sorttypenow);
form_text_input('find',false,$findnow,25,50);
form_submit_button('search',TB_SEARCH,'');

?></div>
<?php

// if image show dimensions header
if($typenow=='image')
    {
    
$imagehead '<th><a href="?type='.$typenow.$passfeid.$sortbyget['dimensions'].'"'.$thclass['dimensions'].'>'.TB_DIMENSIONS.'</a></th>';
    }
else 
$imagehead '';

echo 
'<div class="tabularwrapper"><table class="browse">'
        
.'<tr><th><a href="?type='.$typenow.$passfeid.$sortbyget['name'].'"'.$thclass['name'].'>'.TB_FILENAME.'</a></th>'
        
.'<th><a href="?type='.$typenow.$passfeid.$sortbyget['size'].'"'.$thclass['size'].'>'.TB_SIZE.'</a></th>'
        
.$imagehead
        
.'<th><a href="?type='.$typenow.$passfeid.$sortbyget['type'].'"'.$thclass['type'].'>'.TB_TYPE.'</th>'
        
.'<th><a href="?type='.$typenow.$passfeid.$sortbyget['modified'].'"'.$thclass['modified'].'>'.TB_DATE.'</th></tr>';

// show image thumbnails, unless detail view is selected
if($typenow=='image' && $viewtypenow != 'detail')
    {
    echo 
'</table></div>';

    for(
$i=$showpage_start;$i<$showpage_end;$i++)
        {
        echo 
'<div class="img-browser"><a href="#" onclick="selectURL(\''.$linkpath.$file['name'][$i].'\');" title="'.TB_FILENAME.': '.$file['name'][$i]
                .
'&#13;&#10;'.TB_TYPE.': '.$file['type'][$i]
                .
'&#13;&#10;'.TB_SIZE.': '.bytestostring($file['size'][$i],1)
                .
'&#13;&#10;'.TB_DATE.': '.date($tinybrowser['dateformat'],$file['modified'][$i])
                .
'&#13;&#10;'.TB_DIMENSIONS.': '.$file['width'][$i].' x '.$file['height'][$i]
                .
'"><img src="'.$thumbpath.'thumbs/_'.$file['name'][$i]
                .
'"  /><div class="filename">'.$file['name'][$i].'</div></a></div>';
        }
    }
else
    {
    for(
$i=$showpage_start;$i<$showpage_end;$i++)
        {
        
$alt = (IsOdd($i) ? 'r1' 'r0');
        echo 
'<tr class="'.$alt.'">';
        if(
$typenow=='image') echo '<td><a class="imghover" href="#" onclick="selectURL(\''.$linkpath.$file['name'][$i].'\');" title="'.$file['name'][$i].'"><img src="'.$thumbpath.'thumbs/_'.$file['name'][$i].'" alt="" />'.truncate_text($file['name'][$i],30).'</a></td>';
        else echo 
'<td><a href="#" onclick="selectURL(\''.$linkpath.$file['name'][$i].'\');" title="'.$file['name'][$i].'">'.truncate_text($file['name'][$i],30).'</a></td>';
        echo 
'<td>'.bytestostring($file['size'][$i],1).'</td>';
        if(
$typenow=='image') echo '<td>'.$file['width'][$i].' x '.$file['height'][$i].'</td>';    
        echo 
'<td>'.$file['type'][$i].'</td>'
            
.'<td>'.date($tinybrowser['dateformat'],$file['modified'][$i]).'</td></tr>'."\n";
        }
    echo 
'</table></div>';
    }
?>
</fieldset></div></div>
<form name="passform"><input name = "fileurl" type="hidden" value= "" /></form>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.0048 ]--