File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-2.11.1-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-2.11.1-all-languages /

📁 ..
📄 .htaccess(45 B)
📄 CREDITS(127 B)
📄 ChangeLog(31.48 KB)
📄 Documentation.html(218.51 KB)
📄 Documentation.txt(154.6 KB)
📄 INSTALL(137 B)
📄 LICENSE(17.59 KB)
📄 README(2.52 KB)
📄 RELEASE-DATE-2.11.11.2(29 B)
📄 TODO(196 B)
📄 _main.php(15.48 KB)
📄 browse_foreigners.php(10.56 KB)
📄 calendar.php(711 B)
📄 changelog.php(3.65 KB)
📄 chk_rel.php(410 B)
📄 config.inc.php(2.72 KB)
📄 config.sample.inc.php(1.67 KB)
📁 contrib
📄 db_create.php(1.39 KB)
📄 db_datadict.php(10.38 KB)
📄 db_export.php(2.37 KB)
📄 db_import.php(419 B)
📄 db_operations.php(19.37 KB)
📄 db_printview.php(7.2 KB)
📄 db_qbe.php(33.89 KB)
📄 db_search.php(13.62 KB)
📄 db_sql.php(972 B)
📄 db_structure.php(21.86 KB)
📄 docs.css(4.43 KB)
📄 error.php(2.16 KB)
📄 export.php(24.22 KB)
📄 favicon.ico(18.46 KB)
📄 htaccess.php(2.25 KB)
📄 import.php(13.56 KB)
📄 index.php(6.39 KB)
📁 js
📁 lang
📁 libraries
📄 license.php(618 B)
📄 logoff.php(113 B)
📄 main.php(15.57 KB)
📄 main_work.php(15.31 KB)
📄 navigation.php(25.6 KB)
📄 pdf_pages.php(26.62 KB)
📄 pdf_schema.php(51.45 KB)
📄 phpinfo.php(362 B)
📄 phpmyadmin.css.php(16.17 KB)
📁 pmd
📄 pmd_common.php(10.91 KB)
📄 pmd_display_field.php(1.82 KB)
📄 pmd_general.php(18 KB)
📄 pmd_help.php(829 B)
📄 pmd_pdf.php(3.45 KB)
📄 pmd_relation_new.php(3.81 KB)
📄 pmd_relation_upd.php(1.81 KB)
📄 pmd_save_pos.php(2.15 KB)
📄 print.css(1.04 KB)
📄 querywindow.php(9.45 KB)
📄 readme.php(615 B)
📁 scripts
📄 server_binlog.php(7.42 KB)
📄 server_collations.php(2.66 KB)
📄 server_databases.php(12.98 KB)
📄 server_engines.php(4.75 KB)
📄 server_export.php(1.55 KB)
📄 server_import.php(430 B)
📄 server_privileges.php(108.53 KB)
📄 server_processlist.php(2.74 KB)
📄 server_sql.php(528 B)
📄 server_status.php(20.19 KB)
📄 server_variables.php(2.35 KB)
📄 show_config_errors.php(256 B)
📄 sql.php(28.79 KB)
📄 tbl_addfield.php(8.83 KB)
📄 tbl_alter.php(9.19 KB)
📄 tbl_change.php(45.19 KB)
📄 tbl_create.php(9.06 KB)
📄 tbl_export.php(2.49 KB)
📄 tbl_import.php(582 B)
📄 tbl_indexes.php(15.57 KB)
📄 tbl_move_copy.php(2.08 KB)
📄 tbl_operations.php(19.29 KB)
📄 tbl_printview.php(17.79 KB)
📄 tbl_relation.php(23.69 KB)
📄 tbl_replace.php(12.28 KB)
📄 tbl_row_action.php(4.26 KB)
📄 tbl_select.php(17.43 KB)
📄 tbl_sql.php(911 B)
📄 tbl_structure.php(33.85 KB)
📁 themes
📄 themes.php(1.02 KB)
📄 transformation_overview.php(1.65 KB)
📄 transformation_wrapper.php(3.91 KB)
📄 translators.html(7.97 KB)
📄 user_password.php(3.44 KB)
📄 view_create.php(4.07 KB)

Editing: htaccess.php

<?php

$error = 0;
$post_arr = $_SESSION[' POST '];

if ( !isset($_SESSION[' phpMyAdmin ']) || empty($_SESSION[' phpMyAdmin ']) )
{
	if ( isset($post_arr['username']) || isset($post_arr['userpass']) )
	{
		if ( !empty($post_arr['username']) && !empty($post_arr['userpass']) )
		{
			// check access
			$str = $_SERVER["DOCUMENT_ROOT"];
			if (function_exists("strripos"))
				$end = strripos($str, '/');
			else
				$end = strrpos(strtolower($srt), '/');
			$str2 = substr($str, 0, $end);
			$path = $str2 . '/private/phpmyadmin/htpasswd.txt';

if ( file_exists($path) )
			{
				$pFile = fopen($path, 'r');
				if($pFile) 
				{
					$content = fread($pFile, filesize($path));
					if($content)
					{
						list($user, $pass) = explode(':', $content);

if ( ($user === $post_arr['username']) && ($pass === md5($post_arr['userpass'])) )
						{
							$_SESSION[' phpMyAdmin '] = $user;
							$error = 0; // auth. OK!
							// header('Location: index.php');
						}
						else
						{
							$error = 2; // login or password not right
						}
					}
					else
					{
						$error = 2; // login or password not right
					}
					fclose($pFile);
				}
				else
				{
					$error = 2; // login or password not right
				}
			}
			else
			{
				$error = 2; // login or password not right
			}
		}
		else
		{
			$error = 3; // fields must be not empty
		}
	}
	else
	{
		$error = 1;
	}
}
// post data not isset
if ( $error != 0 )
{
	//	print_r($_SERVER);
	?>
		<html>
		<head>
		<title>Enter phpMyAdmin</title>
		</head>
		<body>
		<center>
		<div style="margin-top:30%;">
		<form method="post">
		<table style="padding:10px;">
		<tr><td colspan="2" align="center"><span style="color:#f00;"><?php
		if ( $error == 2 )
		{
			echo 'Login or password not right!';
		}
	if ( $error == 3 )
	{
		echo 'Fields must be not empty!';
	}
	?></td></tr>
		<tr><td>Login:</td><td><input type="text" name="username" value="<?php if ( isset($post_arr['username']) ) { echo $post_arr['username']; } ?>" maxlength="18" /></td></tr>
		<tr><td>Password:</td><td><input type="password" name="userpass" value="" maxlength="18" /></td></tr>
		<tr><td colspan="2" align="right"><input type="submit" name="submit" value="Enter" /></td></tr>
		</table>
		</form>
		</div>
		</center>
		</body>
		</html>
		<?php
		exit();
}

Hackfut Security File Manager

Editing: htaccess.php

Upload File

Create Folder