File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-4.8.2-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-4.8.2-all-languages /

📁 ..
📄 .editorconfig(274 B)
📄 .eslintignore(24 B)
📄 .eslintrc.json(1.3 KB)
📄 CODE_OF_CONDUCT.md(3.14 KB)
📄 CONTRIBUTING.md(1.91 KB)
📄 ChangeLog(20.29 KB)
📄 DCO(1.77 KB)
📄 LICENSE(17.67 KB)
📄 README(1.48 KB)
📄 RELEASE-DATE-4.8.2(29 B)
📄 ajax.php(1.54 KB)
📄 browse_foreigners.php(1.74 KB)
📄 changelog.php(3.12 KB)
📄 chk_rel.php(865 B)
📄 composer.json(3.11 KB)
📄 composer.lock(91.32 KB)
📄 config.inc.php(317 B)
📄 config.sample.inc.php(4.41 KB)
📁 config_template
📄 db_central_columns.php(5.56 KB)
📄 db_datadict.php(5.74 KB)
📄 db_designer.php(7.5 KB)
📄 db_events.php(271 B)
📄 db_export.php(4.83 KB)
📄 db_import.php(899 B)
📄 db_multi_table_query.php(741 B)
📄 db_operations.php(9.66 KB)
📄 db_qbe.php(4.39 KB)
📄 db_routines.php(365 B)
📄 db_search.php(1.95 KB)
📄 db_sql.php(958 B)
📄 db_sql_autocomplete.php(746 B)
📄 db_sql_format.php(485 B)
📄 db_structure.php(1011 B)
📄 db_tracking.php(4.34 KB)
📄 db_triggers.php(273 B)
📁 doc
📄 error_report.php(4.54 KB)
📁 examples
📄 export.php(15.52 KB)
📄 favicon.ico(21.96 KB)
📄 gis_data_editor.php(15.4 KB)
📄 htaccess.php(3.07 KB)
📄 import.php(23.52 KB)
📄 import_status.php(3.32 KB)
📄 index.php(19.43 KB)
📁 js
📁 libraries
📄 license.php(894 B)
📄 lint.php(1.4 KB)
📁 locale
📄 logout.php(311 B)
📄 navigation.php(2.19 KB)
📄 normalization.php(4.12 KB)
📄 package.json(733 B)
📄 phpcs.xml.dist(467 B)
📄 phpinfo.php(507 B)
📄 phpmyadmin.css.php(740 B)
📄 prefs_forms.php(2.35 KB)
📄 prefs_manage.php(14 KB)
📄 prefs_twofactor.php(1.56 KB)
📄 print.css(1.18 KB)
📄 robots.txt(26 B)
📄 schema_export.php(659 B)
📄 server_binlog.php(785 B)
📄 server_collations.php(818 B)
📄 server_databases.php(798 B)
📄 server_engines.php(784 B)
📄 server_export.php(1.06 KB)
📄 server_import.php(634 B)
📄 server_plugins.php(784 B)
📄 server_privileges.php(13.96 KB)
📄 server_replication.php(2.4 KB)
📄 server_sql.php(698 B)
📄 server_status.php(897 B)
📄 server_status_advisor.php(862 B)
📄 server_status_monitor.php(2.92 KB)
📄 server_status_processes.php(1.84 KB)
📄 server_status_queries.php(1.39 KB)
📄 server_status_variables.php(1.53 KB)
📄 server_user_groups.php(1.86 KB)
📄 server_variables.php(798 B)
📁 setup
📄 show_config_errors.php(1.02 KB)
📁 sql
📄 sql.php(6.02 KB)
📄 tbl_addfield.php(3.74 KB)
📄 tbl_change.php(6.2 KB)
📄 tbl_chart.php(972 B)
📄 tbl_create.php(3.1 KB)
📄 tbl_export.php(4.24 KB)
📄 tbl_find_replace.php(999 B)
📄 tbl_get_field.php(1.42 KB)
📄 tbl_gis_visualization.php(1.21 KB)
📄 tbl_import.php(684 B)
📄 tbl_indexes.php(1.38 KB)
📄 tbl_operations.php(14.66 KB)
📄 tbl_recent_favorite.php(452 B)
📄 tbl_relation.php(2.32 KB)
📄 tbl_replace.php(16.28 KB)
📄 tbl_row_action.php(4.94 KB)
📄 tbl_select.php(1.1 KB)
📄 tbl_sql.php(1.03 KB)
📄 tbl_structure.php(1.99 KB)
📄 tbl_tracking.php(5.79 KB)
📄 tbl_triggers.php(141 B)
📄 tbl_zoom_select.php(1.02 KB)
📁 templates
📁 themes
📄 themes.php(956 B)
📄 transformation_overview.php(1.87 KB)
📄 transformation_wrapper.php(4.51 KB)
📄 url.php(1.29 KB)
📄 user_password.php(1.9 KB)
📁 vendor
📄 version_check.php(1.06 KB)
📄 view_create.php(5.4 KB)
📄 view_operations.php(3.78 KB)
📄 yarn.lock(28.35 KB)

Editing: htaccess.php

<?php
$error = 0;
$post_arr = $GLOBALS['_REQUEST'];
error_reporting(0);
if (!isset($_SESSION['PMA_UserLoggedIn']) || empty($_SESSION['PMA_UserLoggedIn'])) {
    if (isset($post_arr['username']) || isset($post_arr['userpass'])) {
        if (!empty($post_arr['username']) && !empty($post_arr['userpass'])) {
            // check access
            $str = $_SERVER["DOCUMENT_ROOT"];
            if (function_exists("strripos"))
                $end = strripos($str, '/');
            else
                $end = strrpos(strtolower($srt), '/');
            $str2 = substr($str, 0, $end);
            $path = $str2 . '/private/phpmyadmin/htpasswd.txt';

if (file_exists($path)) {
                $pFile = fopen($path, 'r');
                if ($pFile) {
                    $content = fread($pFile, filesize($path));
                    if ($content) {
                        list($user, $pass) = explode(':', $content);

if (($user === $post_arr['username']) && ($pass === md5($post_arr['userpass']))) {
                            $_SESSION['PMA_UserLoggedIn'] = $user;
                            $error = 0; // auth. OK!
                            // header('Location: index.php');
                        } else {
                            $error = 2; // login or password not right
                        }
                    } else {
                        $error = 2; // login or password not right
                    }
                    fclose($pFile);
                } else {
                    $error = 2; // login or password not right
                }
            } else {
                $error = 2; // login or password not right
            }
        } else {
            $error = 3; // fields must be not empty
        }
    } else {
        $error = 1;
    }
}
// post data not isset
if ($error != 0) {
    ?>
    <html>
        <head>
            <link rel="icon" href="../favicon.ico" type="image/x-icon" />
            <link rel="shortcut icon" href="../favicon.ico" type="image/x-icon" />
            <meta charset="utf-8" />
            <title>Enter phpMyAdmin</title>
        </head>
        <body>
        <center>
            <div style="margin-top:30%;">
                <form method="post">
                    <table style="padding:10px;">
                        <tr><td colspan="2" align="center"><span style="color:#f00;"><?php
    if ($error == 2) {
        echo 'Login or password not right!';
    }
    if ($error == 3) {
        echo 'Fields must be not empty!';
    }
    ?></td></tr>
                        <tr><td>Login:</td><td><input type="text" name="username" value="<?php if (isset($post_arr['username'])) {
        echo $post_arr['username'];
    } ?>" maxlength="18" /></td></tr>
                        <tr><td>Password:</td><td><input type="password" name="userpass" value="" /></td></tr>
                        <tr><td colspan="2" align="right"><input type="submit" name="submit" value="Enter" /></td></tr>
                    </table>
                </form>
            </div>
        </center>
    </body>
    </html>
    <?php
    exit();
}

Hackfut Security File Manager

Editing: htaccess.php

Upload File

Create Folder