File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-5.0.4-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-5.0.4-all-languages /

📁 ..
📄 CONTRIBUTING.md(2.53 KB)
📄 ChangeLog(32.24 KB)
📄 LICENSE(17.67 KB)
📄 README(1.48 KB)
📄 RELEASE-DATE-5.0.4(29 B)
📄 ajax.php(1.96 KB)
📄 browse_foreigners.php(1.77 KB)
📄 changelog.php(3.04 KB)
📄 chk_rel.php(1.16 KB)
📄 composer.json(3.47 KB)
📄 composer.lock(170.01 KB)
📄 config.inc.php(317 B)
📁 config_template
📄 db_central_columns.php(4.5 KB)
📄 db_datadict.php(730 B)
📄 db_designer.php(7.6 KB)
📄 db_events.php(1.96 KB)
📄 db_export.php(5 KB)
📄 db_import.php(1.08 KB)
📄 db_multi_table_query.php(1.42 KB)
📄 db_operations.php(9.64 KB)
📄 db_qbe.php(5.19 KB)
📄 db_routines.php(2.2 KB)
📄 db_search.php(2.17 KB)
📄 db_sql.php(1.18 KB)
📄 db_sql_autocomplete.php(1.01 KB)
📄 db_sql_format.php(613 B)
📄 db_structure.php(2 KB)
📄 db_tracking.php(3.58 KB)
📄 db_triggers.php(1.96 KB)
📁 doc
📄 error_report.php(4.64 KB)
📁 examples
📄 export.php(16.93 KB)
📄 favicon.ico(21.96 KB)
📄 gis_data_editor.php(3.83 KB)
📄 import.php(24.03 KB)
📄 import_status.php(3.65 KB)
📄 index.php(3.01 KB)
📁 js
📁 libraries
📄 license.php(1021 B)
📄 lint.php(1.52 KB)
📁 locale
📁 login
📄 logout.php(437 B)
📄 navigation.php(2.58 KB)
📄 normalization.php(4.48 KB)
📄 package.json(1.42 KB)
📄 phpinfo.php(633 B)
📄 prefs_forms.php(3.02 KB)
📄 prefs_manage.php(7.29 KB)
📄 prefs_twofactor.php(1.93 KB)
📄 print.css(1.18 KB)
📄 robots.txt(26 B)
📄 schema_export.php(861 B)
📄 server_binlog.php(733 B)
📄 server_collations.php(626 B)
📄 server_databases.php(1.74 KB)
📄 server_engines.php(797 B)
📄 server_export.php(1.22 KB)
📄 server_import.php(833 B)
📄 server_plugins.php(595 B)
📄 server_privileges.php(14.8 KB)
📄 server_replication.php(1.57 KB)
📄 server_sql.php(1.06 KB)
📄 server_status.php(1.01 KB)
📄 server_status_advisor.php(885 B)
📄 server_status_monitor.php(3.22 KB)
📄 server_status_processes.php(1.78 KB)
📄 server_status_queries.php(1.34 KB)
📄 server_status_variables.php(1.31 KB)
📄 server_user_groups.php(2.16 KB)
📄 server_variables.php(1.08 KB)
📄 services.yml(3.09 KB)
📄 services_controllers.yml(8.4 KB)
📁 setup
📄 show_config_errors.php(1.23 KB)
📁 sql
📄 sql.php(6.73 KB)
📄 tbl_addfield.php(4.33 KB)
📄 tbl_change.php(6.86 KB)
📄 tbl_chart.php(1.13 KB)
📄 tbl_create.php(3.92 KB)
📄 tbl_export.php(2.9 KB)
📄 tbl_find_replace.php(1.29 KB)
📄 tbl_get_field.php(2.05 KB)
📄 tbl_gis_visualization.php(1.64 KB)
📄 tbl_import.php(895 B)
📄 tbl_indexes.php(1.23 KB)
📄 tbl_operations.php(15.43 KB)
📄 tbl_recent_favorite.php(590 B)
📄 tbl_relation.php(2.81 KB)
📄 tbl_replace.php(17.51 KB)
📄 tbl_row_action.php(5.48 KB)
📄 tbl_select.php(1.29 KB)
📄 tbl_sql.php(1.23 KB)
📄 tbl_structure.php(2.31 KB)
📄 tbl_tracking.php(5.33 KB)
📄 tbl_triggers.php(265 B)
📄 tbl_zoom_select.php(1.22 KB)
📁 templates
📁 themes
📄 themes.php(894 B)
📄 transformation_overview.php(846 B)
📄 transformation_wrapper.php(5.26 KB)
📄 url.php(1.56 KB)
📄 user_password.php(2.18 KB)
📁 vendor
📄 version_check.php(1.17 KB)
📄 view_create.php(7.02 KB)
📄 view_operations.php(3.45 KB)
📄 yarn.lock(109.31 KB)

Editing: prefs_manage.php

<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
 * User preferences management page
 *
 * @package PhpMyAdmin
 */
declare(strict_types=1);

use PhpMyAdmin\Config\ConfigFile;
use PhpMyAdmin\Config\Forms\User\UserFormList;
use PhpMyAdmin\Core;
use PhpMyAdmin\File;
use PhpMyAdmin\Message;
use PhpMyAdmin\Relation;
use PhpMyAdmin\Response;
use PhpMyAdmin\Template;
use PhpMyAdmin\ThemeManager;
use PhpMyAdmin\UserPreferences;
use PhpMyAdmin\UserPreferencesHeader;

if (! defined('ROOT_PATH')) {
    define('ROOT_PATH', __DIR__ . DIRECTORY_SEPARATOR);
}

/**
 * Gets some core libraries and displays a top message if required
 */
require_once ROOT_PATH . 'libraries/common.inc.php';

/** @var Template $template */
$template = $containerBuilder->get('template');
/** @var Relation $relation */
$relation = $containerBuilder->get('relation');

$userPreferences = new UserPreferences();

$cf = new ConfigFile($GLOBALS['PMA_Config']->base_settings);
$userPreferences->pageInit($cf);
$response = Response::getInstance();

$error = '';
if (isset($_POST['submit_export'])
    && isset($_POST['export_type'])
    && $_POST['export_type'] == 'text_file'
) {
    // export to JSON file
    $response->disable();
    $filename = 'phpMyAdmin-config-' . urlencode(Core::getenv('HTTP_HOST')) . '.json';
    Core::downloadHeader($filename, 'application/json');
    $settings = $userPreferences->load();
    echo json_encode($settings['config_data'], JSON_PRETTY_PRINT);
    exit;
} elseif (isset($_POST['submit_export'])
    && isset($_POST['export_type'])
    && $_POST['export_type'] == 'php_file'
) {
    // export to JSON file
    $response->disable();
    $filename = 'phpMyAdmin-config-' . urlencode(Core::getenv('HTTP_HOST')) . '.php';
    Core::downloadHeader($filename, 'application/php');
    $settings = $userPreferences->load();
    echo '/* ' . __('phpMyAdmin configuration snippet') . " */\n\n";
    echo '/* ' . __('Paste it to your config.inc.php') . " */\n\n";
    foreach ($settings['config_data'] as $key => $val) {
        echo '$cfg[\'' . str_replace('/', '\'][\'', $key) . '\'] = ';
        echo var_export($val, true) . ";\n";
    }
    exit;
} elseif (isset($_POST['submit_get_json'])) {
    $settings = $userPreferences->load();
    $response->addJSON('prefs', json_encode($settings['config_data']));
    $response->addJSON('mtime', $settings['mtime']);
    exit;
} elseif (isset($_POST['submit_import'])) {
    // load from JSON file
    $json = '';
    if (isset($_POST['import_type'])
        && $_POST['import_type'] == 'text_file'
        && isset($_FILES['import_file'])
        && $_FILES['import_file']['error'] == UPLOAD_ERR_OK
        && is_uploaded_file($_FILES['import_file']['tmp_name'])
    ) {
        $import_handle = new File($_FILES['import_file']['tmp_name']);
        $import_handle->checkUploadedFile();
        if ($import_handle->isError()) {
            $error = $import_handle->getError();
        } else {
            // read JSON from uploaded file
            $json = $import_handle->getRawContent();
        }
    } else {
        // read from POST value (json)
        $json = isset($_POST['json']) ? $_POST['json'] : null;
    }

// hide header message
    $_SESSION['userprefs_autoload'] = true;

$config = json_decode($json, true);
    $return_url = isset($_POST['return_url']) ? $_POST['return_url'] : null;
    if (! is_array($config)) {
        if (! isset($error)) {
            $error = __('Could not import configuration');
        }
    } else {
        // sanitize input values: treat them as though
        // they came from HTTP POST request
        $form_display = new UserFormList($cf);
        $new_config = $cf->getFlatDefaultConfig();
        if (! empty($_POST['import_merge'])) {
            $new_config = array_merge($new_config, $cf->getConfigArray());
        }
        $new_config = array_merge($new_config, $config);
        $_POST_bak = $_POST;
        foreach ($new_config as $k => $v) {
            $_POST[str_replace('/', '-', $k)] = $v;
        }
        $cf->resetConfigData();
        $all_ok = $form_display->process(true, false);
        $all_ok = $all_ok && ! $form_display->hasErrors();
        $_POST = $_POST_bak;

if (! $all_ok && isset($_POST['fix_errors'])) {
            $form_display->fixErrors();
            $all_ok = true;
        }
        if (! $all_ok) {
            // mimic original form and post json in a hidden field
            echo UserPreferencesHeader::getContent($template, $relation);

echo $template->render('preferences/manage/error', [
                'form_errors' => $form_display->displayErrors(),
                'json' => $json,
                'import_merge' => isset($_POST['import_merge']) ? $_POST['import_merge'] : null,
                'return_url' => $return_url,
            ]);
            exit;
        }

// check for ThemeDefault
        $params = [];
        $tmanager = ThemeManager::getInstance();
        if (isset($config['ThemeDefault'])
            && $tmanager->theme->getId() != $config['ThemeDefault']
            && $tmanager->checkTheme($config['ThemeDefault'])
        ) {
            $tmanager->setActiveTheme($config['ThemeDefault']);
            $tmanager->setThemeCookie();
        }
        if (isset($config['lang'])
            && $config['lang'] != $GLOBALS['lang']
        ) {
            $params['lang'] = $config['lang'];
        }

// save settings
        $result = $userPreferences->save($cf->getConfigArray());
        if ($result === true) {
            if ($return_url) {
                $query = PhpMyAdmin\Util::splitURLQuery($return_url);
                $return_url = parse_url($return_url, PHP_URL_PATH);

foreach ($query as $q) {
                    $pos = mb_strpos($q, '=');
                    $k = mb_substr($q, 0, $pos);
                    if ($k == 'token') {
                        continue;
                    }
                    $params[$k] = mb_substr($q, $pos + 1);
                }
            } else {
                $return_url = 'prefs_manage.php';
            }
            // reload config
            $GLOBALS['PMA_Config']->loadUserPreferences();
            $userPreferences->redirect($return_url, $params);
            exit;
        } else {
            $error = $result;
        }
    }
} elseif (isset($_POST['submit_clear'])) {
    $result = $userPreferences->save([]);
    if ($result === true) {
        $params = [];
        $GLOBALS['PMA_Config']->removeCookie('pma_collaction_connection');
        $GLOBALS['PMA_Config']->removeCookie('pma_lang');
        $userPreferences->redirect('prefs_manage.php', $params);
        exit;
    } else {
        $error = $result;
    }
    exit;
}

$response = Response::getInstance();
$header   = $response->getHeader();
$scripts  = $header->getScripts();
$scripts->addFile('config.js');

echo UserPreferencesHeader::getContent($template, $relation);
if ($error) {
    if (! $error instanceof Message) {
        $error = Message::error($error);
    }
    $error->getDisplay();
}

echo $template->render('preferences/manage/main', [
    'error' => $error,
    'max_upload_size' => $GLOBALS['max_upload_size'],
    'exists_setup_and_not_exists_config' => @file_exists(ROOT_PATH . 'setup/index.php') && ! @file_exists(CONFIG_FILE),
]);

if ($response->isAjax()) {
    $response->addJSON('disableNaviSettings', true);
} else {
    define('PMA_DISABLE_NAVI_SETTINGS', true);
}

Hackfut Security File Manager

Editing: prefs_manage.php

Upload File

Create Folder