403Webshell
Server IP : 62.72.47.131  /  Your IP : 216.73.217.34
Web Server : Apache/2.4.66 (Debian)
System : Linux 975cdb959a49 5.14.0-611.55.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 19 15:19:29 EDT 2026 x86_64
User :  ( 501)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-content/plugins/wp-file-manager/lib/php/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-content/plugins/wp-file-manager/lib/php/chars-test.php
<?php

setlocale(LC_ALL, 'en_US.UTF-8');

header('Content-Type: text/html; charset=utf-8');
echo 'белая собака';
echo strToLower('белая собака');

$orig = 'ёЁйЙØÅŻ';
echo $orig . '<br>';
$path = '../../../files/tmp/';

if (!touch($path . $orig)) {
    exit('unable to create file');
}


$orig = str_replace('"', '', json_encode($orig));
echo "original: " . $orig . '<br>';

$origParts = explode('\\', $orig);
array_shift($origParts);

//                     й                 ё              Й               Ё              Ø         Å
$patterns = array("\u0438\u0306", "\u0435\u0308", "\u0418\u0306", "\u0415\u0308", "\u00d8A", "\u030a");
$replace = array("\u0439", "\u0451", "\u0419", "\u0401", "\u00d8", "\u00c5");


foreach (scandir($path) as $f) {
    if ($f != '.' && $f != '..' && substr($f, 0, 1) != '.') {

        // echo mb_detect_encoding($f);

        $name = str_replace('"', '', json_encode($f));
        echo "before replace: $name<br>";
        // $name = str_replace($patterns, $replace, $name);
        // echo "after replace: $name<br>";
        break;
    }
}


$parts = explode('\\', $name);
array_shift($parts);


$diff = array_diff($parts, $origParts);

if (count($diff)) {
    echo "Following symbols not found in original";
    echo '<pre>';
    print_r($diff);
    echo '</pre>';
} else {
    echo "OK";
}

Youez - 2016 - github.com/yon3zu
LinuXploit