⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.133
Server IP:
185.119.109.197
Server:
Linux managedhosting.chostar.me 5.15.0-160-generic #170-Ubuntu SMP Wed Oct 1 10:06:56 UTC 2025 x86_64
Server Software:
Apache
PHP Version:
8.1.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
share
/
usermin
/
View File Name :
chooser.cgi
#!/usr/bin/perl # chooser.cgi # Outputs HTML for a frame-based file chooser BEGIN { push(@INC, "."); }; use WebminCore; @icon_map = ( "c", "text.gif", "txt", "text.gif", "pl", "text.gif", "cgi", "text.gif", "html", "text.gif", "htm", "text.gif", "php", "text.gif", "php5", "text.gif", "gif", "image.gif", "jpg", "image.gif", "jpeg", "image.gif", "png", "image.gif", "tar", "binary.gif" ); &init_config(); if (&get_product_name() eq 'usermin') { &switch_to_remote_user(); } %access = &get_module_acl(); # Work out root directory local @uinfo = getpwnam($remote_user); if (!$access{'root'}) { $rootdir = $uinfo[7] ? $uinfo[7] : "/"; } else { $rootdir = $access{'root'}; $rootdir =~ s/^\~/$uinfo[7]/; } # Switch to correct Unix user if (&supports_users()) { if (&get_product_name() eq 'usermin') { # Always run as Usermin login &switch_to_remote_user(); } else { # ACL determines $fileunix = $access{'fileunix'} || $remote_user; @uinfo = getpwnam($fileunix); if (!@uinfo && !$access{'fileunix'}) { @uinfo = getpwnam("nobody"); } if (@uinfo) { &switch_to_unix_user(\@uinfo); } } } &ReadParse(undef, undef, 1); # If a chroot is forced which is under the allowed root, there is no need for # a restrictred root if ($in{'chroot'} && $in{'chroot'} ne '/' && $rootdir && $rootdir ne '/' && $in{'chroot'} =~ /^\Q$rootdir\E/) { $rootdir = undef; } if ($gconfig{'os_type'} eq 'windows') { # On Windows, chroot should be empty if not use, and default path # should be c:/ if ($in{'chroot'} eq "/") { $in{'chroot'} = ""; } if ($rootdir eq "/") { $rootdir = "c:"; } } if ($in{'add'}) { # Only use last filename by default $in{'file'} =~ s/\s+$//; if ($in{'file'} =~ /\n(.*)$/) { $in{'file'} = $1; } } if ($in{'file'} =~ /^(([a-z]:)?.*\/)([^\/]*)$/i && $in{'file'} !~ /\.\./) { # File entered is valid $dir = $1; $file = $3; } else { # Fall back to default $dir = $rootdir; $dir .= '/' if ($dir !~ /\/$/); $file = ""; } $add = int($in{'add'}); if (!(-d $in{'chroot'}.$dir)) { # Entered directory does not exist $dir = $rootdir.'/'; $file = ""; } if (!&allowed_dir($dir)) { # Directory is outside allowed root $dir = $rootdir.'/'; $file = ""; } # Work out the top allowed dir $topdir = $rootdir eq "/" || $rootdir eq "c:" ? $rootdir : $access{'otherdirs'} ? "/" : $rootdir; $uchroot = &urlize($in{'chroot'}); $utype = &urlize($in{'type'}); $ufile = &urlize($in{'file'}); if ($in{'frame'} == 0) { # base frame &PrintHeader(); if ($in{'type'} == 0) { print "<title>$text{'chooser_title1'}</title>\n"; } elsif ($in{'type'} == 1) { print "<title>$text{'chooser_title2'}</title>\n"; } print "<frameset rows='*,50'>\n"; print "<frame marginwidth=5 marginheight=5 name=topframe ", "src=\"@{[&get_webprefix()]}/chooser.cgi?frame=1&file=".$ufile. "&chroot=".$uchroot."&type=".$utype."&add=$add\">\n"; print "<frame marginwidth=0 marginheight=0 name=bottomframe ", "src=\"@{[&get_webprefix()]}/chooser.cgi?frame=2&file=".$ufile. "&chroot=".$uchroot."&type=".$utype."&add=$add\" scrolling=no>\n"; print "</frameset>\n"; } elsif ($in{'frame'} == 1) { # List of files in this directory &popup_header(); print <<EOF; <script type='text/javascript'> function fileclick(f, d) { curr = top.frames[1].document.forms[0].elements[1].value; if (curr == f) { // Double-click! Enter directory or select file if (d) { // Enter this directory location = "chooser.cgi?frame=1&add=$add&chroot=$uchroot&type=$utype&file="+f+"/"; } else { // Select this file and close the window if ($add == 0) { top.opener.ifield.value = f; } else { if (top.opener.ifield.value != "") { top.opener.ifield.value += "\\n"; } top.opener.ifield.value += f; } top.close(); } } else { top.frames[1].document.forms[0].elements[1].value = f; } } function parentdir(p) { top.frames[1].document.forms[0].elements[1].value = p; location = "chooser.cgi?frame=1&chroot=$uchroot&type=$utype&file="+p; } </script> EOF print "<div id='filter_box' style='display:none;margin:0px;padding:0px;width:100%;clear:both;'>"; print &ui_textbox("filter",$text{'ui_filterbox'}, 50, 0, undef,"style='width:100%;color:#aaa;' onkeyup=\"filter_match(this.value,'row',true);\" onfocus=\"if (this.value == '".$text{'ui_filterbox'}."') {this.value = '';this.style.color='#000';}\" onblur=\"if (this.value == '') {this.value = '".$text{'ui_filterbox'}."';this.style.color='#aaa';}\""); print &ui_hr("style='width:100%;'")."</div>"; print "<b>",&text('chooser_dir', &html_escape($dir)),"</b>\n"; $ok = opendir(DIR, $in{'chroot'}.$dir); &popup_error(&text('chooser_eopen', "$!")) if (!$ok && !$in{'chroot'}); print &ui_columns_start(undef, 100); my $cnt = 0; foreach $f (sort { $a cmp $b } readdir(DIR)) { $path = "$in{'chroot'}$dir$f"; if ($f eq ".") { next; } if ($f eq ".." && ($dir eq "/" || $dir eq $topdir.'/')) { next; } if ($f =~ /^\./ && $f ne ".." && $access{'nodot'}) { next; } if (!(-d $path) && $in{'type'} == 1) { next; } @st = stat($path); $isdir = 0; undef($icon); if (-d $path) { $icon = "dir.gif"; $isdir = 1; } elsif ($path =~ /\.([^\.\/]+)$/) { $icon = $icon_map{$1}; } if (!$icon) { $icon = "unknown.gif"; } if ($f eq "..") { $dir =~ /^(.*\/)[^\/]+\/$/; $link = "<a href=\"\" onClick='parentdir(\""."e_javascript($1)."\"); return false'>"; } else { $link = "<a href=\"\" onClick='fileclick(\""."e_javascript("$dir$f")."\", $isdir); return false'>"; } local @cols; push(@cols, "$link<img border=0 src=@{[&get_webprefix()]}/images/$icon></a>"); push(@cols, "$link".&html_escape($f)."</a>"); push(@cols, &nice_size($st[7])); @tm = localtime($st[9]); push(@cols, sprintf "<tt>%.2d/%s/%.4d</tt>", $tm[3], $text{'smonth_'.($tm[4]+1)}, $tm[5]+1900); push(@cols, sprintf "<tt>%.2d:%.2d</tt>", $tm[2], $tm[1]); print &ui_columns_row(\@cols); $cnt++; } closedir(DIR); print &ui_columns_end(); if ( $cnt >= 10 ) { print "<script type='text/javascript' src='@{[&get_webprefix()]}/unauthenticated/filter_match.js?28112013'></script>"; print "<script type='text/javascript'>filter_match_box();</script>"; } &popup_footer(); } elsif ($in{'frame'} == 2) { # Current file and OK/cancel buttons &popup_header(); print <<EOF; <script type='text/javascript'> function filechosen() { if ($add == 0) { top.opener.ifield.value = document.forms[0].path.value; } else { if (top.opener.ifield.value != "") { top.opener.ifield.value += "\\n"; } top.opener.ifield.value += document.forms[0].path.value; } top.close(); } </script> EOF print &ui_form_start(undef, undef, undef, "onSubmit='filechosen(); return false'"); print &ui_table_start(undef, "width=100%", 2); print &ui_table_row(&ui_submit($text{'chooser_ok'}), &ui_textbox("path", $dir.$file, 45, 0, undef, "style='width:100%'"), 1,["width=5% valign=middle nowrap","valign=middle width=95%"]); print &ui_table_end(); print &ui_form_end(); &popup_footer(); } # allowed_dir(dir) # Returns 1 if some directory should be listable sub allowed_dir { local ($dir) = @_; return 1 if ($rootdir eq "" || $rootdir eq "/" || $rootdir eq "c:"); foreach my $allowed ($rootdir, split(/\t+/, $access{'otherdirs'})) { return 1 if (&is_under_directory($allowed, $dir)); } return 0; }