403Webshell
Server IP : 62.173.141.34  /  Your IP : 216.73.217.88
Web Server : Apache/2.4.63 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2
System : Linux server7.msonline.ru 5.15.0-179-generic #189-Ubuntu SMP Tue May 5 18:20:56 UTC 2026 x86_64
User : izihss ( 1005)
PHP Version : 7.4.33
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/izihss/web/izihss.ru/public_html/wp-content/plugins/wp-filebase/classes/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/izihss/web/izihss.ru/public_html/wp-content/plugins/wp-filebase/classes/AdminGuiSettings.php
<?php

class WPFB_AdminGuiSettings {

	static function Display() {
		global $wpdb;

		wpfb_loadclass('Admin', 'Output');
		wpfb_call('Output', 'PrintJS');

		wp_register_script('rvera-image-picker', WPFB_PLUGIN_URI . 'bower_components/image-picker/image-picker/image-picker.min.js', array('jquery'), WPFB_VERSION);
		wp_register_style('rvera-image-picker', WPFB_PLUGIN_URI .  'bower_components/image-picker/image-picker/image-picker.css', array(), WPFB_VERSION);

		if (!current_user_can('manage_options')) {
			wp_die(__('Cheatin&#8217; uh?') . '<!-- manage_options -->');
		}

		// nonce and referer check (security)
		if ((!empty($_POST['reset']) || !empty($_POST['submit'])) && !check_admin_referer('wpfb-update-settings', 'wpfb-nonce'))
			wp_die(__('Cheatin&#8217; uh?'));

		$post = stripslashes_deep($_POST);

		$action = (!empty($post['action']) ? $post['action'] : (!empty($_GET['action']) ? $_GET['action'] : '' ) );
		$messages = array();
		$errors = array();

		$options = get_option(WPFB_OPT_NAME);
		$option_fields = WPFB_Admin::SettingsSchema();

		if (isset($post['reset'])) {
			// keep templates
			$file_tpl = WPFB_Core::$settings->template_file;
			$cat_tpl = WPFB_Core::$settings->template_cat;
			wpfb_loadclass('Setup');
			WPFB_Setup::ResetOptions();

			WPFB_Core::UpdateOption('template_file', $file_tpl);
			WPFB_Core::UpdateOption('template_cat', $cat_tpl);

			$new_options = get_option(WPFB_OPT_NAME);
			$messages = array_merge($messages, WPFB_Admin::SettingsUpdated($options, $new_options));
			unset($new_options);
			$messages[] = __('Settings reseted.', 'wp-filebase');
			$options = get_option(WPFB_OPT_NAME);
		} elseif (isset($post['submit'])) {
			// cleanup
			foreach ($option_fields as $opt_tag => $opt_data) {
				if (isset($post[$opt_tag])) {
					if (!is_array($post[$opt_tag]))
						$post[$opt_tag] = trim($post[$opt_tag]);

					switch ($opt_data['type']) {
						case 'number':
							$post[$opt_tag] = intval($post[$opt_tag]);
							break;
						case 'select':
							// check if value is in options array, if not set to default
							if (!in_array($post[$opt_tag], array_keys($opt_data['options'])))
								$post[$opt_tag] = $opt_data['default'];
							break;

						case 'roles':
							$post[$opt_tag] = array_values(array_filter($post[$opt_tag]));
							// the following must not be removed! if the roles array is empty, permissions are assumed to be set for everyone!
							// so make sure that the admin is explicitly set!
							if (!empty($opt_data['not_everyone']) && !in_array('administrator', $post[$opt_tag])) {
								if (!is_array($post[$opt_tag]))
									$post[$opt_tag] = array();
								array_unshift($post[$opt_tag], 'administrator');
							}
							break;

						case 'cat':
							$post[$opt_tag] = (empty($post[$opt_tag]) || is_null($cat = WPFB_Category::GetCat($post[$opt_tag]))) ? 0 : intval($post[$opt_tag]);
							break;
					}
				}
			}

			$post['upload_path'] = str_replace(ABSPATH, '', $post['upload_path']);
			$options['upload_path'] = str_replace(ABSPATH, '', $options['upload_path']);

			$post['download_base'] = trim($post['download_base'], '/');
			if (WPFB_Admin::WPCacheRejectUri($post['download_base'] . '/', $options['download_base'] . '/'))
				$messages[] = sprintf(__('/%s/ added to rejected URIs list of WP Super Cache.', 'wp-filebase'), $post['download_base']);

			$tpl_file = ($post['template_file']);
			$tpl_cat = ($post['template_cat']);
			if (!empty($tpl_file) && (empty($options['template_file_parsed']) || $tpl_file != $options['template_file'])) {
				wpfb_loadclass('TplLib');
				$tpl_file = WPFB_TplLib::Parse($tpl_file);
				$result = WPFB_TplLib::Check($tpl_file);

				if (!$result['error']) {
					$options['template_file_parsed'] = $tpl_file;
					$messages[] = __('File template successfully parsed.', 'wp-filebase');
				} else {
					$errors[] = sprintf(__('Could not parse template: error (%s) in line %s.', 'wp-filebase'), $result['msg'], $result['line']);
				}
			}

			if (!empty($tpl_cat) && (empty($options['template_cat_parsed']) || $tpl_cat != $options['template_cat'])) {
				wpfb_loadclass('TplLib');
				$tpl_cat = WPFB_TplLib::Parse($tpl_cat);
				$result = WPFB_TplLib::Check($tpl_cat);

				if (!$result['error']) {
					$options['template_cat_parsed'] = $tpl_cat;
					$messages[] = __('Category template successfully parsed.', 'wp-filebase');
				} else {
					$errors[] = sprintf(__('Could not parse template: error (%s) in line %s.', 'wp-filebase'), $result['msg'], $result['line']);
				}
			}

			$fb_sub_pages = get_pages(array('child_of' => $options['file_browser_post_id']));
			if ($options['file_browser_post_id'] > 0 && count($fb_sub_pages)) {
				$messages[] = sprintf(__('Warning: The Filebrowser page <b>%s</b> has at least one subpage <b>%s</b>. This will cause unexpected behavior, since all requests to the subpages are redirected to the File Browser Page. Please choose a Page that does not have any subpages for File Browser.', 'wp-filebase'), get_the_title($post['file_browser_post_id']), get_the_title($fb_sub_pages[0]->ID));
			}

			// save options
			foreach ($option_fields as $opt_tag => $opt_data) {
				$val = isset($post[$opt_tag]) ? $post[$opt_tag] : '';
				$options[$opt_tag] = ($val);
			}

			// make sure a short tag exists, if not append one
			$select_opts = array('languages', 'platforms', 'licenses', 'requirements', 'custom_fields');
			foreach ($select_opts as $opt_tag) {
				if (empty($options[$opt_tag])) {
					$options[$opt_tag] = '';
					continue;
				}
				$lines = explode("\n", $options[$opt_tag]);
				$lines2 = array();
				for ($i = 0; $i < count($lines); $i++) {
					$lines[$i] = str_replace('||', '|', trim($lines[$i], "|\r"));
					if (empty($lines[$i]) || $lines[$i] == '|')
						continue;
					$pos = strpos($lines[$i], '|');
					if ($pos <= 0)
						$lines[$i] .= '|' . sanitize_key(substr($lines[$i], 0, min(8, strlen($lines[$i]))));
					$lines2[] = $lines[$i];
				}
				$options[$opt_tag] = implode("\n", $lines2);
			}

			$old_options = get_option(WPFB_OPT_NAME);
			update_option(WPFB_OPT_NAME, $options);
			WPFB_Core::$settings = (object) $options;

			$messages = array_merge($messages, WPFB_Admin::SettingsUpdated($old_options, $options));

			if (count($errors) == 0)
				$messages[] = __('Settings updated.', 'wp-filebase');

			//refresh any description which can contain opt values
			$option_fields = WPFB_Admin::SettingsSchema();
		}

		if (WPFB_Core::$settings->allow_srv_script_upload)
			$messages[] = __('WARNING: Script upload enabled!', 'wp-filebase');

		$upload_path = WPFB_Core::$settings->upload_path;
		if (!empty($old_options) && path_is_absolute($upload_path) && !path_is_absolute($old_options['upload_path'])) {
			$rel_path = str_replace('\\', '/', $upload_path);
			$rel_path = substr($rel_path, strpos($rel_path, '/') + 1);
			$messages[] = sprintf(__('NOTICE: The upload path <code>%s</code> is rooted to the filesystem. You should remove the leading slash if you want to use a folder inside your Wordpress directory (i.e: <code>%s</code>)', 'wp-filebase'), $upload_path, $rel_path);
		}

		$action_uri = admin_url('admin.php') . '?page=' . $_GET['page'] . '&amp;updated=true';

		if (!empty($messages)) :
			$message = '';
			foreach ($messages as $msg)
				$message .= '<p>' . $msg . '</p>';
			?>
			<div id="message" class="updated fade"><?php echo $message; ?></div>
			<?php
		endif;

		if (!empty($errors)) :
			$error = '';
			foreach ($errors as $err)
				$error .= '<p>' . $err . '</p>';
			?>
			<div id="message" class="error fade"><?php echo $error; ?></div>
		<?php endif; ?>
		<script type="text/javascript">
			/* Option tabs */
			jQuery(document).ready(function () {
				try {
					jQuery('#wpfb-tabs').tabs();
				} catch (ex) {
				}
				/*if(typeof(CKEDITOR) != 'undefined') {
				 CKEDITOR.plugins.addExternal('wpfilebase', ajaxurl+'/../../wp-content/plugins/wp-filebase/extras/ckeditor/');
				 alert( ajaxurl+'/../../wp-content/plugins/wp-filebase/extras/ckeditor/');
				 }*/
			});
		</script>

		<div class="wrap">
			<div id="icon-options-general" class="icon32"><br /></div>
			<h2><?php
				echo WPFB_PLUGIN_NAME;
				echo ' ';
				_e("Settings"/* def */);
				?></h2>

			<form method="post" action="<?php echo $action_uri; ?>" name="wpfilebase-options">
		<?php wp_nonce_field('wpfb-update-settings', 'wpfb-nonce'); ?>
				<p class="submit">
					<input type="submit" name="submit" value="<?php _e('Save Changes'/* def */) ?>" class="button-primary" />
				</p>
				<?php
				$misc_tags = array('disable_id3', 'search_id3', 'thumbnail_path', 'use_path_tags', 'no_name_formatting');
				if (function_exists('wp_admin_bar_render'))
					$misc_tags[] = 'admin_bar';

				$limits = array('bitrate_unregistered', 'bitrate_registered', 'traffic_day', 'traffic_month', 'traffic_exceeded_msg', 'file_offline_msg', 'daily_user_limits', 'daily_limit_subscriber', 'daily_limit_contributor', 'daily_limit_author', 'daily_limit_editor', 'daily_limit_exceeded_msg');


				$option_categories = array(
					 __('Common', 'wp-filebase') => array('upload_path', 'search_integration' /* 'cat_drop_down' */),
					 __('Display', 'wp-filebase') => array('file_date_format', 'thumbnail_size', 'auto_attach_files', 'attach_loop', 'attach_pos', 'filelist_sorting', 'filelist_sorting_dir', 'filelist_num', /* TODO: remove? 'parse_tags_rss', */ 'decimal_size_format', 'search_result_tpl', 'disable_css'),
					 __('File Browser', 'wp-filebase') => array('file_browser_post_id', 'file_browser_cat_sort_by', 'file_browser_cat_sort_dir', 'file_browser_file_sort_by', 'file_browser_file_sort_dir', 'file_browser_fbc', 'late_script_loading',  'folder_icon',  'small_icon_size',
						  'disable_footer_credits', 'footer_credits_style',
						  						  'file_browser_inline_add',
					 ),
					 __('Download', 'wp-filebase') => array( 'hide_links', 'disable_permalinks', 'download_base', 'force_download', 'range_download', 'http_nocache', 'ignore_admin_dls', 'accept_empty_referers', 'allowed_referers' /* ,'dl_destroy_session' */, 'use_fpassthru'),
					 __('Form Presets', 'wp-filebase') => array('default_author', 'default_roles', 'default_cat', 'default_direct_linking', 'languages', 'platforms', 'licenses', 'requirements', 'custom_fields'),
					 __('Limits', 'wp-filebase') => $limits,
					 __('Security', 'wp-filebase') => array('allow_srv_script_upload', 'fext_blacklist', 'frontend_upload', 'hide_inaccessible', 'inaccessible_msg', 'inaccessible_redirect', 'cat_inaccessible_msg', 'login_redirect_src', 'protect_upload_path', 'private_files'),
					 __('Templates and Scripts', 'wp-filebase') => array('template_file', 'template_cat', 'dlclick_js' ),
					 __('Sync', 'wp-filebase') => array('cron_sync', 'base_auto_thumb', 'remove_missing_files', 'fake_md5' ),
					 __('Misc') => $misc_tags,
				);
				?>
				<div id="wpfb-tabs">
					<ul class="wpfb-tab-menu">
						<?php
						foreach ($option_categories as $key => $val) {
							echo '<li><a href="#' . sanitize_title($key) . '">' . esc_html($key) . '</a></li>';
						}
						?>
					</ul>
					<?php
					$page_option_list = '';
					$n = 0;
					foreach ($option_categories as $opt_cat => $opt_cat_fields) {
						//echo "\n".'<h3>'.$opt_cat.'</h3>';	
						echo "\n\n" . '<div id="' . sanitize_title($opt_cat) . '" class="wpfilebase-opttab"><h3>' . $opt_cat . '</h3><table class="form-table">';
						foreach ($opt_cat_fields as $opt_tag) {

							$field_data = $option_fields[$opt_tag];
							$opt_val = $options[$opt_tag];
							echo "\n" . '<tr valign="top">' . "\n" . '<th scope="row">' . $field_data['title'] . '</th>' . "\n" . '<td>';
							$style_class = '';
							if (!empty($field_data['class']))
								$style_class .= ' class="' . $field_data['class'] . '"';
							if (!empty($field_data['style']))
								$style_class .= ' style="' . $field_data['style'] . '"';
							switch ($field_data['type']) {
								case 'text':
								case 'number':
								case 'checkbox':
									echo '<input name="' . $opt_tag . '" type="' . $field_data['type'] . '" id="' . $opt_tag . '"';
									echo ((!empty($field_data['class'])) ? ' class="' . $field_data['class'] . '"' : '');
									if ($field_data['type'] == 'checkbox') {
										echo ' value="1" ';
										checked('1', $opt_val);
									} elseif ($field_data['type'] == 'number')
										echo ' value="' . intval($opt_val) . '" size="5" style="text-align: right"';
									else {
										echo ' value="' . esc_attr($opt_val) . '"';
										if (isset($field_data['size']))
											echo ' size="' . (int) $field_data['size'] . '"';
									}
									echo $style_class . ' />';
									break;

								case 'textarea':
									$code_edit = (strpos($opt_tag, 'template_') !== false || (isset($field_data['class']) && strpos($field_data['class'], 'code') !== false));
									$nowrap = !empty($field_data['nowrap']);
									echo '<textarea name="' . $opt_tag . '" id="' . $opt_tag . '"';
									if ($nowrap || $code_edit) {
										echo ' cols="100" wrap="off" style="width: 100%;' . ($code_edit ? 'font-size: 10px;' : '') . '"';
									} else
										echo ' cols="50"';
									echo ' rows="' . ($code_edit ? 20 : 5) . '"';
									echo $style_class;
									echo '>';
									echo esc_html($opt_val);
									echo '</textarea>';
									break;
								case 'select':
									echo '<select name="' . $opt_tag . '" id="' . $opt_tag . '">';
									foreach ($field_data['options'] as $opt_v => $opt_n)
										echo '<option value="' . esc_attr($opt_v) . '"' . (($opt_v == $opt_val) ? ' selected="selected" ' : '') . $style_class . '>' . ((!is_numeric($opt_v) && $opt_v !== $opt_n) ? (esc_html($opt_v) . ': ') : '') . esc_html($opt_n) . '</option>';
									echo '</select>';
									break;

								case 'roles':
									WPFB_Admin::RolesCheckList($opt_tag, $opt_val, empty($field_data['not_everyone']));
									break;

																case 'icon':
									wp_print_scripts('rvera-image-picker');
									wp_print_styles('rvera-image-picker');

									echo '<select class="image-picker show-html" name="' . $opt_tag . '" id="' . $opt_tag . '">';
									?>
									<?php
									foreach ($field_data['icons'] as $icon)
										echo '<option data-img-src="' . $icon['url'] . '" value="' . $icon['path'] . '" ' . (($icon['path'] === $opt_val) ? ' selected="selected" ' : '') . '>' . basename($icon['path']) . '</option>';
									?>
									</select>
									<script type="text/javascript">
										jQuery(document).ready(function () {
											jQuery("#<?php echo $opt_tag; ?>").imagepicker()
													  .next()
													  .find('img[src$=".svg"]').parent().append('<br>SVG');
										});
									</script>
									<?php
									break;
								
								case 'cat':
									echo "<select name='$opt_tag' id='$opt_tag'>";
									echo WPFB_Output::CatSelTree(array('selected' => $opt_val));
									echo "</select>";
									break;
							}

							if (!empty($field_data['unit']))
								echo ' ' . $field_data['unit'];

							if (!empty($field_data['desc']))
								echo "\n" . '<br />' . str_replace('%value%', is_array($opt_val) ? join(', ', $opt_val) : $opt_val, $field_data['desc']);
							echo "\n</td>\n</tr>";
							$page_option_list .= $opt_tag . ',';
						}

						echo '</table></div>' . "\n";
					}
					?>
				</div> <!--wpfilebase-opttabs-->
				<input type="hidden" name="action" value="update" />
				<input type="hidden" name="page_options" value="<?php echo $page_option_list; ?>" />
				<p class="submit">
					<input type="submit" name="submit" value="<?php _e('Save Changes') ?>" class="button-primary" />
					<input type="submit" name="reset" value="<?php _e('Restore Default Settings', 'wp-filebase') ?>" onclick="return confirm('<?php _e('All settings (except default file and category template) will be set to default values. Continue?', 'wp-filebase'); ?>')" class="button delete" style="float: right;" />
				</p>
			</form>
		</div>	<!-- wrap -->	
		<?php
	}

}

Youez - 2016 - github.com/yon3zu
LinuXploit