<?
$secret = "123"; // change this (password)
session_start();
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>UPLOAD V1.0</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256" />
<style type="text/css">
FONT {FONT-FAMILY: ms sans serif; FONT-SIZE: 12px}
BODY {FONT-FAMILY: ms sans serif;
FONT-SIZE: 12px;
background:#ffffff}
P {FONT-FAMILY: ms sans serif; FONT-SIZE: 14px}
DIV {FONT-FAMILY: ms sans serif; FONT-SIZE: 14px}
td {
border: 2px solid #3646A7;
border-right: 2px solid #3646A7;
border-bottom: 2px solid #3646A7;
background-color: #94C7F1;
color: #3C0954;
FONT-FAMILY: ms sans serif; FONT-SIZE: 14px
}
table {
margin-left: auto;
margin-right: auto;
}
form {
padding: 0px;
margin: 0px;
}
A:link {color:#000000;
FONT-SIZE: 12px;
FONT-FAMILY: ms sans serif;text-decoration:none}
A:active {color:#525293;
FONT-SIZE: 12px;
FONT-FAMILY: ms sans serif;text-decoration:none}
A:visited {color:#525293;
FONT-SIZE: 12px;
FONT-FAMILY: ms sans serif;text-decoration:none}
A:hover {color:#525293;
FONT-SIZE: 12px;
FONT-FAMILY: ms sans serif;text-decoration:underline}
</style>
</head>
<body>
<p align="center"><a href="http://www.magtrb.com">
<img border="0" src="magtrblogo.gif" width="208" height="61"></a></p>
<?
if ($_GET['action'] == "logout") {
session_destroy();
unset ($_SESSION['secret']);
}
$path_name = pathinfo($_SERVER['PHP_SELF']);
$this_script = $path_name['basename'];
if ($_SESSION['secret'] !== $secret) {
if ($_POST['secret'] == $secret) {
$_SESSION['secret'] = $secret;
}
else {
echo "<p align=\"center\"><b style=\"color: red\">Upload Control panel</b><br /></p><br />\n";
echo "<form action=\"$PHP_SELF\" method=\"post\"> <p align=\"center\">\n";
echo "<input name=\"secret\" type=\"password\" size=\"20\"><br>\n";
echo "<input name=\"submit\" type=\"submit\" value=\"Enter\">\n";
echo "</form>\n";
exit;
}
}
?>
<table width="680" cellspacing="0" cellpadding="0">
<tr><td class="transparent">
<?
$error = false;
$file = false;
if (!$error && !function_exists("version_compare"))
{ echo ("<p class=\"error\">PHP version 4.1.0 is required for Upload to proceed. You have PHP ".phpversion()." installed. Sorry!</p>\n");
$error=true;
}
if (!$error)
{ $upload_max_filesize=ini_get("upload_max_filesize");
if (eregi("([0-9]+)K",$upload_max_filesize,$tempregs)) $upload_max_filesize=$tempregs[1]*1024;
if (eregi("([0-9]+)M",$upload_max_filesize,$tempregs)) $upload_max_filesize=$tempregs[1]*1024*1024;
if (eregi("([0-9]+)G",$upload_max_filesize,$tempregs)) $upload_max_filesize=$tempregs[1]*1024*1024*1024;
}
$upload_dir=dirname($_SERVER["SCRIPT_FILENAME"]);
if (!$error && isset($_REQUEST["uploadbutton"]))
{ if (is_uploaded_file($_FILES["dumpfile"]["tmp_name"]) && ($_FILES["dumpfile"]["error"])==0)
{
$uploaded_filename=str_replace(" ","_",$_FILES["dumpfile"]["name"]);
$uploaded_filepath=str_replace("\\","/",$upload_dir."/".$uploaded_filename);
if (file_exists($uploaded_filename))
{ echo ("<p class=\"error\">File $uploaded_filename already exist! Delete and upload again!</p>\n");
}
else if (!@move_uploaded_file($_FILES["dumpfile"]["tmp_name"],$uploaded_filepath))
{ echo ("<p class=\"error\">Error moving uploaded file ".$_FILES["dumpfile"]["tmp_name"]." to the $uploaded_filepath</p>\n");
echo ("<p>Check the directory permissions for $upload_dir (must be 777)!</p>\n");
}
else
{ echo ("<p class=\"success\">Uploaded file saved as $uploaded_filename</p>\n");
}
}
else
{ echo ("<p class=\"error\">Error uploading file ".$_FILES["dumpfile"]["name"]."</p>\n");
}
}
if (!$error && isset($_REQUEST["delete"]) && $_REQUEST["delete"]!=basename($_SERVER["SCRIPT_FILENAME"]))
{ if (@unlink(basename($_REQUEST["delete"])))
echo ("<p class=\"success\">".$_REQUEST["delete"]." was removed successfully</p>\n");
else
echo ("<p class=\"error\">Can't remove ".$_REQUEST["delete"]."</p>\n");
}
if (!$error && !isset($_REQUEST["fn"]) && $filename=="")
{ if ($dirhandle = opendir($upload_dir))
{ $dirhead=false;
$i = 0;
$extype =array();
while (false !== ($dirfile = readdir($dirhandle)))
{ //ÔÝ ĘÇŃíÎ ÇáŐćŃÉ ÇĐÇ áĺÇ ÇßËŃ ăä ÇÓČćÚ áÇ ĘÚŃÖĺÇ
$filey = date ("Y", filemtime($dirfile));
$filem = date ("m", filemtime($dirfile));
$filed = date ("d", filemtime($dirfile));
$todayy = date ("Y");
$todaym = date ("m");
$todayd = date ("d");
if((($todayy == $filey )&& ($todaym == $filem )) || isset($_POST["exttype2"])){
if (!eregi("\.php$",$dirfile) && !eregi("magtrblogo",$dirfile) && !eregi("error_log",$dirfile) && $dirfile != "." && $dirfile != ".." && $dirfile!=basename($_SERVER["SCRIPT_FILENAME"]))
{
$fileext = explode(".",$dirfile);
$fileextnum = count($fileext)-1;
$extype[$i]= "$fileext[$fileextnum]";
++$i;
if (!$dirhead)
{ echo ("<table cellspacing=\"2\" cellpadding=\"2\">\n");
echo ("<tr><th><p align=\"center\">Filename</td><th><p align=\"center\">Size</td><th><p align=\"center\">Date&Time</td><th><p align=\"center\">Type</td><th> </td><th> </td>\n");
$dirhead=true;
}
$directory = "$php_self"."$dirfile";
if ($exttype2 && $exttype2 !="allpic"){
if ($fileext[$fileextnum]== "$exttype2"){
echo ("<tr><td><p align=\"center\"><a target=\"_blank\" href=\"$directory\">$dirfile</a></td><td class=\"right\">".filesize($dirfile)."</td><td>".date ("Y-m-d H:i:s", filemtime($dirfile))."</td>");
echo ("<td>$fileext[$fileextnum]</td>");
// echo ("<td> </td>\n");
echo ("<td><p align=\"center\"><a href=\"".$_SERVER["PHP_SELF"]."?action=dump&delete=$dirfile\">Delete</a></td></tr>\n");
} } else {
echo ("<tr><td><p align=\"center\"><a target=\"_blank\" href=\"$directory\">$dirfile</a></td><td class=\"right\">".filesize($dirfile)."</td><td>".date ("Y-m-d H:i:s", filemtime($dirfile))."</td>");
echo ("<td>$fileext[$fileextnum]</td>");
// echo ("<td> </td>\n");
echo ("<td><p align=\"center\"><a href=\"".$_SERVER["PHP_SELF"]."?action=dump&delete=$dirfile\">Delete</a></td></tr>\n");
}
}
}
}
if ($dirhead) echo ("</table>\n");
else echo ("<p>No uploaded files found in the working directory</p>\n");
closedir($dirhandle);
}
else
{ echo ("<p class=\"error\">Error listing directory $upload_dir</p>\n");
$error=$true;
}
}
if (!$error && !isset($_REQUEST["fn"]) && $filename=="")
{
do { $tempfilename=time().".tmp"; } while (file_exists($tempfilename));
if (!($tempfile=@fopen($tempfilename,"w")))
{ echo ("<p>Upload form disabled. Permissions for the working directory <i>$upload_dir</i> <b>must be set to 777</b> in order ");
echo ("to upload files from here. Alternatively you can upload your files via FTP.</p>\n");
}
else
{ fclose($tempfile);
unlink ($tempfilename);
echo ("<p align=\"center\">You can now upload your file up to $upload_max_filesize bytes (".round ($upload_max_filesize/1024/1024)." Mbytes) ");
echo ("directly from your browser to the server. Alternatively you can upload your files of any size via FTP.</p>\n");
?>
<form method="POST" action="<? echo '".$PHP_SELF."'; ?>" enctype="multipart/form-data">
<input type="hidden" name="MAX_FILE_SIZE" value="$upload_max_filesize">
<p align="center">File: <input type="file" name="dumpfile" accept="*/*" size="60"></p>
<p align="center"><input type="submit" name="uploadbutton" value="Upload"></p><br><br>
</form>
<?
echo "<form action=\"$PHP_SELF\" method=\"post\">
<p dir=\"ltr\" align=\"center\">
<span lang=\"ar-sa\"> browse ext :</span>
<select size=\"1\" dir=\"ltr\" value=\"$exttype2\" name=\"exttype2\">";
echo"<option value=\"allpic\" selected>All</option>";
$extype = array_unique($extype);
Magtrb($extype);
echo" </select><br>
<input name=\"submit\" type=\"submit\" value=\"browse\"></p>
</form><br />";
}
}
if ($file && !$gzipmode) fclose($file);
else if ($file && $gzipmode) gzclose($file);
function Magtrb($x){
if (!empty($x))
{
foreach ($x AS $_key)
{
echo"<option>$_key</option>";
}
}
}
?>
</td></tr></table>
<div style="color: #999999; font-size: 7pt;"> <p align="center">
[ <a href="<?PHP echo $this_script; ?>">Home</a> ] - [ <a href="http://www.hotscripts.com/">Hotscripts</a> ]-[ <a href="http://www.magtrb.com" target="_blank">Magtrb Soft</a> ]-[ <a href="<?PHP echo $this_script; ?>?action=logout">Exit</a> ]
</div>
</body>
</html>
a tento som nasiel na disku tak som ho sem hodil 
