One Hat Cyber Team

Your IP: 216.73.216.1
Server IP: 185.238.29.86
Server: Linux server2 6.8.12-6-pve #1 SMP PREEMPT_DYNAMIC PMX 6.8.12-6 (2024-12-19T19:05Z) x86_64
Server Software: nginx/1.18.0
PHP Version: 8.1.31
Buat File | Buat Folder

Dir : ~/prestool/tinymce/plugins/filemanager/

Edit File: delete_file.php

<?php
ini_set('display_errors', '0');     # don't show any errors...
error_reporting(E_ALL | E_STRICT);  # ...but do log them

session_start();
include 'config.php';
include('utils.php');
$response_array = array();
if($_SESSION["verify"] != "FileManager4TinyMCE") {
  $response_array['status'] = 'failure';
  $response_array['reason'] = 'Forbidden';
  returnJSON($response_array);
}

// Check to make sure we are not traversing the filesystem
if(strpos($_POST['path'],'..') !== false) {
  $response_array['status'] = 'failure';
  $response_array['reason'] = 'Forbidden Path';
  returnJSON($response_array);
}

$path=joinPaths($root,$upload_dir,$_POST['path']);
$path_thumbs=joinPaths($root,$thumbs_dir,$_POST['path']);

if(unlink($path) && unlink($path_thumbs)) {
  $response_array['status'] = 'Success';
  $response_array['reason'] = 'Deleted '.$_POST['path'];
  returnJSON($response_array);
} else {
  $response_array['status'] = 'failure';
  $response_array['reason'] = 'Error deleting '.$_POST['path'];
  returnJSON($response_array);
}

?>