rendered paste body<?php
session_start();
$status = $_SESSION["status"];
if ($status == "loged") {
/////////////////////////////////////////////////////////
$page == $_GET[page];
@ $ff = fopen("content/".$page, 'r');
if(empty($page))
{ echo "Ne e zadadena stranica za promiana!"; }
if(strpos($page, "..") === true || strpos($page, "/") === true)
{ echo "Faila e v nepozvolena directoria!!!"; }
if(strpos($page, "http://") === true || strpos($page, 'ftp://') === true) // Mislq che trqbvashe da izpolzvam masiv + case, no taka ima po- malko oburkvashti promenlivi :)
{ echo "Promianata na otdalecheni failove e zabranena/nevuzmojna!" ; }
if(fpassthru($ff) === false)
{ echo 'Nesushtestvuvasht fail!!!';
# touch($page); /*Ako red 12 bude zamenen s tozi red, shte imam vuzmojnost da suzdavam failove. Za sega ne mi e nujno :)*/
fclose($ff); }
else {
$data = file_get_contents($page);
#################################################
echo 'tuk shte sloja 1 html forma za edit, koqto izprashta datata kum fail, koito q zapisva';
echo $data;
fclose($ff);
//////////////////////////////////////////////////////
}
else {
echo "hmm, I don't like the 'hackers' :P ";
}
?>