rendered paste body<?php// Checks and balances, these stop hacks and prevent errors// NOTE this app will have as much access as you do to the filesystem//// So please use the guest account or disable this for non users$place = $_GET['place'];if ($place == ''){ $place = '/'.$config['name'];} else if ($place == '/'){ $up = '/';} else { $up = substr($place, 0, strrpos($place, '/'));}$place = str_replace("..","",$place);$place = str_replace("//","/",$place);// $color['1'] = '000000';// $color['0'] = '333333';$i = 1;//dir functionsfunction dirList($dir){ global $i,$place; echo '<table width="100%">'; if ($handle = opendir('users'.$place)) { while (false !== ($file = readdir($handle))) { if ($file != "." && $file != "..") { // COLORIZE IT if ($i == 1){ $num = 1; $i = 2; } else { $num = 2; $i = 1; } // TEXT $textFileTypes = array("txt","php","html","js","rb","py"); // IMAGE $imageFileTypes = array("jpg","png","gif"); // MOVIE $movieFileTypes = array("avi","mov","flv"); $fileExtA = explode(".",$file); $ext = $firstarray[sizeOf($firstarray)-1]; if (in_array($ext,$textFileTypes)){ echo "<tr><td id=\"color$num\"><a href=\"javascript:new_textedit('$file')\">$file</a></td></tr>\n"; } else if(in_array($ext,$imageFileTypes)){ echo "<tr><td id=\"color$num\"><a href=\"javascript:new_imageviewer('$file')\">$file</a></td></tr>\n"; } else if(in_array($ext,$movieFileTypes)) { echo "<tr><td id=\"color$num\"><a href=\"javascript:new_videoview('$file')\">$file</a></td></tr>\n"; } else { echo "<tr><td id=\"color$num\"><a href=\"filebrowser.php?place=$place/$file\">$file</a><br /></td></tr>\n"; } } } closedir($handle); } echo '</table>';}?><html> <head> <link rel="stylesheet" type="text/css" href="filebrowser.css" /> </head> <body> <?php echo $_GET['place']; ?><br /> <?php echo $place; ?> <div id="menu"><a class="menu" href="javascript:;" onclick="history.go(-1);" >Back</a> | <a class="menu" href="javascript:;" onclick="history.go(1);">Forward</a> | <a class="menu" href="filebrowser.php?place=<?php echo $up; ?>">Up</a></div> <div id="toolbar"><form type="get" name="file" action="filebrowser.php">Location: <input type="text" name="place" size="50" value="<?php echo $place; ?>" /> <input type="submit" name="k" value="Go" /></form></div> <div id="links" valign="top"> <ul> <li><a class="menu" href="filebrowser.php?place=/">Filesystem</a></li> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>">Home</a></li> <br /> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>/documents">Documents</a></li> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>/development">Development</a></li> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>/pictures">Pictures</a></li> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>/music">Music</a></li> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>/dropbox">Dropbox</a></li> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>/private">Private</a></li> <li><a class="menu" href="filebrowser.php?place=/<?php echo $config['name']; ?>/share">Share</a></li> </ul> </div> <div id="files"> <?php dirlist($place); ?> </div> </body></html>