#$@%#$%!

Ngiler SH3LL 360
: / var / softaculous / sitepad / editor / site-data / themes / sitepad /

Information Server
MySQL : OFF Perl : OFF CURL : ON WGET : OFF PKEXEC : OFF

Directive	Local Value
IP Address	63.250.38.10
System	Linux premium90.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User	likhxapw
PHP Version	8.3.30
Software	LiteSpeed
Doc root	Writable

Edit File : style.php \| Size : 1.84 KB
<?php $theme = $_GET['theme']; $dir = dirname(dirname(dirname(dirname(dirname($_SERVER['SCRIPT_FILENAME']))))).'/sitepad-data/themes'; $file = $dir.'/'.$theme.'/style.css'; // Is the directory valid ? if(!preg_match('/^\w+$/is', $theme) \|\| !file_exists($dir.'/'.$theme) \|\| empty($theme)){ die('HACKING ATTEMPT'); } // We are zipping if possible if(function_exists('ob_gzhandler') && !ini_get('zlib.output_compression')){ ob_start('ob_gzhandler'); } // Handle the url() inside CSS files function sitepad_css_url($matches){ global $theme; $orig_url = trim($matches[1], '\'"'); //r_print($orig_url); if(preg_match('/data\:(.)/is', $orig_url)){ //echo 'Skipping : '.$orig_url."\n"; return $matches[0]; } // If it is an external URL do not make any changes if(preg_match('/^http(s?):\/\//is', $orig_url)){ return $matches[0]; } // Relative URls $url = '../../../sitepad-data/themes/'.$theme.'/'.$orig_url; return 'url('.$url.')'; } // Type CSS header("Content-type: text/css; charset: UTF-8"); // Set a zero Mtime $filetime = filemtime($file); // Cache Control header("Cache-Control: must-revalidate"); // Checking if the client is validating his cache and if it is current. if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) && (@strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE']) >= $filetime)) { // Client's cache IS current, so we just respond '304 Not Modified'. header('Last-Modified: '.gmdate('D, d M Y H:i:s', $filetime).' GMT', true, 304); return; }else{ // Image not cached or cache outdated, we respond '200 OK' and output the image. header('Last-Modified: '.gmdate('D, d M Y H:i:s', $filetime).' GMT', true, 200); } $css = file_get_contents($file); $css = preg_replace_callback('/url\(([^\)])\)/is', 'sitepad_css_url', $css); $data = file_get_contents(dirname(__FILE__).'/common-sitepad.css'); $data .= $css; echo $data; Back

Edit File : style.php | Size : 1.84 KB

<?php

$theme = $_GET['theme'];
$dir = dirname(dirname(dirname(dirname(dirname($_SERVER['SCRIPT_FILENAME']))))).'/sitepad-data/themes';

$file = $dir.'/'.$theme.'/style.css';

// Is the directory valid ?
if(!preg_match('/^\w+$/is', $theme) || !file_exists($dir.'/'.$theme) || empty($theme)){
	die('HACKING ATTEMPT');
}

// We are zipping if possible
if(function_exists('ob_gzhandler') && !ini_get('zlib.output_compression')){
	ob_start('ob_gzhandler');
}

// Handle the url() inside CSS files
function sitepad_css_url($matches){
	
	global $theme;
	
	$orig_url = trim($matches[1], '\'"');
	//r_print($orig_url);
	
	if(preg_match('/data\:(.*)/is', $orig_url)){
		//echo 'Skipping : '.$orig_url."\n";
		return $matches[0];
	}
	
	// If it is an external URL do not make any changes
	if(preg_match('/^http(s?):\/\//is', $orig_url)){
		return $matches[0];
	}
	
	// Relative URls
	$url = '../../../sitepad-data/themes/'.$theme.'/'.$orig_url;
	
	return 'url('.$url.')';
	
}

// Type CSS
header("Content-type: text/css; charset: UTF-8");

// Set a zero Mtime
$filetime = filemtime($file);

// Cache Control
header("Cache-Control: must-revalidate");

// Checking if the client is validating his cache and if it is current.
if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) && (@strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE']) >= $filetime)) {
	
	// Client's cache IS current, so we just respond '304 Not Modified'.
	header('Last-Modified: '.gmdate('D, d M Y H:i:s', $filetime).' GMT', true, 304);
	
	return;
	
}else{
	
	// Image not cached or cache outdated, we respond '200 OK' and output the image.
	header('Last-Modified: '.gmdate('D, d M Y H:i:s', $filetime).' GMT', true, 200);
	
}

$css = file_get_contents($file);
$css = preg_replace_callback('/url$([^$]*)\)/is', 'sitepad_css_url', $css);

$data = file_get_contents(dirname(__FILE__).'/common-sitepad.css');
$data .= $css;

echo $data;

Back