File Manager - BorneoXploit

Editing: audio.php

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="refresh" content="1" >
</head>
<?php
require_once ("status.php");
echo "<h1>".$status."</h1>";
$sec = date ("s");
if ($status == "ko") {
	$autop1 = "autoplay";
	$autop2 = "audio.play();";
	if (intdiv($sec, 2) == ($sec/2)) {
		$bgc = "#666666";
	} else {
		$bgc = "#FFFFFF";
	} 
} else {
	$autop1 = "";
	$autop2 = "";
	$bgc = "#FFFFFF";
}
echo "<body style=\"text-align: center; background-color: ".$bgc."\">
<h1>";
echo date ("H:i:s");
echo "</h1>
<audio src=\"sirena.mp3\" ".$autop1." ></audio>
<script type=\"text/javascript\">
window.addEventListener(\"DOMContentLoaded\", event => {
  const audio = document.querySelector(\"audio\");
  audio.volume = 0.2;
  ".$autop2."
});";
?>
</script>

<button onclick="runPythonScript()">Run Python Script</button>
<script>

function runPythonScript() {
	var xhr = new XMLHttpRequest();
	xhr.open("GET", "python run_script.py", true);
	xhr.send();
<?php
	$filename = 'button.txt';
	@ $fp = fopen("wp-content/uploads/".$filename, 'wb');
	if (!$fp)
	{
	    echo '<p><strong>Cannot generate message file</strong></p></body></html>';
	    exit;
	} 
	
	$outputstring  = 'Hello, i have been generated by the button';

fwrite($fp, $outputstring);
?>
}

</script>

</body>
</html>

Cancel