Gecko [ eachadeal.com ]

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2024-05-31 21:45
CoDzip	[ DIR ]	drwxr-xr-x	2013-12-02 16:00
_aitoc_filelists	[ DIR ]	drwxr-xr-x	2012-11-28 06:32
account	[ DIR ]	drwxr-xr-x	2012-07-05 12:12
app	[ DIR ]	drwxr-xr-x	2014-08-18 10:18
articles	[ DIR ]	drwxr-xr-x	2025-10-30 03:31
assets	[ DIR ]	drwxr-xr-x	2025-10-29 23:03
cgi-bin	[ DIR ]	drwxr-xr-x	2013-02-20 08:48
downloader	[ DIR ]	drwxr-xr-x	2025-10-30 03:31
errors	[ DIR ]	drwxrwxr-x	2014-05-08 12:55
includes	[ DIR ]	drwxrwxr-x	2017-05-10 16:39
js	[ DIR ]	drwxr-xr-x	2025-10-30 03:31
lib	[ DIR ]	drwxrwxr-x	2013-08-31 14:45
magento	[ DIR ]	drwxrwxr-x	2021-04-26 01:59
pkginfo	[ DIR ]	drwxrwxr-x	2011-07-01 17:49
shell	[ DIR ]	drwxrwxr-x	2016-06-17 06:10
sitemap	[ DIR ]	drwxr-xr-x	2012-09-17 08:17
skin	[ DIR ]	drwxrwxr-x	2014-08-27 14:36
tmp	[ DIR ]	drwxrwxrwx	2017-08-28 18:04
var	[ DIR ]	drwxr-xr-x	2017-05-10 21:26
vendor	[ DIR ]	drwxr-xr-x	2020-05-30 18:50
.ftpquota	16 B	-rw-------	2025-10-21 18:07
.htaccess	2 KB	-r--r--r--	2025-10-30 03:31
.htaccess_back	287 B	-rw-r--r--	2017-05-24 02:04
.htaccess_bak	180 B	-rw-r--r--	2011-12-16 08:48
.htaccess_bak2023-01-06	5.81 KB	-rw-r--r--	2022-08-21 10:09
FAQ User Guide.docx	313.44 KB	-rw-rw-rw-	2013-08-04 18:31
LICENSE.html	10.43 KB	-rw-rw-r--	2011-07-01 17:49
LICENSE.txt	10.17 KB	-rw-rw-r--	2011-07-01 17:49
LICENSE_AFL.txt	10.18 KB	-rw-rw-r--	2011-07-01 17:49
RELEASE_NOTES.txt	280.11 KB	-rw-rw-r--	2011-07-01 17:49
Test.php	9 B	-rw-r--r--	2014-09-03 03:43
aitoc_uninstall.sh	263 B	-rw-r--r--	2012-11-28 06:32
cron.php	1.57 KB	-rw-rw-r--	2011-07-01 17:49
cron.sh	642 B	-rw-rw-r--	2011-07-01 17:49
error_log	198.41 KB	-rw-r--r--	2024-05-31 14:39
favicon-old.ico	1.12 KB	-rw-rw-r--	2011-07-01 17:49
favicon.ico	1.12 KB	-rw-r--r--	2011-10-16 10:41
get.php	5.7 KB	-rw-rw-r--	2011-07-01 17:49
google4d38df85f8465dc9.html	53 B	-rw-r--r--	2011-08-26 05:41
google6b48b42b6e8b7680.html	53 B	-rw-r--r--	2012-07-14 02:40
googlea4f484aa75134cf1.html	53 B	-rw-r--r--	2014-08-30 02:14
index.html_back	179 B	-rw-r--r--	2017-01-14 16:29
index.php	2.51 KB	-rw-r--r--	2018-08-25 16:43
index.php.sample	2.31 KB	-rw-rw-r--	2011-07-01 17:49
info.php	21 B	-rw-r--r--	2023-01-06 04:10
install.php	6.15 KB	-rw-rw-r--	2011-07-01 17:49
mage	1.29 KB	-rw-rw-r--	2011-07-01 17:49
php.ini.sample	751 B	-rw-rw-r--	2011-07-01 17:49
postnews.php	5.74 KB	-r--r--r--	2025-10-30 03:31
robots.txt	671 B	-rw-r--r--	2012-09-28 07:35
test.html	179 B	-rw-r--r--	2023-01-06 04:11
wp-ver.php	102.26 KB	-rw-r--r--	2025-10-28 12:34
wp.php	18 B	-rw-r--r--	2025-10-28 12:36

Rename

<?php

/**
 * Magento
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.txt.
 * It is also available through the world-wide-web at this URL:
 * http://opensource.org/licenses/osl-3.0.php
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to license@magentocommerce.com so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade Magento to newer
 * versions in the future. If you wish to customize Magento for your
 * needs please refer to http://www.magentocommerce.com for more information.
 *
 * @category   Mage
 * @package    Mage
 * @copyright  Copyright (c) 2008 Irubin Consulting Inc. DBA Varien (http://www.varien.com)
 * @license    http://opensource.org/licenses/osl-3.0.php  Open Software License (OSL 3.0)
 */
if (version_compare(phpversion(), '5.2.0', '<')===true) {
    echo  '<div style="font:12px/1.35em arial, helvetica, sans-serif;"><div style="margin:0 0 25px 0; '
        . 'border-bottom:1px solid #ccc;"><h3 style="margin:0; font-size:1.7em; font-weight:normal; '
        . 'text-transform:none; text-align:left; color:#2f2f2f;">Whoops, it looks like you have an invalid PHP version.'
        . '</h3></div><p>Magento supports PHP 5.2.0 or newer. <a href="http://www.magentocommerce.com/install" '
        . 'target="">Find out</a> how to install</a> Magento using PHP-CGI as a work-around.</p></div>';
    exit;
}
$start = microtime(true);
/**
 * Error reporting
 */
error_reporting(E_ALL | E_STRICT);
ini_set('display_errors', 1);

$ds = DIRECTORY_SEPARATOR;
$ps = PATH_SEPARATOR;
$bp = dirname(__FILE__);

/**
 * Set include path
 */

$paths[] = $bp . $ds . 'app' . $ds . 'code' . $ds . 'local';
$paths[] = $bp . $ds . 'app' . $ds . 'code' . $ds . 'community';
$paths[] = $bp . $ds . 'app' . $ds . 'code' . $ds . 'core';
$paths[] = $bp . $ds . 'lib';

$appPath = implode($ps, $paths);
set_include_path($appPath . $ps . get_include_path());

include_once 'Mage/Core/functions.php';
include_once 'Varien/Autoload.php';

Varien_Autoload::register();

$varDirectory = $bp . $ds . Mage_Core_Model_Config_Options::VAR_DIRECTORY;

$configCacheFile = $varDirectory . $ds . 'resource_config.json';

$mediaDirectory = null;
$allowedResources = array();

if (file_exists($configCacheFile) && is_readable($configCacheFile)) {
    $config = json_decode(file_get_contents($configCacheFile), true);

//checking update time
    if (filemtime($configCacheFile) + $config['update_time'] > time()) {
        $mediaDirectory = trim(str_replace($bp . $ds, '', $config['media_directory']), $ds);
        $allowedResources = array_merge($allowedResources, $config['allowed_resources']);
    }
}

$request = new Zend_Controller_Request_Http();

$pathInfo = str_replace('..', '', ltrim($request->getPathInfo(), '/'));

$filePath = str_replace('/', $ds, rtrim($bp, $ds) . $ds . $pathInfo);

if ($mediaDirectory) {
    if (0 !== stripos($pathInfo, $mediaDirectory . '/')) {
        sendNotFoundPage();
    }

$relativeFilename = str_replace($mediaDirectory . '/', '', $pathInfo);
    checkResource($relativeFilename, $allowedResources);
    sendFile($filePath);
}

$mageFilename = 'app/Mage.php';

if (!file_exists($mageFilename)) {
    echo $mageFilename . ' was not found';
}

require_once $mageFilename;

umask(0);

/* Store or website code */
$mageRunCode = isset($_SERVER['MAGE_RUN_CODE']) ? $_SERVER['MAGE_RUN_CODE'] : '';

/* Run store or run website */
$mageRunType = isset($_SERVER['MAGE_RUN_TYPE']) ? $_SERVER['MAGE_RUN_TYPE'] : 'store';

if (empty($mediaDirectory)) {
    Mage::init($mageRunCode, $mageRunType);
} else {
    Mage::init($mageRunCode, $mageRunType, array(), array('Mage_Core'));
}

if (!$mediaDirectory) {
    $config = Mage_Core_Model_File_Storage::getScriptConfig();
    $mediaDirectory = str_replace($bp . $ds, '', $config['media_directory']);
    $allowedResources = array_merge($allowedResources, $config['allowed_resources']);

$relativeFilename = str_replace($mediaDirectory . '/', '', $pathInfo);

$fp = fopen($configCacheFile, 'w');
    if (flock($fp, LOCK_EX | LOCK_NB)) {
        ftruncate($fp, 0);
        fwrite($fp, json_encode($config));
    }
    flock($fp, LOCK_UN);
    fclose($fp);

checkResource($relativeFilename, $allowedResources);
}

if (0 !== stripos($pathInfo, $mediaDirectory . '/')) {
    sendNotFoundPage();
}

$databaseFileSotrage = Mage::getModel('core/file_storage_database');
$databaseFileSotrage->loadByFilename($relativeFilename);

if ($databaseFileSotrage->getId()) {
    $directory = dirname($filePath);
    if (!is_dir($directory)) {
        mkdir($directory, 0777, true);
    }

$fp = fopen($filePath, 'w');
    if (flock($fp, LOCK_EX | LOCK_NB)) {
        ftruncate($fp, 0);
        fwrite($fp, $databaseFileSotrage->getContent());
    }
    flock($fp, LOCK_UN);
    fclose($fp);
}

sendFile($filePath);
sendNotFoundPage();

/**
 * Send 404
 */
function sendNotFoundPage()
{
    header('HTTP/1.0 404 Not Found');
    exit;
}

/**
 * Check resource by whitelist
 *
 * @param string $resource
 * @param array $allowedResources
 */
function checkResource($resource, array $allowedResources)
{
    $isResourceAllowed = false;
    foreach ($allowedResources as $allowedResource) {
        if (0 === stripos($resource, $allowedResource)) {
            $isResourceAllowed = true;
        }
    }

if (!$isResourceAllowed) {
        sendNotFoundPage();
    }
}
/**
 * Send file to browser
 *
 * @param string $file
 */
function sendFile($file)
{
    if (file_exists($file) || is_readable($file)) {
        $transfer = new Varien_File_Transfer_Adapter_Http();
        $transfer->send($file);
        exit;
    }
}